# Top **URL:** https://discuss.elastic.co/top.md?page=1142&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1143 --- ## [Logstash can't create pipelines](https://discuss.elastic.co/t/logstash-cant-create-pipelines/136336)
**Author:** [@Ruslan](https://discuss.elastic.co/u/Ruslan)\ **Replies:** 2\ **Last updated:** [June 18, 2018, 6:37pm UTC](https://discuss.elastic.co/t/logstash-cant-create-pipelines/136336 "2018-06-18T18:37:30Z")
I have a cluster of 3 elastic search nodes + kibana vm - version 6.2.4 running on 4 vms of Centos 7 . Logstash instances running on every elasticsearch nodes The logstash service is running, but any indices have been cr… --- ## [The map of kibana how to use offline map?](https://discuss.elastic.co/t/the-map-of-kibana-how-to-use-offline-map/111263)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 2\ **Last updated:** [December 12, 2017, 8:00am UTC](https://discuss.elastic.co/t/the-map-of-kibana-how-to-use-offline-map/111263 "2017-12-12T08:00:01Z")
the map of kibana how to use offline map ? --- ## [Can't connect remotely to ES](https://discuss.elastic.co/t/cant-connect-remotely-to-es/75409)
**Author:** [@pliu](https://discuss.elastic.co/u/pliu)\ **Replies:** 2\ **Last updated:** [February 17, 2017, 7:37am UTC](https://discuss.elastic.co/t/cant-connect-remotely-to-es/75409 "2017-02-17T07:37:09Z")
I downloaded Elasticsearch 5.2 on a Linux 16.04 server running on Azure and ran it. I can curl port 9200 locally but cannot do so remotely. I changed network.host to 0.0.0.0 in elasticsearch.yml and have ensured that por… --- ## [Unexpected encoding line reader error when enabling multiline](https://discuss.elastic.co/t/unexpected-encoding-line-reader-error-when-enabling-multiline/43388)
**Author:** [@martkuper](https://discuss.elastic.co/u/martkuper)\ **Replies:** 2\ **Last updated:** [March 3, 2016, 1:59pm UTC](https://discuss.elastic.co/t/unexpected-encoding-line-reader-error-when-enabling-multiline/43388 "2016-03-03T13:59:33Z")
I've been trying to get Filebeat (v1.1.1 on centos7) to apply a multiline filter before outputting a java log (utf-8 encoded) into redis. The java log looks like this: 2016-03-03 09:47:13,690 INFO Wall-e-main Robot - … --- ## [RDS monitoring](https://discuss.elastic.co/t/rds-monitoring/36860)
**Author:** [@hiteshmahajan](https://discuss.elastic.co/u/hiteshmahajan)\ **Replies:** 2\ **Last updated:** [December 10, 2015, 11:21am UTC](https://discuss.elastic.co/t/rds-monitoring/36860 "2015-12-10T11:21:18Z")
How do we monitor RDS through packetbeat ? --- ## [Not able to connect to AWS monitor instance thru proxy](https://discuss.elastic.co/t/not-able-to-connect-to-aws-monitor-instance-thru-proxy/232721)
**Author:** [@Roberto\_Chacon](https://discuss.elastic.co/u/Roberto_Chacon)\ **Replies:** 6\ **Last updated:** [May 15, 2020, 10:01pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-aws-monitor-instance-thru-proxy/232721 "2020-05-15T22:01:01Z")
I'm trying to connect to AWS instance for monitoring using metricbeat but getting an error "proxyconnect tcp: tls: first record does not look like a TLS handshake". When trying to test it with curl seems that is working. … --- ## [Coloring based on status field](https://discuss.elastic.co/t/coloring-based-on-status-field/147597)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 6\ **Last updated:** [October 1, 2018, 9:55am UTC](https://discuss.elastic.co/t/coloring-based-on-status-field/147597 "2018-10-01T09:55:27Z")
I have the data as follows: Server, Application, Status Computer1, ABC, 1 Computer1, EFG, 1 Computer1, IKJ, 0 Computer2, NMO, 1 Computer2, PQR, 1 Computer2, STU, 1 I would like to show a stacked chart which show… --- ## [F5 load balancer SSL\_ERROR\_SYSCALL, errno 104 with Elasticsearch cluster](https://discuss.elastic.co/t/f5-load-balancer-ssl-error-syscall-errno-104-with-elasticsearch-cluster/349120)
