# Top

**URL:** https://discuss.elastic.co/top.md?page=1295&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1296

---

## [Kibana - access aggregation result](https://discuss.elastic.co/t/kibana-access-aggregation-result/212363)

<div class="topic-metadata">

**Author:** [@fgbogdan](https://discuss.elastic.co/u/fgbogdan)\
**Replies:** 8\
**Last updated:** [January 28, 2020, 3:05pm UTC](https://discuss.elastic.co/t/kibana-access-aggregation-result/212363 "2020-01-28T15:05:20Z")

</div>

i have an array of objects in elastic index and I need to display that into a Kibana visualization table. Example - Parent-name, \[ {Child-name, Child-age} \] (the row is the parent) and using Term aggregation for Parent-…

---

## [Execute actions in a Watcher independently based on result payload](https://discuss.elastic.co/t/execute-actions-in-a-watcher-independently-based-on-result-payload/152917)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 3\
**Last updated:** [October 19, 2018, 9:05am UTC](https://discuss.elastic.co/t/execute-actions-in-a-watcher-independently-based-on-result-payload/152917 "2018-10-19T09:05:02Z")

</div>

Hi, I am trying to execute 2 actions, one when the condition is always met, the other is when condition is met and custom index does not have the data I am looking for. Is there a way to do it in the same Watcher or bot…

---

## [How to cancel/stop current long running search request in Elasticsearch?](https://discuss.elastic.co/t/how-to-cancel-stop-current-long-running-search-request-in-elasticsearch/146101)

<div class="topic-metadata">

**Author:** [@sanjaykanani](https://discuss.elastic.co/u/sanjaykanani)\
**Replies:** 3\
**Last updated:** [August 27, 2018, 4:34am UTC](https://discuss.elastic.co/t/how-to-cancel-stop-current-long-running-search-request-in-elasticsearch/146101 "2018-08-27T04:34:42Z")

</div>

My index has almost 50 million records in it and sometime It will take to much time to execute with a search request So can we cancel current running search request? { query:{ search request: { filter criteria:{ /…

---

## [Remove part of field name in Logstash](https://discuss.elastic.co/t/remove-part-of-field-name-in-logstash/111062)

<div class="topic-metadata">

**Author:** [@gasmi](https://discuss.elastic.co/u/gasmi)\
**Replies:** 3\
**Last updated:** [December 12, 2017, 6:32am UTC](https://discuss.elastic.co/t/remove-part-of-field-name-in-logstash/111062 "2017-12-12T06:32:06Z")

</div>

I am using Logstash 6.0.0 I am receiving metrics with different application Ids. How can I delete the application Id in the field name? application\_1512057801087\_0235.driver.BlockManager.memory.maxMem\_MB =\> driver.Bl…

---

## [Create a 'Write Once' Date field that is populated on insert and never updated](https://discuss.elastic.co/t/create-a-write-once-date-field-that-is-populated-on-insert-and-never-updated/62753)

<div class="topic-metadata">

**Author:** [@markmcgookin](https://discuss.elastic.co/u/markmcgookin)\
**Replies:** 3\
**Last updated:** [October 12, 2016, 2:52pm UTC](https://discuss.elastic.co/t/create-a-write-once-date-field-that-is-populated-on-insert-and-never-updated/62753 "2016-10-12T14:52:00Z")

</div>

As the title says, I want to create a field in my index for 'Created'. It is to be a datetime field recording when the row is inserted. However, as I am using the builk insert API and the nature of the data, I will ess…

---

## [Packetbeat IPv6 support](https://discuss.elastic.co/t/packetbeat-ipv6-support/54941)

<div class="topic-metadata">

**Author:** [@raboof](https://discuss.elastic.co/u/raboof)\
**Replies:** 3\
**Last updated:** [July 8, 2016, 11:10am UTC](https://discuss.elastic.co/t/packetbeat-ipv6-support/54941 "2016-07-08T11:10:41Z")

</div>

It'd be nice to be able to support IPv6 addresses in packetbeat. https://github.com/elastic/beats/blob/master/packetbeat/procs/procs.go currently stores IP addresses in an uint32, where IPv6 addresses are 128 bits. W…

