# Top **URL:** https://discuss.elastic.co/top.md?page=1302&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1303 --- ## [Run logstash on windows -\>\> errors](https://discuss.elastic.co/t/run-logstash-on-windows-errors/289987)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 9:39pm UTC](https://discuss.elastic.co/t/run-logstash-on-windows-errors/289987 "2021-11-23T21:39:53Z")
Hi I need to check the performance one of my logstash conf. Therefore I've decided to install logstash on windows the new one instance as standalone. After that I've set the variable env. At least I got the error. BTW. … --- ## [Elastic APM with ASP.NET 4.7.2 questions](https://discuss.elastic.co/t/elastic-apm-with-asp-net-4-7-2-questions/283293)
**Author:** [@DR4296](https://discuss.elastic.co/u/DR4296)\ **Replies:** 2\ **Last updated:** [September 8, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elastic-apm-with-asp-net-4-7-2-questions/283293 "2021-09-08T14:23:11Z")
Greetings All ! So, about two years ago, another developer decided to add Elastic APM to an existing ASP.NET (non-core) application. (Not sure what version of .NET it was on at the time, but we're on 4.7.2 right now.) A… --- ## [ECK Kib Service Annotation](https://discuss.elastic.co/t/eck-kib-service-annotation/245937)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 2\ **Last updated:** [August 24, 2020, 8:49am UTC](https://discuss.elastic.co/t/eck-kib-service-annotation/245937 "2020-08-24T08:49:48Z")
Hi Team, We have one requirement in which Kibana service need an annotation while deployment. ECK Deployment manages service deployment by itself. Is there any mechanism to handle this. Thanks. Regards AK --- ## [How to backup and restore your engines?](https://discuss.elastic.co/t/how-to-backup-and-restore-your-engines/207438)
**Author:** [@tuyndv](https://discuss.elastic.co/u/tuyndv)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 3:19am UTC](https://discuss.elastic.co/t/how-to-backup-and-restore-your-engines/207438 "2019-11-25T03:19:41Z")
Dear Team, I'm using App Search self-managed. So how to backup and restore your engines? Thanks --- ## [Index lifecycle policy not applied to active index](https://discuss.elastic.co/t/index-lifecycle-policy-not-applied-to-active-index/179228)
**Author:** [@john.hoogeveen](https://discuss.elastic.co/u/john.hoogeveen)\ **Replies:** 2\ **Last updated:** [May 8, 2019, 7:13pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-applied-to-active-index/179228 "2019-05-08T19:13:26Z")
Hello, I have created a new ELK 7.0 stack and am struggling with index roll over. Currently I have a packetbeat-7.0.0-2019.04.21-000001 index that is 55gb large, the alias of that index is packetbeat-7.0.0. The attach… --- ## [Module system doesn't exist!...but it does](https://discuss.elastic.co/t/module-system-doesnt-exist-but-it-does/178702)
**Author:** [@teamg](https://discuss.elastic.co/u/teamg)\ **Replies:** 2\ **Last updated:** [May 1, 2019, 1:54pm UTC](https://discuss.elastic.co/t/module-system-doesnt-exist-but-it-does/178702 "2019-05-01T13:54:46Z")
Been troubleshooting metricbeat and found something interesting in version 7 of ELK and Metricbeat: \[root@elk modules.d\]# metricbeat modules list Enabled: Disabled: \[root@elk modules.d\]# metricbeat modules enable … --- ## ["Took" Field value in the Search Response](https://discuss.elastic.co/t/took-field-value-in-the-search-response/110722)
**Author:** [@Zhengcong\_Yin](https://discuss.elastic.co/u/Zhengcong_Yin)\ **Replies:** 2\ **Last updated:** [December 15, 2017, 4:43pm UTC](https://discuss.elastic.co/t/took-field-value-in-the-search-response/110722 "2017-12-15T16:43:49Z")
I read previous posts regarding what does "took" measure. Does it including the time to distribute the query and merger the result? I run some geo-point search benchmarks for a cluster(3master, 4 data nodes, 1 client, 4… --- ## [Bootstrap.mlock setting](https://discuss.elastic.co/t/bootstrap-mlock-setting/103073)