**Author:** [@miksonx](https://discuss.elastic.co/u/miksonx)\ **Replies:** 4\ **Last updated:** [December 12, 2023, 4:14pm UTC](https://discuss.elastic.co/t/f5-load-balancer-ssl-error-syscall-errno-104-with-elasticsearch-cluster/349120 "2023-12-12T16:14:11Z")
We have configured F5 LB in front of Elasticsearch nodes cluster with re-encrypt of SSL traffic to the nodes. Nodes have SSL enabled on http. Direct communication to nodes i.e. API (curl) or sending data over https on po… --- ## [Winlogbeat & Logstash - Ingest Pipelines](https://discuss.elastic.co/t/winlogbeat-logstash-ingest-pipelines/301758)
**Author:** [@bct.timo.crabbe](https://discuss.elastic.co/u/bct.timo.crabbe)\ **Replies:** 4\ **Last updated:** [April 13, 2022, 6:31pm UTC](https://discuss.elastic.co/t/winlogbeat-logstash-ingest-pipelines/301758 "2022-04-13T18:31:39Z")
Hi everyone, I am having an issue with the ingest pipelines for powershell while using winlogbeat and the logstash output (both version 8.1.0). The powershell events seem not to be processed by the pipeline. There is a… --- ## [Could not index event to elasticsearch maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/270524)
**Author:** [@TrAMT](https://discuss.elastic.co/u/TrAMT)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 7:47am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/270524 "2021-04-19T07:47:06Z")
Hi I have problem with Elasticsearch and Logstash. Here is the detail of log: Apr 16 13:01:24 elastic7-logstash logstash\[980\]: \[2021-04-16T13:01:24,828\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to E… --- ## [Kibana is not starting after upgrade from 6.7.1 to 7.2](https://discuss.elastic.co/t/kibana-is-not-starting-after-upgrade-from-6-7-1-to-7-2/190296)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 3\ **Last updated:** [July 29, 2019, 9:08pm UTC](https://discuss.elastic.co/t/kibana-is-not-starting-after-upgrade-from-6-7-1-to-7-2/190296 "2019-07-29T21:08:55Z")
I was previously using ELK 6.7.1 with searchguard. I've uninstalled the searchguard plugins and upgraded the ELK RPMs to 7.2. Elasticsearch seems to be up and running but Kibana will not start. I keep getting this error… --- ## [Export field format](https://discuss.elastic.co/t/export-field-format/130866)
**Author:** [@kora](https://discuss.elastic.co/u/kora)\ **Replies:** 3\ **Last updated:** [May 7, 2018, 4:25pm UTC](https://discuss.elastic.co/t/export-field-format/130866 "2018-05-07T16:25:14Z")
Hi all. So I can see similar ticket 80178 without solution. I have a field that is a number and I format that using Kibana to show it as a Duration. But I'm unable to find where exactly is Kibana storing that informat… --- ## [Metricbeat index missing field format](https://discuss.elastic.co/t/metricbeat-index-missing-field-format/108934)
**Author:** [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)\ **Replies:** 3\ **Last updated:** [November 29, 2017, 2:04am UTC](https://discuss.elastic.co/t/metricbeat-index-missing-field-format/108934 "2017-11-29T02:04:48Z")
Hi, I have metricbeat 5.4 deployed on multiple sources and data is being sent to ES as follows: Source (beat) \> Kafka \> LS 5.4 \> ES 5.4 (the index name is metricbeat-\* the default) My issue is for example any ".pct" o… --- ## [I need an elasticsearch php client query for range and search filter](https://discuss.elastic.co/t/i-need-an-elasticsearch-php-client-query-for-range-and-search-filter/96899)
**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\ **Replies:** 3\ **Last updated:** [August 14, 2017, 5:38am UTC](https://discuss.elastic.co/t/i-need-an-elasticsearch-php-client-query-for-range-and-search-filter/96899 "2017-08-14T05:38:21Z")
This is the query I wrote: $params = \[‘index’ =\> ‘201706’,‘type’ =\> ‘facebook’, ‘body’ =\> \[‘query’ =\> \[‘bool’ =\> \[‘filter’ =\> \[‘range’ =\> \[‘created\_at’ =\> \[‘gte’ =\> ‘2017-06-25 00:00:00’,‘lte’ =\> ‘2017-09-30 00:00:00’ ,… --- ## [Encoding and Decoding fields in kibana](https://discuss.elastic.co/t/encoding-and-decoding-fields-in-kibana/66202)
