# Top **URL:** https://discuss.elastic.co/top.md?page=1222&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1223 --- ## [Month names in english with pattern MMM](https://discuss.elastic.co/t/month-names-in-english-with-pattern-mmm/139736)
**Author:** [@Upsilon](https://discuss.elastic.co/u/Upsilon)\ **Replies:** 2\ **Last updated:** [July 18, 2018, 9:23am UTC](https://discuss.elastic.co/t/month-names-in-english-with-pattern-mmm/139736 "2018-07-18T09:23:07Z")
Hello, The @timestamp format I have is the following : « 2018-07-10T11:04:14.452Z ». And I would like to have in output this format : « Jul 10 13:09:12 ». Here is my configuration in order to do that : input { kafka … --- ## [Topbeats - My first load into Elastic](https://discuss.elastic.co/t/topbeats-my-first-load-into-elastic/127324)
**Author:** [@mark.lawton2](https://discuss.elastic.co/u/mark.lawton2)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 10:21am UTC](https://discuss.elastic.co/t/topbeats-my-first-load-into-elastic/127324 "2018-04-10T10:21:36Z")
Hello, newbie here. I'm just having a play with Elasticsearch, Kibana and Topbeats. All of the above are on the same linux server with default configuration - APART from me changing the elasticsearch and kibana host fro… --- ## [Piping Apache log line to stdin prospector panics Filebeat](https://discuss.elastic.co/t/piping-apache-log-line-to-stdin-prospector-panics-filebeat/58017)
**Author:** [@tobiassjosten](https://discuss.elastic.co/u/tobiassjosten)\ **Replies:** 2\ **Last updated:** [August 16, 2016, 2:16pm UTC](https://discuss.elastic.co/t/piping-apache-log-line-to-stdin-prospector-panics-filebeat/58017 "2016-08-16T14:16:13Z")
I want to collect logs from a remote service (Runnable.io) and send them onto our ELK stack using the Runnable CLI tool and Filebeat. The first part is easy but getting Filebeat to work has been trickier than I thought. … --- ## [Communication between Logstash and Redis is encrypted or not?](https://discuss.elastic.co/t/communication-between-logstash-and-redis-is-encrypted-or-not/56369)
**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\ **Replies:** 2\ **Last updated:** [July 29, 2016, 3:04pm UTC](https://discuss.elastic.co/t/communication-between-logstash-and-redis-is-encrypted-or-not/56369 "2016-07-29T15:04:31Z")
I have many log sources with a huge number of log data, so I'd like to add Redis as message broker to avoid back-pressure and data loss. My architecture is: Filebeat -\> Logstash -\> Redis -\> Logstash Indexer -\> Elastics… --- ## [Problem adding AD users to roles](https://discuss.elastic.co/t/problem-adding-ad-users-to-roles/50895)
**Author:** [@Dave\_G](https://discuss.elastic.co/u/Dave_G)\ **Replies:** 2\ **Last updated:** [May 25, 2016, 12:59pm UTC](https://discuss.elastic.co/t/problem-adding-ad-users-to-roles/50895 "2016-05-25T12:59:46Z")
I'm trying to a new Shield installation going on our ES (2.2.1) cluster, and am running into a problem with Active Directory users that has me stumped. I have successfully added a single AD group to a Shield role with th… --- ## [Is there a way to configure email title as "error occurs at {{ctx.trigger.scheduled\_time}}||-1m"?](https://discuss.elastic.co/t/is-there-a-way-to-configure-email-title-as-error-occurs-at-ctx-trigger-scheduled-time-1m/32381)
**Author:** [@Enniu\_51](https://discuss.elastic.co/u/Enniu_51)\ **Replies:** 2\ **Last updated:** [October 20, 2015, 4:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-configure-email-title-as-error-occurs-at-ctx-trigger-scheduled-time-1m/32381 "2015-10-20T04:08:32Z")
I set the email title to error occurs at {{ctx.trigger.scheduled\_time}}||-1m. But I receive emails whose title is something like: error occurs at 2015-10-16T11:06:00.000Z||-1m I know this worked {{ctx.trigger.schedu… --- ## [Good timeout value for index creation](https://discuss.elastic.co/t/good-timeout-value-for-index-creation/16193)
