# Top

**URL:** https://discuss.elastic.co/top.md?page=1244&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1245

---

## [Logstash-plugin.bat fails to find bundled Java in 7.16.1](https://discuss.elastic.co/t/logstash-plugin-bat-fails-to-find-bundled-java-in-7-16-1/295358)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 3\
**Last updated:** [January 26, 2022, 9:54am UTC](https://discuss.elastic.co/t/logstash-plugin-bat-fails-to-find-bundled-java-in-7-16-1/295358 "2022-01-26T09:54:07Z")

</div>

Hi All, I upgraded to 7.16.1 a little while back and noticed today that when I try to list the installed plugins I get the following error: C:\\APPS\\ELASTIC\\logstash-7.16.1\\bin\>logstash-plugin.bat list "Using bundled JD…

---

## [UnsupportedOperationException causes snapshots to fail](https://discuss.elastic.co/t/unsupportedoperationexception-causes-snapshots-to-fail/249181)

<div class="topic-metadata">

**Author:** [@OliviaTrewin](https://discuss.elastic.co/u/OliviaTrewin)\
**Replies:** 3\
**Last updated:** [September 22, 2020, 2:25pm UTC](https://discuss.elastic.co/t/unsupportedoperationexception-causes-snapshots-to-fail/249181 "2020-09-22T14:25:58Z")

</div>

We have an Elasticsearch 7.9.1 cluster that suddenly started to fail snapshotting with a strange exception. Here's the details for one of the machines in the cluster: $ uname -a Linux \[REDACTED\] 4.4.0-1095-aws #106-Ubun…

---

## [Search\_as\_you\_type usage](https://discuss.elastic.co/t/search-as-you-type-usage/231506)

<div class="topic-metadata">

**Author:** [@CSharpBender](https://discuss.elastic.co/u/CSharpBender)\
**Replies:** 3\
**Last updated:** [May 9, 2020, 11:40am UTC](https://discuss.elastic.co/t/search-as-you-type-usage/231506 "2020-05-09T11:40:36Z")

</div>

Hello, I'm trying to make a search that orders the results by: -exact match -starts with -phrase match -exact words -fuzzy I'm using Elasticsearch 7.6.1 and after trying to make my own query I noticed that there i…

---

## [SNMPTRAP input behind F5 load balancer - Service Monitor generating lots of errors in log](https://discuss.elastic.co/t/snmptrap-input-behind-f5-load-balancer-service-monitor-generating-lots-of-errors-in-log/210207)

<div class="topic-metadata">

**Author:** [@marc1](https://discuss.elastic.co/u/marc1)\
**Replies:** 3\
**Last updated:** [December 2, 2019, 4:57pm UTC](https://discuss.elastic.co/t/snmptrap-input-behind-f5-load-balancer-service-monitor-generating-lots-of-errors-in-log/210207 "2019-12-02T16:57:48Z")

</div>

Hello, We have a cluster of logstash instances behind an F5 load balancer. Part of the F5 implementation includes a health check that is sent every couple of seconds to make sure the UDP port on the logstash is still up…

---

## [Logstash cannot Index to Elasticsearch for http\_poller](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch-for-http-poller/167931)

<div class="topic-metadata">

**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 10:39pm UTC](https://discuss.elastic.co/t/logstash-cannot-index-to-elasticsearch-for-http-poller/167931 "2019-02-11T22:39:52Z")

</div>

I am running ELK 6.5.4 and trying to use the http\_poller to poll data into ELK but my logstash is unable to index to Elasticsearch and throws error message \]logstash.outputs.elasticsearch\] Could not index event to Elasti…

---

## [Convert Daily indices to weekly indexes](https://discuss.elastic.co/t/convert-daily-indices-to-weekly-indexes/155438)

<div class="topic-metadata">

**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\
**Replies:** 3\
**Last updated:** [November 24, 2018, 3:10am UTC](https://discuss.elastic.co/t/convert-daily-indices-to-weekly-indexes/155438 "2018-11-24T03:10:10Z")

</div>

Hi, I see existing example for converting to monthly. But, I am looking for an example to convert daily indices to weekly indices. Thanks in advance. Maddy.

