# Top

**URL:** https://discuss.elastic.co/top.md?page=1143&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1144

---

## [How to add logstash gork filter and field](https://discuss.elastic.co/t/how-to-add-logstash-gork-filter-and-field/64582)

<div class="topic-metadata">

**Author:** [@zoram](https://discuss.elastic.co/u/zoram)\
**Replies:** 4\
**Last updated:** [November 8, 2016, 1:42pm UTC](https://discuss.elastic.co/t/how-to-add-logstash-gork-filter-and-field/64582 "2016-11-08T13:42:10Z")

</div>

I'm using Filebeat -\> Logstash -\> Elasticsearch -\> Kibana to have an overview of my glassfish log file. My log message look like this. \[#|2016-11- 01T11:29:33.347+0100|INFO|glassfish3.1.2|com.MachineProxy|\_ThreadID…

---

## [Watcher does not support search type scan anymore?](https://discuss.elastic.co/t/watcher-does-not-support-search-type-scan-anymore/41259)

<div class="topic-metadata">

**Author:** [@terramexx](https://discuss.elastic.co/u/terramexx)\
**Replies:** 4\
**Last updated:** [February 9, 2016, 12:24pm UTC](https://discuss.elastic.co/t/watcher-does-not-support-search-type-scan-anymore/41259 "2016-02-09T12:24:22Z")

</div>

ELK 2.2.0 According the doc the watcher should support request.search\_type: scan https://www.elastic.co/guide/en/watcher/current/input.html#input-search According this response it does not: { "error": { "ro…

---

## [Values field event.action for Cisco ASA integration](https://discuss.elastic.co/t/values-field-event-action-for-cisco-asa-integration/337794)

<div class="topic-metadata">

**Author:** [@frederikvandeputte](https://discuss.elastic.co/u/frederikvandeputte)\
**Replies:** 6\
**Last updated:** [July 12, 2023, 2:04pm UTC](https://discuss.elastic.co/t/values-field-event-action-for-cisco-asa-integration/337794 "2023-07-12T14:04:30Z")

</div>

Hi Currently parsed events coming from Cisco ASA firewall ingest pipeline show 4 types of values in field event.action: firewall-rule; flow-expiration; flow-creation and error. Value "firewall-rule" is very much a us…

---

## [Data not rendering in Canvas](https://discuss.elastic.co/t/data-not-rendering-in-canvas/259824)

<div class="topic-metadata">

**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\
**Replies:** 6\
**Last updated:** [December 30, 2020, 11:49am UTC](https://discuss.elastic.co/t/data-not-rendering-in-canvas/259824 "2020-12-30T11:49:27Z")

</div>

Hello I am trying to create a scatter plot from an index (created with a transform). The data is available at the datasource preview of the query but it doesn't show up in the chart. Running the chart in debug mode giv…

---

## [Winlogbeat Windows config to see logs on Kibana Dashboard](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261)

<div class="topic-metadata">

**Author:** [@Luuckyx](https://discuss.elastic.co/u/Luuckyx)\
**Replies:** 6\
**Last updated:** [September 6, 2019, 9:47am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261 "2019-09-06T09:47:57Z")

</div>

Hello everyone,i need help in Winlogbeat config to see logs on Kibana Dashboard. I have install a ELK server on a ubuntu 18.04 virtualisation and it's work ! no problem here. I need add logs of a Virtual Windows Serve…

---

## [Continous GC on Master Node](https://discuss.elastic.co/t/continous-gc-on-master-node/147475)

<div class="topic-metadata">

**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\
**Replies:** 6\
**Last updated:** [September 6, 2018, 5:21pm UTC](https://discuss.elastic.co/t/continous-gc-on-master-node/147475 "2018-09-06T17:21:28Z")

</div>

we have a huge cluster which holds 200TB data. 50 physical servers(150 data nodes). 3 instances running on each node 30gb heap each ( total physical ram 124gb) 3 master nodes ( Total ram 16gb) heap assigned 12gb 3clie…

