# Top

**URL:** https://discuss.elastic.co/top.md?page=1223&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1224

---

## [Elasticsearch nodes](https://discuss.elastic.co/t/elasticsearch-nodes/78346)

<div class="topic-metadata">

**Author:** [@ArjunSISA](https://discuss.elastic.co/u/ArjunSISA)\
**Replies:** 6\
**Last updated:** [March 22, 2017, 2:16pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes/78346 "2017-03-22T14:16:53Z")

</div>

hi guys, I need to know if it is possible to connect two elasticsearch nodes and if so which port can be used to do so?

---

## [How to add Load more button or infinte scrolling?](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151)

<div class="topic-metadata">

**Author:** [@pradeep14](https://discuss.elastic.co/u/pradeep14)\
**Replies:** 5\
**Last updated:** [July 26, 2021, 4:53am UTC](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151 "2021-07-26T04:53:13Z")

</div>

Hi guys I'm new in ES and I want to add a load more button because instead of pagination so could you please hel me

---

## [RabbitMQ Queue metrics](https://discuss.elastic.co/t/rabbitmq-queue-metrics/110518)

<div class="topic-metadata">

**Author:** [@Ric](https://discuss.elastic.co/u/Ric)\
**Replies:** 5\
**Last updated:** [December 8, 2017, 7:19am UTC](https://discuss.elastic.co/t/rabbitmq-queue-metrics/110518 "2017-12-08T07:19:37Z")

</div>

Hi, New to ELK, I'm trying to setup RabbitMQ module of MetricBeat. Succeed in the "node" metricsets part: works well. In the doc MetricBeat RabbitMQ Module, there is a second metricsets documented : "queue". Looks li…

---

## [ElasticSearch javascript client error](https://discuss.elastic.co/t/elasticsearch-javascript-client-error/13697)

<div class="topic-metadata">

**Author:** [@Joris\_Bolsens](https://discuss.elastic.co/u/Joris_Bolsens)\
**Replies:** 5\
**Last updated:** [September 21, 2013, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-javascript-client-error/13697 "2013-09-21T05:55:17Z")

</div>

hello all, I am getting a very strange error when trying to search for a document using GitHub - phillro/node-elasticsearch-client: A client written in node for elastic search the full error message can be found here:…

---

## [How to duplicate a rule?](https://discuss.elastic.co/t/how-to-duplicate-a-rule/331042)

<div class="topic-metadata">

**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\
**Replies:** 7\
**Last updated:** [May 10, 2023, 12:40pm UTC](https://discuss.elastic.co/t/how-to-duplicate-a-rule/331042 "2023-05-10T12:40:13Z")

</div>

Hello, I have to create several rules-alerts that are very similar. Is there a way to duplicate (copy/paste) a rule ? Thank you.

---

## [Export all saved objects](https://discuss.elastic.co/t/export-all-saved-objects/238264)

<div class="topic-metadata">

**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\
**Replies:** 7\
**Last updated:** [July 3, 2020, 12:56pm UTC](https://discuss.elastic.co/t/export-all-saved-objects/238264 "2020-07-03T12:56:11Z")

</div>

I found a way in kibana UI-\> management-\> saved objects to export all objects at a time in export.ndjson file. But I want to export all saved objects by a single query in kibana 7.6.2. I tried to export all saved objec…

---

## [What configuration is used to add newly added data in old indexes?](https://discuss.elastic.co/t/what-configuration-is-used-to-add-newly-added-data-in-old-indexes/192212)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 7\
**Last updated:** [August 2, 2019, 4:52am UTC](https://discuss.elastic.co/t/what-configuration-is-used-to-add-newly-added-data-in-old-indexes/192212 "2019-08-02T04:52:27Z")

</div>

Hello, Can anyone help me in this? I have one index made up of database table which is created by using sql query. I want to add newly added data into it. I do not want to index whole data again. For example: database…