**Author:** [@anonymous4](https://discuss.elastic.co/u/anonymous4)\ **Replies:** 3\ **Last updated:** [November 16, 2016, 4:57pm UTC](https://discuss.elastic.co/t/encoding-and-decoding-fields-in-kibana/66202 "2016-11-16T16:57:57Z")
can be encode or decode fields in kibana? If not,then is there any plugin available for decoding field value in kibana? --- ## [Cannot read from Elasticsearch using Spark SQL](https://discuss.elastic.co/t/cannot-read-from-elasticsearch-using-spark-sql/23318)
**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\ **Replies:** 3\ **Last updated:** [October 10, 2016, 11:23am UTC](https://discuss.elastic.co/t/cannot-read-from-elasticsearch-using-spark-sql/23318 "2016-10-10T11:23:18Z")
I wrote this simple notebook in scala using Elasticsearch Spark adapter: %AddJar file:///tools/elasticsearch-hadoop-2.1.0.Beta3/dist/elasticsearch-spark\_2.10-2.1.0.BUILD-SNAPSHOT.jar %AddJar file:///tools/elasti… --- ## [Using zip / tar to backup elastic](https://discuss.elastic.co/t/using-zip-tar-to-backup-elastic/55931)
**Author:** [@Aviad\_Sharfshtein](https://discuss.elastic.co/u/Aviad_Sharfshtein)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 5:39am UTC](https://discuss.elastic.co/t/using-zip-tar-to-backup-elastic/55931 "2016-07-20T05:39:33Z")
I have elastic 1.0.0 machine that i'd like to backup. is backing up the data directory with zip / tar enough? can I just extract it on a new machine in case of problems? 10x --- ## [Best Practice - ES and Kibana on Different Machines?](https://discuss.elastic.co/t/best-practice-es-and-kibana-on-different-machines/19347)
**Author:** [@Andrew\_Ruslander](https://discuss.elastic.co/u/Andrew_Ruslander)\ **Replies:** 3\ **Last updated:** [August 20, 2014, 9:27pm UTC](https://discuss.elastic.co/t/best-practice-es-and-kibana-on-different-machines/19347 "2014-08-20T21:27:18Z")
I couldn't find any official documentation or best practices, though it seems implied in the Kibana installation instructions, but is there any word on whether or not Kibana3 should or should not live on a node in th… --- ## [Time Picker is not showing in Kibana](https://discuss.elastic.co/t/time-picker-is-not-showing-in-kibana/100698)
**Author:** [@nsivabalan](https://discuss.elastic.co/u/nsivabalan)\ **Replies:** 1\ **Last updated:** [September 15, 2017, 2:58pm UTC](https://discuss.elastic.co/t/time-picker-is-not-showing-in-kibana/100698 "2017-09-15T14:58:06Z")
Hi, The time picker in kibana at the right top corner is not showing. How can I enable it back with correct settings and right parameter value? Thanks. --- ## [Ingest pipeline is not being used in the events sent by filebeat](https://discuss.elastic.co/t/ingest-pipeline-is-not-being-used-in-the-events-sent-by-filebeat/120596)
**Author:** [@jeraldsm](https://discuss.elastic.co/u/jeraldsm)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 9:56am UTC](https://discuss.elastic.co/t/ingest-pipeline-is-not-being-used-in-the-events-sent-by-filebeat/120596 "2018-02-20T09:56:49Z")
I have an issue where Ingest pipeline is not being used in the events sent by filebeat. I have created an ingest pipeline with simple grok patterns using put ingest API. and I use filebeat to sent events to elasticsea… --- ## [Accessing nested fields in a script (null\_pointer\_exception)](https://discuss.elastic.co/t/accessing-nested-fields-in-a-script-null-pointer-exception/304521)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 6:41am UTC](https://discuss.elastic.co/t/accessing-nested-fields-in-a-script-null-pointer-exception/304521 "2022-05-12T06:41:00Z")
Hello. I have a nested document and I would like to do some processing on it before indexing it. The parent document has a "reference\_ts" containing a timestamp. Then come the nested fields that each have their own tim… --- ## [Shard Allocation Failures After 5 Retries](https://discuss.elastic.co/t/shard-allocation-failures-after-5-retries/276969)
