# Top **URL:** https://discuss.elastic.co/top.md?page=118&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 119 --- ## [Very slow aggregate query](https://discuss.elastic.co/t/very-slow-aggregate-query/286371)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 15\ **Last updated:** [October 15, 2021, 2:13pm UTC](https://discuss.elastic.co/t/very-slow-aggregate-query/286371 "2021-10-15T14:13:15Z")
Hi all I have 200 Gb data in Elasticsearch and when I excecute an aggregate query it takes 8 seconds. My client goes in timeout. Actually my query is like that: { "aggs": { "filtered": { "filter": { … --- ## [Semantic search with the new semantic\_text field](https://discuss.elastic.co/t/semantic-search-with-the-new-semantic-text-field/367169)
**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\ **Replies:** 12\ **Last updated:** [March 21, 2025, 8:39am UTC](https://discuss.elastic.co/t/semantic-search-with-the-new-semantic-text-field/367169 "2025-03-21T08:39:19Z")
I did some testing with Elser and after that I used the E5 model to play around with semantic search. I use the knn search to create a query on multiple embedding fields. I also looked at the retrievers to create a hybri… --- ## [Any limitations with distributed load-drivers?](https://discuss.elastic.co/t/any-limitations-with-distributed-load-drivers/107939)
**Author:** [@JohanRask](https://discuss.elastic.co/u/JohanRask)\ **Replies:** 14\ **Last updated:** [November 29, 2017, 11:43am UTC](https://discuss.elastic.co/t/any-limitations-with-distributed-load-drivers/107939 "2017-11-29T11:43:28Z")
Hi (again), We are trying to use rally to put max load on our cluster and I just want to rule out rally as a potential bottleneck for our current issue, we are unable to go above 105.000:ish docs per second on our infra… --- ## [How can I reindex the results of an aggregation into another index?](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896)
**Author:** [@Vaishnavi\_Nandakumar](https://discuss.elastic.co/u/Vaishnavi_Nandakumar)\ **Replies:** 10\ **Last updated:** [July 19, 2021, 12:58pm UTC](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896 "2021-07-19T12:58:58Z")
Hello, I'm using the 7.7.0 version of Elasticsearch. I have an aggregation query that works on the ingested data to produce the output but I am not able to re-index it. Data Context The given dataset has around 500,00… --- ## [Should I increase my amount of RAM?](https://discuss.elastic.co/t/should-i-increase-my-amount-of-ram/352214)
**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\ **Replies:** 9\ **Last updated:** [February 2, 2024, 1:57am UTC](https://discuss.elastic.co/t/should-i-increase-my-amount-of-ram/352214 "2024-02-02T01:57:22Z")
I noticed that the RAM usage percentage of my nodes is quite high. Based on these logs, should I increase the amount of RAM on my servers? The master is usually the master-01 machine, but in the log it is as master-02,… --- ## [I am un able to get any result by using divide operator in Kibana 4.3](https://discuss.elastic.co/t/i-am-un-able-to-get-any-result-by-using-divide-operator-in-kibana-4-3/43405)
**Author:** [@mrizwan](https://discuss.elastic.co/u/mrizwan)\ **Replies:** 10\ **Last updated:** [April 5, 2016, 3:43pm UTC](https://discuss.elastic.co/t/i-am-un-able-to-get-any-result-by-using-divide-operator-in-kibana-4-3/43405 "2016-04-05T15:43:33Z")
My divide operator is not working I am doing this : doc\['total calls offered'\].value/doc\['total calls abandon'\].value However, I am getting result by using add (+) operator doc\['total calls offered'\].value+doc\[… --- ## [Json load in elasticserach thru logstash](https://discuss.elastic.co/t/json-load-in-elasticserach-thru-logstash/60570)
