# Top **URL:** https://discuss.elastic.co/top.md?page=1280&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1281 --- ## [Elasticsearch - segment replication](https://discuss.elastic.co/t/elasticsearch-segment-replication/157302)
**Author:** [@djjsindy](https://discuss.elastic.co/u/djjsindy)\ **Replies:** 1\ **Last updated:** [November 19, 2018, 9:39am UTC](https://discuss.elastic.co/t/elasticsearch-segment-replication/157302 "2018-11-19T09:39:30Z")
I read this blog a few months ago ：http://blog.mikemccandless.com/2017/09/lucenes-near-real-time-segment-index.html ,There is indeed a very core case in my work that can be used for this function.I developed the fun… --- ## [How should i write query when i want to look for a specific value of a header from kibana logs?](https://discuss.elastic.co/t/how-should-i-write-query-when-i-want-to-look-for-a-specific-value-of-a-header-from-kibana-logs/155466)
**Author:** [@SreeReddy](https://discuss.elastic.co/u/SreeReddy)\ **Replies:** 1\ **Last updated:** [November 12, 2018, 9:15am UTC](https://discuss.elastic.co/t/how-should-i-write-query-when-i-want-to-look-for-a-specific-value-of-a-header-from-kibana-logs/155466 "2018-11-12T09:15:58Z")
For Example, how should my query be, if i want to look for specific values of X-Forwarded-For ? Below is teh value of log.Headers field and i have to parse till X-Forwarded-For field. Tried the below query, but was not … --- ## [How to install x-pack?](https://discuss.elastic.co/t/how-to-install-x-pack/150123)
**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\ **Replies:** 7\ **Last updated:** [September 27, 2018, 7:37am UTC](https://discuss.elastic.co/t/how-to-install-x-pack/150123 "2018-09-27T07:37:12Z")
I have installed elasticsearch,kibana, logstash in my linux server and able to retrive and monitor logs.Need support to install x-pack to use kibana with credentials.please help. --- ## [Logstash Timstamp:\_dateparsefailure issue](https://discuss.elastic.co/t/logstash-timstamp-dateparsefailure-issue/127314)
**Author:** [@vincent25](https://discuss.elastic.co/u/vincent25)\ **Replies:** 7\ **Last updated:** [April 11, 2018, 6:34am UTC](https://discuss.elastic.co/t/logstash-timstamp-dateparsefailure-issue/127314 "2018-04-11T06:34:43Z")
Hi, I need to replace my log timestamp with logstash @timestamp.I have tried all possible ways and time formats but still not able to replace it and getting dateparsefailure issue every time. Can anybody help me to sor… --- ## [Watcher Version Error](https://discuss.elastic.co/t/watcher-version-error/43943)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 1\ **Last updated:** [March 10, 2016, 6:47am UTC](https://discuss.elastic.co/t/watcher-version-error/43943 "2016-03-10T06:47:55Z")
I am trying to test sending an email from watcher (cluster status) but getting this error: \[.watches\]\[\[.watches\]\[0\]\] VersionConflictEngineException\[\[watch\]\[cluster\_health\_watch\]: version conflict, current \[358\], provid… --- ## [ES starting process and using huge HEAP memory problem](https://discuss.elastic.co/t/es-starting-process-and-using-huge-heap-memory-problem/15017)
**Author:** [@prometheus](https://discuss.elastic.co/u/prometheus)\ **Replies:** 7\ **Last updated:** [January 21, 2014, 12:57pm UTC](https://discuss.elastic.co/t/es-starting-process-and-using-huge-heap-memory-problem/15017 "2014-01-21T12:57:45Z")
Last couple of days I am looking the forums and the blogs regarding to find a help or clue about the Large indexes and the Heap usage similar to the our use case. Unfortunatelly I didn’t find a solution that hel… --- ## [Wordnet synonyms file](https://discuss.elastic.co/t/wordnet-synonyms-file/11294)