---

## [Merge extendedStackTrace received from log4j to regular stack trace](https://discuss.elastic.co/t/merge-extendedstacktrace-received-from-log4j-to-regular-stack-trace/147393)

<div class="topic-metadata">

**Author:** [@andrsuh13](https://discuss.elastic.co/u/andrsuh13)\
**Replies:** 1\
**Last updated:** [September 5, 2018, 6:35pm UTC](https://discuss.elastic.co/t/merge-extendedstacktrace-received-from-log4j-to-regular-stack-trace/147393 "2018-09-05T18:35:52Z")

</div>

I am trying integrate our product with ELK. I use log4j and socket appender with JsonLayout and I see all my logs in Kibana. But stacktraces I get look like: "thrown": { "extendedStackTrace": \[ { "file…

---

## [Filebeat registry file on Window 7 (not found)](https://discuss.elastic.co/t/filebeat-registry-file-on-window-7-not-found/133511)

<div class="topic-metadata">

**Author:** [@kuba72](https://discuss.elastic.co/u/kuba72)\
**Replies:** 1\
**Last updated:** [May 28, 2018, 10:02am UTC](https://discuss.elastic.co/t/filebeat-registry-file-on-window-7-not-found/133511 "2018-05-28T10:02:28Z")

</div>

Hi I'm running filebeat on windows sending data to logstash, but I cannot find the registry file from filebeat. Filebeat is installed under C:\\Bitnami\\filebeat. Can you tell me where that file should be located? Thank…

---

## [XPACK -Security](https://discuss.elastic.co/t/xpack-security/80967)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 7\
**Last updated:** [April 5, 2017, 12:30pm UTC](https://discuss.elastic.co/t/xpack-security/80967 "2017-04-05T12:30:55Z")

</div>

Hi All, We have purchased Xpack and we have upgraded to new version to 5.3 ,Just want to know if there is any way to restrict dashboard users like read only access to the dashboards created in the kibana. So that t…

---

## [Delete document without id?](https://discuss.elastic.co/t/delete-document-without-id/62844)

<div class="topic-metadata">

**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\
**Replies:** 1\
**Last updated:** [October 12, 2016, 8:38pm UTC](https://discuss.elastic.co/t/delete-document-without-id/62844 "2016-10-12T20:38:22Z")

</div>

So my current code to delete some specific "documents" is failing. I get a message that: Unable to build a path with those params. Supply at least index, type, id I have elasticsearch creating my ids for me, so I don…

---

## [JarHell ERROR: Classpath should not contain empty elements!](https://discuss.elastic.co/t/jarhell-error-classpath-should-not-contain-empty-elements/35810)

<div class="topic-metadata">

**Author:** [@Isra](https://discuss.elastic.co/u/Isra)\
**Replies:** 1\
**Last updated:** [November 29, 2015, 9:56am UTC](https://discuss.elastic.co/t/jarhell-error-classpath-should-not-contain-empty-elements/35810 "2015-11-29T09:56:26Z")

</div>

I created a java file using Elasticsearch JAVA API. in netbeans, everything worked just fine. However, I started getting the following error: org/elasticsearch/plugins/PluginsService.java:342:in \`loadBundles': java.l…

---

## [Replace values with predefined mapping with ELK](https://discuss.elastic.co/t/replace-values-with-predefined-mapping-with-elk/22316)

<div class="topic-metadata">

**Author:** [@Lucia\_Pasarin](https://discuss.elastic.co/u/Lucia_Pasarin)\
**Replies:** 1\
**Last updated:** [February 22, 2015, 8:35pm UTC](https://discuss.elastic.co/t/replace-values-with-predefined-mapping-with-elk/22316 "2015-02-22T20:35:08Z")

</div>

Hello! This is a question I posted on StackOverflow (http://stackoverflow.com/questions/28644501/replace-values-with-predefined-mapping-with-elk) for which I didn't get any answer yet: I have a file that I read…