**Author:** [@ppramanick](https://discuss.elastic.co/u/ppramanick)\ **Replies:** 20\ **Last updated:** [October 26, 2016, 8:40am UTC](https://discuss.elastic.co/t/json-load-in-elasticserach-thru-logstash/60570 "2016-10-26T08:40:33Z")
My SImple JSON FILE IS as below :- {"hello":"world", "goodnight": "moon"} configuration file in bin/logstash.conf as below :- input { file { path =\> \["/home/cloudera/Desktop/Data/LOGSTASH\_DATA/… --- ## [Why is the stack exception captured by the apm agent different from the format in the log](https://discuss.elastic.co/t/why-is-the-stack-exception-captured-by-the-apm-agent-different-from-the-format-in-the-log/231662)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 11\ **Last updated:** [June 9, 2020, 6:21am UTC](https://discuss.elastic.co/t/why-is-the-stack-exception-captured-by-the-apm-agent-different-from-the-format-in-the-log/231662 "2020-06-09T06:21:36Z")
log file format apm Span stack details I can't understand the stack information provided by apm. --- ## [Ruby error in adding millisecond to timestamp copy](https://discuss.elastic.co/t/ruby-error-in-adding-millisecond-to-timestamp-copy/145190)
**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\ **Replies:** 10\ **Last updated:** [August 22, 2018, 5:36pm UTC](https://discuss.elastic.co/t/ruby-error-in-adding-millisecond-to-timestamp-copy/145190 "2018-08-22T17:36:41Z")
Hi, There seems to be an error in my ruby script, but I have no idea what it is, as the log is showing nothing... Please help! part of config file: date { match =\> \["date", "yyyy-MM-dd HH:mm:ss.SSS"\] } grok { matc… --- ## [Metricbeat on kubernetes](https://discuss.elastic.co/t/metricbeat-on-kubernetes/112524)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 11\ **Last updated:** [December 20, 2017, 1:17am UTC](https://discuss.elastic.co/t/metricbeat-on-kubernetes/112524 "2017-12-20T01:17:22Z")
I am a novice user and just started to explore metric beats. I wanted to monitor kubernetes, right now I am using the cloud trial version. The issue is I couldn't get the data from kubernetes into the elastic cloud.Howev… --- ## [Duplicate entries in kibana from logstash](https://discuss.elastic.co/t/duplicate-entries-in-kibana-from-logstash/232470)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 9\ **Last updated:** [May 14, 2020, 3:35pm UTC](https://discuss.elastic.co/t/duplicate-entries-in-kibana-from-logstash/232470 "2020-05-14T15:35:03Z")
Hello there, Today I just realized that all my cisco vpn entries are duplicated. I double checked the code and could not find any reason. Can someone help me? Follow the pics: Really appreciate for the attention… --- ## [Filebeat Iptables Overview / No results found](https://discuss.elastic.co/t/filebeat-iptables-overview-no-results-found/181881)
**Author:** [@TheSun](https://discuss.elastic.co/u/TheSun)\ **Replies:** 12\ **Last updated:** [May 26, 2019, 9:39am UTC](https://discuss.elastic.co/t/filebeat-iptables-overview-no-results-found/181881 "2019-05-26T09:39:30Z")
20/5000 I'm new in this area. I am trying to handle the event created by iptables with ELK. It encountered an error that I could not fix. My Discover have data but Filebeat Iptables Overview report No results found. H… --- ## [Shield authentication issue](https://discuss.elastic.co/t/shield-authentication-issue/44806)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 11\ **Last updated:** [March 22, 2016, 8:48am UTC](https://discuss.elastic.co/t/shield-authentication-issue/44806 "2016-03-22T08:48:48Z")
Hi, I have Elasticsearch 2.2.0 and Kibana 4.4.2.(Marvel Plugin 2.2.0 and Sense 2.2.0 beta3) I installed Shield plugin 2.2.0 in elasticsearch and kibana When I start elasticsearch(http://localhost:9200/) and kibana (http:… --- ## [Server Spec Thoughts](https://discuss.elastic.co/t/server-spec-thoughts/43562)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 9\ **Last updated:** [March 10, 2016, 4:27am UTC](https://discuss.elastic.co/t/server-spec-thoughts/43562 "2016-03-10T04:27:15Z")
Hey all, Moving our three Elasticsearch nodes over to physical hosts and wanted to run things buy you all before purchasing. Looking at three Dell R730s w/ dual Xeon E5-2630 v3 2.4GHz, 128 GB of memory, 2 250GB OS dr… --- ## [Size parameter isn't working](https://discuss.elastic.co/t/size-parameter-isnt-working/4707)