**Author:** [@ssr](https://discuss.elastic.co/u/ssr)\ **Replies:** 2\ **Last updated:** [March 11, 2014, 10:23pm UTC](https://discuss.elastic.co/t/good-timeout-value-for-index-creation/16193 "2014-03-11T22:23:52Z")
We have 20 node ES 90.2 cluster with about 8mil documents. We use pyes for talking to elasticsearch. We are using 4 primary 1 replica shard setting for each index creation. We have a timeout value of 2 (obviously … --- ## [Elasticsearch head UNASSIGNED](https://discuss.elastic.co/t/elasticsearch-head-unassigned/14525)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 2\ **Last updated:** [November 21, 2013, 10:42pm UTC](https://discuss.elastic.co/t/elasticsearch-head-unassigned/14525 "2013-11-21T22:42:15Z")
I am little confused with elasticsearch head UIs output. I added a new node and created a new index "test3" with shard: 5 and replica: 1. I also added a routing rule to only make new node the data node for this test. H… --- ## [Painless - check if string contains word](https://discuss.elastic.co/t/painless-check-if-string-contains-word/291914)
**Author:** [@sagar\_cherukuri](https://discuss.elastic.co/u/sagar_cherukuri)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 7:50am UTC](https://discuss.elastic.co/t/painless-check-if-string-contains-word/291914 "2021-12-15T07:50:32Z")
Is it possible to check if a string contains the word in a nested array? I am accessing the fields through params.\_source and I have created a painless script as below, but it's throwing me errors at contains(). How to c… --- ## [Reinstall Fleet Integrations](https://discuss.elastic.co/t/reinstall-fleet-integrations/284652)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 4\ **Last updated:** [September 21, 2021, 4:42pm UTC](https://discuss.elastic.co/t/reinstall-fleet-integrations/284652 "2021-09-21T16:42:35Z")
Elastic/Kibana 7.14.1 How do you forcibly reinstall a system integration? System integration is missing several dashboards and searches so the easy was for most would be to just uninstall reinstall it. Due to system n… --- ## [How to send core web vitals data to RUM(Real User Monitoring) in a angular 11 app?](https://discuss.elastic.co/t/how-to-send-core-web-vitals-data-to-rum-real-user-monitoring-in-a-angular-11-app/271450)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 4\ **Last updated:** [April 28, 2021, 4:41pm UTC](https://discuss.elastic.co/t/how-to-send-core-web-vitals-data-to-rum-real-user-monitoring-in-a-angular-11-app/271450 "2021-04-28T16:41:06Z")
Hi there, I was configuring RUM for my angular app using this \[Angular integration | APM Real User Monitoring JavaScript Agent Reference \[5.x\] | Elastic\]. But when check the in Kibana user experience section I was not a… --- ## [Shipping logs to s3 after end of index lifecycle](https://discuss.elastic.co/t/shipping-logs-to-s3-after-end-of-index-lifecycle/240238)
**Author:** [@ramiriskis](https://discuss.elastic.co/u/ramiriskis)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 12:18am UTC](https://discuss.elastic.co/t/shipping-logs-to-s3-after-end-of-index-lifecycle/240238 "2020-07-08T00:18:25Z")
Hi! My team has a managed elastic instance and we are currently shipping our logs to it. The created indices go through the log life cycle process (hot, warm, cold) as specified in the docs. My issue is that instead of … --- ## [ELK life cycle management erroring on all indecies](https://discuss.elastic.co/t/elk-life-cycle-management-erroring-on-all-indecies/179123)