**Author:** [@Chris\_Greening](https://discuss.elastic.co/u/Chris_Greening)\ **Replies:** 1\ **Last updated:** [March 25, 2013, 6:47pm UTC](https://discuss.elastic.co/t/wordnet-synonyms-file/11294 "2013-03-25T18:47:48Z")
Hi All, I'm trying to follow the steps here: http://www.elasticsearch.org/guide/reference/index-modules/analysis/synonym-tokenfilter.html and use data from wordnet for synonyms. I've downloaded the wordnet data… --- ## [Retrieve data directly from Elasticsearch index in React App](https://discuss.elastic.co/t/retrieve-data-directly-from-elasticsearch-index-in-react-app/334365)
**Author:** [@Thomas\_Makrigiannis](https://discuss.elastic.co/u/Thomas_Makrigiannis)\ **Replies:** 3\ **Last updated:** [May 30, 2023, 10:19am UTC](https://discuss.elastic.co/t/retrieve-data-directly-from-elasticsearch-index-in-react-app/334365 "2023-05-30T10:19:09Z")
Hi, everyone. I am new to elasticsearch and I really need your help. i have construced a react app that simulates a search engine. My app uses node.js and express. I have built both a server and a client. In the app I r… --- ## [Viewing the most recent data](https://discuss.elastic.co/t/viewing-the-most-recent-data/286965)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 3\ **Last updated:** [November 12, 2021, 11:35am UTC](https://discuss.elastic.co/t/viewing-the-most-recent-data/286965 "2021-11-12T11:35:21Z")
So I am capturing data in elastic. It happens to be status of our scheduled tasks. What I cannot work out is how to display that data on a kibana dashboard. I have set up a search and can show the raw data, but that's… --- ## [Error: Exiting: error creating reader for journal: failed to open journal file](https://discuss.elastic.co/t/error-exiting-error-creating-reader-for-journal-failed-to-open-journal-file/218318)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:50pm UTC](https://discuss.elastic.co/t/error-exiting-error-creating-reader-for-journal-failed-to-open-journal-file/218318 "2021-05-12T21:50:03Z")
Hi, i am using Elasticstack of version 7.1.1 with x-pack installed. I am trying to run journaldbeat 7.1.1 on my system but its showing the following error 2020-02-07T15:42:10.886+0530 INFO instance/beat.go:280 Setup B… --- ## [Search query on elasticsearch returning different output every time](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818)
**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\ **Replies:** 3\ **Last updated:** [October 5, 2019, 9:28am UTC](https://discuss.elastic.co/t/search-query-on-elasticsearch-returning-different-output-every-time/199818 "2019-10-05T09:28:34Z")
Hi, I am facing weird issue on Elasticsearch 6.7.0 Our Elasticsearch cluster is a two-node cluster. which is refreshed daily through automation. The ES nodes are created daily and pushed data to ES from java app. Some… --- ## [Unsuccessful at importing Kibana dashboard JSON via curl](https://discuss.elastic.co/t/unsuccessful-at-importing-kibana-dashboard-json-via-curl/177681)
**Author:** [@John\_Michael\_Burke](https://discuss.elastic.co/u/John_Michael_Burke)\ **Replies:** 3\ **Last updated:** [May 3, 2019, 10:27am UTC](https://discuss.elastic.co/t/unsuccessful-at-importing-kibana-dashboard-json-via-curl/177681 "2019-05-03T10:27:39Z")
Hello all, I have been trying to import a saved object json into kibana... I saved ~ 4 index-patterns/100 searches etc.. and I have found recommendations that you can import using curl something like this... bash-4.2$ … --- ## [How to handle dictionary from python script in logstash](https://discuss.elastic.co/t/how-to-handle-dictionary-from-python-script-in-logstash/173960)
