# Top

**URL:** https://discuss.elastic.co/top.md?page=1237&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1238

---

## [Elastic Cloud Setup : Pipeline Worker Stops in Logstash](https://discuss.elastic.co/t/elastic-cloud-setup-pipeline-worker-stops-in-logstash/165051)

<div class="topic-metadata">

**Author:** [@Deepankar\_Biswas1](https://discuss.elastic.co/u/Deepankar_Biswas1)\
**Replies:** 4\
**Last updated:** [January 21, 2019, 2:11pm UTC](https://discuss.elastic.co/t/elastic-cloud-setup-pipeline-worker-stops-in-logstash/165051 "2019-01-21T14:11:56Z")

</div>

I have a setup of ES, Kibana on the cloud and LS and Filebeat (2 nodes). It was all working fine but suddenly i I see today that the pipelines stop in LS with the following error: \[2019-01-21T12:51:07,188\]\[ERROR\]\[logst…

---

## [Convert string to int if it contains only int](https://discuss.elastic.co/t/convert-string-to-int-if-it-contains-only-int/161074)

<div class="topic-metadata">

**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\
**Replies:** 4\
**Last updated:** [December 17, 2018, 6:08am UTC](https://discuss.elastic.co/t/convert-string-to-int-if-it-contains-only-int/161074 "2018-12-17T06:08:03Z")

</div>

String parts = "123" parts.matches("\[0-9\]+") ?Integer.parseInt(parts): parts I am using above script to create a scripted field if a string contains integer : convert it to int and return else return as it is But i …

---

## [Create dynamic dashboards](https://discuss.elastic.co/t/create-dynamic-dashboards/151603)

<div class="topic-metadata">

**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\
**Replies:** 4\
**Last updated:** [October 10, 2018, 8:10am UTC](https://discuss.elastic.co/t/create-dynamic-dashboards/151603 "2018-10-10T08:10:58Z")

</div>

Hello, I created 10 dashboards for an index and I want to do that automatically when a new user use another index on another instance of kibana. Thanks for your help

---

## [Kibana not displaying X-pack features](https://discuss.elastic.co/t/kibana-not-displaying-x-pack-features/137485)

<div class="topic-metadata">

**Author:** [@suyash](https://discuss.elastic.co/u/suyash)\
**Replies:** 4\
**Last updated:** [June 28, 2018, 6:01am UTC](https://discuss.elastic.co/t/kibana-not-displaying-x-pack-features/137485 "2018-06-28T06:01:58Z")

</div>

Hi, Iam first time user of ELK stack. I had installed Kibana 6.0.3 and ElasticSearch 6.0.3. After running kibana and viewing the console , I am unable to view the x-pack features like graph,machinelearning.. Below is …

---

## [Field is of type string when doing search when mapping specifies double](https://discuss.elastic.co/t/field-is-of-type-string-when-doing-search-when-mapping-specifies-double/76110)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 4\
**Last updated:** [February 23, 2017, 6:42pm UTC](https://discuss.elastic.co/t/field-is-of-type-string-when-doing-search-when-mapping-specifies-double/76110 "2017-02-23T18:42:09Z")

</div>

Hi All, I have a question about field types in ES 2.3. I want to index a document with a field of type string and want ES to store it as a double. I created a 'myindex' index with the following mapping: "mappings": …

---

## [Trouble SmartCN analyzer](https://discuss.elastic.co/t/trouble-smartcn-analyzer/62328)

<div class="topic-metadata">

**Author:** [@minhnhat2807](https://discuss.elastic.co/u/minhnhat2807)\
**Replies:** 4\
**Last updated:** [October 7, 2016, 10:13am UTC](https://discuss.elastic.co/t/trouble-smartcn-analyzer/62328 "2016-10-07T10:13:07Z")

</div>

Hi all, curl -XGET 'http://localhost:9200/mm-chs/\_analyze?analyzer=smartcn' -d 'curator post' {"tokens":\[{"token":"curat","start\_offset":0,"end\_offset":7,"type":"word","position":0},{"token":"post","start\_offset":8,"en…

