# Top

**URL:** https://discuss.elastic.co/top.md?page=1205&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1206

---

## [Light theme for kibana?](https://discuss.elastic.co/t/light-theme-for-kibana/17279)

<div class="topic-metadata">

**Author:** [@bossi6of9](https://discuss.elastic.co/u/bossi6of9)\
**Replies:** 2\
**Last updated:** [May 2, 2014, 4:22am UTC](https://discuss.elastic.co/t/light-theme-for-kibana/17279 "2014-05-02T04:22:16Z")

</div>

Hi, ELK newbie... Is there a "light theme" available for kibana? The dark one is a bit rough for my eyes... -- You received this message because you are subscribed to the Google Groups "elasticsearch" gr…

---

## [Service fails to start, I don't know why](https://discuss.elastic.co/t/service-fails-to-start-i-dont-know-why/320837)

<div class="topic-metadata">

**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\
**Replies:** 3\
**Last updated:** [December 11, 2022, 11:48pm UTC](https://discuss.elastic.co/t/service-fails-to-start-i-dont-know-why/320837 "2022-12-11T23:48:01Z")

</div>

When security is disabled, they are talking via tcp (10. is the remote host sending rsyslog to elk and the 3. is the elk server)..... 21:50:01.334042 tun0 Out IP 10.226.28.173.53286 \> 3.133.215.55.5044: Flags \[S\], seq …

---

## [How to get all rules from Elasticsearch Security using curl API?](https://discuss.elastic.co/t/how-to-get-all-rules-from-elasticsearch-security-using-curl-api/311618)

<div class="topic-metadata">

**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\
**Replies:** 3\
**Last updated:** [August 16, 2022, 8:54am UTC](https://discuss.elastic.co/t/how-to-get-all-rules-from-elasticsearch-security-using-curl-api/311618 "2022-08-16T08:54:38Z")

</div>

I have been trying to get all the rules (thousands of them) from my Elasticsearch Security using the curl API, however the only example and way shown on the website is able to obtain only one single rule at a time by run…

---

## [Logstash not updating record and not giving any error](https://discuss.elastic.co/t/logstash-not-updating-record-and-not-giving-any-error/216977)

<div class="topic-metadata">

**Author:** [@saifrehman](https://discuss.elastic.co/u/saifrehman)\
**Replies:** 3\
**Last updated:** [February 3, 2020, 7:29am UTC](https://discuss.elastic.co/t/logstash-not-updating-record-and-not-giving-any-error/216977 "2020-02-03T07:29:09Z")

</div>

Logstash not updating documents. I am not receiving any error . Here is my code. input{ jdbc { jdbc\_connection\_string =\> "-------" jdbc\_user =\> "------" jdbc\_password =\> "-----" jdbc\_validate\_connection =\> true …

---

## [Metricbeat timestamp mapping as string type, should be date?](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521)

<div class="topic-metadata">

**Author:** [@andig](https://discuss.elastic.co/u/andig)\
**Replies:** 3\
**Last updated:** [December 27, 2017, 1:38am UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521 "2017-12-27T01:38:06Z")

</div>

Trying to get started with filebeat and metricbeat I've noticed that filebeat defines @timestamp as type/format date/date while metricbeat does so as string/date (as shown in the kibana index patterns). Consequently, us…

---

## ["make package" broken for community beats?](https://discuss.elastic.co/t/make-package-broken-for-community-beats/70511)

<div class="topic-metadata">

**Author:** [@fjgal](https://discuss.elastic.co/u/fjgal)\
**Replies:** 3\
**Last updated:** [January 6, 2017, 3:21pm UTC](https://discuss.elastic.co/t/make-package-broken-for-community-beats/70511 "2017-01-06T15:21:30Z")

</div>

Hi, I'm trying to build a community beat based on metribeat and it fails. To reproduce the issue I created a dummy beat following these steps: $ cd $GOPATH/src/github.com/someuser $ cookiecutter $GOPATH/src/github.co…