**Author:** [@SETI](https://discuss.elastic.co/u/SETI)\ **Replies:** 4\ **Last updated:** [May 29, 2019, 4:20pm UTC](https://discuss.elastic.co/t/elk-life-cycle-management-erroring-on-all-indecies/179123 "2019-05-29T16:20:48Z")
I'm getting this error: illegal\_argument\_exception: index.lifecycle.rollover\_alias Not sure what it means, looking at a previous ticket it seems like it needs to have an alias setup for something? Documentation hasn't… --- ## [Filebeat decoding Docker logs error](https://discuss.elastic.co/t/filebeat-decoding-docker-logs-error/136961)
**Author:** [@d54c364cb1c1253c751d](https://discuss.elastic.co/u/d54c364cb1c1253c751d)\ **Replies:** 4\ **Last updated:** [June 23, 2018, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-decoding-docker-logs-error/136961 "2018-06-23T16:29:10Z")
Filebeat Version:6.2.4 Docker version: 1.12.5, build 7392c3b get decoding error when try to get docker logs ERROR log/harvester.go:243 Read line error: decoding docker JSON: EOF; File: %! logs are like this {"log":… --- ## [Indexing to one shard is not concurrency-friendly?](https://discuss.elastic.co/t/indexing-to-one-shard-is-not-concurrency-friendly/59863)
**Author:** [@Zline](https://discuss.elastic.co/u/Zline)\ **Replies:** 4\ **Last updated:** [September 12, 2016, 11:14am UTC](https://discuss.elastic.co/t/indexing-to-one-shard-is-not-concurrency-friendly/59863 "2016-09-12T11:14:52Z")
Hello, I tried to concurrently index lots of small documents to index with 1 shard and 0 replicas. And I saw that changing number of threads from 1 to 3 gives performance gain only about 1.5x while I expected at least 2… --- ## [Logstash - Rabbitmq - same message repeatedly being loaded](https://discuss.elastic.co/t/logstash-rabbitmq-same-message-repeatedly-being-loaded/58533)
**Author:** [@jaykumar](https://discuss.elastic.co/u/jaykumar)\ **Replies:** 4\ **Last updated:** [August 24, 2016, 2:11pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-same-message-repeatedly-being-loaded/58533 "2016-08-24T14:11:03Z")
Hi There, I have configured rabbitmq as a broker for reliability, below is my configuration: input { udp { port =\> 5114 type =\> "syslog.imq" } } output { if \[type\] == "… --- ## [BUG? Attachment type in nested object work abnormal](https://discuss.elastic.co/t/bug-attachment-type-in-nested-object-work-abnormal/1984)
**Author:** [@shinyke](https://discuss.elastic.co/u/shinyke)\ **Replies:** 4\ **Last updated:** [June 8, 2015, 3:19am UTC](https://discuss.elastic.co/t/bug-attachment-type-in-nested-object-work-abnormal/1984 "2015-06-08T03:19:25Z")
when I used attachment type in normal field like "file",it work well. However, when I use attachment type in nested object, it work abnormal: no content but base64 and it cann't be highlight, too. I add "include\_in\_r… --- ## [Zen discovery gossip router?](https://discuss.elastic.co/t/zen-discovery-gossip-router/21089)
**Author:** [@Fernando\_Padilla](https://discuss.elastic.co/u/Fernando_Padilla)\ **Replies:** 4\ **Last updated:** [December 5, 2014, 12:26am UTC](https://discuss.elastic.co/t/zen-discovery-gossip-router/21089 "2014-12-05T00:26:26Z")
I can't find any information in the guide nor google on how to setup a zen gossip router. Can anyone help me out? I really want to use elasticsearch, but I need to get over this one snag. :) -- You received th… --- ## [Kibana- Unable to Retrieve Version information from Elasticsearch](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch/298673)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 8:25pm UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch/298673 "2022-03-02T20:25:36Z")