---

## [How to make Kibana (4.4) always display the latest output at the top?](https://discuss.elastic.co/t/how-to-make-kibana-4-4-always-display-the-latest-output-at-the-top/55659)

<div class="topic-metadata">

**Author:** [@elkuser](https://discuss.elastic.co/u/elkuser)\
**Replies:** 4\
**Last updated:** [July 17, 2016, 1:07pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-4-4-always-display-the-latest-output-at-the-top/55659 "2016-07-17T13:07:43Z")

</div>

Hi, I am new to Kibana and I have some visuals that display certain errors with time of occurrence and their count. I find that when I load the dashboard, the timestamp is in random order. I can manually sort it in asc…

---

## [Filter Not Working (Version 2.3.1)](https://discuss.elastic.co/t/filter-not-working-version-2-3-1/48889)

<div class="topic-metadata">

**Author:** [@VenkataMR](https://discuss.elastic.co/u/VenkataMR)\
**Replies:** 4\
**Last updated:** [May 5, 2016, 5:09pm UTC](https://discuss.elastic.co/t/filter-not-working-version-2-3-1/48889 "2016-05-05T17:09:35Z")

</div>

New to Logstash, was trying to filer certain messages which have matching either of INFO, ERROR, WARNING and having time stamp in certain format only. I don't want any other message by having bellow filter. filter { …

---

## [Kibana and @timestamp - out by 4 Months](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632)

<div class="topic-metadata">

**Author:** [@peterlarb](https://discuss.elastic.co/u/peterlarb)\
**Replies:** 5\
**Last updated:** [May 28, 2020, 3:17am UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632 "2020-05-28T03:17:52Z")

</div>

I understand that Kibana uses UTC. Logstash imports a CSV and shows that @timestamp as 27 May 2020 for the file import. But my data in the rest of the index is showing Jan 2020 and not May 2020. Now I just can't work …

---

## [Elasticsearch bails out ES-HADOOP PLUGIN](https://discuss.elastic.co/t/elasticsearch-bails-out-es-hadoop-plugin/121329)

<div class="topic-metadata">

**Author:** [@chitender](https://discuss.elastic.co/u/chitender)\
**Replies:** 5\
**Last updated:** [March 20, 2018, 10:40am UTC](https://discuss.elastic.co/t/elasticsearch-bails-out-es-hadoop-plugin/121329 "2018-03-20T10:40:45Z")

</div>

we are using ES-HADOOP plugin to push data into Elasticsearch cluster from Hadoop HBASE table. below are the cluster details. ELASTICSEARCH VERSION: 2.3.5 DATA NODES: 3 MASTER NODES: 3 CLIENT NODE: 1 the data nodes …

---

## [Enroll and start the Elastic Agent - Windows](https://discuss.elastic.co/t/enroll-and-start-the-elastic-agent-windows/281275)

<div class="topic-metadata">

**Author:** [@alenraz05](https://discuss.elastic.co/u/alenraz05)\
**Replies:** 6\
**Last updated:** [August 13, 2021, 2:05pm UTC](https://discuss.elastic.co/t/enroll-and-start-the-elastic-agent-windows/281275 "2021-08-13T14:05:42Z")

</div>

Hi I can not find the elastic-agent.exe in the winlogbeat-7.14.0-windows-x86\_64 folder

---

## [Crashed with out of memory](https://discuss.elastic.co/t/crashed-with-out-of-memory/38014)

<div class="topic-metadata">

**Author:** [@justmao945](https://discuss.elastic.co/u/justmao945)\
**Replies:** 6\
**Last updated:** [December 28, 2015, 3:06am UTC](https://discuss.elastic.co/t/crashed-with-out-of-memory/38014 "2015-12-28T03:06:34Z")

</div>

Hi all, My cluster has 4 machines, every node has 8 CPUS, 32GB memory, and has thousands of indices and shards. Some nodes were crashed with out of memory error during query in recent days. I found the segments memory …

---

## [KQL Comprehensive Tutorial on Event Correlation Rules](https://discuss.elastic.co/t/kql-comprehensive-tutorial-on-event-correlation-rules/318669)