---

## [Unable to sort results using script\_score function](https://discuss.elastic.co/t/unable-to-sort-results-using-script-score-function/194946)

<div class="topic-metadata">

**Author:** [@aniruddha.raje](https://discuss.elastic.co/u/aniruddha.raje)\
**Replies:** 2\
**Last updated:** [September 2, 2019, 10:27am UTC](https://discuss.elastic.co/t/unable-to-sort-results-using-script-score-function/194946 "2019-09-02T10:27:57Z")

</div>

I have a field called price in my elasticsearch index whose values I need to convert before sorting - { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, …

---

## [How to show '0' in empty cells in heatmap in kibana 7.1.1?](https://discuss.elastic.co/t/how-to-show-0-in-empty-cells-in-heatmap-in-kibana-7-1-1/193432)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [August 6, 2019, 6:39am UTC](https://discuss.elastic.co/t/how-to-show-0-in-empty-cells-in-heatmap-in-kibana-7-1-1/193432 "2019-08-06T06:39:31Z")

</div>

Hello . I am using heatmap visualization and counts that are 0\< are showing as expected , however counts that are =0 aren't showing in cells which 0 is the value that I expect to be shown. I am using terms aggregatio…

---

## [Reindex does not honor http.max\_content\_length: "500m",](https://discuss.elastic.co/t/reindex-does-not-honor-http-max-content-length-500m/158869)

<div class="topic-metadata">

**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\
**Replies:** 2\
**Last updated:** [November 30, 2018, 6:30pm UTC](https://discuss.elastic.co/t/reindex-does-not-honor-http-max-content-length-500m/158869 "2018-11-30T18:30:40Z")

</div>

Reindex from 2.4 to 6.5, batch size is 200 http.max\_content\_length: "500m", but still receive exception: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Remote responded with a chunk that was to…

---

## [ES with WORM stroage](https://discuss.elastic.co/t/es-with-worm-stroage/133597)

<div class="topic-metadata">

**Author:** [@wans](https://discuss.elastic.co/u/wans)\
**Replies:** 2\
**Last updated:** [May 29, 2018, 10:45am UTC](https://discuss.elastic.co/t/es-with-worm-stroage/133597 "2018-05-29T10:45:28Z")

</div>

Hello? I'm using ES 6.1 and my client want to store old data into WORM (Write Once Read Many) storage. So I'll move old index to WORM storage mounted node. I'm worrying about whether ES will work or not on WORM storag…

---

## [Split value in logstash](https://discuss.elastic.co/t/split-value-in-logstash/119019)

<div class="topic-metadata">

**Author:** [@youssef](https://discuss.elastic.co/u/youssef)\
**Replies:** 2\
**Last updated:** [February 8, 2018, 11:21am UTC](https://discuss.elastic.co/t/split-value-in-logstash/119019 "2018-02-08T11:21:51Z")

</div>

Hi all, i have field called CONGESTION\_LEVEL that may contain the values 0 , 1 , 2 , 0;N , 1;N , 2;N or may be empty, i want to add integer field that may contain 0 ,1 ,2 values: if the CONGESTION\_LEVEL field is 0 1 o…

---

## ["docs" number in Elasticsearch head](https://discuss.elastic.co/t/docs-number-in-elasticsearch-head/68514)

<div class="topic-metadata">

**Author:** [@bluish\_penguin](https://discuss.elastic.co/u/bluish_penguin)\
**Replies:** 2\
**Last updated:** [December 9, 2016, 7:12am UTC](https://discuss.elastic.co/t/docs-number-in-elasticsearch-head/68514 "2016-12-09T07:12:23Z")

</div>

Hi, I am running a python script that repetitively build the index. Before building the new index, I will delete the old index first with some filter criteria (by month id). I am using function delete\_by\_query. tableNa…