**Author:** [@ioannisnikolakis](https://discuss.elastic.co/u/ioannisnikolakis)\ **Replies:** 3\ **Last updated:** [March 27, 2019, 1:23pm UTC](https://discuss.elastic.co/t/how-to-handle-dictionary-from-python-script-in-logstash/173960 "2019-03-27T13:23:06Z")
Hello elastic and logstash experts, I am trying out using a python script as input (exec) to a logstash config file. The python script spits out a dictionary like the one depicted below once every 1 second: {'\_score': … --- ## [Missing CSV records in ElasticSearch](https://discuss.elastic.co/t/missing-csv-records-in-elasticsearch/102497)
**Author:** [@xnaud](https://discuss.elastic.co/u/xnaud)\ **Replies:** 3\ **Last updated:** [October 6, 2017, 1:44pm UTC](https://discuss.elastic.co/t/missing-csv-records-in-elasticsearch/102497 "2017-10-06T13:44:15Z")
I am importing into Amazon Elasticsearch with logstash 5.6.2 a 120MB CSV file that contains 27,858 US cities with their polygons. I run logstash with stdin and not with a file so it stops at the end. when importing, I… --- ## [Plot - Without Split - Y Fields with Multiple Filter Aggregation](https://discuss.elastic.co/t/plot-without-split-y-fields-with-multiple-filter-aggregation/67550)
**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\ **Replies:** 3\ **Last updated:** [December 1, 2016, 12:21am UTC](https://discuss.elastic.co/t/plot-without-split-y-fields-with-multiple-filter-aggregation/67550 "2016-12-01T00:21:56Z")
Hi I am reading data from multiple log files, which have identical format and are processed with the same grok filter. Format is SystemWideTimestamp, LogId, Value. I would like to be able to draw the Value time-series, f… --- ## [Issue with Logstash Kafka Input Missing Fields](https://discuss.elastic.co/t/issue-with-logstash-kafka-input-missing-fields/48596)
**Author:** [@landonix](https://discuss.elastic.co/u/landonix)\ **Replies:** 3\ **Last updated:** [April 28, 2016, 4:55pm UTC](https://discuss.elastic.co/t/issue-with-logstash-kafka-input-missing-fields/48596 "2016-04-28T16:55:05Z")
Logstash Kafka Consumer/Input Hello! I'm attempting use the kakfa input plugin and thought I would start with some basic testing first. From the looks of it, I'm losing three fields (app, pid, and msgid) when logstash … --- ## [{"error":"ElasticSearchException\[failed to analyze\]; nested: IOException\[Stream closed\]; ","status":500}](https://discuss.elastic.co/t/error-elasticsearchexception-failed-to-analyze-nested-ioexception-stream-closed-status-500/12186)
**Author:** [@awnuxkjy](https://discuss.elastic.co/u/awnuxkjy)\ **Replies:** 3\ **Last updated:** [August 1, 2013, 4:25am UTC](https://discuss.elastic.co/t/error-elasticsearchexception-failed-to-analyze-nested-ioexception-stream-closed-status-500/12186 "2013-08-01T04:25:24Z")
elasticsearch.yml config: index: analysis: analyzer: ik: alias: \[ik\_analyzer\] type: org.elasticsearch.index.analysis.IkAnalyzerProvider when I … --- ## [Upgrade to 8.0.0 failed](https://discuss.elastic.co/t/upgrade-to-8-0-0-failed/298998)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 2\ **Last updated:** [March 8, 2022, 6:57pm UTC](https://discuss.elastic.co/t/upgrade-to-8-0-0-failed/298998 "2022-03-08T18:57:36Z")
I am running Elasticsearch 7.17.0 in EKS. Under /app/management/stack/upgrade\_assistant/es\_deprecations I see following I updated config to kind: StatefulSet apiVersion: apps/v1 metadata: name: es-master namespa… --- ## [Display image assets in canvas markdown element](https://discuss.elastic.co/t/display-image-assets-in-canvas-markdown-element/253113)
