# Top

**URL:** https://discuss.elastic.co/top.md?page=1193&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1194

---

## [Kibana can't reach Elasticsearch cluster with security enabled](https://discuss.elastic.co/t/kibana-cant-reach-elasticsearch-cluster-with-security-enabled/198841)

<div class="topic-metadata">

**Author:** [@BenP](https://discuss.elastic.co/u/BenP)\
**Replies:** 5\
**Last updated:** [September 10, 2019, 1:13pm UTC](https://discuss.elastic.co/t/kibana-cant-reach-elasticsearch-cluster-with-security-enabled/198841 "2019-09-10T13:13:53Z")

</div>

Hi, Since I reverted from my trial license to a basic one, Kibana can't reach my Elasticsearch cluster as long as "xpack.security.enabled: true". From what I understood, I must configure "at least" TLS between my nodes …

---

## [Behaviour when restoring over closed indicies](https://discuss.elastic.co/t/behaviour-when-restoring-over-closed-indicies/130087)

<div class="topic-metadata">

**Author:** [@hreidmar](https://discuss.elastic.co/u/hreidmar)\
**Replies:** 5\
**Last updated:** [May 23, 2018, 10:04pm UTC](https://discuss.elastic.co/t/behaviour-when-restoring-over-closed-indicies/130087 "2018-05-23T22:04:36Z")

</div>

I'm looking to understand the behaviour of Elasticsearch snapshot restore under differing circumstances. Try as I might I've been unable to find concrete answers. I have two identical elastic search clusters. One is th…

---

## [Logstash integrate with Elasticsearch](https://discuss.elastic.co/t/logstash-integrate-with-elasticsearch/24361)

<div class="topic-metadata">

**Author:** [@kumarhanu](https://discuss.elastic.co/u/kumarhanu)\
**Replies:** 5\
**Last updated:** [June 26, 2015, 5:32am UTC](https://discuss.elastic.co/t/logstash-integrate-with-elasticsearch/24361 "2015-06-26T05:32:44Z")

</div>

Trying to send output to elasticsearch from logstash is not working in windows. elasticsearch is running on it default port. Both are latest versions. logstash -e 'input { stdin {} } output { elasticsearch { host =\> "l…

---

## [Elasticsearch Installation - “jdk “ ” was unexpected at this time”](https://discuss.elastic.co/t/elasticsearch-installation-jdk-was-unexpected-at-this-time/242102)

<div class="topic-metadata">

**Author:** [@jatin\_w](https://discuss.elastic.co/u/jatin_w)\
**Replies:** 1\
**Last updated:** [July 22, 2020, 12:05am UTC](https://discuss.elastic.co/t/elasticsearch-installation-jdk-was-unexpected-at-this-time/242102 "2020-07-22T00:05:05Z")

</div>

Hello team, I am trying to install and configure Elasticsearch on - prem server. And as a prerequisite I have install Java 1.8 (8.02610.12) version But after running command to install Elasticsearch I am getting " “jd…

---

## [Kbn not found while setting up develop environment in Kibana 6.4.0](https://discuss.elastic.co/t/kbn-not-found-while-setting-up-develop-environment-in-kibana-6-4-0/172233)

<div class="topic-metadata">

**Author:** [@BHAASKARR](https://discuss.elastic.co/u/BHAASKARR)\
**Replies:** 1\
**Last updated:** [March 14, 2019, 1:16am UTC](https://discuss.elastic.co/t/kbn-not-found-while-setting-up-develop-environment-in-kibana-6-4-0/172233 "2019-03-14T01:16:11Z")

</div>

Hi, I would like to create new kibana 6.4 plugin in windows. so I downloaded following files from respective releases pages. node-v8.11.4-x64.msi yarn-1.13.0.msi elasticsearch-6.4.0.zip kibana-6.4.0-windows-x86\_64.…