**Author:** [@xianhechen](https://discuss.elastic.co/u/xianhechen)\ **Replies:** 2\ **Last updated:** [June 28, 2021, 11:54pm UTC](https://discuss.elastic.co/t/shard-allocation-failures-after-5-retries/276969 "2021-06-28T23:54:03Z")
Hi, We have a 23 nodes cluster with 5 master nodes, 3 coordinator nodes, and 15 data nodes. Our index has a total of 30 primary shards and 3 replicas. Size of the index is around 800Gb. Earlier this week we found that t… --- ## [Message "Your query is taking a while"](https://discuss.elastic.co/t/message-your-query-is-taking-a-while/238728)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 2\ **Last updated:** [June 25, 2020, 6:19pm UTC](https://discuss.elastic.co/t/message-your-query-is-taking-a-while/238728 "2020-06-25T18:19:36Z")
Hi people, I've implemented the netflow module with Filebeat. In my ELK 7.8.0 I'm receiving a lots of flows from a BGP router, and when I go to the Filebeat Netflow dashboards and I query for a long date range (24 hs and… --- ## [DNS Round-robin causing errors](https://discuss.elastic.co/t/dns-round-robin-causing-errors/144950)
**Author:** [@kurtiskurtis](https://discuss.elastic.co/u/kurtiskurtis)\ **Replies:** 2\ **Last updated:** [August 21, 2018, 5:01pm UTC](https://discuss.elastic.co/t/dns-round-robin-causing-errors/144950 "2018-08-21T17:01:57Z")
So this may sound a bit odd, try to follow with me. I was trying to be clever and I used DNS Round-Robining to simplify the deployment of Elasticsearch nodes. For those of you unfamiliar, this is achieved by making mult… --- ## [Error with](https://discuss.elastic.co/t/error-with/274054)
**Author:** [@Denden](https://discuss.elastic.co/u/Denden)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 9:50am UTC](https://discuss.elastic.co/t/error-with/274054 "2021-06-07T09:50:54Z")
Hello there, I have a single ELK node, and I have some error that I can't find soutions. One of them is : illegal\_argument\_exception at shard 0index metricbeat-7.11.2-2021.05.26node ugebynP7RImmkUP5TCeGEA Typ… --- ## [No soap web service traces from Jboss Fuse](https://discuss.elastic.co/t/no-soap-web-service-traces-from-jboss-fuse/296477)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 7\ **Last updated:** [February 8, 2022, 10:44am UTC](https://discuss.elastic.co/t/no-soap-web-service-traces-from-jboss-fuse/296477 "2022-02-08T10:44:47Z")
We've got APM up and running for a few apps, but struggle to get any traces from our Jboss Fuse (6.2.1) servers. APM/Kibana/Elastic v. 7.16.2, most recent build of apm agent (tried older ones too) - 1.28.4. The applica… --- ## [Why I can't make simple search request to my Elastic App Search?](https://discuss.elastic.co/t/why-i-cant-make-simple-search-request-to-my-elastic-app-search/250147)
**Author:** [@sarah\_182](https://discuss.elastic.co/u/sarah_182)\ **Replies:** 1\ **Last updated:** [September 29, 2020, 5:26pm UTC](https://discuss.elastic.co/t/why-i-cant-make-simple-search-request-to-my-elastic-app-search/250147 "2020-09-29T17:26:54Z")
so I want to make search request to my elastic enterprise search app using guide from the documentation in here , I don't want to use elastic node JS client, but I want to make http request using axios. here is the code… --- ## [Logs REST API](https://discuss.elastic.co/t/logs-rest-api/226068)
**Author:** [@Dawood](https://discuss.elastic.co/u/Dawood)\ **Replies:** 7\ **Last updated:** [April 15, 2020, 10:02am UTC](https://discuss.elastic.co/t/logs-rest-api/226068 "2020-04-15T10:02:07Z")
Hi, Is there a REST API to retrieve all logs(hits) by specific search ? Is there any examples? In elastic section i can not see that!! Thanks, Dawood --- ## [Is it a bad practice to stop ELK daily](https://discuss.elastic.co/t/is-it-a-bad-practice-to-stop-elk-daily/222458)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 7\ **Last updated:** [April 1, 2020, 2:49pm UTC](https://discuss.elastic.co/t/is-it-a-bad-practice-to-stop-elk-daily/222458 "2020-04-01T14:49:44Z")