<div class="topic-metadata">

**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\
**Replies:** 3\
**Last updated:** [November 28, 2022, 8:05pm UTC](https://discuss.elastic.co/t/kql-comprehensive-tutorial-on-event-correlation-rules/318669 "2022-11-28T20:05:13Z")

</div>

I need to build some rather complex rules, but I'm just getting started with KQL. I haven't found any in-depth comprehensive tuts out there on event correlation. Everything is always brief and basic. Anyone know of any g…

---

## [Check whether document returned is from a read or a write index](https://discuss.elastic.co/t/check-whether-document-returned-is-from-a-read-or-a-write-index/276133)

<div class="topic-metadata">

**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\
**Replies:** 3\
**Last updated:** [June 16, 2021, 12:48pm UTC](https://discuss.elastic.co/t/check-whether-document-returned-is-from-a-read-or-a-write-index/276133 "2021-06-16T12:48:58Z")

</div>

I have a requirement where I want to delete the documents which match the query but only if they are in the read index , if it is in a write index I don't want the documents to be deleted. Below query deletes irrespecti…

---

## [Embedded visualization height](https://discuss.elastic.co/t/embedded-visualization-height/194799)

<div class="topic-metadata">

**Author:** [@adankert](https://discuss.elastic.co/u/adankert)\
**Replies:** 3\
**Last updated:** [August 13, 2019, 10:12am UTC](https://discuss.elastic.co/t/embedded-visualization-height/194799 "2019-08-13T10:12:05Z")

</div>

I can embed Kibana visualizations without problems using the functionality in the GUI. However, for some visualizations the height of the visualization becomes smaller than the iframe height. Others fill the iframe size …

---

## [Minimum\_should\_match is not working](https://discuss.elastic.co/t/minimum-should-match-is-not-working/100068)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 3\
**Last updated:** [September 12, 2017, 3:58pm UTC](https://discuss.elastic.co/t/minimum-should-match-is-not-working/100068 "2017-09-12T15:58:45Z")

</div>

Hi, I have used minimum\_should\_match as 10% or 80% both are giving same result.there is no difference in output.Please let me know why minimum\_should\_match is not working. GET /hist\_latest/\_search { "query": { "bool…

---

## [ALLOCATION\_FAILED engine failure, reason \[search execution corruption failure\]](https://discuss.elastic.co/t/allocation-failed-engine-failure-reason-search-execution-corruption-failure/48498)

<div class="topic-metadata">

**Author:** [@haochun](https://discuss.elastic.co/u/haochun)\
**Replies:** 3\
**Last updated:** [April 27, 2016, 3:29am UTC](https://discuss.elastic.co/t/allocation-failed-engine-failure-reason-search-execution-corruption-failure/48498 "2016-04-27T03:29:35Z")

</div>

"reason": "ALLOCATION\_FAILED", "at": "2016-04-13T02:37:23.700Z", "details": "shard failure \[engine failure, reason \[search execution corruption failure\]\]\[FetchPhaseExecutionException\[\[similar\]\[28\]: query\[xxxxx\],from\[0\],s…

---

## [Retrieving data through a cli interface (ssh/telnet)](https://discuss.elastic.co/t/retrieving-data-through-a-cli-interface-ssh-telnet/36201)

<div class="topic-metadata">

**Author:** [@warEagle](https://discuss.elastic.co/u/warEagle)\
**Replies:** 3\
**Last updated:** [December 3, 2015, 3:38pm UTC](https://discuss.elastic.co/t/retrieving-data-through-a-cli-interface-ssh-telnet/36201 "2015-12-03T15:38:44Z")

</div>

Noob situation and questions: I have a setup where I can run filebeat and send updated logs back to elasticsearch. This works well on conventional linux servers where I can control what is installed. However, some en…

---

## [Can not build tests (missing jmxtools-1.2.1.jar and jmxri-1.2.1.jar ?)](https://discuss.elastic.co/t/can-not-build-tests-missing-jmxtools-1-2-1-jar-and-jmxri-1-2-1-jar/2923)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 3\
**Last updated:** [April 21, 2010, 5:37pm UTC](https://discuss.elastic.co/t/can-not-build-tests-missing-jmxtools-1-2-1-jar-and-jmxri-1-2-1-jar/2923 "2010-04-21T17:37:55Z")

