# Top

**URL:** https://discuss.elastic.co/top.md?page=1201&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1202

---

## [Elasticsearch Curator not listing .kibana indices (TLS/SSL)](https://discuss.elastic.co/t/elasticsearch-curator-not-listing-kibana-indices-tls-ssl/224210)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 6\
**Last updated:** [March 20, 2020, 3:30am UTC](https://discuss.elastic.co/t/elasticsearch-curator-not-listing-kibana-indices-tls-ssl/224210 "2020-03-20T03:30:43Z")

</div>

Elasticsearch docker image version: 6.8.2 Curator docker image version: 5.8.1 (also tried 5.7.6 which is prior to this pr that handles all .kibana indices) What I have observed: Elasticsearch Curator is not listing .…

---

## [Index with millions nested documents](https://discuss.elastic.co/t/index-with-millions-nested-documents/211861)

<div class="topic-metadata">

**Author:** [@Babytut](https://discuss.elastic.co/u/Babytut)\
**Replies:** 6\
**Last updated:** [December 16, 2019, 6:09am UTC](https://discuss.elastic.co/t/index-with-millions-nested-documents/211861 "2019-12-16T06:09:57Z")

</div>

I have a problem when design Elasticsearch mapping. I have 2 table in Postgresql: Person table with 1000 records and Variant table with 50M records. Each person has 20 millions variants and each variant belongs to at le…

---

## [Kv filter killing logstash performance (II) \[Solved\]](https://discuss.elastic.co/t/kv-filter-killing-logstash-performance-ii-solved/158435)

<div class="topic-metadata">

**Author:** [@nacesprin](https://discuss.elastic.co/u/nacesprin)\
**Replies:** 6\
**Last updated:** [November 30, 2018, 10:48am UTC](https://discuss.elastic.co/t/kv-filter-killing-logstash-performance-ii-solved/158435 "2018-11-30T10:48:19Z")

</div>

Hello. I have exactly the same problem like KV filter killing logstash performance but I continue on this post due to I cannot reply on it. I mean, by using KV filter, the CPU go after some hours at 100%. If I disable K…

---

## [Generate report in Kibana results in 404](https://discuss.elastic.co/t/generate-report-in-kibana-results-in-404/269050)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 8\
**Last updated:** [April 13, 2021, 2:00pm UTC](https://discuss.elastic.co/t/generate-report-in-kibana-results-in-404/269050 "2021-04-13T14:00:22Z")

</div>

If I generate a pdf report from Kibana web UI, using Share \> PDF Reports \> Generate PDF. Then I got to : Stack Management \> Reporting \> Download report The resulting report just has: ELK Stack version 7.11.2 The sa…

---

## [Elasticsearch Cluster version 7.7 is not stable](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565)

<div class="topic-metadata">

**Author:** [@dat\_le](https://discuss.elastic.co/u/dat_le)\
**Replies:** 8\
**Last updated:** [January 12, 2021, 6:54am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-version-7-7-is-not-stable/259565 "2021-01-12T06:54:28Z")

</div>

Hello guys, Can anyone help me on this problem? My Cluster: I have a ES cluster with 3 nodes version 7.7. Every node have 2 vCPU and 16GB Ram. I have 2 index: Index 1: 121 MB (1.9M Doc, 2 Primary Shards, 1 Replica Sh…

---

## [A cautionary tale about index autocreation](https://discuss.elastic.co/t/a-cautionary-tale-about-index-autocreation/14104)

<div class="topic-metadata">

**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Replies:** 8\
**Last updated:** [March 31, 2015, 8:18am UTC](https://discuss.elastic.co/t/a-cautionary-tale-about-index-autocreation/14104 "2015-03-31T08:18:52Z")

</div>

I'm going to write this now before I forget about it. We're going to turn off automatic index creation. We find it hides deployment mistakes. Everything will look like it is working but you're Italian text is sudd…

---

## [Email trace logs in the Microsoft Office 365 integration](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649)

<div class="topic-metadata">

**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\
**Replies:** 1\
**Last updated:** [April 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/email-trace-logs-in-the-microsoft-office-365-integration/301649 "2022-04-14T08:17:05Z")