**Author:** [@wmcleod](https://discuss.elastic.co/u/wmcleod)\ **Replies:** 2\ **Last updated:** [October 29, 2020, 8:34pm UTC](https://discuss.elastic.co/t/display-image-assets-in-canvas-markdown-element/253113 "2020-10-29T20:34:36Z")
Hi, Is it possible to display images from the loaded assets in a Canvas Markdown element? I'd like to make the image a hyperlink and have been able to do this with externally available images. But how can I reference a… --- ## [ES Spark Connector - Circuit Breaker error](https://discuss.elastic.co/t/es-spark-connector-circuit-breaker-error/187358)
**Author:** [@Daniel\_Solow](https://discuss.elastic.co/u/Daniel_Solow)\ **Replies:** 2\ **Last updated:** [July 2, 2019, 5:25pm UTC](https://discuss.elastic.co/t/es-spark-connector-circuit-breaker-error/187358 "2019-07-02T17:25:33Z")
I'm using ES 7.1.1 and Spark 2.4.2. The ES cluster is on Google Kubernetes Engine and the Spark cluster is on Google Dataproc. Big jobs are failing with the following error, often several hours into the job: 19/06/25 0… --- ## [Logstash filter: Convert all fields in json to integer](https://discuss.elastic.co/t/logstash-filter-convert-all-fields-in-json-to-integer/180662)
**Author:** [@Neeraj\_Jain](https://discuss.elastic.co/u/Neeraj_Jain)\ **Replies:** 2\ **Last updated:** [May 13, 2019, 6:41am UTC](https://discuss.elastic.co/t/logstash-filter-convert-all-fields-in-json-to-integer/180662 "2019-05-13T06:41:53Z")
Hi, I have a json data of below format (in rubydebug output). I want to convert all the counter values to integer. with mutate filter plugin, i have to convert each counter to integer. However, this is a shortened data.… --- ## [Round the value Average Bucket Aggregation of Unique Count](https://discuss.elastic.co/t/round-the-value-average-bucket-aggregation-of-unique-count/177342)
**Author:** [@Rami\_Batal](https://discuss.elastic.co/u/Rami_Batal)\ **Replies:** 2\ **Last updated:** [April 18, 2019, 9:03am UTC](https://discuss.elastic.co/t/round-the-value-average-bucket-aggregation-of-unique-count/177342 "2019-04-18T09:03:37Z")
Hi, I would like to display the integer approximation of an Average Bucket Aggregation that is averaging the count of documents in each month of over date histogram. Please Note that I am counting the unique values of … --- ## [Range query blocks elasticsearch](https://discuss.elastic.co/t/range-query-blocks-elasticsearch/97293)
**Author:** [@Marco\_42](https://discuss.elastic.co/u/Marco_42)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 1:45pm UTC](https://discuss.elastic.co/t/range-query-blocks-elasticsearch/97293 "2017-08-22T13:45:35Z")
Hi everyone, I’m am almost a beginner in elasticsearch and I need a little help. I built a monitoring infrastructure with ELK for 60 nodes, with a single instance of all ELK stack with monitoring plugin on a single nod… --- ## [Logstash 1.5.2 : uninitialized constant LogStash::Inputs::Http::Base64](https://discuss.elastic.co/t/logstash-1-5-2-uninitialized-constant-logstash-inputs-http-base64/25149)
**Author:** [@marjolaine](https://discuss.elastic.co/u/marjolaine)\ **Replies:** 2\ **Last updated:** [July 24, 2015, 3:07pm UTC](https://discuss.elastic.co/t/logstash-1-5-2-uninitialized-constant-logstash-inputs-http-base64/25149 "2015-07-24T15:07:21Z")
Hello, I wanted to use the plugin http logsatsh input, but it is not in Logstash 1.5.1 (my actual version). So I update to 1.5.2 but when I try to start logsatsh, I have this error message : The error reported is: … --- ## [Error: expected 'location' header to be set](https://discuss.elastic.co/t/error-expected-location-header-to-be-set/248025)