</div>

I can not build tests from command line. what I do: 1) git pull 2) ./gradlew clean 3) ./gradlew 4) ./gradlew -d test the last action (#4) fails. I seems that jmxtools-1.2.1.jar and jmxri-1.2.1.jar can not be f…

---

## [Daily index rotation bug](https://discuss.elastic.co/t/daily-index-rotation-bug/161220)

<div class="topic-metadata">

**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 9:29pm UTC](https://discuss.elastic.co/t/daily-index-rotation-bug/161220 "2018-12-18T21:29:34Z")

</div>

Hi, Every now and then a few documents (less than 1% of total logs) get placed into a daily index where the 20 in 2018 is replaced by 00. For example, logstash-6.4.3-0018.12.08 Has anyone encountered this? Seems like…

---

## [Getting 403 denied to elastic.co (for anything: apt refresh, wget, etc)](https://discuss.elastic.co/t/getting-403-denied-to-elastic-co-for-anything-apt-refresh-wget-etc/329903)

<div class="topic-metadata">

**Author:** [@olegkrysinov](https://discuss.elastic.co/u/olegkrysinov)\
**Replies:** 1\
**Last updated:** [April 19, 2023, 2:20am UTC](https://discuss.elastic.co/t/getting-403-denied-to-elastic-co-for-anything-apt-refresh-wget-etc/329903 "2023-04-19T02:20:28Z")

</div>

Hello! I\`ve a problem (( Error:1 https://artifacts.elastic.co:443/packages/8.x/apt stable InRelease 403 Forbidden \[IP: 34.120.127.130 443\] E: Failed to fetch http://artifacts.elastic.co/packages/8.x/apt/dists/stable/I…

---

## [RESOURCE\_LOCKED messages](https://discuss.elastic.co/t/resource-locked-messages/305628)

<div class="topic-metadata">

**Author:** [@rnappert](https://discuss.elastic.co/u/rnappert)\
**Replies:** 7\
**Last updated:** [May 30, 2022, 7:02pm UTC](https://discuss.elastic.co/t/resource-locked-messages/305628 "2022-05-30T19:02:27Z")

</div>

I have a three Logstash instances running a fairly old release ( 6.2.3). Two are running in a standby mode, and one in a active mode. The node, which has the vip is considered the active node. All this said, all three …

---

## [Errors with ES after restarting Docker container](https://discuss.elastic.co/t/errors-with-es-after-restarting-docker-container/86730)

<div class="topic-metadata">

**Author:** [@Bob04](https://discuss.elastic.co/u/Bob04)\
**Replies:** 1\
**Last updated:** [May 24, 2017, 3:29pm UTC](https://discuss.elastic.co/t/errors-with-es-after-restarting-docker-container/86730 "2017-05-24T15:29:24Z")

</div>

Hi, I ran Elasticsearch in Docker container and I mounted a local directory to the container's directory /usr/share/elasticsearch/data/. docker run -d --name elasticsearch -p 9200:9200 -v /opt/elasticsearch/data/:/usr…

---

## [Elastic Search 5.2.2: request circuit breaker changes (Bug of 5.2.1)](https://discuss.elastic.co/t/elastic-search-5-2-2-request-circuit-breaker-changes-bug-of-5-2-1/81246)

<div class="topic-metadata">

**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Replies:** 7\
**Last updated:** [April 6, 2017, 5:03pm UTC](https://discuss.elastic.co/t/elastic-search-5-2-2-request-circuit-breaker-changes-bug-of-5-2-1/81246 "2017-04-06T17:03:44Z")

</div>

Hi, We are in process of upgrading to Elastic Search 5.2.1. I read release notes of ES 5.2.2: "The request circuit breaker, which track the size of in-flight requests, was not decrementing its counter when the conn…

---

## [Unrecognized option: Files\\Elasticsearch\\Logstash/heapdump.hprof"](https://discuss.elastic.co/t/unrecognized-option-files-elasticsearch-logstash-heapdump-hprof/77576)