---

## [ES suddenly begin to consume CPU](https://discuss.elastic.co/t/es-suddenly-begin-to-consume-cpu/29416)

<div class="topic-metadata">

**Author:** [@shakura](https://discuss.elastic.co/u/shakura)\
**Replies:** 2\
**Last updated:** [September 23, 2015, 8:10am UTC](https://discuss.elastic.co/t/es-suddenly-begin-to-consume-cpu/29416 "2015-09-23T08:10:56Z")

</div>

Hi! I have 6-nodes cluster. Sometimes cpu usage become very high and lows only after restarting elastic. Any suggestions? Here is my munin output: And hot threads from one of the nodes: Hot threads at 2015-09-16T…

---

## [Understanding Curator's --master-only flag](https://discuss.elastic.co/t/understanding-curators-master-only-flag/19922)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 2\
**Last updated:** [September 22, 2014, 9:03pm UTC](https://discuss.elastic.co/t/understanding-curators-master-only-flag/19922 "2014-09-22T21:03:55Z")

</div>

I'm running curator in every node in an N-node ELK cluster. Is there any reason I \*wouldn't\* want to have the --master-only flag turned on? If you delete an index from the master, it's still going to get deleted f…

---

## [How to update denormalized data in Elasticsearch?](https://discuss.elastic.co/t/how-to-update-denormalized-data-in-elasticsearch/73662)

<div class="topic-metadata">

**Author:** [@lmazgon](https://discuss.elastic.co/u/lmazgon)\
**Replies:** 0\
**Last updated:** [February 2, 2017, 11:31am UTC](https://discuss.elastic.co/t/how-to-update-denormalized-data-in-elasticsearch/73662 "2017-02-02T11:31:01Z")

</div>

Hi logstash community! Actually I have asked this question on StackOverflow, but noone seems to know the answer. Maybe you can help me. Use case explanation We have a relational database with data about our day-to-d…

---

## [V1beta1 Beats and the note about upgrades](https://discuss.elastic.co/t/v1beta1-beats-and-the-note-about-upgrades/255103)

<div class="topic-metadata">

**Author:** [@SeanPlacchetti](https://discuss.elastic.co/u/SeanPlacchetti)\
**Replies:** 3\
**Last updated:** [November 16, 2020, 1:37pm UTC](https://discuss.elastic.co/t/v1beta1-beats-and-the-note-about-upgrades/255103 "2020-11-16T13:37:04Z")

</div>

Hello, I can't tell if the note in the documentation about Operator upgrades running on Openshift 3.11 applies to the Beats or just the Elasticsearch deployments through ECK. Our Beat yamls are based on the quickstarts …

---

## [Disk utilization dashboard for all server](https://discuss.elastic.co/t/disk-utilization-dashboard-for-all-server/249192)

<div class="topic-metadata">

**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\
**Replies:** 1\
**Last updated:** [September 24, 2020, 6:49pm UTC](https://discuss.elastic.co/t/disk-utilization-dashboard-for-all-server/249192 "2020-09-24T18:49:24Z")

</div>

Hi, Can anyone help me to create disk utilization dashboard for all servers like Top host Memory & Cpu System Metric? I tried but not able to figure it out this?

---

## [AWS Elasticsearch with Java High Level Rest Client](https://discuss.elastic.co/t/aws-elasticsearch-with-java-high-level-rest-client/139997)

<div class="topic-metadata">

**Author:** [@ashenoy1](https://discuss.elastic.co/u/ashenoy1)\
**Replies:** 1\
**Last updated:** [July 20, 2018, 10:00am UTC](https://discuss.elastic.co/t/aws-elasticsearch-with-java-high-level-rest-client/139997 "2018-07-20T10:00:50Z")

</div>

Hi I'm trying to make queries using Java HighLevelRestClient to AWS ElasticSearch. Both are versions 6.0.1. As I try to connected I'm getting a: org.apache.http.ConnectionClosedException: Connection closed Is this some…

