# Top **URL:** https://discuss.elastic.co/top.md?page=1190&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1191 --- ## [Creating custom legends for Kibana visualizations](https://discuss.elastic.co/t/creating-custom-legends-for-kibana-visualizations/189409)
**Author:** [@amclaughlin](https://discuss.elastic.co/u/amclaughlin)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 2:05pm UTC](https://discuss.elastic.co/t/creating-custom-legends-for-kibana-visualizations/189409 "2019-07-09T14:05:12Z")
Good afternoon everyone! We are just getting started with our rollout of the ELK stack, and I have found, on several occasions, that it would be very beneficial for us to be able to customize the legend of a given visua… --- ## [Elasticsearch-repository-s3-plugin-doesnt-work](https://discuss.elastic.co/t/elasticsearch-repository-s3-plugin-doesnt-work/164905)
**Author:** [@22a33b154fedb6b33b85](https://discuss.elastic.co/u/22a33b154fedb6b33b85)\ **Replies:** 2\ **Last updated:** [January 20, 2019, 5:26am UTC](https://discuss.elastic.co/t/elasticsearch-repository-s3-plugin-doesnt-work/164905 "2019-01-20T05:26:17Z")
Hello The backup to s3 does not work. I am very embarrassed. I would like if there is some knowledge. Es version 6.5.0 Multi master cluster(master\*3) ・s3 bucket is open to the public. curl -X PUT localhost:9200/\_sn… --- ## [Error(Unsupported Unknown Elasticsearch version 6.1.1) during Hive and elasticsearch connectivity](https://discuss.elastic.co/t/error-unsupported-unknown-elasticsearch-version-6-1-1-during-hive-and-elasticsearch-connectivity/133657)
**Author:** [@sjain135](https://discuss.elastic.co/u/sjain135)\ **Replies:** 2\ **Last updated:** [May 31, 2018, 12:51pm UTC](https://discuss.elastic.co/t/error-unsupported-unknown-elasticsearch-version-6-1-1-during-hive-and-elasticsearch-connectivity/133657 "2018-05-31T12:51:22Z")
Hi All, I would like to push data into elastic search using hive. I am creating an external table using "org.elasticsearch.hadoop.hive.EsStorageHandler". When I am trying to insert data in this table, I am getting error… --- ## [Allow a user to filter and drill down Kibana widgets](https://discuss.elastic.co/t/allow-a-user-to-filter-and-drill-down-kibana-widgets/86921)
**Author:** [@Riccardone](https://discuss.elastic.co/u/Riccardone)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 3:56pm UTC](https://discuss.elastic.co/t/allow-a-user-to-filter-and-drill-down-kibana-widgets/86921 "2017-05-26T15:56:30Z")
Hi, I have replicated some data in an ElasticSearch index. I'm going to create one or more widgets and then embed them in an existing web application. My question is: To allow the user to enter terms for filtering, do… --- ## [Triggering a command in logstash](https://discuss.elastic.co/t/triggering-a-command-in-logstash/69001)
**Author:** [@ilalorel](https://discuss.elastic.co/u/ilalorel)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 10:26am UTC](https://discuss.elastic.co/t/triggering-a-command-in-logstash/69001 "2016-12-14T10:26:52Z")
Hello, I'm fairly new to the ELK stack (and also pretty new to Linux) . I have 2 servers 1 contains my ELK stack the other one is a honeypot with beats on it. Now my question, is it possible with logstash when someone co… --- ## [Kibana doesn't show any results in “Discover” tab](https://discuss.elastic.co/t/kibana-doesnt-show-any-results-in-discover-tab/32219)
**Author:** [@AjitGoel](https://discuss.elastic.co/u/AjitGoel)\ **Replies:** 2\ **Last updated:** [October 15, 2015, 1:12pm UTC](https://discuss.elastic.co/t/kibana-doesnt-show-any-results-in-discover-tab/32219 "2015-10-15T13:12:13Z")
I setup elasticsearch and Kibana for indexing our application's Elmah errors. The issue is that Kibana doesn't display any data in the "Discover" tab. Current situation Elasticsearch is up and running, responds to API e… --- ## [ConnectionError: socket hang up](https://discuss.elastic.co/t/connectionerror-socket-hang-up/351009)
