# Top **URL:** https://discuss.elastic.co/top.md?page=1198&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1199 --- ## [Documentation for Kibana REST API](https://discuss.elastic.co/t/documentation-for-kibana-rest-api/147740)
**Author:** [@Ken\_Leoni](https://discuss.elastic.co/u/Ken_Leoni)\ **Replies:** 5\ **Last updated:** [September 12, 2018, 12:48pm UTC](https://discuss.elastic.co/t/documentation-for-kibana-rest-api/147740 "2018-09-12T12:48:59Z")
I attended ElasticOn Boston and was told that there is documentation online for the REST API to export / import Kibana visualizations and dashboards. I can't for the life of me find it. Any assistance would be greatly a… --- ## [Xpack SQL queries and returning record count](https://discuss.elastic.co/t/xpack-sql-queries-and-returning-record-count/149470)
**Author:** [@David\_Palmer](https://discuss.elastic.co/u/David_Palmer)\ **Replies:** 4\ **Last updated:** [September 25, 2018, 6:27am UTC](https://discuss.elastic.co/t/xpack-sql-queries-and-returning-record-count/149470 "2018-09-25T06:27:51Z")
In our application, our primary use case is to create dynamic queries based on a user's input. Because of the complexity of standard elasticsearch queries, creating a dynamic SQL query is a much better approach. However… --- ## [Not able to visualise netflow data in kibana](https://discuss.elastic.co/t/not-able-to-visualise-netflow-data-in-kibana/125241)
**Author:** [@csudaya](https://discuss.elastic.co/u/csudaya)\ **Replies:** 4\ **Last updated:** [March 23, 2018, 7:38am UTC](https://discuss.elastic.co/t/not-able-to-visualise-netflow-data-in-kibana/125241 "2018-03-23T07:38:39Z")
Hi - I have installed ELK stack and started the services. Using a nflow generator , generating netflow version 5 packets. I can see the packaets reaching the server and dictionary file getting refreshed in logstash . H… --- ## [Collecting logs from windows server](https://discuss.elastic.co/t/collecting-logs-from-windows-server/113136)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [December 26, 2017, 9:09am UTC](https://discuss.elastic.co/t/collecting-logs-from-windows-server/113136 "2017-12-26T09:09:31Z")
Hi! I would like to get advice for gathering text logs on windows server. I have a log stream that is implemented as below. Important part of below stream is that all logs must be also collected on node2 as a log file… --- ## [Advice on Metrics](https://discuss.elastic.co/t/advice-on-metrics/106908)
**Author:** [@Cen\_giz](https://discuss.elastic.co/u/Cen_giz)\ **Replies:** 4\ **Last updated:** [November 13, 2017, 6:14pm UTC](https://discuss.elastic.co/t/advice-on-metrics/106908 "2017-11-13T18:14:03Z")
Hi, I am new to metrics beats concept and exploring options... First, I would like to collect metrics from all HW/Application (For Eg.. HTTP Server, Database, etc...) in the Enterprise where there are hundreds of thes… --- ## [Display current time domain filter as a metric in hours?](https://discuss.elastic.co/t/display-current-time-domain-filter-as-a-metric-in-hours/71787)
**Author:** [@big\_red\_frog](https://discuss.elastic.co/u/big_red_frog)\ **Replies:** 4\ **Last updated:** [January 18, 2017, 5:58pm UTC](https://discuss.elastic.co/t/display-current-time-domain-filter-as-a-metric-in-hours/71787 "2017-01-18T17:58:23Z")
I have been using Kibana 5 successfully for various dashboards that take great advantage of the time domain zoom, both from the top right quick links that allow quick, relative and absolute, as well as the drag in graph … --- ## [Log4j Logstash plugin error](https://discuss.elastic.co/t/log4j-logstash-plugin-error/65591)
**Author:** [@profic](https://discuss.elastic.co/u/profic)\ **Replies:** 4\ **Last updated:** [November 10, 2016, 9:59am UTC](https://discuss.elastic.co/t/log4j-logstash-plugin-error/65591 "2016-11-10T09:59:51Z")
Hi, I am getting \[2016-11-09T14:37:28,009\]\[DEBUG\]\[logstash.inputs.log4j \] Closing connection {:client=\>"172.17.0.1:43658", :exception=\>#\… --- ## [Filter by port using pipe directive](https://discuss.elastic.co/t/filter-by-port-using-pipe-directive/31688)