**Author:** [@Josh\_JRG](https://discuss.elastic.co/u/Josh_JRG)\ **Replies:** 9\ **Last updated:** [June 26, 2011, 6:48pm UTC](https://discuss.elastic.co/t/size-parameter-isnt-working/4707 "2011-06-26T18:48:58Z")
The size parameter isn't working on either a query based or uri search. "hits" will give me the correct number or results (say, something like 27), but I still only get the first 10 results. I'm using the following:… --- ## [Cannot Enroll Elastic Agent to Fleet hosted on Elastic Cloud Enterprise](https://discuss.elastic.co/t/cannot-enroll-elastic-agent-to-fleet-hosted-on-elastic-cloud-enterprise/246962)
**Author:** [@hallaoui](https://discuss.elastic.co/u/hallaoui)\ **Replies:** 13\ **Last updated:** [September 6, 2020, 7:57am UTC](https://discuss.elastic.co/t/cannot-enroll-elastic-agent-to-fleet-hosted-on-elastic-cloud-enterprise/246962 "2020-09-06T07:57:56Z")
Hi All, I am trying to test Elastic Agent on my PC Windows laptop but when I run command to enroll it to Fleet I got below message error. .\\elastic-agent enroll https://ef13ea6b551540938cccfb4c482b50a0.10.30.30.204.ip.… --- ## [Document level security query causing error/no data](https://discuss.elastic.co/t/document-level-security-query-causing-error-no-data/115145)
**Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 9\ **Last updated:** [January 12, 2018, 3:28pm UTC](https://discuss.elastic.co/t/document-level-security-query-causing-error-no-data/115145 "2018-01-12T15:28:06Z")
I'm following the docs here https://www.elastic.co/guide/en/x-pack/6.1/field-and-document-access-control.html#document-level-security And I've set up a role and a user as shown in the screenshots below. I think I origi… --- ## [BulkResponse throws EOFException](https://discuss.elastic.co/t/bulkresponse-throws-eofexception/4222)
**Author:** [@jason](https://discuss.elastic.co/u/jason)\ **Replies:** 25\ **Last updated:** [April 15, 2011, 12:53am UTC](https://discuss.elastic.co/t/bulkresponse-throws-eofexception/4222 "2011-04-15T00:53:36Z")
Hi everyone, I am trying to send a bulk request to the elastic search, and I am getting an exception. Please see the code and the stacktrace below: LinkedList queue = .....//assume the queu… --- ## [How bring the browser information using logstash](https://discuss.elastic.co/t/how-bring-the-browser-information-using-logstash/149113)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 12\ **Last updated:** [September 27, 2018, 3:15pm UTC](https://discuss.elastic.co/t/how-bring-the-browser-information-using-logstash/149113 "2018-09-27T15:15:37Z")
HI Team, I have browser information in one field and how could i fetch browser version and name everything using logstash, userAgent = Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge… --- ## [Kibana doesn’t work authentication with Shield](https://discuss.elastic.co/t/kibana-doesn-t-work-authentication-with-shield/43863)
**Author:** [@munees](https://discuss.elastic.co/u/munees)\ **Replies:** 17\ **Last updated:** [March 21, 2016, 7:01am UTC](https://discuss.elastic.co/t/kibana-doesn-t-work-authentication-with-shield/43863 "2016-03-21T07:01:22Z")
I have installed and configured ELK (Elasticsearch2.2.0, Logstash2.2.2, and kibana-4.4.1-windows) and updated Elasticsearch with shield plugin to enable authentication. I have craeted new role and user in order to restri… --- ## [Elasticsearch Migration Plugin installation steps](https://discuss.elastic.co/t/elasticsearch-migration-plugin-installation-steps/103160)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 9\ **Last updated:** [October 9, 2017, 5:56am UTC](https://discuss.elastic.co/t/elasticsearch-migration-plugin-installation-steps/103160 "2017-10-09T05:56:51Z")
Cross-posting from stackoverflow In order to upgrade 2.3.z elasticsearch to 5.x, I have successfully installed elasticsearch migration plugin, but when linking to http://localhost:9200/\_plugin/elasticsearch-migration/ I… --- ## [Using hash table with filter Plugin](https://discuss.elastic.co/t/using-hash-table-with-filter-plugin/41460)