<div class="topic-metadata">

**Author:** [@Gregory\_Green](https://discuss.elastic.co/u/Gregory_Green)\
**Replies:** 1\
**Last updated:** [March 9, 2017, 12:32pm UTC](https://discuss.elastic.co/t/unrecognized-option-files-elasticsearch-logstash-heapdump-hprof/77576 "2017-03-09T12:32:05Z")

</div>

Hello, I'm working to install a brand new ELK stack. Following the installation of Logstash on 2012R2, I attempted to test it with the following command: logstash -e 'input { stdin { } } output { stdout {} }' I re…

---

## [Logstash fails with "FFI not available" message when starting logstash on Centos 7.9](https://discuss.elastic.co/t/logstash-fails-with-ffi-not-available-message-when-starting-logstash-on-centos-7-9/345387)

<div class="topic-metadata">

**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\
**Replies:** 2\
**Last updated:** [October 25, 2023, 3:37pm UTC](https://discuss.elastic.co/t/logstash-fails-with-ffi-not-available-message-when-starting-logstash-on-centos-7-9/345387 "2023-10-25T15:37:59Z")

</div>

1. Logstash version (e.g. bin/logstash --version) - 8.10.2 \*\*2. Logstash installation source \*\* - RPM \*\*3. How is Logstash being run \*\* - systemd JVM - tried both the bundled JVM (openjdk version "17.0.8" 2023-07-18) …

---

## [Legend hiding](https://discuss.elastic.co/t/legend-hiding/150025)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 1:13am UTC](https://discuss.elastic.co/t/legend-hiding/150025 "2018-09-27T01:13:21Z")

</div>

I'd like to hide the legen in Kibana chart, permanently, like to get rid of it so it can't be even un-collapsed. I know people are writing code to achieve such things. May I know where/how to start? Any tutorial how to d…

---

## [Can we hide a certain visualization based on a certain condition?](https://discuss.elastic.co/t/can-we-hide-a-certain-visualization-based-on-a-certain-condition/116701)

<div class="topic-metadata">

**Author:** [@sri\_harsha](https://discuss.elastic.co/u/sri_harsha)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 3:50pm UTC](https://discuss.elastic.co/t/can-we-hide-a-certain-visualization-based-on-a-certain-condition/116701 "2018-01-23T15:50:31Z")

</div>

I would like to have a single dashboard with mutiple visualizations how do I selectively display only a certain set of visualization while hiding the other. Example : Lets assume A,B,C,D are my 4 visualizations on this …

---

## [Logstash csv - \[\[main\]\<file\] DEBUG logstash.inputs.file - each: file grew:](https://discuss.elastic.co/t/logstash-csv-main-file-debug-logstash-inputs-file-each-file-grew/77898)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [March 9, 2017, 3:25pm UTC](https://discuss.elastic.co/t/logstash-csv-main-file-debug-logstash-inputs-file-each-file-grew/77898 "2017-03-09T15:25:37Z")

</div>

I'm trying to input csv file into elasticsearch, however before going there, I'd like to display data on screen first, yet when I attempt to run logstash, I'm getting an error and cannot figure out what I'm doing wrong..…

---

## [Basic licens Fails to Install](https://discuss.elastic.co/t/basic-licens-fails-to-install/46409)

<div class="topic-metadata">

**Author:** [@Pavithrananda\_Prabhu](https://discuss.elastic.co/u/Pavithrananda_Prabhu)\
**Replies:** 2\
**Last updated:** [April 12, 2016, 1:34pm UTC](https://discuss.elastic.co/t/basic-licens-fails-to-install/46409 "2016-04-12T13:34:01Z")

</div>

My Marvel trial license had expired and i have downloaded the Basic license to my system and trying to install it through the command curl -XPUT 'http://localhost:9200/\_license' -d pavithrananda-prabhu-520f8e3e-768a-4…

---

## [DNS Check Malware](https://discuss.elastic.co/t/dns-check-malware/238019)

<div class="topic-metadata">

**Author:** [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Replies:** 8\
**Last updated:** [July 6, 2020, 6:12am UTC](https://discuss.elastic.co/t/dns-check-malware/238019 "2020-07-06T06:12:46Z")

</div>

hi all, how to separate package dns request malware and bitcoin polling in SIEM ?