Hi, I am using 8.0.0 for Elasticsearch and Kibana, with a docker-compose set up. Elasticsearch is running with no issues, how I do get the title message error. Error: \[ERROR\]\[elasticsearch-service\] Unable to retrieve v… --- ## [Poximity search with wildcards and phrase (multiple word terms)](https://discuss.elastic.co/t/poximity-search-with-wildcards-and-phrase-multiple-word-terms/228360)
**Author:** [@th.wyns](https://discuss.elastic.co/u/th.wyns)\ **Replies:** 1\ **Last updated:** [May 3, 2020, 6:04pm UTC](https://discuss.elastic.co/t/poximity-search-with-wildcards-and-phrase-multiple-word-terms/228360 "2020-05-03T18:04:44Z")
Hello, We have a business requirement where the customer would like to run proximity searches that contain wildcards and phrases (multiple words). For eg: query: "somet\*" within 5 word distance of "need to find" shou… --- ## [Can we change KİBANA BASE URL ? (Thousands of people are developing projects on kibana.)](https://discuss.elastic.co/t/can-we-change-kibana-base-url-thousands-of-people-are-developing-projects-on-kibana/214001)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 4:20pm UTC](https://discuss.elastic.co/t/can-we-change-kibana-base-url-thousands-of-people-are-developing-projects-on-kibana/214001 "2020-01-08T16:20:09Z")
thousands of people are developing projects on kibana. Someone sure knows how to change. There must be another way NOW: http://localhost:5601/lqx/app/kibana#/dashboard/ İNSTEAD: http://localhost:5601/lqx/app/test#/… --- ## [Logstash output to file, from JSON field not exist / field is empty, about output format](https://discuss.elastic.co/t/logstash-output-to-file-from-json-field-not-exist-field-is-empty-about-output-format/144060)
**Author:** [@richard20427176](https://discuss.elastic.co/u/richard20427176)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 11:18am UTC](https://discuss.elastic.co/t/logstash-output-to-file-from-json-field-not-exist-field-is-empty-about-output-format/144060 "2018-08-14T11:18:08Z")
I'm new in using logstash (6.3.2) to parse log data, I want to parse datas in json fmt from logs file to txt files. The steps of input and filter are ok, but there's some problem with output, below is the output section … --- ## [Elasticsearch 5.6.0, Unknown setting score while updating with ctx script](https://discuss.elastic.co/t/elasticsearch-5-6-0-unknown-setting-score-while-updating-with-ctx-script/100671)
**Author:** [@rinu](https://discuss.elastic.co/u/rinu)\ **Replies:** 1\ **Last updated:** [September 15, 2017, 12:19pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-0-unknown-setting-score-while-updating-with-ctx-script/100671 "2017-09-15T12:19:55Z")
On 5.6.0, when updating a field with ctx.\_source.field via inline script using high-level-rest-client, I'm getting unknown source setting error. It should work fine as I'm using "ctx.\_source" as per documentation, not "\_… --- ## [Can we export logs in raw format from elasticsearch](https://discuss.elastic.co/t/can-we-export-logs-in-raw-format-from-elasticsearch/49447)
**Author:** [@Praveenj](https://discuss.elastic.co/u/Praveenj)\ **Replies:** 1\ **Last updated:** [May 7, 2016, 12:42am UTC](https://discuss.elastic.co/t/can-we-export-logs-in-raw-format-from-elasticsearch/49447 "2016-05-07T00:42:09Z")
Suppose, we are monitoring 'n' number of services for servers using elasticsearch. All service logs are rotated in specific cron time. But, to do detailed ananlysis, we may required a raw logs file(s). Is there any way t… --- ## [Filebeat harvesting issue](https://discuss.elastic.co/t/filebeat-harvesting-issue/48859)