</div>

Hello, Is it possible to get the email trace logs (delivery status, sender, recipient, subject and attachments fields) in the Microsoft Office 365 integration in the Kibana 7.16.3? Some of these fields are presented at…

---

## [Fetch time too slow for a query that only needs documents ids](https://discuss.elastic.co/t/fetch-time-too-slow-for-a-query-that-only-needs-documents-ids/41953)

<div class="topic-metadata">

**Author:** [@Max\_Soderlund](https://discuss.elastic.co/u/Max_Soderlund)\
**Replies:** 1\
**Last updated:** [March 16, 2016, 4:54pm UTC](https://discuss.elastic.co/t/fetch-time-too-slow-for-a-query-that-only-needs-documents-ids/41953 "2016-03-16T16:54:04Z")

</div>

Hi there, I'm working on a query that only needs to get the id's of the results. I'm doing this with a scan/scroll search, however, the size of the fetch time for the results is too big for a realtime application (over 3…

---

## [Method threw 'java.lang.NoClassDefFoundError' exception. Cannot evaluate org.elasticsearch.search.builder.SearchSourceBuilder.toString()](https://discuss.elastic.co/t/method-threw-java-lang-noclassdeffounderror-exception-cannot-evaluate-org-elasticsearch-search-builder-searchsourcebuilder-tostring/235956)

<div class="topic-metadata">

**Author:** [@ManojKumar\_Julakanti](https://discuss.elastic.co/u/ManojKumar_Julakanti)\
**Replies:** 1\
**Last updated:** [June 5, 2020, 1:32pm UTC](https://discuss.elastic.co/t/method-threw-java-lang-noclassdeffounderror-exception-cannot-evaluate-org-elasticsearch-search-builder-searchsourcebuilder-tostring/235956 "2020-06-05T13:32:08Z")

</div>

I couldn't instantiate SearchSourceBuilder my elastic-search version is 7.6.0 I am using rest high level client

---

## [How to calculate count by field?](https://discuss.elastic.co/t/how-to-calculate-count-by-field/175874)

<div class="topic-metadata">

**Author:** [@Oleg\_Gorelikov](https://discuss.elastic.co/u/Oleg_Gorelikov)\
**Replies:** 1\
**Last updated:** [April 9, 2019, 12:11am UTC](https://discuss.elastic.co/t/how-to-calculate-count-by-field/175874 "2019-04-09T00:11:38Z")

</div>

Hi ! I need to create two Y-Axis with two different agregation for different filters. In Average agregation i can choose Field, but in Count i cant choose field. Why? And what i need to do ?

---

## [Logstash JDBC input : Encrypted username and password](https://discuss.elastic.co/t/logstash-jdbc-input-encrypted-username-and-password/142731)

<div class="topic-metadata">

**Author:** [@Goyal.vikas87](https://discuss.elastic.co/u/Goyal.vikas87)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 9:43am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-encrypted-username-and-password/142731 "2018-08-02T09:43:09Z")

</div>

Please help how I can use encrypted username and password in logstash config files rather than hard coding in input section. Is there any way that I can read the parameters from an external file.

---

## [Not able to use scripting\_field to show distance: ES\_6.1](https://discuss.elastic.co/t/not-able-to-use-scripting-field-to-show-distance-es-6-1/116033)

<div class="topic-metadata">

**Author:** [@neha\_sharma](https://discuss.elastic.co/u/neha_sharma)\
**Replies:** 1\
**Last updated:** [January 18, 2018, 1:54pm UTC](https://discuss.elastic.co/t/not-able-to-use-scripting-field-to-show-distance-es-6-1/116033 "2018-01-18T13:54:43Z")

</div>

Hi I am new to Elastic search. I want to show distance in result while using "\_search" where "location" field is of type : geopoint; I found we can use script\_fields but this is not working. To mention : I am using 6.1 …

---

## [Correct method for geospatial mapping from postgres -\> logstash -\> Elasticsearch](https://discuss.elastic.co/t/correct-method-for-geospatial-mapping-from-postgres-logstash-elasticsearch/27010)

<div class="topic-metadata">

**Author:** [@Freddie](https://discuss.elastic.co/u/Freddie)\
**Replies:** 1\
**Last updated:** [August 7, 2015, 11:28pm UTC](https://discuss.elastic.co/t/correct-method-for-geospatial-mapping-from-postgres-logstash-elasticsearch/27010 "2015-08-07T23:28:27Z")