---

## [String inteprolation in logstash data\_stream fields](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556)

<div class="topic-metadata">

**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\
**Replies:** 6\
**Last updated:** [October 26, 2022, 9:42pm UTC](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556 "2022-10-26T21:42:05Z")

</div>

How can I write to different data streams for different kinesis input? We are trying to add fields in the inputs and use string interpolation in the outputs to no avail. We had been using index+ilm\_enabled in logstash, …

---

## [Features in filebeat apache2 licence](https://discuss.elastic.co/t/features-in-filebeat-apache2-licence/139888)

<div class="topic-metadata">

**Author:** [@Akram1](https://discuss.elastic.co/u/Akram1)\
**Replies:** 6\
**Last updated:** [July 13, 2018, 7:27am UTC](https://discuss.elastic.co/t/features-in-filebeat-apache2-licence/139888 "2018-07-13T07:27:06Z")

</div>

Hi, I am hoping to find the list of features in apache2 licence available for following: FileBeat ElasticSearch Kibana Logstash MetricBeat Any kind of help will be much appreciated. Thanks

---

## [elasticSearch 6.2 Query inside parent\_id](https://discuss.elastic.co/t/elasticsearch-6-2-query-inside-parent-id/134025)

<div class="topic-metadata">

**Author:** [@neelam.mamtani](https://discuss.elastic.co/u/neelam.mamtani)\
**Replies:** 6\
**Last updated:** [June 19, 2018, 11:43am UTC](https://discuss.elastic.co/t/elasticsearch-6-2-query-inside-parent-id/134025 "2018-06-19T11:43:50Z")

</div>

Can anyone help how can I specify query inside parent\_id query to filter out children who has match in their parent docs. For e.g. This is my parent // "JOIN\_FIELD": "group", "GROUP\_MEMBER": \[ "1", "2", "3", "4…

---

## [Elasticsearch restart performance](https://discuss.elastic.co/t/elasticsearch-restart-performance/111217)

<div class="topic-metadata">

**Author:** [@junkainiu](https://discuss.elastic.co/u/junkainiu)\
**Replies:** 6\
**Last updated:** [December 12, 2017, 3:18am UTC](https://discuss.elastic.co/t/elasticsearch-restart-performance/111217 "2017-12-12T03:18:18Z")

</div>

Hi All, We are using a one node cluster elasticsearch(version 5.3.0) in a 96RAM 24cores centos7 machine. The cluster holds about 1TB time-based documents in about 30 Indexes. If I restart the cluster using systemctl res…

---

## [Reindexing a large collection into time based indices](https://discuss.elastic.co/t/reindexing-a-large-collection-into-time-based-indices/62016)

<div class="topic-metadata">

**Author:** [@yoitsro](https://discuss.elastic.co/u/yoitsro)\
**Replies:** 6\
**Last updated:** [October 4, 2016, 8:57am UTC](https://discuss.elastic.co/t/reindexing-a-large-collection-into-time-based-indices/62016 "2016-10-04T08:57:40Z")

</div>

Assuming I have a 30 shard index with over 200 million documents in it and I wanted to split these out into a time based index, how would I do this without affecting response times? The other issue is storage space, but …

---

## [Performance tuning steps of Elasticsearch cluster](https://discuss.elastic.co/t/performance-tuning-steps-of-elasticsearch-cluster/37732)

<div class="topic-metadata">

**Author:** [@justnj](https://discuss.elastic.co/u/justnj)\
**Replies:** 6\
**Last updated:** [December 22, 2015, 6:56am UTC](https://discuss.elastic.co/t/performance-tuning-steps-of-elasticsearch-cluster/37732 "2015-12-22T06:56:39Z")

</div>

performance tuning steps of Elasticsearch cluster.. Please share the commands and analysis details which can be used as a template Please do not provide link elastic.co

---

## [Dense vector field type](https://discuss.elastic.co/t/dense-vector-field-type/302548)

<div class="topic-metadata">

**Author:** [@Anand\_p\_s](https://discuss.elastic.co/u/Anand_p_s)\
**Replies:** 4\
**Last updated:** [April 20, 2022, 6:06am UTC](https://discuss.elastic.co/t/dense-vector-field-type/302548 "2022-04-20T06:06:51Z")

</div>

How can apply dense vector size(dims) to 2048 "mappings": { "properties": { "denseVector": { "type": "dense\_vector", "index": false, "dims":2048 } } } And i got The number of dimensions for field \[denseVector\]…

