# Top

**URL:** https://discuss.elastic.co/top.md?page=1298&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1299

---

## [Problem accessing file from base URL in Kibana 7.8](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 5\
**Last updated:** [August 13, 2020, 4:28pm UTC](https://discuss.elastic.co/t/problem-accessing-file-from-base-url-in-kibana-7-8/244784 "2020-08-13T16:28:28Z")

</div>

I'm converting a plugin from Kibana 7.5 to 7.8. In my code I grab an .xlsx file that is stored in a data directory in the public folder of my plugin. This works in 7.5 but does not work in 7.8. I'm grabbing this file: /…

---

## [Get single figure shows in Timelion using simple visualization](https://discuss.elastic.co/t/get-single-figure-shows-in-timelion-using-simple-visualization/240370)

<div class="topic-metadata">

**Author:** [@isharamadhawa](https://discuss.elastic.co/u/isharamadhawa)\
**Replies:** 5\
**Last updated:** [July 13, 2020, 4:17pm UTC](https://discuss.elastic.co/t/get-single-figure-shows-in-timelion-using-simple-visualization/240370 "2020-07-13T16:17:40Z")

</div>

I have created a visualization to obtain average TPS for my application using Timelion. Here you can see some straight lines that indicates average TPS for given time period. Timelion expression is as follows: .es(i…

---

## [Change Kibana UI](https://discuss.elastic.co/t/change-kibana-ui/77439)

<div class="topic-metadata">

**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\
**Replies:** 5\
**Last updated:** [March 10, 2017, 4:10pm UTC](https://discuss.elastic.co/t/change-kibana-ui/77439 "2017-03-10T16:10:16Z")

</div>

Hi All, I am using elasticsearch5.1.1 and kibana5.1.1 I have to add one drop-down in Discover page. is this possible? Please guide me . Thanks, Sundar

---

## [Restart Elastic Agent from Fleet Server](https://discuss.elastic.co/t/restart-elastic-agent-from-fleet-server/357946)

<div class="topic-metadata">

**Author:** [@Ather\_Imam\_Danish](https://discuss.elastic.co/u/Ather_Imam_Danish)\
**Replies:** 4\
**Last updated:** [April 23, 2024, 1:45am UTC](https://discuss.elastic.co/t/restart-elastic-agent-from-fleet-server/357946 "2024-04-23T01:45:11Z")

</div>

I want to restart Elastic Agent from Fleet server, because many time elastic agent gets in offline state and every time I restart it manually,

---

## [Elastic Agent broken in Kubernetes Integration with Fleet: FailedMount](https://discuss.elastic.co/t/elastic-agent-broken-in-kubernetes-integration-with-fleet-failedmount/337300)

<div class="topic-metadata">

**Author:** [@rjh](https://discuss.elastic.co/u/rjh)\
**Replies:** 4\
**Last updated:** [July 3, 2023, 3:21pm UTC](https://discuss.elastic.co/t/elastic-agent-broken-in-kubernetes-integration-with-fleet-failedmount/337300 "2023-07-03T15:21:03Z")

</div>

I just started my trial to evaluate Elastic as the hosted platform for our Kubernetes observability. Fresh from signing in for the first time, I am following the Kubernetes integration setup flow, which starts by having…

---

## [co.elastic.apm.agent.bci.IndyBootstrap - null (ClosedByInterruptException)](https://discuss.elastic.co/t/co-elastic-apm-agent-bci-indybootstrap-null-closedbyinterruptexception/309095)

<div class="topic-metadata">

**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\
**Replies:** 4\
**Last updated:** [August 31, 2022, 12:46pm UTC](https://discuss.elastic.co/t/co-elastic-apm-agent-bci-indybootstrap-null-closedbyinterruptexception/309095 "2022-08-31T12:46:39Z")

</div>

I am using SLF4J for logging in a multithreaded application. In one instance, I am interrupting a Thread (using Thread.interrupt()). When this Thread is then using SLF4J to log an error, I receive the following exception…