**Author:** [@Ramesh\_Narasimhan](https://discuss.elastic.co/u/Ramesh_Narasimhan)\ **Replies:** 1\ **Last updated:** [May 2, 2016, 7:24am UTC](https://discuss.elastic.co/t/filebeat-harvesting-issue/48859 "2016-05-02T07:24:41Z")
My filebeat configuration has been working fine. But it suddenly stopped working now. I have updated to the latest version of filebeat, restarted filebeat instance, restarted my application instance. but still no luck.f… --- ## [Production es help](https://discuss.elastic.co/t/production-es-help/65935)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 8\ **Last updated:** [November 16, 2016, 7:08am UTC](https://discuss.elastic.co/t/production-es-help/65935 "2016-11-16T07:08:31Z")
Hi All, I have 4 node prod cluster all are redat based servers , all are master and data eligible i have 24 GB Memory for each machine and given12 GB heap and another 12GB for server and lucene as it is recommended by… --- ## [Upgraded node unable to join cluster while attempting cluster upgrade from 1.3.2 to 1.4.2](https://discuss.elastic.co/t/upgraded-node-unable-to-join-cluster-while-attempting-cluster-upgrade-from-1-3-2-to-1-4-2/21516)
**Author:** [@Ben\_Berg](https://discuss.elastic.co/u/Ben_Berg)\ **Replies:** 8\ **Last updated:** [January 9, 2015, 9:28am UTC](https://discuss.elastic.co/t/upgraded-node-unable-to-join-cluster-while-attempting-cluster-upgrade-from-1-3-2-to-1-4-2/21516 "2015-01-09T09:28:56Z")
Hello, I am attempting to upgrade a 10 node cluster from 1.3.2 to 1.4.2 - I upgraded the first node,removed and reinstalled latest versions of plugins - two non-site plugins are river-twitter (version 2.4.1) and jdb… --- ## [Log alerting for different applications](https://discuss.elastic.co/t/log-alerting-for-different-applications/337559)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 3\ **Last updated:** [July 4, 2023, 4:20pm UTC](https://discuss.elastic.co/t/log-alerting-for-different-applications/337559 "2023-07-04T16:20:31Z")
Hello, i'm a bit confused over the way the alerting works in the elastic stack. I have multiple small applications that generate logs and also have to manage multiple larger applications that generate multiple differen… --- ## [Beats error: No paths were defined for input accessing config](https://discuss.elastic.co/t/beats-error-no-paths-were-defined-for-input-accessing-config/330285)
**Author:** [@Skairik](https://discuss.elastic.co/u/Skairik)\ **Replies:** 3\ **Last updated:** [April 24, 2023, 7:36am UTC](https://discuss.elastic.co/t/beats-error-no-paths-were-defined-for-input-accessing-config/330285 "2023-04-24T07:36:47Z")
Hi everyone , I am currently trying to configure filebeat to retrieve logs from my palo alto firewall, I have configured and enable the panw modules: - module: panw panos: enabled: true var.input: udp var… --- ## [Filebeats parsing docker logs with max-size limit](https://discuss.elastic.co/t/filebeats-parsing-docker-logs-with-max-size-limit/213015)
**Author:** [@ml\_docker\_captain](https://discuss.elastic.co/u/ml_docker_captain)\ **Replies:** 3\ **Last updated:** [December 27, 2019, 12:56am UTC](https://discuss.elastic.co/t/filebeats-parsing-docker-logs-with-max-size-limit/213015 "2019-12-27T00:56:01Z")
Hy, I have few services that create a lot of logs and I want to start using ES + logfile to parse them. Now, since once logs are parsed and send to ES I don't need them(and since I'm forced to use on premise server with … --- ## [Log with json value and timestamp value from syslog](https://discuss.elastic.co/t/log-with-json-value-and-timestamp-value-from-syslog/117245)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 3\ **Last updated:** [January 26, 2018, 8:06pm UTC](https://discuss.elastic.co/t/log-with-json-value-and-timestamp-value-from-syslog/117245 "2018-01-26T20:06:45Z")