---

## [Unable start elasticsearch](https://discuss.elastic.co/t/unable-start-elasticsearch/290940)

<div class="topic-metadata">

**Author:** [@karthick\_kn](https://discuss.elastic.co/u/karthick_kn)\
**Replies:** 4\
**Last updated:** [December 6, 2021, 5:57am UTC](https://discuss.elastic.co/t/unable-start-elasticsearch/290940 "2021-12-06T05:57:09Z")

</div>

here I attached my log sudo tail -f /var/log/elasticsearch/my-application.log \[2021-12-03T17:10:26,220\]\[INFO \]\[o.e.x.w.WatcherService \] \[node-1\] stopping watch service, reason \[shutdown initiated\] \[2021-12-03T17:10:2…

---

## [Elasticsearch plugin-install don't use the proper Java version](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269)

<div class="topic-metadata">

**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\
**Replies:** 4\
**Last updated:** [November 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269 "2021-11-22T12:50:28Z")

</div>

Hello, I try to install the OpenNlp plugin on my local machine with the command bin/elasticsearch-plugin install https://github.com/spinscale/elasticsearch-ingest-opennlp/releases/download/7.15.2.1/ingest-opennlp-7.15.…

---

## [Group records by geo-location on Maps](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759)

<div class="topic-metadata">

**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\
**Replies:** 1\
**Last updated:** [April 21, 2021, 2:05am UTC](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759 "2021-04-21T02:05:11Z")

</div>

I'm wondering if it is possible to group all records that have the same geo-location on the map? For instance I have 10 records with geo\_location { "lon": "-75.9247", "lat": "44.5299" } but they show up as 10 separate do…

---

## [Filebeat mapping bug with json enabled?](https://discuss.elastic.co/t/filebeat-mapping-bug-with-json-enabled/186642)

<div class="topic-metadata">

**Author:** [@daniell](https://discuss.elastic.co/u/daniell)\
**Replies:** 4\
**Last updated:** [June 20, 2019, 10:08am UTC](https://discuss.elastic.co/t/filebeat-mapping-bug-with-json-enabled/186642 "2019-06-20T10:08:23Z")

</div>

Hi All, Let's say I have app with such output line: "{'message':'example output from my app'}", when I use filebeat without json parsing giving "my app" in kibana is enough to find it ... but with json parsing enabled…

---

## [Getting error when try to create embedded elasticseach server. org.elasticsearch.common.settings.Settings.settingsBuilder()Lorg/elasticsearch/common/settings/Settings$Builder;](https://discuss.elastic.co/t/getting-error-when-try-to-create-embedded-elasticseach-server-org-elasticsearch-common-settings-settings-settingsbuilder-lorg-elasticsearch-common-settings-settings-builder/114102)

<div class="topic-metadata">

**Author:** [@mansoor67890](https://discuss.elastic.co/u/mansoor67890)\
**Replies:** 4\
**Last updated:** [January 5, 2018, 4:37am UTC](https://discuss.elastic.co/t/getting-error-when-try-to-create-embedded-elasticseach-server-org-elasticsearch-common-settings-settings-settingsbuilder-lorg-elasticsearch-common-settings-settings-builder/114102 "2018-01-05T04:37:21Z")

</div>

Here is my pom: org.springframework.boot spring-boot-starter-parent 1.5.8.RELEASE \<properties\> \<!-- \<org.springframework-version\>4.2.5.RELEASE\</org.springframework-version\> \<org.aspectj-version\>1.6.10\</org.as…

---

## [Read slow for large files in S3?](https://discuss.elastic.co/t/read-slow-for-large-files-in-s3/61551)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 4\
**Last updated:** [September 29, 2016, 4:59pm UTC](https://discuss.elastic.co/t/read-slow-for-large-files-in-s3/61551 "2016-09-29T16:59:06Z")

</div>

I have two files in a folder, one small 300kb, and one large, 2G. Logstash only reads 300kb one. Is it right? Shall i wait more time?