**Author:** [@miko370](https://discuss.elastic.co/u/miko370)\ **Replies:** 10\ **Last updated:** [February 17, 2016, 8:31am UTC](https://discuss.elastic.co/t/using-hash-table-with-filter-plugin/41460 "2016-02-17T08:31:13Z")
Hi. I have deployed a syslog plugin that has a set of filters that help me tag each message to the vendor or device type based on regex patterns. I am trying to avoid doing it per message, so I am thinking of something… --- ## [SIGSEGV JVM Crash](https://discuss.elastic.co/t/sigsegv-jvm-crash/322812)
**Author:** [@mafaul](https://discuss.elastic.co/u/mafaul)\ **Replies:** 18\ **Last updated:** [February 4, 2023, 5:01am UTC](https://discuss.elastic.co/t/sigsegv-jvm-crash/322812 "2023-02-04T05:01:37Z")
When using Elastic APM java agent, the JVM crashes unexpectedly. Tried using different AWS EC2 instances, happens on AMD and Graviton CPUs. Happens with JVMs with small (4GB) and large (60GB) heaps. Kibana version: 7.… --- ## [Update search results with new inserted data](https://discuss.elastic.co/t/update-search-results-with-new-inserted-data/106437)
**Author:** [@parsa](https://discuss.elastic.co/u/parsa)\ **Replies:** 12\ **Last updated:** [November 10, 2017, 2:02pm UTC](https://discuss.elastic.co/t/update-search-results-with-new-inserted-data/106437 "2017-11-10T14:02:51Z")
How can I update search results for new inserted data? What can I do for it update automatically? --- ## [Logstash with xpack and filebeat](https://discuss.elastic.co/t/logstash-with-xpack-and-filebeat/187533)
**Author:** [@markov](https://discuss.elastic.co/u/markov)\ **Replies:** 16\ **Last updated:** [June 28, 2019, 10:21am UTC](https://discuss.elastic.co/t/logstash-with-xpack-and-filebeat/187533 "2019-06-28T10:21:58Z")
hi, i am sending logs with filebeat to logstash and also i've installed xpack, i made the necessary configurations creation of the built in user editing the logstash.yml, uncomment the lines xpack.monitoring.enabled:… --- ## [Failed to log events to logstash](https://discuss.elastic.co/t/failed-to-log-events-to-logstash/234305)
**Author:** [@pchar](https://discuss.elastic.co/u/pchar)\ **Replies:** 9\ **Last updated:** [June 2, 2020, 12:50pm UTC](https://discuss.elastic.co/t/failed-to-log-events-to-logstash/234305 "2020-06-02T12:50:57Z")
Hello, I just configured ELK stack on a server and winlogbeat with sysmon on a windows 10 computer. The objective is to forward windows logs to logstash. Unfortunately, I have an issue because no logs are forwarded to… --- ## [Scheduled Watches not Triggering](https://discuss.elastic.co/t/scheduled-watches-not-triggering/162523)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 9\ **Last updated:** [January 14, 2019, 7:14pm UTC](https://discuss.elastic.co/t/scheduled-watches-not-triggering/162523 "2019-01-14T19:14:17Z")
I have 3 Scheduled Watches running on my 3-Node ES cluster. Since I took the nodes down for patching at the start of December, the watches no longer fire at 6 AM as scheduled. All three watches show the status of "Firing… --- ## [Kubernetes integration does not work on Elasticsearch/Kibana ver. 8.6.2 (SSL issue)](https://discuss.elastic.co/t/kubernetes-integration-does-not-work-on-elasticsearch-kibana-ver-8-6-2-ssl-issue/326306)
**Author:** [@tgolubic](https://discuss.elastic.co/u/tgolubic)\ **Replies:** 15\ **Last updated:** [March 2, 2023, 3:57pm UTC](https://discuss.elastic.co/t/kubernetes-integration-does-not-work-on-elasticsearch-kibana-ver-8-6-2-ssl-issue/326306 "2023-03-02T15:57:47Z")
Hello team, I have a test environment set up that hosts a 3 node k8s cluster, Elasticsearch and Kibana. ELK is installed on a separate server. ELK works without problems and the integration with Kuberentes was done acco… --- ## [Import Apache Log File from Win10 to Kibana/Logstash on Debian](https://discuss.elastic.co/t/import-apache-log-file-from-win10-to-kibana-logstash-on-debian/242948)