---

## [Scripted fields for Kibana alerting not showing](https://discuss.elastic.co/t/scripted-fields-for-kibana-alerting-not-showing/281913)

<div class="topic-metadata">

**Author:** [@aniket.sonavane](https://discuss.elastic.co/u/aniket.sonavane)\
**Replies:** 5\
**Last updated:** [August 23, 2021, 12:54pm UTC](https://discuss.elastic.co/t/scripted-fields-for-kibana-alerting-not-showing/281913 "2021-08-23T12:54:32Z")

</div>

The objective is to setup an email alert on heap\_utilization where heap\_utilization% is greater than 85% group by jvm\_name for production enviroment. I am working on elastic stack version 7.13.0 where I also set up APM …

---

## [How to optimize regexp filter](https://discuss.elastic.co/t/how-to-optimize-regexp-filter/252903)

<div class="topic-metadata">

**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\
**Replies:** 5\
**Last updated:** [October 23, 2020, 9:09pm UTC](https://discuss.elastic.co/t/how-to-optimize-regexp-filter/252903 "2020-10-23T21:09:58Z")

</div>

The following is one of our slow queries, I got from our slow query log. I tried run it locally which takes 38 seconds and return 6 records, but if I removed the "regexp" filter, it only takes like 8 miliseconds to finis…

---

## [Logstash with Slack plugin cannot be monitored in Kibana](https://discuss.elastic.co/t/logstash-with-slack-plugin-cannot-be-monitored-in-kibana/90348)

<div class="topic-metadata">

**Author:** [@Bob04](https://discuss.elastic.co/u/Bob04)\
**Replies:** 5\
**Last updated:** [June 28, 2017, 5:19pm UTC](https://discuss.elastic.co/t/logstash-with-slack-plugin-cannot-be-monitored-in-kibana/90348 "2017-06-28T17:19:50Z")

</div>

Hi All, After installing Slack plugin, Logstash cannot be monitored from Kibana, though it sends data to Elasticsearch. This is a Dockerfile: FROM logstash:5.3.0 RUN logstash-plugin install logstash-output-slack …

---

## [Can not start Elasticsearch 5.5 service](https://discuss.elastic.co/t/can-not-start-elasticsearch-5-5-service/107921)

<div class="topic-metadata">

**Author:** [@Jmart](https://discuss.elastic.co/u/Jmart)\
**Replies:** 1\
**Last updated:** [December 12, 2017, 12:16am UTC](https://discuss.elastic.co/t/can-not-start-elasticsearch-5-5-service/107921 "2017-12-12T00:16:17Z")

</div>

Hello all, I've recently installed elasticsearch 5.5 on a Windows Server 2012 with 16GB RAM. It has been working for a 3-4 weeks correctly. Yesterday server was restarted and the elasticsearch service can not start. We …

---

## [Docker overlay networks](https://discuss.elastic.co/t/docker-overlay-networks/45899)

<div class="topic-metadata">

**Author:** [@marco.gulino](https://discuss.elastic.co/u/marco.gulino)\
**Replies:** 1\
**Last updated:** [March 31, 2016, 12:38pm UTC](https://discuss.elastic.co/t/docker-overlay-networks/45899 "2016-03-31T12:38:27Z")

</div>

Hi! I'm trying to monitor packets (mainly http, mysql, redis, but it might be anything) using packetbeat on a Docker environment. Using a single docker instance everything works flawlessly, but when I try the same thing …

---

## [HTTP Protocol not sending header](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359)

<div class="topic-metadata">

**Author:** [@iemem15](https://discuss.elastic.co/u/iemem15)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 9:54am UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359 "2015-08-17T09:54:49Z")

</div>

Hi when sending info to elasticsearch I can't see the headers for the http protocol, Im using packet beats beta 2. I started with -d "httpdetailed" and I see the headers, but can't see them in elasticsearch I've configur…

---

## [Kibana deprecated scripted fields](https://discuss.elastic.co/t/kibana-deprecated-scripted-fields/324657)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 4\
**Last updated:** [February 8, 2023, 1:33pm UTC](https://discuss.elastic.co/t/kibana-deprecated-scripted-fields/324657 "2023-02-08T13:33:16Z")