---

## [Script quering with Painless scripts](https://discuss.elastic.co/t/script-quering-with-painless-scripts/141792)

<div class="topic-metadata">

**Author:** [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\
**Replies:** 1\
**Last updated:** [July 26, 2018, 2:54pm UTC](https://discuss.elastic.co/t/script-quering-with-painless-scripts/141792 "2018-07-26T14:54:21Z")

</div>

Hi! Have tried a lot of things, like Java Instant.now().toEpochMilli() or joda Days().toStandardDuration() with no success. Found out what while Java Instant class isn't accepted, Java System.currentTimeMillis() is. M…

---

## [Staging Data for Elasticsearch bulk loading](https://discuss.elastic.co/t/staging-data-for-elasticsearch-bulk-loading/59453)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 1\
**Last updated:** [August 31, 2016, 11:20pm UTC](https://discuss.elastic.co/t/staging-data-for-elasticsearch-bulk-loading/59453 "2016-08-31T23:20:07Z")

</div>

I'm looking for the best storage format to stage data for elasticsearch ingestion. By best I mean the storage format that will require little or no spark processing time. Ideally this Spark job would load data and push…

---

## [Group by count?](https://discuss.elastic.co/t/group-by-count/34169)

<div class="topic-metadata">

**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\
**Replies:** 1\
**Last updated:** [November 11, 2015, 4:45am UTC](https://discuss.elastic.co/t/group-by-count/34169 "2015-11-11T04:45:08Z")

</div>

Hello all, new to Kibana so please forgive me if this is rather simple... I have "tiers" of users that I would like to represent using the "count" of a type of log. So when I go to create a visualization, I want to a…

---

## [Deployment of Elasticsearch to EKS cluster with helm](https://discuss.elastic.co/t/deployment-of-elasticsearch-to-eks-cluster-with-helm/323944)

<div class="topic-metadata">

**Author:** [@Boris\_Tsekinovsky](https://discuss.elastic.co/u/Boris_Tsekinovsky)\
**Replies:** 2\
**Last updated:** [January 25, 2023, 4:00pm UTC](https://discuss.elastic.co/t/deployment-of-elasticsearch-to-eks-cluster-with-helm/323944 "2023-01-25T16:00:53Z")

</div>

Hello elastic community, I'm trying to install ELK stack on AWS EKS cluster. I've created the cluster using CDK and now trying to deploy elasticsearch using helm: helm install elasticsearch elastic/elasticsearch -n mon…

---

## [Elasticsearch python client compatibility](https://discuss.elastic.co/t/elasticsearch-python-client-compatibility/281829)

<div class="topic-metadata">

**Author:** [@bruce289](https://discuss.elastic.co/u/bruce289)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-python-client-compatibility/281829 "2021-08-18T15:50:34Z")

</div>

Hi, I need to write a python script that can be run against both elasticsearch 6 and elasticsearch 7 clusters. Which version of the python elasticsearch client would be recommended for this purpose? Thanks, Bruce

---

## [Kibana Search Error - Service Unavailable](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634)

<div class="topic-metadata">

**Author:** [@mpavelka](https://discuss.elastic.co/u/mpavelka)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 7:43am UTC](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634 "2021-04-06T07:43:30Z")

</div>

Hello, cluster setup: 3 master data nodes, 1 coordinator. versions of ES and Kibana: 7.10.1, status green. I am trying to create a table visualization and I am getting for the particular index pattern Search Error - S…

---

## [Cannot find module './mysql\_logs'](https://discuss.elastic.co/t/cannot-find-module-mysql-logs/181337)

<div class="topic-metadata">

**Author:** [@Koen\_Wouters](https://discuss.elastic.co/u/Koen_Wouters)\
**Replies:** 2\
**Last updated:** [May 16, 2019, 4:20pm UTC](https://discuss.elastic.co/t/cannot-find-module-mysql-logs/181337 "2019-05-16T16:20:55Z")

</div>

Hi, I can no longer run Kibana after a mySQL crash and this is the error log I get : log \[08:31:31.995\] \[fatal\]\[root\] { Error: Cannot find module './mysql\_logs' at Function.Module.\_resolveFilename (internal/modules/c…