**Author:** [@y34rz3r0](https://discuss.elastic.co/u/y34rz3r0)\ **Replies:** 4\ **Last updated:** [February 2, 2024, 2:37pm UTC](https://discuss.elastic.co/t/connectionerror-socket-hang-up/351009 "2024-02-02T14:37:29Z")
I successfully run this docker compose locally on macOS and can work with ELK, but when running the same compose I encounter the following errors: \[2024-01-13T14:26:44.001+00:00\]\[ERROR\]\[plugins.security.authorization\]… --- ## [Can't sum bucket after composite](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184)
**Author:** [@Techinp](https://discuss.elastic.co/u/Techinp)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 3:21am UTC](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184 "2022-03-22T03:21:30Z")
Hi all, How can I sum data after composite stage? What did I do wrong? This is my query GET report-20220316/\_search { "query": { "bool": { "must": \[ { "match": { "parentId.ke… --- ## [Logstash config for grok (always get \[0\] "\_grokparsefailure")](https://discuss.elastic.co/t/logstash-config-for-grok-always-get-0-grokparsefailure/239342)
**Author:** [@chnaahmad](https://discuss.elastic.co/u/chnaahmad)\ **Replies:** 4\ **Last updated:** [July 1, 2020, 4:03am UTC](https://discuss.elastic.co/t/logstash-config-for-grok-always-get-0-grokparsefailure/239342 "2020-07-01T04:03:46Z")
Hi, I am facing a problem to parse json string in my log file; Actaully i want to parse my json string which is embeded as data={....} as you can see below in log entry. What i am usring: Elastic search : elasticsear… --- ## [Winlogbeat proxy support](https://discuss.elastic.co/t/winlogbeat-proxy-support/206151)
**Author:** [@Ixus223](https://discuss.elastic.co/u/Ixus223)\ **Replies:** 4\ **Last updated:** [November 30, 2019, 9:04am UTC](https://discuss.elastic.co/t/winlogbeat-proxy-support/206151 "2019-11-30T09:04:12Z")
Hi, I 'm currently using latest version of winlogbeat 7.4.1 to send data to an ELK stack. It works well when computer has a direct connection to internet but it doesn't with a proxy. When i add proxy parameter in winl… --- ## [Разделение elk на разные проекты](https://discuss.elastic.co/t/elk/168346)
**Author:** [@webchi](https://discuss.elastic.co/u/webchi)\ **Replies:** 1\ **Last updated:** [February 14, 2019, 8:51pm UTC](https://discuss.elastic.co/t/elk/168346 "2019-02-14T20:51:43Z")
А можно как-то имея один elk стак использовать его для разных проектов, и разделять пространство имён. Например в индексе эластиксёрч и в кибане как-то разные проекты? --- ## [Why is there no output in terminal?](https://discuss.elastic.co/t/why-is-there-no-output-in-terminal/69251)
**Author:** [@houfan](https://discuss.elastic.co/u/houfan)\ **Replies:** 4\ **Last updated:** [December 20, 2016, 7:04am UTC](https://discuss.elastic.co/t/why-is-there-no-output-in-terminal/69251 "2016-12-20T07:04:22Z")
version: logstash-2.3.4 nginx-1.8.1 here is my logstash.conf :slight\_smile: : input { \*\* file{\*\* \*\* path =\> \["/home/houfan/nginx/errorlog/ac\_api\_error.log"\]\*\* \*\* start\_position =\> "beginning"\*\* … --- ## [Elastic Tile Service - how tos](https://discuss.elastic.co/t/elastic-tile-service-how-tos/58054)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 4\ **Last updated:** [August 16, 2016, 12:14am UTC](https://discuss.elastic.co/t/elastic-tile-service-how-tos/58054 "2016-08-16T00:14:27Z")
