# Top

**URL:** https://discuss.elastic.co/top.md?page=1137&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1138

---

## [Problems indexing attachments using attachment mapping](https://discuss.elastic.co/t/problems-indexing-attachments-using-attachment-mapping/11927)

<div class="topic-metadata">

**Author:** [@Massimiliano\_Peranto](https://discuss.elastic.co/u/Massimiliano_Peranto)\
**Replies:** 2\
**Last updated:** [November 19, 2014, 7:38pm UTC](https://discuss.elastic.co/t/problems-indexing-attachments-using-attachment-mapping/11927 "2014-11-19T19:38:30Z")

</div>

Hi, I installed elasticsearch flawlessly and started developing a mail indexing solution. Dealing with the main setup everything went flawlessly, I even installed the plugin for tika document text extraction. Afte…

---

## [Metricbeat setup to return localhost metrics](https://discuss.elastic.co/t/metricbeat-setup-to-return-localhost-metrics/289880)

<div class="topic-metadata">

**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\
**Replies:** 6\
**Last updated:** [November 24, 2021, 2:45pm UTC](https://discuss.elastic.co/t/metricbeat-setup-to-return-localhost-metrics/289880 "2021-11-24T14:45:50Z")

</div>

Running 7.11 Elastic on self managed eks 1.19 with Metricbeats 7.9 running on EC2 instance This is the below configuration of the metricbeat.yaml metricbeat.modules: - module: system metricsets: # - cpu …

---

## [Removing unused fields (more Lucene than ES but..)](https://discuss.elastic.co/t/removing-unused-fields-more-lucene-than-es-but/16731)

<div class="topic-metadata">

**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\
**Replies:** 6\
**Last updated:** [April 4, 2014, 12:53am UTC](https://discuss.elastic.co/t/removing-unused-fields-more-lucene-than-es-but/16731 "2014-04-04T00:53:26Z")

</div>

ok, this is more low level Lucene, but in the context of an ElasticSearch cluster, is there any way to get an index/shard to optimize away a bunch of fields that are no longer used (literally have no term values associ…

---

## [Error getting details for process](https://discuss.elastic.co/t/error-getting-details-for-process/253061)

<div class="topic-metadata">

**Author:** [@gnordli](https://discuss.elastic.co/u/gnordli)\
**Replies:** 3\
**Last updated:** [October 27, 2020, 10:14pm UTC](https://discuss.elastic.co/t/error-getting-details-for-process/253061 "2020-10-27T22:14:34Z")

</div>

I am seeing quite a few log entries like this. The Endpoint agent is running as the local system account. { "@timestamp": "2020-10-22T17:46:14.800Z", "message": "Error getting details for process services.exe with …

---

## [Can I add labels in a automatic generated span?](https://discuss.elastic.co/t/can-i-add-labels-in-a-automatic-generated-span/229487)

<div class="topic-metadata">

**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\
**Replies:** 3\
**Last updated:** [April 24, 2020, 11:00am UTC](https://discuss.elastic.co/t/can-i-add-labels-in-a-automatic-generated-span/229487 "2020-04-24T11:00:35Z")

</div>

I am making some tests using Java APM agent and Spring Boot. I used @CaptureTransaction in a Rest Controller method to get information about my RestAPI. My code does another Rest API call to a external service and I noti…

---

## [Cannot make filebeat for aarch64](https://discuss.elastic.co/t/cannot-make-filebeat-for-aarch64/159684)

<div class="topic-metadata">

**Author:** [@kmatsuyama](https://discuss.elastic.co/u/kmatsuyama)\
**Replies:** 3\
**Last updated:** [December 11, 2018, 4:55pm UTC](https://discuss.elastic.co/t/cannot-make-filebeat-for-aarch64/159684 "2018-12-11T16:55:10Z")

</div>

I make the filebeat on a linux aarch machine. My Environment: $ go version go version go1.11.2 linux/arm64 $ git rev-parse HEAD 79a6ff31aec8e371631661add2e52938f250ceba I get make failing with the following error: $…