---

## [Elasticsearch v8 Java API client boost Query](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410)

<div class="topic-metadata">

**Author:** [@ijaxahmed](https://discuss.elastic.co/u/ijaxahmed)\
**Replies:** 4\
**Last updated:** [August 19, 2022, 1:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v8-java-api-client-boost-query/312410 "2022-08-19T13:48:40Z")

</div>

I am using new Java API client . I have a method in my code which returns Query of multiple types e.g bool, range public Query createQuery(String field, String value) { if(something) return Query.of(query-\>query.ra…

---

## [How to run multiple instances in docker container?](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 4\
**Last updated:** [January 17, 2022, 10:18am UTC](https://discuss.elastic.co/t/how-to-run-multiple-instances-in-docker-container/294390 "2022-01-17T10:18:48Z")

</div>

I want to run multiple config files in docker container. pipelines.yml file : - pipeline.id: main path.config: "/usr/share/logstash/config/conf.d/\*.conf" - pipeline.id: i2c\_req\_res path.config: "/usr/share/logstas…

---

## [Clearing the concept of Translog](https://discuss.elastic.co/t/clearing-the-concept-of-translog/287374)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [October 22, 2021, 5:32am UTC](https://discuss.elastic.co/t/clearing-the-concept-of-translog/287374 "2021-10-22T05:32:24Z")

</div>

In translog documentation it is said that All index and delete operations are written to the translog after being processed by the internal Lucene index but before they are acknowledged So i am not understanding what…

---

## [Bootstrapped index is set as the write index but logs are getting written to old index](https://discuss.elastic.co/t/bootstrapped-index-is-set-as-the-write-index-but-logs-are-getting-written-to-old-index/285589)

<div class="topic-metadata">

**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\
**Replies:** 4\
**Last updated:** [October 1, 2021, 5:50am UTC](https://discuss.elastic.co/t/bootstrapped-index-is-set-as-the-write-index-but-logs-are-getting-written-to-old-index/285589 "2021-10-01T05:50:14Z")

</div>

Hello Experts, We are running Elastic + Fluentbit + Kibana stack on kubernetes for container logs and it was working correctly with daily rollover based on date(new-YYYY-MM-DD) but on high volume it caused over shard s…

---

## [Custom API Source, Delete All Documents](https://discuss.elastic.co/t/custom-api-source-delete-all-documents/284430)

<div class="topic-metadata">

**Author:** [@TonyWRobinson](https://discuss.elastic.co/u/TonyWRobinson)\
**Replies:** 4\
**Last updated:** [September 17, 2021, 7:38pm UTC](https://discuss.elastic.co/t/custom-api-source-delete-all-documents/284430 "2021-09-17T19:38:04Z")

</div>

The API documented here: Custom sources indexing API reference | Workplace Search Guide \[8.4\] | Elastic ...seems pretty straightforward. But I've opened a case with support because the response I get when attempting t…

---

## [Setting Default refreshInterval value to 30 seconds and isRefreshPaused to false in kibana 7.4.2](https://discuss.elastic.co/t/setting-default-refreshinterval-value-to-30-seconds-and-isrefreshpaused-to-false-in-kibana-7-4-2/224512)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 4\
**Last updated:** [March 31, 2020, 12:15pm UTC](https://discuss.elastic.co/t/setting-default-refreshinterval-value-to-30-seconds-and-isrefreshpaused-to-false-in-kibana-7-4-2/224512 "2020-03-31T12:15:03Z")

</div>

Hi, I want to set default value of refresh to 30 seconds and paused button to stop state initially. Please suggest how to achieve this by making changes in kibana code base and From where we are getting these default …

---

## [Has anyone been able to create custom transaction using the new angular integration?](https://discuss.elastic.co/t/has-anyone-been-able-to-create-custom-transaction-using-the-new-angular-integration/202072)

<div class="topic-metadata">

**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\
**Replies:** 4\
**Last updated:** [October 21, 2019, 9:01am UTC](https://discuss.elastic.co/t/has-anyone-been-able-to-create-custom-transaction-using-the-new-angular-integration/202072 "2019-10-21T09:01:16Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.6.…