---

## [Snapshot path.repo](https://discuss.elastic.co/t/snapshot-path-repo/118297)

<div class="topic-metadata">

**Author:** [@Srinivasan\_Ramesh](https://discuss.elastic.co/u/Srinivasan_Ramesh)\
**Replies:** 1\
**Last updated:** [February 3, 2018, 9:24am UTC](https://discuss.elastic.co/t/snapshot-path-repo/118297 "2018-02-03T09:24:36Z")

</div>

i have been using elasticsearch 5.5.3 i need to create a backup. This is my path path.repo :\["/home/devadmin/backup"\] i tried this in kibana : PUT /\_snapshot/my\_backup { "type": "fs", "settings": { "location": "…

---

## [Sending SMS alert to mobile devices](https://discuss.elastic.co/t/sending-sms-alert-to-mobile-devices/107829)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 1\
**Last updated:** [November 16, 2017, 8:48am UTC](https://discuss.elastic.co/t/sending-sms-alert-to-mobile-devices/107829 "2017-11-16T08:48:08Z")

</div>

Hi, Using x-pack actions, we have configured email alerts. What we also need, is to send alerts as an SMS. Is it possible to send alerts as an SMS to mobile devices ? If so, which xpack action should be used and how? …

---

## [Highlighted Text is not working](https://discuss.elastic.co/t/highlighted-text-is-not-working/56521)

<div class="topic-metadata">

**Author:** [@apratapi](https://discuss.elastic.co/u/apratapi)\
**Replies:** 1\
**Last updated:** [July 27, 2016, 1:17pm UTC](https://discuss.elastic.co/t/highlighted-text-is-not-working/56521 "2016-07-27T13:17:52Z")

</div>

Hi All, i am applying highlightedText on elasticsearch indexe through the java code, the highlighted text feature is working not working below is the mapping- "dcl\_raac\_pcdb": { "mappings": { "dcl\_raac…

---

## [Exiting: Index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/287700)

<div class="topic-metadata">

**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\
**Replies:** 0\
**Last updated:** [October 26, 2021, 1:59pm UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/287700 "2021-10-26T13:59:18Z")

</div>

Hi, I am unable to setup filebeat to send logs to logstash, I followed few solutions of setting up index management using Elasticsearch output then delete old document but the issue is still exist. I have also disabled…

---

## [Can I attach Kibana controls to a specific viz](https://discuss.elastic.co/t/can-i-attach-kibana-controls-to-a-specific-viz/282870)

<div class="topic-metadata">

**Author:** [@prkd](https://discuss.elastic.co/u/prkd)\
**Replies:** 3\
**Last updated:** [September 11, 2021, 2:24pm UTC](https://discuss.elastic.co/t/can-i-attach-kibana-controls-to-a-specific-viz/282870 "2021-09-11T14:24:41Z")

</div>

My dashboard contains multiple graphs from same indexes filtered for different types of data within the index. Now I want to attach a control (dropdown) for each of this graph, so the user can view a single type of data…

---

## [Parsing IBM Integration Bus logs with Grok](https://discuss.elastic.co/t/parsing-ibm-integration-bus-logs-with-grok/126336)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 3\
**Last updated:** [March 31, 2018, 9:28pm UTC](https://discuss.elastic.co/t/parsing-ibm-integration-bus-logs-with-grok/126336 "2018-03-31T21:28:03Z")

</div>

Hello, searching the internet I didn't find the right grok filter for IBM integration bus logs. At the end I decided to try by may self. Filter is working but I have opinion that it can be better. Below you can find my …

---

## [Date Histogram X axis bounds](https://discuss.elastic.co/t/date-histogram-x-axis-bounds/91119)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 3\
**Last updated:** [June 30, 2017, 8:22pm UTC](https://discuss.elastic.co/t/date-histogram-x-axis-bounds/91119 "2017-06-30T20:22:02Z")

</div>

Hi, I want to compare two date histograms in a dashboard, but the data in the aggregations does not cover the same time range. How can I get a graph that is bounded to the date-filter of the whole dashboard rather than t…