**Author:** [@Ben19](https://discuss.elastic.co/u/Ben19)\ **Replies:** 4\ **Last updated:** [October 8, 2015, 2:40pm UTC](https://discuss.elastic.co/t/filter-by-port-using-pipe-directive/31688 "2015-10-08T14:40:47Z")
Hello, I’m attempting to collect sflow logs from a number of exporters that will be exporting and sending the traffic on UDP port 6434. I’m using the pipe directive since I can specify the command setting, otherwise I’… --- ## [Privileged containers should be avoided](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382)
**Author:** [@ddhote](https://discuss.elastic.co/u/ddhote)\ **Replies:** 2\ **Last updated:** [January 20, 2023, 11:52am UTC](https://discuss.elastic.co/t/privileged-containers-should-be-avoided/323382 "2023-01-20T11:52:44Z")
Hello Team, We have Elasticsearch containers in AKS where initial container has "Privileged= True" which is against our security policy. But, init container is failing with "Privileged=False", can someone please help ho… --- ## [Convert Array to String by ingesting three double quotes](https://discuss.elastic.co/t/convert-array-to-string-by-ingesting-three-double-quotes/308358)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 2\ **Last updated:** [June 29, 2022, 10:40am UTC](https://discuss.elastic.co/t/convert-array-to-string-by-ingesting-three-double-quotes/308358 "2022-06-29T10:40:31Z")
Hi, I am wanting to change an Array to a String to make it easier for me to store in my Elasticsearch, but I am having trouble finding the way of doing so. There are some special cases in my data where my field "value" … --- ## [Kibana: Minimum Permissions for saving the queries for a dashboard](https://discuss.elastic.co/t/kibana-minimum-permissions-for-saving-the-queries-for-a-dashboard/282259)
**Author:** [@Kunal\_Sharma](https://discuss.elastic.co/u/Kunal_Sharma)\ **Replies:** 2\ **Last updated:** [August 24, 2021, 5:50am UTC](https://discuss.elastic.co/t/kibana-minimum-permissions-for-saving-the-queries-for-a-dashboard/282259 "2021-08-24T05:50:27Z")
Dear Team, We have a role in Kibana that provides the read only access to a dashboard under a tenant (with tenant permission for the Role as Read Only). With this current role, users are not able to save the search que… --- ## [How can transfer Fail2ban logs going to Kibana](https://discuss.elastic.co/t/how-can-transfer-fail2ban-logs-going-to-kibana/273252)
**Author:** [@ememman29](https://discuss.elastic.co/u/ememman29)\ **Replies:** 2\ **Last updated:** [May 19, 2021, 2:14am UTC](https://discuss.elastic.co/t/how-can-transfer-fail2ban-logs-going-to-kibana/273252 "2021-05-19T02:14:25Z")
Hello i have a problem on how i going to transfer my fail2ban logs going to kibana visualization i already installed the filebeat log shipper on my server where fail2ban is installed but the problem is only the message i… --- ## [Can Logstash read multiple text files , store config data available in first lines and add it to all other lines](https://discuss.elastic.co/t/can-logstash-read-multiple-text-files-store-config-data-available-in-first-lines-and-add-it-to-all-other-lines/267830)
**Author:** [@Svett](https://discuss.elastic.co/u/Svett)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 12:00am UTC](https://discuss.elastic.co/t/can-logstash-read-multiple-text-files-store-config-data-available-in-first-lines-and-add-it-to-all-other-lines/267830 "2021-04-08T00:00:44Z")
Hi, I have multiple log files that I want to load in Kibana. Each file has at the beginning few lines with configuration information, that has to be added to each log line from this file. These lines look like that: … --- ## [Invalid aggregation order path](https://discuss.elastic.co/t/invalid-aggregation-order-path/228472)
**Author:** [@Damiano](https://discuss.elastic.co/u/Damiano)\ **Replies:** 2\ **Last updated:** [May 2, 2020, 1:21am UTC](https://discuss.elastic.co/t/invalid-aggregation-order-path/228472 "2020-05-02T01:21:35Z")
Hello everybody! I am using ElasticSearch 7.6 with a test index that has the following mapping: { "test" : { "mappings" : { "properties" : { "amount" : { "type" : "long" }, … --- ## [Найти поля содержащие пустую строку и удалить](https://discuss.elastic.co/t/topic/201239)