Can someone tell me how to use the 'Elastic Tile Service' Is the configuration different than the previous tile service? Do i still use same line as before? geoip { source =\> "clientip" target =\> "geoip" database … --- ## [Kibana 8.0.0 - Unknown configuration key(s): "kibana.index"](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228)
**Author:** [@Harish619](https://discuss.elastic.co/u/Harish619)\ **Replies:** 1\ **Last updated:** [March 9, 2022, 2:48pm UTC](https://discuss.elastic.co/t/kibana-8-0-0-unknown-configuration-key-s-kibana-index/299228 "2022-03-09T14:48:43Z")
Hi Team - After i upgraded to 8.0.0 from 7.17.0 . Im getting below error. What is the alternative syntax for "kibana.index" in 8.0.0 FATAL Error: Unknown configuration key(s): "kibana.index". Check for spelling erro… --- ## [Elasticsearch bulk error - must be terminated by a newline](https://discuss.elastic.co/t/elasticsearch-bulk-error-must-be-terminated-by-a-newline/299037)
**Author:** [@kobalt](https://discuss.elastic.co/u/kobalt)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 5:20am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-error-must-be-terminated-by-a-newline/299037 "2022-03-08T05:20:41Z")
trying to use a elasticsearch bulk api. e.g. the following bulk request succeeds $ curl -X POST "localhost:9200/test/\_bulk?pretty" -H 'Content-Type: application/json' -d ' {"index":{"\_id":1}} {"foo":"foo"} {"index":{"\_i… --- ## [Showing zero count for metric visualization](https://discuss.elastic.co/t/showing-zero-count-for-metric-visualization/189618)
**Author:** [@Michiele\_Ogbagabir](https://discuss.elastic.co/u/Michiele_Ogbagabir)\ **Replies:** 1\ **Last updated:** [July 10, 2019, 12:06am UTC](https://discuss.elastic.co/t/showing-zero-count-for-metric-visualization/189618 "2019-07-10T00:06:03Z")
I am visualizing quarterly count data using a metrics visualization. Whenever the count for a quarter is zero, the data is excluded from the visualization instead of displaying zero. For example, in the below image, 2018… --- ## [Monitoring Replica Lag](https://discuss.elastic.co/t/monitoring-replica-lag/87206)
**Author:** [@Priyanka\_Talwaria](https://discuss.elastic.co/u/Priyanka_Talwaria)\ **Replies:** 1\ **Last updated:** [May 26, 2017, 7:02am UTC](https://discuss.elastic.co/t/monitoring-replica-lag/87206 "2017-05-26T07:02:11Z")
I have done elasticsearch cluster set up.One dedicated master and a replica node. I want to monitor cluster and nodes health.I want to monitor time lag in replicating data between master and slave,also can I have differe… --- ## [Query string and number with match phrase](https://discuss.elastic.co/t/query-string-and-number-with-match-phrase/42736)
**Author:** [@mendy](https://discuss.elastic.co/u/mendy)\ **Replies:** 1\ **Last updated:** [March 1, 2016, 11:23am UTC](https://discuss.elastic.co/t/query-string-and-number-with-match-phrase/42736 "2016-03-01T11:23:32Z")
i have field with type string and the data is like { "extraDataTest": "my age is17 and my name is mike" } the data and the query contains string and numbers. the data could be also like "my age is 17 and my name … --- ## [Adding Uptime Monitors to a Dashboard](https://discuss.elastic.co/t/adding-uptime-monitors-to-a-dashboard/336454)
**Author:** [@mpinto](https://discuss.elastic.co/u/mpinto)\ **Replies:** 5\ **Last updated:** [July 5, 2023, 9:36pm UTC](https://discuss.elastic.co/t/adding-uptime-monitors-to-a-dashboard/336454 "2023-07-05T21:36:19Z")
Hello, I am creating a few dashboards to monitor our solutions' logs and we have a separate "dashboard" with all our Uptime Monitors. Is there a way to incorporate these uptime monitors in the dashboards we're building? … --- ## [Kibana\[5.6\] Using API endpoints to save objects](https://discuss.elastic.co/t/kibana-5-6-using-api-endpoints-to-save-objects/147044)