---

## [Saved object not found & cannot delete it](https://discuss.elastic.co/t/saved-object-not-found-cannot-delete-it/314164)

<div class="topic-metadata">

**Author:** [@uae\_user](https://discuss.elastic.co/u/uae_user)\
**Replies:** 4\
**Last updated:** [September 19, 2022, 5:50am UTC](https://discuss.elastic.co/t/saved-object-not-found-cannot-delete-it/314164 "2022-09-19T05:50:50Z")

</div>

Hello, I re-indexed my data and created a new data view after deleting the old one. There are some visualization objects linked to the old data view which I managed to create again and remove the old one however there a…

---

## [Elastic search - filter on a field based on the length of that field's contents](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883)

<div class="topic-metadata">

**Author:** [@drwiremore](https://discuss.elastic.co/u/drwiremore)\
**Replies:** 4\
**Last updated:** [February 1, 2022, 3:02pm UTC](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883 "2022-02-01T15:02:16Z")

</div>

Thought this would be easy. I'm searching a data index of data-awsch\*:ls-aws-cloudtrail\* based on event.type that is not one of start, access, info. This is working as intended, but the output is huge. Rather than fil…

---

## [Kibana on Arch Linux: "NetworkError when attempting to fetch resource."](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413)

<div class="topic-metadata">

**Author:** [@brian.rene](https://discuss.elastic.co/u/brian.rene)\
**Replies:** 4\
**Last updated:** [August 6, 2021, 8:07am UTC](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413 "2021-08-06T08:07:26Z")

</div>

Hello everyone, I have been tasked with setting up a self-hosted instance of ELK in a KVM environment using Arch Linux. The root filesystem is write-protected (at runtime) and any directories or files that services need…

---

## [Issue with restoring .kibana\_1 and .security-6 indices](https://discuss.elastic.co/t/issue-with-restoring-kibana-1-and-security-6-indices/171579)

<div class="topic-metadata">

**Author:** [@Eric\_Moss](https://discuss.elastic.co/u/Eric_Moss)\
**Replies:** 4\
**Last updated:** [March 11, 2019, 4:51pm UTC](https://discuss.elastic.co/t/issue-with-restoring-kibana-1-and-security-6-indices/171579 "2019-03-11T16:51:19Z")

</div>

After a frustrating day trying to get my head around restoring snapshots from another cluster in ECE/S3 Repo, I've managed to kill my new deployment. I closed the .security-6 index in an attempt to do a full restore and…

---

## [Scroll vs mget when searching by ids on alias (edit - mget doesn't work on alias)](https://discuss.elastic.co/t/scroll-vs-mget-when-searching-by-ids-on-alias-edit-mget-doesnt-work-on-alias/153854)

<div class="topic-metadata">

**Author:** [@pbathala](https://discuss.elastic.co/u/pbathala)\
**Replies:** 4\
**Last updated:** [October 25, 2018, 2:56pm UTC](https://discuss.elastic.co/t/scroll-vs-mget-when-searching-by-ids-on-alias-edit-mget-doesnt-work-on-alias/153854 "2018-10-25T14:56:05Z")

</div>

In a use case I am working on I need to search by ID's on an alias that has about 100 indices. I randomly picked about 30 ID's and ran both mget and scroll by ids and I get inconsistent timings out of each, which is conf…

---

## [Xpack/sql Does not appear to be able to handle "IN"](https://discuss.elastic.co/t/xpack-sql-does-not-appear-to-be-able-to-handle-in/146772)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 4\
**Last updated:** [August 31, 2018, 6:45am UTC](https://discuss.elastic.co/t/xpack-sql-does-not-appear-to-be-able-to-handle-in/146772 "2018-08-31T06:45:01Z")

</div>

Example SQL -\> SELECT visit.app.appVersion FROM index WHERE visit.app.appName IN ('appA', 'appB') returns { "error": { "root\_cause": \[ { "type": "sql\_illegal\_argument\_exception", "reason…

