# Top

**URL:** https://discuss.elastic.co/top.md?page=1188&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1189

---

## [Push logstash aggregate map as fields in final event](https://discuss.elastic.co/t/push-logstash-aggregate-map-as-fields-in-final-event/290929)

<div class="topic-metadata">

**Author:** [@Joe\_Martin](https://discuss.elastic.co/u/Joe_Martin)\
**Replies:** 3\
**Last updated:** [December 3, 2021, 8:39pm UTC](https://discuss.elastic.co/t/push-logstash-aggregate-map-as-fields-in-final-event/290929 "2021-12-03T20:39:54Z")

</div>

I am trying to use an aggregate filter to pull fields from several different but related logs into one "summary" log. There is a clear end\_of\_task event and I would like to "push"/add all of the fields in the map into t…

---

## [Lucene @timestamp rounding question](https://discuss.elastic.co/t/lucene-timestamp-rounding-question/115487)

<div class="topic-metadata">

**Author:** [@albeniz71](https://discuss.elastic.co/u/albeniz71)\
**Replies:** 3\
**Last updated:** [January 15, 2018, 8:40am UTC](https://discuss.elastic.co/t/lucene-timestamp-rounding-question/115487 "2018-01-15T08:40:42Z")

</div>

I am trying to retrive total count of todays requests. To do this, the beginning of time span sould 'today 00:00:00' and the end of time span sould 'now'. How can I specify these 2 values in lucene syntanx query box of…

---

## [Not able to load full data into elastic search by using logstash](https://discuss.elastic.co/t/not-able-to-load-full-data-into-elastic-search-by-using-logstash/47467)

<div class="topic-metadata">

**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\
**Replies:** 3\
**Last updated:** [January 8, 2017, 4:57pm UTC](https://discuss.elastic.co/t/not-able-to-load-full-data-into-elastic-search-by-using-logstash/47467 "2017-01-08T16:57:11Z")

</div>

Case1: I am using log-stash jdbc input to load data from oracle db to elastic search. But its loading some amount of records only.Its not loading all records. Example: when i run query in sql developer i am getting …

---

## [ES 1.6 - Integration test NOT in local mode (with http)](https://discuss.elastic.co/t/es-1-6-integration-test-not-in-local-mode-with-http/24434)

<div class="topic-metadata">

**Author:** [@kage](https://discuss.elastic.co/u/kage)\
**Replies:** 3\
**Last updated:** [October 1, 2015, 3:23am UTC](https://discuss.elastic.co/t/es-1-6-integration-test-not-in-local-mode-with-http/24434 "2015-10-01T03:23:20Z")

</div>

Hi, I am using your ElasticsearchIntegrationTest class to test my MR job. In 1.4.2 there was no problem to get http address from cluster. This method returned me what I needed to provide to my MR job: InetSocketAdd…

---

## [Elastic Agent Standalone Configuration Validation](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 0\
**Last updated:** [March 1, 2022, 8:49pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-validation/298562 "2022-03-01T20:49:26Z")

</div>

Hi All, I was wondering if there is a way with the Elastic Agent in standalone mode to validate a configuration? Looking at the output of the Elastic Agent process: elastic-agent help Usage: elastic-agent \[subcomm…

---

## [MultisearchBody and seq\_no\_primary\_term](https://discuss.elastic.co/t/multisearchbody-and-seq-no-primary-term/297595)

<div class="topic-metadata">

**Author:** [@Pingouin](https://discuss.elastic.co/u/Pingouin)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/multisearchbody-and-seq-no-primary-term/297595 "2022-02-18T10:44:40Z")

</div>

I am currently updating my code from High Level Rest java client to new Java client. It seems that it is no longer possible to activate "seq\_no\_primary\_term" for multi search request. With High Level REST Api, it only …

---

## [Missing Converter handling for full class name=org.postgresql.util.PGobject, simple name=PGobject](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/258645)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 0\
**Last updated:** [December 14, 2020, 8:52pm UTC](https://discuss.elastic.co/t/missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/258645 "2020-12-14T20:52:09Z")