---

## [Logstash http output plugin ignore ssl verification](https://discuss.elastic.co/t/logstash-http-output-plugin-ignore-ssl-verification/110888)

<div class="topic-metadata">

**Author:** [@Ram\_Sharan\_Mittal](https://discuss.elastic.co/u/Ram_Sharan_Mittal)\
**Replies:** 0\
**Last updated:** [December 8, 2017, 7:38pm UTC](https://discuss.elastic.co/t/logstash-http-output-plugin-ignore-ssl-verification/110888 "2017-12-08T19:38:52Z")

</div>

logstash http plugin (https://github.com/logstash-plugins/logstash-output-http/blob/master/lib/logstash/outputs/http.rb) have been pulled and modifed for our usecase but call need to be ssl verification ignore . at requ…

---

## [How to list modules](https://discuss.elastic.co/t/how-to-list-modules/105727)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [October 30, 2017, 9:52am UTC](https://discuss.elastic.co/t/how-to-list-modules/105727 "2017-10-30T09:52:19Z")

</div>

Hi, I'm looking at the documentation here: https://www.elastic.co/guide/en/beats/metricbeat/master/configuration-metricbeat.html#enable-modules-d-configs When I try to list modules as outlined I get this error: metri…

---

## [Few messages go unparsed from Logstash into Elastic without any failure](https://discuss.elastic.co/t/few-messages-go-unparsed-from-logstash-into-elastic-without-any-failure/80921)

<div class="topic-metadata">

**Author:** [@aroraj08](https://discuss.elastic.co/u/aroraj08)\
**Replies:** 3\
**Last updated:** [April 3, 2017, 3:45pm UTC](https://discuss.elastic.co/t/few-messages-go-unparsed-from-logstash-into-elastic-without-any-failure/80921 "2017-04-03T15:45:24Z")

</div>

I have deployed Filebeat -\> Logstash -\> ElasticSearch -\> Kibana stack for log monitoring in my testing environment. I have two GROK patterns specified in the Logstash configuration. The problem is that few of the message…

---

## [Limit scroll result set by size in bytes instead of documents?](https://discuss.elastic.co/t/limit-scroll-result-set-by-size-in-bytes-instead-of-documents/14604)

<div class="topic-metadata">

**Author:** [@John\_Freeman](https://discuss.elastic.co/u/John_Freeman)\
**Replies:** 3\
**Last updated:** [November 26, 2013, 11:43pm UTC](https://discuss.elastic.co/t/limit-scroll-result-set-by-size-in-bytes-instead-of-documents/14604 "2013-11-26T23:43:37Z")

</div>

I'm trying to reindex documents of widely variable size (from a few bytes to a few outliers over 200 MB). I want to keep my scroll size as high as possible to maximize throughput, but I need to keep the returned resu…

---

## [Does count API support searching by multiple TERMs and return multiple COUNTs?](https://discuss.elastic.co/t/does-count-api-support-searching-by-multiple-terms-and-return-multiple-counts/10183)

<div class="topic-metadata">

**Author:** [@Senussi](https://discuss.elastic.co/u/Senussi)\
**Replies:** 3\
**Last updated:** [December 28, 2012, 11:42pm UTC](https://discuss.elastic.co/t/does-count-api-support-searching-by-multiple-terms-and-return-multiple-counts/10183 "2012-12-28T23:42:10Z")

</div>

a sample usage of count API : curl -XGET 'http://localhost:9200/\_count' -d '{"term" : { "lang": "en", "country": "Egypt" }}' it'll return count of pages based on that term ---\> {"count":104628,"\_shards":{"total":10…

---

## [Creating an ILM policy using python](https://discuss.elastic.co/t/creating-an-ilm-policy-using-python/285340)

<div class="topic-metadata">

**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\
**Replies:** 2\
**Last updated:** [September 28, 2021, 11:53am UTC](https://discuss.elastic.co/t/creating-an-ilm-policy-using-python/285340 "2021-09-28T11:53:03Z")

</div>

I have been trying to create an ILM policy using the python client. But I get an error when running the python script. This is my code: from datetime import datetime from elasticsearch import Elasticsearch from elastic…