---

## [Elasticsearch Index allocation: How do I do it?](https://discuss.elastic.co/t/elasticsearch-index-allocation-how-do-i-do-it/46469)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 4\
**Last updated:** [April 6, 2016, 5:41am UTC](https://discuss.elastic.co/t/elasticsearch-index-allocation-how-do-i-do-it/46469 "2016-04-06T05:41:39Z")

</div>

Hi All, I've the use case of storing logs in ES. For that, I want newer indices to reside on a different set of ES nodes than the older indices. Both nodes should however be in the same cluster. I see that we have a do…

---

## [Delete returns IndexMissingException but Index creation hangs](https://discuss.elastic.co/t/delete-returns-indexmissingexception-but-index-creation-hangs/14076)

<div class="topic-metadata">

**Author:** [@Ashish\_Nigam\_3](https://discuss.elastic.co/u/Ashish_Nigam_3)\
**Replies:** 4\
**Last updated:** [October 23, 2013, 6:46pm UTC](https://discuss.elastic.co/t/delete-returns-indexmissingexception-but-index-creation-hangs/14076 "2013-10-23T18:46:31Z")

</div>

Hi, Lately, I am noticing following use case for few of the indexes in the cluster - When I issue curl DELETE command, cluster comes up with the response that index does not exist. curl -XDELETE 'http://10.0.1.1…

---

## [Dec 21st, 2023: \[EN\] Good SLO, Bad SLO: an SRE adventure theme](https://discuss.elastic.co/t/dec-21st-2023-en-good-slo-bad-slo-an-sre-adventure-theme/347304)

<div class="topic-metadata">

**Author:** [@virginiadiana.todea](https://discuss.elastic.co/u/virginiadiana.todea)\
**Replies:** 0\
**Last updated:** [December 21, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2023-en-good-slo-bad-slo-an-sre-adventure-theme/347304 "2023-12-21T08:00:44Z")

</div>

This post is also available in espagnol. This post is also available in romanian. If you ever endeavoured in the SRE town, there is a very good chance that you already have met some of my favourite characters: the S…

---

## [Found encoding issue with Filebeat MS SQL module](https://discuss.elastic.co/t/found-encoding-issue-with-filebeat-ms-sql-module/315351)

<div class="topic-metadata">

**Author:** [@imad\_orange](https://discuss.elastic.co/u/imad_orange)\
**Replies:** 0\
**Last updated:** [September 28, 2022, 10:03am UTC](https://discuss.elastic.co/t/found-encoding-issue-with-filebeat-ms-sql-module/315351 "2022-09-28T10:03:54Z")

</div>

Hello, For people who find a probleme to read files Error of SQL server with the module mssql, you should add encoding: utf-16le-bom in module\\mssql\\log\\config\\config.yml file. Thanks to @varun1992 (Found encoding iss…

---

## [Log source with different field type - mapper\_parsing\_exception](https://discuss.elastic.co/t/log-source-with-different-field-type-mapper-parsing-exception/217655)

<div class="topic-metadata">

**Author:** [@nitzang](https://discuss.elastic.co/u/nitzang)\
**Replies:** 0\
**Last updated:** [February 3, 2020, 3:44pm UTC](https://discuss.elastic.co/t/log-source-with-different-field-type-mapper-parsing-exception/217655 "2020-02-03T15:44:45Z")

</div>

Hello, I recently started getting AWS cloud logs to ES and received many exceptions for indexing issues, such as: \[2020-02-03T15:35:56,728\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch…

---

## [Trouble importing data to Logstash using tcp input](https://discuss.elastic.co/t/trouble-importing-data-to-logstash-using-tcp-input/150612)

<div class="topic-metadata">

**Author:** [@kyle.upton](https://discuss.elastic.co/u/kyle.upton)\
**Replies:** 0\
**Last updated:** [October 1, 2018, 8:33pm UTC](https://discuss.elastic.co/t/trouble-importing-data-to-logstash-using-tcp-input/150612 "2018-10-01T20:33:03Z")