**Author:** [@imransarkar](https://discuss.elastic.co/u/imransarkar)\ **Replies:** 22\ **Last updated:** [August 2, 2020, 10:15am UTC](https://discuss.elastic.co/t/import-apache-log-file-from-win10-to-kibana-logstash-on-debian/242948 "2020-08-02T10:15:38Z")
Hi Everyone, I am new to Kibana, I have recently uploaded Apache Log File through Filebeat (Installed on Win10) but when I check on Kibana Discovery it is displaying only single entry of entire logfile. My Setup: File… --- ## [Performance penalty for has\_child queries](https://discuss.elastic.co/t/performance-penalty-for-has-child-queries/6794)
**Author:** [@Tim\_J](https://discuss.elastic.co/u/Tim_J)\ **Replies:** 14\ **Last updated:** [October 21, 2012, 10:25pm UTC](https://discuss.elastic.co/t/performance-penalty-for-has-child-queries/6794 "2012-10-21T22:25:33Z")
Hey folks, I'm currently working with an ES index of roughly 52 million documents. We index approximately 10-20 new docs per second. Each document is broken into two pieces and indexed as a parent/child pair. Th… --- ## [Elastic cluster "Received ban for the parent \[channel closed\]", Apache Metron "listener timeout after waiting for"](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 13\ **Last updated:** [December 14, 2020, 12:16pm UTC](https://discuss.elastic.co/t/elastic-cluster-received-ban-for-the-parent-channel-closed-apache-metron-listener-timeout-after-waiting-for/258535 "2020-12-14T12:16:32Z")
Hello, we using ES cluster with 3 nodes, each datanode. We faced with problem that sometimes we can't write into our cluster using Apache Metron : java.io.IOException: listener timeout after waiting for \[60000\] ms at or… --- ## [【HELP】All shards failed regularly](https://discuss.elastic.co/t/help-all-shards-failed-regularly/211045)
**Author:** [@weiwei107](https://discuss.elastic.co/u/weiwei107)\ **Replies:** 11\ **Last updated:** [December 10, 2019, 7:38am UTC](https://discuss.elastic.co/t/help-all-shards-failed-regularly/211045 "2019-12-10T07:38:53Z")
Hi, our ES broke down automatically after running for a few days. We had to delete the indices first, then restart it to make it work normally again. But the problem still occurred after a few days. Would really apprecia… --- ## [Update Existing Log Via Logstash](https://discuss.elastic.co/t/update-existing-log-via-logstash/274796)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 17\ **Last updated:** [June 4, 2021, 6:49pm UTC](https://discuss.elastic.co/t/update-existing-log-via-logstash/274796 "2021-06-04T18:49:05Z")
I want to update an existing document in Elasticsearch based on certain conditions. However, I am facing some errors. Here is my filter plugin configuration filter { json { source =\> "message" } if \[baseValueUnitA… --- ## [Es-5.0.0. range query for string field](https://discuss.elastic.co/t/es-5-0-0-range-query-for-string-field/66331)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 11\ **Last updated:** [November 17, 2016, 9:24am UTC](https://discuss.elastic.co/t/es-5-0-0-range-query-for-string-field/66331 "2016-11-17T09:24:44Z")
Hi, I want to do query on ES. I use ES-5.0.0. AND Kibana-5.0.0. My mapping: PUT titub2/ihale/\_mapping { "properties": { "Fiyat" : { "type": "string" } } } and my query: GET titub2/ihale/\_search… --- ## [Troubles with active directory user authentication](https://discuss.elastic.co/t/troubles-with-active-directory-user-authentication/287755)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 10\ **Last updated:** [November 1, 2021, 4:21am UTC](https://discuss.elastic.co/t/troubles-with-active-directory-user-authentication/287755 "2021-11-01T04:21:20Z")
I have trial license Elasticsearch node, and i want to integrate it to use Active directory authentication Here's snippet from my Elasticsearch.yml file xpack: security: enabled: true transport: ssl: … --- ## [Not able to configure Alerts in Kibana](https://discuss.elastic.co/t/not-able-to-configure-alerts-in-kibana/274533)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 19\ **Last updated:** [June 1, 2021, 5:00pm UTC](https://discuss.elastic.co/t/not-able-to-configure-alerts-in-kibana/274533 "2021-06-01T17:00:22Z")