---

## [Remove spaces from field names after JSON parsing from filebeat](https://discuss.elastic.co/t/remove-spaces-from-field-names-after-json-parsing-from-filebeat/236806)

<div class="topic-metadata">

**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\
**Replies:** 2\
**Last updated:** [June 14, 2020, 11:14pm UTC](https://discuss.elastic.co/t/remove-spaces-from-field-names-after-json-parsing-from-filebeat/236806 "2020-06-14T23:14:41Z")

</div>

Sample data { "time": "2020-06-11 01:59:16.9760 -05:00", "level": "Info", "threadId": "164", "Message": "GetContactDataForCustomAutoAssignWorker", "Message": "Completed", "Call Tracker Id": "7e6a1602-6a89-4933-9329-d173…

---

## [Replica shards bigger than primary on some indexes](https://discuss.elastic.co/t/replica-shards-bigger-than-primary-on-some-indexes/52114)

<div class="topic-metadata">

**Author:** [@sipazzo](https://discuss.elastic.co/u/sipazzo)\
**Replies:** 2\
**Last updated:** [June 8, 2016, 1:22am UTC](https://discuss.elastic.co/t/replica-shards-bigger-than-primary-on-some-indexes/52114 "2016-06-08T01:22:10Z")

</div>

We are seeing an issue where our replica shards on some (but not all) indexes are substantially larger than their primary counterparts. For instance: index1 4 r STARTED 106884 1.2gb 10.10.1.98 …

---

## [Http input plugin, url with param from field](https://discuss.elastic.co/t/http-input-plugin-url-with-param-from-field/280365)

<div class="topic-metadata">

**Author:** [@cibernicola](https://discuss.elastic.co/u/cibernicola)\
**Replies:** 6\
**Last updated:** [August 3, 2021, 10:32pm UTC](https://discuss.elastic.co/t/http-input-plugin-url-with-param-from-field/280365 "2021-08-03T22:32:25Z")

</div>

I have a standard logstash config, where I store several fields form a log. With one field I need to "ask something" to an external API with an specific url pattern, which is: staticString+variableField+staticString S…

---

## [What about subscriptions on ELK?](https://discuss.elastic.co/t/what-about-subscriptions-on-elk/243896)

<div class="topic-metadata">

**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\
**Replies:** 6\
**Last updated:** [August 5, 2020, 5:01pm UTC](https://discuss.elastic.co/t/what-about-subscriptions-on-elk/243896 "2020-08-05T17:01:38Z")

</div>

Hi everyone, My questions is, what about subscription gold or platino and the cost of hardware resource data? I only pay for subscription? or Subscription and hardware resource data consuptions?

---

## [Difference between multiline codec and filter?](https://discuss.elastic.co/t/difference-between-multiline-codec-and-filter/37771)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 1\
**Last updated:** [December 22, 2015, 6:03pm UTC](https://discuss.elastic.co/t/difference-between-multiline-codec-and-filter/37771 "2015-12-22T18:03:19Z")

</div>

I'm using the multiline codec in the input section and finding some issues. I just learned there is a multiline filter as well. How does it differ? In particular I have to concatenate discrete log files together as they …

---

## [Are There Any Kibana Plugins?](https://discuss.elastic.co/t/are-there-any-kibana-plugins/28562)

<div class="topic-metadata">

**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\
**Replies:** 1\
**Last updated:** [September 3, 2015, 12:24am UTC](https://discuss.elastic.co/t/are-there-any-kibana-plugins/28562 "2015-09-03T00:24:59Z")

</div>

I understand that there are plugins for elasticsearch. Are there any plugins for Kibana? If not, are there plans for Kibana plugins? Where do we go to look at all the available Kibana Plugins?

