# Top **URL:** https://discuss.elastic.co/top.md?page=1170&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1171 --- ## [Refresh Fields Button not available in the Latest Version of Kibana](https://discuss.elastic.co/t/refresh-fields-button-not-available-in-the-latest-version-of-kibana/266571)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 1\ **Last updated:** [March 8, 2021, 3:32pm UTC](https://discuss.elastic.co/t/refresh-fields-button-not-available-in-the-latest-version-of-kibana/266571 "2021-03-08T15:32:44Z")
Hi Team, I am using Kibana version 7.11.1. I have added some new fields to my existing index. And when I tried to refresh the fields by selecting the index patterns in Kibana, I was not able to see the Refresh fields … --- ## [Logstash Load Error - Java](https://discuss.elastic.co/t/logstash-load-error-java/104688)
**Author:** [@perkstvr](https://discuss.elastic.co/u/perkstvr)\ **Replies:** 1\ **Last updated:** [October 26, 2017, 1:57pm UTC](https://discuss.elastic.co/t/logstash-load-error-java/104688 "2017-10-26T13:57:44Z")
Can anyone help. I'm running elastic search 5.6.2 and log stash 5.6.3 (and tried 6.0.0) but I'm getting an error when trying to run log stash. Java HotSpot(TM) 64-Bit Server VM warning: Option UseParNewGC was deprecate… --- ## [1 Error: Expected one of #, input, filter, output at line 1, column 1 (byte 1) after {:level=\>:error}](https://discuss.elastic.co/t/1-error-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-level-error/51433)
**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\ **Replies:** 1\ **Last updated:** [June 1, 2016, 5:49am UTC](https://discuss.elastic.co/t/1-error-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-level-error/51433 "2016-06-01T05:49:10Z")
Hola a todos , tengo un problema , logstash funciono bien pude ver los datos en Kibana pero apague logstash y cuando lo vuelvo a correr me tira este error . Error: Expected one of #, input, filter, output at line 1,… --- ## [\[SOLVED\] - Snmp trap source : 127.0.0.1](https://discuss.elastic.co/t/solved-snmp-trap-source-127-0-0-1/50405)
**Author:** [@def](https://discuss.elastic.co/u/def)\ **Replies:** 1\ **Last updated:** [May 20, 2016, 8:15am UTC](https://discuss.elastic.co/t/solved-snmp-trap-source-127-0-0-1/50405 "2016-05-20T08:15:02Z")
Hi all, I have a question about my configuration : snmptrapd.conf authCommunity log,execute,net public forward default localhost:1062 logstash input { snmptrap { type =\> snmptrap port =\> 1062 } } filter{ r… --- ## [Logstash input/output parameters?](https://discuss.elastic.co/t/logstash-input-output-parameters/44833)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [March 18, 2016, 11:41am UTC](https://discuss.elastic.co/t/logstash-input-output-parameters/44833 "2016-03-18T11:41:21Z")
Hi, Could anydoy explain below parameters in input and output plugin of logstash? batch\_count? threads? What is the trade off for better performance? What is relation between workers and threads for one input or multip… --- ## [Kibana 4 Process Crash](https://discuss.elastic.co/t/kibana-4-process-crash/1365)
**Author:** [@airone](https://discuss.elastic.co/u/airone)\ **Replies:** 1\ **Last updated:** [May 27, 2015, 8:28am UTC](https://discuss.elastic.co/t/kibana-4-process-crash/1365 "2015-05-27T08:28:27Z")
Hello everyone I have a problem with Kibana 4, every moorning I open my browser on kibana page and I received the message "Waiting for elasticsearch is loading messages", the page don't get results, If I refresh the page… --- ## [Setup elastic-apm-agent for kafka](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 11:01pm UTC](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674 "2021-12-19T23:01:59Z")
Hey guys, I am playing around with elastic-apm-agent. The goal is to monitor kafka. I am using the agent config given to me in Kibana: java -javaagent:/root/kafka/elastic-apm-agent-1.28.1.jar \\ -Delastic.apm.service\_n… --- ## [Парсинг логов. Поиск ошибок системы или приложений в логах windows](https://discuss.elastic.co/t/windows/221032)