**Author:** [@GreenX](https://discuss.elastic.co/u/GreenX)\ **Replies:** 2\ **Last updated:** [September 27, 2019, 6:28am UTC](https://discuss.elastic.co/t/topic/201239 "2019-09-27T06:28:25Z")
Собственно subj. Хочу найти документы в которые поле пустое и удалить его совсем. Вариант: { "query": { "nested":{ "path":"body2", "query":{ "bool": { "filter": { "exis… --- ## [Configure X-Pack.Security on ELK V6.2.4](https://discuss.elastic.co/t/configure-x-pack-security-on-elk-v6-2-4/139502)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 2\ **Last updated:** [July 12, 2018, 1:07am UTC](https://discuss.elastic.co/t/configure-x-pack-security-on-elk-v6-2-4/139502 "2018-07-12T01:07:28Z")
As part of testing X-Pack.Security on Elasticsearch V6.2.4 in our UAT infra , Was trting to set passwords for build in users i am getting below error . Can anyone please help/advise on this issue \[root@elasticsearch-ua… --- ## [Filebeat locking Files older than IGNORE\_OLDER value](https://discuss.elastic.co/t/filebeat-locking-files-older-than-ignore-older-value/49276)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 2\ **Last updated:** [May 9, 2016, 8:27am UTC](https://discuss.elastic.co/t/filebeat-locking-files-older-than-ignore-older-value/49276 "2016-05-09T08:27:51Z")
Hi, We have filebeat version 1.1.2 installed on windows servers. Monitoring Logs from Weblogic applications. The IGNORE\_OLDER value for the prospectors is 2h But, however it seems that Filebeat is locking even older … --- ## [Thread Pool Information Using Java API](https://discuss.elastic.co/t/thread-pool-information-using-java-api/616)
**Author:** [@Ed\_Brown](https://discuss.elastic.co/u/Ed_Brown)\ **Replies:** 2\ **Last updated:** [May 13, 2015, 6:12pm UTC](https://discuss.elastic.co/t/thread-pool-information-using-java-api/616 "2015-05-13T18:12:40Z")
Good morning, I'm trying to get the same information using the Java API that I can get using the curl command, "curl localhost:9200/\_cat/threadpool". I'm using the TransportClient API to get the client connection to El… --- ## [Curator is not deleting ES snapshots](https://discuss.elastic.co/t/curator-is-not-deleting-es-snapshots/293774)
**Author:** [@hudar01](https://discuss.elastic.co/u/hudar01)\ **Replies:** 5\ **Last updated:** [January 25, 2022, 4:27pm UTC](https://discuss.elastic.co/t/curator-is-not-deleting-es-snapshots/293774 "2022-01-25T16:27:00Z")
Hello, Curator is not deleting 7 day old snapshots, even though they're there. I'm using python virtual environment where I've the following installed: (es-curator) \[ec2-user@im es-curator\]$ pip list Package … --- ## [Log flooded with error messages](https://discuss.elastic.co/t/log-flooded-with-error-messages/220897)
**Author:** [@stefan\_schumacher](https://discuss.elastic.co/u/stefan_schumacher)\ **Replies:** 5\ **Last updated:** [February 26, 2020, 3:48pm UTC](https://discuss.elastic.co/t/log-flooded-with-error-messages/220897 "2020-02-26T15:48:17Z")
Hi, I am trying to setup the ELK-Stack using this - https://pawelurbanek.com/elk-nginx-logs-setup - Blog article here. Filebeat is running and sending data to logstash. My logstash configuration looks like this (I rem… --- ## [Uncaught IndexSizeError: Failed to execute 'getImageData' on 'CanvasRenderingContext2D': The source width is 0. (http://localhost:5601/bundles/vendors.bundle.js?v=16602:12)](https://discuss.elastic.co/t/uncaught-indexsizeerror-failed-to-execute-getimagedata-on-canvasrenderingcontext2d-the-source-width-is-0-http-localhost-5601-bundles-vendors-bundle-js-v-16602-12/137135)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 5\ **Last updated:** [July 17, 2018, 9:06am UTC](https://discuss.elastic.co/t/uncaught-indexsizeerror-failed-to-execute-getimagedata-on-canvasrenderingcontext2d-the-source-width-is-0-http-localhost-5601-bundles-vendors-bundle-js-v-16602-12/137135 "2018-07-17T09:06:04Z")
Hello Team I've built kibana dashboards and shared the url in my web application. When I try to maximize the dashboard in my webapp the error comes up. \[image\] it's same with all the dashboards. but I'm not sure why?. … --- ## [ES cluster 5.5.0 + rest client api + scroll api](https://discuss.elastic.co/t/es-cluster-5-5-0-rest-client-api-scroll-api/109403)