---

## [How to restore index data if I remove all my master nodes accidentally!](https://discuss.elastic.co/t/how-to-restore-index-data-if-i-remove-all-my-master-nodes-accidentally/275109)

<div class="topic-metadata">

**Author:** [@Hiren\_Loong](https://discuss.elastic.co/u/Hiren_Loong)\
**Replies:** 8\
**Last updated:** [June 22, 2021, 3:42am UTC](https://discuss.elastic.co/t/how-to-restore-index-data-if-i-remove-all-my-master-nodes-accidentally/275109 "2021-06-22T03:42:15Z")

</div>

There are 3 master nodes and 6 data nodes in my ES Cluster. ES version is 6.7.x. I delete virtual machines accidentally, so 3 master nodes are disappeared forever! But my 6 data nodes are still on. Is any possible to …

---

## [Delete too many indexes at once leads the cluster to red](https://discuss.elastic.co/t/delete-too-many-indexes-at-once-leads-the-cluster-to-red/262849)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 8\
**Last updated:** [February 4, 2021, 7:55am UTC](https://discuss.elastic.co/t/delete-too-many-indexes-at-once-leads-the-cluster-to-red/262849 "2021-02-04T07:55:33Z")

</div>

I work on a ES 5.6 "on premises", and we work to switch to ES 7.x. Before that, we aim to reduce our over-sharding issue : we generate too much index (every day when every month is ok) and espacially, with 5 shards (def…

---

## [High CPU usage after GC?](https://discuss.elastic.co/t/high-cpu-usage-after-gc/122429)

<div class="topic-metadata">

**Author:** [@uLan](https://discuss.elastic.co/u/uLan)\
**Replies:** 8\
**Last updated:** [March 9, 2018, 3:39am UTC](https://discuss.elastic.co/t/high-cpu-usage-after-gc/122429 "2018-03-09T03:39:14Z")

</div>

I got alerted that our CPU usage is high and according to some metrics elasticsearch is consuming cpu. This was the last log of elasticsearch, but it's still working fine though \[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[iJX…

---

## [Query fails via Java client, successful with elasticsearch-head](https://discuss.elastic.co/t/query-fails-via-java-client-successful-with-elasticsearch-head/5890)

<div class="topic-metadata">

**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\
**Replies:** 8\
**Last updated:** [November 22, 2011, 4:34pm UTC](https://discuss.elastic.co/t/query-fails-via-java-client-successful-with-elasticsearch-head/5890 "2011-11-22T16:34:56Z")

</div>

Using ES 0.17.9, the following query is successful if I execute using the elasticsearch-head web ui, but fails when using the Java client: https://gist.github.com/1371153 I get the following ShardSearchFailure: …

---

## [Multiline filter/Codec question](https://discuss.elastic.co/t/multiline-filter-codec-question/81549)

<div class="topic-metadata">

**Author:** [@maxw2016](https://discuss.elastic.co/u/maxw2016)\
**Replies:** 5\
**Last updated:** [April 10, 2017, 5:26am UTC](https://discuss.elastic.co/t/multiline-filter-codec-question/81549 "2017-04-10T05:26:27Z")

</div>

Hello, I'm working on exim email logs and I'm stuck with this codec. here is an example from the log: 2017-04-03 02:19:58 H=(localhost) \[117.0.54.236\] F=test@earatt.net rejected RCPT smityrd@example.com: Rejected messa…

---

## [Logstash Apache and Spring log files issue](https://discuss.elastic.co/t/logstash-apache-and-spring-log-files-issue/251717)

<div class="topic-metadata">

**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\
**Replies:** 4\
**Last updated:** [October 12, 2020, 2:09pm UTC](https://discuss.elastic.co/t/logstash-apache-and-spring-log-files-issue/251717 "2020-10-12T14:09:25Z")

</div>

Our task was Read both Apache and Springboot log file and add a tag name as given below, to differentiate the logs. Apache logfile -\> apacheLog spring-boot logfile -\> javaLog Print the standard output and write it…

---

## [Kibana generate access\_token without user credentials](https://discuss.elastic.co/t/kibana-generate-access-token-without-user-credentials/250750)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 4\
**Last updated:** [October 7, 2020, 4:23am UTC](https://discuss.elastic.co/t/kibana-generate-access-token-without-user-credentials/250750 "2020-10-07T04:23:30Z")

</div>

I am looking for a way to use token based authentication for Kibana to give end-users an ability to use Kibana in an embedded iframe. Here is the flow that has worked for me: 1- use a system-level user with sufficient p…