---

## [Run multiples pipelines fail](https://discuss.elastic.co/t/run-multiples-pipelines-fail/129101)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 8\
**Last updated:** [April 24, 2018, 7:33am UTC](https://discuss.elastic.co/t/run-multiples-pipelines-fail/129101 "2018-04-24T07:33:40Z")

</div>

Hello ! I try to run multiples pipelines at the same time but when I run logstash i've got this error : WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can spe…

---

## [Nested issue for Java api （in urgency）!](https://discuss.elastic.co/t/nested-issue-for-java-api-in-urgency/115443)

<div class="topic-metadata">

**Author:** [@koqiui163](https://discuss.elastic.co/u/koqiui163)\
**Replies:** 1\
**Last updated:** [January 14, 2018, 1:12pm UTC](https://discuss.elastic.co/t/nested-issue-for-java-api-in-urgency/115443 "2018-01-14T13:12:58Z")

</div>

ES version : 2.4.4 We need Nested Query in our business , so I write code as ES doc says, but failed. My Doc Mapping coded as the following : ------------------------ doc mapping -------------------------- { "proper…

---

## [Watcher Logging](https://discuss.elastic.co/t/watcher-logging/28047)

<div class="topic-metadata">

**Author:** [@deck](https://discuss.elastic.co/u/deck)\
**Replies:** 1\
**Last updated:** [August 26, 2015, 7:53am UTC](https://discuss.elastic.co/t/watcher-logging/28047 "2015-08-26T07:53:54Z")

</div>

I am currently working on a webhook into Nagios to update status. I believe the URL is getting correctly created however I cannot find how to turn on debugging in Watcher or where Watcher is logging anything to see. I …

---

## [How use disk-aware allocator setting?](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190)

<div class="topic-metadata">

**Author:** [@RichiCoder](https://discuss.elastic.co/u/RichiCoder)\
**Replies:** 4\
**Last updated:** [January 17, 2023, 12:26am UTC](https://discuss.elastic.co/t/how-use-disk-aware-allocator-setting/323190 "2023-01-17T00:26:06Z")

</div>

Howdy! I'd love to use the recently added support for disk usage in the desired balance allocator as I just upgraded to 8.6 in Elastic Cloud. However, it looks like by default cluster.routing.allocation.balance.disk\_usa…

---

## [Elastic 7.9.2 / kibana 7.9.2 pie chart, json filter pb refresh display](https://discuss.elastic.co/t/elastic-7-9-2-kibana-7-9-2-pie-chart-json-filter-pb-refresh-display/256865)

<div class="topic-metadata">

**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\
**Replies:** 4\
**Last updated:** [November 30, 2020, 11:19am UTC](https://discuss.elastic.co/t/elastic-7-9-2-kibana-7-9-2-pie-chart-json-filter-pb-refresh-display/256865 "2020-11-30T11:19:43Z")

</div>

Hello, i work on migration dashboard, vizualisation, queries, kibana 4.5.2 to 7.9.2 I created simple pie chart 7.9.2, with filter with kql, working fine, result is ok. i create new pie chart 7.9.2, same approach at …

---

## [\[Solved\] Discovery\_ec2 with ES 6.3.2 not finding other nodes](https://discuss.elastic.co/t/solved-discovery-ec2-with-es-6-3-2-not-finding-other-nodes/143949)

<div class="topic-metadata">

**Author:** [@kd5dbl](https://discuss.elastic.co/u/kd5dbl)\
**Replies:** 4\
**Last updated:** [August 13, 2018, 9:16pm UTC](https://discuss.elastic.co/t/solved-discovery-ec2-with-es-6-3-2-not-finding-other-nodes/143949 "2018-08-13T21:16:26Z")

</div>

I'm doing my first 6.x install and trying to get the new discovery\_ec2 plugin to work and it isn't finding any of my other nodes: I have 1 master node and 2 data only nodes. The master node comes up and votes itself ma…

---

## [Logstash 5.1.2 -\> old configuration cached?](https://discuss.elastic.co/t/logstash-5-1-2-old-configuration-cached/118475)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [February 5, 2018, 3:27pm UTC](https://discuss.elastic.co/t/logstash-5-1-2-old-configuration-cached/118475 "2018-02-05T15:27:16Z")