Hi, I'm using a docker compose file for ELK setup and using the latest version (above 7) for kibana. Now I set the xpack.encryptedSavedObjects.encryptionKey parameter in the kibana.yml so that i can use the alert and a… --- ## [Is there a mistake?](https://discuss.elastic.co/t/is-there-a-mistake/122102)
**Author:** [@Bakkali\_Amine](https://discuss.elastic.co/u/Bakkali_Amine)\ **Replies:** 19\ **Last updated:** [March 2, 2018, 11:41am UTC](https://discuss.elastic.co/t/is-there-a-mistake/122102 "2018-03-02T11:41:41Z")
is there something wrong with this config : input { file { type =\> "wazuh-alerts" path =\> "/var/ossec/logs/alerts/alerts.json" codec =\> "json" } beats { port =\> 5044 type =\> "apache" } } filter { if \[… --- ## [Linear growth of index size](https://discuss.elastic.co/t/linear-growth-of-index-size/170723)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 10\ **Last updated:** [March 5, 2019, 1:30pm UTC](https://discuss.elastic.co/t/linear-growth-of-index-size/170723 "2019-03-05T13:30:20Z")
To test the growth of index compared to ingested data, we made 1 million calls to insert the same document in an index. We observed linear growth in index size. The query to load the docs was: curl -X POST “http://… --- ## [Gsub not working](https://discuss.elastic.co/t/gsub-not-working/100176)
**Author:** [@Charlotte\_EGM](https://discuss.elastic.co/u/Charlotte_EGM)\ **Replies:** 10\ **Last updated:** [September 12, 2017, 12:53pm UTC](https://discuss.elastic.co/t/gsub-not-working/100176 "2017-09-12T12:53:43Z")
Hello, I'm trying to remove \[\] from my data as it is not supported in Kibana. Generally, I'm doing it very well with gsub (with http input). Now I'm using rabbitmq input and gsub is not working. I can't figure out why… --- ## [Transfering logs from a namespace to another](https://discuss.elastic.co/t/transfering-logs-from-a-namespace-to-another/243477)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 9\ **Last updated:** [August 4, 2020, 12:46pm UTC](https://discuss.elastic.co/t/transfering-logs-from-a-namespace-to-another/243477 "2020-08-04T12:46:29Z")
Hello, After a lot of testing, I have a complete stack that works with, in the same namespace: nginx, Filebeat, Logstash, ES, Kibana. Now, I try to run these same components but spread over two different namespaces: n… --- ## [Transform index is not updating the records in destination index in batch process](https://discuss.elastic.co/t/transform-index-is-not-updating-the-records-in-destination-index-in-batch-process/230626)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 11\ **Last updated:** [May 10, 2020, 9:53am UTC](https://discuss.elastic.co/t/transform-index-is-not-updating-the-records-in-destination-index-in-batch-process/230626 "2020-05-10T09:53:53Z")
I have created transorm index in kibana with aggregations. The records are updated to destination index. I have updated the frequesncy as 10m and started the transform as below. POST \_transform/test-transform/\_update … --- ## [How to embed kibana dashboard in html code?](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-in-html-code/312597)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 9\ **Last updated:** [August 29, 2022, 9:14am UTC](https://discuss.elastic.co/t/how-to-embed-kibana-dashboard-in-html-code/312597 "2022-08-29T09:14:10Z")
I'm trying to embed kibana dashboard in html code I followed this forum discussion xpack.security.sameSiteCookies: None added this part in kibana.yml file and restarted the kibana service after doing this my kibana … --- ## [Can't get AD ldap to work](https://discuss.elastic.co/t/cant-get-ad-ldap-to-work/249174)
**Author:** [@Jay9x](https://discuss.elastic.co/u/Jay9x)\ **Replies:** 9\ **Last updated:** [September 21, 2020, 7:26pm UTC](https://discuss.elastic.co/t/cant-get-ad-ldap-to-work/249174 "2020-09-21T19:26:01Z")
Keep getting this error in the elasticsearch.log. Authentication to realm ldap failed - authenticate failed (Caused by LDAPException(resultCode=49 (invalid credentials), diagnosticMessage='80090308: LdapErr: DSID-0C0904… --- ## [Need help in using logstash with grok and fingerprint](https://discuss.elastic.co/t/need-help-in-using-logstash-with-grok-and-fingerprint/201109)