**Author:** [@mrbig](https://discuss.elastic.co/u/mrbig)\ **Replies:** 2\ **Last updated:** [February 27, 2020, 7:10am UTC](https://discuss.elastic.co/t/windows/221032 "2020-02-27T07:10:05Z")
Приветствую всех! Ребят версия elk stack у меня 7.4.2 Все логи собираются всё хорошо всё работает. (winlogbeat отправляет все логи в logstash) Вопрос возник как из этих логов вытащить ошибки? Если можно что нибудь в … --- ## [Metricbeat prometheus debug logging](https://discuss.elastic.co/t/metricbeat-prometheus-debug-logging/220387)
**Author:** [@chrmrn](https://discuss.elastic.co/u/chrmrn)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 10:14am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-debug-logging/220387 "2020-02-24T10:14:43Z")
I've gotten an autodiscover metricbeat for prometheus working (scraping a pod in k8s), but I keep getting the error: unable to decode response from prometheus endpoint: decoding of metric family failed: text format pars… --- ## [Append processor overwrites, doesn't append](https://discuss.elastic.co/t/append-processor-overwrites-doesnt-append/169901)
**Author:** [@drs](https://discuss.elastic.co/u/drs)\ **Replies:** 2\ **Last updated:** [February 26, 2019, 2:13am UTC](https://discuss.elastic.co/t/append-processor-overwrites-doesnt-append/169901 "2019-02-26T02:13:02Z")
I'm playing with the append processor, but it seems to be overwriting the array each time, not appending. PUT /\_ingest/pipeline/append { "description": "Append", "processors": \[ { "append": { "fiel… --- ## [Nested Aggregation On Date Differance](https://discuss.elastic.co/t/nested-aggregation-on-date-differance/137403)
**Author:** [@mohamed-assem92](https://discuss.elastic.co/u/mohamed-assem92)\ **Replies:** 2\ **Last updated:** [June 26, 2018, 1:46pm UTC](https://discuss.elastic.co/t/nested-aggregation-on-date-differance/137403 "2018-06-26T13:46:16Z")
Hello, i have data each document in it have history array like following ...... "history" : \[ { "user" : { "id" : "14", "firstName" : "user14", "lastName" : "user14", "username" : "user14", "principalType" : "u… --- ## [Couldn't extract filename from "source" field](https://discuss.elastic.co/t/couldnt-extract-filename-from-source-field/47218)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 2\ **Last updated:** [April 18, 2016, 9:25am UTC](https://discuss.elastic.co/t/couldnt-extract-filename-from-source-field/47218 "2016-04-18T09:25:56Z")
Hi, I am using Logstash 2.3.0 were I am using grok match to extract the filename from source field which was generated by default. I am using below configuration to extract the filename but I am not getting the fiel… --- ## [Using a long value as a date](https://discuss.elastic.co/t/using-a-long-value-as-a-date/4047)
**Author:** [@IvanBrusic](https://discuss.elastic.co/u/IvanBrusic)\ **Replies:** 2\ **Last updated:** [March 7, 2011, 4:32am UTC](https://discuss.elastic.co/t/using-a-long-value-as-a-date/4047 "2011-03-07T04:32:31Z")
Currently, the only format supported for the date mapping are those defined by JodaTime. Would it be possible have documents where the date fields are defined by longs (milliseconds)? In other words, storing the val… --- ## [Purge elasticsearch data older than 1month](https://discuss.elastic.co/t/purge-elasticsearch-data-older-than-1month/356909)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 4\ **Last updated:** [April 11, 2024, 2:44pm UTC](https://discuss.elastic.co/t/purge-elasticsearch-data-older-than-1month/356909 "2024-04-11T14:44:41Z")
Hi, I am running ELK on Red Hat Enterprise Linux release 8.9 (Ootpa) elasticsearch-8.13.1-1.x86\_64 logstash-8.13.1-1.x86\_64 kibana-8.13.1-1.x86\_64 filebeat-8.13.1-1.x86\_64 Is there a way to purge elasticsearch data… --- ## [Creating a sub field of GROK filter pattern](https://discuss.elastic.co/t/creating-a-sub-field-of-grok-filter-pattern/238860)