---

## [Searching of Indexed Nested Data takes very long to read each nested object](https://discuss.elastic.co/t/searching-of-indexed-nested-data-takes-very-long-to-read-each-nested-object/59621)

<div class="topic-metadata">

**Author:** [@Jumana](https://discuss.elastic.co/u/Jumana)\
**Replies:** 4\
**Last updated:** [September 2, 2016, 1:55pm UTC](https://discuss.elastic.co/t/searching-of-indexed-nested-data-takes-very-long-to-read-each-nested-object/59621 "2016-09-02T13:55:37Z")

</div>

I am Ingesting data as Nested Objects using type=nested and include\_in\_parent=true. I am ingesting event objects where each event object has 3000 nested objects i.e. 3000 nested documents. I insert several of these obje…

---

## [Collect logs from Amazon CloudWatch with Elastic Agent](https://discuss.elastic.co/t/collect-logs-from-amazon-cloudwatch-with-elastic-agent/302648)

<div class="topic-metadata">

**Author:** [@spo](https://discuss.elastic.co/u/spo)\
**Replies:** 2\
**Last updated:** [April 18, 2022, 9:59pm UTC](https://discuss.elastic.co/t/collect-logs-from-amazon-cloudwatch-with-elastic-agent/302648 "2022-04-18T21:59:39Z")

</div>

Hi I am trying to pull cloudwatch logs with elastic agent. I have elastic agent running on a windows server. It has the default policy attached to it. To the default policy I have added AWS integration , iis-logs integ…

---

## [Netflow protocol version 0 not supported](https://discuss.elastic.co/t/netflow-protocol-version-0-not-supported/214971)

<div class="topic-metadata">

**Author:** [@w33ha-zxc](https://discuss.elastic.co/u/w33ha-zxc)\
**Replies:** 2\
**Last updated:** [January 27, 2020, 12:51pm UTC](https://discuss.elastic.co/t/netflow-protocol-version-0-not-supported/214971 "2020-01-27T12:51:48Z")

</div>

Have been trying to ingest Netflow Data from a Fortigate Firewall through Filebeat, but upon running filebeat -e gets me to the following warning - netflow/input.go:240 Error parsing NetFlow packet of length 220 from…

---

## [IIS logs -Provided Grok expressions do not match field value](https://discuss.elastic.co/t/iis-logs-provided-grok-expressions-do-not-match-field-value/139341)

<div class="topic-metadata">

**Author:** [@neo](https://discuss.elastic.co/u/neo)\
**Replies:** 2\
**Last updated:** [July 11, 2018, 8:19am UTC](https://discuss.elastic.co/t/iis-logs-provided-grok-expressions-do-not-match-field-value/139341 "2018-07-11T08:19:04Z")

</div>

Hi,i make an module for my iis log,i use the default filebeat grok for IIS to parse the message, and I get an error like "Provided Grok expressions do not match field value:" one example of my message log is 2018-07-…

---

## [Parsing date - day changes number of digits](https://discuss.elastic.co/t/parsing-date-day-changes-number-of-digits/62303)

<div class="topic-metadata">

**Author:** [@Roberto\_Iglesias](https://discuss.elastic.co/u/Roberto_Iglesias)\
**Replies:** 2\
**Last updated:** [October 7, 2016, 1:19pm UTC](https://discuss.elastic.co/t/parsing-date-day-changes-number-of-digits/62303 "2016-10-07T13:19:53Z")

</div>

Hi and thanks for reading I'm building my logstash filter and i just realized that the number of digits in day space changes. For example: Oct 2 13:13:13 #two spaces between month and day Oct 12 22:22:22 #one space be…

---

## [Need a date parser for my custom date fielsd](https://discuss.elastic.co/t/need-a-date-parser-for-my-custom-date-fielsd/39390)

<div class="topic-metadata">

**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\
**Replies:** 2\
**Last updated:** [January 18, 2016, 6:54pm UTC](https://discuss.elastic.co/t/need-a-date-parser-for-my-custom-date-fielsd/39390 "2016-01-18T18:54:05Z")

</div>

Hi , I have a custom date-time field like "January 14th 2016, 00:00:00.000". I want to parse it into timestamp field in logstash. Can anybody provide me the pattern that can be used as a pattern to match in a date filte…

---

## [30 days trial has been expired ,How I can reinstall another 30 days trial?](https://discuss.elastic.co/t/30-days-trial-has-been-expired-how-i-can-reinstall-another-30-days-trial/26704)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [August 3, 2015, 7:19am UTC](https://discuss.elastic.co/t/30-days-trial-has-been-expired-how-i-can-reinstall-another-30-days-trial/26704 "2015-08-03T07:19:05Z")