</div>

Getting this error trying to use logstash jjdbc to extract complex objects from postgres. Converting to TEXT did not work as well \]\[WARN \]\[logstash.inputs.jdbc \]\[rivi-poc\_people\]\[ed94f8a65daf945d07d8fd7ebea8d75acad…

---

## [How elasticsearch find data corruption](https://discuss.elastic.co/t/how-elasticsearch-find-data-corruption/143624)

<div class="topic-metadata">

**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\
**Replies:** 0\
**Last updated:** [August 9, 2018, 3:56am UTC](https://discuss.elastic.co/t/how-elasticsearch-find-data-corruption/143624 "2018-08-09T03:56:52Z")

</div>

hi, all , i wonder how elasticsearch find data corruption. for example, if i have a index with a primary shard and a replica, if sometime, the replica data corrupted because of disk error, then when elasticsearch will fi…

---

## [How to Update multiple Elastic search Documents from Logstash Output Plugin](https://discuss.elastic.co/t/how-to-update-multiple-elastic-search-documents-from-logstash-output-plugin/142091)

<div class="topic-metadata">

**Author:** [@Arjun](https://discuss.elastic.co/u/Arjun)\
**Replies:** 0\
**Last updated:** [July 30, 2018, 5:21am UTC](https://discuss.elastic.co/t/how-to-update-multiple-elastic-search-documents-from-logstash-output-plugin/142091 "2018-07-30T05:21:02Z")

</div>

My logstash event have a column with array of document IDs to be update - column name :: "listOfDocumentIds". How to iterate over the array and update multiple documents in elastic search. Below is the code I used to u…

---

## [Multiple Time Frames in a Histogram](https://discuss.elastic.co/t/multiple-time-frames-in-a-histogram/20367)

<div class="topic-metadata">

**Author:** [@Phillip\_Simon](https://discuss.elastic.co/u/Phillip_Simon)\
**Replies:** 0\
**Last updated:** [October 21, 2014, 6:09pm UTC](https://discuss.elastic.co/t/multiple-time-frames-in-a-histogram/20367 "2014-10-21T18:09:48Z")

</div>

Hi, Is there a way to graph to different timeframes in one histogram? I'd like to do a comparison of data for this week vs last week. Thanks, Phil -- You received this message because you are subscribed to …

---

## [Retrieving aliases on an index with no aliases](https://discuss.elastic.co/t/retrieving-aliases-on-an-index-with-no-aliases/12350)

<div class="topic-metadata">

**Author:** [@andreasch](https://discuss.elastic.co/u/andreasch)\
**Replies:** 0\
**Last updated:** [June 10, 2013, 10:43pm UTC](https://discuss.elastic.co/t/retrieving-aliases-on-an-index-with-no-aliases/12350 "2013-06-10T22:43:22Z")

</div>

I am using version 0.90.1 and I am trying to retrieve all aliases of an existing index that has no aliases: curl -XHEAD 'http://localhost:9200/test/\_alias/\*' which results in the following error: {"error":"Ali…

---

## [Login loop and error 401 on /api/licensing/info](https://discuss.elastic.co/t/login-loop-and-error-401-on-api-licensing-info/298933)

<div class="topic-metadata">

**Author:** [@ETspielberg](https://discuss.elastic.co/u/ETspielberg)\
**Replies:** 1\
**Last updated:** [March 16, 2022, 10:44am UTC](https://discuss.elastic.co/t/login-loop-and-error-401-on-api-licensing-info/298933 "2022-03-16T10:44:53Z")

</div>

Hi everyone, I have a strange problem with kibana, which I cannot figure out. It is similar to a number of topics here (e.g. https://discuss.elastic.co/t/http-error-401-on-api-licensing-info/281542, https://discuss.elas…

---

## [Mixing up field types - can we force text to keyword?](https://discuss.elastic.co/t/mixing-up-field-types-can-we-force-text-to-keyword/171167)

<div class="topic-metadata">

**Author:** [@exocore123](https://discuss.elastic.co/u/exocore123)\
**Replies:** 1\
**Last updated:** [March 11, 2019, 3:44pm UTC](https://discuss.elastic.co/t/mixing-up-field-types-can-we-force-text-to-keyword/171167 "2019-03-11T15:44:48Z")