**Author:** [@shijiebei2009](https://discuss.elastic.co/u/shijiebei2009)\ **Replies:** 5\ **Last updated:** [November 29, 2017, 10:40am UTC](https://discuss.elastic.co/t/es-cluster-5-5-0-rest-client-api-scroll-api/109403 "2017-11-29T10:40:01Z")
The java rest client api 5.5.0 does not support scroll api? am i right? and I found java rest client api 5.6.4 support scroll api, can I use rest client 5.6.4 with cluster 5.5.0? by the way, my es cluster server is jdk… --- ## [LogstashJ : Java bindings for Logstash](https://discuss.elastic.co/t/logstashj-java-bindings-for-logstash/41892)
**Author:** [@Mogztter](https://discuss.elastic.co/u/Mogztter)\ **Replies:** 5\ **Last updated:** [January 19, 2017, 7:47am UTC](https://discuss.elastic.co/t/logstashj-java-bindings-for-logstash/41892 "2017-01-19T07:47:22Z")
Hello, I've just started working on a Java binding for Logstash. My initial goal was to be able to write unit tests in Java but once we have a binding in place we could do so much more. To give you some context, I'm … --- ## [Error connecting to package registry](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721)
**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 7:33pm UTC](https://discuss.elastic.co/t/error-connecting-to-package-registry/279721 "2021-08-02T19:33:00Z")
Since Zscaler proxy is enabled, My Kibana started giving an error So I simply added Zscaler RootCA.crt to ubuntu server (where ELK is running) in /usr/share/ca-certificates and reconfigured ca-certficates dpkg. Now c… --- ## [Cross Cluster Replication on ECK - cross region replication](https://discuss.elastic.co/t/cross-cluster-replication-on-eck-cross-region-replication/205311)
**Author:** [@frankdirosaiv](https://discuss.elastic.co/u/frankdirosaiv)\ **Replies:** 1\ **Last updated:** [April 2, 2020, 9:52am UTC](https://discuss.elastic.co/t/cross-cluster-replication-on-eck-cross-region-replication/205311 "2020-04-02T09:52:51Z")
Hey, Big fan of the ECK v1 beta! but I could use some help on how to do cross-cluster replication with two AKS clusters in different regions. I've set up a LoadBalancer IP for my clusters on 9200 and 9300. I've also s… --- ## [IOPS change monitoring](https://discuss.elastic.co/t/iops-change-monitoring/83871)
**Author:** [@guy\_es](https://discuss.elastic.co/u/guy_es)\ **Replies:** 1\ **Last updated:** [April 27, 2017, 2:29pm UTC](https://discuss.elastic.co/t/iops-change-monitoring/83871 "2017-04-27T14:29:46Z")
Hi, I have a 2.4 cluster running on AWS instances. I want to lower the disk's IOPS and would like to monitor the affect on the performance of ES. Which operations will be affected from IOPS decrease? How can I monit… --- ## [Missing result when it terms contained dash](https://discuss.elastic.co/t/missing-result-when-it-terms-contained-dash/11446)
**Author:** [@Qing\_Guan](https://discuss.elastic.co/u/Qing_Guan)\ **Replies:** 1\ **Last updated:** [April 4, 2013, 10:45am UTC](https://discuss.elastic.co/t/missing-result-when-it-terms-contained-dash/11446 "2013-04-04T10:45:31Z")
I build a log server that store my logs in elasticsearch. Every log object looks like this Log =============================================\> { "space": "admin", "type": "error", "source": "lorem-aws", "message"… --- ## [Issue when combining shingle filter and stopwords](https://discuss.elastic.co/t/issue-when-combining-shingle-filter-and-stopwords/40119)
**Author:** [@mdebo](https://discuss.elastic.co/u/mdebo)\ **Replies:** 1\ **Last updated:** [March 16, 2016, 2:06am UTC](https://discuss.elastic.co/t/issue-when-combining-shingle-filter-and-stopwords/40119 "2016-03-16T02:06:47Z")
Hi, I encounter an issue with elasticsearch shingle filter. As the matter of fact, when i combine shingle filter and stopwords, it seems that the option output\_unigrams, which I set to false, is no more taken into accoun… --- ## [Output to unicast ES Cluster, how?](https://discuss.elastic.co/t/output-to-unicast-es-cluster-how/38796)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 3\ **Last updated:** [January 10, 2016, 8:59am UTC](https://discuss.elastic.co/t/output-to-unicast-es-cluster-how/38796 "2016-01-10T08:59:55Z")