</div>

Hi Experts, I am in learning phase of shield , so I installed shield 30 days trial version , yesterday my license got expired . So I removed the license and shield from my local machine . Now when I reinstall the shiel…

---

## [Logstash is indexing the last line of my csv file in elasticsearch](https://discuss.elastic.co/t/logstash-is-indexing-the-last-line-of-my-csv-file-in-elasticsearch/2584)

<div class="topic-metadata">

**Author:** [@Hamza\_Chtioui](https://discuss.elastic.co/u/Hamza_Chtioui)\
**Replies:** 2\
**Last updated:** [June 12, 2015, 4:28pm UTC](https://discuss.elastic.co/t/logstash-is-indexing-the-last-line-of-my-csv-file-in-elasticsearch/2584 "2015-06-12T16:28:22Z")

</div>

Holà, I'm new in Elasticsearch, today i'm trying to index data from a csv file. I learn from the net that i can use Logstash to do this.. this is my conf file: input { file { path =\> "C:\\plus\\csv\_…

---

## [Starting kibana failed](https://discuss.elastic.co/t/starting-kibana-failed/269282)

<div class="topic-metadata">

**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 4:32am UTC](https://discuss.elastic.co/t/starting-kibana-failed/269282 "2021-04-06T04:32:17Z")

</div>

Hello, after power-off, I get problems with kibana start. elasticsearch plus kibana. I use version 7.12.0 for both. I have no problem with elasticsearch. The log showing: -sh-4.2$ log \[19:00:06.537\] \[info\]\[plug…

---

## [Using output Kafka Codec Avro with KafkaAvroSerializer (schema\_registry\_url issue)](https://discuss.elastic.co/t/using-output-kafka-codec-avro-with-kafkaavroserializer-schema-registry-url-issue/245953)

<div class="topic-metadata">

**Author:** [@belguith\_chachia](https://discuss.elastic.co/u/belguith_chachia)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 9:19pm UTC](https://discuss.elastic.co/t/using-output-kafka-codec-avro-with-kafkaavroserializer-schema-registry-url-issue/245953 "2020-08-21T21:19:54Z")

</div>

Hi guys, Our purpose is to post messages to event bus Kafka using Avro. We added all required jars libraries in LS\_HOME/vendor/jruby/lib/ And Logstash does recognize KafkaAvroSerializer and all other required classes…

---

## [JDBC Driver issues](https://discuss.elastic.co/t/jdbc-driver-issues/197732)

<div class="topic-metadata">

**Author:** [@ubi](https://discuss.elastic.co/u/ubi)\
**Replies:** 1\
**Last updated:** [September 3, 2019, 1:29pm UTC](https://discuss.elastic.co/t/jdbc-driver-issues/197732 "2019-09-03T13:29:53Z")

</div>

I'm currently facing issues while using the Elastic Cloud in conjunction with the latest JDBC Driver(7.3.1). Dispatching queries works, however, sometimes when sending a high amount of queries simultaneously, i'll rece…

---

## [Can logstash listen directly from JMS queue using logstash-input-jms plugin?](https://discuss.elastic.co/t/can-logstash-listen-directly-from-jms-queue-using-logstash-input-jms-plugin/76543)

<div class="topic-metadata">

**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\
**Replies:** 1\
**Last updated:** [February 27, 2017, 6:52am UTC](https://discuss.elastic.co/t/can-logstash-listen-directly-from-jms-queue-using-logstash-input-jms-plugin/76543 "2017-02-27T06:52:57Z")

</div>

Hello, I'm studying a little bit about Beats, Logstash and ElasticSearch and which features of each one I have to use to create a solution. I was thinking that I should use Beats to listen a JMS queue and then send thi…

---

## [Failed to get node info by native transport of clojure-elasticsearch](https://discuss.elastic.co/t/failed-to-get-node-info-by-native-transport-of-clojure-elasticsearch/67692)