---

## [ELK-log full with errors](https://discuss.elastic.co/t/elk-log-full-with-errors/247017)

<div class="topic-metadata">

**Author:** [@NogNeetMachinaal](https://discuss.elastic.co/u/NogNeetMachinaal)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 4:43pm UTC](https://discuss.elastic.co/t/elk-log-full-with-errors/247017 "2020-09-02T16:43:40Z")

</div>

Team - The log of ElasticSearch is full with errors (see below). Most likely, because of this the system is not working as expected. Any idea what is happening and how to fix this? It is version 7.9 for Elastic and Ki…

---

## [Uncaught TypeError: Return value of Elasticsearch\\ClientBuilder::buildLoggers() must be an instance of Elasticsearch\\void, none returned](https://discuss.elastic.co/t/uncaught-typeerror-return-value-of-elasticsearch-clientbuilder-buildloggers-must-be-an-instance-of-elasticsearch-void-none-returned/207847)

<div class="topic-metadata">

**Author:** [@azo](https://discuss.elastic.co/u/azo)\
**Replies:** 4\
**Last updated:** [November 26, 2019, 12:38pm UTC](https://discuss.elastic.co/t/uncaught-typeerror-return-value-of-elasticsearch-clientbuilder-buildloggers-must-be-an-instance-of-elasticsearch-void-none-returned/207847 "2019-11-26T12:38:55Z")

</div>

When i try to initialize client i get this error: Fatal error : Uncaught TypeError: Return value of Elasticsearch\\ClientBuilder::buildLoggers() must be an instance of Elasticsearch\\void, none returned in C:\\inetpub\\wwwr…

---

## [ElasticSearch doesn't start after upgrade from 2.3.1 to 5.6.4](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-upgrade-from-2-3-1-to-5-6-4/107371)

<div class="topic-metadata">

**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-upgrade-from-2-3-1-to-5-6-4/107371 "2017-11-13T13:59:33Z")

</div>

Hello, I was running on elasticsearch 2.3.1, but I had to upgrade to 5.6.4 (because of kibana), but Elasticsearch won't start anymore. This is log from Elasticsearch: java.lang.IllegalStateException: The index \[\[cycl…

---

## [Visualization(goal)のPercentage modeを使った場合の小数点以下桁数について](https://discuss.elastic.co/t/visualization-goal-percentage-mode/203786)

<div class="topic-metadata">

**Author:** [@saku](https://discuss.elastic.co/u/saku)\
**Replies:** 2\
**Last updated:** [October 21, 2019, 6:11am UTC](https://discuss.elastic.co/t/visualization-goal-percentage-mode/203786 "2019-10-21T06:11:51Z")

</div>

Visualization(goal)のPercentage modeを使った場合の小数点以下桁数を1桁などにすることはできるのでしょうか？ 環境 ElasticSearch : 7.4.0 Kibana : 7.4.0

---

## [Logstash crashes with "comparison of String with 0 failed"](https://discuss.elastic.co/t/logstash-crashes-with-comparison-of-string-with-0-failed/176516)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 2\
**Last updated:** [April 22, 2019, 8:14pm UTC](https://discuss.elastic.co/t/logstash-crashes-with-comparison-of-string-with-0-failed/176516 "2019-04-22T20:14:47Z")

</div>

OK, previous problem solved. New problem found. I have the following in my conf file: if \[VirtualHost\] =~ /^\\d+\\.\\d+\\.\\d+\\.\\d+$/ { mutate { add\_tag =\> \["NakedIP"\] …

---

## [Kibana index settings and dashboards are always lost when updating elk container](https://discuss.elastic.co/t/kibana-index-settings-and-dashboards-are-always-lost-when-updating-elk-container/169011)

<div class="topic-metadata">

**Author:** [@hackman61](https://discuss.elastic.co/u/hackman61)\
**Replies:** 2\
**Last updated:** [February 19, 2019, 1:16pm UTC](https://discuss.elastic.co/t/kibana-index-settings-and-dashboards-are-always-lost-when-updating-elk-container/169011 "2019-02-19T13:16:17Z")

</div>

Hello, I have a docker container with elk deployed, with mount binding for /var/lib/elasticsearch , and when I recreate the containe, elasticsearch data are not lost ( I have correcly my logs), but everything related to…