</div>

Just to give a little background about what I'm trying to do, I want to monitor my servers system metrics using NetData and then import that data into an Elastic Stack. Then, using machine learning, I want to detect anom…

---

## [Downgrade from ES 8.10.1 TO 8.9.2](https://discuss.elastic.co/t/downgrade-from-es-8-10-1-to-8-9-2/343919)

<div class="topic-metadata">

**Author:** [@balakr](https://discuss.elastic.co/u/balakr)\
**Replies:** 3\
**Last updated:** [September 26, 2023, 6:22pm UTC](https://discuss.elastic.co/t/downgrade-from-es-8-10-1-to-8-9-2/343919 "2023-09-26T18:22:49Z")

</div>

I would like to upgrade my ES to 8.10.1, i want to have the option to downgrade if tests fails. i did my search and did not find any breaking change between 8.9 to 8.10, wanted to confirm is downgrade is possible. ex., …

---

## [Can't connect to Enterprise search](https://discuss.elastic.co/t/cant-connect-to-enterprise-search/292762)

<div class="topic-metadata">

**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\
**Replies:** 3\
**Last updated:** [January 7, 2022, 1:06am UTC](https://discuss.elastic.co/t/cant-connect-to-enterprise-search/292762 "2022-01-07T01:06:43Z")

</div>

Hello everyone, I installed the enterprise-search plugin @7.16.1. The enterprise-search service is started without error. But my Kibana still show " Unable to connect ". I have no idea. Anybody can help? {ELKM3}elas…

---

## [Logging Cisco Umbrella logs](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 3\
**Last updated:** [July 30, 2018, 10:19am UTC](https://discuss.elastic.co/t/logging-cisco-umbrella-logs/142129 "2018-07-30T10:19:59Z")

</div>

Is it possible to log cisco umbrella logs to kibana? If so, can someone provide me with some helpful links? Thanks

---

## [Watcher error after upgrade to 6.1](https://discuss.elastic.co/t/watcher-error-after-upgrade-to-6-1/112244)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 3\
**Last updated:** [December 18, 2017, 3:47pm UTC](https://discuss.elastic.co/t/watcher-error-after-upgrade-to-6-1/112244 "2017-12-18T15:47:11Z")

</div>

Hi All, I've been using watcher with ES 5.6.3 and after updating to 6.1 the condition code is not working anymore. Any help will be appreciated Here is the error I have "exception": { "type": "script\_exception",…

---

## [Logstash Error Message](https://discuss.elastic.co/t/logstash-error-message/71597)

<div class="topic-metadata">

**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Replies:** 3\
**Last updated:** [January 16, 2017, 1:47am UTC](https://discuss.elastic.co/t/logstash-error-message/71597 "2017-01-16T01:47:49Z")

</div>

ERR Failed to publish events caused by: read tcp \>ELK\_SERVER\_IP:5044: read: connection reset by peer Anyone with help really appreciate.

---

## [Analyze and extract from url?](https://discuss.elastic.co/t/analyze-and-extract-from-url/60204)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 3\
**Last updated:** [September 13, 2016, 5:46am UTC](https://discuss.elastic.co/t/analyze-and-extract-from-url/60204 "2016-09-13T05:46:54Z")

</div>

Hi I am thinking of analyzing the urls and need to extract some information. For example, for below url, https://it.fotolia.com/id/102342882" : i will need to extract id = 102342882 https://us.fotolia.com/search?\*\*…

---

## [Reinstalar Elastic](https://discuss.elastic.co/t/reinstalar-elastic/44068)

<div class="topic-metadata">

**Author:** [@Carlos\_Mosquera](https://discuss.elastic.co/u/Carlos_Mosquera)\
**Replies:** 3\
**Last updated:** [March 10, 2016, 7:32pm UTC](https://discuss.elastic.co/t/reinstalar-elastic/44068 "2016-03-10T19:32:34Z")

</div>

Hola, he intentado encontrar informacion actualizada para lograr reinstalar elasticsearch pero sin exito. Estamos usando la version 2.0 y necesitamos reinstalarla. Gracias.