</div>

Hi, My current setup uses scripted fields for the node name in the Metricbeat index. The goal is to be able to open a specific monitoring dashboard for that VM. As I see, this was deprecated from 7.13, but I'm not sure …

---

## [Force logstash to restart after "Pipeline aborted due to error"](https://discuss.elastic.co/t/force-logstash-to-restart-after-pipeline-aborted-due-to-error/272007)

<div class="topic-metadata">

**Author:** [@wmd](https://discuss.elastic.co/u/wmd)\
**Replies:** 4\
**Last updated:** [May 3, 2021, 9:45pm UTC](https://discuss.elastic.co/t/force-logstash-to-restart-after-pipeline-aborted-due-to-error/272007 "2021-05-03T21:45:51Z")

</div>

Logstash v6.3.1 is logging this at startup and then getting stuck forever: Sending Logstash's logs to /usr/share/logstash/logs which is now configured via log4j2.properties \[2021-04-30T13:05:39,258\]\[ERROR\]\[logstash.pipe…

---

## [How can i configure logstash to read every new csv files automatically?](https://discuss.elastic.co/t/how-can-i-configure-logstash-to-read-every-new-csv-files-automatically/223394)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 4\
**Last updated:** [March 13, 2020, 8:11pm UTC](https://discuss.elastic.co/t/how-can-i-configure-logstash-to-read-every-new-csv-files-automatically/223394 "2020-03-13T20:11:41Z")

</div>

How can i use logstash to read csv files in real time ? How can i configure logstash to read evey new csv files automatically ? I have an empty folder,I want each time by adding a file in this folder, logstash automati…

---

## [Basic Java Example Not Working for me](https://discuss.elastic.co/t/basic-java-example-not-working-for-me/192569)

<div class="topic-metadata">

**Author:** [@elasticHT](https://discuss.elastic.co/u/elasticHT)\
**Replies:** 4\
**Last updated:** [July 29, 2019, 10:13am UTC](https://discuss.elastic.co/t/basic-java-example-not-working-for-me/192569 "2019-07-29T10:13:01Z")

</div>

Using the basic Java example, here: https://www.elastic.co/guide/en/elasticsearch/client/java-api/current/java-search.html And having the following Maven dependencies installed: \<dependency\> \<groupId\>org.elast…

---

## [No Data after Pipeline main started](https://discuss.elastic.co/t/no-data-after-pipeline-main-started/52891)

<div class="topic-metadata">

**Author:** [@spraveenjd](https://discuss.elastic.co/u/spraveenjd)\
**Replies:** 4\
**Last updated:** [June 20, 2016, 8:17pm UTC](https://discuss.elastic.co/t/no-data-after-pipeline-main-started/52891 "2016-06-20T20:17:35Z")

</div>

I have created logstsh-order.conf and started the instance with that. I do see the logs Pipeline main started after that nothing happened. No Error and no data logs. Please help me out what going wrong here

---

## [Dynamic Rate Calculation](https://discuss.elastic.co/t/dynamic-rate-calculation/19897)

<div class="topic-metadata">

**Author:** [@Rifat\_Nabi](https://discuss.elastic.co/u/Rifat_Nabi)\
**Replies:** 4\
**Last updated:** [September 24, 2014, 7:44am UTC](https://discuss.elastic.co/t/dynamic-rate-calculation/19897 "2014-09-24T07:44:48Z")

</div>

Hi I'm very new to elasticsearch and was trying to find an efficient way to solve the following problem. Lets say I have the following data structure- { "name": "Hotel Radisson", "rates": \[ { …

---

## [Debugging performance decrease after a node fault](https://discuss.elastic.co/t/debugging-performance-decrease-after-a-node-fault/114346)