---

## [Endless GC. Need update about GC best practices for operation](https://discuss.elastic.co/t/endless-gc-need-update-about-gc-best-practices-for-operation/121085)

<div class="topic-metadata">

**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\
**Replies:** 8\
**Last updated:** [February 23, 2018, 11:37am UTC](https://discuss.elastic.co/t/endless-gc-need-update-about-gc-best-practices-for-operation/121085 "2018-02-23T11:37:46Z")

</div>

Hello, I have a 12 nodes 6.0.0 elasticsearch cluster. It ingest 10k.ev/sec. Time to time, I think because of some Kibana request, the cluster stops to answer to kibana and even to local curls. The logs are pretty clear…

---

## [Keyword analyzer](https://discuss.elastic.co/t/keyword-analyzer/86471)

<div class="topic-metadata">

**Author:** [@111116](https://discuss.elastic.co/u/111116)\
**Replies:** 8\
**Last updated:** [May 20, 2017, 11:32am UTC](https://discuss.elastic.co/t/keyword-analyzer/86471 "2017-05-20T11:32:27Z")

</div>

This is may be a very stupid question, but how does this analyzer work with duplicates? If i add a 100000 strings Caro m'è 'l sonno, e più l'esser di sasso, mentre che 'l danno e la vergogna dura; non veder, non sentir…

---

## [How do i create a new page?](https://discuss.elastic.co/t/how-do-i-create-a-new-page/80416)

<div class="topic-metadata">

**Author:** [@Gynidark](https://discuss.elastic.co/u/Gynidark)\
**Replies:** 3\
**Last updated:** [March 29, 2017, 8:10am UTC](https://discuss.elastic.co/t/how-do-i-create-a-new-page/80416 "2017-03-29T08:10:55Z")

</div>

Hello, My question is how I could create a new page? Create a new link in the navbar Create a new page (View, Controller, Route) Concretely I searched all over the internet but without success. The idea is mainly t…

---

## [Logstash RPM on centos5.x](https://discuss.elastic.co/t/logstash-rpm-on-centos5-x/15460)

<div class="topic-metadata">

**Author:** [@Kevin\_Pearson](https://discuss.elastic.co/u/Kevin_Pearson)\
**Replies:** 3\
**Last updated:** [February 23, 2015, 7:31pm UTC](https://discuss.elastic.co/t/logstash-rpm-on-centos5-x/15460 "2015-02-23T19:31:17Z")

</div>

Hello, I am having no problems using the elasticsearch logstash yum repo on centos6.x, but when I try on centos5.x I am not able to get an rpm to install. This is the error I get when I use the 1.3 repo: htt…

---

## [Queries, filters and match\_all](https://discuss.elastic.co/t/queries-filters-and-match-all/17884)

<div class="topic-metadata">

**Author:** [@Zabazhanov\_Arkady](https://discuss.elastic.co/u/Zabazhanov_Arkady)\
**Replies:** 8\
**Last updated:** [June 10, 2014, 5:00am UTC](https://discuss.elastic.co/t/queries-filters-and-match-all/17884 "2014-06-10T05:00:40Z")

</div>

Hello. Help me please, I'm confused. As far as I remember, there was the only way to pass filters to search query - via filtered query. But currently there is a top-level filter part of the query. However, top-lev…

---

## [It would be awesome if we could integrate Jupyter Notebooks with Kibana (more seamlessly, like a dashboard)](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494)

<div class="topic-metadata">

**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\
**Replies:** 0\
**Last updated:** [May 11, 2022, 6:18pm UTC](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494 "2022-05-11T18:18:22Z")

</div>

TlDr: We think, since Kibana is, after all, a web app, that it might be feasible to have Kibana support Jupyter Notebooks and use via Voila to host them as a kind of Dashboard like Canvas. Eland is proof that Elastic un…

---

## [Syntax error shown in EQL queries for correlation](https://discuss.elastic.co/t/syntax-error-shown-in-eql-queries-for-correlation/296836)

