# Top

**URL:** https://discuss.elastic.co/top.md?page=1271&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1272

---

## [Coordinate map on 7.7.0 - "change precision on map zoom" feature broken?](https://discuss.elastic.co/t/coordinate-map-on-7-7-0-change-precision-on-map-zoom-feature-broken/244386)

<div class="topic-metadata">

**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 10:37am UTC](https://discuss.elastic.co/t/coordinate-map-on-7-7-0-change-precision-on-map-zoom-feature-broken/244386 "2020-08-11T10:37:33Z")

</div>

Hi all, We've upgraded from 7.5.0 to 7.7.0 and something got broken in our coordinate maps. I load my dashboard and everything looks ok, but then I zoom out or change the data, and instead of many small circles, I see …

---

## [Confusion between JodaCompatibleZonedDateTime and ZonedDateTime](https://discuss.elastic.co/t/confusion-between-jodacompatiblezoneddatetime-and-zoneddatetime/218384)

<div class="topic-metadata">

**Author:** [@luflow](https://discuss.elastic.co/u/luflow)\
**Replies:** 0\
**Last updated:** [February 7, 2020, 4:48pm UTC](https://discuss.elastic.co/t/confusion-between-jodacompatiblezoneddatetime-and-zoneddatetime/218384 "2020-02-07T16:48:16Z")

</div>

Hi everyone! I just tried to do some date calculatoin in painless and just don't get how I can access the functions of the JodaCompatibleZonedDateTime given by an index field. In my index I have a field called "OXACTIV…

---

## [Watcher trigger playload](https://discuss.elastic.co/t/watcher-trigger-playload/206920)

<div class="topic-metadata">

**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\
**Replies:** 8\
**Last updated:** [November 8, 2019, 9:48am UTC](https://discuss.elastic.co/t/watcher-trigger-playload/206920 "2019-11-08T09:48:13Z")

</div>

If I want to change the category watcher.logging.bppm.(Minor), based on different log Meassage ID, how can I do? "actions": { "log\_error": { "logging": { "category": "watcher.logging.bppm.Minor", "level": "info", "…

---

## [6.3.2 to 6.5.0 - can't get cluster nodes to come up with SSL - Google Cloud](https://discuss.elastic.co/t/6-3-2-to-6-5-0-cant-get-cluster-nodes-to-come-up-with-ssl-google-cloud/159252)

<div class="topic-metadata">

**Author:** [@liquid\_es](https://discuss.elastic.co/u/liquid_es)\
**Replies:** 8\
**Last updated:** [December 5, 2018, 3:46am UTC](https://discuss.elastic.co/t/6-3-2-to-6-5-0-cant-get-cluster-nodes-to-come-up-with-ssl-google-cloud/159252 "2018-12-05T03:46:33Z")

</div>

Trying spin up a cluster in either 6.4.0 or 6.5.0 with a configuration that works on 6.3.2: Anonymous user mapped to superuser role http and transport traffic SSL encrypted Relevant parts of elasticsearch.yml …

---

## [Comparing 2 docs](https://discuss.elastic.co/t/comparing-2-docs/124454)

<div class="topic-metadata">

**Author:** [@ganessen23](https://discuss.elastic.co/u/ganessen23)\
**Replies:** 8\
**Last updated:** [April 26, 2018, 10:05pm UTC](https://discuss.elastic.co/t/comparing-2-docs/124454 "2018-04-26T22:05:49Z")

</div>

Hi guys, I want to compare 2 docs. Lets say I have doc A & doc B (csv). Both docs contains same logs. A contains 15 lines , and B contains 10 lines (5 lines removed). How should i proceed to find out which lines are mi…

---

## [Get the most out of Elastic Security - Ubuntu and Windows Servers](https://discuss.elastic.co/t/get-the-most-out-of-elastic-security-ubuntu-and-windows-servers/294977)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 7\
**Last updated:** [January 31, 2022, 7:11pm UTC](https://discuss.elastic.co/t/get-the-most-out-of-elastic-security-ubuntu-and-windows-servers/294977 "2022-01-31T19:11:19Z")