</div>

I'm getting the following error, on the mapping template "boundingArea": { "type": "geo\_shape", "tree": "quadtree", "precision": "1m" }, Does any…

---

## [\[Grok\] Array of patterns - only first pattern matched](https://discuss.elastic.co/t/grok-array-of-patterns-only-first-pattern-matched/256234)

<div class="topic-metadata">

**Author:** [@james64](https://discuss.elastic.co/u/james64)\
**Replies:** 2\
**Last updated:** [November 21, 2020, 5:19pm UTC](https://discuss.elastic.co/t/grok-array-of-patterns-only-first-pattern-matched/256234 "2020-11-21T17:19:21Z")

</div>

Hello, based on this documentation I am trying to use grok filter with this configuration: grok { match =\> { "message" =\> \[ ' volume\_path="%{UNIXPATH:csi\_volume\_path}', …

---

## [Sharepoint connection to ELK](https://discuss.elastic.co/t/sharepoint-connection-to-elk/222040)

<div class="topic-metadata">

**Author:** [@Be1](https://discuss.elastic.co/u/Be1)\
**Replies:** 2\
**Last updated:** [March 4, 2020, 12:35pm UTC](https://discuss.elastic.co/t/sharepoint-connection-to-elk/222040 "2020-03-04T12:35:12Z")

</div>

I have a sharepoint list .Those details needs to be pushed to elastic search. From there I would be performing visualizations in Kibana Is there any way this sharepoint list data can be added to elastic search If there…

---

## [Multiple indices sql query](https://discuss.elastic.co/t/multiple-indices-sql-query/150824)

<div class="topic-metadata">

**Author:** [@varunarathinam](https://discuss.elastic.co/u/varunarathinam)\
**Replies:** 2\
**Last updated:** [October 8, 2018, 1:17pm UTC](https://discuss.elastic.co/t/multiple-indices-sql-query/150824 "2018-10-08T13:17:56Z")

</div>

Hi, Im trying to sql query from kibana side post method using. My index name like "sample\_index-\*" i want query in that index. when i try to sql query i got error like; post \_xpack/sql/translate { "query": "select …

---

## [Kibana Visualization time range filter gave incorrect result](https://discuss.elastic.co/t/kibana-visualization-time-range-filter-gave-incorrect-result/126662)

<div class="topic-metadata">

**Author:** [@Xu\_Ray](https://discuss.elastic.co/u/Xu_Ray)\
**Replies:** 2\
**Last updated:** [April 9, 2018, 5:44am UTC](https://discuss.elastic.co/t/kibana-visualization-time-range-filter-gave-incorrect-result/126662 "2018-04-09T05:44:20Z")

</div>

Greetings! I have a issue with visualization result. Seems the kibana did not give me correct value. I am using ELK 6.2.1. Also updated a few days ago to 6.2.3. Still the issue exists. What I am trying to do: I'd lik…

---

## [Trying to vizualize "top N/ordered" ratios](https://discuss.elastic.co/t/trying-to-vizualize-top-n-ordered-ratios/95747)

<div class="topic-metadata">

**Author:** [@smcooper](https://discuss.elastic.co/u/smcooper)\
**Replies:** 2\
**Last updated:** [August 4, 2017, 9:11pm UTC](https://discuss.elastic.co/t/trying-to-vizualize-top-n-ordered-ratios/95747 "2017-08-04T21:11:40Z")

</div>

Hi, I am unsuccessfully trying to get a visualization of ordered ratio. After reading various posts/questions/requests I start to doubt that what I am looking for is (yet) available through Kibana, but as a I am a new…

---

## [Can i create my own navbar on top of Kibana?](https://discuss.elastic.co/t/can-i-create-my-own-navbar-on-top-of-kibana/94846)

<div class="topic-metadata">

**Author:** [@ayadirh](https://discuss.elastic.co/u/ayadirh)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 7:36pm UTC](https://discuss.elastic.co/t/can-i-create-my-own-navbar-on-top-of-kibana/94846 "2017-07-27T19:36:36Z")