<div class="topic-metadata">

**Author:** [@Pooy](https://discuss.elastic.co/u/Pooy)\
**Replies:** 3\
**Last updated:** [January 6, 2018, 8:39am UTC](https://discuss.elastic.co/t/debugging-performance-decrease-after-a-node-fault/114346 "2018-01-06T08:39:06Z")

</div>

Hello, I've got a cluster, 140 nodes, 128GB ram each, currently with a 10GB heap, was 30GB but found GC took so long it caused boxes to regularly disconnect, 3 dedicated masters, these have 128GB RAM with a 20GB ES hea…

---

## [ElasticSearch not starting - Main ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/elasticsearch-not-starting-main-error-null-object-returned-for-rollingfile-in-appenders/313437)

<div class="topic-metadata">

**Author:** [@afernandes](https://discuss.elastic.co/u/afernandes)\
**Replies:** 0\
**Last updated:** [September 1, 2022, 11:43am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-main-error-null-object-returned-for-rollingfile-in-appenders/313437 "2022-09-01T11:43:58Z")

</div>

Hi, I had installed Elasticsearch on a cluster of three Redhat 7.9 servers, but the service failed to start. When I check the elasticsearch status it's displayed several errors main ERROR Null object returned for Roll…

---

## [Help changing y axis on kibana lenses](https://discuss.elastic.co/t/help-changing-y-axis-on-kibana-lenses/276196)

<div class="topic-metadata">

**Author:** [@Jason2073](https://discuss.elastic.co/u/Jason2073)\
**Replies:** 8\
**Last updated:** [June 17, 2021, 8:00pm UTC](https://discuss.elastic.co/t/help-changing-y-axis-on-kibana-lenses/276196 "2021-06-17T20:00:43Z")

</div>

I can't seem to use any variable other than Records, and meta fields for the Y axis of a line or area graph. I am struggling to find a guide on whats wrong or other people with a similar issue. Ideally I want the y ax…

---

## [Logstash HTTP input with SSL keystore](https://discuss.elastic.co/t/logstash-http-input-with-ssl-keystore/108550)

<div class="topic-metadata">

**Author:** [@metju312](https://discuss.elastic.co/u/metju312)\
**Replies:** 0\
**Last updated:** [November 21, 2017, 11:00am UTC](https://discuss.elastic.co/t/logstash-http-input-with-ssl-keystore/108550 "2017-11-21T11:00:12Z")

</div>

Hello, What I want: I want to send logs using "Postman" to http logstash input with SSL. What I already done: I added SSL configuration in my logstash.conf file using http plugin: https://www.elastic.co/blog/introd…

---

## [Snapshots on datastream](https://discuss.elastic.co/t/snapshots-on-datastream/306779)

<div class="topic-metadata">

**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\
**Replies:** 2\
**Last updated:** [June 22, 2022, 9:46am UTC](https://discuss.elastic.co/t/snapshots-on-datastream/306779 "2022-06-22T09:46:48Z")

</div>

Hello, I recently decided to moove from traditionals index to datastream. Everything goes fine, template and ILM are working fine, my backing index (.ds-logs......) are daily rotated. I've just got two issues with dat…

---

## [Logstash service fails - OpenSSL X509 StoreError](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282)

<div class="topic-metadata">

**Author:** [@Benom](https://discuss.elastic.co/u/Benom)\
**Replies:** 2\
**Last updated:** [May 16, 2017, 7:34am UTC](https://discuss.elastic.co/t/logstash-service-fails-openssl-x509-storeerror/60282 "2017-05-16T07:34:06Z")

</div>

Hello, I've noticed the logstash service fail on each start. logstash.err shows: \> OpenSSL::X509::StoreError: setting default path failed: IOError \> set\_default\_paths at org/jruby/ext/openssl/X509Store.java:185 \> …

---

## [I am using elk stack repo locally and using filebeat, i have configured filebeat but still saying "hosting provider type not detected"](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247)

<div class="topic-metadata">

**Author:** [@Tech\_Byte](https://discuss.elastic.co/u/Tech_Byte)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 6:26am UTC](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247 "2022-06-28T06:26:24Z")