**Author:** [@Nara725](https://discuss.elastic.co/u/Nara725)\ **Replies:** 9\ **Last updated:** [October 3, 2019, 9:50pm UTC](https://discuss.elastic.co/t/need-help-in-using-logstash-with-grok-and-fingerprint/201109 "2019-10-03T21:50:30Z")
Hi, I'm new to logstash and i have the below requirement: My logs look like below and i dont want to send all 3 lines to Kibana, instead want to send only one line for a given time range. \[2019-09-25 17:17:33.153\] \[lo… --- ## [How to configure kibana to see data from winlogbeat](https://discuss.elastic.co/t/how-to-configure-kibana-to-see-data-from-winlogbeat/100234)
**Author:** [@yolena.mora](https://discuss.elastic.co/u/yolena.mora)\ **Replies:** 9\ **Last updated:** [September 12, 2017, 8:37pm UTC](https://discuss.elastic.co/t/how-to-configure-kibana-to-see-data-from-winlogbeat/100234 "2017-09-12T20:37:55Z")
Hi! I need your help as possible you can! I just want to see the data from winlogbeat but I'm using logstash to filter the data to sending to Elasticsearch and finally see it in kibana, but this is what happens when I o… --- ## [Index name must be lowercase after upgrade to 7.9.2](https://discuss.elastic.co/t/index-name-must-be-lowercase-after-upgrade-to-7-9-2/251433)
**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\ **Replies:** 10\ **Last updated:** [October 12, 2020, 1:10pm UTC](https://discuss.elastic.co/t/index-name-must-be-lowercase-after-upgrade-to-7-9-2/251433 "2020-10-12T13:10:25Z")
Hello, Does anybody know - is it possible to transform index name to lowercase in APM config file? Started to getting warning after apm upgrade to latest version: WARN \[elasticsearch\] elasticsearch/client.go:407 Canno… --- ## [Elasticsearch SSL/TLS PKI realm setup](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 13\ **Last updated:** [March 9, 2021, 1:18am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790 "2021-03-09T01:18:45Z")
Hello, I am trying to setup PKI realm on my onpremise ELK stack on a k8s cluster and I am using helm as the package manager Elasticsearch version: 7.11.1 I have created an organization signed server certificate, using… --- ## [Value Mapping in Kibana](https://discuss.elastic.co/t/value-mapping-in-kibana/311902)
**Author:** [@saif.khan](https://discuss.elastic.co/u/saif.khan)\ **Replies:** 17\ **Last updated:** [August 18, 2022, 6:52am UTC](https://discuss.elastic.co/t/value-mapping-in-kibana/311902 "2022-08-18T06:52:42Z")
Hi, I'm setting up a dashboard and receiving data from prometheus through metricbeat, I'm facing problem when it comes to value mapping, in my case for "DoorStatus" i want to map the default integer values in 0 and 1 to… --- ## [Machine Learning broke somehow](https://discuss.elastic.co/t/machine-learning-broke-somehow/132100)
**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\ **Replies:** 11\ **Last updated:** [May 18, 2018, 10:14am UTC](https://discuss.elastic.co/t/machine-learning-broke-somehow/132100 "2018-05-18T10:14:46Z")
Sorry about the topic, but I honestly have no clue what is the issue. I was using Elastic stack 6.2.2, had four ML jobs and they were running fine. Then I was adding a new job, and got this error immediately when I cli… --- ## [Run time fields in Kibana VIsualizations](https://discuss.elastic.co/t/run-time-fields-in-kibana-visualizations/343567)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 9\ **Last updated:** [October 5, 2023, 3:43pm UTC](https://discuss.elastic.co/t/run-time-fields-in-kibana-visualizations/343567 "2023-10-05T15:43:35Z")
Hello, I have a couple of run time fields defined in the index mappings which calculates the difference between two time stamps in days. It works fine, and I can see the data in Kibana discover. However, if I attempt t… [Previous page](https://discuss.elastic.co/top.md?page=117&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=119&per_page=50&period=all)