<div class="topic-metadata">

**Author:** [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Replies:** 0\
**Last updated:** [February 10, 2022, 12:25pm UTC](https://discuss.elastic.co/t/syntax-error-shown-in-eql-queries-for-correlation/296836 "2022-02-10T12:25:26Z")

</div>

Hi folks! I'm running a query, through EQL, for event correlation, however, it's returning a syntax error. The strange thing is that the same query is made in another Elastic SIEM and it doesn't return an error. Has any…

---

## [Kibana and Sonicwall sys logs](https://discuss.elastic.co/t/kibana-and-sonicwall-sys-logs/199905)

<div class="topic-metadata">

**Author:** [@RebeccaStanke](https://discuss.elastic.co/u/RebeccaStanke)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 3:22am UTC](https://discuss.elastic.co/t/kibana-and-sonicwall-sys-logs/199905 "2019-09-18T03:22:14Z")

</div>

anyone have instructions on how to send sonicwall sys logs to Kibana for a newby?

---

## [MultiSearchResponse - containing responses haven't set a scroll id](https://discuss.elastic.co/t/multisearchresponse-containing-responses-havent-set-a-scroll-id/168968)

<div class="topic-metadata">

**Author:** [@Josef\_Fritzer](https://discuss.elastic.co/u/Josef_Fritzer)\
**Replies:** 0\
**Last updated:** [February 19, 2019, 8:49am UTC](https://discuss.elastic.co/t/multisearchresponse-containing-responses-havent-set-a-scroll-id/168968 "2019-02-19T08:49:23Z")

</div>

Hi Guys, I'm currently building a MultiSearchRequest which has two requests included and each of them has set a scroll. Everything works fine, request works, request contains two responses as expected but if I try to ge…

---

## [How to use FSCrawler with Azure Blob Storage?](https://discuss.elastic.co/t/how-to-use-fscrawler-with-azure-blob-storage/324163)

<div class="topic-metadata">

**Author:** [@AbderrahimAl](https://discuss.elastic.co/u/AbderrahimAl)\
**Replies:** 3\
**Last updated:** [January 29, 2023, 1:30pm UTC](https://discuss.elastic.co/t/how-to-use-fscrawler-with-azure-blob-storage/324163 "2023-01-29T13:30:49Z")

</div>

I want to index the documents stored in Azure Blob Storage into Elasticsearch. Is it possible to use FSCrawler in this case by providing the blob container URL?

---

## [Strange behaviour when using both Kafka output and input plugins](https://discuss.elastic.co/t/strange-behaviour-when-using-both-kafka-output-and-input-plugins/59727)

<div class="topic-metadata">

**Author:** [@ryac](https://discuss.elastic.co/u/ryac)\
**Replies:** 4\
**Last updated:** [September 19, 2016, 2:36am UTC](https://discuss.elastic.co/t/strange-behaviour-when-using-both-kafka-output-and-input-plugins/59727 "2016-09-19T02:36:55Z")

</div>

Hi all, Am I able to use both, the output and input Kafka plugins on the same Logstash instance? It seems that the configuration for the consumer continuously loops through all messages in Kafka forever. I'm following …

---

## [408 HTTP Error when running filebeat setup](https://discuss.elastic.co/t/408-http-error-when-running-filebeat-setup/275817)

<div class="topic-metadata">

**Author:** [@pjvilloud](https://discuss.elastic.co/u/pjvilloud)\
**Replies:** 5\
**Last updated:** [June 21, 2021, 10:01am UTC](https://discuss.elastic.co/t/408-http-error-when-running-filebeat-setup/275817 "2021-06-21T10:01:19Z")

</div>

Hello ! I'm trying to run filebeat setup -e on my local machine and it fails with the following error error loading index pattern: returned 408 to import file: \<nil\>. I'm using the latest version of filebeat (7.13.1) an…

---

## [Filebeat reports :Error publishing events (retrying): read tcp IPA-\>9IPB5044: i/o timeout, reason?](https://discuss.elastic.co/t/filebeat-reports-error-publishing-events-retrying-read-tcp-ipa-9ipb5044-i-o-timeout-reason/95138)