we have a python application logging to syslog in json format but syslog allows appends a timestamp with the json message, Jan 26 11:07:14 mkobit-ThinkPad {"@source\_host": "mkobit-ThinkPad", "module": "pyscratch", "line… --- ## [Top Cluster Alerts - allways Yellow](https://discuss.elastic.co/t/top-cluster-alerts-allways-yellow/92693)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 3\ **Last updated:** [July 18, 2017, 6:58pm UTC](https://discuss.elastic.co/t/top-cluster-alerts-allways-yellow/92693 "2017-07-18T18:58:39Z")
Hi guys, does anybody know, how one can get rid off that message on the main monitoring page: Top Cluster Alerts Elasticsearch cluster status is yellow. Allocate missing replica shards. Last checked July 10, 2017 6:0… --- ## [Scaled ELK architecture in AWS](https://discuss.elastic.co/t/scaled-elk-architecture-in-aws/80861)
**Author:** [@sila5](https://discuss.elastic.co/u/sila5)\ **Replies:** 3\ **Last updated:** [April 3, 2017, 8:42pm UTC](https://discuss.elastic.co/t/scaled-elk-architecture-in-aws/80861 "2017-04-03T20:42:37Z")
I'm working on building a scaled out ELK setup for a production system in AWS with EC2 instances. I need it to handle about 175GB of logs a day with a possible fluctuation of 50GB give or take. On average i would estimat… --- ## [Field not aggregatable](https://discuss.elastic.co/t/field-not-aggregatable/72152)
**Author:** [@tom.stark](https://discuss.elastic.co/u/tom.stark)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 7:57pm UTC](https://discuss.elastic.co/t/field-not-aggregatable/72152 "2017-01-20T19:57:45Z")
Mysteriously an field of my index did not occur in list of aggregation fields.. in Index Pattern following settings displayed... accuracy.quote\_previous -\> number searchable , aggregatable accuracy.quote -\> nu… --- ## [Kibana Client Talk to ES Directly?](https://discuss.elastic.co/t/kibana-client-talk-to-es-directly/66658)
**Author:** [@yongtao](https://discuss.elastic.co/u/yongtao)\ **Replies:** 3\ **Last updated:** [December 1, 2016, 7:26pm UTC](https://discuss.elastic.co/t/kibana-client-talk-to-es-directly/66658 "2016-12-01T19:26:34Z")
Hi, Does Kibana client (the part that runs inside my browser) ever send queries directly to ES? Or it always go through Kibana server? I'm trying to decide if I need to expose ES endpoint to all my Kibana users or just… --- ## [Delete by query is not deleting documents from an Index](https://discuss.elastic.co/t/delete-by-query-is-not-deleting-documents-from-an-index/44360)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [March 16, 2016, 3:00am UTC](https://discuss.elastic.co/t/delete-by-query-is-not-deleting-documents-from-an-index/44360 "2016-03-16T03:00:38Z")
Hi Experts, I did following in ES 1.7.1 DELETE /prod-2016-03-09/AA/\_query?pretty { "query": { "match": { "alertmsg": "monitor" } } } after this I am also getting { "\_indices": { "prod-2016-03-09": { "\_shards":… --- ## [Elasticsearch cluster performance](https://discuss.elastic.co/t/elasticsearch-cluster-performance/287214)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 3\ **Last updated:** [October 22, 2021, 5:13pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-performance/287214 "2021-10-22T17:13:36Z")
Hi everyone, I am using Elasticsearch 7.10.2 version on EKS and I have some questions about the Elasticsearch cluster performance. Assuming that the total amount of cluster resources is the same in both cases, which is… --- ## [Use one ingest pipeline as default\_pipeline for different indexes](https://discuss.elastic.co/t/use-one-ingest-pipeline-as-default-pipeline-for-different-indexes/296266)