**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\ **Replies:** 4\ **Last updated:** [July 29, 2020, 6:52pm UTC](https://discuss.elastic.co/t/creating-a-sub-field-of-grok-filter-pattern/238860 "2020-07-29T18:52:00Z")
Hi Everyone, i have a logstash configuration to parse my current logs but i would like to create a sub field from my message field and that data should be parsed as a fieldname, please suggest how that is possible: For… --- ## [How to append a character to a string in elasticsearch?](https://discuss.elastic.co/t/how-to-append-a-character-to-a-string-in-elasticsearch/223778)
**Author:** [@guibvieira](https://discuss.elastic.co/u/guibvieira)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 4:14pm UTC](https://discuss.elastic.co/t/how-to-append-a-character-to-a-string-in-elasticsearch/223778 "2020-03-16T16:14:28Z")
I am attempting to write a transformation while using the \_reindex API. The idea is that I'm taking an existing index, I want to reindex it and append a number to the end of a few hash string parameters in the process (t… --- ## [Post-ML job, visualizing non-anomalous data](https://discuss.elastic.co/t/post-ml-job-visualizing-non-anomalous-data/106614)
**Author:** [@jeopardy](https://discuss.elastic.co/u/jeopardy)\ **Replies:** 1\ **Last updated:** [November 7, 2017, 2:42pm UTC](https://discuss.elastic.co/t/post-ml-job-visualizing-non-anomalous-data/106614 "2017-11-07T14:42:52Z")
Hi. Currently trying out X-pack. I successfully ran a multi-metric machine learning job for anomaly detection, and I can navigate through Anomaly Explorer and Single Metric Viewer just fine. However, I'm interested in lo… --- ## [Issue with node discovery](https://discuss.elastic.co/t/issue-with-node-discovery/105547)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 7:01am UTC](https://discuss.elastic.co/t/issue-with-node-discovery/105547 "2017-10-31T07:01:27Z")
I have a 2 node ES cluster setup for testing purpose (i know this is not recommended) everything was working fine until i increased the JVM heap to 8G for performance purpose. Now this is throwing below exception To ad… --- ## [Fuzzy search query with specification](https://discuss.elastic.co/t/fuzzy-search-query-with-specification/92918)
**Author:** [@jafferwilson](https://discuss.elastic.co/u/jafferwilson)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 12:51pm UTC](https://discuss.elastic.co/t/fuzzy-search-query-with-specification/92918 "2017-07-13T12:51:40Z")
I have stored the data in the form of names and the domain. I am trying to use the fuzzy search for searching the possible name combination related to a particular domain. But I am getting many errors even after trying h… --- ## [Curator Restore Extra Settings](https://discuss.elastic.co/t/curator-restore-extra-settings/91472)
**Author:** [@lm\_es](https://discuss.elastic.co/u/lm_es)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 4:40pm UTC](https://discuss.elastic.co/t/curator-restore-extra-settings/91472 "2017-07-05T16:40:39Z")
In the most recent curator documentation, I see that you can now add extra settings for the restore action (https://www.elastic.co/guide/en/elasticsearch/client/curator/current/restore.html#\_extra\_settings\_2). In the … --- ## [Logstash in reading files/ documents](https://discuss.elastic.co/t/logstash-in-reading-files-documents/52418)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 4\ **Last updated:** [June 14, 2016, 6:47am UTC](https://discuss.elastic.co/t/logstash-in-reading-files-documents/52418 "2016-06-14T06:47:42Z")
I would like to know if there are any ways that a logstash configuration file can read through different documents, i.e. docx, pdf, excels, and store them into elasticsearch. Great thanks in advance. --- ## [Link to Curator download for Windows is dead](https://discuss.elastic.co/t/link-to-curator-download-for-windows-is-dead/261001)
**Author:** [@akkiniras](https://discuss.elastic.co/u/akkiniras)\ **Replies:** 3\ **Last updated:** [January 14, 2021, 1:38pm UTC](https://discuss.elastic.co/t/link-to-curator-download-for-windows-is-dead/261001 "2021-01-14T13:38:46Z")
Hi, I'm trying to download 5.8.3 of Curator, but the link here is dead: https://www.elastic.co/guide/en/elasticsearch/client/curator/current/windows-zip.html (Click and you'll see a 404). Is curator dead or did I miss a… --- ## [How to reduce Metricbeat index file size?](https://discuss.elastic.co/t/how-to-reduce-metricbeat-index-file-size/330630)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 7:26pm UTC](https://discuss.elastic.co/t/how-to-reduce-metricbeat-index-file-size/330630 "2023-05-03T19:26:38Z")