</div>

Hi, I have some weird issue with logstash 5.1.2 on RHEL 7. I rolled out a new logstash filter for two logfiles. There first I made an mistake which I deployed. There I casted a string to integer by accident. The string…

---

## [Is that possible to send logs from wso2 IoT server to elk stack?](https://discuss.elastic.co/t/is-that-possible-to-send-logs-from-wso2-iot-server-to-elk-stack/83821)

<div class="topic-metadata">

**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\
**Replies:** 4\
**Last updated:** [May 11, 2017, 4:50am UTC](https://discuss.elastic.co/t/is-that-possible-to-send-logs-from-wso2-iot-server-to-elk-stack/83821 "2017-05-11T04:50:07Z")

</div>

If it is possible kindly guide me the steps to send logs from wso2 IoT server to elk stack. Thanking you in advance.

---

## [How to enable routing in ES v2.0](https://discuss.elastic.co/t/how-to-enable-routing-in-es-v2-0/38868)

<div class="topic-metadata">

**Author:** [@aantony](https://discuss.elastic.co/u/aantony)\
**Replies:** 4\
**Last updated:** [January 12, 2016, 8:43am UTC](https://discuss.elastic.co/t/how-to-enable-routing-in-es-v2-0/38868 "2016-01-12T08:43:50Z")

</div>

Currently we are using ElasticSearch v2.0 and we are making use of this to read our application log files and create indexes using ElasticSearch. We have read of using Routing to enhance performance. We were looking at …

---

## [Change colour of Metric Visualization for Percentile ranks aggregation](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 3\
**Last updated:** [June 30, 2021, 2:48pm UTC](https://discuss.elastic.co/t/change-colour-of-metric-visualization-for-percentile-ranks-aggregation/277454 "2021-06-30T14:48:57Z")

</div>

Hi Kibana: 7.9.3 We are using metric visualization to get percentile ranks. Based on the percentage, I am trying to change colour of the background from Green to Red. But the color remains the same for any Ranges I giv…

---

## [KIbana - How do I point to remote instance of Elasticsearch](https://discuss.elastic.co/t/kibana-how-do-i-point-to-remote-instance-of-elasticsearch/274550)

<div class="topic-metadata">

**Author:** [@debasisc](https://discuss.elastic.co/u/debasisc)\
**Replies:** 3\
**Last updated:** [June 1, 2021, 12:36am UTC](https://discuss.elastic.co/t/kibana-how-do-i-point-to-remote-instance-of-elasticsearch/274550 "2021-06-01T00:36:42Z")

</div>

Locally I have installed Elasticsearch and KIbana (version 7.8, OS = Windows 10). Using KIbana console and I can type in commands in left-hand-side, click "arrow" to execute command and see results in right-hand side. …

---

## [Elasticsearch Frequently Failed and Slows Down After Upgrade to 6.4](https://discuss.elastic.co/t/elasticsearch-frequently-failed-and-slows-down-after-upgrade-to-6-4/148435)

<div class="topic-metadata">

**Author:** [@fiq](https://discuss.elastic.co/u/fiq)\
**Replies:** 3\
**Last updated:** [September 13, 2018, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-frequently-failed-and-slows-down-after-upgrade-to-6-4/148435 "2018-09-13T11:27:57Z")

</div>

Hi, I have this problem where elasticsearch is frequently failed and shard allocation after restart is very slow after upgrading to 6.4 from 6.2. \[2018-09-13T17:26:23,546\]\[WARN \]\[o.e.i.c.IndicesClusterStateService\] \[EL…

---

## [Logstash windows installation JVM error](https://discuss.elastic.co/t/logstash-windows-installation-jvm-error/107667)

<div class="topic-metadata">

**Author:** [@Gobinda\_Nandi](https://discuss.elastic.co/u/Gobinda_Nandi)\
**Replies:** 3\
**Last updated:** [November 15, 2017, 6:19am UTC](https://discuss.elastic.co/t/logstash-windows-installation-jvm-error/107667 "2017-11-15T06:19:31Z")