**Author:** [@m-cd](https://discuss.elastic.co/u/m-cd)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:15am UTC](https://discuss.elastic.co/t/use-one-ingest-pipeline-as-default-pipeline-for-different-indexes/296266 "2022-02-06T09:15:05Z")
Hi All, I'm a little bit new on the ELK world... So sorry for my newbie question... I setup a working ingest pipeline (policy and processors) and it works like a charm on one index as default\_pipeline. I would like t… --- ## [Metricbeat don't get all mounting points for filesystems](https://discuss.elastic.co/t/metricbeat-dont-get-all-mounting-points-for-filesystems/259098)
**Author:** [@Vinicius\_Maia](https://discuss.elastic.co/u/Vinicius_Maia)\ **Replies:** 2\ **Last updated:** [December 18, 2020, 5:31pm UTC](https://discuss.elastic.co/t/metricbeat-dont-get-all-mounting-points-for-filesystems/259098 "2020-12-18T17:31:58Z")
Hello all, I need some help with a problem about my metricbeat setup. I'm trying to monitor my elasticsearch server disks with metricbeat. In the elasticsearch servers I created a LVM and mounted it in /var/lib/elasti… --- ## [Compose window preview](https://discuss.elastic.co/t/compose-window-preview/172226)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [March 14, 2019, 1:32am UTC](https://discuss.elastic.co/t/compose-window-preview/172226 "2019-03-14T01:32:38Z")
I always forget to use the proper formatter for json, so the indents get lost. I thought there was a preview window in the past, but now I'm getting search results for similar topics.... what am I missing? Thanks --- ## [Kibana 6.3.2 Docker-Compose SSL](https://discuss.elastic.co/t/kibana-6-3-2-docker-compose-ssl/148113)
**Author:** [@dauwitsch](https://discuss.elastic.co/u/dauwitsch)\ **Replies:** 2\ **Last updated:** [September 11, 2018, 8:31pm UTC](https://discuss.elastic.co/t/kibana-6-3-2-docker-compose-ssl/148113 "2018-09-11T20:31:43Z")
Hi there, i just try to setup an ELK-Stack for our application, to centralize the logs that get produced from our services involved. I first tried to setup the ELK-Stack in our internal network, to get familiar with it … --- ## [Visualizing Dynamic Fields On Kibana](https://discuss.elastic.co/t/visualizing-dynamic-fields-on-kibana/124262)
**Author:** [@Gebelin\_Gerald](https://discuss.elastic.co/u/Gebelin_Gerald)\ **Replies:** 2\ **Last updated:** [March 19, 2018, 2:27pm UTC](https://discuss.elastic.co/t/visualizing-dynamic-fields-on-kibana/124262 "2018-03-19T14:27:09Z")
Hi there ! To perform a technical analysis of hibernate stacks on our systems we had to store data as dynamic fields on ES. We have something like this : .... hibernate.entity10.fetchcount number hib… --- ## [java.lang.StackOverflowError: null 异常导致es挂掉](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null-es/122205)
**Author:** [@yitiaoxianyu](https://discuss.elastic.co/u/yitiaoxianyu)\ **Replies:** 2\ **Last updated:** [March 5, 2018, 2:28am UTC](https://discuss.elastic.co/t/java-lang-stackoverflowerror-null-es/122205 "2018-03-05T02:28:11Z")
描述 搭建的es在使用过程中会挂掉。 es版本： 5.6.3 os版本：centos6.2 CPU 32核 内存 256G log信息 \[2018-03-02T09:59:17,533\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\] fatal error in thread \[elasticsearch\[Nx5NyLh\]\[search\]\[T#7\]\], exiting… --- ## [Pre-built dashboards to different index](https://discuss.elastic.co/t/pre-built-dashboards-to-different-index/110754)
**Author:** [@ramzey1981](https://discuss.elastic.co/u/ramzey1981)\ **Replies:** 2\ **Last updated:** [December 11, 2017, 9:41pm UTC](https://discuss.elastic.co/t/pre-built-dashboards-to-different-index/110754 "2017-12-11T21:41:21Z")
hey team, I am currently using elk 6.0 and have the filebeat dashboards currently migrated to kibana. There is an nginx dashboard that works when i associate to the filebeat index. Howerver we have have switched all o… --- ## [Elasticsearch filter plugin query question](https://discuss.elastic.co/t/elasticsearch-filter-plugin-query-question/101998)