**Author:** [@corona](https://discuss.elastic.co/u/corona)\ **Replies:** 2\ **Last updated:** [October 10, 2017, 2:48pm UTC](https://discuss.elastic.co/t/bootstrap-mlock-setting/103073 "2017-10-10T14:48:21Z")
Hello, We are currently running a cluster with 20 nodes 49800 shards and version 2.4.0. Recently I set the bootstrap.mlockall setting to true. Over the span of a month, I've observed the nodes with this setting have sl… --- ## [Query nth element of an array](https://discuss.elastic.co/t/query-nth-element-of-an-array/87491)
**Author:** [@hahe](https://discuss.elastic.co/u/hahe)\ **Replies:** 2\ **Last updated:** [May 30, 2017, 1:16pm UTC](https://discuss.elastic.co/t/query-nth-element-of-an-array/87491 "2017-05-30T13:16:09Z")
I've got json documents as follows: { "\_index": "x", "\_type": "y", "\_id": "z", "\_version": 1, "found": true, "\_source": { "request": { "segmentList": \[ { "departure": { "code": "JFK" }, … --- ## [Filebeat =\> logstash index](https://discuss.elastic.co/t/filebeat-logstash-index/81201)
**Author:** [@craftytech1](https://discuss.elastic.co/u/craftytech1)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 7:04pm UTC](https://discuss.elastic.co/t/filebeat-logstash-index/81201 "2017-04-04T19:04:32Z")
I configured my filebeat client as per the instructions: https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html I also configured logstash as per the instructions as well: https://ww… --- ## [How to get every logs of a user before an error](https://discuss.elastic.co/t/how-to-get-every-logs-of-a-user-before-an-error/80288)
**Author:** [@pinguo](https://discuss.elastic.co/u/pinguo)\ **Replies:** 2\ **Last updated:** [March 29, 2017, 11:33am UTC](https://discuss.elastic.co/t/how-to-get-every-logs-of-a-user-before-an-error/80288 "2017-03-29T11:33:44Z")
Hi, I have a website and an api who send logs to Elasticsearch. When an error occur on the website or the api, i would like to see every logs (website and api) of my user before that error (with kibana) by putting the … --- ## [Elasticsearch 2.4.1 Cluster stuck on Heap high usage](https://discuss.elastic.co/t/elasticsearch-2-4-1-cluster-stuck-on-heap-high-usage/66263)
**Author:** [@pmincz](https://discuss.elastic.co/u/pmincz)\ **Replies:** 2\ **Last updated:** [November 18, 2016, 1:56pm UTC](https://discuss.elastic.co/t/elasticsearch-2-4-1-cluster-stuck-on-heap-high-usage/66263 "2016-11-18T13:56:26Z")
I have Elasticsearch v 2.4.1 cluster, 4 nodes, 1 master, 3 data, 8g heap size each node, 16g RAM each node, 4 cpu cores each node and 6 indices. I use 3 indices as my primary indices, and when I have to index some new d… --- ## [How to search in array of json elasticsearch-PHP](https://discuss.elastic.co/t/how-to-search-in-array-of-json-elasticsearch-php/44784)
**Author:** [@jorgerobertodev](https://discuss.elastic.co/u/jorgerobertodev)\ **Replies:** 2\ **Last updated:** [March 19, 2016, 7:33pm UTC](https://discuss.elastic.co/t/how-to-search-in-array-of-json-elasticsearch-php/44784 "2016-03-19T19:33:08Z")
Have this example data: { "id" : "129613", "title" : "my city", "coveragearea\_without\_cities" : \[ { "id" : 58, "advertisement\_id" : 129613, "state\_id" : 11, "city\_id" : 1630… --- ## [How to create parallel dates graph in kibana 4](https://discuss.elastic.co/t/how-to-create-parallel-dates-graph-in-kibana-4/27994)
**Author:** [@asgawali](https://discuss.elastic.co/u/asgawali)\ **Replies:** 2\ **Last updated:** [August 28, 2015, 4:14am UTC](https://discuss.elastic.co/t/how-to-create-parallel-dates-graph-in-kibana-4/27994 "2015-08-28T04:14:11Z")
Hi, I have graph in my kibana 4 like this: But I want it like shown below in parallel dates format: Can anyone tell me how can I do this in Kibana 4 ? Thanks, Amit --- ## [Why is Thrift transport deprecated, and what should I use instead?](https://discuss.elastic.co/t/why-is-thrift-transport-deprecated-and-what-should-i-use-instead/1776)