</div>

Could not index event to Elasticsearch. {:status=&gt;400, :action=&gt;\["index", {:\_id=&gt;"52801f35-d64d-4585-b698-5628baa8552d", :\_index=&gt;"logstash-summary-2019.03.06", :\_type=&gt;"doc", :\_routing=&gt;nil}, #&lt;LogS…

---

## [Fscrawler FATAL \[f.p.e.c.f.FsCrawler\] Fatal error received while running the crawler: \[listener timeout after waiting for \[30000\] ms\]](https://discuss.elastic.co/t/fscrawler-fatal-f-p-e-c-f-fscrawler-fatal-error-received-while-running-the-crawler-listener-timeout-after-waiting-for-30000-ms/111067)

<div class="topic-metadata">

**Author:** [@wuwo1952368901](https://discuss.elastic.co/u/wuwo1952368901)\
**Replies:** 1\
**Last updated:** [December 15, 2017, 8:53am UTC](https://discuss.elastic.co/t/fscrawler-fatal-f-p-e-c-f-fscrawler-fatal-error-received-while-running-the-crawler-listener-timeout-after-waiting-for-30000-ms/111067 "2017-12-15T08:53:11Z")

</div>

open 127.0.0.1:8080 is no working. my setting file: { "name" : "job\_name", "fs" : { "url" : "E:\\winlogbeat", "update\_rate" : "1m", "json\_support" : false, "filename\_as\_id" : false, "add\_filesize" : true, "remov…

---

## [Pricing](https://discuss.elastic.co/t/pricing/26663)

<div class="topic-metadata">

**Author:** [@ldavidson](https://discuss.elastic.co/u/ldavidson)\
**Replies:** 1\
**Last updated:** [August 1, 2015, 5:12am UTC](https://discuss.elastic.co/t/pricing/26663 "2015-08-01T05:12:27Z")

</div>

Is there a general price to run/license watcher in production or must we receive a quote? Thanks.

---

## [Create simulated data for ingestion using Rally](https://discuss.elastic.co/t/create-simulated-data-for-ingestion-using-rally/308392)

<div class="topic-metadata">

**Author:** [@lance.zukel](https://discuss.elastic.co/u/lance.zukel)\
**Replies:** 8\
**Last updated:** [July 7, 2022, 3:14am UTC](https://discuss.elastic.co/t/create-simulated-data-for-ingestion-using-rally/308392 "2022-07-07T03:14:53Z")

</div>

I would like to be able to perform the following: Have a sample templated document for ingestion Have a custom class that randomizes data to be inserted into the templated document Be able to specify the number of docu…

---

## [Logstash date format - Converting timestamp without timezone to timetamp with timezone](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426)

<div class="topic-metadata">

**Author:** [@jasoninmel](https://discuss.elastic.co/u/jasoninmel)\
**Replies:** 2\
**Last updated:** [December 3, 2020, 12:32am UTC](https://discuss.elastic.co/t/logstash-date-format-converting-timestamp-without-timezone-to-timetamp-with-timezone/257426 "2020-12-03T00:32:24Z")

</div>

I got an event timestamp field without timezone stored in Elasticsearch as follows; "open-date": "2016-05-28T00:00:00" This time is in Australia/Melbourne timezone (AEDT/AEST). I used the following filter to covert …

---

## [Elasticsearch node consuming almost 100% memory](https://discuss.elastic.co/t/elasticsearch-node-consuming-almost-100-memory/199762)

<div class="topic-metadata">

**Author:** [@n3RDY](https://discuss.elastic.co/u/n3RDY)\
**Replies:** 2\
**Last updated:** [September 17, 2019, 7:23am UTC](https://discuss.elastic.co/t/elasticsearch-node-consuming-almost-100-memory/199762 "2019-09-17T07:23:08Z")

</div>

Hi team, I am using 3 elastic search node with graylog which is running in separate host container. today I was checking some grafana board which is implemented to check elastisearch performance then I found elastisearc…