</div>

I want to create navbars, dropdowns, panels on top of Kibana dashboard. So that i can customize the look and feel. Different Dashboard must be loaded through menus in Navbars. Displaying Title on the div Time filter is e…

---

## [Message: MissingPropertyException\[No such property: red for class](https://discuss.elastic.co/t/message-missingpropertyexception-no-such-property-red-for-class/90296)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 2:18pm UTC](https://discuss.elastic.co/t/message-missingpropertyexception-no-such-property-red-for-class/90296 "2017-06-21T14:18:08Z")

</div>

I am new to watcher so I do a test with exemple from doc. I have copied/pasted the exemple https://www.elastic.co/guide/en/watcher/2.3/watching-marvel-data.html and I have an exception No such property: red for class …

---

## [What future for Curator?](https://discuss.elastic.co/t/what-future-for-curator/261661)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 3:56pm UTC](https://discuss.elastic.co/t/what-future-for-curator/261661 "2021-01-20T15:56:28Z")

</div>

The most recent release notes for Curator contain this: No, Curator isn't going away. But as you can tell, it's not as actively developed as it once was. I am gratified to find there are still users who make it a par…

---

## [How to combine transform with rollover?](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841)

<div class="topic-metadata">

**Author:** [@Laurynas](https://discuss.elastic.co/u/Laurynas)\
**Replies:** 4\
**Last updated:** [April 28, 2020, 8:54pm UTC](https://discuss.elastic.co/t/how-to-combine-transform-with-rollover/228841 "2020-04-28T20:54:20Z")

</div>

Hello, I was not able to find any information if it is possible to rollover transform destination index? I tried and that did not work, but maybe I am missing something. Currently I set destination index to "foo-00001" …

---

## [CollectD in HP-UX server B.11.31 U ia64](https://discuss.elastic.co/t/collectd-in-hp-ux-server-b-11-31-u-ia64/220791)

<div class="topic-metadata">

**Author:** [@renu\_jessi](https://discuss.elastic.co/u/renu_jessi)\
**Replies:** 4\
**Last updated:** [March 11, 2020, 1:09pm UTC](https://discuss.elastic.co/t/collectd-in-hp-ux-server-b-11-31-u-ia64/220791 "2020-03-11T13:09:27Z")

</div>

Hi, I am working on CollectdD with logstash ,i need to install collectd in hp ux server,please help me with the installation process and list of dependencies i need to install. server details : HP-UX server B.11.31 …

---

## [Aggregate messages in sequence order?](https://discuss.elastic.co/t/aggregate-messages-in-sequence-order/220251)

<div class="topic-metadata">

**Author:** [@jfro](https://discuss.elastic.co/u/jfro)\
**Replies:** 4\
**Last updated:** [February 26, 2020, 7:26pm UTC](https://discuss.elastic.co/t/aggregate-messages-in-sequence-order/220251 "2020-02-26T19:26:11Z")

</div>

I have vendor appliance that I'm sending syslog data from to logstash v6.5.4. The appliance splits messages that are over 1kB into separate messages and then sends them out via UDP. We had kafka buffering messages befor…

---

## [S3の情報を取得する方法(tags設定時)](https://discuss.elastic.co/t/s3-tags/209240)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 4\
**Last updated:** [December 2, 2019, 6:57am UTC](https://discuss.elastic.co/t/s3-tags/209240 "2019-12-02T06:57:58Z")

</div>

再度質問を失礼させて頂きます。 S3→SQS→Filebeat→Logstash→Elasticsearchの連携時、 filebeat.ymlでS3バケット名・ファイル名毎にtagsを設定し連携しようとしています。 以下の定義情報の元、疎通すると意図しないインデックスデータが登録されます。 filebeat.yml #=========================== Filebeat inputs ==========…

---

## [How to replace grok pattern with new name](https://discuss.elastic.co/t/how-to-replace-grok-pattern-with-new-name/148715)

<div class="topic-metadata">

**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\
**Replies:** 4\
**Last updated:** [September 15, 2018, 8:09pm UTC](https://discuss.elastic.co/t/how-to-replace-grok-pattern-with-new-name/148715 "2018-09-15T20:09:08Z")

</div>

below example -- May be i have given wrong subject : but what iam looking example as below : First example is my netscaler log and second one is switch log Switch log syslog message ok. But netscalar log i get as net…