</div>

Hi All, I'm looking at Elasticsearch security and how much I can use it. I have windows and ubuntu servers, Can anyone recommend which beats and modules are best to work with the SIEM to make sure its being feed with a…

---

## [Logstash filter jdbc\_streaming : JDBC:AdapterNotFound: Could not load jdbc/mssql adapter: adapter class not registered in ADAPTER\_MAP\>](https://discuss.elastic.co/t/logstash-filter-jdbc-streaming-jdbc-could-not-load-jdbc-mssql-adapter-adapter-class-not-registered-in-adapter-map/275546)

<div class="topic-metadata">

**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\
**Replies:** 7\
**Last updated:** [June 16, 2021, 8:00am UTC](https://discuss.elastic.co/t/logstash-filter-jdbc-streaming-jdbc-could-not-load-jdbc-mssql-adapter-adapter-class-not-registered-in-adapter-map/275546 "2021-06-16T08:00:13Z")

</div>

I'm trying to use logstash filter plugin jdbc\_streaming, my logstash version is 7.13 OS centos 7 openjdk 11.0.11 2021-04-20 LTS jdbc 6.0 : "/home/jdbc/sqljdbc\_6.0/enu/jre7/sqljdbc41.jar" my logstash config input {…

---

## [Convert HEx to ascii](https://discuss.elastic.co/t/convert-hex-to-ascii/249739)

<div class="topic-metadata">

**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\
**Replies:** 1\
**Last updated:** [September 24, 2020, 12:34pm UTC](https://discuss.elastic.co/t/convert-hex-to-ascii/249739 "2020-09-24T12:34:41Z")

</div>

Hi again :slight\_smile: In my current Project we are using dlt-tools to convert dlt logs into ascii to be read by logstash. Our dlt viewer is using a specific plugin to convert some lines from hex to ascii. This is our …

---

## [Template ERROR reason: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411)

<div class="topic-metadata">

**Author:** [@Rama\_Krishna\_S](https://discuss.elastic.co/u/Rama_Krishna_S)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 7:16pm UTC](https://discuss.elastic.co/t/template-error-reason-root-mapping-definition-has-unsupported-parameters/220411 "2020-02-21T19:16:20Z")

</div>

unable to create template following is my template. #! Deprecation: \[types removal\] The parameter include\_type\_name should be explicitly specified in get template requests to prepare for 7.0. In 7.0 include\_type\_name wi…

---

## [How to list plugins on a logstash docker container?](https://discuss.elastic.co/t/how-to-list-plugins-on-a-logstash-docker-container/194460)

<div class="topic-metadata">

**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 3:17pm UTC](https://discuss.elastic.co/t/how-to-list-plugins-on-a-logstash-docker-container/194460 "2019-08-08T15:17:08Z")

</div>

Logstash is running in a docker container, and I'd like to list its plugins. For a VM or metal installation, Here is the command \[Ref 1\] sudo bin/plugin list How do I run this command in a Docker container? I've tried…

---

## [Date/timestamp fields are indexing as long](https://discuss.elastic.co/t/date-timestamp-fields-are-indexing-as-long/139173)

<div class="topic-metadata">

**Author:** [@pradosh\_gupta](https://discuss.elastic.co/u/pradosh_gupta)\
**Replies:** 1\
**Last updated:** [July 25, 2018, 2:46pm UTC](https://discuss.elastic.co/t/date-timestamp-fields-are-indexing-as-long/139173 "2018-07-25T14:46:02Z")

</div>

Hi, I am using Elasticsearch for Apache Hadoop 6.2.0 to index my data to ES using Structured Streaming (spark2.2.0) My data contains one date field and one timestamp field along with other fields. Data is successfully…

---

## [Localhost:9200/\_plugin/head error](https://discuss.elastic.co/t/localhost-9200--plugin-head-error/99235)

<div class="topic-metadata">

**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\
**Replies:** 1\
**Last updated:** [September 4, 2017, 6:11am UTC](https://discuss.elastic.co/t/localhost-9200--plugin-head-error/99235 "2017-09-04T06:11:53Z")