---

## [Splitting a string to fields and values](https://discuss.elastic.co/t/splitting-a-string-to-fields-and-values/166635)

<div class="topic-metadata">

**Author:** [@mhensen](https://discuss.elastic.co/u/mhensen)\
**Replies:** 2\
**Last updated:** [February 1, 2019, 12:10pm UTC](https://discuss.elastic.co/t/splitting-a-string-to-fields-and-values/166635 "2019-02-01T12:10:14Z")

</div>

I am using a kubernetes platform an have setup central elasticsearch logging with fluent.. Data comes in nicely but now I want to setup grafana to filter and present any needed logging So no logstash with a grok option…

---

## [Allow for renaming of json fields in http module output](https://discuss.elastic.co/t/allow-for-renaming-of-json-fields-in-http-module-output/112461)

<div class="topic-metadata">

**Author:** [@spfeiffer](https://discuss.elastic.co/u/spfeiffer)\
**Replies:** 2\
**Last updated:** [December 21, 2017, 4:40am UTC](https://discuss.elastic.co/t/allow-for-renaming-of-json-fields-in-http-module-output/112461 "2017-12-21T04:40:39Z")

</div>

I want to ingest Spring Boot Actuator metrics information (/metrics endpoint). The http module takes the JSON returned by my spring boot application and feeds it to ES using the elasticsearch output. Basically, i run in…

---

## [ElasticSearch Delayed Indexing](https://discuss.elastic.co/t/elasticsearch-delayed-indexing/52875)

<div class="topic-metadata">

**Author:** [@Eric\_Luellen](https://discuss.elastic.co/u/Eric_Luellen)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 3:56pm UTC](https://discuss.elastic.co/t/elasticsearch-delayed-indexing/52875 "2016-06-16T15:56:58Z")

</div>

I currently have the following setup: syslog-ng servers --\> Logstash --\> ElasticSearch The syslog-ng servers are load balanced and write to a SAN location where Logstash just tails the files and sends them to ES. I'm…

---

## [Query-then-Fetch without sorting](https://discuss.elastic.co/t/query-then-fetch-without-sorting/28353)

<div class="topic-metadata">

**Author:** [@aken](https://discuss.elastic.co/u/aken)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 11:54am UTC](https://discuss.elastic.co/t/query-then-fetch-without-sorting/28353 "2015-09-01T11:54:40Z")

</div>

I see from here: https://www.elastic.co/blog/understanding-query-then-fetch-vs-dfs-query-then-fetch?q=query%20fetch that a default query-then-fetch action will request the number of documents from each shard and then…

---

## [Modify Kibana and x-pack code](https://discuss.elastic.co/t/modify-kibana-and-x-pack-code/235415)

<div class="topic-metadata">

**Author:** [@dreamspy](https://discuss.elastic.co/u/dreamspy)\
**Replies:** 1\
**Last updated:** [June 3, 2020, 6:22pm UTC](https://discuss.elastic.co/t/modify-kibana-and-x-pack-code/235415 "2020-06-03T18:22:20Z")

</div>

I'm wondering to what degree one can modify Kibana's code for commercial use? I know that some parts of Kibana are licensed under Apache license, and some under Elastic license. But I'm not completely understanding the …

---

## [Single index for different sources](https://discuss.elastic.co/t/single-index-for-different-sources/42698)

<div class="topic-metadata">

**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\
**Replies:** 4\
**Last updated:** [February 26, 2016, 6:48am UTC](https://discuss.elastic.co/t/single-index-for-different-sources/42698 "2016-02-26T06:48:51Z")

</div>

I have two kind of docs there fore when indexing the sources are different. Seems some fields from one type of docs are not indexed. Do I need to add empty fields to make equal(uniform) source from different source. eg: …

---

## [Problems With Local Elasticsearch VM Cluster Communication](https://discuss.elastic.co/t/problems-with-local-elasticsearch-vm-cluster-communication/31559)