---

## [How to investigate heap usage spikes?](https://discuss.elastic.co/t/how-to-investigate-heap-usage-spikes/184538)

<div class="topic-metadata">

**Author:** [@Michael\_Logutov](https://discuss.elastic.co/u/Michael_Logutov)\
**Replies:** 2\
**Last updated:** [June 15, 2019, 7:35am UTC](https://discuss.elastic.co/t/how-to-investigate-heap-usage-spikes/184538 "2019-06-15T07:35:41Z")

</div>

We're running ES 5.5.2 and facing sporadic long GC problems. Getting GC logs and analyzing them we see two main reasons for long GC - allocation and promotion failures. Which correlates with hudge spikes of heap usage on…

---

## [Kibana not seeing filebeat index](https://discuss.elastic.co/t/kibana-not-seeing-filebeat-index/96452)

<div class="topic-metadata">

**Author:** [@Gabriel\_Tincu](https://discuss.elastic.co/u/Gabriel_Tincu)\
**Replies:** 2\
**Last updated:** [August 10, 2017, 6:29am UTC](https://discuss.elastic.co/t/kibana-not-seeing-filebeat-index/96452 "2017-08-10T06:29:43Z")

</div>

I’m trying to setup the elk stack on my machine. I have both elasticsearch and logstash outputs enabled in the filebeat yml config file, and they both seem to be doing fine. When querying the elasticsearch index on /\_cat…

---

## [Loading events from database to elasticsearch crashing](https://discuss.elastic.co/t/loading-events-from-database-to-elasticsearch-crashing/50424)

<div class="topic-metadata">

**Author:** [@ruival](https://discuss.elastic.co/u/ruival)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 4:23pm UTC](https://discuss.elastic.co/t/loading-events-from-database-to-elasticsearch-crashing/50424 "2016-07-13T16:23:49Z")

</div>

Hi all, building a proof of concept to validate log analysis by ELK. My config: elasticsearch 2.3.1 logstash 2.3.1 input { jdbc { type =\> "MonitoringBroker" jdbc\_driver\_library =\> "C:\\Oracle…

---

## [Different response for same query](https://discuss.elastic.co/t/different-response-for-same-query/7509)

<div class="topic-metadata">

**Author:** [@barnash](https://discuss.elastic.co/u/barnash)\
**Replies:** 2\
**Last updated:** [May 1, 2012, 2:56pm UTC](https://discuss.elastic.co/t/different-response-for-same-query/7509 "2012-05-01T14:56:55Z")

</div>

Hi, We are running a query using the elastic search head application and it seems like we are getting the same results but in different order. The strangest thing is that every second time we run the query, we get t…

---

## [Logstash json filter plugin values as string](https://discuss.elastic.co/t/logstash-json-filter-plugin-values-as-string/256912)

<div class="topic-metadata">

**Author:** [@nunogt](https://discuss.elastic.co/u/nunogt)\
**Replies:** 4\
**Last updated:** [November 28, 2020, 10:03pm UTC](https://discuss.elastic.co/t/logstash-json-filter-plugin-values-as-string/256912 "2020-11-28T22:03:50Z")

</div>

Hi there, Consider the following logstash json filter snippet: json { skip\_on\_invalid\_json =\> true source =\> "message\_body" target =\> "jsondoc" } which results on the following logstash…

---

## [Passing user and password from Angulat to kibana Iframe](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 8:08am UTC](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902 "2019-08-23T08:08:22Z")

</div>

hi guys , i'm new to the ELK stack , so i have an angular web application that displays iframe kibana dashboard , so my problem is that kibana asks for user and password in the application and i have already a login page…

---

## [Install ES license as config](https://discuss.elastic.co/t/install-es-license-as-config/190257)

<div class="topic-metadata">

**Author:** [@Plamen\_Iliev](https://discuss.elastic.co/u/Plamen_Iliev)\
**Replies:** 4\
**Last updated:** [July 16, 2019, 12:13pm UTC](https://discuss.elastic.co/t/install-es-license-as-config/190257 "2019-07-16T12:13:59Z")