**Author:** [@iStepich](https://discuss.elastic.co/u/iStepich)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 12:29pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-query-question/101998 "2017-10-05T12:29:51Z")
Hello! I need to join some responses and requests to have request time in response JSON. For each request-response pair I have unique trace\_id that looks like "dd4b46b0-44da-473e-8775-d90cce583b0f" Solution for that w… --- ## [No output received in elasticsearch](https://discuss.elastic.co/t/no-output-received-in-elasticsearch/84918)
**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 1:20am UTC](https://discuss.elastic.co/t/no-output-received-in-elasticsearch/84918 "2017-05-09T01:20:26Z")
I've got the following debug info 18:40:43.230 \[\[main\]\>worker1\] DEBUG logstash.pipeline - output received {"event"=\>{"gender"=\>"", "type"=\>"report\_video", "author\_version"=\>"None", "platform"=\>"weixin", "\_ext"=\>{"conte… --- ## [Joins within plugin or script](https://discuss.elastic.co/t/joins-within-plugin-or-script/84619)
**Author:** [@mastayoda](https://discuss.elastic.co/u/mastayoda)\ **Replies:** 2\ **Last updated:** [May 4, 2017, 7:31pm UTC](https://discuss.elastic.co/t/joins-within-plugin-or-script/84619 "2017-05-04T19:31:00Z")
Hello all, For our project(trueno) which is a Graph Database, we need to do Joins in order to traverse the graph. We are using Elasticsearch as our distributed storage engine. Basically, we have done many tweaks to g… --- ## [Aggregation with average value in java api](https://discuss.elastic.co/t/aggregation-with-average-value-in-java-api/17699)
**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\ **Replies:** 2\ **Last updated:** [May 25, 2014, 6:38am UTC](https://discuss.elastic.co/t/aggregation-with-average-value-in-java-api/17699 "2014-05-25T06:38:17Z")
Hi, I'm trying to do aggregation using java api. But couldn't get the \*SearchResponse\* correctly. Getting below error. I've written method like below using XContentBuilder. Couldn't get any working scenarios fro… --- ## [Transform not aligning checkpoints with date histogram](https://discuss.elastic.co/t/transform-not-aligning-checkpoints-with-date-histogram/324063)
**Author:** [@ddolcimascolo](https://discuss.elastic.co/u/ddolcimascolo)\ **Replies:** 6\ **Last updated:** [January 27, 2023, 9:41pm UTC](https://discuss.elastic.co/t/transform-not-aligning-checkpoints-with-date-histogram/324063 "2023-01-27T21:41:07Z")
Hi all. I'm using pivot transforms to group data by a date histogram and a few other terms dimensions. The transforms are running in continuous mode using the ingest timestamp as the sync.time.field but I'm grouping on … --- ## [Elasticsearch not starting after UID and GID change](https://discuss.elastic.co/t/elasticsearch-not-starting-after-uid-and-gid-change/265054)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 6\ **Last updated:** [February 22, 2021, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-uid-and-gid-change/265054 "2021-02-22T14:31:23Z")
Hello! I have a cluster of 2 nodes and I wanted to do the snapshot by setting up the NFS server and a directory as the repository. I had read that all nodes should have the same UID and GID. Thus, I changed them using co… [Previous page](https://discuss.elastic.co/top.md?page=1221&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1223&per_page=50&period=all)