<div class="topic-metadata">

**Author:** [@zylo47](https://discuss.elastic.co/u/zylo47)\
**Replies:** 4\
**Last updated:** [October 3, 2015, 11:42pm UTC](https://discuss.elastic.co/t/problems-with-local-elasticsearch-vm-cluster-communication/31559 "2015-10-03T23:42:33Z")

</div>

I am trying to setup a local VM cluster of 3 Elasticsearch servers. I started with a single, stand-alone server running through VirtualBox with the Centos 6.6 operating system, then I cloned it so I now have 3 VMs, all …

---

## [Elastic Search Backup and Recovery](https://discuss.elastic.co/t/elastic-search-backup-and-recovery/8428)

<div class="topic-metadata">

**Author:** [@ElasticFan](https://discuss.elastic.co/u/ElasticFan)\
**Replies:** 4\
**Last updated:** [July 18, 2012, 12:58am UTC](https://discuss.elastic.co/t/elastic-search-backup-and-recovery/8428 "2012-07-18T00:58:20Z")

</div>

Hi all, We recently set up a big cluster where everyday we index around 50 million records cumulatively sized over 40 GB, we use 3 big machines, 128 GB RAM, dual hex core processors and 5 TB disk (only 7200 rpm b…

---

## [Suggetstions for appropriate number of nodes](https://discuss.elastic.co/t/suggetstions-for-appropriate-number-of-nodes/247618)

<div class="topic-metadata">

**Author:** [@manohar\_deepu](https://discuss.elastic.co/u/manohar_deepu)\
**Replies:** 6\
**Last updated:** [September 7, 2020, 9:05am UTC](https://discuss.elastic.co/t/suggetstions-for-appropriate-number-of-nodes/247618 "2020-09-07T09:05:25Z")

</div>

Hi, I want to set up my elastic cluster, I have 10 (not for data node) machines, 2 exclusive machines for data node requirements. I was thinking, I will use the 10 machines in the following way 4 machines running bot…

---

## [Correlation of IPs within ELK](https://discuss.elastic.co/t/correlation-of-ips-within-elk/151189)

<div class="topic-metadata">

**Author:** [@Alessandro\_89](https://discuss.elastic.co/u/Alessandro_89)\
**Replies:** 6\
**Last updated:** [October 8, 2018, 8:38am UTC](https://discuss.elastic.co/t/correlation-of-ips-within-elk/151189 "2018-10-08T08:38:35Z")

</div>

Greetings, I am trying to automate/ease a procedure to review firewall rules within ELK (ElasticSearch, Logstash, Kibana). I have some data obtained from a CSV, which is structured like this: Source;Destination;Service…

---

## [Help with setting up cluster on 1 server](https://discuss.elastic.co/t/help-with-setting-up-cluster-on-1-server/103273)

<div class="topic-metadata">

**Author:** [@morphers82](https://discuss.elastic.co/u/morphers82)\
**Replies:** 6\
**Last updated:** [October 10, 2017, 10:37pm UTC](https://discuss.elastic.co/t/help-with-setting-up-cluster-on-1-server/103273 "2017-10-10T22:37:43Z")

</div>

I am hoping to get help with setting up a multinode 6.x/rc ES cluster on a single server. I just can't find a good step by step guide on how to do this on Ubuntu from scratch. Ideally it would give best settings for th…

---

## [How to increase the options in "Terms" to create graphics in Kibana](https://discuss.elastic.co/t/how-to-increase-the-options-in-terms-to-create-graphics-in-kibana/65069)

<div class="topic-metadata">

**Author:** [@Lonck](https://discuss.elastic.co/u/Lonck)\
**Replies:** 6\
**Last updated:** [November 24, 2016, 7:30pm UTC](https://discuss.elastic.co/t/how-to-increase-the-options-in-terms-to-create-graphics-in-kibana/65069 "2016-11-24T19:30:25Z")

</div>

Hi for all. I have servers that send log to the Elastic Stack with use of filebeat. I'm having trouble creating charts in Kibana why are displayed few options to Terms. Only are displayed syslog options, but none of …

---

## [Plain text on markdown is not displayed if I select a long time range](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626)