<div class="topic-metadata">

**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\
**Replies:** 5\
**Last updated:** [August 1, 2017, 12:15pm UTC](https://discuss.elastic.co/t/filebeat-reports-error-publishing-events-retrying-read-tcp-ipa-9ipb5044-i-o-timeout-reason/95138 "2017-08-01T12:15:24Z")

</div>

HEllo, I have updated my machine to filebeat 5 and now when trying to ship my logs I see that the shipping sometimes fails and I don’t understand the reason. The error is the following when enabling debug 2017-06-14T1…

---

## [MaxRetry Exceptions on Azure](https://discuss.elastic.co/t/maxretry-exceptions-on-azure/28333)

<div class="topic-metadata">

**Author:** [@Bart1](https://discuss.elastic.co/u/Bart1)\
**Replies:** 5\
**Last updated:** [September 23, 2015, 6:29am UTC](https://discuss.elastic.co/t/maxretry-exceptions-on-azure/28333 "2015-09-23T06:29:26Z")

</div>

Hi, We are using an ES cluster on (classic) Azure VMs. This cluster is called from an webapplication and a webjob. All seems to work fine, however after several days, we notice that we are getting MaxRetry exceptions.…

---

## [Jaeger - unexpected HTTP status code received from server: 404](https://discuss.elastic.co/t/jaeger-unexpected-http-status-code-received-from-server-404/289477)

<div class="topic-metadata">

**Author:** [@gunnarif](https://discuss.elastic.co/u/gunnarif)\
**Replies:** 1\
**Last updated:** [November 17, 2021, 4:40pm UTC](https://discuss.elastic.co/t/jaeger-unexpected-http-status-code-received-from-server-404/289477 "2021-11-17T16:40:17Z")

</div>

APM Server version: 7.11.2 APM Agent language and version: Jaeger 1.28.0 windows Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): Running jager agent an…

---

## [Search by image using elastic search](https://discuss.elastic.co/t/search-by-image-using-elastic-search/179347)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 1\
**Last updated:** [May 2, 2019, 11:41am UTC](https://discuss.elastic.co/t/search-by-image-using-elastic-search/179347 "2019-05-02T11:41:56Z")

</div>

hi , is it possible to implement search by image using elastic search. Regards Srikanth

---

## [Can i install marvel plugin without Kibana?](https://discuss.elastic.co/t/can-i-install-marvel-plugin-without-kibana/106273)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 7\
**Last updated:** [November 3, 2017, 10:58am UTC](https://discuss.elastic.co/t/can-i-install-marvel-plugin-without-kibana/106273 "2017-11-03T10:58:57Z")

</div>

Hi Team, I want to install marvel without kibana. is it possible to install the same? Thanks, Rohan

---

## [Using If condition in Kibana Data Table](https://discuss.elastic.co/t/using-if-condition-in-kibana-data-table/95452)

<div class="topic-metadata">

**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\
**Replies:** 1\
**Last updated:** [August 2, 2017, 4:23pm UTC](https://discuss.elastic.co/t/using-if-condition-in-kibana-data-table/95452 "2017-08-02T16:23:31Z")

</div>

Hi I am trying to create a data table visualization based on my logs received. Logs are: Order Number Order reached to Vendor OR001 Yes OR002 No OR003 …

---

## [How to combine proximity and fuziness in search queries](https://discuss.elastic.co/t/how-to-combine-proximity-and-fuziness-in-search-queries/69657)

<div class="topic-metadata">

**Author:** [@jhrave](https://discuss.elastic.co/u/jhrave)\
**Replies:** 1\
**Last updated:** [December 22, 2016, 1:07pm UTC](https://discuss.elastic.co/t/how-to-combine-proximity-and-fuziness-in-search-queries/69657 "2016-12-22T13:07:25Z")

</div>

Hi, I am currently struggling to find a way to search for fuzzy phrases in elastaticsearch 5.x. Let me give an example: Let's say I want to find fuzzy phrase "word1 word2". That means I want to find documents containi…