</div>

Looking at the documentation it appears license can only be installed through the license API. In my use case it would be handy to reference the license as a setting inside elasticsearch.yaml. Essentially I would like …

---

## [Elasticsearch Hadoop - Issue reading GeoPoint as Dataset](https://discuss.elastic.co/t/elasticsearch-hadoop-issue-reading-geopoint-as-dataset/133865)

<div class="topic-metadata">

**Author:** [@brommer](https://discuss.elastic.co/u/brommer)\
**Replies:** 4\
**Last updated:** [May 31, 2018, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-issue-reading-geopoint-as-dataset/133865 "2018-05-31T06:39:25Z")

</div>

Hi everyone, I am using Elasticsearch Hadoop v. 6.2.3 with Spark 2.3.0 trying to read data from Elasticsearch as a Dataset. However, I am receiving following Exception: WARN TaskSetManager: Lost task 0.0 in stage 0.0 (…

---

## [Kibana is showing two different values for a field?](https://discuss.elastic.co/t/kibana-is-showing-two-different-values-for-a-field/87711)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 4\
**Last updated:** [June 2, 2017, 1:16pm UTC](https://discuss.elastic.co/t/kibana-is-showing-two-different-values-for-a-field/87711 "2017-06-02T13:16:31Z")

</div>

Hi, I have some data in which i am finding sum of balances from particular state. Here in the visualization it is showing some values. But i clicked on one state field TX it is showing correct value like this. I als…

---

## [Python Elasticsearch : Index mapping inconsistencies between 'es.index' and 'es.indices.create'](https://discuss.elastic.co/t/python-elasticsearch-index-mapping-inconsistencies-between-es-index-and-es-indices-create/288584)

<div class="topic-metadata">

**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\
**Replies:** 5\
**Last updated:** [November 9, 2021, 5:31am UTC](https://discuss.elastic.co/t/python-elasticsearch-index-mapping-inconsistencies-between-es-index-and-es-indices-create/288584 "2021-11-09T05:31:57Z")

</div>

I'm trying to implement a custom index mapping (my\_mapping) in Python, BUT, I do not get the expected index mapping after the python file is run! file.py ---------- my\_mapping = """ { "settings": { "number\_…

---

## [Kibana Bulk Create API Fails To Overwrite on 7.10 returning 409](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 5\
**Last updated:** [February 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123 "2021-02-08T11:21:20Z")

</div>

I have been using various scripts to create dashboards and visualizations from a template successfully on 7.5. When I try the same script on 7.10 it fails, and every visualization returns a 409 conflict error. I'm post…

---

## [Elastic query count mismatching](https://discuss.elastic.co/t/elastic-query-count-mismatching/232855)

<div class="topic-metadata">

**Author:** [@rthangaraj5](https://discuss.elastic.co/u/rthangaraj5)\
**Replies:** 5\
**Last updated:** [May 18, 2020, 12:29pm UTC](https://discuss.elastic.co/t/elastic-query-count-mismatching/232855 "2020-05-18T12:29:46Z")

</div>

Hi , we have contacts index .while querying thru java we are getting Total Hits based on the No of Hits. But we want to get the counts based on contacts count inside Hits. Here we have 4 contacts .but we are getting the…

---

## ["Cooldown" for watches](https://discuss.elastic.co/t/cooldown-for-watches/178937)

<div class="topic-metadata">

**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\
**Replies:** 5\
**Last updated:** [May 3, 2019, 3:13pm UTC](https://discuss.elastic.co/t/cooldown-for-watches/178937 "2019-05-03T15:13:22Z")

</div>

Is it possible to set some type of "cooldown" for the watches? Because if the interval is increased the reaction time would go up. So for example i want to watch a value and check if it was below a certain threshold for …

---

## [Multiple outputs for same log entry](https://discuss.elastic.co/t/multiple-outputs-for-same-log-entry/179312)

<div class="topic-metadata">

**Author:** [@duncOps](https://discuss.elastic.co/u/duncOps)\
**Replies:** 5\
**Last updated:** [May 3, 2019, 1:42pm UTC](https://discuss.elastic.co/t/multiple-outputs-for-same-log-entry/179312 "2019-05-03T13:42:49Z")