**Author:** [@Weitzenfeld](https://discuss.elastic.co/u/Weitzenfeld)\ **Replies:** 2\ **Last updated:** [June 2, 2015, 8:33pm UTC](https://discuss.elastic.co/t/why-is-thrift-transport-deprecated-and-what-should-i-use-instead/1776 "2015-06-02T20:33:17Z")
About a year and a half ago, I worked on a project that used elasticsearch-py, and I remember we saw an order-of-magnitude decrease in query round-trip time when we used the thrift transport. I'm now working on a differe… --- ## [Is there a way to check shard initialization completion status](https://discuss.elastic.co/t/is-there-a-way-to-check-shard-initialization-completion-status/1424)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [May 28, 2015, 3:11pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-check-shard-initialization-completion-status/1424 "2015-05-28T15:11:31Z")
So \_cat/shards tells you the status, but not how long it needs. It seem to take for ever to initialize a shard. --- ## [Index document count is 0 after reindexing](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199)
**Author:** [@achang77](https://discuss.elastic.co/u/achang77)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 3:16am UTC](https://discuss.elastic.co/t/index-document-count-is-0-after-reindexing/227199 "2020-04-10T03:16:25Z")
I am attempting to validate some reindex from remote operations I am reindexing from a "source" cluster to a "destination" cluster for an index "IndexName" I run the following r = esDest.reindex(body=query, wait\_f… --- ## [How to close response or connection properly of RestClient](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760)
**Author:** [@ekotqryz](https://discuss.elastic.co/u/ekotqryz)\ **Replies:** 1\ **Last updated:** [September 11, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-close-response-or-connection-properly-of-restclient/198760 "2019-09-11T15:28:25Z")
From the document https://www.elastic.co/guide/en/elasticsearch/client/java-rest/7.3/java-rest-low-usage-initialization.html, we know that we should use one instance of RestClient for the whold application, and close() R… --- ## [Concatenate fields and add newlines](https://discuss.elastic.co/t/concatenate-fields-and-add-newlines/134722)
**Author:** [@ottadini](https://discuss.elastic.co/u/ottadini)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 3:54pm UTC](https://discuss.elastic.co/t/concatenate-fields-and-add-newlines/134722 "2018-06-06T15:54:18Z")
I want to combine several fields in Kibana's scripted fields editor using painless. I've got the following, but the field displays in Kibana's Discover interface with the literal \\n rather than with a new line: doc\['fie… --- ## [Machine Learning: Could not open job](https://discuss.elastic.co/t/machine-learning-could-not-open-job/103964)
**Author:** [@spacepacket](https://discuss.elastic.co/u/spacepacket)\ **Replies:** 1\ **Last updated:** [October 15, 2017, 1:08pm UTC](https://discuss.elastic.co/t/machine-learning-could-not-open-job/103964 "2017-10-15T13:08:58Z")
I am using the machine learning feature of X-Pack. I created some jobs, that seem to work fine. The next day, I tried to create and open a job and got the following error. I also get the error if I try and run one of my … --- ## [Rest Client Asynchronous Connection Settings](https://discuss.elastic.co/t/rest-client-asynchronous-connection-settings/80642)
**Author:** [@Gok](https://discuss.elastic.co/u/Gok)\ **Replies:** 1\ **Last updated:** [March 30, 2017, 12:15pm UTC](https://discuss.elastic.co/t/rest-client-asynchronous-connection-settings/80642 "2017-03-30T12:15:32Z")
Is there anyway I could set in RestClient to create a specific number of connections to ES? --- ## [Snapshot to S3 - no delete permission](https://discuss.elastic.co/t/snapshot-to-s3-no-delete-permission/49493)
**Author:** [@sirkubax\_1](https://discuss.elastic.co/u/sirkubax_1)\ **Replies:** 1\ **Last updated:** [May 9, 2016, 10:15pm UTC](https://discuss.elastic.co/t/snapshot-to-s3-no-delete-permission/49493 "2016-05-09T22:15:43Z")
I have a goal of creating 'write-once' snapshot of my current indexes. It would be a protection against someone 'accidentally' deleting some of the data. To achieve that I've created a S3 bucket, but I had to add IAM p… --- ## [ScheduledThreadPoolExecutor not shutting down completely](https://discuss.elastic.co/t/scheduledthreadpoolexecutor-not-shutting-down-completely/39504)