Hi, How can I reduce the metricbeat index file size as it is taking more storage for per day logs, please help me. Thanks & regards, Nitin Bisht --- ## [8.2 closing connection when creating an index](https://discuss.elastic.co/t/8-2-closing-connection-when-creating-an-index/306972)
**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\ **Replies:** 5\ **Last updated:** [June 15, 2022, 12:34am UTC](https://discuss.elastic.co/t/8-2-closing-connection-when-creating-an-index/306972 "2022-06-15T00:34:43Z")
I'm building my own REST provider for 8.2 - an upgrade from one which ran on 6, but with obvious changes to the code. I created a gist which shows the code with "\<\<\<\<\<" indicating where it is failing; there is the con… --- ## [Intermittent issues with Elasticsearch. Where do I even start?](https://discuss.elastic.co/t/intermittent-issues-with-elasticsearch-where-do-i-even-start/295064)
**Author:** [@Henrik41](https://discuss.elastic.co/u/Henrik41)\ **Replies:** 5\ **Last updated:** [January 23, 2022, 6:18am UTC](https://discuss.elastic.co/t/intermittent-issues-with-elasticsearch-where-do-i-even-start/295064 "2022-01-23T06:18:27Z")
Using Magento 2.3.4 Elasticsearch 7.16.3 java 1.8.0\_312 I installed it on Ubuntu 20.04 with 2cpu and 2g RAM. /etc/default/Elasticsearch ES\_HEAP\_SIZE=1g ES\_STARTUP\_SLEEP\_TIME=5 MAX\_OPEN\_FILES=65535 MAX\_LOCKED\_MEM… --- ## [Checkpoint Firewall Logs](https://discuss.elastic.co/t/checkpoint-firewall-logs/260133)
**Author:** [@somerandomitperson](https://discuss.elastic.co/u/somerandomitperson)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 12:07am UTC](https://discuss.elastic.co/t/checkpoint-firewall-logs/260133 "2021-01-05T00:07:42Z")
This is my first experience with Elastic. I am trying to set up a Kibana dashboard and create dashboards for my Checkpoint firewall. The built in checkpoint module does not parse logs from my firewall. I have looked into… --- ## [PacketBeat fails to extract HTTP from simple PCAP](https://discuss.elastic.co/t/packetbeat-fails-to-extract-http-from-simple-pcap/103868)
**Author:** [@theetete](https://discuss.elastic.co/u/theetete)\ **Replies:** 5\ **Last updated:** [November 7, 2017, 3:42pm UTC](https://discuss.elastic.co/t/packetbeat-fails-to-extract-http-from-simple-pcap/103868 "2017-11-07T15:42:31Z")
Hi, I got trouble in extracting HTTP from my tcpdumped file All I get is one tcp stream, but if I check with Wireshark I got full HTTP streams. 2017-10-13T09:40:52Z INFO packetbeat start running. 2017-10-13T09:40:52Z … --- ## [How to force queries for very high frequency words](https://discuss.elastic.co/t/how-to-force-queries-for-very-high-frequency-words/119180)
**Author:** [@comdiv](https://discuss.elastic.co/u/comdiv)\ **Replies:** 7\ **Last updated:** [February 9, 2018, 2:21pm UTC](https://discuss.elastic.co/t/how-to-force-queries-for-very-high-frequency-words/119180 "2018-02-09T14:21:27Z")
Problem: There is very frequent word for index for example: "company" ( 6mln over 8mln total documents) It's not stop word and is indexed It's very often that users make their request with this only word and it's legal… --- ## [Grok parsing gives Unexpected outcome](https://discuss.elastic.co/t/grok-parsing-gives-unexpected-outcome/86214)
**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\ **Replies:** 7\ **Last updated:** [May 18, 2017, 12:01pm UTC](https://discuss.elastic.co/t/grok-parsing-gives-unexpected-outcome/86214 "2017-05-18T12:01:13Z")
The expected outcome is the following in each event: interface internet\_address physical\_address type grok only parses the first match, i dont really get whats going on here. here is the UNEXPECTED outcome: he… --- ## [Deleting a specific document in an index](https://discuss.elastic.co/t/deleting-a-specific-document-in-an-index/60299)