</div>

here is my configuration output.elasticsearch: # Array of hosts to connect to. hosts: \["localhost:9200", "localhost:5601"\] # Protocol - either \`http\` (default) or \`https\`. #protocol: "https" # Authenticati…

---

## [Es query slow with simple filter, and profile didn't show it](https://discuss.elastic.co/t/es-query-slow-with-simple-filter-and-profile-didnt-show-it/231950)

<div class="topic-metadata">

**Author:** [@weiwang\_zhang](https://discuss.elastic.co/u/weiwang_zhang)\
**Replies:** 6\
**Last updated:** [May 23, 2020, 2:01am UTC](https://discuss.elastic.co/t/es-query-slow-with-simple-filter-and-profile-didnt-show-it/231950 "2020-05-23T02:01:42Z")

</div>

An ES version of 7.6.0, with 1 million docs , 1.76Gi on size. I found a query slow with only a simple term filter in it. (about 2s to excute) The query body is just as below { "query": { "bool": { "filter…

---

## [Custom index name results in temporary bulk send failure](https://discuss.elastic.co/t/custom-index-name-results-in-temporary-bulk-send-failure/142355)

<div class="topic-metadata">

**Author:** [@roland.otta](https://discuss.elastic.co/u/roland.otta)\
**Replies:** 6\
**Last updated:** [July 31, 2018, 3:00pm UTC](https://discuss.elastic.co/t/custom-index-name-results-in-temporary-bulk-send-failure/142355 "2018-07-31T15:00:24Z")

</div>

Hi, we would like to use filebeats for our kubernetes installation to indexing our container logfiles. as there are many containers running per host we would like to have sepereate indexes for every application. so we…

---

## [Email grok filter](https://discuss.elastic.co/t/email-grok-filter/132669)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 6\
**Last updated:** [May 22, 2018, 3:11pm UTC](https://discuss.elastic.co/t/email-grok-filter/132669 "2018-05-22T15:11:33Z")

</div>

hello everyone i need i need your help i have a mission which is to make filters for email messages in order to get accurate information like: ip address, subject, date, email, phone, address, etc. using losgtash filter …

---

## [DELETE elasticsearch index while running the reindex task on the same index](https://discuss.elastic.co/t/delete-elasticsearch-index-while-running-the-reindex-task-on-the-same-index/225357)

<div class="topic-metadata">

**Author:** [@Kareemulla\_Dudekula](https://discuss.elastic.co/u/Kareemulla_Dudekula)\
**Replies:** 3\
**Last updated:** [March 27, 2020, 2:36pm UTC](https://discuss.elastic.co/t/delete-elasticsearch-index-while-running-the-reindex-task-on-the-same-index/225357 "2020-03-27T14:36:14Z")

</div>

Hi, I would like to know what will happen If I am trying to delete the elasticsearch index when the reindex task in progress.. Is it through the error? it will suspend the reindex task and delete the index? Is delete…

---

## [Can't see 'message.keyword' in field when creating data table visualize](https://discuss.elastic.co/t/cant-see-message-keyword-in-field-when-creating-data-table-visualize/217797)

<div class="topic-metadata">

**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\
**Replies:** 3\
**Last updated:** [February 5, 2020, 7:49am UTC](https://discuss.elastic.co/t/cant-see-message-keyword-in-field-when-creating-data-table-visualize/217797 "2020-02-05T07:49:52Z")

</div>

Hi, I am using Kibana 7.5.2 and can't see "message.keyword" when trying to create a "data table" visualize. I need to display error/info/warn message in dashboard using it. I have refreshed the index pattern but it didn…

---

## [Hey, filebeat.inputs reads two log files. I am sending it to elasticsearch How can I show them in two different index names in kibana?](https://discuss.elastic.co/t/hey-filebeat-inputs-reads-two-log-files-i-am-sending-it-to-elasticsearch-how-can-i-show-them-in-two-different-index-names-in-kibana/187841)

<div class="topic-metadata">

**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 8:57am UTC](https://discuss.elastic.co/t/hey-filebeat-inputs-reads-two-log-files-i-am-sending-it-to-elasticsearch-how-can-i-show-them-in-two-different-index-names-in-kibana/187841 "2019-06-28T08:57:06Z")

</div>

Hello , My filebeat.inputs reads two log files. I am sending it to elasticsearch How can I show them in two different index names in kibana?