**Author:** [@ArivazhaganJ](https://discuss.elastic.co/u/ArivazhaganJ)\ **Replies:** 1\ **Last updated:** [January 19, 2016, 7:10am UTC](https://discuss.elastic.co/t/scheduledthreadpoolexecutor-not-shutting-down-completely/39504 "2016-01-19T07:10:19Z")
I am using Elasticsearch 1.5.1 with Java application. I have been monitoring the application with plumbr tool. Whenever JVM stop/redeploy is done, plumbr warns about Perm Gen memory leak issue. Log indicates that , Y… --- ## [Create a count of the total of desired metric](https://discuss.elastic.co/t/create-a-count-of-the-total-of-desired-metric/288594)
**Author:** [@Sugand](https://discuss.elastic.co/u/Sugand)\ **Replies:** 3\ **Last updated:** [November 9, 2021, 11:38am UTC](https://discuss.elastic.co/t/create-a-count-of-the-total-of-desired-metric/288594 "2021-11-09T11:38:15Z")
Hi, I have certain visualizations in dashboard based off condition's. Example: 1\> A metric of company numbers starting with number 1 and 2\> A metric of emails staring with alphabet "a". I want to create another visu… --- ## [New scripted fields causes shards failed](https://discuss.elastic.co/t/new-scripted-fields-causes-shards-failed/222465)
**Author:** [@beam022](https://discuss.elastic.co/u/beam022)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 3:35pm UTC](https://discuss.elastic.co/t/new-scripted-fields-causes-shards-failed/222465 "2020-03-12T15:35:06Z")
Hi, I've defined a new scripted field that extracts a substring based on a regex. Immediately after adding that field, I've been observing warning messages on our Kibana and it's impossible to look at any logs right now. … --- ## [Rally does not have control over the configuration of the benchmarked Elasticsearch cluster](https://discuss.elastic.co/t/rally-does-not-have-control-over-the-configuration-of-the-benchmarked-elasticsearch-cluster/218682)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 4:58pm UTC](https://discuss.elastic.co/t/rally-does-not-have-control-over-the-configuration-of-the-benchmarked-elasticsearch-cluster/218682 "2020-02-12T16:58:08Z")
Just connfigured our first successful race but confused why we are getting this message. Note we are pointing to a ES Cloud cluster. ffoti@rally:~$ ~/.local/bin/esrally --pipeline=benchmark-only --track-path /mnt1/benc… --- ## [Filebeat and Logstash logdata not passing](https://discuss.elastic.co/t/filebeat-and-logstash-logdata-not-passing/211459)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 3\ **Last updated:** [December 12, 2019, 5:19am UTC](https://discuss.elastic.co/t/filebeat-and-logstash-logdata-not-passing/211459 "2019-12-12T05:19:03Z")
Hi I have 2 servers in which one has Logstash 7.2.0 and another has filbeat 7.2.0. The below is my logstash conf file: \> input { beats { port =\> 5044 ssl =\> false } } output { … --- ## [I/O dispatch worker terminated abnormally](https://discuss.elastic.co/t/i-o-dispatch-worker-terminated-abnormally/208002)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 0\ **Last updated:** [November 15, 2019, 7:06am UTC](https://discuss.elastic.co/t/i-o-dispatch-worker-terminated-abnormally/208002 "2019-11-15T07:06:51Z")
Below code i have written to fetch all the records based on index, but getting exception try (RestHighLevelClient client = new RestHighLevelClient( RestClient.builder(HttpHost.create("http://localhost:9200")))) { … --- ## [ELK - Kibana showing data that was already deleted, won't show new data](https://discuss.elastic.co/t/elk-kibana-showing-data-that-was-already-deleted-wont-show-new-data/181631)
**Author:** [@Mikael\_Brenner\_Vieir](https://discuss.elastic.co/u/Mikael_Brenner_Vieir)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 4:24pm UTC](https://discuss.elastic.co/t/elk-kibana-showing-data-that-was-already-deleted-wont-show-new-data/181631 "2019-05-21T16:24:50Z")
Hi, I'm currently using the ELK stack, and I'm running into this problem quite often. My Logstash config file is looking like this: input { file{ path =\> "/home/me/logs/\*.log" sta… --- ## [Kibana UI won't show anything!.. Help](https://discuss.elastic.co/t/kibana-ui-wont-show-anything-help/154409)