**Author:** [@Shailen](https://discuss.elastic.co/u/Shailen)\ **Replies:** 7\ **Last updated:** [September 12, 2016, 5:34pm UTC](https://discuss.elastic.co/t/deleting-a-specific-document-in-an-index/60299 "2016-09-12T17:34:57Z")
I generated 2 documents with the following curl command: curl -XPOST 'http://PICDSM020001125.intranet.barcapint.com:9200/stuckthreads/detail?pretty' -d ' { "date":"2016-09-09T14:00:00", "environment":"UAT3", "slotCount… --- ## [Searches slow down significantly for several seconds every minute with transport client](https://discuss.elastic.co/t/searches-slow-down-significantly-for-several-seconds-every-minute-with-transport-client/23240)
**Author:** [@Daryl\_Robbins](https://discuss.elastic.co/u/Daryl_Robbins)\ **Replies:** 7\ **Last updated:** [April 15, 2015, 11:44pm UTC](https://discuss.elastic.co/t/searches-slow-down-significantly-for-several-seconds-every-minute-with-transport-client/23240 "2015-04-15T23:44:21Z")
I am seeing a consistent bottleneck in requests (taking about 2+ seconds) at the same second every minute across all four of my client nodes who are connecting using the transport client from Java. These nodes are… --- ## [DateFormat in ingest pipeline](https://discuss.elastic.co/t/dateformat-in-ingest-pipeline/295567)
**Author:** [@Mukesh\_Rawat](https://discuss.elastic.co/u/Mukesh_Rawat)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 11:04am UTC](https://discuss.elastic.co/t/dateformat-in-ingest-pipeline/295567 "2022-01-27T11:04:58Z")
Hi i have created ingest pipeline to fetch custom logs, my pipeline with processor looks like below \[ { "grok": { "field": "message", "patterns": \[ "\\\\\[%{TIMESTAMP\_ISO8601:timestamp}\\\\\] %{DATA:… --- ## [There is a way to use multiple analyzers?](https://discuss.elastic.co/t/there-is-a-way-to-use-multiple-analyzers/275472)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 4:34pm UTC](https://discuss.elastic.co/t/there-is-a-way-to-use-multiple-analyzers/275472 "2021-06-09T16:34:11Z")
Hi everyone, I'm starting my way to learn and use elasticsearch alongside the "MEN" stack. And I was wondering if there is a way to use multiple parsers, I show you the section of code that I want to use: query = { … --- ## [Eorror "entity content is too long \[\] for the configured buffer limit \[104857600\]"](https://discuss.elastic.co/t/eorror-entity-content-is-too-long-for-the-configured-buffer-limit-104857600/246715)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:41am UTC](https://discuss.elastic.co/t/eorror-entity-content-is-too-long-for-the-configured-buffer-limit-104857600/246715 "2020-08-31T03:41:45Z")
When searching for large data, a log of entity content is too long \[\] for the configured buffer limit \[104857600\] occurs. I looked up and said that I can put http.max\_content\_length, but it doesn't work. I saw some art… --- ## [Painless Compile error](https://discuss.elastic.co/t/painless-compile-error/137847)
**Author:** [@RajiReddy](https://discuss.elastic.co/u/RajiReddy)\ **Replies:** 1\ **Last updated:** [June 29, 2018, 5:22pm UTC](https://discuss.elastic.co/t/painless-compile-error/137847 "2018-06-29T17:22:41Z")
HI, I am trying to get particular value from object array using painless but getting compile errors as below. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"script\_exception","reason":"compile … --- ## [Metricbeart as a windows service is too slow to start](https://discuss.elastic.co/t/metricbeart-as-a-windows-service-is-too-slow-to-start/55084)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 8:02pm UTC](https://discuss.elastic.co/t/metricbeart-as-a-windows-service-is-too-slow-to-start/55084 "2016-07-08T20:02:32Z")
On windows, there is a delay on service start. If the server CPU is running at 100% the metricbeat service will never start. Filebeat does not have this issue. Event ID 7000 The metricbeat service failed to start due t… --- ## [Elastic Agent USB Locking Feature](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323)