Hi! I guess it is a bad practice to stop Elastic/Logstash/Kibana in the evening and start it in the morning, but it is not going to be used (we use it for logs, some logs would be ingested, but they can be ingested in t… --- ## [Is it possible to use DeleteByQueryRequest with RestHighLevelClient?](https://discuss.elastic.co/t/is-it-possible-to-use-deletebyqueryrequest-with-resthighlevelclient/126201)
**Author:** [@agazzarini](https://discuss.elastic.co/u/agazzarini)\ **Replies:** 1\ **Last updated:** [April 6, 2018, 1:20pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-deletebyqueryrequest-with-resthighlevelclient/126201 "2018-04-06T13:20:06Z")
I'm not able to find some example and I even didn't get the point if such thing is possible or I should switch to low level client (and in this case I'm wondering what the role of org.elasticsearch.index.reindex.DeleteBy… --- ## [Logstash aggregate filter - sendmail logs](https://discuss.elastic.co/t/logstash-aggregate-filter-sendmail-logs/105917)
**Author:** [@kuznick](https://discuss.elastic.co/u/kuznick)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 7:47pm UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-sendmail-logs/105917 "2017-11-22T19:47:29Z")
I would like to forward sendmail logs based on reception domain. Only possible solution I can see is to aggregate sendmail logs based on session id and forward it. sample log is 2017-10-06T00:00:25+00:00 smtpser01 send… --- ## [Xpack on Elasticsearch 5.5](https://discuss.elastic.co/t/xpack-on-elasticsearch-5-5/93092)
**Author:** [@chandu507.m](https://discuss.elastic.co/u/chandu507.m)\ **Replies:** 1\ **Last updated:** [July 17, 2017, 8:50pm UTC](https://discuss.elastic.co/t/xpack-on-elasticsearch-5-5/93092 "2017-07-17T20:50:06Z")
Hello, I am trying to install xpack for elasticsearch 5,5 version in LINUX machine. I am facing the below listed exception.PFB: -bash-4.2$ bin/elasticsearch-plugin install x-pack --batch Exception in thread "main" java… --- ## [Painless: string to word list](https://discuss.elastic.co/t/painless-string-to-word-list/91532)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 1\ **Last updated:** [July 3, 2017, 5:49pm UTC](https://discuss.elastic.co/t/painless-string-to-word-list/91532 "2017-07-03T17:49:08Z")
I am trying to break a string field into a list of words in order to do word occurrence count, but am having some trouble figuring how to write it properly. This is difficult especially since there is no way for me to sa… --- ## [Geo\_shape vs geo\_point performance](https://discuss.elastic.co/t/geo-shape-vs-geo-point-performance/9890)
**Author:** [@massfords](https://discuss.elastic.co/u/massfords)\ **Replies:** 1\ **Last updated:** [November 30, 2012, 5:39am UTC](https://discuss.elastic.co/t/geo-shape-vs-geo-point-performance/9890 "2012-11-30T05:39:09Z")
I'm interested in using the pre-indexed shape feature. In my case, I anticipate that the geo\_shape values for the documents will in fact be a point, but in order to benefit from the pre-indexed shape feature, I need … --- ## [Cannot connect to ES on localhost:9200 on Windows 2008 R2 Server](https://discuss.elastic.co/t/cannot-connect-to-es-on-localhost-9200-on-windows-2008-r2-server/162470)
**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\ **Replies:** 8\ **Last updated:** [January 2, 2019, 2:00pm UTC](https://discuss.elastic.co/t/cannot-connect-to-es-on-localhost-9200-on-windows-2008-r2-server/162470 "2019-01-02T14:00:02Z")
the below image shows kibana and ES are running (I am using OS : Windows 2008 R2 Server) But i cannot connect to ES on localhost:9200 Please check my logs and config files here , if they are fine Kibana.yml Elastic … --- ## [Elasticsearch scripting engine](https://discuss.elastic.co/t/elasticsearch-scripting-engine/98424)
**Author:** [@prasperl](https://discuss.elastic.co/u/prasperl)\ **Replies:** 3\ **Last updated:** [August 26, 2017, 4:58pm UTC](https://discuss.elastic.co/t/elasticsearch-scripting-engine/98424 "2017-08-26T16:58:28Z")
I am using elasticsearch 5.5 and I am trying to implement my own scoring algorithm to calculate the edit distance and come up with a custom score. I found lot of good examples of native scripts to do this,but since nati… --- ## [Client.msearch и пейджинг](https://discuss.elastic.co/t/client-msearch/73202)