</div>

Hi, We just followed Head plugin unable to connect to Elasticsearch 5.3 - cluster health: not connected to install head plugin by ./elasticsearch -plugin install x-pack,t when we access localhost:9200/\_plugin/head wi…

---

## [Monitor multiple Logstash instances running on the same server](https://discuss.elastic.co/t/monitor-multiple-logstash-instances-running-on-the-same-server/89346)

<div class="topic-metadata">

**Author:** [@Kvin](https://discuss.elastic.co/u/Kvin)\
**Replies:** 1\
**Last updated:** [June 14, 2017, 12:17pm UTC](https://discuss.elastic.co/t/monitor-multiple-logstash-instances-running-on-the-same-server/89346 "2017-06-14T12:17:27Z")

</div>

We have a use case where we have several Logstash instances running on the same server, however when we would like to monitor them in Kibana, we see Logstashes per node and not per instance. What is the usual way to ma…

---

## [Open Files Limit](https://discuss.elastic.co/t/open-files-limit/54961)

<div class="topic-metadata">

**Author:** [@jezeling](https://discuss.elastic.co/u/jezeling)\
**Replies:** 1\
**Last updated:** [July 7, 2016, 4:19pm UTC](https://discuss.elastic.co/t/open-files-limit/54961 "2016-07-07T16:19:25Z")

</div>

Hi, Apologies if this is in the wrong group but I have started to receive an open file error on my logstash nodes that push the data into my two node elastic cluster: - Reached open files limit: 4095, set by the 'max…

---

## [Create Repository with S3 Protocol on Bucket Cloud on Premise](https://discuss.elastic.co/t/create-repository-with-s3-protocol-on-bucket-cloud-on-premise/287523)

<div class="topic-metadata">

**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\
**Replies:** 5\
**Last updated:** [October 25, 2021, 7:54pm UTC](https://discuss.elastic.co/t/create-repository-with-s3-protocol-on-bucket-cloud-on-premise/287523 "2021-10-25T19:54:31Z")

</div>

Hello, atm my company have cloud on premise storage with S3 protocol I want to create snapshot repository on that storage, is this possible to do, because my storage is not based on aws, but only use the s3 protocol T…

---

## [How to remove custom metadata fields from users and roles](https://discuss.elastic.co/t/how-to-remove-custom-metadata-fields-from-users-and-roles/266646)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 9:17am UTC](https://discuss.elastic.co/t/how-to-remove-custom-metadata-fields-from-users-and-roles/266646 "2021-03-11T09:17:35Z")

</div>

Hi, I am running a 7.10 Stack with Security enabled and I am currently playing around with the ElasticSearch REST API for creating users, roles and so on. The usecase here is to add advanced information to the security …

---

## [Using aliases to optimize queries from a dashboard](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275)

<div class="topic-metadata">

**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\
**Replies:** 5\
**Last updated:** [February 15, 2021, 6:03pm UTC](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275 "2021-02-15T18:03:17Z")

</div>

Good afternoon, at the moment I am consulting what is the best way to optimize the way many users consult from the dashboard. We have index\_patterns that store information for more than one year and when users filter the…

---

## [I run 3, but i see 2 nodes!](https://discuss.elastic.co/t/i-run-3-but-i-see-2-nodes/86455)

<div class="topic-metadata">

**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Replies:** 5\
**Last updated:** [May 22, 2017, 1:46pm UTC](https://discuss.elastic.co/t/i-run-3-but-i-see-2-nodes/86455 "2017-05-22T13:46:29Z")

</div>

Hi again forum. I try to create a 3-nodes cluster called "myCluster". I ran 2 nodes of Elasticsearch on VirtualBox and another on a Windows pc. They started and these are their results: node on VM1 { "name" : "…

---

## [How to receive logs from Kaspersky endpoint security to elasticsearch](https://discuss.elastic.co/t/how-to-receive-logs-from-kaspersky-endpoint-security-to-elasticsearch/336852)

<div class="topic-metadata">

**Author:** [@Mbrezzy](https://discuss.elastic.co/u/Mbrezzy)\
**Replies:** 2\
**Last updated:** [July 2, 2023, 4:01pm UTC](https://discuss.elastic.co/t/how-to-receive-logs-from-kaspersky-endpoint-security-to-elasticsearch/336852 "2023-07-02T16:01:31Z")

</div>

Hi everyone, i am new in elasticsearch . I configured Fortinet, and it works fine. I want to know how I can retrieve logs and dates from the KES server and solarwinds."