**Author:** [@ali.sharjeel](https://discuss.elastic.co/u/ali.sharjeel)\ **Replies:** 3\ **Last updated:** [March 10, 2023, 11:43pm UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323 "2023-03-10T23:43:53Z")
Is there any feature like we have in antivirus to lock usb devices from plugging in Elastic Agent? --- ## [Removes ::ffff: from ip address field](https://discuss.elastic.co/t/removes-from-ip-address-field/166706)
**Author:** [@Thibaut603](https://discuss.elastic.co/u/Thibaut603)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 1:09pm UTC](https://discuss.elastic.co/t/removes-from-ip-address-field/166706 "2019-02-01T13:09:51Z")
Hello, i want to remove ::ffff: from ip address field (like this) so in logstash i've made this # Removes ::ffff from IP address filter { if "winlogbeat" in \[tags\] { mutate { gsub =\> \["\[event\_data\]\[IpAddres… --- ## [Synonym file loaded successfully, but search not returning results with synonyms](https://discuss.elastic.co/t/synonym-file-loaded-successfully-but-search-not-returning-results-with-synonyms/9882)
**Author:** [@wishnaveen](https://discuss.elastic.co/u/wishnaveen)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 10:58am UTC](https://discuss.elastic.co/t/synonym-file-loaded-successfully-but-search-not-returning-results-with-synonyms/9882 "2017-06-20T10:58:41Z")
Hi, I have built index using below settings.... getClient().admin().indices().create(new CreateIndexRequest(indexName).settings(buildIndexSettings())).actionGet(); private Settings buildIndexSettings() { … --- ## [Timelion and Cardinality precision\_threshold](https://discuss.elastic.co/t/timelion-and-cardinality-precision-threshold/88734)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 3\ **Last updated:** [June 14, 2017, 4:52pm UTC](https://discuss.elastic.co/t/timelion-and-cardinality-precision-threshold/88734 "2017-06-14T16:52:04Z")
I know there is the advanced JSON input for Visualize. How do I implement the same precision\_threshold override in a Timelion Visualize? Or alternatly is there a way to set the precision\_threshold globally to a partic… --- ## [\[Solved\] Custom Logstash filter validation question](https://discuss.elastic.co/t/solved-custom-logstash-filter-validation-question/51338)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [May 31, 2016, 10:23am UTC](https://discuss.elastic.co/t/solved-custom-logstash-filter-validation-question/51338 "2016-05-31T10:23:29Z")
Hi, I have a working Logstash filter on which I want to enhance the validation; I have a config item of; config :da\_order, :validate =\> :array, :default =\> \["Destination IMSI", "Destination MSC Address", "Destina… --- ## [Kibana cannot](https://discuss.elastic.co/t/kibana-cannot/235067)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 1\ **Last updated:** [June 5, 2020, 1:09am UTC](https://discuss.elastic.co/t/kibana-cannot/235067 "2020-06-05T01:09:11Z")
I set elasticsearch and kibana at my AWS ec2 linux server. I first started elasticsearch and it was successful. I can check the website with my server:9200. After that I set kibana.yml to "server host: 0.0.0.0" / "elas… --- ## [Ruby exception occurred: undefined method \`size' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-size-for-nil-nilclass/270409)
**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\ **Replies:** 2\ **Last updated:** [April 19, 2021, 8:24pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-size-for-nil-nilclass/270409 "2021-04-19T20:24:00Z")
Hi guys, I have the next error on a ruby filter. I'd really appreciate any suggest \[2021-04-16T11:28:06,202\]\[ERROR\]\[logstash.filters.ruby \]\[main-postilion-pipeline\]\[87afa373e1d0191b4f869238d2908162c237ad31fe6074ec0a… --- ## [Table showing response and response time](https://discuss.elastic.co/t/table-showing-response-and-response-time/248435)