</div>

Hi folks, I've recently written a couple of email module output blocks to notify Teams / PagerDuty when errors occur in our live environment. My Logstash output looks like this: output { if "PROD" in \[log.environmen…

---

## [Postgresqlデータベースのサイズを取得](https://discuss.elastic.co/t/postgresql/122822)

<div class="topic-metadata">

**Author:** [@takeno](https://discuss.elastic.co/u/takeno)\
**Replies:** 5\
**Last updated:** [March 9, 2018, 2:29am UTC](https://discuss.elastic.co/t/postgresql/122822 "2018-03-09T02:29:52Z")

</div>

はじめまして。 最近、elasticsearchを利用し始めているのですが、postgresqlのデータベース容量を簡単に取得することができないかご存知の方はいらっしゃいませんか？ 取得はbeat(6.x)を考えており、metricbeatのpostgresqlモジュールやfilebeatのpostgresqlモジュールのマニュアルを見ましたがデータベース容量に相当する項目はなさそうでした。execbeatなどで自力で取得するしかな…

---

## [ElastAlert in pipenv](https://discuss.elastic.co/t/elastalert-in-pipenv/185974)

<div class="topic-metadata">

**Author:** [@Near](https://discuss.elastic.co/u/Near)\
**Replies:** 1\
**Last updated:** [July 1, 2019, 10:38pm UTC](https://discuss.elastic.co/t/elastalert-in-pipenv/185974 "2019-07-01T22:38:25Z")

</div>

stack exchange post I wanted to install ElastAlert, an alerting tool written in python2, inside of a pipenv in an attempt to keep applications and their requirements/ dependencies from stepping on one another while runn…

---

## [Not able to get more than 10 results in ANN search using ES 8.5.0 docker image](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429)

<div class="topic-metadata">

**Author:** [@wole](https://discuss.elastic.co/u/wole)\
**Replies:** 3\
**Last updated:** [November 9, 2022, 11:22pm UTC](https://discuss.elastic.co/t/not-able-to-get-more-than-10-results-in-ann-search-using-es-8-5-0-docker-image/318429 "2022-11-09T23:22:30Z")

</div>

Hi team, I am using the Elasticsearch 8.5.0 docker image (installed and started as explained here) to do some experimenting with ANN search. I followed this guide to perform approximate KNN search and use a POST comman…

---

## ["error":{"type":"missing\_references","references":\[{"type":"search","id":"dfd3ea60-0154-11eb-8672-4ba31b1f4ee1"}\]](https://discuss.elastic.co/t/error-type-missing-references-references-type-search-id-dfd3ea60-0154-11eb-8672-4ba31b1f4ee1/255979)

<div class="topic-metadata">

**Author:** [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\
**Replies:** 3\
**Last updated:** [November 19, 2020, 8:09pm UTC](https://discuss.elastic.co/t/error-type-missing-references-references-type-search-id-dfd3ea60-0154-11eb-8672-4ba31b1f4ee1/255979 "2020-11-19T20:09:46Z")

</div>

Hi, I'm importing a dashboard from one kibana to another kibana, While importing I'm got the error "missing\_references". Here dashboard having 8 visualizations. Here I have a doubt that, when importing the dashboard, the…

---

## [Elastic apm agent attached to java application running on JBoss 7.2.2 EAP](https://discuss.elastic.co/t/elastic-apm-agent-attached-to-java-application-running-on-jboss-7-2-2-eap/214588)

<div class="topic-metadata">

**Author:** [@tomicarsk6](https://discuss.elastic.co/u/tomicarsk6)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 6:31am UTC](https://discuss.elastic.co/t/elastic-apm-agent-attached-to-java-application-running-on-jboss-7-2-2-eap/214588 "2020-01-13T06:31:27Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.5 …

---

## [Elasticsearch php api is very slow](https://discuss.elastic.co/t/elasticsearch-php-api-is-very-slow/164263)

<div class="topic-metadata">

**Author:** [@auglkev](https://discuss.elastic.co/u/auglkev)\
**Replies:** 3\
**Last updated:** [January 16, 2019, 2:21am UTC](https://discuss.elastic.co/t/elasticsearch-php-api-is-very-slow/164263 "2019-01-16T02:21:44Z")