---

## [Logstash OSS 7.16.3 and Elasticsearch OSS 7.10.2](https://discuss.elastic.co/t/logstash-oss-7-16-3-and-elasticsearch-oss-7-10-2/294658)

<div class="topic-metadata">

**Author:** [@Thilak1](https://discuss.elastic.co/u/Thilak1)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 4:00pm UTC](https://discuss.elastic.co/t/logstash-oss-7-16-3-and-elasticsearch-oss-7-10-2/294658 "2022-01-18T16:00:34Z")

</div>

Hi Team , I am getting the below error when using Elasticsearch output plugin in logstash OSS 7.16.3 \[2021-04-16T05:31:15,846\]\[ERROR\]\[logstash.javapipeline \] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<LogSt…

---

## [Flatten \_source field of query results](https://discuss.elastic.co/t/flatten-source-field-of-query-results/214841)

<div class="topic-metadata">

**Author:** [@ssteiger](https://discuss.elastic.co/u/ssteiger)\
**Replies:** 2\
**Last updated:** [January 13, 2020, 2:40pm UTC](https://discuss.elastic.co/t/flatten-source-field-of-query-results/214841 "2020-01-13T14:40:41Z")

</div>

Hello, At our company we are using Elasticsearch together with GraphQL The problem we are facing is that we would like to cleanly fetch and return the \_source content of elasticsearch documents using the @elastic/elast…

---

## [Extract domains from a string of email address](https://discuss.elastic.co/t/extract-domains-from-a-string-of-email-address/170055)

<div class="topic-metadata">

**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\
**Replies:** 2\
**Last updated:** [February 26, 2019, 7:37pm UTC](https://discuss.elastic.co/t/extract-domains-from-a-string-of-email-address/170055 "2019-02-26T19:37:40Z")

</div>

I have a field "to\_domains\_temp" (copied from email recipients list, amount of email addresses is unpredictable), let's say "akii.suzuki@gmail.com;machael.miki@hotmail.com;nobuo.miki@outlook.com;wakako.seki@gmail.com" h…

---

## [How many times does a character appear?](https://discuss.elastic.co/t/how-many-times-does-a-character-appear/145454)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 2\
**Last updated:** [September 5, 2018, 6:54pm UTC](https://discuss.elastic.co/t/how-many-times-does-a-character-appear/145454 "2018-09-05T18:54:22Z")

</div>

I would like to be able to find out how many times a character appears in a field. Is this possible with grok or some other filter? To explain, we are getting beats from multiple sources, and multiple departments in my…

---

## [Query a list field of a nested object](https://discuss.elastic.co/t/query-a-list-field-of-a-nested-object/109649)

<div class="topic-metadata">

**Author:** [@raufer](https://discuss.elastic.co/u/raufer)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 10:28am UTC](https://discuss.elastic.co/t/query-a-list-field-of-a-nested-object/109649 "2017-12-04T10:28:14Z")

</div>

Hey, I was wondering if you guys could help me out here. The data I'm currently querying admits a nested field nodes, eg: { "document\_name": "Regulation 6966/76", "nodes": \[ { "c…

---

## [Ignore\_malformed doesn't work?](https://discuss.elastic.co/t/ignore-malformed-doesnt-work/96793)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 2\
**Last updated:** [August 14, 2017, 2:49pm UTC](https://discuss.elastic.co/t/ignore-malformed-doesnt-work/96793 "2017-08-14T14:49:57Z")

</div>

Hi, I’m using 5.2.2 and have set my index’s settings.index.mapping.ignore\_malformed to true (I have verified this) and yet when I index a document I get a document rejected because it tries to put an object where it’s e…