**Author:** [@whispersofdew](https://discuss.elastic.co/u/whispersofdew)\ **Replies:** 8\ **Last updated:** [February 1, 2017, 5:43am UTC](https://discuss.elastic.co/t/client-msearch/73202 "2017-02-01T05:43:23Z")
Подскажите, пожалуйста, правильно ли я понял что не могу в msearch сделать стандартный пейджинг, чтоб из всех запросов возвращалось не более 10 записей? и объединить одним from : 0, size : 10, ВСЕ запросы (которые у мен… --- ## [Yml config files in a different directory](https://discuss.elastic.co/t/yml-config-files-in-a-different-directory/38192)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 3\ **Last updated:** [December 30, 2015, 7:57pm UTC](https://discuss.elastic.co/t/yml-config-files-in-a-different-directory/38192 "2015-12-30T19:57:12Z")
Hi, I am trying to set the yml config files in my directory in Windows. I tried -Des.config="c:\\mypath\\config" es.config is no longer supported. elasticsearch.yml must be placed in the config directory and cannot be r… --- ## [Logstash](https://discuss.elastic.co/t/logstash/33716)
**Author:** [@sylv](https://discuss.elastic.co/u/sylv)\ **Replies:** 3\ **Last updated:** [November 5, 2015, 11:09am UTC](https://discuss.elastic.co/t/logstash/33716 "2015-11-05T11:09:52Z")
hello I set new versions : elasticsearch kibana and logstach i have these errors with my config file txt who was ok with previous versions: l\\logstash\_titulaires\_config\_file.txt io/console not supported; tty will not b… --- ## [Percolator - Adding metadata to query](https://discuss.elastic.co/t/percolator-adding-metadata-to-query/28421)
**Author:** [@raunak](https://discuss.elastic.co/u/raunak)\ **Replies:** 3\ **Last updated:** [September 1, 2015, 12:04pm UTC](https://discuss.elastic.co/t/percolator-adding-metadata-to-query/28421 "2015-09-01T12:04:55Z")
I'm building my queries using SearchSourceBuilder and saving the query into ES as type .percolator - works great. Now, I want to add metadata to my query, so my query looks something like below; { "query":{ … --- ## [Using Application join](https://discuss.elastic.co/t/using-application-join/210451)
**Author:** [@Haneul\_Kim](https://discuss.elastic.co/u/Haneul_Kim)\ **Replies:** 5\ **Last updated:** [December 4, 2019, 8:12am UTC](https://discuss.elastic.co/t/using-application-join/210451 "2019-12-04T08:12:50Z")
by reading https://www.elastic.co/guide/en/elasticsearch/guide/current/application-joins.html#application-joins Now I understand I can get list of values then use them as a filter. Since version 5.0 "filtered" query has… --- ## [DNS Filter wont work](https://discuss.elastic.co/t/dns-filter-wont-work/209094)
**Author:** [@elasticcp](https://discuss.elastic.co/u/elasticcp)\ **Replies:** 5\ **Last updated:** [November 22, 2019, 7:35pm UTC](https://discuss.elastic.co/t/dns-filter-wont-work/209094 "2019-11-22T19:35:50Z")
Hey i tried to resolve a hostname in to a DNS. My Input data Looks like this: \> { \> "query\_status": "ok", \> "urls": \[ \> { \> "id": "223622", \> "urlhaus\_reference": "https:\\/\\/urlh… --- ## [Add new field from message](https://discuss.elastic.co/t/add-new-field-from-message/195737)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 5\ **Last updated:** [August 21, 2019, 6:51am UTC](https://discuss.elastic.co/t/add-new-field-from-message/195737 "2019-08-21T06:51:11Z")
Hi, I wonder if someone can help. I have looked online and I haven't found a solution. We have an event that passes a message like "error detected in request error code: \[error code\] please check" Is there a way to be … --- ## [What is the status of one type per index in ElasticSearch 6.0](https://discuss.elastic.co/t/what-is-the-status-of-one-type-per-index-in-elasticsearch-6-0/90414)