---

## [KIBANA Can't Download GeoJSON Map Due To CORS Error](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-due-to-cors-error/169540)

<div class="topic-metadata">

**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 4:22pm UTC](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-due-to-cors-error/169540 "2019-03-08T16:22:50Z")

</div>

Hello All, I tried starting my Kibana Server but I got the an error. I included the necessary enable CORS parameters which I need to visualize a map in Kibana but when I try to visualize the map in Kibana I get the foll…

---

## [Scripted fields for match(regex)](https://discuss.elastic.co/t/scripted-fields-for-match-regex/129297)

<div class="topic-metadata">

**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\
**Replies:** 3\
**Last updated:** [April 24, 2018, 1:57pm UTC](https://discuss.elastic.co/t/scripted-fields-for-match-regex/129297 "2018-04-24T13:57:55Z")

</div>

How to use scripted fields to find count of match a number several digits at the beginning of a value in a field with a string type? For example, there is doc1 with a text field = 12345 doc2 with text = 12678 doc3 wi…

---

## [Urldecode on kv results](https://discuss.elastic.co/t/urldecode-on-kv-results/78155)

<div class="topic-metadata">

**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\
**Replies:** 3\
**Last updated:** [March 10, 2017, 2:39pm UTC](https://discuss.elastic.co/t/urldecode-on-kv-results/78155 "2017-03-10T14:39:59Z")

</div>

Hi, as hinted here I am dividing URI query parameters into multiple fields. Is there a way to run urldecode against the resulting fields without naming them specifically in the config? EDIT: this is the section from…

---

## [Custom Action SDK?](https://discuss.elastic.co/t/custom-action-sdk/54376)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 3\
**Last updated:** [February 3, 2017, 8:43pm UTC](https://discuss.elastic.co/t/custom-action-sdk/54376 "2017-02-03T20:43:24Z")

</div>

Is it (or will it) be possible to develop custom actions for Watcher and plug them into a running instance ?

---

## [Per Shard Statistics](https://discuss.elastic.co/t/per-shard-statistics/2087)

<div class="topic-metadata">

**Author:** [@rongduan\_zhu](https://discuss.elastic.co/u/rongduan_zhu)\
**Replies:** 3\
**Last updated:** [June 8, 2015, 2:55pm UTC](https://discuss.elastic.co/t/per-shard-statistics/2087 "2015-06-08T14:55:09Z")

</div>

Hi guys, I'm new to Elastic. Recently I've been trying to understand the scoring of Elastic using the Explain API. I've read that when doing a normal match query, the statistics of each result is calculated on a per sh…

---

## [Prometheus fields no longer available after enabling APM on Java process](https://discuss.elastic.co/t/prometheus-fields-no-longer-available-after-enabling-apm-on-java-process/285244)

<div class="topic-metadata">

**Author:** [@momalley](https://discuss.elastic.co/u/momalley)\
**Replies:** 7\
**Last updated:** [November 23, 2021, 4:02pm UTC](https://discuss.elastic.co/t/prometheus-fields-no-longer-available-after-enabling-apm-on-java-process/285244 "2021-11-23T16:02:38Z")

</div>

Prometheus fields no longer available after enabling APM on Java process We are using Kibana 7.10.1 APM Agent 1.24 Browser used Chrome Steps to reproduce: We have enabled APM on one of our Java processes -javaag…

---

## [Kibana server is not ready yet (license: null)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-license-null/283551)

<div class="topic-metadata">

**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\
**Replies:** 7\
**Last updated:** [September 10, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-license-null/283551 "2021-09-10T15:39:44Z")