</div>

Logstash 6.0.0 aborts with “warning: ignoring JAVA\_OPTS=-Xms256m -Xmx512m; pass JVM parameters via LS\_JAVA\_OPTS”

---

## [Gradle configuration in Java Rest client 5.0](https://discuss.elastic.co/t/gradle-configuration-in-java-rest-client-5-0/68408)

<div class="topic-metadata">

**Author:** [@kumarroopesh](https://discuss.elastic.co/u/kumarroopesh)\
**Replies:** 3\
**Last updated:** [December 9, 2016, 2:50pm UTC](https://discuss.elastic.co/t/gradle-configuration-in-java-rest-client-5-0/68408 "2016-12-09T14:50:51Z")

</div>

Hi, I am new to Gradle. I want to use java rest client using gradle configuration. So I created a gradle project and defined dependency in build.gradle as follows. dependencies { compile 'org.elasticsearch.client:rest…

---

## [Multiple jdbc input configs error](https://discuss.elastic.co/t/multiple-jdbc-input-configs-error/32688)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 3\
**Last updated:** [October 21, 2015, 4:03pm UTC](https://discuss.elastic.co/t/multiple-jdbc-input-configs-error/32688 "2015-10-21T16:03:03Z")

</div>

I have two Logstash config files that run independently fine but not when run with -f as their directory. They're almost identical in that they use jdbc input plugin just with different connection strings and system nam…

---

## [Is there a way to "update" ES records using Spark?](https://discuss.elastic.co/t/is-there-a-way-to-update-es-records-using-spark/20021)

<div class="topic-metadata">

**Author:** [@Preeti\_Raj\_Buchhada](https://discuss.elastic.co/u/Preeti_Raj_Buchhada)\
**Replies:** 3\
**Last updated:** [October 14, 2014, 4:44am UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-es-records-using-spark/20021 "2014-10-14T04:44:46Z")

</div>

I am using ES version 1.3.2, and Spark 1.1.0. I can successfully read and write records from/to ES using newAPIHadoopRDD() and saveAsNewAPIHadoopDataset(). However, I am struggling to find a way to update records. Ev…

---

## [ES Cross Cluster Replication Issue](https://discuss.elastic.co/t/es-cross-cluster-replication-issue/206950)

<div class="topic-metadata">

**Author:** [@sidsniper](https://discuss.elastic.co/u/sidsniper)\
**Replies:** 5\
**Last updated:** [December 10, 2019, 2:17am UTC](https://discuss.elastic.co/t/es-cross-cluster-replication-issue/206950 "2019-12-10T02:17:00Z")

</div>

Hi, I am getting below error while trying to setup ccr: "fatal\_exception" : { "type" : "es\_rejected\_execution\_exception", "reason" : "rejected execution of org.elasticsearch.common.util.concurrent.TimedRunnable@1e0fb…

---

## [CRIT Exiting: Error in initing prospector: prospector outlet closed](https://discuss.elastic.co/t/crit-exiting-error-in-initing-prospector-prospector-outlet-closed/121992)

<div class="topic-metadata">

**Author:** [@bismayam](https://discuss.elastic.co/u/bismayam)\
**Replies:** 5\
**Last updated:** [March 12, 2018, 12:26pm UTC](https://discuss.elastic.co/t/crit-exiting-error-in-initing-prospector-prospector-outlet-closed/121992 "2018-03-12T12:26:13Z")

</div>

Hi, We have issue while starting filebeat. It was not sending data to logstash after working successfully for around 30 days. We checked that the size of registry file is 261MB. We are parsing around 1000 log files in …

---

## [Change cluster name and storage location folder](https://discuss.elastic.co/t/change-cluster-name-and-storage-location-folder/112171)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [December 18, 2017, 8:33am UTC](https://discuss.elastic.co/t/change-cluster-name-and-storage-location-folder/112171 "2017-12-18T08:33:45Z")

</div>

Hi all, currently we have elastic stack's major version number in following fields: cluster.name path.data Is it save to rename them, rename the folders or do I need some reindexing or other stuff? Currently we are r…

[Previous page](https://discuss.elastic.co/top.md?page=1236&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1238&per_page=50&period=all)