---

## [Marvel & rest.action.multi.allow\_explicit\_index: false](https://discuss.elastic.co/t/marvel-rest-action-multi-allow-explicit-index-false/16192)

<div class="topic-metadata">

**Author:** [@Antonios\_Chalkiopoul](https://discuss.elastic.co/u/Antonios_Chalkiopoul)\
**Replies:** 3\
**Last updated:** [December 20, 2014, 8:51am UTC](https://discuss.elastic.co/t/marvel-rest-action-multi-allow-explicit-index-false/16192 "2014-12-20T08:51:29Z")

</div>

To prevent users from overriding the index which has been specified in the URL i set rest.action.multi.allow\_explicit\_index: false in elasticsearch.yml (using es - version 1.0.1) After restarting elasticse…

---

## [Nodes are not able to connect to the master](https://discuss.elastic.co/t/nodes-are-not-able-to-connect-to-the-master/15008)

<div class="topic-metadata">

**Author:** [@deep\_saxena](https://discuss.elastic.co/u/deep_saxena)\
**Replies:** 3\
**Last updated:** [December 25, 2013, 4:03am UTC](https://discuss.elastic.co/t/nodes-are-not-able-to-connect-to-the-master/15008 "2013-12-25T04:03:43Z")

</div>

org.elasticsearch.transport.ConnectTransportException: \[Crooked Man\]\[inet\[/192.168.202.1:9300\]\] connect\_timeout\[30s\] at org.elasticsearch.transport.netty.NettyTransport.connectToChannels(NettyTransport.java:…

---

## [WatcherのIndex Actionで、Index名を可変にする方法がないか](https://discuss.elastic.co/t/watcher-index-action-index/183483)

<div class="topic-metadata">

**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\
**Replies:** 4\
**Last updated:** [June 4, 2019, 8:00am UTC](https://discuss.elastic.co/t/watcher-index-action-index/183483 "2019-06-04T08:00:45Z")

</div>

Watcherの実行時にAction句でIndexを作成しているのですが、 この時、作成される日付に応じて、Index名を変える（＝Watcherが実行されるたびに新しいIndexを作成する）ことができないでしょうか。 具体的にやりたいこととしては、 毎月月初にWatcherを実行し、実行日の前月の年月がIndex名の末尾に付記されるようにしたいです。 例: 6月1日にWatcherが実行され、watcher\_201905という…

---

## [Statistical Process Charts in Kibana](https://discuss.elastic.co/t/statistical-process-charts-in-kibana/160536)

<div class="topic-metadata">

**Author:** [@mubarak\_shaik](https://discuss.elastic.co/u/mubarak_shaik)\
**Replies:** 4\
**Last updated:** [December 13, 2018, 9:04am UTC](https://discuss.elastic.co/t/statistical-process-charts-in-kibana/160536 "2018-12-13T09:04:01Z")

</div>

Hi , Can i create my own customize charts in Kibana. Like some statistical Process Charts : P Charts , X & R Charts , U - Charts etc.... Is possible ?

---

## [Joining time-series data to calculate differences](https://discuss.elastic.co/t/joining-time-series-data-to-calculate-differences/37778)

<div class="topic-metadata">

**Author:** [@rkrombho](https://discuss.elastic.co/u/rkrombho)\
**Replies:** 4\
**Last updated:** [December 25, 2015, 6:43pm UTC](https://discuss.elastic.co/t/joining-time-series-data-to-calculate-differences/37778 "2015-12-25T18:43:23Z")

</div>

Hi All, My documents that I index in ES look conceptually similar to this: { "city" : "blah blah", "country" : "blah blah", "temperature" : "12.0", "measureDate": "2015-11-29T11:00:00.000Z" ... } Note: There ca…

---

## [logstash Handling exception: io.netty.handler.codec.DecoderException:](https://discuss.elastic.co/t/logstash-handling-exception-io-netty-handler-codec-decoderexception/342054)