<div class="topic-metadata">

**Author:** [@ShaolongTan](https://discuss.elastic.co/u/ShaolongTan)\
**Replies:** 1\
**Last updated:** [December 8, 2016, 2:37am UTC](https://discuss.elastic.co/t/failed-to-get-node-info-by-native-transport-of-clojure-elasticsearch/67692 "2016-12-08T02:37:03Z")

</div>

Hi Everybody, I setup a cluster of elaticsearch that it includes three nodes. Elaticsearch version is 2.4.1. The elaticsearch configuration of one node looks like as: cluster.name: es\_cluster node.name: es\_node1 path…

---

## [Export Pdf - some fonts look like boxes](https://discuss.elastic.co/t/export-pdf-some-fonts-look-like-boxes/57053)

<div class="topic-metadata">

**Author:** [@Chillmen](https://discuss.elastic.co/u/Chillmen)\
**Replies:** 1\
**Last updated:** [October 14, 2016, 4:45pm UTC](https://discuss.elastic.co/t/export-pdf-some-fonts-look-like-boxes/57053 "2016-10-14T16:45:54Z")

</div>

HI, I'm new to Xpack, I was trying to export a visualization to pdf and got the attached. at first the export wouldn't run but i installed libfontconfig. I'm running CentOS 7. thanks all

---

## [Defining filebeat prospector paths with regex?](https://discuss.elastic.co/t/defining-filebeat-prospector-paths-with-regex/47310)

<div class="topic-metadata">

**Author:** [@RobertC](https://discuss.elastic.co/u/RobertC)\
**Replies:** 1\
**Last updated:** [April 14, 2016, 12:03pm UTC](https://discuss.elastic.co/t/defining-filebeat-prospector-paths-with-regex/47310 "2016-04-14T12:03:51Z")

</div>

Hi, I'm using filebeat 1.2.1 and very happy for the new environment variable feature! Thank you. Another thing that would be very helpful if we could define the prospector paths using regular expressions? That would …

---

## [Reindex throttled after a few hours](https://discuss.elastic.co/t/reindex-throttled-after-a-few-hours/355059)

<div class="topic-metadata">

**Author:** [@elijah\_voigt](https://discuss.elastic.co/u/elijah_voigt)\
**Replies:** 3\
**Last updated:** [March 11, 2024, 4:45pm UTC](https://discuss.elastic.co/t/reindex-throttled-after-a-few-hours/355059 "2024-03-11T16:45:42Z")

</div>

I am on my 3rd attempt at re-indexing an index. The re-index task reliably demonstrates the following failure mode: The re-index task starts with high throughput, processing ~12,000 documents per second. After ~12-24 h…

---

## [Enable TLS between ES and Kibana on an existing cluster](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770)

<div class="topic-metadata">

**Author:** [@xcompass](https://discuss.elastic.co/u/xcompass)\
**Replies:** 3\
**Last updated:** [March 10, 2021, 8:20pm UTC](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770 "2021-03-10T20:20:06Z")

</div>

Hi, I have a running ECK cluster (ES+Kibana) provisioned with http.tls.selfSignedCertificate.disabled: true. Now, I would like to try out alerts, which requires TLS to be enabled. I tried to change the above settings t…

---

## [Kibana iframe dark mode](https://discuss.elastic.co/t/kibana-iframe-dark-mode/188559)

<div class="topic-metadata">

**Author:** [@Quinten\_Holmes](https://discuss.elastic.co/u/Quinten_Holmes)\
**Replies:** 3\
**Last updated:** [July 15, 2019, 5:23pm UTC](https://discuss.elastic.co/t/kibana-iframe-dark-mode/188559 "2019-07-15T17:23:23Z")

</div>

I am using Kibana to create some graphs and, using snapshot iframes, display them on my page. The minor problem I am running into is the page has a dark theme and the Kibana visualization is stark white. Is there a way …

---

## [Elasticsearch memlock limits in docker service/swarm env](https://discuss.elastic.co/t/elasticsearch-memlock-limits-in-docker-service-swarm-env/121715)

<div class="topic-metadata">

**Author:** [@pcrm](https://discuss.elastic.co/u/pcrm)\
**Replies:** 0\
**Last updated:** [February 27, 2018, 6:10pm UTC](https://discuss.elastic.co/t/elasticsearch-memlock-limits-in-docker-service-swarm-env/121715 "2018-02-27T18:10:37Z")