<div class="topic-metadata">

**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 8:17am UTC](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626 "2021-09-09T08:17:43Z")

</div>

Hello, I am on kibana 7.10.2 and when I create a TSVB Markdown visual with only plain text (or with an image), and then I select a time range of one year, the visual loads a long time until this error : Thanks

---

## [Unexpected error with Beats input plugin](https://discuss.elastic.co/t/unexpected-error-with-beats-input-plugin/281255)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 8\
**Last updated:** [August 13, 2021, 7:10pm UTC](https://discuss.elastic.co/t/unexpected-error-with-beats-input-plugin/281255 "2021-08-13T19:10:40Z")

</div>

Previously i used JSON data from a file (that were previously taken by beats) to test my logstash conf and filtering. I had no problems, but when i try to read straight from auditbeat with the Beats input plugin, Logstas…

---

## [503 Service Unavailable - Master not discovered error in AKS](https://discuss.elastic.co/t/503-service-unavailable-master-not-discovered-error-in-aks/273713)

<div class="topic-metadata">

**Author:** [@pindropviolence](https://discuss.elastic.co/u/pindropviolence)\
**Replies:** 3\
**Last updated:** [May 31, 2021, 7:18am UTC](https://discuss.elastic.co/t/503-service-unavailable-master-not-discovered-error-in-aks/273713 "2021-05-31T07:18:03Z")

</div>

HI, I have a AKS cluster (k1) with 3 nodes. I have deployed ECK operator using all\_in\_one.yaml. I have another AKS cluster(k2) which is running my application stack , i have installed filebeats in this cluster (k2) and…

---

## [DebugSqlSpec and integration tests](https://discuss.elastic.co/t/debugsqlspec-and-integration-tests/159219)

<div class="topic-metadata">

**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\
**Replies:** 8\
**Last updated:** [December 4, 2018, 4:24pm UTC](https://discuss.elastic.co/t/debugsqlspec-and-integration-tests/159219 "2018-12-04T16:24:36Z")

</div>

Hi, I can't make the DebugSqlSpec test class work. When I run an Elasticsearch local server (./gradlew run --debug-jvm -Drun.license\_type=trial -Dxpack.security.enabled=false) and then run an empty implementation of th…

---

## [Watcher optionnot visible in Kibana 6.3](https://discuss.elastic.co/t/watcher-optionnot-visible-in-kibana-6-3/135897)

<div class="topic-metadata">

**Author:** [@Geetansh\_Jain](https://discuss.elastic.co/u/Geetansh_Jain)\
**Replies:** 3\
**Last updated:** [June 15, 2018, 12:16pm UTC](https://discuss.elastic.co/t/watcher-optionnot-visible-in-kibana-6-3/135897 "2018-06-15T12:16:32Z")

</div>

I have installed Elastic search and Kibana 6.3.0 and not able to view watcher option in Kibana. Logs are flowing fine from Logstash to elastic and then Kibana. But I am not able to put alerting on my data as watcher is…

---

## [Elasticsearch remove docs of Suricata](https://discuss.elastic.co/t/elasticsearch-remove-docs-of-suricata/64284)

<div class="topic-metadata">

**Author:** [@brunopsitech](https://discuss.elastic.co/u/brunopsitech)\
**Replies:** 3\
**Last updated:** [October 31, 2016, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-docs-of-suricata/64284 "2016-10-31T16:06:02Z")

</div>

Hi, i am using Logstash to generate logs of IPS. But elasticsearch delete all docs except last one, i dont know why. My Logstash config: input { file { path =\> \["/var/log/suricata/eve.json"\] …

---

## [Average(wrt time) of Sum of Values](https://discuss.elastic.co/t/average-wrt-time-of-sum-of-values/51556)

<div class="topic-metadata">

**Author:** [@bharat](https://discuss.elastic.co/u/bharat)\
**Replies:** 3\
**Last updated:** [June 1, 2016, 6:31pm UTC](https://discuss.elastic.co/t/average-wrt-time-of-sum-of-values/51556 "2016-06-01T18:31:43Z")