---

## [Logstash service is shutting down with Invalid Frame Type 69 and 84](https://discuss.elastic.co/t/logstash-service-is-shutting-down-with-invalid-frame-type-69-and-84/174804)

<div class="topic-metadata">

**Author:** [@arunkasireddi](https://discuss.elastic.co/u/arunkasireddi)\
**Replies:** 4\
**Last updated:** [April 1, 2019, 3:43pm UTC](https://discuss.elastic.co/t/logstash-service-is-shutting-down-with-invalid-frame-type-69-and-84/174804 "2019-04-01T15:43:33Z")

</div>

Hi Team, I am trying to set up Logstash service on ECS cluster to push logs to AWS Elasticsearch service. The Logstash container shuts down frequently giving Invalid Frame Type 69 and 84 errors. Any direction on resolv…

---

## [Kibana - information in tooltip](https://discuss.elastic.co/t/kibana-information-in-tooltip/166018)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 4\
**Last updated:** [January 31, 2019, 5:49pm UTC](https://discuss.elastic.co/t/kibana-information-in-tooltip/166018 "2019-01-31T17:49:10Z")

</div>

Hello, I want to add information to my tooltip in a visualization. Is there any way to do it? I think this is not yet supported by Kibana, but is it in the future plans? Thank you. Francisca

---

## [Reindexing automatically changed my fieldtype](https://discuss.elastic.co/t/reindexing-automatically-changed-my-fieldtype/150741)

<div class="topic-metadata">

**Author:** [@spdoes](https://discuss.elastic.co/u/spdoes)\
**Replies:** 4\
**Last updated:** [October 3, 2018, 10:13pm UTC](https://discuss.elastic.co/t/reindexing-automatically-changed-my-fieldtype/150741 "2018-10-03T22:13:59Z")

</div>

In my original index I had location field with datatype of geo\_point, after reindexing it, the same field in new index seems to have changed to floar When trying to make same query in new index (reindexed from old), I g…

---

## [Logstash not indexing data](https://discuss.elastic.co/t/logstash-not-indexing-data/49093)

<div class="topic-metadata">

**Author:** [@dhy3ives](https://discuss.elastic.co/u/dhy3ives)\
**Replies:** 4\
**Last updated:** [May 4, 2016, 3:34pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-data/49093 "2016-05-04T15:34:00Z")

</div>

Trying input some log files into my elastic+logstash+kibana, but i have some problems. I make my pattern in http://grokdebug.herokuapp.com, in the web test all works perfect, but when i run the logstash the server not w…

---

## [Elastic search head](https://discuss.elastic.co/t/elastic-search-head/8739)

<div class="topic-metadata">

**Author:** [@kiruba\_2](https://discuss.elastic.co/u/kiruba_2)\
**Replies:** 4\
**Last updated:** [August 14, 2012, 1:08pm UTC](https://discuss.elastic.co/t/elastic-search-head/8739 "2012-08-14T13:08:03Z")

</div>

Hi, i can see a doc count in elasticsearch head plugin like \*docs: 2999 (4022)\* . what is the meaning of inside brace count and outside count. Thanks for all. --

---

## [Netflow input and output](https://discuss.elastic.co/t/netflow-input-and-output/289974)

<div class="topic-metadata">

**Author:** [@btjtaylor](https://discuss.elastic.co/u/btjtaylor)\
**Replies:** 2\
**Last updated:** [November 26, 2021, 9:29am UTC](https://discuss.elastic.co/t/netflow-input-and-output/289974 "2021-11-26T09:29:03Z")

</div>

Hi all I need to receive netflow data and output it to multiple destinations (just testing with single destination for now) Im running logstash 7.15.2 under windows I made the following logstash config file but it cra…

---

## [Need help on arithmetic operators usage in ingestion / scripted fields](https://discuss.elastic.co/t/need-help-on-arithmetic-operators-usage-in-ingestion-scripted-fields/247660)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 2\
**Last updated:** [September 6, 2020, 1:29pm UTC](https://discuss.elastic.co/t/need-help-on-arithmetic-operators-usage-in-ingestion-scripted-fields/247660 "2020-09-06T13:29:10Z")