<div class="topic-metadata">

**Author:** [@zuoseven](https://discuss.elastic.co/u/zuoseven)\
**Replies:** 5\
**Last updated:** [September 1, 2023, 5:54am UTC](https://discuss.elastic.co/t/logstash-handling-exception-io-netty-handler-codec-decoderexception/342054 "2023-09-01T05:54:15Z")

</div>

Handling exception: io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Empty server certificate chain (caused by: javax.net.ssl.SSLHandshakeException: Empty server certificate chain) \[2023-08-3…

---

## [Elasticsearch returns 10000 rows even when only ~100 documents are relevant](https://discuss.elastic.co/t/elasticsearch-returns-10000-rows-even-when-only-100-documents-are-relevant/332425)

<div class="topic-metadata">

**Author:** [@bonyolult](https://discuss.elastic.co/u/bonyolult)\
**Replies:** 5\
**Last updated:** [May 23, 2023, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-10000-rows-even-when-only-100-documents-are-relevant/332425 "2023-05-23T13:00:25Z")

</div>

Hello, i need some help with the following issue. I run wildcard queries on an index in Kibana Dev Tools. If i run one query at a time it returns only the relevant hits. If the queries are run paralell (2 browser tabs),…

---

## [Metricbeat - unable to retrieve license information from license server no available connection](https://discuss.elastic.co/t/metricbeat-unable-to-retrieve-license-information-from-license-server-no-available-connection/327113)

<div class="topic-metadata">

**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\
**Replies:** 5\
**Last updated:** [March 15, 2023, 5:50pm UTC](https://discuss.elastic.co/t/metricbeat-unable-to-retrieve-license-information-from-license-server-no-available-connection/327113 "2023-03-15T17:50:05Z")

</div>

This group has always been helpful and hopefully they can help me again. We created a new cluster and installed 8.6 We have a 3 nodes cluster for Elasticsearch, 2 Logstash and 2 Kibana. We completed the configuring in…

---

## [Autodiscover does not collect prometheus metrics](https://discuss.elastic.co/t/autodiscover-does-not-collect-prometheus-metrics/218450)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 5\
**Last updated:** [March 4, 2020, 7:19am UTC](https://discuss.elastic.co/t/autodiscover-does-not-collect-prometheus-metrics/218450 "2020-03-04T07:19:16Z")

</div>

I have exposed prometheus formatted metrics on several pods, using the prometheus module and listing each service separately works well, but I can not get autodiscover working. Using debug logging for all modules, I can …

---

## [Metricbeat Index turns red every hours](https://discuss.elastic.co/t/metricbeat-index-turns-red-every-hours/99004)

<div class="topic-metadata">

**Author:** [@marcelwolf](https://discuss.elastic.co/u/marcelwolf)\
**Replies:** 5\
**Last updated:** [September 1, 2017, 7:40am UTC](https://discuss.elastic.co/t/metricbeat-index-turns-red-every-hours/99004 "2017-09-01T07:40:03Z")

</div>

I run a 2 Node elasticsearch 5.5.1 cluster that holds a metricbeat index. Every about three hour the index from metricbeat turns red. The cluster status: { "cluster\_name": "elasticsearch", "status": "red", "timed…

---

## [Ping time rate](https://discuss.elastic.co/t/ping-time-rate/49854)

<div class="topic-metadata">

**Author:** [@Fox000](https://discuss.elastic.co/u/Fox000)\
**Replies:** 5\
**Last updated:** [May 12, 2016, 8:40pm UTC](https://discuss.elastic.co/t/ping-time-rate/49854 "2016-05-12T20:40:22Z")

</div>

Could you please what is best ping time rate between elastic search vm and application?