</div>

I'm using elasticsearch-php api version 6.0 and find it very slow to index or get a document.it always take 7-10 secs to perform a request. However when I'm using raw curl request,it only takes 100ms. I wonder why is thi…

---

## [Metricbeat 6.4.1 - config test gives false ok](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033)

<div class="topic-metadata">

**Author:** [@ariemenschneider](https://discuss.elastic.co/u/ariemenschneider)\
**Replies:** 3\
**Last updated:** [October 22, 2018, 12:20pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033 "2018-10-22T12:20:46Z")

</div>

Hi, I'm trying to set up Metricbeat dashboards in our Kibana, but I'm getting authorization failures: metricbeat setup --dashboards Loading dashboards (Kibana must be running and reachable) Exiting: Error importing Kib…

---

## [Filebeat does not set the index for logstash output even after providing index name in filebeat](https://discuss.elastic.co/t/filebeat-does-not-set-the-index-for-logstash-output-even-after-providing-index-name-in-filebeat/68537)

<div class="topic-metadata">

**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\
**Replies:** 3\
**Last updated:** [December 14, 2016, 3:13pm UTC](https://discuss.elastic.co/t/filebeat-does-not-set-the-index-for-logstash-output-even-after-providing-index-name-in-filebeat/68537 "2016-12-14T15:13:39Z")

</div>

In my filebeat.full.yml file, i have set the following configuration output.logstash: enabled: true hosts: \["localhost:5043"\] index: "testing-%{+yyyy.MM.dd}" Even after this, the index name appears as "logstash…

---

## [Update type of a field in Elasticsearch](https://discuss.elastic.co/t/update-type-of-a-field-in-elasticsearch/47964)

<div class="topic-metadata">

**Author:** [@ashwintumma](https://discuss.elastic.co/u/ashwintumma)\
**Replies:** 3\
**Last updated:** [April 21, 2016, 2:09am UTC](https://discuss.elastic.co/t/update-type-of-a-field-in-elasticsearch/47964 "2016-04-21T02:09:29Z")

</div>

I have a index in Elasticsearch, and want to update the type of a field named currentTimeStamp from long to date, so that Kibana can work on it. Following is my current output of \_mapping (Other fields have been removed …

---

## [Index nested documents separately?](https://discuss.elastic.co/t/index-nested-documents-separately/11748)

<div class="topic-metadata">

**Author:** [@Umit\_Seren](https://discuss.elastic.co/u/Umit_Seren)\
**Replies:** 3\
**Last updated:** [May 4, 2013, 1:25pm UTC](https://discuss.elastic.co/t/index-nested-documents-separately/11748 "2013-05-04T13:25:48Z")

</div>

According to the docs about nested objects those will be internally indexed as separate docs. Is there any use case where it make sense to additionally index those nested docs separately? For example I have …

---

## [How to filter log in kibana](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981)

<div class="topic-metadata">

**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 4:21pm UTC](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981 "2021-12-15T16:21:32Z")

</div>

Hi everyone, my goal is to filter this string "sudo egrep -i -r '${jndi:(ldap\[s\]?|rmi|dns):/\[^\\n\]+' /var/log" in the message of my logs This is related to the log4j issue. Thanks in advance to those who help me.

---

## [Default UTC timzone of @timestamp writing new data to older monthly index](https://discuss.elastic.co/t/default-utc-timzone-of-timestamp-writing-new-data-to-older-monthly-index/221611)

<div class="topic-metadata">

**Author:** [@fr3eze](https://discuss.elastic.co/u/fr3eze)\
**Replies:** 7\
**Last updated:** [March 13, 2020, 1:38am UTC](https://discuss.elastic.co/t/default-utc-timzone-of-timestamp-writing-new-data-to-older-monthly-index/221611 "2020-03-13T01:38:59Z")

</div>

I have a logstash configuration parsing a set of files (which are being updated daily) and overwriting same "iccid" on the monthly index. The expected behaviour from Kibana perspective, is to see a latest output every ti…