</div>

Hi, how can I properly set the memlock limits when I run elastic as a docker service, without building custom docker image? p.s. it works with compose or as standalone container because of ulimits settings.. Thank you …

---

## [How to index json data into elasticsearch](https://discuss.elastic.co/t/how-to-index-json-data-into-elasticsearch/107035)

<div class="topic-metadata">

**Author:** [@dhanunjayavarma](https://discuss.elastic.co/u/dhanunjayavarma)\
**Replies:** 3\
**Last updated:** [November 10, 2017, 5:54am UTC](https://discuss.elastic.co/t/how-to-index-json-data-into-elasticsearch/107035 "2017-11-10T05:54:34Z")

</div>

let say I have json file with this type of data { "\_id":1, "cid":3067, "name":"Tech Mahindra", "type":\[ "Information Technology and Services" \], "empSize":99704, "empSizeInfo":\[ { "on":1507141800, "size":9970…

---

## [Filebeat rotation issue (windows)](https://discuss.elastic.co/t/filebeat-rotation-issue-windows/61671)

<div class="topic-metadata">

**Author:** [@h0nIg](https://discuss.elastic.co/u/h0nIg)\
**Replies:** 3\
**Last updated:** [October 11, 2016, 12:04pm UTC](https://discuss.elastic.co/t/filebeat-rotation-issue-windows/61671 "2016-10-11T12:04:15Z")

</div>

Hey, i'm experiencing an rotation issue on my windows machines. machine: Windows 2012 R2 version: 1.3.1 configurations: global config: https://nopaste.me/view/9ef7645a prospector config: https://nopaste.me/view/cf17461…

---

## [Elasticsearch-carrot2 JAVA API call](https://discuss.elastic.co/t/elasticsearch-carrot2-java-api-call/16166)

<div class="topic-metadata">

**Author:** [@Petr\_Jansky](https://discuss.elastic.co/u/Petr_Jansky)\
**Replies:** 3\
**Last updated:** [March 5, 2014, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-carrot2-java-api-call/16166 "2014-03-05T13:12:55Z")

</div>

Hello, I use elasticsearch-carrot2and I was not able to find how to get cluster result using JAVA API e.g. for GET \_search\_with\_clusters?pretty=true { "query" : { "bool": { "must": \[ { "term":…

---

## [Run Curator as a Windows Service](https://discuss.elastic.co/t/run-curator-as-a-windows-service/87142)

<div class="topic-metadata">

**Author:** [@kevinc1029](https://discuss.elastic.co/u/kevinc1029)\
**Replies:** 1\
**Last updated:** [May 25, 2017, 3:08pm UTC](https://discuss.elastic.co/t/run-curator-as-a-windows-service/87142 "2017-05-25T15:08:43Z")

</div>

I've a Windows VM, is it possible to run curator as a windows service so it runs by itself? Or is cron the only way to do it? What I want to achieve is to have curator constantly monitor my elasticsearch and automatica…

---

## [Kibana Ingest pipeline Convert String to Date?](https://discuss.elastic.co/t/kibana-ingest-pipeline-convert-string-to-date/313836)

<div class="topic-metadata">

**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\
**Replies:** 5\
**Last updated:** [September 8, 2022, 2:19am UTC](https://discuss.elastic.co/t/kibana-ingest-pipeline-convert-string-to-date/313836 "2022-09-08T02:19:44Z")

</div>

Installed elastic-agent on the server and Collect Custom Log Data I was Create a pipeline in Kibana (Stack Management -\> Ingest pipelines) And "Message" Field -\> Split Data (Success) How can I Convert String F…

---

## [Elastic APM exception when instrumenting Java CXF application](https://discuss.elastic.co/t/elastic-apm-exception-when-instrumenting-java-cxf-application/247949)

<div class="topic-metadata">

**Author:** [@priya.narasimhan](https://discuss.elastic.co/u/priya.narasimhan)\
**Replies:** 5\
**Last updated:** [September 22, 2020, 10:41am UTC](https://discuss.elastic.co/t/elastic-apm-exception-when-instrumenting-java-cxf-application/247949 "2020-09-22T10:41:15Z")

</div>

Elasticsearch version: 7.6 APM Server version: 8.0.0 APM Agent language and version: Java agent version: 1.17.0 Description of the problem including expected versus actual behavior. Please include screenshots (if r…