---

## [Quoted json log message](https://discuss.elastic.co/t/quoted-json-log-message/95398)

<div class="topic-metadata">

**Author:** [@grants](https://discuss.elastic.co/u/grants)\
**Replies:** 2\
**Last updated:** [August 2, 2017, 7:23pm UTC](https://discuss.elastic.co/t/quoted-json-log-message/95398 "2017-08-02T19:23:39Z")

</div>

I have some event log files that are written in json, but they are wrapped in quotes. Filebeats is dumping errors like this: 2017/08/01 18:37:12.103066 json.go:34: ERR Error decoding JSON: json: cannot unmarshal string…

---

## [Csv output problem with numbers?](https://discuss.elastic.co/t/csv-output-problem-with-numbers/85458)

<div class="topic-metadata">

**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 7:58am UTC](https://discuss.elastic.co/t/csv-output-problem-with-numbers/85458 "2017-05-15T07:58:18Z")

</div>

Hi with ES 5.4 and LG 5.4 I try this output { csv { fields =\> \["nom","nom\_maire","CODGEO", "street", "cp","nomcommune","departement","DEPET","region","email","siteweb","tel","fax","population","location\[lat\]","l…

---

## [ES-Spark : issue with 'read\_field\_include' in case of nested objects](https://discuss.elastic.co/t/es-spark-issue-with-read-field-include-in-case-of-nested-objects/47779)

<div class="topic-metadata">

**Author:** [@Preeti\_Raj\_Buchhada](https://discuss.elastic.co/u/Preeti_Raj_Buchhada)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 6:40am UTC](https://discuss.elastic.co/t/es-spark-issue-with-read-field-include-in-case-of-nested-objects/47779 "2016-04-21T06:40:47Z")

</div>

A typical record in my ES index looks like: "\_source": { "app": "panoply", "response": { "category": "uncategorized", "subcategory": "uncategorized", "activity\_common\_name": "name…

---

## [We couldn't log you in. Please try again](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/327950)

<div class="topic-metadata">

**Author:** [@prabakaran23](https://discuss.elastic.co/u/prabakaran23)\
**Replies:** 3\
**Last updated:** [March 20, 2023, 1:55pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/327950 "2023-03-20T13:55:25Z")

</div>

Hi, Unable to login the kibana console today. We are facing following error "We couldn't log you in. Please try again." Kindly help on this..

---

## [Load data from one environment to another?](https://discuss.elastic.co/t/load-data-from-one-environment-to-another/187916)

<div class="topic-metadata">

**Author:** [@jkimrey](https://discuss.elastic.co/u/jkimrey)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 1:17am UTC](https://discuss.elastic.co/t/load-data-from-one-environment-to-another/187916 "2019-06-28T01:17:29Z")

</div>

I have a requirement to take specific ES data from one instance (permanently available) and, via an automated process, move that data to another ES instance running in a local docker container. At the time the data is d…

---

## [Help on showing Custom File beat Module Fields in Kibana](https://discuss.elastic.co/t/help-on-showing-custom-file-beat-module-fields-in-kibana/161351)

<div class="topic-metadata">

**Author:** [@CoreyF](https://discuss.elastic.co/u/CoreyF)\
**Replies:** 3\
**Last updated:** [January 23, 2019, 11:44am UTC](https://discuss.elastic.co/t/help-on-showing-custom-file-beat-module-fields-in-kibana/161351 "2019-01-23T11:44:00Z")

</div>

Hello, I have created a custom File Beat Module using Creating a New Beat. The data is making it to Elasticsearch and I can see it under the “Discover” Tab in Kibana. In Kibana -\> Visualize -\> Visual Builder -\> Time Ser…

---

## [Filebeats to ship data directly to AWS ElasticSearch managed service](https://discuss.elastic.co/t/filebeats-to-ship-data-directly-to-aws-elasticsearch-managed-service/163988)

<div class="topic-metadata">

**Author:** [@kejsi](https://discuss.elastic.co/u/kejsi)\
**Replies:** 3\
**Last updated:** [January 12, 2019, 11:43am UTC](https://discuss.elastic.co/t/filebeats-to-ship-data-directly-to-aws-elasticsearch-managed-service/163988 "2019-01-12T11:43:06Z")