</div>

Hi All, I have a field called duration which is number ( in seconds ). I would like to write ingestion pipeline OR scripted field add new field called duration\_hr by dividing the duration with 3600. my ES version is 7.6…

---

## [Circuit breaker with permanent durability](https://discuss.elastic.co/t/circuit-breaker-with-permanent-durability/228193)

<div class="topic-metadata">

**Author:** [@Jonathan\_Mendenhall](https://discuss.elastic.co/u/Jonathan_Mendenhall)\
**Replies:** 2\
**Last updated:** [April 15, 2020, 9:06pm UTC](https://discuss.elastic.co/t/circuit-breaker-with-permanent-durability/228193 "2020-04-15T21:06:40Z")

</div>

In our Es 7.5 cluster, a large query I ran tripped some circuit breakers on the data nodes. { "took": 8097, "responses": \[{ "error": { "root\_cause": \[{ "type": "array\_in…

---

## [Dropdown list control limited to 10 inputs](https://discuss.elastic.co/t/dropdown-list-control-limited-to-10-inputs/219944)

<div class="topic-metadata">

**Author:** [@Paulo64](https://discuss.elastic.co/u/Paulo64)\
**Replies:** 2\
**Last updated:** [February 21, 2020, 1:28pm UTC](https://discuss.elastic.co/t/dropdown-list-control-limited-to-10-inputs/219944 "2020-02-21T13:28:52Z")

</div>

Hello, In Kibana 7.3, I use several control dropdowns that are chained together with parent control + dynamic options. The last one is set to dynamic options and returns usually more than 10 results. However, the disp…

---

## [Count maximum possible score for query](https://discuss.elastic.co/t/count-maximum-possible-score-for-query/135689)

<div class="topic-metadata">

**Author:** [@lastic](https://discuss.elastic.co/u/lastic)\
**Replies:** 2\
**Last updated:** [June 15, 2018, 4:57pm UTC](https://discuss.elastic.co/t/count-maximum-possible-score-for-query/135689 "2018-06-15T16:57:13Z")

</div>

Hello. Does it is possible to count theoretical possible score for query? I have query with a lot of 'shoulds' with different boost for each should. I see 2 possibilities : stupid : make doc which will always corres…

---

## [Missing handlers on tomcat server](https://discuss.elastic.co/t/missing-handlers-on-tomcat-server/99843)

<div class="topic-metadata">

**Author:** [@Fonten](https://discuss.elastic.co/u/Fonten)\
**Replies:** 2\
**Last updated:** [September 8, 2017, 2:10pm UTC](https://discuss.elastic.co/t/missing-handlers-on-tomcat-server/99843 "2017-09-08T14:10:53Z")

</div>

Hello, i'm trying to parse some tomcat logs but i'm getting the following errors: io/console not supported; tty will not be manipulated Can't load log handler "1catalina.org.apache.juli.FileHandler" java.lang.ClassNotF…

---

## [Upgrade from 1.7 to 5.5](https://discuss.elastic.co/t/upgrade-from-1-7-to-5-5/93752)

<div class="topic-metadata">

**Author:** [@sanketdarji](https://discuss.elastic.co/u/sanketdarji)\
**Replies:** 2\
**Last updated:** [July 20, 2017, 10:49am UTC](https://discuss.elastic.co/t/upgrade-from-1-7-to-5-5/93752 "2017-07-20T10:49:50Z")

</div>

need some help in upgrading elsticsearch 1.7 to 5.5 in single VM enviroment I want to upgrade my production elasticsearch 1.7 version to 5.5 version -\> I found out the below links https://www.elastic.co/guide/en/elast…

---

## [ElasticSearch 5.4 - One node of 5 nodes not joining the cluster](https://discuss.elastic.co/t/elasticsearch-5-4-one-node-of-5-nodes-not-joining-the-cluster/86530)

<div class="topic-metadata">

**Author:** [@techpanga](https://discuss.elastic.co/u/techpanga)\
**Replies:** 2\
**Last updated:** [May 21, 2017, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-5-4-one-node-of-5-nodes-not-joining-the-cluster/86530 "2017-05-21T21:29:07Z")