---

## [Custom Metrics in Kibana](https://discuss.elastic.co/t/custom-metrics-in-kibana/275615)

<div class="topic-metadata">

**Author:** [@bigtim22](https://discuss.elastic.co/u/bigtim22)\
**Replies:** 2\
**Last updated:** [June 24, 2021, 6:42pm UTC](https://discuss.elastic.co/t/custom-metrics-in-kibana/275615 "2021-06-24T18:42:54Z")

</div>

I couldn't find much on the internet that explained this. I followed the Custom Metrics page in the Elastic tutorials for using custom metrics with micrometer, but I was a bit confused how to use them in Kibana. Currentl…

---

## [How to setup Hyper V with winlogbeat](https://discuss.elastic.co/t/how-to-setup-hyper-v-with-winlogbeat/212807)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 9:19am UTC](https://discuss.elastic.co/t/how-to-setup-hyper-v-with-winlogbeat/212807 "2020-01-09T09:19:57Z")

</div>

Hey, I want to monitor hyper v events using winlogbeat. How to do that, can someone please help. Thanks, Tahseen.

---

## [Using Elasticsearch 7.2 with older version of PHP possible?](https://discuss.elastic.co/t/using-elasticsearch-7-2-with-older-version-of-php-possible/189066)

<div class="topic-metadata">

**Author:** [@aj\_potc](https://discuss.elastic.co/u/aj_potc)\
**Replies:** 2\
**Last updated:** [July 5, 2019, 2:02pm UTC](https://discuss.elastic.co/t/using-elasticsearch-7-2-with-older-version-of-php-possible/189066 "2019-07-05T14:02:19Z")

</div>

I've installed Elasticsearch 7.2 on CentOS 7. I'd like to try using the Elasticsearch-PHP API, but the only version compatible with Elasticsearch 7.2 doesn't support PHP 5.4, the standard PHP version in CentOS 7. Now, I…

---

## [.txt文件不能被搜索](https://discuss.elastic.co/t/txt/61451)

<div class="topic-metadata">

**Author:** [@zikezi](https://discuss.elastic.co/u/zikezi)\
**Replies:** 2\
**Last updated:** [January 13, 2017, 8:57am UTC](https://discuss.elastic.co/t/txt/61451 "2017-01-13T08:57:54Z")

</div>

大家好，我目前使用的是elastic2.1.2,mapper-attachments3.1.2, java1.7 64bit.所有的配置均是默认的配置，没做任何改变。目前遇到一个问题，在上传附件为.txt时，不能根据txt里的内容进行搜索，但是ms office 却可以。下面是我的索建索引相关信息： 1\> mapping \`{ "mappings": { "lesson": { "properties": { "sysOr…

---

## [Displaying kibana dashboard for each node in the cluster](https://discuss.elastic.co/t/displaying-kibana-dashboard-for-each-node-in-the-cluster/48459)

<div class="topic-metadata">

**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\
**Replies:** 2\
**Last updated:** [April 26, 2016, 7:09pm UTC](https://discuss.elastic.co/t/displaying-kibana-dashboard-for-each-node-in-the-cluster/48459 "2016-04-26T19:09:08Z")

</div>

Hi all, I have a cluster that have 10 nodes and I collect data using topbeat. I am able to build visualization for fields available , but these visualization does'nt specify that information is coming from node 1 or…

---

## [Dynamic attachments to email output](https://discuss.elastic.co/t/dynamic-attachments-to-email-output/41559)

<div class="topic-metadata">

**Author:** [@Ssawa](https://discuss.elastic.co/u/Ssawa)\
**Replies:** 2\
**Last updated:** [February 12, 2016, 3:49pm UTC](https://discuss.elastic.co/t/dynamic-attachments-to-email-output/41559 "2016-02-12T15:49:47Z")

</div>

Hey folks, I'm trying to use the email output to send an alert including a file attachment using something like the following: email { | …

---

## [Indexes not being rotated/removed using the Index Lifecycle Management](https://discuss.elastic.co/t/indexes-not-being-rotated-removed-using-the-index-lifecycle-management/236777)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 3\
**Last updated:** [June 11, 2020, 8:42pm UTC](https://discuss.elastic.co/t/indexes-not-being-rotated-removed-using-the-index-lifecycle-management/236777 "2020-06-11T20:42:59Z")