---

## [Kibana 4 does not see \_timestamp field](https://discuss.elastic.co/t/kibana-4-does-not-see--timestamp-field/22603)

<div class="topic-metadata">

**Author:** [@Micah\_Yoder](https://discuss.elastic.co/u/Micah_Yoder)\
**Replies:** 3\
**Last updated:** [April 18, 2015, 7:12pm UTC](https://discuss.elastic.co/t/kibana-4-does-not-see--timestamp-field/22603 "2015-04-18T19:12:45Z")

</div>

Hi, I'm pumping data into ElasticSearch (actually using rsyslog instead of logstash) into a date-based index with a mapping that stores the \_timestamp. When I go in with Kibana 4.0.1 and start setting it up, it …

---

## [Ingest pipeline processor split](https://discuss.elastic.co/t/ingest-pipeline-processor-split/103890)

<div class="topic-metadata">

**Author:** [@Taoufiq\_BOUKHCHA](https://discuss.elastic.co/u/Taoufiq_BOUKHCHA)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 1:09pm UTC](https://discuss.elastic.co/t/ingest-pipeline-processor-split/103890 "2017-10-13T13:09:05Z")

</div>

Hi, when I specify the target\_field in the split processor I get the following error: { "error": { "root\_cause": \[ { "type": "parse\_exception", "reason": "processor \[split\] does…

---

## [Get count of parent documents only](https://discuss.elastic.co/t/get-count-of-parent-documents-only/92494)

<div class="topic-metadata">

**Author:** [@Matt\_Zalen](https://discuss.elastic.co/u/Matt_Zalen)\
**Replies:** 2\
**Last updated:** [July 11, 2017, 3:52pm UTC](https://discuss.elastic.co/t/get-count-of-parent-documents-only/92494 "2017-07-11T15:52:06Z")

</div>

Hi all, I have a document which has some nested documents. When I do something like the following, the count that comes back includes the nested document: GET loandetails2/loandetail/\_count { "query": { "bool"…

---

## [Tried to hide Settings menu item from Kibana 4.5.1 UI, unsuccessful attempt](https://discuss.elastic.co/t/tried-to-hide-settings-menu-item-from-kibana-4-5-1-ui-unsuccessful-attempt/54014)

<div class="topic-metadata">

**Author:** [@Karambir.Singh](https://discuss.elastic.co/u/Karambir.Singh)\
**Replies:** 2\
**Last updated:** [June 28, 2016, 1:17pm UTC](https://discuss.elastic.co/t/tried-to-hide-settings-menu-item-from-kibana-4-5-1-ui-unsuccessful-attempt/54014 "2016-06-28T13:17:06Z")

</div>

Hi, I am using ELK current version for logging solution for my project and got stuck with one requirement - I need to hide "Settings" tab / menu item from Kibana UI. I read online documentation to find if we have some…

---

## [Autocompletion during search](https://discuss.elastic.co/t/autocompletion-during-search/53241)

<div class="topic-metadata">

**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\
**Replies:** 2\
**Last updated:** [June 21, 2016, 5:12pm UTC](https://discuss.elastic.co/t/autocompletion-during-search/53241 "2016-06-21T17:12:54Z")

</div>

Hi, I have and index with several hundreds fields per document, and it is impossible to remember all of them, especially since the fields names are case sensitive in Kibana. Is it possible for Kibana to autocomplete th…