---

## [Collecting syslog from several different vendors](https://discuss.elastic.co/t/collecting-syslog-from-several-different-vendors/273497)

<div class="topic-metadata">

**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\
**Replies:** 2\
**Last updated:** [May 21, 2021, 3:39am UTC](https://discuss.elastic.co/t/collecting-syslog-from-several-different-vendors/273497 "2021-05-21T03:39:44Z")

</div>

Hello. We have got an task of setting up an Elasticstack server that collects as a start syslog from different vendors in their environment, visualize it in Kibana and forward the syslogs to a CERT department As a sta…

---

## [\[Django Python\] SERVER\_TIMEOUT](https://discuss.elastic.co/t/django-python-server-timeout/171855)

<div class="topic-metadata">

**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\
**Replies:** 2\
**Last updated:** [March 12, 2019, 9:52am UTC](https://discuss.elastic.co/t/django-python-server-timeout/171855 "2019-03-12T09:52:01Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: Ver…

---

## [NoClassDefFoundError](https://discuss.elastic.co/t/noclassdeffounderror/73563)

<div class="topic-metadata">

**Author:** [@inatoff](https://discuss.elastic.co/u/inatoff)\
**Replies:** 2\
**Last updated:** [February 3, 2017, 6:31pm UTC](https://discuss.elastic.co/t/noclassdeffounderror/73563 "2017-02-03T18:31:52Z")

</div>

dear Community. I have a problem - when I am trying to put data to ES using Logstash I get this error, I am using ingest\_attachment plugin: java.lang.NoClassDefFoundError: org/apache/james/mime4j/codec/DecodeMonitor at…

---

## [How to download or install Watcher?](https://discuss.elastic.co/t/how-to-download-or-install-watcher/28344)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 2:08am UTC](https://discuss.elastic.co/t/how-to-download-or-install-watcher/28344 "2015-09-01T02:08:44Z")

</div>

Hi All, first to use watcher, I has installed License plugin and enabled shield, I cannot find out 'watcher' install file, someone or sales can tell? BTW, how to extend my License (expiry in two days). Watcher seems …

---

## [Can you search for swagger files](https://discuss.elastic.co/t/can-you-search-for-swagger-files/221322)

<div class="topic-metadata">

**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Replies:** 2\
**Last updated:** [March 2, 2020, 8:46pm UTC](https://discuss.elastic.co/t/can-you-search-for-swagger-files/221322 "2020-03-02T20:46:54Z")

</div>

Hey team, At confoo MTL here. An attendee has this question on sitesearch. We want to ingest swagger and markdown files in our developer portal and use elastic to enable searching. Is that possible? smacdona@adobe.com …

---

## [Elasticsearch cross-index query with aggregations](https://discuss.elastic.co/t/elasticsearch-cross-index-query-with-aggregations/249100)

<div class="topic-metadata">

**Author:** [@ArtemSavelev](https://discuss.elastic.co/u/ArtemSavelev)\
**Replies:** 1\
**Last updated:** [September 26, 2020, 11:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cross-index-query-with-aggregations/249100 "2020-09-26T23:22:10Z")

</div>

I use: Elasticsearch 7.7 , Kibana 7.7 For example, lets take two indexes: User index with simple mapping: PUT /user\_index { "mappings": { "properties": { "user\_id": { "type": "text" }, "user\_phone…

---

## [Elasticsearch support for ceph storage](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 1\
**Last updated:** [August 17, 2019, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-support-for-ceph-storage/195551 "2019-08-17T19:20:04Z")

</div>

Hi, Does elasticsearch support ceph storage? Are there any tests of elasticsearch conducted on ceph wrt functionality, performance? Thanks, Shivani

---

## [Searching with Elasticsearch.Net](https://discuss.elastic.co/t/searching-with-elasticsearch-net/21563)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 7\
**Last updated:** [January 14, 2015, 2:04am UTC](https://discuss.elastic.co/t/searching-with-elasticsearch-net/21563 "2015-01-14T02:04:12Z")

</div>

Hi All, I would like to use Elasticsearch.Net (NEST requires types and I do not want strong types) to do a simple \_all term search. I can do this using the plugin elasticsearch head and I retrieve the appropriate…