</div>

Hi Our cluster got 5 nodes. 4 are joined the cluster. 1 out of 5 is not joining cluster. it is unable to ping. Please suggest about troubleshooting tips. \[2017-05-20T14:58:54,020\]\[TRACE\]\[o.e.d.z.UnicastZenPing \]…

---

## [Gte or null](https://discuss.elastic.co/t/gte-or-null/74110)

<div class="topic-metadata">

**Author:** [@fix2015](https://discuss.elastic.co/u/fix2015)\
**Replies:** 2\
**Last updated:** [February 7, 2017, 8:29am UTC](https://discuss.elastic.co/t/gte-or-null/74110 "2017-02-07T08:29:27Z")

</div>

hey guys, maybe someone had same pb as i, i need write request to project that have availiable\_date more than today and availiable\_date that equal null. { query:{ bool:{ filter:{ must:{ range:{ avalible\_to:{ lte…

---

## [Share a dashboard in read-only mode](https://discuss.elastic.co/t/share-a-dashboard-in-read-only-mode/350326)

<div class="topic-metadata">

**Author:** [@gnatola](https://discuss.elastic.co/u/gnatola)\
**Replies:** 3\
**Last updated:** [January 3, 2024, 7:58pm UTC](https://discuss.elastic.co/t/share-a-dashboard-in-read-only-mode/350326 "2024-01-03T19:58:40Z")

</div>

Hello, using Kibana 8.11. Created a dashboard that I would like to share in read-only mode. I would like to be the only person who can edit the dashboard. What is the best way to accomplish this? Thanks.

---

## [Remove \_id, \_index, \_score, \_type fields from index by logstash](https://discuss.elastic.co/t/remove-id-index-score-type-fields-from-index-by-logstash/290283)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 7:05am UTC](https://discuss.elastic.co/t/remove-id-index-score-type-fields-from-index-by-logstash/290283 "2021-12-08T07:05:11Z")

</div>

I want to delete above fields from event in Elasticsearch from logstash config

---

## [Index pattern in Kibana can not create](https://discuss.elastic.co/t/index-pattern-in-kibana-can-not-create/218539)

<div class="topic-metadata">

**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\
**Replies:** 3\
**Last updated:** [February 11, 2020, 8:07am UTC](https://discuss.elastic.co/t/index-pattern-in-kibana-can-not-create/218539 "2020-02-11T08:07:03Z")

</div>

Good Morning, Coud You plese hepl me? The problem is that : In kibana I can not create index pattern . My logs are in elasticsearch : curl -XGET "http://es01:9200/\_cat/indices" and I checked the logs of docker contai…

---

## [Building Our Own Security for Inter-Node Communication in ES Cluster?](https://discuss.elastic.co/t/building-our-own-security-for-inter-node-communication-in-es-cluster/21546)

<div class="topic-metadata">

**Author:** [@Tri\_Nguyen](https://discuss.elastic.co/u/Tri_Nguyen)\
**Replies:** 3\
**Last updated:** [December 29, 2016, 3:04pm UTC](https://discuss.elastic.co/t/building-our-own-security-for-inter-node-communication-in-es-cluster/21546 "2016-12-29T15:04:50Z")

</div>

Hi, Where and what should I look at and for if I want to build and integrate security for inter-node communication in an ES cluster? The security best practices and security plugins, except for Shield, seem to …

---

## [Is it possible to create configuration snippet for the logstash-forwarder in a directory?](https://discuss.elastic.co/t/is-it-possible-to-create-configuration-snippet-for-the-logstash-forwarder-in-a-directory/27309)

<div class="topic-metadata">

**Author:** [@michaelzoet](https://discuss.elastic.co/u/michaelzoet)\
**Replies:** 3\
**Last updated:** [August 14, 2015, 1:04pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-configuration-snippet-for-the-logstash-forwarder-in-a-directory/27309 "2015-08-14T13:04:33Z")

</div>

Hello all, I want/need to create logstash-forwarder configuration snippets based on which Puppet profile a server uses. For example a server that runs Apache and PostgreSQL should have entries in /etc/logstash-forward…