</div>

I am attempting to set up an Elasticsearch cluster consisting of three master-eligible nodes. elasticsearch.yml looks like this on all of the nodes: cluster.name: elkdev node.name: {machinename}.dev.company.local netwo…

---

## [System unresponsive with auditbeat running](https://discuss.elastic.co/t/system-unresponsive-with-auditbeat-running/142882)

<div class="topic-metadata">

**Author:** [@ppanagiotis](https://discuss.elastic.co/u/ppanagiotis)\
**Replies:** 7\
**Last updated:** [August 3, 2018, 2:54pm UTC](https://discuss.elastic.co/t/system-unresponsive-with-auditbeat-running/142882 "2018-08-03T14:54:22Z")

</div>

I've setup Auditbeat to report to an elasticsearch cluster. If the elasticsearch index state is RED auditbeat occasionally makes the whole system unresponsive for 1 minute. logs: 2018-08-03T12:29:45.951+0300 DEBUG \[ela…

---

## [X-Pack basic license and security](https://discuss.elastic.co/t/x-pack-basic-license-and-security/135331)

<div class="topic-metadata">

**Author:** [@guy.braeckmans](https://discuss.elastic.co/u/guy.braeckmans)\
**Replies:** 1\
**Last updated:** [June 11, 2018, 10:27am UTC](https://discuss.elastic.co/t/x-pack-basic-license-and-security/135331 "2018-06-11T10:27:43Z")

</div>

Hi, I installed Elastic, Kibana en filebeats + winlogbeats successfully on a Windows server. All is working fine. It was clear that we needed some security for this. I therefore installed x-pack. The install worked fine…

---

## [Docker registry down?](https://discuss.elastic.co/t/docker-registry-down/173530)

<div class="topic-metadata">

**Author:** [@kevin-hicks-sp](https://discuss.elastic.co/u/kevin-hicks-sp)\
**Replies:** 2\
**Last updated:** [March 22, 2019, 5:56pm UTC](https://discuss.elastic.co/t/docker-registry-down/173530 "2019-03-22T17:56:14Z")

</div>

It looks like the Docker registry for Elastic may be misbehaving, requiring authentication to pull public images: $ docker pull docker.elastic.co/elasticsearch/elasticsearch:6.6.2 Error response from daemon: unauthorize…

---

## [Elastic agent Failed Connect Failed to connect to backoff 401 Unauthorized](https://discuss.elastic.co/t/elastic-agent-failed-connect-failed-to-connect-to-backoff-401-unauthorized/342395)

<div class="topic-metadata">

**Author:** [@Khunakorn](https://discuss.elastic.co/u/Khunakorn)\
**Replies:** 0\
**Last updated:** [September 6, 2023, 6:33am UTC](https://discuss.elastic.co/t/elastic-agent-failed-connect-failed-to-connect-to-backoff-401-unauthorized/342395 "2023-09-06T06:33:06Z")

</div>

{"log.level":"error","@timestamp":"2023-09-06T04:35:47.597Z","message":"Failed to connect to backoff(elasticsearch(cloud.com:443)): 401 Unauthorized: {"error":{"root\_cause":\[{"type":"security\_exception","reason":"unable …

---

## [Elastic with Azure private link](https://discuss.elastic.co/t/elastic-with-azure-private-link/297910)

<div class="topic-metadata">

**Author:** [@Ced](https://discuss.elastic.co/u/Ced)\
**Replies:** 0\
**Last updated:** [February 22, 2022, 2:17pm UTC](https://discuss.elastic.co/t/elastic-with-azure-private-link/297910 "2022-02-22T14:17:17Z")

</div>

Hello everybody, I use this link to secure my deployments on Elastic cloud with Azure private link but I can't deploy my elastic agents (error 404). Everything is correct when I didn't use private link and traffic filte…

---

## [Refer to multiple templates in logstash elastic output?](https://discuss.elastic.co/t/refer-to-multiple-templates-in-logstash-elastic-output/184267)