I have a 3 node ES cluster setup and im trying to figure out how to make Logstash output to a cluster. I know that I can add something similar to the following: elasticsearch { cluster =\> "logstash-clus… --- ## [Add\_field parameter in filter plugins](https://discuss.elastic.co/t/add-field-parameter-in-filter-plugins/37333)
**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\ **Replies:** 3\ **Last updated:** [December 16, 2015, 11:37am UTC](https://discuss.elastic.co/t/add-field-parameter-in-filter-plugins/37333 "2015-12-16T11:37:08Z")
Hi, Can anyone explain what does add\_field do ? filter { mutate { add\_field =\> { "COLUMN2" =\> "%{COLUMN1}" } } } What is the difference between add\_field present in mutate, clone, kv and grok plugins --- ## [Nested Filters returns no results on specific attribute](https://discuss.elastic.co/t/nested-filters-returns-no-results-on-specific-attribute/1390)
**Author:** [@SpinBoldak](https://discuss.elastic.co/u/SpinBoldak)\ **Replies:** 3\ **Last updated:** [May 28, 2015, 8:30am UTC](https://discuss.elastic.co/t/nested-filters-returns-no-results-on-specific-attribute/1390 "2015-05-28T08:30:09Z")
Hi, I'm trying to apply a nested filter on a document but, for when I filter specifically by one of the nested attributes, I always get 0 results. For example, with a mapping like: "PARTNER": { "properties": { … --- ## [APM server did not respond within 10s of gzip stream finish](https://discuss.elastic.co/t/apm-server-did-not-respond-within-10s-of-gzip-stream-finish/333845)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 1\ **Last updated:** [May 23, 2023, 11:09pm UTC](https://discuss.elastic.co/t/apm-server-did-not-respond-within-10s-of-gzip-stream-finish/333845 "2023-05-23T23:09:14Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Filebeat docker container - Can we modify filebeat.yml file using docker ENTRYPOINT](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230)
**Author:** [@ramreddy](https://discuss.elastic.co/u/ramreddy)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230 "2022-09-13T19:47:25Z")
Hi, we are using docker/ECS filebeat containers, currently as part of docker build we copy filebeat-(aws\_account).yml to /usr/share/filebeat/filebeat.yml with account specific values. But while doing this process we have… --- ## [Feasibility of Geotracking visualization](https://discuss.elastic.co/t/feasibility-of-geotracking-visualization/252367)
**Author:** [@Hideki\_Nakashima](https://discuss.elastic.co/u/Hideki_Nakashima)\ **Replies:** 7\ **Last updated:** [October 18, 2020, 12:54pm UTC](https://discuss.elastic.co/t/feasibility-of-geotracking-visualization/252367 "2020-10-18T12:54:51Z")
Hi, We have a on-going project to visualize GPS data. So far, we used ElasticSearch and Kibana in AWS, however we have some issues to achieve our goal due to limitations on features of Kibana in AWS such as zoom level. … --- ## [Elasticsearch \_bulk insert node js axios](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099)
**Author:** [@chase2981](https://discuss.elastic.co/u/chase2981)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-insert-node-js-axios/220099 "2020-02-20T07:59:45Z")
axios.post(\`http://ec2-99-999-99-999.us-west-2.compute.amazonaws.com:9200/\_bulk\`, \`{ "update" : {"\_id" : "1", "\_index" : "test"} }\\n{ "doc" : {"field2" : "value2"} }\\n\`, { headers: { 'Content-type': 'applicat… --- ## [Get year, month and date when not specified on log](https://discuss.elastic.co/t/get-year-month-and-date-when-not-specified-on-log/174195)
**Author:** [@pbressan13](https://discuss.elastic.co/u/pbressan13)\ **Replies:** 1\ **Last updated:** [April 16, 2019, 2:49pm UTC](https://discuss.elastic.co/t/get-year-month-and-date-when-not-specified-on-log/174195 "2019-04-16T14:49:23Z")
Hi, I'm facing with a particular issue, I'm trying to find the best and accurate way to set year/month/day to my input document My input log only prints hour:minute:second, like example above: 16:00:00,840 blablabla..… --- ## [NoSuchMethodError for org.elasticsearch.action.search.SearchRequest.allowPartialSearchResults](https://discuss.elastic.co/t/nosuchmethoderror-for-org-elasticsearch-action-search-searchrequest-allowpartialsearchresults/157236)