</div>

Hi all, I already see threads that depict it as not feasible to send data to AWS ES service, since these posts are about 1 year old, I'd like to ask whether any of you has had success with this approach? I really can't…

---

## [Parsing KV where value is a list](https://discuss.elastic.co/t/parsing-kv-where-value-is-a-list/134831)

<div class="topic-metadata">

**Author:** [@thegrockq](https://discuss.elastic.co/u/thegrockq)\
**Replies:** 3\
**Last updated:** [June 14, 2018, 9:33pm UTC](https://discuss.elastic.co/t/parsing-kv-where-value-is-a-list/134831 "2018-06-14T21:33:06Z")

</div>

I have a log I can mostly parse w/ the KV filter. I have a few fields that aren't parsing correctly though as the values are a list instead of a single value. For example: ..., rand\_key: rand\_value, IP Address: (192.168…

---

## [In kibana(5.1.1) in Data Table visualization how can I Use aggregate function like \`(count(\*)/sum)\` for whole bucket?](https://discuss.elastic.co/t/in-kibana-5-1-1-in-data-table-visualization-how-can-i-use-aggregate-function-like-count-sum-for-whole-bucket/74212)

<div class="topic-metadata">

**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\
**Replies:** 3\
**Last updated:** [February 10, 2017, 2:38pm UTC](https://discuss.elastic.co/t/in-kibana-5-1-1-in-data-table-visualization-how-can-i-use-aggregate-function-like-count-sum-for-whole-bucket/74212 "2017-02-10T14:38:08Z")

</div>

I want print count(\*)/sum(duration) using Data Table visualization for whole bucket how can achieve the same.

---

## [Using Kibana Directives in Your Plugin](https://discuss.elastic.co/t/using-kibana-directives-in-your-plugin/69303)

<div class="topic-metadata">

**Author:** [@Kikketer](https://discuss.elastic.co/u/Kikketer)\
**Replies:** 3\
**Last updated:** [December 20, 2016, 3:46pm UTC](https://discuss.elastic.co/t/using-kibana-directives-in-your-plugin/69303 "2016-12-20T15:46:50Z")

</div>

I'm attempting to use the kbnTopNav directive in my plugin but so far have come up empty. In my index.js file of the plugin (root of the plugin), I have this: require: \['kibana', 'elasticsearch'\], I'm not entirely s…

---

## [Logstash UDP Message Missing Beginning](https://discuss.elastic.co/t/logstash-udp-message-missing-beginning/58858)

<div class="topic-metadata">

**Author:** [@r0b0tAnthony](https://discuss.elastic.co/u/r0b0tAnthony)\
**Replies:** 3\
**Last updated:** [September 14, 2016, 8:27pm UTC](https://discuss.elastic.co/t/logstash-udp-message-missing-beginning/58858 "2016-09-14T20:27:20Z")

</div>

Hi, I am forwarding a syslog from a device to Logstash using port 5514. However, my syslog grok,which works great for any filebeat shipped syslogs, fails for the UDP forwarded syslogs. I have tested the grok using the …

---

## [Is there a way to use logstash template without specifying index name as "logstash-\*" when using Elasticsearch output plugin?](https://discuss.elastic.co/t/is-there-a-way-to-use-logstash-template-without-specifying-index-name-as-logstash-when-using-elasticsearch-output-plugin/51906)

<div class="topic-metadata">

**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\
**Replies:** 3\
**Last updated:** [June 14, 2016, 7:02am UTC](https://discuss.elastic.co/t/is-there-a-way-to-use-logstash-template-without-specifying-index-name-as-logstash-when-using-elasticsearch-output-plugin/51906 "2016-06-14T07:02:12Z")

</div>

I know when you output tot Elasticsearch and you specify your index name to output to as "logstash-\*" then your output also contains raw fields. This is because when you use index name "logstash-" then it uses the logsta…