---

## [Kibana 4.x Startup on Linux](https://discuss.elastic.co/t/kibana-4-x-startup-on-linux/670)

<div class="topic-metadata">

**Author:** [@Ash\_Powell](https://discuss.elastic.co/u/Ash_Powell)\
**Replies:** 3\
**Last updated:** [May 14, 2015, 2:20pm UTC](https://discuss.elastic.co/t/kibana-4-x-startup-on-linux/670 "2015-05-14T14:20:17Z")

</div>

So Kibana 4.x is out now (yay) But it's an executable application (executed by running "bash /data/kibana/bin/kibana" in my case) I'm not a linux guy at heart, but there must be a way that we can get this to run at l…

---

## [The difference between "check every", index size, and number of matches](https://discuss.elastic.co/t/the-difference-between-check-every-index-size-and-number-of-matches/273411)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 1\
**Last updated:** [May 19, 2021, 3:21pm UTC](https://discuss.elastic.co/t/the-difference-between-check-every-index-size-and-number-of-matches/273411 "2021-05-19T15:21:39Z")

</div>

Dear all =) When creating an Alert with a webhook action, I have to fill out Check every Select an index and size When number of matches See screenshot below. Question 1 =) If check every is 1 day, and index size i…

---

## [License of GeoLite2 database](https://discuss.elastic.co/t/license-of-geolite2-database/216411)

<div class="topic-metadata">

**Author:** [@Flavio\_Pompermaier](https://discuss.elastic.co/u/Flavio_Pompermaier)\
**Replies:** 7\
**Last updated:** [March 6, 2020, 11:54am UTC](https://discuss.elastic.co/t/license-of-geolite2-database/216411 "2020-03-06T11:54:38Z")

</div>

Hi to all, I'm using ES 7.5.0 and the IP resolution of the IP 94.102.52.57 is wrong (see dev tools example below). So I tried to update my geolite database but now it seems that it's not available for free download. Am…

---

## [Upgrade to 7.6: Stack Monitoring Only With Security Enabled Possible?](https://discuss.elastic.co/t/upgrade-to-7-6-stack-monitoring-only-with-security-enabled-possible/220848)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 7\
**Last updated:** [March 2, 2020, 8:13am UTC](https://discuss.elastic.co/t/upgrade-to-7-6-stack-monitoring-only-with-security-enabled-possible/220848 "2020-03-02T08:13:06Z")

</div>

Hey, since upgrading our cluster to 7.6.0 I'm facing the problem, that it is not possible anymore to use the "Stack Monitoring" App in Kibana. The following error message appears: { "type": "error", "@timestamp": "…

---

## [How to update elasticsearch index?](https://discuss.elastic.co/t/how-to-update-elasticsearch-index/213547)

<div class="topic-metadata">

**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\
**Replies:** 7\
**Last updated:** [January 6, 2020, 4:01am UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-index/213547 "2020-01-06T04:01:50Z")

</div>

I have this output plugin in Logstash to create elastic search index. output { amazon\_es { hosts =\> \["https://xxxxxxxxxxxxxxxx.es.amazonaws.com/"\] region =\> "ap-southeast-1" index =\> "studentser…

---

## [Not able to start KIBANA getting following error:"not sending \[kibana\_settings\] monitoring document because \[undefined\] is null or invalid."](https://discuss.elastic.co/t/not-able-to-start-kibana-getting-following-error-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/169192)

<div class="topic-metadata">

**Author:** [@sachin\_khera](https://discuss.elastic.co/u/sachin_khera)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 8:32pm UTC](https://discuss.elastic.co/t/not-able-to-start-kibana-getting-following-error-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/169192 "2019-02-20T20:32:38Z")

</div>

Not able to start KIBANA getting following error: {"type":"log","@timestamp":"2019-02-20T11:16:48Z","tags":\["debug","monitoring-ui","kibana-monitoring"\],"pid":20651,"message":"Uploading bulk stats payload to the local c…