</div>

Hello, I’m trying to use the Index Lifecycle Management in Elastic 7.7, but I’m not able to rotate indexes every 1 minute and delete indexes older than 3 minutes. This is my policy: \[root@elasticmysql ~\]# curl -GET ht…

---

## [Markdown Visualization: changing the position of an image](https://discuss.elastic.co/t/markdown-visualization-changing-the-position-of-an-image/233545)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 3\
**Last updated:** [May 27, 2020, 2:43pm UTC](https://discuss.elastic.co/t/markdown-visualization-changing-the-position-of-an-image/233545 "2020-05-27T14:43:17Z")

</div>

Hello elastic community! I am facing a problem with the markdown visualization. I have an image to display but I want to display it in the centre of the panel or on the upper right corner of the panel. Below the two scr…

---

## [Partial search on particular field](https://discuss.elastic.co/t/partial-search-on-particular-field/222659)

<div class="topic-metadata">

**Author:** [@alexp0205](https://discuss.elastic.co/u/alexp0205)\
**Replies:** 3\
**Last updated:** [March 9, 2020, 12:01pm UTC](https://discuss.elastic.co/t/partial-search-on-particular-field/222659 "2020-03-09T12:01:53Z")

</div>

I have an appsearch engines with the following documents \[{ "id": 1, "category": \["television"\], "name": "ABC Television" }, { "id": 2, "category": \["fridge"\], "name": "Tele Fridge" }\] How can I do partial se…

---

## [Kibana Visualization Deleted Index](https://discuss.elastic.co/t/kibana-visualization-deleted-index/149513)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 3\
**Last updated:** [October 10, 2018, 2:11pm UTC](https://discuss.elastic.co/t/kibana-visualization-deleted-index/149513 "2018-10-10T14:11:55Z")

</div>

I had to delete the elasticsearch index on our system and then recreate it, I thought as long as the index was called the same etc, Kibana Visualizations will keep running. I recreated the index in Kibana and the visuali…

---

## [Substituting Value of a Field to a Mapping from a CSV file](https://discuss.elastic.co/t/substituting-value-of-a-field-to-a-mapping-from-a-csv-file/26709)

<div class="topic-metadata">

**Author:** [@jasonct05](https://discuss.elastic.co/u/jasonct05)\
**Replies:** 3\
**Last updated:** [August 4, 2015, 4:59am UTC](https://discuss.elastic.co/t/substituting-value-of-a-field-to-a-mapping-from-a-csv-file/26709 "2015-08-04T04:59:06Z")

</div>

I have used logstash's xpath filter to parse an xml file and get a specified attribute. However, I would like to replace this value to another value based on the mapping of a separated CSV file. For example, I have us…

---

## [Graphitebeat](https://discuss.elastic.co/t/graphitebeat/1404)

<div class="topic-metadata">

**Author:** [@proffalken](https://discuss.elastic.co/u/proffalken)\
**Replies:** 1\
**Last updated:** [May 29, 2015, 1:57pm UTC](https://discuss.elastic.co/t/graphitebeat/1404 "2015-05-29T13:57:30Z")

</div>

It would be awesome to have a beat that provides graphite functionality so that we can graph system load etc against APM from PacketBeat and log entries from Logstash all in the one kibana instance.

---

## [Logstash 7.1.0 won't start](https://discuss.elastic.co/t/logstash-7-1-0-wont-start/201695)

<div class="topic-metadata">

**Author:** [@robq](https://discuss.elastic.co/u/robq)\
**Replies:** 1\
**Last updated:** [October 22, 2019, 11:48am UTC](https://discuss.elastic.co/t/logstash-7-1-0-wont-start/201695 "2019-10-22T11:48:29Z")

</div>

I had logstash 7.1.0 running on two servers last week, but today systemctl keeps restarting it. I su'd the logstash user to see what it's doing, and when starting it manually, I get this error: \[ERROR\] 2019-09-30 15:25:…