---

## [Filebeat to collect the logs from kubernetes cluster running on AWS](https://discuss.elastic.co/t/filebeat-to-collect-the-logs-from-kubernetes-cluster-running-on-aws/126025)

<div class="topic-metadata">

**Author:** [@TMR](https://discuss.elastic.co/u/TMR)\
**Replies:** 2\
**Last updated:** [March 29, 2018, 9:28am UTC](https://discuss.elastic.co/t/filebeat-to-collect-the-logs-from-kubernetes-cluster-running-on-aws/126025 "2018-03-29T09:28:11Z")

</div>

Hi there, My elasticsearch and kibana instance are running on on-prem and the k8s cluster where i would like to collect the logs from is running on AWS. I cannot have filebeat running inside the kubernetes cluster as p…

---

## [A few questions around the can\_match feature](https://discuss.elastic.co/t/a-few-questions-around-the-can-match-feature/297713)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 2\
**Last updated:** [March 17, 2022, 2:13pm UTC](https://discuss.elastic.co/t/a-few-questions-around-the-can-match-feature/297713 "2022-03-17T14:13:32Z")

</div>

Hi, @jpountz and @ruflin. I working on a migration path to migrate our on-prem environment from xxxbeat-\* type indices to datastreams based on the elastic Agent. This will require updating/recreating all sorts of objects…

---

## [I want to write in another index with project monitor (synthetic monitor) It's possible?](https://discuss.elastic.co/t/i-want-to-write-in-another-index-with-project-monitor-synthetic-monitor-its-possible/311232)

<div class="topic-metadata">

**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\
**Replies:** 7\
**Last updated:** [August 16, 2022, 10:09pm UTC](https://discuss.elastic.co/t/i-want-to-write-in-another-index-with-project-monitor-synthetic-monitor-its-possible/311232 "2022-08-16T22:09:50Z")

</div>

I want to write in another index with project monitor (synthetic monitor) It's possible?, I can to change the index synthetic-\* or write in other datastream?

---

## [Can RUM be used with mobile apps](https://discuss.elastic.co/t/can-rum-be-used-with-mobile-apps/300801)

<div class="topic-metadata">

**Author:** [@hamdyahmed1984](https://discuss.elastic.co/u/hamdyahmed1984)\
**Replies:** 1\
**Last updated:** [March 30, 2022, 9:18am UTC](https://discuss.elastic.co/t/can-rum-be-used-with-mobile-apps/300801 "2022-03-30T09:18:08Z")

</div>

Can RUM be used with mobile apps (android and IOS)? If yes, how and if no, what is the alternative?

---

## [Upload Large Log File](https://discuss.elastic.co/t/upload-large-log-file/297037)

<div class="topic-metadata">

**Author:** [@kmahyyg](https://discuss.elastic.co/u/kmahyyg)\
**Replies:** 1\
**Last updated:** [February 12, 2022, 1:44pm UTC](https://discuss.elastic.co/t/upload-large-log-file/297037 "2022-02-12T13:44:19Z")

</div>

Note: I've already Google-ed before I ask. I see this issue \[ML\] Uploading a file over 100MB via Kibana · Issue #61735 · elastic/kibana · GitHub which allowed to upload less than 1G files. As a dev, I know it would be …

---

## [Trouble with sending logs from filebeat to elasticsearch](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761)

<div class="topic-metadata">

**Author:** [@Butovoboy](https://discuss.elastic.co/u/Butovoboy)\
**Replies:** 7\
**Last updated:** [November 22, 2021, 10:24pm UTC](https://discuss.elastic.co/t/trouble-with-sending-logs-from-filebeat-to-elasticsearch/289761 "2021-11-22T22:24:14Z")

</div>

Hello, everyone! I have an Elasticsearch with kibana started in docker. And I also have filebeat running running on the server and sending logs to Elasticsearch. So, I have there is no logs in kibana, but all dashboards…

---

## [Watcher email configuration](https://discuss.elastic.co/t/watcher-email-configuration/208356)

<div class="topic-metadata">

**Author:** [@faiz](https://discuss.elastic.co/u/faiz)\
**Replies:** 1\
**Last updated:** [November 21, 2019, 12:08pm UTC](https://discuss.elastic.co/t/watcher-email-configuration/208356 "2019-11-21T12:08:55Z")