---

## [Logstash multiline codec ignore last event / line](https://discuss.elastic.co/t/logstash-multiline-codec-ignore-last-event-line/109006)

<div class="topic-metadata">

**Author:** [@metju312](https://discuss.elastic.co/u/metju312)\
**Replies:** 1\
**Last updated:** [November 24, 2017, 12:52pm UTC](https://discuss.elastic.co/t/logstash-multiline-codec-ignore-last-event-line/109006 "2017-11-24T12:52:53Z")

</div>

Hello, Logstash multiline codec ignore my last event (line) until send next packege of logs. In extremely case - if log have only one line it looks like there is no event at all. My logstash.conf: input { } http…

---

## [Best way to extract a CSV with aggregations](https://discuss.elastic.co/t/best-way-to-extract-a-csv-with-aggregations/15871)

<div class="topic-metadata">

**Author:** [@Thomas\_Bolis](https://discuss.elastic.co/u/Thomas_Bolis)\
**Replies:** 1\
**Last updated:** [February 18, 2014, 4:36pm UTC](https://discuss.elastic.co/t/best-way-to-extract-a-csv-with-aggregations/15871 "2014-02-18T16:36:26Z")

</div>

Hi, I was wondering what is the best way to extract a csv with the various terms of some fields alongside with the corresponding counts? For example create a csv as follows: productId, product, category, city, hour, …

---

## [Highlight encoder](https://discuss.elastic.co/t/highlight-encoder/15069)

<div class="topic-metadata">

**Author:** [@Guozhu\_Wei](https://discuss.elastic.co/u/Guozhu_Wei)\
**Replies:** 1\
**Last updated:** [January 1, 2014, 3:14pm UTC](https://discuss.elastic.co/t/highlight-encoder/15069 "2014-01-01T15:14:27Z")

</div>

Dear all Happy new year! I have a problem when I use the highlight, I want to highlight a field 'abs' while it contains html, like: the content of field 'abs': ... The molecule:(L2L3M)n ... I want to escape…

---

## [Querying in ES with SQL IN equivalent](https://discuss.elastic.co/t/querying-in-es-with-sql-in-equivalent/6932)

<div class="topic-metadata">

**Author:** [@vannya](https://discuss.elastic.co/u/vannya)\
**Replies:** 1\
**Last updated:** [March 7, 2012, 4:15pm UTC](https://discuss.elastic.co/t/querying-in-es-with-sql-in-equivalent/6932 "2012-03-07T16:15:29Z")

</div>

Hi all, I would like to search in my ES index all name fields with values within a list of - as example - ('name1', 'name2', 'name3'). However, I cannot find a simple way to do it! I could use "or"... but as my lis…

---

## [Why I have log duplication when filebeat read rotating log files and stop filebeat for specific time manually and default close inactive reached](https://discuss.elastic.co/t/why-i-have-log-duplication-when-filebeat-read-rotating-log-files-and-stop-filebeat-for-specific-time-manually-and-default-close-inactive-reached/314663)

<div class="topic-metadata">

**Author:** [@alex\_petrov](https://discuss.elastic.co/u/alex_petrov)\
**Replies:** 6\
**Last updated:** [October 8, 2022, 4:58am UTC](https://discuss.elastic.co/t/why-i-have-log-duplication-when-filebeat-read-rotating-log-files-and-stop-filebeat-for-specific-time-manually-and-default-close-inactive-reached/314663 "2022-10-08T04:58:17Z")

</div>

I set filebeat to read logs from rotating logs (rotated when 5 mg is reached) and below is my config : - type: log fields: source: 'filebeat2' logID: logbackup fields\_under\_root: true enabled: true paths: - /…

---

## [Elasticsearch query without date range](https://discuss.elastic.co/t/elasticsearch-query-without-date-range/253165)

<div class="topic-metadata">

**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\
**Replies:** 6\
**Last updated:** [October 24, 2020, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-query-without-date-range/253165 "2020-10-24T13:59:28Z")

</div>

Hello, I wonder how does an elasticsearch query work without a date range? Is there a default size of the result? For example, what if I just only use lte for the range. Does query result include all the records from …