---

## [Alert notification with percolator](https://discuss.elastic.co/t/alert-notification-with-percolator/23070)

<div class="topic-metadata">

**Author:** [@Lincoln\_Xiong](https://discuss.elastic.co/u/Lincoln_Xiong)\
**Replies:** 2\
**Last updated:** [April 6, 2015, 2:12pm UTC](https://discuss.elastic.co/t/alert-notification-with-percolator/23070 "2015-04-06T14:12:35Z")

</div>

I try to use elasticsearch as a 2nd log output storage, to analyze some info in logs. In this case, an alert triggers will be very useful. I read through docs talking about percolator and I think this should be the w…

---

## [Kibana basePAth on ECK](https://discuss.elastic.co/t/kibana-basepath-on-eck/356907)

<div class="topic-metadata">

**Author:** [@Nasir\_Mahmood](https://discuss.elastic.co/u/Nasir_Mahmood)\
**Replies:** 2\
**Last updated:** [November 11, 2024, 4:19pm UTC](https://discuss.elastic.co/t/kibana-basepath-on-eck/356907 "2024-11-11T16:19:14Z")

</div>

I'm trying to deploy ECK on a local kubernetes cluster with below given spec. I'm trying to serve kibana ingress using /beats, hence I changed/updated those parameters in config section. the fleet server never comes on…

---

## [Kibana Data Table visualization - advanced filter](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358)

<div class="topic-metadata">

**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\
**Replies:** 1\
**Last updated:** [March 5, 2021, 1:39pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358 "2021-03-05T13:39:02Z")

</div>

I am creating Kibana Dashboard based on log data. I want to create Data Table for the most common warnings, with some stacktrace info (if exists). Each entry can contain multiple stacktrace messages, but the first one …

---

## [Filtering all Fields/Events](https://discuss.elastic.co/t/filtering-all-fields-events/254088)

<div class="topic-metadata">

**Author:** [@faridNR](https://discuss.elastic.co/u/faridNR)\
**Replies:** 1\
**Last updated:** [November 3, 2020, 2:21am UTC](https://discuss.elastic.co/t/filtering-all-fields-events/254088 "2020-11-03T02:21:55Z")

</div>

Hello Having a centralized log-stream using Logstash with more than hundreds of fields/events types. I'm trying to apply filter to all events/fields and replacing a regex in this case email address. (removing PII) wha…

---

## [Advanced JSON input option in Datatable is not supporting aggregation](https://discuss.elastic.co/t/advanced-json-input-option-in-datatable-is-not-supporting-aggregation/227088)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 7:25am UTC](https://discuss.elastic.co/t/advanced-json-input-option-in-datatable-is-not-supporting-aggregation/227088 "2020-04-09T07:25:20Z")

</div>

Hello Team, I am trying to take a percentage value using two fields in data table visualization , though Data tables doesn't support bucket script or Math ,i am trying to write my aggregation query inside Advanced opti…

---

## [Help with Logstash filter and private geoip data](https://discuss.elastic.co/t/help-with-logstash-filter-and-private-geoip-data/256007)

<div class="topic-metadata">

**Author:** [@ccofer](https://discuss.elastic.co/u/ccofer)\
**Replies:** 8\
**Last updated:** [November 23, 2020, 3:46pm UTC](https://discuss.elastic.co/t/help-with-logstash-filter-and-private-geoip-data/256007 "2020-11-23T15:46:17Z")

</div>

I realize I should have a better understanding of elastic, indexes, mappings, logstash and beats before coming here asking for help, but I really need to put this behind me. I have spent days searching and reading about …

---

## [Painless compare string dates](https://discuss.elastic.co/t/painless-compare-string-dates/101230)

<div class="topic-metadata">

**Author:** [@Alex\_Vaisberg](https://discuss.elastic.co/u/Alex_Vaisberg)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 8:17pm UTC](https://discuss.elastic.co/t/painless-compare-string-dates/101230 "2017-09-20T20:17:36Z")

</div>

Hi, I need compare two dates in painless script inline to update documents. I try in Kibana Console: GET indexName/Type/1111/\_update { "script":{ "lang": "painless", "inline": "ctx.\_source.accounts.removeIf(i…