**Author:** [@levi\_munthe](https://discuss.elastic.co/u/levi_munthe)\ **Replies:** 3\ **Last updated:** [October 30, 2018, 3:49am UTC](https://discuss.elastic.co/t/kibana-ui-wont-show-anything-help/154409 "2018-10-30T03:49:16Z")
Help, i don't know what happen. while ago i was doing some visualization while looking the dashboard in new tab and then the problem happening. kibana won't show anything, but i can still log in. The status is green … --- ## [Issues with CTX behavior while using chains, http input and tranform](https://discuss.elastic.co/t/issues-with-ctx-behavior-while-using-chains-http-input-and-tranform/71447)
**Author:** [@gregory.dutrieux](https://discuss.elastic.co/u/gregory.dutrieux)\ **Replies:** 3\ **Last updated:** [January 14, 2017, 10:48pm UTC](https://discuss.elastic.co/t/issues-with-ctx-behavior-while-using-chains-http-input-and-tranform/71447 "2017-01-14T22:48:08Z")
Hi, I would like to get some precision and guidance on how the ctx content change/behave while working with a watch that combine transform, input (http) and action. FYI - I'm trying to achieved a watch that will run AP… --- ## [Ingest Attachment is not working \[err: InvalidIndexNameException\]](https://discuss.elastic.co/t/ingest-attachment-is-not-working-err-invalidindexnameexception/69261)
**Author:** [@mysticmode](https://discuss.elastic.co/u/mysticmode)\ **Replies:** 3\ **Last updated:** [December 16, 2016, 8:49am UTC](https://discuss.elastic.co/t/ingest-attachment-is-not-working-err-invalidindexnameexception/69261 "2016-12-16T08:49:29Z")
org.elasticsearch.indices.InvalidIndexNameException: \[\_ingest\] Invalid index name \[\_ingest\], must not start with '\_' at org.elasticsearch.cluster.metadata.MetaDataCreateIndexService.validateIndexName(MetaDataCreateIn… --- ## [Will Metricbeat 5.0 provide a module like httpbeat, hsbeat](https://discuss.elastic.co/t/will-metricbeat-5-0-provide-a-module-like-httpbeat-hsbeat/55507)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 3\ **Last updated:** [July 20, 2016, 6:36am UTC](https://discuss.elastic.co/t/will-metricbeat-5-0-provide-a-module-like-httpbeat-hsbeat/55507 "2016-07-20T06:36:07Z")
Hi there IMHO, it would make sense to provide a metricbeat module for httpbeat or hsbeat. Is this already planned for 5.0? Thanks Oli --- ## [Help with Elastic and PHP](https://discuss.elastic.co/t/help-with-elastic-and-php/43255)
**Author:** [@scarface](https://discuss.elastic.co/u/scarface)\ **Replies:** 3\ **Last updated:** [March 4, 2016, 3:00pm UTC](https://discuss.elastic.co/t/help-with-elastic-and-php/43255 "2016-03-04T15:00:44Z")
Hi, First i want to apologize for my poor english. Search a solution for my problem by 2 days and still i have no idea how to fix it. I have 2 places running ES + PHP: Mac Os CentOS (Virtual Box) To install o… --- ## [How to load CSV file in logstash](https://discuss.elastic.co/t/how-to-load-csv-file-in-logstash/40950)
**Author:** [@Lovika\_Jain](https://discuss.elastic.co/u/Lovika_Jain)\ **Replies:** 3\ **Last updated:** [February 4, 2016, 12:57pm UTC](https://discuss.elastic.co/t/how-to-load-csv-file-in-logstash/40950 "2016-02-04T12:57:45Z")
Hi I am trying to load CSV file in logstash but it is not reading the file and not creating the index in elasticsearch My Config file input { file { type =\> "csv" path =\> "/root/installables/\*.csv" start… --- ## [Problems with CVS: first fieldname in CVS columns has the entire message](https://discuss.elastic.co/t/problems-with-cvs-first-fieldname-in-cvs-columns-has-the-entire-message/31362)