---

## [Filebeat with kafka.output](https://discuss.elastic.co/t/filebeat-with-kafka-output/146483)

<div class="topic-metadata">

**Author:** [@Steve1](https://discuss.elastic.co/u/Steve1)\
**Replies:** 6\
**Last updated:** [August 30, 2018, 1:47pm UTC](https://discuss.elastic.co/t/filebeat-with-kafka-output/146483 "2018-08-30T13:47:36Z")

</div>

So i use filebeat 6.4.0 - Apache Kafka 2.11-2.0.0

---

## [Logstash Keystore doesn't work](https://discuss.elastic.co/t/logstash-keystore-doesnt-work/229034)

<div class="topic-metadata">

**Author:** [@Sonia1](https://discuss.elastic.co/u/Sonia1)\
**Replies:** 0\
**Last updated:** [April 21, 2020, 12:30pm UTC](https://discuss.elastic.co/t/logstash-keystore-doesnt-work/229034 "2020-04-21T12:30:03Z")

</div>

Hi everyone! I'm new with ELK and I'm trying to use Logstash-keystore to secure my passwords. I follow the steps of the doc but it's doesn't work. set +o history export LOGSTASH\_KEYSTORE\_PASS=mypassword set -o history…

---

## [Debian 7.9 Filebeat 6.5.4 wrong path](https://discuss.elastic.co/t/debian-7-9-filebeat-6-5-4-wrong-path/165261)

<div class="topic-metadata">

**Author:** [@Abraxas](https://discuss.elastic.co/u/Abraxas)\
**Replies:** 8\
**Last updated:** [January 25, 2019, 3:30pm UTC](https://discuss.elastic.co/t/debian-7-9-filebeat-6-5-4-wrong-path/165261 "2019-01-25T15:30:52Z")

</div>

Hi, I am running Debian 7.9 and I have installed filebeat 6.5.4 with apt-get. For some reason it starts with wrong paths: INFO instance/beat.go:592 Home path: \[/usr/share/filebeat/bin\] Config path: \[/usr/share/f…

---

## [Elasticsearch + logstash : Message not fully read (request)](https://discuss.elastic.co/t/elasticsearch-logstash-message-not-fully-read-request/16210)

<div class="topic-metadata">

**Author:** [@sirkubax](https://discuss.elastic.co/u/sirkubax)\
**Replies:** 8\
**Last updated:** [March 7, 2014, 7:38am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-message-not-fully-read-request/16210 "2014-03-07T07:38:27Z")

</div>

Hi Im trying to run a server with elasticsearch and logstash, I did configure minimalistic settings, and still I can not get it running: In ES log i see: \[transport.netty \] \[lekNo1\] Message not fully re…

---

## [Logstash GELF input Json ParserError](https://discuss.elastic.co/t/logstash-gelf-input-json-parsererror/287159)

<div class="topic-metadata">

**Author:** [@Stian\_Vale](https://discuss.elastic.co/u/Stian_Vale)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 1:33pm UTC](https://discuss.elastic.co/t/logstash-gelf-input-json-parsererror/287159 "2021-10-20T13:33:51Z")

</div>

Hi! I'm experiencing an issue with the Logstash GELF input related to JSON parsing. It seems that there's some messages from Graylog that causes these errors: \[2021-10-20T05:21:59,443\]\[ERROR\]\[logstash.inputs.gelf \]…

---

## [Dynamic sync between Mongo to Elastic search with Kafka and Logstash spring application](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799)

<div class="topic-metadata">

**Author:** [@mikaell](https://discuss.elastic.co/u/mikaell)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 9:24am UTC](https://discuss.elastic.co/t/dynamic-sync-between-mongo-to-elastic-search-with-kafka-and-logstash-spring-application/269799 "2021-04-12T09:24:37Z")

</div>

Greetings! in this sequence we want to talk about Data base Connectivity especially the dynamic sync between mongo and elastic search with the aid of Apache Kafka and Logstash for ingesting document beside that we want …

[Previous page](https://discuss.elastic.co/top.md?page=1297&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1299&per_page=50&period=all)