**Author:** [@kma\_jinnahm](https://discuss.elastic.co/u/kma_jinnahm)\ **Replies:** 1\ **Last updated:** [November 19, 2018, 7:24pm UTC](https://discuss.elastic.co/t/nosuchmethoderror-for-org-elasticsearch-action-search-searchrequest-allowpartialsearchresults/157236 "2018-11-19T19:24:07Z")
I am writing a spring boot application to connect with elastic search. I am using "elasticsearch-rest-high-level-client" to connect with es. When I search doc using below code, I am getting NoSuchMethodError which is lis… --- ## [Kibana plugin enhanced tilemap not installing](https://discuss.elastic.co/t/kibana-plugin-enhanced-tilemap-not-installing/82352)
**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 1:53pm UTC](https://discuss.elastic.co/t/kibana-plugin-enhanced-tilemap-not-installing/82352 "2017-04-21T13:53:02Z")
How can I install the plugin. I tried download the zip file and extracting it to the plugin folder. I also tried many commands on cmd, but keep getting: kibana-plugin install http://artifacts.elastic.co/downloads/kibana… --- ## [How to fix \[logstash.filters.geoip.databasemanager\] Connection reset](https://discuss.elastic.co/t/how-to-fix-logstash-filters-geoip-databasemanager-connection-reset/294237)
**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\ **Replies:** 2\ **Last updated:** [January 18, 2022, 7:03am UTC](https://discuss.elastic.co/t/how-to-fix-logstash-filters-geoip-databasemanager-connection-reset/294237 "2022-01-18T07:03:21Z")
hi guys, I meet the issue and I don't know why? Does anybody know the reason? Jan 14 10:23:18 OANWELKL1 logstash\[4874\]: \[2022-01-14T10:23:18,644\]\[WARN \]\[org.logstash.instrument.metrics.gauge.LazyDelegatingGauge\]\[main\] … --- ## [Filebeat: input: awscloudwatch (expression pattern for log\_group)](https://discuss.elastic.co/t/filebeat-input-awscloudwatch-expression-pattern-for-log-group/250781)
**Author:** [@srolskyi](https://discuss.elastic.co/u/srolskyi)\ **Replies:** 2\ **Last updated:** [October 7, 2020, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-input-awscloudwatch-expression-pattern-for-log-group/250781 "2020-10-07T14:09:07Z")
I have many log\_groups in clodwatch ~ 400. But I need parse only 77 from this long list. Can I grab events from log group use some pattern? For example: log\_group\_arn: arn:aws:logs:us-east-1:0000000000:log-group:/dev… --- ## [Apm service-map Internal Server Error (500)](https://discuss.elastic.co/t/apm-service-map-internal-server-error-500/242818)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 4:02am UTC](https://discuss.elastic.co/t/apm-service-map-internal-server-error-500/242818 "2020-07-28T04:02:40Z")
This service has data. When I click "Service Map", a 500 error appears, I don’t know what data is missing. { "type":"log", "@timestamp":"2020-07-28T00:46:14Z", "tags":\[ "error", "http"\],… --- ## [Migrating the Splunk Visualizations and Dashboards to Kibana](https://discuss.elastic.co/t/migrating-the-splunk-visualizations-and-dashboards-to-kibana/219580)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [February 17, 2020, 11:20am UTC](https://discuss.elastic.co/t/migrating-the-splunk-visualizations-and-dashboards-to-kibana/219580 "2020-02-17T11:20:17Z")
Is there any best practice/tool to migrate the Splunk Reports/Visualizations/Dashboards to Kibana? Or the only way is to recreate them in Kibana? --- ## [System requirements for Metricbeat](https://discuss.elastic.co/t/system-requirements-for-metricbeat/171135)
**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\ **Replies:** 2\ **Last updated:** [March 20, 2019, 1:36pm UTC](https://discuss.elastic.co/t/system-requirements-for-metricbeat/171135 "2019-03-20T13:36:57Z")
HI I had installed metricbeat and it is working fine but we saw in all clients that the Average CPU use for Metricbeat client is between 1% or 2%, I was wondering if this behavior is normal or maybe if Elastic has a fo… --- ## [Aggregate filter with timeout\_timestamp\_field](https://discuss.elastic.co/t/aggregate-filter-with-timeout-timestamp-field/144260)