---

## [KIbana App (Within Docker Container) Is Five Minutes Behind System Clock?](https://discuss.elastic.co/t/kibana-app-within-docker-container-is-five-minutes-behind-system-clock/207612)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 5\
**Last updated:** [November 23, 2019, 4:46am UTC](https://discuss.elastic.co/t/kibana-app-within-docker-container-is-five-minutes-behind-system-clock/207612 "2019-11-23T04:46:14Z")

</div>

Hi Kibana Masters, I recently spun up a Docker container ELK pipeline that ends with Elasticsearch 7.4.0 and Kibana 7.4.0 containers. Everything works great… except there is a lag of about five minutes between when dat…

---

## [Logstash unable to map field to es](https://discuss.elastic.co/t/logstash-unable-to-map-field-to-es/143599)

<div class="topic-metadata">

**Author:** [@pooch](https://discuss.elastic.co/u/pooch)\
**Replies:** 5\
**Last updated:** [August 9, 2018, 9:10pm UTC](https://discuss.elastic.co/t/logstash-unable-to-map-field-to-es/143599 "2018-08-09T21:10:19Z")

</div>

I am using a multiline config in filebeat to send logs as one line, not sure if that is the cause of this. I am currently getting this error when indexing certain log files. response=\>{"index"=\>{"\_index"=\>"filebeat-201…

---

## [Any way of displaying JPEG + stats on a visualization/dashboard?](https://discuss.elastic.co/t/any-way-of-displaying-jpeg-stats-on-a-visualization-dashboard/55953)

<div class="topic-metadata">

**Author:** [@Mick\_Mahoney](https://discuss.elastic.co/u/Mick_Mahoney)\
**Replies:** 5\
**Last updated:** [July 20, 2016, 10:14am UTC](https://discuss.elastic.co/t/any-way-of-displaying-jpeg-stats-on-a-visualization-dashboard/55953 "2016-07-20T10:14:33Z")

</div>

What I would like to do is display a JPEG picture of say a network, and display stats - either on top of the image, or in a table at the side. Are either of these options possible please ? Has anyone done anything s…

---

## [Can't parse haproxy logs without IP address in Grok](https://discuss.elastic.co/t/cant-parse-haproxy-logs-without-ip-address-in-grok/273654)

<div class="topic-metadata">

**Author:** [@maar](https://discuss.elastic.co/u/maar)\
**Replies:** 7\
**Last updated:** [June 9, 2021, 2:35pm UTC](https://discuss.elastic.co/t/cant-parse-haproxy-logs-without-ip-address-in-grok/273654 "2021-06-09T14:35:40Z")

</div>

Grok is parsing successfully when Haproxy gives a log - from var/log/haproxy.log - similar to: May 21 08:25:56 ha haproxy\[5089\]: 12.3.45.67:89012 \[21/May/2021:08:25:56.055\] www-https~ wss/wssnode website.domain.com 1/1/…

---

## [Winlogbeat Can create diiferent indices](https://discuss.elastic.co/t/winlogbeat-can-create-diiferent-indices/171895)

<div class="topic-metadata">

**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Replies:** 7\
**Last updated:** [March 15, 2019, 2:10pm UTC](https://discuss.elastic.co/t/winlogbeat-can-create-diiferent-indices/171895 "2019-03-15T14:10:45Z")

</div>

instead of having Winlogbeat create daily indices We can create separate index for logs from different client(Different machine) to one elasticsearch server

---

## [JEST Client for Elastic Search 5.6 or Java Rest client for ES 5.6](https://discuss.elastic.co/t/jest-client-for-elastic-search-5-6-or-java-rest-client-for-es-5-6/102910)

<div class="topic-metadata">

**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\
**Replies:** 1\
**Last updated:** [October 5, 2017, 11:54pm UTC](https://discuss.elastic.co/t/jest-client-for-elastic-search-5-6-or-java-rest-client-for-es-5-6/102910 "2017-10-05T23:54:36Z")

</div>

What would be the compelling reason to move from JEST Client to using Java Rest client for ES 5.6 ? The way I see it JEST client offers a better wrapper for admin calls to manage index templates. Thanks, Kasi

[Previous page](https://discuss.elastic.co/top.md?page=1294&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1296&per_page=50&period=all)