**Author:** [@Jeff\_Silverman](https://discuss.elastic.co/u/Jeff_Silverman)\ **Replies:** 3\ **Last updated:** [September 30, 2015, 7:28am UTC](https://discuss.elastic.co/t/problems-with-cvs-first-fieldname-in-cvs-columns-has-the-entire-message/31362 "2015-09-30T07:28:12Z")
I am trying to parse a file delimited by @ characters. I am using a CSV filter, and it works properly for every field except the first field. The first field contains the entire message, including the delimiter. cu… --- ## [How to create different roles for same index?](https://discuss.elastic.co/t/how-to-create-different-roles-for-same-index/24599)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 3\ **Last updated:** [June 30, 2015, 8:30am UTC](https://discuss.elastic.co/t/how-to-create-different-roles-for-same-index/24599 "2015-06-30T08:30:23Z")
Im having index named "logs". Im getting all databses and application and server logs in the same index. How can i create different roles so that one can monitor only database and one can monitor only application? --- ## [ES 7.11 Heap Out of memory error](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478)
**Author:** [@tmathew](https://discuss.elastic.co/u/tmathew)\ **Replies:** 4\ **Last updated:** [July 1, 2021, 1:01pm UTC](https://discuss.elastic.co/t/es-7-11-heap-out-of-memory-error/277478 "2021-07-01T13:01:04Z")
Hi ! We upgraded from 2.4 to 7.11, we are having below issues all around the ES. ES data nodes are going down alternatively, and it is due to Heap Out of memory issues. Today morning we did re-indexing around 100k/s a… --- ## [Backup (snapshot) strategy for a two data node cluster](https://discuss.elastic.co/t/backup-snapshot-strategy-for-a-two-data-node-cluster/274404)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [May 29, 2021, 5:15pm UTC](https://discuss.elastic.co/t/backup-snapshot-strategy-for-a-two-data-node-cluster/274404 "2021-05-29T17:15:26Z")
Hello, I hope you and your loved ones are safe and healthy. I have a three node cluster with 2 data nodes and 1 voting node running Elastic Stack 7.13 on Ubuntu 20.04.2. All of the node are on a single physical worksta… --- ## [Kibana Heatmap: Use discrete values or labels in legend](https://discuss.elastic.co/t/kibana-heatmap-use-discrete-values-or-labels-in-legend/254548)
**Author:** [@FloJe](https://discuss.elastic.co/u/FloJe)\ **Replies:** 4\ **Last updated:** [November 13, 2020, 7:52am UTC](https://discuss.elastic.co/t/kibana-heatmap-use-discrete-values-or-labels-in-legend/254548 "2020-11-13T07:52:27Z")
Dear Forum, I have a question regarding Kibana Heatmap visualisation. I'm collecting logs from an application and these logs have an Apachee syslog level, i.e. error, warning, info. Now I want to visualize 10 minute bi… --- ## [KIbana Theme](https://discuss.elastic.co/t/kibana-theme/193681)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 4\ **Last updated:** [August 8, 2019, 9:34am UTC](https://discuss.elastic.co/t/kibana-theme/193681 "2019-08-08T09:34:41Z")
Hello, Is there a curl command to activate or deactivate the dark theme in kibana? --- ## [Issue with running Kibana v6.2.3 on Windows 7](https://discuss.elastic.co/t/issue-with-running-kibana-v6-2-3-on-windows-7/126857)
**Author:** [@LaonWeis](https://discuss.elastic.co/u/LaonWeis)\ **Replies:** 4\ **Last updated:** [April 11, 2018, 1:45pm UTC](https://discuss.elastic.co/t/issue-with-running-kibana-v6-2-3-on-windows-7/126857 "2018-04-11T13:45:44Z")
I downloaded the zip file from: https://www.elastic.co/downloads/kibana When running .\\bin\\kibana.bat I received the following error: node.exe: src\\node\_file.cc:578: Assertion '\ \>= \<0\>' failed I also placed t… --- ## [DiskIO on macOS](https://discuss.elastic.co/t/diskio-on-macos/92371)
**Author:** [@DPattee](https://discuss.elastic.co/u/DPattee)\ **Replies:** 4\ **Last updated:** [July 25, 2017, 4:59am UTC](https://discuss.elastic.co/t/diskio-on-macos/92371 "2017-07-25T04:59:07Z")
Any chance of getting diskio available for Mac / darwin servers? System Diskio Metricset The System diskio metricset provides disk IO metrics collected from the operating system. One event is created for each disk mou… --- ## [Unstable cluster - "suspect illegal state: trying to move shard from primary mode to replica mode"](https://discuss.elastic.co/t/unstable-cluster-suspect-illegal-state-trying-to-move-shard-from-primary-mode-to-replica-mode/17704)