---

## [ES and APM-Server for Mobile App telemetry?](https://discuss.elastic.co/t/es-and-apm-server-for-mobile-app-telemetry/317055)

<div class="topic-metadata">

**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\
**Replies:** 1\
**Last updated:** [October 20, 2022, 9:10am UTC](https://discuss.elastic.co/t/es-and-apm-server-for-mobile-app-telemetry/317055 "2022-10-20T09:10:40Z")

</div>

We're already using Elastic and apm-server for metrics with our web applications, and now we're building a mobile app and it would be great to use elastic stack for that as well. The app will be built with React Native a…

---

## [Logstash input beat super low ingestion rate](https://discuss.elastic.co/t/logstash-input-beat-super-low-ingestion-rate/99483)

<div class="topic-metadata">

**Author:** [@Geez](https://discuss.elastic.co/u/Geez)\
**Replies:** 1\
**Last updated:** [September 6, 2017, 11:34am UTC](https://discuss.elastic.co/t/logstash-input-beat-super-low-ingestion-rate/99483 "2017-09-06T11:34:26Z")

</div>

Hello, Hope y’all having a good day! Really need some assistance regarding some performance issues on our logging pipeline. In a nutshell, we have this common setup: \[journalbeat\] \> \[logstash\] \> \[elasticsearch\] Whil…

---

## [Nodes weights](https://discuss.elastic.co/t/nodes-weights/72640)

<div class="topic-metadata">

**Author:** [@crs](https://discuss.elastic.co/u/crs)\
**Replies:** 1\
**Last updated:** [January 24, 2017, 6:51pm UTC](https://discuss.elastic.co/t/nodes-weights/72640 "2017-01-24T18:51:02Z")

</div>

Hi, Is there any possibility to set weight for node resulting how many shards reside on this node? I mean eg I have 3 nodes - two big with more RAM and CPUs and one smaller with less RAM/CPU but with the same amount of…

---

## [Converting x axis values from UTC epoch to date time](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050)

<div class="topic-metadata">

**Author:** [@TUMAAA](https://discuss.elastic.co/u/TUMAAA)\
**Replies:** 4\
**Last updated:** [September 3, 2021, 8:00am UTC](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050 "2021-09-03T08:00:43Z")

</div>

Dear community, I have x axis values in a kibana histogram plot that are UTC epoch (in nano sec). These x values are hardly usable. It would help if I can convert them to sec. Even better is if I can convert them to dat…

---

## [TSVB math aggregation on multiple series](https://discuss.elastic.co/t/tsvb-math-aggregation-on-multiple-series/261288)

<div class="topic-metadata">

**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\
**Replies:** 4\
**Last updated:** [January 16, 2021, 10:43am UTC](https://discuss.elastic.co/t/tsvb-math-aggregation-on-multiple-series/261288 "2021-01-16T10:43:22Z")

</div>

Hello I've read discussion on https://discuss.elastic.co/t/tsvb-creating-variables-for-math/228385. I was using different series with index pattern override to plot data from two different indexes, but I've figured out…

---

## [Basic word\_list problem](https://discuss.elastic.co/t/basic-word-list-problem/109661)

<div class="topic-metadata">

**Author:** [@karejonsson](https://discuss.elastic.co/u/karejonsson)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 8:23am UTC](https://discuss.elastic.co/t/basic-word-list-problem/109661 "2017-12-11T08:23:55Z")

</div>

I have this { "analysis": { "filter": { "swedish\_stop": { "type": "stop", "stopwords": "\_swedish\_" }, "swedish\_stemmer": { "type": "stemmer",…

---

## [NoNodeAvailableException suite a timeout du client](https://discuss.elastic.co/t/nonodeavailableexception-suite-a-timeout-du-client/71657)

<div class="topic-metadata">

**Author:** [@hugo\_lassiege](https://discuss.elastic.co/u/hugo_lassiege)\
**Replies:** 4\
**Last updated:** [February 4, 2017, 4:01pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-suite-a-timeout-du-client/71657 "2017-02-04T16:01:00Z")