</div>

Hi, I need to enable the watcher email alert, I have added below setting in the elasticsearch.yml: xpack.watcher.enabled: true xpack.notification.email.account: \*\* gmail\_account:\*\* \*\* profile: gmail\*\* \*\* …

---

## [Sample Dashboard Errors?](https://discuss.elastic.co/t/sample-dashboard-errors/138003)

<div class="topic-metadata">

**Author:** [@gavin.mcmenemy](https://discuss.elastic.co/u/gavin.mcmenemy)\
**Replies:** 7\
**Last updated:** [July 2, 2018, 3:56pm UTC](https://discuss.elastic.co/t/sample-dashboard-errors/138003 "2018-07-02T15:56:28Z")

</div>

Hi Everyone, I'm building a proof of concept using ELK + Winlogbeat to provide us with tools analysing data from Windows Event logs. In this environment I have 2 servers: log server + ELK server It looks like everythi…

---

## [Limit length in visualization](https://discuss.elastic.co/t/limit-length-in-visualization/113909)

<div class="topic-metadata">

**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\
**Replies:** 1\
**Last updated:** [January 3, 2018, 6:30pm UTC](https://discuss.elastic.co/t/limit-length-in-visualization/113909 "2018-01-03T18:30:28Z")

</div>

Hi all, First happy new year! One question. Can I limit the length of a string in table data output? Column A is a string term, column B is count of events. As there are some terms which are slightly different, I'd li…

---

## [Beats on Power AIX?](https://discuss.elastic.co/t/beats-on-power-aix/61218)

<div class="topic-metadata">

**Author:** [@AurelienB](https://discuss.elastic.co/u/AurelienB)\
**Replies:** 1\
**Last updated:** [September 22, 2016, 11:07am UTC](https://discuss.elastic.co/t/beats-on-power-aix/61218 "2016-09-22T11:07:47Z")

</div>

Hello, I'm wondering if an AIX Power versions of Beats (especially MetricBeats) is planned, and if not, how difficult it would be to compile it on an AIX Power version. This would make sense to connect as many system typ…

---

## [Open Elasticsearch lucene files with Luke](https://discuss.elastic.co/t/open-elasticsearch-lucene-files-with-luke/10519)

<div class="topic-metadata">

**Author:** [@Ophir\_Michaeli](https://discuss.elastic.co/u/Ophir_Michaeli)\
**Replies:** 7\
**Last updated:** [February 4, 2013, 10:28am UTC](https://discuss.elastic.co/t/open-elasticsearch-lucene-files-with-luke/10519 "2013-02-04T10:28:58Z")

</div>

Hi, Tried to open elasticsearch lucene files (elasticsearch-0.20.2\\elasticsearch-0.20.2\\data\\elasticsearch\\nodes\\0\\indices\\musicstore\\4\\index) with Luke, and I get the message "unknown format version: -11"…

---

## [Why i am not getting any score in SearchRequestBuilder after sorting?](https://discuss.elastic.co/t/why-i-am-not-getting-any-score-in-searchrequestbuilder-after-sorting/7043)

<div class="topic-metadata">

**Author:** [@rohitkondekar](https://discuss.elastic.co/u/rohitkondekar)\
**Replies:** 1\
**Last updated:** [March 20, 2012, 8:27pm UTC](https://discuss.elastic.co/t/why-i-am-not-getting-any-score-in-searchrequestbuilder-after-sorting/7043 "2012-03-20T20:27:59Z")

</div>

Hello everyone, I just got my hands on elasticsearch yesterday, because we had a requirement of evaluating complex mathematical queries for comparison like "evaluating eculadian distances" rather than simple text ma…

---

## [Aggergation with condition](https://discuss.elastic.co/t/aggergation-with-condition/199481)

<div class="topic-metadata">

**Author:** [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\
**Replies:** 3\
**Last updated:** [September 14, 2019, 9:57pm UTC](https://discuss.elastic.co/t/aggergation-with-condition/199481 "2019-09-14T21:57:28Z")