**Author:** [@edwardj3](https://discuss.elastic.co/u/edwardj3)\ **Replies:** 2\ **Last updated:** [September 14, 2020, 11:22am UTC](https://discuss.elastic.co/t/table-showing-response-and-response-time/248435 "2020-09-14T11:22:04Z")
Hi all, Is it possible to create a visual like below in Kibana? I have 2 fields, status code (200, 400 etc) and elapsed time which captures the response time in ms so I need to group the values into seconds. --- ## [Notify Slack action in watcher fails if message attachment contains actions](https://discuss.elastic.co/t/notify-slack-action-in-watcher-fails-if-message-attachment-contains-actions/148367)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 2\ **Last updated:** [September 17, 2018, 6:59am UTC](https://discuss.elastic.co/t/notify-slack-action-in-watcher-fails-if-message-attachment-contains-actions/148367 "2018-09-17T06:59:54Z")
Elastic cluster 6.3.2 is deployed to Elastic cloud. While trying to animate the Slack notifications sent by our watchers I have updated the message to include a link button as per Slack documentation . As a result, the … --- ## [Which is the recommended sysbse jdbc driver for logstash sybase connectivity?](https://discuss.elastic.co/t/which-is-the-recommended-sysbse-jdbc-driver-for-logstash-sybase-connectivity/94223)
**Author:** [@Axe](https://discuss.elastic.co/u/Axe)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 4:49pm UTC](https://discuss.elastic.co/t/which-is-the-recommended-sysbse-jdbc-driver-for-logstash-sybase-connectivity/94223 "2017-08-10T16:49:45Z")
I am using JConn3.1(sybase jdbc driver) which is giving error in registring plugin message.Please let me know if any one have tried using sysbase database. --- ## [How to upgrade to new version smoothly? without any data lost](https://discuss.elastic.co/t/how-to-upgrade-to-new-version-smoothly-without-any-data-lost/93279)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 2\ **Last updated:** [July 16, 2017, 4:46am UTC](https://discuss.elastic.co/t/how-to-upgrade-to-new-version-smoothly-without-any-data-lost/93279 "2017-07-16T04:46:44Z")
I install ELK 5.4.1 with RPM package last month, if I want to upgrade 5.5, is there a guide about how to do this. The ES is cluster with 3 nodes, can I upgrade the nodes one by one? --- ## [Reindexing with logstash in AWS ES service](https://discuss.elastic.co/t/reindexing-with-logstash-in-aws-es-service/35856)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 2\ **Last updated:** [February 26, 2016, 6:38am UTC](https://discuss.elastic.co/t/reindexing-with-logstash-in-aws-es-service/35856 "2016-02-26T06:38:22Z")
hi, i'm trying to use the elasticsearch input plugin to reindex some corrupted indexes per --https://gist.github.com/markwalkom/8a7201e3f6ea4354ae06 We are running AWS ES service and are running into issues using the e… --- ## [Search Request are Getting Socket Timeout](https://discuss.elastic.co/t/search-request-are-getting-socket-timeout/255014)
**Author:** [@dillibabu.mekala](https://discuss.elastic.co/u/dillibabu.mekala)\ **Replies:** 6\ **Last updated:** [November 11, 2020, 10:02am UTC](https://discuss.elastic.co/t/search-request-are-getting-socket-timeout/255014 "2020-11-11T10:02:57Z")
Hi Team, We have an index containing 365 days data. We have started reprocessing existing 1-Day data (i.e reprocessing includes-\> Insert New Data + then delete the Old data), we observed that while reprocessing is goin… --- ## [Numbers on yaxis in Timelion chart is not getting formatted as configured in kibana settings](https://discuss.elastic.co/t/numbers-on-yaxis-in-timelion-chart-is-not-getting-formatted-as-configured-in-kibana-settings/215571)
**Author:** [@ajith198](https://discuss.elastic.co/u/ajith198)\ **Replies:** 6\ **Last updated:** [January 30, 2020, 2:42am UTC](https://discuss.elastic.co/t/numbers-on-yaxis-in-timelion-chart-is-not-getting-formatted-as-configured-in-kibana-settings/215571 "2020-01-30T02:42:36Z")
I am new to Kibana and using Kibana v 7.5.0. In index pattern, I have configured impressions field as number (0,0) but in timelion chart I created, its not showing the commas in the values whereas in other bar charts, n… [Previous page](https://discuss.elastic.co/top.md?page=1169&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1171&per_page=50&period=all)