</div>

Salut, Depuis débutjanvier nous rencontrons régulièrement l'erreur "NoNodeAvailableException". Nous avons la sensation que c'est également lié au logs suivants, lui aussi régulier depuis cette date : 23:56:34 t=elast…

---

## [Aggregate plugin perfomance](https://discuss.elastic.co/t/aggregate-plugin-perfomance/63833)

<div class="topic-metadata">

**Author:** [@111126](https://discuss.elastic.co/u/111126)\
**Replies:** 4\
**Last updated:** [October 28, 2016, 4:59pm UTC](https://discuss.elastic.co/t/aggregate-plugin-perfomance/63833 "2016-10-28T16:59:51Z")

</div>

Hello. I forward my logs to redis and I have logstash redis input. Logstash filter use aggregate plugin. I have real events per second rate 20k, but logstash can only 1.5 k events per sec. I use one logstash worker. My …

---

## [Real world elastic sizing](https://discuss.elastic.co/t/real-world-elastic-sizing/52583)

<div class="topic-metadata">

**Author:** [@Cooker](https://discuss.elastic.co/u/Cooker)\
**Replies:** 4\
**Last updated:** [June 13, 2016, 10:22am UTC](https://discuss.elastic.co/t/real-world-elastic-sizing/52583 "2016-06-13T10:22:06Z")

</div>

I have been using a single vm with the whole elk stack on one machine, 6 cores and 20Gb of ram and all is well. I am looking to scale up the amount of data we store however the actual rate of messages will be static, j…

---

## [Updated to 1.6.1 and seeing an issue. Time to jump to 1.7?](https://discuss.elastic.co/t/updated-to-1-6-1-and-seeing-an-issue-time-to-jump-to-1-7/26013)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 4\
**Last updated:** [July 23, 2015, 8:54pm UTC](https://discuss.elastic.co/t/updated-to-1-6-1-and-seeing-an-issue-time-to-jump-to-1-7/26013 "2015-07-23T20:54:08Z")

</div>

I have four ES nodes, one of which is a client, and is streaming archived log data into the cluster. After upgrading all nodes to 1.6.1. \[1\] I restarted my intake script. While it appears to be adding data, it's also …

---

## [How to modify the ES configuration and reboot ES cluster properly?](https://discuss.elastic.co/t/how-to-modify-the-es-configuration-and-reboot-es-cluster-properly/96367)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 6\
**Last updated:** [August 10, 2017, 4:28am UTC](https://discuss.elastic.co/t/how-to-modify-the-es-configuration-and-reboot-es-cluster-properly/96367 "2017-08-10T04:28:37Z")

</div>

ELK version: 5.5.1 Restart nodes one by one is terrible… Should I refer to this guide? https://www.elastic.co/guide/en/elasticsearch/reference/5.5/rolling-upgrades.html

---

## [Comparison of Different Elastic License Types](https://discuss.elastic.co/t/comparison-of-different-elastic-license-types/374156)

<div class="topic-metadata">

**Author:** [@Illya\_Bjazevic](https://discuss.elastic.co/u/Illya_Bjazevic)\
**Replies:** 2\
**Last updated:** [February 6, 2025, 2:01am UTC](https://discuss.elastic.co/t/comparison-of-different-elastic-license-types/374156 "2025-02-06T02:01:01Z")

</div>

I need a comparison of different Elastic license types. I found the following link, which is very comprehensive. However, it does not include the free version. We have the paid version in some areas, but my team wants to…

---

## [Query String query with multiple terms](https://discuss.elastic.co/t/query-string-query-with-multiple-terms/360723)

<div class="topic-metadata">

**Author:** [@darrylds](https://discuss.elastic.co/u/darrylds)\
**Replies:** 2\
**Last updated:** [June 3, 2024, 4:13pm UTC](https://discuss.elastic.co/t/query-string-query-with-multiple-terms/360723 "2024-06-03T16:13:16Z")

</div>

I have a quite large index, well at least to me, 3 million records and adds between 500 to 2000 more a day. There are 150 categories, I want to be able to search for query strings within those categories. There are al…

[Previous page](https://discuss.elastic.co/top.md?page=1270&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1272&per_page=50&period=all)