**Author:** [@TamiTakamiya](https://discuss.elastic.co/u/TamiTakamiya)\ **Replies:** 6\ **Last updated:** [September 15, 2020, 5:57pm UTC](https://discuss.elastic.co/t/error-expected-location-header-to-be-set/248025 "2020-09-15T17:57:44Z")
Hello, I have an issue in connecting Kibana (7.8.0 OSS) running on my local machine to our Elasticsearch (7.8.0) instance on our Kubernates cluster. The initial connection works and Kibana creates the index .kibana\_1 on… --- ## [Elasticsearch not able to build Using Gradle](https://discuss.elastic.co/t/elasticsearch-not-able-to-build-using-gradle/234757)
**Author:** [@Senkyy1](https://discuss.elastic.co/u/Senkyy1)\ **Replies:** 6\ **Last updated:** [May 28, 2020, 7:35pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-build-using-gradle/234757 "2020-05-28T19:35:15Z")
I am trying to setup Elasticsearch on my windows 10 for intellij following this link but when i execute gradlew.bat idea I am getting this error. Me using Gradle Version 6.4 and Jdk version 14 and windows 10 --- ## [Elasticsearch monitoring is returning circuit break errors](https://discuss.elastic.co/t/elasticsearch-monitoring-is-returning-circuit-break-errors/217884)
**Author:** [@kyles](https://discuss.elastic.co/u/kyles)\ **Replies:** 6\ **Last updated:** [March 27, 2020, 6:52am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-is-returning-circuit-break-errors/217884 "2020-03-27T06:52:56Z")
Cluster version 7.4.2 3 Master nodes 10 data nodes We are having the monitoring data for our cluster go to itself, recently we started seeing these errors. Can someone explain what this error means and potentially ho… --- ## [\_meta for Fs-Crawler Mapping](https://discuss.elastic.co/t/meta-for-fs-crawler-mapping/210889)
**Author:** [@alipfi](https://discuss.elastic.co/u/alipfi)\ **Replies:** 6\ **Last updated:** [December 9, 2019, 9:02am UTC](https://discuss.elastic.co/t/meta-for-fs-crawler-mapping/210889 "2019-12-09T09:02:10Z")
I would like my Elasticsearch to also read custom-metadata. I read about the \_meta field and I am not sure how to implement it in my FS-Crawler Mappings. Does anyone have some experience with this field an can help? So … --- ## [Issue with plotting daily field values](https://discuss.elastic.co/t/issue-with-plotting-daily-field-values/124777)
**Author:** [@simonetthomas](https://discuss.elastic.co/u/simonetthomas)\ **Replies:** 6\ **Last updated:** [March 21, 2018, 11:12am UTC](https://discuss.elastic.co/t/issue-with-plotting-daily-field-values/124777 "2018-03-21T11:12:50Z")
Hi everyone, I'm relatively new to ES and Kibana. I'm currently searching how to plot field values, wich consists of a float value (y-axis), corresponding to a time (x-axis). As I understand it, it's not possible to do … --- ## [Logstash not picking older logs](https://discuss.elastic.co/t/logstash-not-picking-older-logs/62944)
**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\ **Replies:** 6\ **Last updated:** [October 19, 2016, 7:21am UTC](https://discuss.elastic.co/t/logstash-not-picking-older-logs/62944 "2016-10-19T07:21:10Z")
I have a scenario where I need to pick 4 to 5 years older data using Logstash. Below is the config file input { file { path =\> \[ "cricsheet-xml-master\\0.7\\5\*.xml" \] type =\> "CricketData" start\_position =\> … --- ## [Make a copy of a running Elastic node](https://discuss.elastic.co/t/make-a-copy-of-a-running-elastic-node/324448)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 8\ **Last updated:** [February 1, 2023, 9:02pm UTC](https://discuss.elastic.co/t/make-a-copy-of-a-running-elastic-node/324448 "2023-02-01T21:02:49Z")