**Author:** [@frank-montyne](https://discuss.elastic.co/u/frank-montyne)\ **Replies:** 5\ **Last updated:** [June 22, 2017, 12:40pm UTC](https://discuss.elastic.co/t/what-is-the-status-of-one-type-per-index-in-elasticsearch-6-0/90414 "2017-06-22T12:40:32Z")
We recently have had a thread discussing the fact that in ElasticSearch 6.0 multiple types per index would not be allowed anymore. The thread was closed but without a real answer whether this will effectively be implemen… --- ## [\[New\_Installation\] Unable to fetch mapping](https://discuss.elastic.co/t/new-installation-unable-to-fetch-mapping/61711)
**Author:** [@Jebo\_Mobile](https://discuss.elastic.co/u/Jebo_Mobile)\ **Replies:** 5\ **Last updated:** [September 30, 2016, 5:02am UTC](https://discuss.elastic.co/t/new-installation-unable-to-fetch-mapping/61711 "2016-09-30T05:02:29Z")
Hi, I cannot configure an index pattern beause I have a grey button. I follow the steps intructructions to http://www.itzgeek.com/how-tos/linux/centos-how-tos/updated-install-elasticsearch-logstash-and-kibana-elk-stack-o… --- ## [How to make great tables - Kibana 4](https://discuss.elastic.co/t/how-to-make-great-tables-kibana-4/53212)
**Author:** [@Dan\_AdWorks](https://discuss.elastic.co/u/Dan_AdWorks)\ **Replies:** 5\ **Last updated:** [June 19, 2016, 8:03am UTC](https://discuss.elastic.co/t/how-to-make-great-tables-kibana-4/53212 "2016-06-19T08:03:43Z")
Hi, I am tried to make so great kibana 4 tables and I am having a hard time. I am trying to visualize data about marketing campaigns we are running. I would like to be able to show on the same row, results from 2 dif… --- ## [Wrong ElasticSearch template being used](https://discuss.elastic.co/t/wrong-elasticsearch-template-being-used/31812)
**Author:** [@Dualnames](https://discuss.elastic.co/u/Dualnames)\ **Replies:** 5\ **Last updated:** [October 8, 2015, 2:19am UTC](https://discuss.elastic.co/t/wrong-elasticsearch-template-being-used/31812 "2015-10-08T02:19:46Z")
I am not sure if this is the correct forum for this but I am having issues with one of my logstash configurations when it is sent to elasticsearch. I am brand new to ELK and still learning how everything works. So far, … --- ## [Incorrect/increasing elasticsearch count query after re-indexing!](https://discuss.elastic.co/t/incorrect-increasing-elasticsearch-count-query-after-re-indexing/293096)
**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\ **Replies:** 1\ **Last updated:** [December 29, 2021, 9:44am UTC](https://discuss.elastic.co/t/incorrect-increasing-elasticsearch-count-query-after-re-indexing/293096 "2021-12-29T09:44:06Z")
Some hours ago I've re-indexed one of my indices. The re-indexing process completed in about 2 hours and I've run the following query afterwards: GET myIndex/\_count { "query": { "bool": { "must": \[ {… --- ## [Filebeat: Time different between ingest time and Message log time](https://discuss.elastic.co/t/filebeat-time-different-between-ingest-time-and-message-log-time/290394)
**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\ **Replies:** 4\ **Last updated:** [November 30, 2021, 6:31am UTC](https://discuss.elastic.co/t/filebeat-time-different-between-ingest-time-and-message-log-time/290394 "2021-11-30T06:31:06Z")
Hello, Currently, I am using Elasticsearch v7.11 and filebeat v7.15 And I am retrieving owa logs from a directory on exchange. I noticed that the "@timestamp" and log message was way different. After further troubleshoo… --- ## [Kibana not starting after 7.6 Upgrade](https://discuss.elastic.co/t/kibana-not-starting-after-7-6-upgrade/220928)
**Author:** [@rluzardo](https://discuss.elastic.co/u/rluzardo)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-not-starting-after-7-6-upgrade/220928 "2020-02-26T21:22:31Z")
Hello, I just did an upgrade from Kibana 7.3 to 7.6. After installing with the RPM and using the same kibana.yml file I had before, I tried to start the service and after 3 restarts I got the following error journalctl … [Previous page](https://discuss.elastic.co/top.md?page=1141&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1143&per_page=50&period=all)