---

## [Xpack issues](https://discuss.elastic.co/t/xpack-issues/118103)

<div class="topic-metadata">

**Author:** [@noelgeorgi](https://discuss.elastic.co/u/noelgeorgi)\
**Replies:** 4\
**Last updated:** [February 6, 2018, 5:03am UTC](https://discuss.elastic.co/t/xpack-issues/118103 "2018-02-06T05:03:25Z")

</div>

Well I have created a 2 node master and a single data node cluster: master:-config cluster.name: elasticsearch bootstrap.memory\_lock: false network.host: 0.0.0.0 xpack.security.authc.anonymous.username: anonymous\_user …

---

## [Logstash on port 10514. need help for my assignment, thankyou](https://discuss.elastic.co/t/logstash-on-port-10514-need-help-for-my-assignment-thankyou/95101)

<div class="topic-metadata">

**Author:** [@Amity4](https://discuss.elastic.co/u/Amity4)\
**Replies:** 4\
**Last updated:** [July 31, 2017, 1:31am UTC](https://discuss.elastic.co/t/logstash-on-port-10514-need-help-for-my-assignment-thankyou/95101 "2017-07-31T01:31:14Z")

</div>

so, i need to take data from port 10514 on server from my virtual machine. i’ve tried but i didn’t success yet . can you help me to configure the logstash? my logstash-syslog.conf content is like this : and the outpu…

---

## [Install ECE 1.0.0 beta fail on Debian 8.7](https://discuss.elastic.co/t/install-ece-1-0-0-beta-fail-on-debian-8-7/78671)

<div class="topic-metadata">

**Author:** [@ptualek](https://discuss.elastic.co/u/ptualek)\
**Replies:** 4\
**Last updated:** [March 17, 2017, 8:22am UTC](https://discuss.elastic.co/t/install-ece-1-0-0-beta-fail-on-debian-8-7/78671 "2017-03-17T08:22:22Z")

</div>

Hi, I got problem after install ECE 1.0.0beta. Installation stuck at "Creating Admin Console Elasticsearch backend" and finally it fail to install. Could anyone give any suggestion? OS: Debian 8.7 Kernel: Debian 3.16…

---

## [What would be a good index design for my use case?](https://discuss.elastic.co/t/what-would-be-a-good-index-design-for-my-use-case/26156)

<div class="topic-metadata">

**Author:** [@flow](https://discuss.elastic.co/u/flow)\
**Replies:** 4\
**Last updated:** [July 25, 2015, 4:24pm UTC](https://discuss.elastic.co/t/what-would-be-a-good-index-design-for-my-use-case/26156 "2015-07-25T16:24:17Z")

</div>

Dear community, I am dealing with a huge amount of data (in the order of TBs) and a lot of nodes. I have two data sources, let's call them general input and events. While the general input is somehow predictable in size …

---

## [Kibana 7.11.1 failing on Docker 7 Raspberry PI4 (arm7)](https://discuss.elastic.co/t/kibana-7-11-1-failing-on-docker-7-raspberry-pi4-arm7/264984)

<div class="topic-metadata">

**Author:** [@ssddgreg](https://discuss.elastic.co/u/ssddgreg)\
**Replies:** 3\
**Last updated:** [October 6, 2021, 8:55am UTC](https://discuss.elastic.co/t/kibana-7-11-1-failing-on-docker-7-raspberry-pi4-arm7/264984 "2021-10-06T08:55:23Z")

</div>

Hi, I am trying to run Kibana 7.11.1 as a Docker container on Raspberry Pi 4. I can build the image, however I hit the following error on docker run: {"type":"log","@timestamp":"2021-02-21T13:02:58+00:00","tags":\["…

---

## [Dotnet core log - filter timestamp from log entry (filebeat, logstash)](https://discuss.elastic.co/t/dotnet-core-log-filter-timestamp-from-log-entry-filebeat-logstash/126095)

<div class="topic-metadata">

**Author:** [@Mason\_Batley](https://discuss.elastic.co/u/Mason_Batley)\
**Replies:** 3\
**Last updated:** [April 3, 2018, 1:00pm UTC](https://discuss.elastic.co/t/dotnet-core-log-filter-timestamp-from-log-entry-filebeat-logstash/126095 "2018-04-03T13:00:49Z")