**Author:** [@Robin\_Clarke](https://discuss.elastic.co/u/Robin_Clarke)\ **Replies:** 4\ **Last updated:** [July 28, 2014, 1:45pm UTC](https://discuss.elastic.co/t/unstable-cluster-suspect-illegal-state-trying-to-move-shard-from-primary-mode-to-replica-mode/17704 "2014-07-28T13:45:59Z")
I have a 10 machine cluster (named es101-\>es110) with 32GB RAM per machine. I've allocated 12GB per machine to Elasticsearch. Memory usage on the machines looks ok, cpu and iowait is also not dramatic, nonetheless … --- ## [Filebeat daemonset in Kubernetes is slow (or fails) to harvest logs from multiple pods](https://discuss.elastic.co/t/filebeat-daemonset-in-kubernetes-is-slow-or-fails-to-harvest-logs-from-multiple-pods/322634)
**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\ **Replies:** 2\ **Last updated:** [January 10, 2023, 12:08pm UTC](https://discuss.elastic.co/t/filebeat-daemonset-in-kubernetes-is-slow-or-fails-to-harvest-logs-from-multiple-pods/322634 "2023-01-10T12:08:58Z")
Hi! After a full day of pulling my hair I’m giving up and want to ask for help here :pray: I have a Kubernetes cluster where I am running a Filebeat daemonset. I noticed that the logs from some of the pods go missing so… --- ## [Logstash extract a nested json object](https://discuss.elastic.co/t/logstash-extract-a-nested-json-object/265307)
**Author:** [@imsystem](https://discuss.elastic.co/u/imsystem)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 5:51pm UTC](https://discuss.elastic.co/t/logstash-extract-a-nested-json-object/265307 "2021-02-24T17:51:13Z")
Hello! I have input json: { "fields":{ "created\_date":1614158456696703782, "value":"\\u001B\[35m-\\u001B\[0m | \\u001B\[32m2021-02-20T12:48:10.367337+0300\\u001B\[0m | \\u001B\[1mINFO \\u001B\[0m | application.ap… --- ## [Index Rollover alias](https://discuss.elastic.co/t/index-rollover-alias/189331)
**Author:** [@PeterPain](https://discuss.elastic.co/u/PeterPain)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 9:03am UTC](https://discuss.elastic.co/t/index-rollover-alias/189331 "2019-07-15T09:03:33Z")
Hey there im testing arround with the Index Lifecycle Management and have some problems with it which i don't know how to handle them. I have a Template to assing the ILM-Policy, which are for multiple Indices. PUT \_te… --- ## [Logstash Exec Curl - cant create valid JSON](https://discuss.elastic.co/t/logstash-exec-curl-cant-create-valid-json/185301)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 2\ **Last updated:** [June 23, 2019, 12:43am UTC](https://discuss.elastic.co/t/logstash-exec-curl-cant-create-valid-json/185301 "2019-06-23T00:43:09Z")
I was referred to GutHub by ES Cloud Support in ticket #00344788 but I thought I should check here first before heading over there. I am trying to get a logstash exec command to work with a curl call that needs JSON pay… --- ## [Cant enable metricbeat modules](https://discuss.elastic.co/t/cant-enable-metricbeat-modules/146949)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 2\ **Last updated:** [September 3, 2018, 3:35pm UTC](https://discuss.elastic.co/t/cant-enable-metricbeat-modules/146949 "2018-09-03T15:35:47Z")
\[root@f7af2d4dd6a1 modules.d\]# metricbeat modules enable system Module system doesn't exist! metricbeat modules list Enabled: Disabled: \[root@f7af2d4dd6a1 modules.d\]# dir aerospike.yml.disabled golang.yml.disa… --- ## [Incorrect Post syntax for Elasticsearch in postman](https://discuss.elastic.co/t/incorrect-post-syntax-for-elasticsearch-in-postman/142364)
**Author:** [@Michael\_C.H\_Wang](https://discuss.elastic.co/u/Michael_C.H_Wang)\ **Replies:** 2\ **Last updated:** [July 31, 2018, 2:45pm UTC](https://discuss.elastic.co/t/incorrect-post-syntax-for-elasticsearch-in-postman/142364 "2018-07-31T14:45:04Z")
Hi,I'm a new learner and follow AWS example here: https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-gsg-upload-data.html to build my first elasticsearch application. I'm using Postman for curl co… [Previous page](https://discuss.elastic.co/top.md?page=1301&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1303&per_page=50&period=all)