<div class="topic-metadata">

**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\
**Replies:** 0\
**Last updated:** [June 5, 2019, 2:14am UTC](https://discuss.elastic.co/t/refer-to-multiple-templates-in-logstash-elastic-output/184267 "2019-06-05T02:14:43Z")

</div>

We specify a template file to use in our logstash elastic output definition in our conf files. We currently have one template file per index, and each contains some common field definitions. We'd like to simplify this an…

---

## [Elastic cloud with APM monitoring Weblogic java application](https://discuss.elastic.co/t/elastic-cloud-with-apm-monitoring-weblogic-java-application/328447)

<div class="topic-metadata">

**Author:** [@Fr3ddy](https://discuss.elastic.co/u/Fr3ddy)\
**Replies:** 5\
**Last updated:** [March 27, 2023, 9:37am UTC](https://discuss.elastic.co/t/elastic-cloud-with-apm-monitoring-weblogic-java-application/328447 "2023-03-27T09:37:13Z")

</div>

Hi, We are doing a proof of concept with elastic APM to monitor a weblogic 12.2.1.3 server with java 8. It runs a java enterprise application. We have set it up with the elastic-apm-agent-1.36.0.jar as a startup parame…

---

## [Rollup Jobs Performance](https://discuss.elastic.co/t/rollup-jobs-performance/321019)

<div class="topic-metadata">

**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\
**Replies:** 5\
**Last updated:** [December 23, 2022, 12:29pm UTC](https://discuss.elastic.co/t/rollup-jobs-performance/321019 "2022-12-23T12:29:18Z")

</div>

I'm having issues with the performance of Rollup Jobs on my system. The Data Quantity is quite large Job(1): rough 2,5M docs in 15 minutes / 300gb per day Job(2): rough 250T docs in 15 minutes / 40gb per day I'm tryin…

---

## [Search in elasticsearch 8](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 5\
**Last updated:** [May 25, 2022, 4:06pm UTC](https://discuss.elastic.co/t/search-in-elasticsearch-8/305493 "2022-05-25T16:06:24Z")

</div>

Hi, In v.7.X the search performed as follow: searchResponse = client.search(searchRequest, RequestOptions.DEFAULT); How do I perform search in v.8 without defining the target class for the matching documents. (I want …

---

## [Kibana dashboard shards failed](https://discuss.elastic.co/t/kibana-dashboard-shards-failed/277285)

<div class="topic-metadata">

**Author:** [@Amudhan\_P](https://discuss.elastic.co/u/Amudhan_P)\
**Replies:** 5\
**Last updated:** [July 1, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-dashboard-shards-failed/277285 "2021-07-01T05:28:25Z")

</div>

Hi, I am running an ELK cluster in Elastic.io I am having a problem in Kibana, visualization it's showing shards failed. Visualization is been configured to show a field from my APM data. I don't find any error msg fr…

---

## [Make event wait](https://discuss.elastic.co/t/make-event-wait/100983)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 5\
**Last updated:** [September 19, 2017, 8:30am UTC](https://discuss.elastic.co/t/make-event-wait/100983 "2017-09-19T08:30:11Z")

</div>

Hi, Can I make that if I get a log that parameter X = 'a' that Logstash will not push it straight to ES but wait for 3 minutes?

---

## [Can't create new Kibana visualizations after upgrade to 7.13](https://discuss.elastic.co/t/cant-create-new-kibana-visualizations-after-upgrade-to-7-13/278202)

<div class="topic-metadata">

**Author:** [@Toumal](https://discuss.elastic.co/u/Toumal)\
**Replies:** 4\
**Last updated:** [July 8, 2021, 10:00pm UTC](https://discuss.elastic.co/t/cant-create-new-kibana-visualizations-after-upgrade-to-7-13/278202 "2021-07-08T22:00:11Z")

</div>

Unfortunately I still run into issues after this upgrade: creating any kind of new visualization fails with an "Application not found" error. This is the basic license and I was trying to create a basic bar chart. It see…

[Previous page](https://discuss.elastic.co/top.md?page=1204&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1206&per_page=50&period=all)