**Author:** [@Vinay\_Kumar](https://discuss.elastic.co/u/Vinay_Kumar)\ **Replies:** 5\ **Last updated:** [September 5, 2018, 8:30am UTC](https://discuss.elastic.co/t/kibana-5-6-using-api-endpoints-to-save-objects/147044 "2018-09-05T08:30:02Z")
Kibana version: 5.6 Hi, My issue is related to the REST API endpoints. Currently, I am able to save my dashboards using the GUI of Kibana in json format in my local drive. I wanted to enquire whether it is possible f… --- ## [Where are the logs of beats- Filebeat, Metricbeat & packetbeat located in an elk server?](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851)
**Author:** [@JayArthur](https://discuss.elastic.co/u/JayArthur)\ **Replies:** 5\ **Last updated:** [April 28, 2017, 4:57am UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851 "2017-04-28T04:57:58Z")
10:46am Hey Elastic... I got a little problem I'd like you to help me fix.. I have an ELK server hosted on Centos 7 and I'm pulling logs from 2 Debian machines. From the server, where would I retrieve logs for filebeat, … --- ## [ECK update instructions are incomplete](https://discuss.elastic.co/t/eck-update-instructions-are-incomplete/253830)
**Author:** [@data\_smith](https://discuss.elastic.co/u/data_smith)\ **Replies:** 8\ **Last updated:** [November 4, 2020, 4:07pm UTC](https://discuss.elastic.co/t/eck-update-instructions-are-incomplete/253830 "2020-11-04T16:07:06Z")
The only update instructions for ECK that i've found are just kubectl apply -f and you're good to go. It's not that simple. For example I install the operator in specific namespaces because I don't want the operator… --- ## [Logstash with docker-compose exists after some time running](https://discuss.elastic.co/t/logstash-with-docker-compose-exists-after-some-time-running/221284)
**Author:** [@franzisk](https://discuss.elastic.co/u/franzisk)\ **Replies:** 0\ **Last updated:** [February 27, 2020, 4:52pm UTC](https://discuss.elastic.co/t/logstash-with-docker-compose-exists-after-some-time-running/221284 "2020-02-27T16:52:59Z")
I am running Logstash with ELK stack but after some time running it just stops, besides, when connecting with Logback from Spring Bot application it always gives me: \> -WARN in net.logstash.logback.appender.Logstas… --- ## [Tried to pass multiple conf file not working](https://discuss.elastic.co/t/tried-to-pass-multiple-conf-file-not-working/138287)
**Author:** [@Krishna2](https://discuss.elastic.co/u/Krishna2)\ **Replies:** 6\ **Last updated:** [July 6, 2018, 7:00am UTC](https://discuss.elastic.co/t/tried-to-pass-multiple-conf-file-not-working/138287 "2018-07-06T07:00:58Z")
I. had passed as below to Logstash. It is not taking. I. have to pass multiple input files. to Logstash , so I had created multiple conf files as below -------I. passed like below bin/logstash -f logstash-filter\*.con… --- ## [Is it possible to use a varchar/string for jdbc sql\_last\_value?](https://discuss.elastic.co/t/is-it-possible-to-use-a-varchar-string-for-jdbc-sql-last-value/64845)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 6\ **Last updated:** [November 8, 2016, 4:30pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-a-varchar-string-for-jdbc-sql-last-value/64845 "2016-11-08T16:30:18Z")
I've already tested the sql\_last\_value with integer and datetime type of fields in my jdbc plugin and it's working perfectly. I'm just curios, is there any possibility of using a varchar/string type of field, in orde… --- ## [Attachment Mapper and Searching](https://discuss.elastic.co/t/attachment-mapper-and-searching/32413)