</div>

Hi gang, I'm importing logs from a dotnet core app using serilog and the output messages in the log file look like this. I need to work out out to extract the timestamp from the log entry line and use that as the @times…

---

## [Kibana loading very slow after update to 4.3.1](https://discuss.elastic.co/t/kibana-loading-very-slow-after-update-to-4-3-1/42684)

<div class="topic-metadata">

**Author:** [@srinivas](https://discuss.elastic.co/u/srinivas)\
**Replies:** 3\
**Last updated:** [March 2, 2016, 7:49pm UTC](https://discuss.elastic.co/t/kibana-loading-very-slow-after-update-to-4-3-1/42684 "2016-03-02T19:49:15Z")

</div>

I just updated my Kibana to 4.3.1 and I am facing some problems in kibana loading : While configuring the index I have selected the option contains time-based events enabled. The date format I am using an field pres…

---

## [Is it possible to redact parts of the captured body in NodeJS APM?](https://discuss.elastic.co/t/is-it-possible-to-redact-parts-of-the-captured-body-in-nodejs-apm/335804)

<div class="topic-metadata">

**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\
**Replies:** 5\
**Last updated:** [June 13, 2023, 8:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-redact-parts-of-the-captured-body-in-nodejs-apm/335804 "2023-06-13T20:31:45Z")

</div>

I'm using the NodeJS APM agent for capturing activity on my server. I currently have the APM init configured with captureBody: 'errors' which is great for debugging, but it doesn't seem to redact anything which means tha…

---

## [How to send two different log file types from the same source directory to logstash](https://discuss.elastic.co/t/how-to-send-two-different-log-file-types-from-the-same-source-directory-to-logstash/180366)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 5\
**Last updated:** [May 10, 2019, 2:11pm UTC](https://discuss.elastic.co/t/how-to-send-two-different-log-file-types-from-the-same-source-directory-to-logstash/180366 "2019-05-10T14:11:05Z")

</div>

I have been sending two different log files to logstash from two different source directories. One type is an "Index log" that is always named "IndexService\*.log", for example: IndexService-sv\_Toolkit-GBWLLSLO015-310120…

---

## [Pulling relevant info out of logs in watcher alerts](https://discuss.elastic.co/t/pulling-relevant-info-out-of-logs-in-watcher-alerts/162374)

<div class="topic-metadata">

**Author:** [@Chris\_Meyer](https://discuss.elastic.co/u/Chris_Meyer)\
**Replies:** 5\
**Last updated:** [January 2, 2019, 5:12pm UTC](https://discuss.elastic.co/t/pulling-relevant-info-out-of-logs-in-watcher-alerts/162374 "2019-01-02T17:12:02Z")

</div>

Hello, Is there a way to pull information out of logs similar to {{ctx.payload.hits.total}}? Say I am building a report on account lockouts with the goal to send an email if an account gets locked out. "message": "A u…

---

## [IllegalArgumentException error](https://discuss.elastic.co/t/illegalargumentexception-error/33024)

<div class="topic-metadata">

**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\
**Replies:** 5\
**Last updated:** [October 27, 2015, 3:39pm UTC](https://discuss.elastic.co/t/illegalargumentexception-error/33024 "2015-10-27T15:39:19Z")

</div>

Hello, We have simple code and we would like to validate that log entry was properly indexed. We ran the command: curl 'localhost:9200/\_search' into the JSON interface. However, we get the following error: { "er…

---

## [How can I create logstash conf filter with different patterns for different lines for input file?](https://discuss.elastic.co/t/how-can-i-create-logstash-conf-filter-with-different-patterns-for-different-lines-for-input-file/31588)

<div class="topic-metadata">

**Author:** [@Stella\_Martin](https://discuss.elastic.co/u/Stella_Martin)\
**Replies:** 5\
**Last updated:** [October 4, 2015, 8:10pm UTC](https://discuss.elastic.co/t/how-can-i-create-logstash-conf-filter-with-different-patterns-for-different-lines-for-input-file/31588 "2015-10-04T20:10:29Z")