</div>

I have logs with "product name", "sales", "date", "salesman". I want the average value of sales done by all salesmen product-wise. i.e., Average(wrt time) of sum of all the sales of same product. If I use Average as the …

---

## [\[illegal\_argument\_exception\] Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/illegal-argument-exception-fielddata-is-disabled-on-text-fields-by-default/237891)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 3:21am UTC](https://discuss.elastic.co/t/illegal-argument-exception-fielddata-is-disabled-on-text-fields-by-default/237891 "2020-07-01T03:21:23Z")

</div>

I click on kibana apm ui and some errors will appear. I checked the log of kibana and found the following \> "message":"\[illegal\_argument\_exception\] Fielddata is disabled on text fields by default. Set fielddata=true on …

---

## [Logstash elasticsearch output plugin filtering](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-filtering/126795)

<div class="topic-metadata">

**Author:** [@Ferdous\_Shibly](https://discuss.elastic.co/u/Ferdous_Shibly)\
**Replies:** 7\
**Last updated:** [April 9, 2018, 8:52pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-filtering/126795 "2018-04-09T20:52:00Z")

</div>

The application are sending logs in JSON format with some additional tags for example logType, \[attribute\]\[APPLICATION\] etc. and we want apply filter on logstash based on those tags so that logstash will not send some ty…

---

## [Logstash condition statement](https://discuss.elastic.co/t/logstash-condition-statement/109448)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 1\
**Last updated:** [November 28, 2017, 7:13pm UTC](https://discuss.elastic.co/t/logstash-condition-statement/109448 "2017-11-28T19:13:32Z")

</div>

Hi, Below is my logstash output config file, I am using too many if, else if conditional statements in the code. Is it possible to do a case statement like in ruby or something which will reduce the repetition. output…

---

## [Getting Jar Hell When Running Test in Intellij](https://discuss.elastic.co/t/getting-jar-hell-when-running-test-in-intellij/55664)

<div class="topic-metadata">

**Author:** [@dadepo](https://discuss.elastic.co/u/dadepo)\
**Replies:** 1\
**Last updated:** [August 2, 2016, 10:52am UTC](https://discuss.elastic.co/t/getting-jar-hell-when-running-test-in-intellij/55664 "2016-08-02T10:52:54Z")

</div>

Using Version 2.3.3. Any idea how to resolve this? Thanks java.lang.RuntimeException: found jar hell in test classpath at org.elasticsearch.bootstrap.BootstrapForTesting.\<clinit\>(BootstrapForTesting.java:95) at org.…

---

## [Exception while Bulk inserting using spark](https://discuss.elastic.co/t/exception-while-bulk-inserting-using-spark/26042)

<div class="topic-metadata">

**Author:** [@Ramky](https://discuss.elastic.co/u/Ramky)\
**Replies:** 1\
**Last updated:** [July 22, 2015, 8:08am UTC](https://discuss.elastic.co/t/exception-while-bulk-inserting-using-spark/26042 "2015-07-22T08:08:35Z")

</div>

I am trying to read event from kafka and extract date time, create index name using hour and do bulk insertion. Source code: kafkaStream.foreachRDD(rdd =\> { if (rdd.count() \> 0) { val indexName:String = "…

---

## [ES 8.0.0 Deletion with index lifecycle policy does nothing](https://discuss.elastic.co/t/es-8-0-0-deletion-with-index-lifecycle-policy-does-nothing/258346)

<div class="topic-metadata">

**Author:** [@nlavrov](https://discuss.elastic.co/u/nlavrov)\
**Replies:** 5\
**Last updated:** [December 14, 2020, 9:12pm UTC](https://discuss.elastic.co/t/es-8-0-0-deletion-with-index-lifecycle-policy-does-nothing/258346 "2020-12-14T21:12:26Z")

</div>

I am running an elk stack set up with helm chart running 8.0.0 version. I have a simple delete policy I created in the kibana dashboard that just deletes indices older than 1 minute (this is for testing). I then applied …