Hi, I have a running Elastic node with an index. I'm constantly inserting documents into the index in a process that I can't stop. The whole process is running in a remote server. I need to make a copy of the index int… --- ## [Reindex error: Failed to parse content to map](https://discuss.elastic.co/t/reindex-error-failed-to-parse-content-to-map/119841)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 0\ **Last updated:** [February 14, 2018, 4:19pm UTC](https://discuss.elastic.co/t/reindex-error-failed-to-parse-content-to-map/119841 "2018-02-14T16:19:18Z")
I followed the instruction in this page to manually reindex the Kibana index to get ready to upgrade our Elasticsearch server from 5.6.7 to 6.x. The first step (Set .kibana index to read-only) went ok, but I got an erro… --- ## [ElasticSearch NEST Search query not working](https://discuss.elastic.co/t/elasticsearch-nest-search-query-not-working/143415)
**Author:** [@jainsachin99](https://discuss.elastic.co/u/jainsachin99)\ **Replies:** 1\ **Last updated:** [August 8, 2018, 4:09am UTC](https://discuss.elastic.co/t/elasticsearch-nest-search-query-not-working/143415 "2018-08-08T04:09:04Z")
New to ElasticSearch, having below setup ElasticSearch Server version -- 6.3.2 NEST Version -- 6.2.0 Executing Simple Search var response = client.Search(s =\> s .From(0).Size(20) .Index("idx\_name") .TypedKeys(null) ); … --- ## [Failed to configure JDBC Input Plugin with MongoDB](https://discuss.elastic.co/t/failed-to-configure-jdbc-input-plugin-with-mongodb/95254)
**Author:** [@alejandrobarrios07](https://discuss.elastic.co/u/alejandrobarrios07)\ **Replies:** 1\ **Last updated:** [August 13, 2017, 4:51am UTC](https://discuss.elastic.co/t/failed-to-configure-jdbc-input-plugin-with-mongodb/95254 "2017-08-13T04:51:20Z")
Hello, I’m trying to set up logstash with JDBC to consume data from MongoDB without success. I am testing with the java drivers for MongoDb (https://mongodb.github.io/mongo-java-driver/) in its different versions: mon… --- ## [Running single instance of Elasticsearch in production](https://discuss.elastic.co/t/running-single-instance-of-elasticsearch-in-production/35360)
**Author:** [@Den](https://discuss.elastic.co/u/Den)\ **Replies:** 1\ **Last updated:** [November 23, 2015, 10:02pm UTC](https://discuss.elastic.co/t/running-single-instance-of-elasticsearch-in-production/35360 "2015-11-23T22:02:25Z")
a couple of question related to production configuration: a) We have lots of stuff on our box including Elasticsearch and we don't want it to bring down other systems, so we decided to list direct memory usage for Lucene… --- ## [Ignore\_malformed broken for geo\_shape](https://discuss.elastic.co/t/ignore-malformed-broken-for-geo-shape/289771)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 3:48am UTC](https://discuss.elastic.co/t/ignore-malformed-broken-for-geo-shape/289771 "2021-11-22T03:48:49Z")
I have set mappings for my index as such: "geometry": { "type": "geo\_shape", "ignore\_malformed": true } When I Bulk POST documents, 1 fails due to malformed geometry. I have set the "ignore\_malformed" parameter… --- ## [KV filter don't split on field\_split\_pattern once](https://discuss.elastic.co/t/kv-filter-dont-split-on-field-split-pattern-once/165431)
**Author:** [@lyubava](https://discuss.elastic.co/u/lyubava)\ **Replies:** 4\ **Last updated:** [January 24, 2019, 7:43am UTC](https://discuss.elastic.co/t/kv-filter-dont-split-on-field-split-pattern-once/165431 "2019-01-24T07:43:58Z")
Hello, I am trying to use KV filter for my task. It works almost correctly, but i have one mistake in output result. Here is the input logs, which i want to analyze: sid: S-1-5-21-2526317496-1893015908-99665470-1000, b… --- ## [Timepicker Overrides Time Filter When Setting x-Axis Bounds in Date Histogram](https://discuss.elastic.co/t/timepicker-overrides-time-filter-when-setting-x-axis-bounds-in-date-histogram/155644)