**Author:** [@Ericus1](https://discuss.elastic.co/u/Ericus1)\ **Replies:** 6\ **Last updated:** [October 21, 2015, 1:38pm UTC](https://discuss.elastic.co/t/attachment-mapper-and-searching/32413 "2015-10-21T13:38:56Z")
So I'm fairly new to Elasticsearch and am having trouble trying to get attachments to work. The system I'm working with pretty much does everything through the Java API and while I've been able to figure out most stuff … --- ## [Elasticsearch 8 Client is giving error The following method did not exist: 'org.elasticsearch.client.RequestOptions$Builder org.elasticsearch.client.RequestOptions$Builder.removeHeader(java.lang.String)'](https://discuss.elastic.co/t/elasticsearch-8-client-is-giving-error-the-following-method-did-not-exist-org-elasticsearch-client-requestoptions-builder-org-elasticsearch-client-requestoptions-builder-removeheader-java-lang-string/327762)
**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\ **Replies:** 1\ **Last updated:** [March 15, 2023, 9:50pm UTC](https://discuss.elastic.co/t/elasticsearch-8-client-is-giving-error-the-following-method-did-not-exist-org-elasticsearch-client-requestoptions-builder-org-elasticsearch-client-requestoptions-builder-removeheader-java-lang-string/327762 "2023-03-15T21:50:31Z")
Elasticsearch 8 is expecting some class RequestOptions which is present in elasticsearch-rest-client-7.6.2.jar. How I can resolve this error done exactly in a way mentioned in elastic8 docs @Bean public ElasticsearchCl… --- ## [Confluence (Server) Connector 302 Errors](https://discuss.elastic.co/t/confluence-server-connector-302-errors/258993)
**Author:** [@ekan](https://discuss.elastic.co/u/ekan)\ **Replies:** 7\ **Last updated:** [January 8, 2022, 10:21am UTC](https://discuss.elastic.co/t/confluence-server-connector-302-errors/258993 "2022-01-08T10:21:06Z")
We're having issues using the Confluence (Server) connector in Workplace Search. It starts indexing documents correctly, but at some point, it gets 302s in the form of: \[####-##-##T##:##:##.###+##:##\]\[######\]\[####\]\[conn… --- ## [Mapping store:true vs store:false](https://discuss.elastic.co/t/mapping-store-true-vs-store-false/20747)
**Author:** [@Pavel\_P](https://discuss.elastic.co/u/Pavel_P)\ **Replies:** 1\ **Last updated:** [November 15, 2014, 6:21am UTC](https://discuss.elastic.co/t/mapping-store-true-vs-store-false/20747 "2014-11-15T06:21:11Z")
Hi, I was trying to configure the mapping for my logstash objects in the next way: "my\_type":{ "dynamic\_templates": \[{ "string\_fields": { "mapping": { "index": "no", … --- ## [Recent and Popular searches](https://discuss.elastic.co/t/recent-and-popular-searches/3772)
**Author:** [@poobah](https://discuss.elastic.co/u/poobah)\ **Replies:** 1\ **Last updated:** [January 14, 2011, 2:04pm UTC](https://discuss.elastic.co/t/recent-and-popular-searches/3772 "2011-01-14T14:04:06Z")
Hi, I'm trying to implement a feature that would list the 10 most recent searches and the 10 most popular search terms (weighted by the number of times the same term has been searched). Not sure how I can best appr… --- ## [Java api client 7.x with Elasticsearch server 8.x](https://discuss.elastic.co/t/java-api-client-7-x-with-elasticsearch-server-8-x/352369)
**Author:** [@SElasticsearch](https://discuss.elastic.co/u/SElasticsearch)\ **Replies:** 3\ **Last updated:** [February 5, 2024, 11:35am UTC](https://discuss.elastic.co/t/java-api-client-7-x-with-elasticsearch-server-8-x/352369 "2024-02-05T11:35:37Z")
We have a scenario where our application needs to connect with both 7.x and 8.x Elasticsearch server. Using Java API client 7.17.16 and it works with Elasticsearch server 7.x. Used (HttpHeaders.CONTENT\_TYPE, "applicatio… --- ## [Metricbeat OSS connects for Windows servers not for Linux](https://discuss.elastic.co/t/metricbeat-oss-connects-for-windows-servers-not-for-linux/198946)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 3\ **Last updated:** [September 11, 2019, 5:17pm UTC](https://discuss.elastic.co/t/metricbeat-oss-connects-for-windows-servers-not-for-linux/198946 "2019-09-11T17:17:43Z")