---

## [Parsing data presented in the form of a table](https://discuss.elastic.co/t/parsing-data-presented-in-the-form-of-a-table/273143)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 8\
**Last updated:** [June 30, 2021, 9:58am UTC](https://discuss.elastic.co/t/parsing-data-presented-in-the-form-of-a-table/273143 "2021-06-30T09:58:12Z")

</div>

Hello team. More and more often you have to work with logos that come to logstash in the form of a table: Network Management Card AOS v3.7.3 Symmetra APP v1.1.2 Date Time Name Contact Location System IP 23.0…

---

## [Merge two urls json at one doc](https://discuss.elastic.co/t/merge-two-urls-json-at-one-doc/183707)

<div class="topic-metadata">

**Author:** [@igor.alvarez.lanit](https://discuss.elastic.co/u/igor.alvarez.lanit)\
**Replies:** 6\
**Last updated:** [June 3, 2019, 10:37am UTC](https://discuss.elastic.co/t/merge-two-urls-json-at-one-doc/183707 "2019-06-03T10:37:20Z")

</div>

Hi, I use http\_poller imput logstash but i have two URLs and this create two docs.... I want to create only one doc with all fields of this urls, its is possible? input { http\_poller { urls =\> { station\_information…

---

## [About segment merge](https://discuss.elastic.co/t/about-segment-merge/100299)

<div class="topic-metadata">

**Author:** [@elton](https://discuss.elastic.co/u/elton)\
**Replies:** 6\
**Last updated:** [September 13, 2017, 9:26am UTC](https://discuss.elastic.co/t/about-segment-merge/100299 "2017-09-13T09:26:02Z")

</div>

Hello, I have a heavily indexed elasticsearch cluster, about 20K lines per second, and one index per day. Each index has about 300 segments. For example, segment info of some index (2017-08-19) is partially list below: …

---

## [Curator 3.5.1 Snapshot issue](https://discuss.elastic.co/t/curator-3-5-1-snapshot-issue/77789)

<div class="topic-metadata">

**Author:** [@Robsi](https://discuss.elastic.co/u/Robsi)\
**Replies:** 6\
**Last updated:** [March 14, 2017, 1:59pm UTC](https://discuss.elastic.co/t/curator-3-5-1-snapshot-issue/77789 "2017-03-14T13:59:06Z")

</div>

HI, I am using Curator version 3.5.1 and we are trying to set this up on an old Elasticsearch Version 1.1.2. When I run the following (with --dry-run): curator --dry-run --host 127.0.0.1 snapshot --repository Elasticse…

---

## [VMWare Horizon Syslog](https://discuss.elastic.co/t/vmware-horizon-syslog/231752)

<div class="topic-metadata">

**Author:** [@ntwrk80](https://discuss.elastic.co/u/ntwrk80)\
**Replies:** 3\
**Last updated:** [May 9, 2020, 5:03am UTC](https://discuss.elastic.co/t/vmware-horizon-syslog/231752 "2020-05-09T05:03:30Z")

</div>

I'm new to logstash and of course one of the first log sources I try to bring in is a weird one. The server is a VMWare Horizon ID server and it's sending some very weird timestamps. 2020.05.129 12:05:360 \[hc\] INFO: pas…

---

## [Using json-input and unable to access the unique count result](https://discuss.elastic.co/t/using-json-input-and-unable-to-access-the-unique-count-result/125291)

<div class="topic-metadata">

**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\
**Replies:** 3\
**Last updated:** [March 23, 2018, 12:46pm UTC](https://discuss.elastic.co/t/using-json-input-and-unable-to-access-the-unique-count-result/125291 "2018-03-23T12:46:37Z")

</div>

Hello, I am running a line graph with a unique counter over time. Simple. When I use a json input to show "{ "script": "\_value - 1 " }" I get the error Courier Fetch: 10 of 30 shards failed. Note that I always use jso…

[Previous page](https://discuss.elastic.co/top.md?page=1142&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1144&per_page=50&period=all)