**Author:** [@SpaceMoose](https://discuss.elastic.co/u/SpaceMoose)\ **Replies:** 4\ **Last updated:** [November 8, 2018, 12:10am UTC](https://discuss.elastic.co/t/timepicker-overrides-time-filter-when-setting-x-axis-bounds-in-date-histogram/155644 "2018-11-08T00:10:30Z")
Hello... I'm puzzled by how kibana's Vertical Bar visualization sets x-Axis bounds for a date histogram. Here's an image to illustrate my problem: From the image, you can tell that: The time picker is set to the L… --- ## [Multiple logstash instances getting data from one redis key?](https://discuss.elastic.co/t/multiple-logstash-instances-getting-data-from-one-redis-key/127970)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [April 16, 2018, 9:21am UTC](https://discuss.elastic.co/t/multiple-logstash-instances-getting-data-from-one-redis-key/127970 "2018-04-16T09:21:11Z")
Hi there, I changed my setting from filebeat -\> logstash to filebeat -\> redis -\> multiple logstash. Since we are still in migration from 5.1.2 to 6.2.3 we are running both stacks in parallel. No we noticed that we hav… --- ## [Why do not you have the .ps1 extension when decompressing the filebeat package](https://discuss.elastic.co/t/why-do-not-you-have-the-ps1-extension-when-decompressing-the-filebeat-package/85636)
**Author:** [@Fly](https://discuss.elastic.co/u/Fly)\ **Replies:** 4\ **Last updated:** [May 15, 2017, 1:11am UTC](https://discuss.elastic.co/t/why-do-not-you-have-the-ps1-extension-when-decompressing-the-filebeat-package/85636 "2017-05-15T01:11:27Z")
Hi everybody I want to install filebeat on Windows server 2012 R2 va windows 10 . But when I extracted the package, I did not have the .ps1 extension so the installation was not successful. I have tried many times. T… --- ## [Filebeat: how to archive data or reduce primary](https://discuss.elastic.co/t/filebeat-how-to-archive-data-or-reduce-primary/46558)
**Author:** [@timmorris83](https://discuss.elastic.co/u/timmorris83)\ **Replies:** 4\ **Last updated:** [April 8, 2016, 1:27pm UTC](https://discuss.elastic.co/t/filebeat-how-to-archive-data-or-reduce-primary/46558 "2016-04-08T13:27:47Z")
I'm brand new to this, so sorry if I use a term wrong. I have set up filebeat on one client to send IIS logs directly to elasticsearch. The problem is I am getting hammered with data, about 500mb in 30minutes. My IIS l… --- ## [Updating Inner Object using Transport Client Java](https://discuss.elastic.co/t/updating-inner-object-using-transport-client-java/40310)
**Author:** [@sreekar](https://discuss.elastic.co/u/sreekar)\ **Replies:** 4\ **Last updated:** [January 29, 2016, 9:56am UTC](https://discuss.elastic.co/t/updating-inner-object-using-transport-client-java/40310 "2016-01-29T09:56:04Z")
Hello - I'm trying to use Transport Client (java) to perform CRUD operations on ES document. I have two cases where I want to override whole inner object (meaning I want the existing inner object in ES to be overwritten)… --- ## [Inconsistent search results from local/primary](https://discuss.elastic.co/t/inconsistent-search-results-from-local-primary/5253)
**Author:** [@Paul\_Brown](https://discuss.elastic.co/u/Paul_Brown)\ **Replies:** 4\ **Last updated:** [August 26, 2011, 9:45pm UTC](https://discuss.elastic.co/t/inconsistent-search-results-from-local-primary/5253 "2011-08-26T21:45:32Z")
Hi, ES-folk -- Ran into something odd today. For one index with a small number of documents, I see 2 results if I query with preference=local and 3 results if I query with preference=primary. (Without a preference … --- ## [CSRF Protection in kibana 7.10.2](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [June 6, 2021, 2:23pm UTC](https://discuss.elastic.co/t/csrf-protection-in-kibana-7-10-2/274629 "2021-06-06T14:23:15Z")