---

## [Kibana Machine Learning upload increase 100Mb](https://discuss.elastic.co/t/kibana-machine-learning-upload-increase-100mb/171061)

<div class="topic-metadata">

**Author:** [@Feldunoob](https://discuss.elastic.co/u/Feldunoob)\
**Replies:** 1\
**Last updated:** [March 6, 2019, 4:52pm UTC](https://discuss.elastic.co/t/kibana-machine-learning-upload-increase-100mb/171061 "2019-03-06T16:52:49Z")

</div>

Hello, I'm trying to find informations about ELK, mainly because i often have dumps files that are around 1Gb size. Which is why i'm currently stuck with the default files upload in Kibana wich is limited to 100 Mb. I …

---

## [Logstash-data between start and end transaction](https://discuss.elastic.co/t/logstash-data-between-start-and-end-transaction/143735)

<div class="topic-metadata">

**Author:** [@agrawal](https://discuss.elastic.co/u/agrawal)\
**Replies:** 7\
**Last updated:** [September 4, 2018, 11:21am UTC](https://discuss.elastic.co/t/logstash-data-between-start-and-end-transaction/143735 "2018-09-04T11:21:24Z")

</div>

I need to index the data between start and end transaction. I tried lots of combination. but no one worked. In logs, I want Logstash to parse the text between start and end transaction. is it possible? 2018-07-25 13:1…

---

## [Importing CSV to elasticsearch using Logstash](https://discuss.elastic.co/t/importing-csv-to-elasticsearch-using-logstash/115880)

<div class="topic-metadata">

**Author:** [@Suryakumar](https://discuss.elastic.co/u/Suryakumar)\
**Replies:** 1\
**Last updated:** [January 17, 2018, 2:56pm UTC](https://discuss.elastic.co/t/importing-csv-to-elasticsearch-using-logstash/115880 "2018-01-17T14:56:20Z")

</div>

Hi, I am trying to import a CSV file to elasticsearch using Logstash. This is my config file: input { file { path =\> \["/home/suryakumar/Sample.csv"\] start\_position =\> "beginning" } …

---

## [Loop through watcher results to create multiple actions](https://discuss.elastic.co/t/loop-through-watcher-results-to-create-multiple-actions/96827)

<div class="topic-metadata">

**Author:** [@devans](https://discuss.elastic.co/u/devans)\
**Replies:** 1\
**Last updated:** [August 14, 2017, 7:14am UTC](https://discuss.elastic.co/t/loop-through-watcher-results-to-create-multiple-actions/96827 "2017-08-14T07:14:52Z")

</div>

I’m looking to create a filesystem monitor based off of metricbeat and this sample watch. I want to perform a webhook action to create tickets in our ticketing system. However, if multiple servers/filesystems return ov…

---

## [Monitor Filebeat Activity](https://discuss.elastic.co/t/monitor-filebeat-activity/71356)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 1\
**Last updated:** [January 12, 2017, 11:16am UTC](https://discuss.elastic.co/t/monitor-filebeat-activity/71356 "2017-01-12T11:16:12Z")

</div>

Hello, I'm using filebeat to ship logs to logstash, and I want to know when it has finished shipping logs. Is there a way to check when: a) Filebeat has finished reading the log file (it's a static file, meaning it do…

---

## [Decoupling Data and indexing](https://discuss.elastic.co/t/decoupling-data-and-indexing/20674)

<div class="topic-metadata">

**Author:** [@asthanaamish](https://discuss.elastic.co/u/asthanaamish)\
**Replies:** 7\
**Last updated:** [November 12, 2014, 6:33pm UTC](https://discuss.elastic.co/t/decoupling-data-and-indexing/20674 "2014-11-12T18:33:53Z")

</div>

Hi Is there a way we can decouple data and associated mapping/indexing in Elasticsearch itself. Basically store the raw data as source( json or some other format) and various mapping/index can be used on top of th…

[Previous page](https://discuss.elastic.co/top.md?page=1187&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1189&per_page=50&period=all)