---

## [Vertical zoom, drag, Y axis position](https://discuss.elastic.co/t/vertical-zoom-drag-y-axis-position/250747)

<div class="topic-metadata">

**Author:** [@Philippe\_Graca](https://discuss.elastic.co/u/Philippe_Graca)\
**Replies:** 5\
**Last updated:** [October 12, 2020, 7:18am UTC](https://discuss.elastic.co/t/vertical-zoom-drag-y-axis-position/250747 "2020-10-12T07:18:39Z")

</div>

Hello all I'm currently trying to use kibana to analyse data coming out of SCADA monitoring software. I would like to be able to view the following graph X-Axis: Time Y-axis 1: A temperature beetween 0 to 1200 degree…

---

## [Elasticsearch auto creating index after startup without any documents](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-auto-creating-index-after-startup-without-any-documents/114691 "2018-01-09T16:15:15Z")

</div>

Hi team, I am facing the below issue whenever i start my elasticsearch server. it automatically creates an index and then throws below exceptions. Please provide your insight. \[image\]

---

## [Longitude and latitude for logs](https://discuss.elastic.co/t/longitude-and-latitude-for-logs/58964)

<div class="topic-metadata">

**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\
**Replies:** 5\
**Last updated:** [August 25, 2016, 11:28pm UTC](https://discuss.elastic.co/t/longitude-and-latitude-for-logs/58964 "2016-08-25T23:28:11Z")

</div>

hello , My logs doesn't have any option to longitude and latitude information. Currently these client logs for one location copied to the server at same location and from there logstash sending to elsastcisearch serve…

---

## [Filebeat: failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-temporary-bulk-send-failure/263515)

<div class="topic-metadata">

**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\
**Replies:** 2\
**Last updated:** [February 10, 2021, 10:07am UTC](https://discuss.elastic.co/t/filebeat-failed-to-publish-events-temporary-bulk-send-failure/263515 "2021-02-10T10:07:08Z")

</div>

Hi, I have setup a few hosts at home & and am slowly teaching myself elastic. Problem at the moment is filebeat 7.10.2 are having trouble sending to my elasticsearch instance. Below is the snippet I'm seeing from one o…

---

## [How to Split Message Field with Exchange LOG Information](https://discuss.elastic.co/t/how-to-split-message-field-with-exchange-log-information/174844)

<div class="topic-metadata">

**Author:** [@Eric\_Santos](https://discuss.elastic.co/u/Eric_Santos)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 2:03pm UTC](https://discuss.elastic.co/t/how-to-split-message-field-with-exchange-log-information/174844 "2019-04-02T14:03:59Z")

</div>

Today, I can send the LOGs from Exchange messages to Kibana using filebeat, but I need more fields that are sent in a unique way in the message field. My logstash.conf is: #udp syslogs stream via 5141 input { udp { …

---

## [CIDR, location lookup in the most efficient way](https://discuss.elastic.co/t/cidr-location-lookup-in-the-most-efficient-way/131232)

<div class="topic-metadata">

**Author:** [@geertn444](https://discuss.elastic.co/u/geertn444)\
**Replies:** 2\
**Last updated:** [May 16, 2018, 8:59pm UTC](https://discuss.elastic.co/t/cidr-location-lookup-in-the-most-efficient-way/131232 "2018-05-16T20:59:57Z")

</div>

I want to map IPs in a certain range to a site. I don't want to map the IP ranges inside logstash config files, but in external files. CIDR has this possibility using network\_path So now i have a logic like this: if \[f…

---

## [Total Limits of Users and Roles while using X-Pack Plugin?](https://discuss.elastic.co/t/total-limits-of-users-and-roles-while-using-x-pack-plugin/127066)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 2\
**Last updated:** [April 9, 2018, 5:11pm UTC](https://discuss.elastic.co/t/total-limits-of-users-and-roles-while-using-x-pack-plugin/127066 "2018-04-09T17:11:34Z")