---

## [Events listing out of order in Kibana 6.2.2](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439)

<div class="topic-metadata">

**Author:** [@maverick220](https://discuss.elastic.co/u/maverick220)\
**Replies:** 1\
**Last updated:** [March 19, 2018, 12:15pm UTC](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439 "2018-03-19T12:15:43Z")

</div>

We are seeing an issue if 2 (or more) log messages came out with the same millisecond in their timestamp, their order in Kibana output (if sorted by timestamps) could be unpredictably listed out of order. See pic for det…

---

## [Jdbc update and delete](https://discuss.elastic.co/t/jdbc-update-and-delete/74595)

<div class="topic-metadata">

**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\
**Replies:** 1\
**Last updated:** [February 12, 2017, 6:24pm UTC](https://discuss.elastic.co/t/jdbc-update-and-delete/74595 "2017-02-12T18:24:58Z")

</div>

Hi I am currently using logstash-plugin-jdbc to pull data from mysql to elasticsearch. I want to know is it possible to update or delete a single document in elasticsearch by modifying mysql? For example, I got 1000 ro…

---

## [Setup to minimize search latency](https://discuss.elastic.co/t/setup-to-minimize-search-latency/17653)

<div class="topic-metadata">

**Author:** [@Dustin\_Boswell](https://discuss.elastic.co/u/Dustin_Boswell)\
**Replies:** 1\
**Last updated:** [May 23, 2014, 12:27am UTC](https://discuss.elastic.co/t/setup-to-minimize-search-latency/17653 "2014-05-23T00:27:55Z")

</div>

Hi everyone, I have a 10 million document index, and multiple high-memory (e.g. 250GB ram, 32 cores) machines available. I'd like to do everything possible to keep search latency as low as possible (a high-through…

---

## [Turn on Anonymous access](https://discuss.elastic.co/t/turn-on-anonymous-access/343822)

<div class="topic-metadata">

**Author:** [@gabrielpicagevicz](https://discuss.elastic.co/u/gabrielpicagevicz)\
**Replies:** 4\
**Last updated:** [October 3, 2023, 12:19am UTC](https://discuss.elastic.co/t/turn-on-anonymous-access/343822 "2023-10-03T00:19:46Z")

</div>

I currently have version 8.9.1 of Kibana (basic license) installed on my machine. I created an anonymous user with full access to testing I've added the following to Elasticsearch.yml xpack.security.authc: anonymous:…

---

## [Moving Index/shards from Hot Tier to Warm Tier using custom Attributes within zones using ILM](https://discuss.elastic.co/t/moving-index-shards-from-hot-tier-to-warm-tier-using-custom-attributes-within-zones-using-ilm/329277)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 4\
**Last updated:** [April 5, 2023, 5:09am UTC](https://discuss.elastic.co/t/moving-index-shards-from-hot-tier-to-warm-tier-using-custom-attributes-within-zones-using-ilm/329277 "2023-04-05T05:09:32Z")

</div>

I usually move an index to warm tier using ILM and the default \_tier\_preference if I have the nodes defined as data\_warm. Lets say I have multiple indices with varied number of shards. index1 with 5 shards and index 2 w…

---

## [How to change "timeout" value in Request payload of "\_msearch" query?](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358)

<div class="topic-metadata">

**Author:** [@mgharikrishnan](https://discuss.elastic.co/u/mgharikrishnan)\
**Replies:** 4\
**Last updated:** [August 26, 2021, 10:14am UTC](https://discuss.elastic.co/t/how-to-change-timeout-value-in-request-payload-of-msearch-query/282358 "2021-08-26T10:14:29Z")

</div>

Hi Team, We use Elasticsearch 7.9.1 & Kibana 7.3.2 version in our product. While Kibana dashboard loading, there is a variable "timeout":"30000ms" in the "Request payload" of \_msearch queries. We tried to change this v…