ECE 2.3 Deployment - Elastic 7.2 & Kibana 7.2 Metricbeat-OSS-7.0.0 I'm running into an issue with metricbeat-oss-7.0.0 where beats that are installed on our Windows servers report to both an Elastic-oss version as wel… --- ## [CRLF injection issue (Improper Output Neutralization for Logs) /src/lib/connectors/xhr.js 76](https://discuss.elastic.co/t/crlf-injection-issue-improper-output-neutralization-for-logs-src-lib-connectors-xhr-js-76/130325)
**Author:** [@smaeung](https://discuss.elastic.co/u/smaeung)\ **Replies:** 3\ **Last updated:** [May 3, 2018, 4:01am UTC](https://discuss.elastic.co/t/crlf-injection-issue-improper-output-neutralization-for-logs-src-lib-connectors-xhr-js-76/130325 "2018-05-03T04:01:38Z")
Hi, all we used a node project that used for elasticsearch javascript pacakge ( 14.2.2) which is the latest version. We have got security audit report by a security firm that based on elasticsearch (14.2.2) for javasc… --- ## [Registry Error Upgrading Beats, Safe to Delete Registry File?](https://discuss.elastic.co/t/registry-error-upgrading-beats-safe-to-delete-registry-file/127394)
**Author:** [@aidanhl](https://discuss.elastic.co/u/aidanhl)\ **Replies:** 3\ **Last updated:** [April 10, 2018, 4:43pm UTC](https://discuss.elastic.co/t/registry-error-upgrading-beats-safe-to-delete-registry-file/127394 "2018-04-10T16:43:49Z")
Hello, I am upgrading filebeat from version 1.0.0 to 6.2.3. I have the process just about ready to go against a group of machines, but filebeat 6.2.3 fails to start with the full error: Exiting: Could not start registr… --- ## [Rally consumes all cluster threads and crashes with small clusters](https://discuss.elastic.co/t/rally-consumes-all-cluster-threads-and-crashes-with-small-clusters/117599)
**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\ **Replies:** 3\ **Last updated:** [February 5, 2018, 8:23am UTC](https://discuss.elastic.co/t/rally-consumes-all-cluster-threads-and-crashes-with-small-clusters/117599 "2018-02-05T08:23:21Z")
Heya! Using the latest Elastic Rally, we have a ECE deployment with a 8GB cluster (so 2 assigned cores). This in turn means a low number of threads for bulk and search. We are running esrally geonames against that clust… --- ## [Need to split a field into several fields in a JSON object](https://discuss.elastic.co/t/need-to-split-a-field-into-several-fields-in-a-json-object/71418)
**Author:** [@Lahiru\_Lakshitha\_Sam](https://discuss.elastic.co/u/Lahiru_Lakshitha_Sam)\ **Replies:** 3\ **Last updated:** [January 12, 2017, 10:32pm UTC](https://discuss.elastic.co/t/need-to-split-a-field-into-several-fields-in-a-json-object/71418 "2017-01-12T22:32:19Z")
I need to split the "message": in to several fields in the same event and to remove some stuff in the "message": field Can I do this using split or mutate Need some help? - Version: Logstash 5.1.1 - Operating System: … --- ## [Logstash @timestamp field wrong?](https://discuss.elastic.co/t/logstash-timestamp-field-wrong/48627)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 3\ **Last updated:** [April 29, 2016, 5:28am UTC](https://discuss.elastic.co/t/logstash-timestamp-field-wrong/48627 "2016-04-29T05:28:59Z")
when i using syslog plugin to run logstash with my configuration , get the wrong @timestamp , it's show 2000 ??? "@timestamp" =\> "2000-04-28T08:08:24.000Z" Any help here? --- ## [Does Topbeat Also Send to UDP 25826 By Default?](https://discuss.elastic.co/t/does-topbeat-also-send-to-udp-25826-by-default/47439)