</div>

Hi, Can any one let me know Wile using X-pack plugin with elasticsearch 1:How many roles can be created.Is there any limit to create roles? 2:Can a user have multiple roles? 3:How many users can be created.IS there a…

---

## [Location field from index is not mapped to location geo\_point at template](https://discuss.elastic.co/t/location-field-from-index-is-not-mapped-to-location-geo-point-at-template/101342)

<div class="topic-metadata">

**Author:** [@themoisis](https://discuss.elastic.co/u/themoisis)\
**Replies:** 2\
**Last updated:** [September 22, 2017, 6:46am UTC](https://discuss.elastic.co/t/location-field-from-index-is-not-mapped-to-location-geo-point-at-template/101342 "2017-09-22T06:46:27Z")

</div>

Hi, I have an index named 'nginx\_access\*' and a template named nginx\_access\*. The tamplate is modified to tell elastic search how to parse indexes geo fields. SO, my template has at some point: "dma\_code" : {…

---

## [Kibana charts with only latest entry](https://discuss.elastic.co/t/kibana-charts-with-only-latest-entry/32423)

<div class="topic-metadata">

**Author:** [@sunilactivity](https://discuss.elastic.co/u/sunilactivity)\
**Replies:** 2\
**Last updated:** [November 30, 2015, 9:02am UTC](https://discuss.elastic.co/t/kibana-charts-with-only-latest-entry/32423 "2015-11-30T09:02:36Z")

</div>

I am using kibana 4.0 and elastic search 1.5 I want to get the latest set of documents if there are identical documents. Is it possible? eg. This is my set of document. {"Name": "Sunil", "Org":"xyz" } {"Name": "Sunil",…

---

## [How to search value with Wild card](https://discuss.elastic.co/t/how-to-search-value-with-wild-card/1447)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [May 28, 2015, 2:30pm UTC](https://discuss.elastic.co/t/how-to-search-value-with-wild-card/1447 "2015-05-28T14:30:05Z")

</div>

Hi Experts, In my log I have a field "Customer". It has all the values in capital latter like "VIKAS". Now when I fire query in Kibana like Customer:"vikas" or Customer:"VIK\*" I got nothing . It works only when I do ex…

---

## [Browser Plugin for HTTP GET / PUT?](https://discuss.elastic.co/t/browser-plugin-for-http-get-put/3657)

<div class="topic-metadata">

**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\
**Replies:** 2\
**Last updated:** [December 16, 2010, 7:23am UTC](https://discuss.elastic.co/t/browser-plugin-for-http-get-put/3657 "2010-12-16T07:23:27Z")

</div>

I'm trying to have users in my organization use Elastic Search as a Solr replacement. The main pain point right now is that there is no web interface to do ad-hoc searches. I have given the search documentation to users …

---

## [AWS Elasticsearch Best Practice for Indexes](https://discuss.elastic.co/t/aws-elasticsearch-best-practice-for-indexes/208634)

<div class="topic-metadata">

**Author:** [@Fei\_YU](https://discuss.elastic.co/u/Fei_YU)\
**Replies:** 2\
**Last updated:** [November 20, 2019, 11:43am UTC](https://discuss.elastic.co/t/aws-elasticsearch-best-practice-for-indexes/208634 "2019-11-20T11:43:28Z")

</div>

We have been using AWS Elasticsearch Service for a while ( few years ) with the current configuration: No Master dedicated Nodes. 2k+ indexes and 10K primary shards, 20K shards with one replica. 4 instances 8GB memory …

---

## [Logstash and sniffing](https://discuss.elastic.co/t/logstash-and-sniffing/199131)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [September 11, 2019, 7:43pm UTC](https://discuss.elastic.co/t/logstash-and-sniffing/199131 "2019-09-11T19:43:45Z")

</div>

I have a question and wondering if anyone could help out. Using the sniffing protocol in Logstash do the logstash nodes know where to directly send the payload? Say I have an index on 5 of my 10 nodes and that payload ha…

[Previous page](https://discuss.elastic.co/top.md?page=1192&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1194&per_page=50&period=all)