---

## [Ho to create single index for logs coming through fluentd, filebeat and logstash together?](https://discuss.elastic.co/t/ho-to-create-single-index-for-logs-coming-through-fluentd-filebeat-and-logstash-together/163631)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 4\
**Last updated:** [January 9, 2019, 11:42pm UTC](https://discuss.elastic.co/t/ho-to-create-single-index-for-logs-coming-through-fluentd-filebeat-and-logstash-together/163631 "2019-01-09T23:42:53Z")

</div>

Hi, I have logs coming from kubernetes, nginx and jenkins machines. i have configured fluentd on kubernetes to get logs and filebeat on nginx to get access logs and logstash on jenkins machine, i want all these logs to…

---

## [How do I get the raw message of the netflow/ipfix codec?](https://discuss.elastic.co/t/how-do-i-get-the-raw-message-of-the-netflow-ipfix-codec/93185)

<div class="topic-metadata">

**Author:** [@red888](https://discuss.elastic.co/u/red888)\
**Replies:** 4\
**Last updated:** [July 16, 2017, 10:09am UTC](https://discuss.elastic.co/t/how-do-i-get-the-raw-message-of-the-netflow-ipfix-codec/93185 "2017-07-16T10:09:54Z")

</div>

Im using the netflow codec and I seems it doesn't include a raw message field when it outputs to es. for input I just do this: udp { type =\> "ipfix" port =\> "123" codec =\> netflow { …

---

## [Alternative to nested fields in Kibana](https://discuss.elastic.co/t/alternative-to-nested-fields-in-kibana/90839)

<div class="topic-metadata">

**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\
**Replies:** 4\
**Last updated:** [June 27, 2017, 5:03pm UTC](https://discuss.elastic.co/t/alternative-to-nested-fields-in-kibana/90839 "2017-06-27T17:03:56Z")

</div>

Hello everyone, I find the best alternative to visualize nested type fields in Kibana. Now I use this solution, but i want to know if exists another method to resolve this problem? I define the index with one uniq…

---

## [Weird JVM Heap Usage](https://discuss.elastic.co/t/weird-jvm-heap-usage/67097)

<div class="topic-metadata">

**Author:** [@Brad\_Jungsu\_Heo](https://discuss.elastic.co/u/Brad_Jungsu_Heo)\
**Replies:** 4\
**Last updated:** [November 25, 2016, 9:18am UTC](https://discuss.elastic.co/t/weird-jvm-heap-usage/67097 "2016-11-25T09:18:29Z")

</div>

(Sorry if this is not directly related to ES. But I don't know where to ask) my environments ES Version: 2.3.2 GC: CMS gc Heap Size: 20GB Total Ram: 64GB Java Version: 1.8.0\_60 Java HotSpot(TM) 64-Bit OS: CentOS 7.2 …

---

## [How to create a field include elk server name inside](https://discuss.elastic.co/t/how-to-create-a-field-include-elk-server-name-inside/48368)

<div class="topic-metadata">

**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\
**Replies:** 4\
**Last updated:** [May 3, 2016, 9:23am UTC](https://discuss.elastic.co/t/how-to-create-a-field-include-elk-server-name-inside/48368 "2016-05-03T09:23:47Z")

</div>

we have 2 nodes elk cluster running. on the client server side, we point some of the servers to node 1, some to node 2, so far I dont have way to see whether the distribution is balanced or not. I am thinking to creat…

---

## [Moving ES from V1.5 to V1.7 break things](https://discuss.elastic.co/t/moving-es-from-v1-5-to-v1-7-break-things/29789)

<div class="topic-metadata">

**Author:** [@bjoernsteffens](https://discuss.elastic.co/u/bjoernsteffens)\
**Replies:** 4\
**Last updated:** [September 23, 2015, 5:46am UTC](https://discuss.elastic.co/t/moving-es-from-v1-5-to-v1-7-break-things/29789 "2015-09-23T05:46:42Z")

</div>

Colleagues, Any one who has been running into this. Backing out a working ES V1.5 and installing a fresh V1.7 I get the following error message when attemping to start \[root@sidr35dgapan001 ~\]# /etc/init.d/elasticsea…

[Previous page](https://discuss.elastic.co/top.md?page=1136&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1138&per_page=50&period=all)