**Author:** [@nocode](https://discuss.elastic.co/u/nocode)\ **Replies:** 3\ **Last updated:** [April 15, 2016, 1:48pm UTC](https://discuss.elastic.co/t/does-topbeat-also-send-to-udp-25826-by-default/47439 "2016-04-15T13:48:07Z")
I'm learning ELK and had a setup for Topbeat (server metrics) and Filebeat going into a Logstash config over port 5000. That's working fine and I was able to load the Topbeat Dashboards, etc. I wanted to use CollectD … --- ## [Filebeat is not shipping logs](https://discuss.elastic.co/t/filebeat-is-not-shipping-logs/43876)
**Author:** [@Sudharsankotti](https://discuss.elastic.co/u/Sudharsankotti)\ **Replies:** 3\ **Last updated:** [March 9, 2016, 8:45pm UTC](https://discuss.elastic.co/t/filebeat-is-not-shipping-logs/43876 "2016-03-09T20:45:02Z")
I have configured Elasticsearch , KIbana and logstash in separate machine . While trying to config filebeat .File beat is not shipping the logs . --- ## [Aggregation & max value from doc\_count](https://discuss.elastic.co/t/aggregation-max-value-from-doc-count/250376)
**Author:** [@KRISHNAPRASAD\_HG](https://discuss.elastic.co/u/KRISHNAPRASAD_HG)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 2:04pm UTC](https://discuss.elastic.co/t/aggregation-max-value-from-doc-count/250376 "2020-10-02T14:04:10Z")
Hello, Hello, I need help for aggregation query. Query : GET index-\*/\_search { "aggs": { "genres": { "terms": { "field": "COMPONENT\_NAME", "min\_doc\_count": 5 } } }, "query": { "bool": { "filter": \[ { "r… --- ## [Get document id (\_id) inside a native script](https://discuss.elastic.co/t/get-document-id--id-inside-a-native-script/26376)
**Author:** [@jconwell](https://discuss.elastic.co/u/jconwell)\ **Replies:** 2\ **Last updated:** [July 28, 2015, 12:22am UTC](https://discuss.elastic.co/t/get-document-id--id-inside-a-native-script/26376 "2015-07-28T00:22:40Z")
I've got a native script that runs as a transform when adding a new document. I need the document id but its not passed in as part of the script params. Is there any way to get ElasticSearch to pass in the document id?… --- ## [Logstash not working with ActiveMQ](https://discuss.elastic.co/t/logstash-not-working-with-activemq/252022)
**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\ **Replies:** 4\ **Last updated:** [October 28, 2020, 5:22pm UTC](https://discuss.elastic.co/t/logstash-not-working-with-activemq/252022 "2020-10-28T17:22:53Z")
I am trying to consume a message from an ActiveMQ with the following configuration; input { jms { broker\_url =\> 'failover:(ssl://b-d5bc797b-sjd8-41d2-dfjh7-127ba48c6238-1.mq.eu-west-1.amazonaws.com:61617)?init… --- ## [Kibana visualization search only the latest value](https://discuss.elastic.co/t/kibana-visualization-search-only-the-latest-value/215594)
**Author:** [@Ashutosh\_Pachisia](https://discuss.elastic.co/u/Ashutosh_Pachisia)\ **Replies:** 4\ **Last updated:** [January 22, 2020, 12:00pm UTC](https://discuss.elastic.co/t/kibana-visualization-search-only-the-latest-value/215594 "2020-01-22T12:00:52Z")
Is there any way in kibana to search data only of the latest timestamp I have a dataset that repeats every (10min-15 min ) not fixed interval with a different set of values I want the historic data as well as the lates… --- ## [Filebeat - stalls and effectively hangs when max request size exceeded](https://discuss.elastic.co/t/filebeat-stalls-and-effectively-hangs-when-max-request-size-exceeded/178437)
**Author:** [@Kieren\_Johnstone](https://discuss.elastic.co/u/Kieren_Johnstone)\ **Replies:** 4\ **Last updated:** [May 21, 2019, 8:04am UTC](https://discuss.elastic.co/t/filebeat-stalls-and-effectively-hangs-when-max-request-size-exceeded/178437 "2019-05-21T08:04:12Z")
I'm using filebeat to send raw JSON documents (one per line) to a hosted (cloud.elastic.co) ES cluster. The max request size is not configurable server-side, and despite tweaking the batch size in the elasticsearch conf… --- ## [Curator restore index](https://discuss.elastic.co/t/curator-restore-index/132325)