</div>

I have following file format HeadingString1\<\\tab\>HeadingString2\<\\tab\>......\<\\tab\>HeadingStringN Col11\_1\<\\tab\>Col11\_2\<\\tab\>Col21\_1\<\\tab\>Col21\_2\<\\tab\>...\<\\tab\>ColN1\_1\<\\tab\>ColN1\_2 Col12\_1\<\\tab\>Col12\_2\<\\tab\>Col22\_1\<\\tab\>C…

---

## ["Playing" with ElasticSearch Grails plugin](https://discuss.elastic.co/t/playing-with-elasticsearch-grails-plugin/9108)

<div class="topic-metadata">

**Author:** [@Alejandro\_Asensio](https://discuss.elastic.co/u/Alejandro_Asensio)\
**Replies:** 5\
**Last updated:** [May 28, 2014, 11:46am UTC](https://discuss.elastic.co/t/playing-with-elasticsearch-grails-plugin/9108 "2014-05-28T11:46:00Z")

</div>

First of all i must say that ES looks pretty good. After that, i should say that I'm new in search engines so do blame my due to my silly questions. I have configured my Domain Class called (News) using searchabl…

---

## [RE: NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{DzxzK0iPRpWhbsQrG1XL-Q}{localhost}{127.0.0.1:9200}\]\]](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210)

<div class="topic-metadata">

**Author:** [@a\_m1](https://discuss.elastic.co/u/a_m1)\
**Replies:** 7\
**Last updated:** [November 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210 "2020-11-17T07:02:44Z")

</div>

NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{uM03bFC3TFaMt15Oe0ZUpA}{172.17.1.63}{172.17.1.63:9300}\]\] I am using spring boot 2.3.4 rest API, elasticsearch 7.9.3, kibana 7.6.2. I…

---

## [AppSearch Wrong Results From Response](https://discuss.elastic.co/t/appsearch-wrong-results-from-response/242787)

<div class="topic-metadata">

**Author:** [@corvallo](https://discuss.elastic.co/u/corvallo)\
**Replies:** 7\
**Last updated:** [July 28, 2020, 12:53pm UTC](https://discuss.elastic.co/t/appsearch-wrong-results-from-response/242787 "2020-07-28T12:53:32Z")

</div>

Hi everyone, I'm quite new to the Elasticsearch world. I managed to configure Elastic Search Stack to run on docker, version 7.6.0 . I use AppSearch and I'm facing a strange behavior when I receive results. I've some d…

---

## [Oracle Modules](https://discuss.elastic.co/t/oracle-modules/230345)

<div class="topic-metadata">

**Author:** [@Mario\_Fimiani](https://discuss.elastic.co/u/Mario_Fimiani)\
**Replies:** 7\
**Last updated:** [June 4, 2020, 3:39pm UTC](https://discuss.elastic.co/t/oracle-modules/230345 "2020-06-04T15:39:18Z")

</div>

Hi we are testing this module for metricbeat (v7.5.0) that work with standard OCI driver. We installed/tested the following : enable the module instant client (as per doc) modify the systemd script to load the ENV va…

---

## [Get field with nested array using ruby filter](https://discuss.elastic.co/t/get-field-with-nested-array-using-ruby-filter/100661)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [September 16, 2017, 5:19am UTC](https://discuss.elastic.co/t/get-field-with-nested-array-using-ruby-filter/100661 "2017-09-16T05:19:34Z")

</div>

Hi All I have a json data in this format \`{"foo":"bar","test":{"steps":\[{"response\_time":"100"},{"response\_time":"101","more\_nested":\[{"hello":"world"},{"hello2":"world2"}\]}\]}}\` i am getting result in kibana as below …

---

## [Translog files corrupted, cluster failing to recover](https://discuss.elastic.co/t/translog-files-corrupted-cluster-failing-to-recover/58466)

<div class="topic-metadata">

**Author:** [@tarantin](https://discuss.elastic.co/u/tarantin)\
**Replies:** 1\
**Last updated:** [August 20, 2016, 7:26am UTC](https://discuss.elastic.co/t/translog-files-corrupted-cluster-failing-to-recover/58466 "2016-08-20T07:26:25Z")

</div>

After a system crash (disk issues) of a 2 node clusters (shard replication configured to 0), some of the translog tlog files were corrupted/missing in lots of my index. I was wondering if there is a way to recover those …

---

## [Adding Menus/Buttons/Filters in Kibana](https://discuss.elastic.co/t/adding-menus-buttons-filters-in-kibana/28422)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 1\
**Last updated:** [September 1, 2015, 10:17pm UTC](https://discuss.elastic.co/t/adding-menus-buttons-filters-in-kibana/28422 "2015-09-01T22:17:08Z")

</div>

Hello I would like to add a Menu or a button in a dashboard in order to apply a specific filter for the tags in my logs. Is that possible?