**Author:** [@lakshmi-github](https://discuss.elastic.co/u/lakshmi-github)\ **Replies:** 2\ **Last updated:** [August 14, 2018, 5:18am UTC](https://discuss.elastic.co/t/aggregate-filter-with-timeout-timestamp-field/144260 "2018-08-14T05:18:52Z")
Hello, I am trying to get a count of certain log events aggregated by minute where the timestamp should be based on a date-time string in the log. Based on the documentation for aggregation, here is what I have so far. … --- ## [Tracking\_column in JDBC input plugin](https://discuss.elastic.co/t/tracking-column-in-jdbc-input-plugin/127362)
**Author:** [@sujeetKumar](https://discuss.elastic.co/u/sujeetKumar)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 8:41pm UTC](https://discuss.elastic.co/t/tracking-column-in-jdbc-input-plugin/127362 "2018-04-10T20:41:46Z")
I just want to understand how it really works in deep. In my case, I have a table where I have a datetime column last\_modified\_date. I kept this as tracking column and I want to achieve: If the row is getting updated… --- ## [Watcher alert for ml jobs](https://discuss.elastic.co/t/watcher-alert-for-ml-jobs/99389)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 7:49am UTC](https://discuss.elastic.co/t/watcher-alert-for-ml-jobs/99389 "2017-09-12T07:49:31Z")
Hi, I want to create alerts for an ml job. I’m finding anomalies in the error log. Please find the JSON below: { "job\_id": "errorlog\_pattern\_analysis", "job\_type": "anomaly\_detector", "job\_version": "5.5.2", "d… --- ## [Multiline doesn't read last line](https://discuss.elastic.co/t/multiline-doesnt-read-last-line/80621)
**Author:** [@bertvervaele](https://discuss.elastic.co/u/bertvervaele)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 8:43am UTC](https://discuss.elastic.co/t/multiline-doesnt-read-last-line/80621 "2017-03-30T08:43:28Z")
I know this is a known problem but I can't find I there is already a solution to it. So I want to read the oracle log file. This looks like this: Sat Apr 09 10:13:17 2016 Archived Log entry 24018 added for thread 1 se… --- ## [Json direct to Java class?](https://discuss.elastic.co/t/json-direct-to-java-class/6585)
**Author:** [@Ben\_Rometsch](https://discuss.elastic.co/u/Ben_Rometsch)\ **Replies:** 2\ **Last updated:** [February 3, 2012, 4:54pm UTC](https://discuss.elastic.co/t/json-direct-to-java-class/6585 "2012-02-03T16:54:13Z")
Hi, I've been using XContentBuilder within the Java API to index documents. Is there a corresponding way to populate objects with JSON data? E.g. in Gson you can say BagOfPrimitives obj2 = gson.fromJson(json, Bag… --- ## [How to determine which node is the master (without using \_cat endpoint) in an application](https://discuss.elastic.co/t/how-to-determine-which-node-is-the-master-without-using-cat-endpoint-in-an-application/354672)
**Author:** [@buitcj](https://discuss.elastic.co/u/buitcj)\ **Replies:** 4\ **Last updated:** [March 5, 2024, 2:39am UTC](https://discuss.elastic.co/t/how-to-determine-which-node-is-the-master-without-using-cat-endpoint-in-an-application/354672 "2024-03-05T02:39:59Z")
I am trying to determine if a node is the master elasticsearch node so that I can determine if my script should run. My script creates a user using the elasticsearch-cli binary and I want to ensure that this happens a si… --- ## [Clear search box after submit](https://discuss.elastic.co/t/clear-search-box-after-submit/280235)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 4\ **Last updated:** [August 15, 2021, 1:52am UTC](https://discuss.elastic.co/t/clear-search-box-after-submit/280235 "2021-08-15T01:52:38Z")
Hello, I need to clear the input box value after submitting a search. I tried the solution of this topic : But if I set setSearchTerm("") Then: Filters reseted query is removed from url I only want to remove the… [Previous page](https://discuss.elastic.co/top.md?page=1197&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1199&per_page=50&period=all)