**Author:** [@IMikeD](https://discuss.elastic.co/u/IMikeD)\ **Replies:** 4\ **Last updated:** [May 17, 2018, 2:41pm UTC](https://discuss.elastic.co/t/curator-restore-index/132325 "2018-05-17T14:41:09Z")
Hello, I want to use the curator to restore indexes from snapshots by template restore.yml actions: 1: action: restore description:\> - Restore index. options: repository: my\_backup skip\_repo\_fs\_check: true ignore\_empt… --- ## [User impersonation does not work with Active directory realm, but it should](https://discuss.elastic.co/t/user-impersonation-does-not-work-with-active-directory-realm-but-it-should/100774)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [September 27, 2017, 9:34am UTC](https://discuss.elastic.co/t/user-impersonation-does-not-work-with-active-directory-realm-but-it-should/100774 "2017-09-27T09:34:43Z")
hi All, I'm following up the previous topic User impersonation does not work with Active directory realm, as the lastest x-pack version 5.6.0 should support bind\_dn parameter. I tried to setup the user impersonation, b… --- ## [CorruptIndexException after node restart](https://discuss.elastic.co/t/corruptindexexception-after-node-restart/98649)
**Author:** [@Bernt\_Rostad](https://discuss.elastic.co/u/Bernt_Rostad)\ **Replies:** 4\ **Last updated:** [August 29, 2017, 8:20am UTC](https://discuss.elastic.co/t/corruptindexexception-after-node-restart/98649 "2017-08-29T08:20:06Z")
Hi, We’re in the process of upgrading the firmware on a number of Debian servers hosting our 12-node Elasticsearch cluster; we’ve been taking down one server at a time, always making sure the ES cluster was back to gree… --- ## [Messages from logstash taking long time to appear in search](https://discuss.elastic.co/t/messages-from-logstash-taking-long-time-to-appear-in-search/40037)
**Author:** [@Alex\_Harvey](https://discuss.elastic.co/u/Alex_Harvey)\ **Replies:** 4\ **Last updated:** [February 13, 2016, 6:35am UTC](https://discuss.elastic.co/t/messages-from-logstash-taking-long-time-to-appear-in-search/40037 "2016-02-13T06:35:31Z")
Hi all, I'm fairly new to ELK and I suspect this is an easy question for someone who knows ES well. I am building a CI acceptance test pipeline in Serverspec to validate my Puppet ELK builds. The most important test… --- ## [Huge performance hit when using fuzzy and highlights](https://discuss.elastic.co/t/huge-performance-hit-when-using-fuzzy-and-highlights/7817)
**Author:** [@anon44344346](https://discuss.elastic.co/u/anon44344346)\ **Replies:** 4\ **Last updated:** [May 27, 2012, 3:20pm UTC](https://discuss.elastic.co/t/huge-performance-hit-when-using-fuzzy-and-highlights/7817 "2012-05-27T15:20:37Z")
index with about 150k documents. when using fuzzy search and highlight on three fields, there is a huge performance impact. what is 1 second without highligt turnos into a 7 second query when enabling highlights o… --- ## [Master\_left and no other node elected to become master](https://discuss.elastic.co/t/master-left-and-no-other-node-elected-to-become-master/3577)
**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\ **Replies:** 4\ **Last updated:** [November 19, 2010, 8:23pm UTC](https://discuss.elastic.co/t/master-left-and-no-other-node-elected-to-become-master/3577 "2010-11-19T20:23:13Z")
Hey, Running master from yesterday morning. Have never hit this issue before and was previously running master from a week before that. I have two data nodes running: dm-adsearchd102-ElasticSearch dm-adsearchd103-… [Previous page](https://discuss.elastic.co/top.md?page=1189&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1191&per_page=50&period=all)