---

## [Aggregates all lines messages between 2 date using multiline filter](https://discuss.elastic.co/t/aggregates-all-lines-messages-between-2-date-using-multiline-filter/27823)

<div class="topic-metadata">

**Author:** [@MichaelScofield](https://discuss.elastic.co/u/MichaelScofield)\
**Replies:** 1\
**Last updated:** [August 21, 2015, 9:38am UTC](https://discuss.elastic.co/t/aggregates-all-lines-messages-between-2-date-using-multiline-filter/27823 "2015-08-21T09:38:35Z")

</div>

I have a log like this: 2015-06-26 23:00:48,935 foo as "date1" whatever lines not start with date ... 2015-06-16 18:46:16,136 bar as "date2" I'm trying to get all lines between date…

---

## [Using ELK for collection and analysis of system metrics (vmstat, iostat, netstat)](https://discuss.elastic.co/t/using-elk-for-collection-and-analysis-of-system-metrics-vmstat-iostat-netstat/22307)

<div class="topic-metadata">

**Author:** [@yildirim](https://discuss.elastic.co/u/yildirim)\
**Replies:** 1\
**Last updated:** [February 22, 2015, 7:28am UTC](https://discuss.elastic.co/t/using-elk-for-collection-and-analysis-of-system-metrics-vmstat-iostat-netstat/22307 "2015-02-22T07:28:26Z")

</div>

Hi all, I would like to use ELK to collect and analyse linux system metrics like cpu, memory, io, ... usage, e. g. with vmstat, iostat, netstat, ... Can anyone give me hint, how/where to start or are there some log…

---

## [Kibana No results found for my index pattern](https://discuss.elastic.co/t/kibana-no-results-found-for-my-index-pattern/116605)

<div class="topic-metadata">

**Author:** [@Farhad\_Yousefi](https://discuss.elastic.co/u/Farhad_Yousefi)\
**Replies:** 6\
**Last updated:** [January 23, 2018, 11:41am UTC](https://discuss.elastic.co/t/kibana-no-results-found-for-my-index-pattern/116605 "2018-01-23T11:41:22Z")

</div>

I insert this pattern to find my object when I search in kibana curl -XPUT 'localhost:9200/exception\_index?pretty' -H 'Content-Type: application/json' -d' { "mappings": { "siam\_exception": { "dynamic": "tru…

---

## [Data not appearing in dashboards](https://discuss.elastic.co/t/data-not-appearing-in-dashboards/317582)

<div class="topic-metadata">

**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\
**Replies:** 2\
**Last updated:** [November 8, 2022, 2:08am UTC](https://discuss.elastic.co/t/data-not-appearing-in-dashboards/317582 "2022-11-08T02:08:32Z")

</div>

Hi, I have two filebeat indices/datastreams: filebeat-8.4.0 filebeat-8.4.0-custom These are both targeted by a Data View : filebeat-\* Using this data view in Discover, I can see all the events from both indices, how…

---

## [Dynamically show or hide visualisation using control](https://discuss.elastic.co/t/dynamically-show-or-hide-visualisation-using-control/278883)

<div class="topic-metadata">

**Author:** [@antongb](https://discuss.elastic.co/u/antongb)\
**Replies:** 2\
**Last updated:** [July 29, 2021, 3:37pm UTC](https://discuss.elastic.co/t/dynamically-show-or-hide-visualisation-using-control/278883 "2021-07-29T15:37:48Z")

</div>

Hi, I'm using a pie chart to display the % of counts of items from different categories. However, I don't want to display the chart until a category is first chosen from an options control. E.g. there are 2 categories:…

[Previous page](https://discuss.elastic.co/top.md?page=1200&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1202&per_page=50&period=all)