</div>

Hi, Assume that i have personal details (names / adderess / phones / age and etc) of city people I need to build Table Visualization in Kibana 7 based on those details. The visualization should display the following…

---

## [Struggling with Tag Cloud Visualization](https://discuss.elastic.co/t/struggling-with-tag-cloud-visualization/107511)

<div class="topic-metadata">

**Author:** [@psypher246](https://discuss.elastic.co/u/psypher246)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 12:09pm UTC](https://discuss.elastic.co/t/struggling-with-tag-cloud-visualization/107511 "2017-12-05T12:09:09Z")

</div>

Hello, I'm very new to the Elastic stack and trying to use the tag cloud visualization feature in the following way. My data is telemetry from IoT devices in the following form: {"Item1": 99, "Item2": 55.30, "Item3": …

---

## [Performance tune elastic search](https://discuss.elastic.co/t/performance-tune-elastic-search/88497)

<div class="topic-metadata">

**Author:** [@shammi](https://discuss.elastic.co/u/shammi)\
**Replies:** 3\
**Last updated:** [June 8, 2017, 9:24pm UTC](https://discuss.elastic.co/t/performance-tune-elastic-search/88497 "2017-06-08T21:24:35Z")

</div>

Hi, I am having issue in elastic serach: Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[\],"type":"reduce\_search\_phase\_exception","reason":"\[reduce\] ","phase":"fetch","grouped":true,"failed\_shards":\[\],"…

---

## [Logstash S3 output - NotImplementedError fstat error at startup](https://discuss.elastic.co/t/logstash-s3-output-notimplementederror-fstat-error-at-startup/83167)

<div class="topic-metadata">

**Author:** [@Domenico\_Riccio](https://discuss.elastic.co/u/Domenico_Riccio)\
**Replies:** 3\
**Last updated:** [May 10, 2017, 12:52pm UTC](https://discuss.elastic.co/t/logstash-s3-output-notimplementederror-fstat-error-at-startup/83167 "2017-05-10T12:52:36Z")

</div>

Hello, I'm getting this error when trying to start Logstash with S3 output, could you please help me? NotImplementedError: fstat unimplemented unsupported or native support failed to load size at org/jr…

---

## [Metricbeat: Apache 2.4.23 field not found errors](https://discuss.elastic.co/t/metricbeat-apache-2-4-23-field-not-found-errors/67518)

<div class="topic-metadata">

**Author:** [@profiler](https://discuss.elastic.co/u/profiler)\
**Replies:** 3\
**Last updated:** [November 29, 2016, 5:06pm UTC](https://discuss.elastic.co/t/metricbeat-apache-2-4-23-field-not-found-errors/67518 "2016-11-29T17:06:26Z")

</div>

Hi there... I'm getting: metricbeat\[6664\]: schema.go:36: Error on field 'total': Key ConnsTotal not found metricbeat\[6664\]: schema.go:36: Error on field 'closing': Key ConnsAsyncClosing not found metricbeat\[6664\]: sc…

---

## [Accessing to different index from the contoroller in kibana](https://discuss.elastic.co/t/accessing-to-different-index-from-the-contoroller-in-kibana/57666)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [August 31, 2016, 6:37pm UTC](https://discuss.elastic.co/t/accessing-to-different-index-from-the-contoroller-in-kibana/57666 "2016-08-31T18:37:03Z")

</div>

Hi! I am now writing code for custom plugin in kibana. What I want to do is, access to different index from the current scope. I have a controller for visualization app accessing to index1 now as below . modul…

---

## [Custom fields posibility](https://discuss.elastic.co/t/custom-fields-posibility/48575)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 3\
**Last updated:** [May 4, 2016, 2:28am UTC](https://discuss.elastic.co/t/custom-fields-posibility/48575 "2016-05-04T02:28:40Z")

</div>

Hello, We're using a lot filebeat to scrape log files and send them to our ELK infrastructure. We're sending logs from many systems, and want them isolated by their own indices. With filebeat, it's easy: we use the f…

[Previous page](https://discuss.elastic.co/top.md?page=1243&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1245&per_page=50&period=all)