---

## [Filter array](https://discuss.elastic.co/t/filter-array/73952)

<div class="topic-metadata">

**Author:** [@fix2015](https://discuss.elastic.co/u/fix2015)\
**Replies:** 8\
**Last updated:** [February 6, 2017, 6:56pm UTC](https://discuss.elastic.co/t/filter-array/73952 "2017-02-06T18:56:48Z")

</div>

hey guys, i have pb, i have this field "rank": { "properties": { "id": { "type": "string" } } it return array and i need filter it try like this { "f…

---

## [Parse subdomain from fqdn in logstash](https://discuss.elastic.co/t/parse-subdomain-from-fqdn-in-logstash/273535)

<div class="topic-metadata">

**Author:** [@tushar.bansal](https://discuss.elastic.co/u/tushar.bansal)\
**Replies:** 6\
**Last updated:** [May 22, 2021, 11:45pm UTC](https://discuss.elastic.co/t/parse-subdomain-from-fqdn-in-logstash/273535 "2021-05-22T23:45:16Z")

</div>

Hi, I have several events coming in logstash with info of web link accessed. example: DNS query is called for the name crl.sectigo.com, type 28 DNS query is called for the name repo.maven.apache.org, type 2 DNS quer…

---

## [Logstash.pipeline error in dns plugin crashes logstash](https://discuss.elastic.co/t/logstash-pipeline-error-in-dns-plugin-crashes-logstash/129981)

<div class="topic-metadata">

**Author:** [@maxf](https://discuss.elastic.co/u/maxf)\
**Replies:** 6\
**Last updated:** [May 18, 2018, 8:45pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-in-dns-plugin-crashes-logstash/129981 "2018-05-18T20:45:08Z")

</div>

Hello. I catch this issue 2nd time: DNS plugin crashes logstash (logstash service stay active, but do nothing untill restart) In logstash log there is much errors like \[ERROR\]\[logstash.filters.dns \] DNS: timeout …

---

## [LogsDB Without Synthetic \_Source: Storage Savings and Upgrade Risks?](https://discuss.elastic.co/t/logsdb-without-synthetic-source-storage-savings-and-upgrade-risks/372858)

<div class="topic-metadata">

**Author:** [@Behnam.R](https://discuss.elastic.co/u/Behnam.R)\
**Replies:** 5\
**Last updated:** [January 8, 2025, 6:16pm UTC](https://discuss.elastic.co/t/logsdb-without-synthetic-source-storage-savings-and-upgrade-risks/372858 "2025-01-08T18:16:05Z")

</div>

I am currently on Elasticsearch version 8.16 and considering using the LogsDB index mode for its benefits, particularly the improved querying speed and reduced storage footprint with the new sorting feature (up to 20%, b…

---

## [Dynamic range in Kibana chart axis](https://discuss.elastic.co/t/dynamic-range-in-kibana-chart-axis/308064)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 5\
**Last updated:** [June 30, 2022, 8:56pm UTC](https://discuss.elastic.co/t/dynamic-range-in-kibana-chart-axis/308064 "2022-06-30T20:56:24Z")

</div>

I have found some previous questions about this, but nothing from recent versions, and all just enough different that they don't apply. To dumb it way down, I want my Kibana Vega-Lite line chart to have a dynamic y-axis…

---

## [Some application logs are not getting indexed](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 5\
**Last updated:** [October 27, 2021, 9:20pm UTC](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740 "2021-10-27T21:20:44Z")

</div>

Hi All, Some of the application logs are not getting indexed. below are the error log about then in logstash logs. below logs has error like, ....:response=\>{"index"=\>{"\_index"=\>"filebeat-7.14.0-2021.10", "\_type"=\>"\_d…

[Previous page](https://discuss.elastic.co/top.md?page=1222&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1224&per_page=50&period=all)