Report tools report that dashboard URLs don't have csrf protection. When looked at the request and response, don't see a csrf token in the get/post request. Please help me to enable CSRF in Kibana UI so that the request… --- ## [Elastic Agent - State persistence in Docker](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352)
**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\ **Replies:** 2\ **Last updated:** [January 17, 2022, 8:49am UTC](https://discuss.elastic.co/t/elastic-agent-state-persistence-in-docker/294352 "2022-01-17T08:49:50Z")
Hi, I am looking for best practice guidance when running the Elastic Agent and integrations in Docker containers. I have no issues getting them running (the documentation needs a bit of love as there are some inconsisten… --- ## [Working with logstash with agentless](https://discuss.elastic.co/t/working-with-logstash-with-agentless/106418)
**Author:** [@Offer\_Sasson](https://discuss.elastic.co/u/Offer_Sasson)\ **Replies:** 2\ **Last updated:** [November 5, 2017, 9:20pm UTC](https://discuss.elastic.co/t/working-with-logstash-with-agentless/106418 "2017-11-05T21:20:35Z")
Hi, i am new to this.... I managed to install all beats agents and imported dashboards which were working great. Now i am asked to get the same data but with out installing any agent. this means that i have currently… --- ## [Timelion: Error: Expected: "$" @ character undefined](https://discuss.elastic.co/t/timelion-error-expected-character-undefined/93762)
**Author:** [@burkov](https://discuss.elastic.co/u/burkov)\ **Replies:** 2\ **Last updated:** [July 20, 2017, 9:14am UTC](https://discuss.elastic.co/t/timelion-error-expected-character-undefined/93762 "2017-07-20T09:14:49Z")
I have apache logs, loaded into Elasticsearch index, called access\_log, via Filebeat and Logstash. I'm trying to use Timelion to show a chart with 2 metrics: all user requests to my website requests to the search API … --- ## [\`simple\_query\_string\` unsupported field \`auto\_generate\_phrase\_queries\`](https://discuss.elastic.co/t/simple-query-string-unsupported-field-auto-generate-phrase-queries/85923)
**Author:** [@yandooo](https://discuss.elastic.co/u/yandooo)\ **Replies:** 2\ **Last updated:** [May 16, 2017, 1:13pm UTC](https://discuss.elastic.co/t/simple-query-string-unsupported-field-auto-generate-phrase-queries/85923 "2017-05-16T13:13:50Z")
I google around and didn't find answer. Any reasons why this property is unsupported in simple query string query? The next step for me could be to check actual lucene code if simple query string supports that parame… --- ## [Es2.3.3版本与hadoop结合有实际的例子吗？](https://discuss.elastic.co/t/es2-3-3-hadoop/53616)
**Author:** [@liverpoolilove](https://discuss.elastic.co/u/liverpoolilove)\ **Replies:** 2\ **Last updated:** [November 30, 2016, 2:37am UTC](https://discuss.elastic.co/t/es2-3-3-hadoop/53616 "2016-11-30T02:37:29Z")
es2.3.3版本与hadoop结合有实际的例子吗？ --- ## [Winlogbeat reports wrong event\_id on Windows Server 2003](https://discuss.elastic.co/t/winlogbeat-reports-wrong-event-id-on-windows-server-2003/44982)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 6:22am UTC](https://discuss.elastic.co/t/winlogbeat-reports-wrong-event-id-on-windows-server-2003/44982 "2016-03-22T06:22:14Z")
Hi everyone, I run winlogbeat 1.1 on windows server 2003 sp2 32bit OS, and configure winlogbeat.yml as follows: event\_logs: - name: Application ignore\_older: 3h - name: Security ignore\_older: … [Previous page](https://discuss.elastic.co/top.md?page=1279&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1281&per_page=50&period=all)