# Top

**URL:** https://discuss.elastic.co/top.md?page=1311&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1312

---

## [Pipeline startup/shutdown ordering when using multiple pipeline](https://discuss.elastic.co/t/pipeline-startup-shutdown-ordering-when-using-multiple-pipeline/113912)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 9:49am UTC](https://discuss.elastic.co/t/pipeline-startup-shutdown-ordering-when-using-multiple-pipeline/113912 "2018-01-05T09:49:49Z")

</div>

Hi, I am using Logstash-6.1.1 and its multiple pipeline feature. I need to send data to elasticsearch and hadoop with the caveat that hadoop service may become unavailable (it is managed by a second team and is located …

---

## [Do synonyms chain?](https://discuss.elastic.co/t/do-synonyms-chain/109551)

<div class="topic-metadata">

**Author:** [@robbo](https://discuss.elastic.co/u/robbo)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 12:14pm UTC](https://discuss.elastic.co/t/do-synonyms-chain/109551 "2017-11-29T12:14:12Z")

</div>

We've spotted some unusual behaviour when using synonyms, and I just wanted to confirm whether we've found a bug or a feature :slight\_smile: We've a synonym list that contains something like this dog, pet pet, cat ca…

---

## [Logstash JDBC Input Unable to Connect to Multiple DB](https://discuss.elastic.co/t/logstash-jdbc-input-unable-to-connect-to-multiple-db/104461)

<div class="topic-metadata">

**Author:** [@Kareny](https://discuss.elastic.co/u/Kareny)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 10:05pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-unable-to-connect-to-multiple-db/104461 "2017-10-30T22:05:19Z")

</div>

Hi, I'm currently working on getting the data from multiple DBs using the JDBC input plugin. As the config shown below, I have separate jdbc configs for MySQL and MSSQL. " input { jdbc { jdbc\_driver\_library =\>"/opt/j…

---

## [Is it possible to avoid the delay caused by 'Loading Kibana' text in an embedded visualization?](https://discuss.elastic.co/t/is-it-possible-to-avoid-the-delay-caused-by-loading-kibana-text-in-an-embedded-visualization/78123)

<div class="topic-metadata">

**Author:** [@anupam](https://discuss.elastic.co/u/anupam)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 8:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-avoid-the-delay-caused-by-loading-kibana-text-in-an-embedded-visualization/78123 "2017-03-15T08:31:11Z")

</div>

Hi there, I created a Visualization with Kibana and embedded it into my Django app. Everytime I load the page, it first shows the 'Loading Kibana' text and then shows the visualization. Because of that, it takes about …

---

## [Marvel location missing for plugin installation?](https://discuss.elastic.co/t/marvel-location-missing-for-plugin-installation/48815)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 4:14pm UTC](https://discuss.elastic.co/t/marvel-location-missing-for-plugin-installation/48815 "2016-04-29T16:14:34Z")

</div>

When I run: /opt/elasticsearch/bin/plugin install marvel I get the following output: -\> Installing marvel... Trying https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/marvel/2.3.2/marvel-2.3.…

---

## [Elasticsearch kibana time issue](https://discuss.elastic.co/t/elasticsearch-kibana-time-issue/27878)

<div class="topic-metadata">

**Author:** [@achan](https://discuss.elastic.co/u/achan)\
**Replies:** 2\
**Last updated:** [August 24, 2015, 12:46am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-time-issue/27878 "2015-08-24T00:46:36Z")

</div>

I am having strange problem with a time stamp field. the field is called tme. the document was loaded via logstash. I filtered the field doing the following. date { match =\> \["tme", "yyyy-MM-dd'T'HH:mm:ss"\] …

---

## [Doing math on the content of unique counts](https://discuss.elastic.co/t/doing-math-on-the-content-of-unique-counts/26834)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 2\
**Last updated:** [August 5, 2015, 6:36pm UTC](https://discuss.elastic.co/t/doing-math-on-the-content-of-unique-counts/26834 "2015-08-05T18:36:34Z")

</div>

(The following is a little contrived, but is a simplification of what I'm really after. Hopefully it didn't loose meaning when I abstracted the content, but man: it was really messy to read) A. I have a field, Foo. I…

---

## [Unable to use multiple output plugin](https://discuss.elastic.co/t/unable-to-use-multiple-output-plugin/156618)

<div class="topic-metadata">

**Author:** [@ravikt](https://discuss.elastic.co/u/ravikt)\
**Replies:** 0\
**Last updated:** [November 14, 2018, 9:39am UTC](https://discuss.elastic.co/t/unable-to-use-multiple-output-plugin/156618 "2018-11-14T09:39:23Z")

</div>

I am trying to send data from cloudwatch logs to both amazon elasticsearch and S3 bucket from the same logstash instance. I see data going to amazon ES but not to S3 bucket. Below is the configuration I am using for logs…

---

## [Cluster in Yellow](https://discuss.elastic.co/t/cluster-in-yellow/145630)

<div class="topic-metadata">

**Author:** [@newlearner](https://discuss.elastic.co/u/newlearner)\
**Replies:** 0\
**Last updated:** [August 23, 2018, 2:23am UTC](https://discuss.elastic.co/t/cluster-in-yellow/145630 "2018-08-23T02:23:39Z")

</div>

Hi team I have .watches replica in UNASSIGNED state due to which my cluster in showing Yellow .watches 0 p STARTED .watches 0 r UNASSIGNED I restarted t…

---

## [Elastic docker restart](https://discuss.elastic.co/t/elastic-docker-restart/314582)

<div class="topic-metadata">

**Author:** [@Isekai](https://discuss.elastic.co/u/Isekai)\
**Replies:** 3\
**Last updated:** [October 10, 2022, 10:29pm UTC](https://discuss.elastic.co/t/elastic-docker-restart/314582 "2022-10-10T22:29:14Z")

</div>

Hi everyone, We have an elastic instance that we feed data from CI jobs. It is single node instance. Maybe some data from the cluster: "cluster\_name" : "docker-cluster", "status" : "yellow", "timed\_out" : false…

---

## [Elastic Search with Docker](https://discuss.elastic.co/t/elastic-search-with-docker/245946)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 8\
**Last updated:** [August 21, 2020, 8:43pm UTC](https://discuss.elastic.co/t/elastic-search-with-docker/245946 "2020-08-21T20:43:04Z")

</div>

I ran the following docker compose script and I am expecting two nodes to be up, however this only one. There seems to be some obvious error , please suggest your inputs Taken from the documentation https://www.elastic.…

---

## [Any solutions ? Please share me](https://discuss.elastic.co/t/any-solutions-please-share-me/206263)

<div class="topic-metadata">

**Author:** [@pbona](https://discuss.elastic.co/u/pbona)\
**Replies:** 3\
**Last updated:** [November 3, 2019, 11:18pm UTC](https://discuss.elastic.co/t/any-solutions-please-share-me/206263 "2019-11-03T23:18:03Z")

</div>

\[root@elastic logstash\]# tail -f /var/log/logstash/logstash-plain.log \[2019-10-30T04:39:22,142\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\<ArgumentError: Path "/var/lib/logstash/queue" mus…

---

## [Filebeat pushs syslog logs to elasticsearch through Logstash](https://discuss.elastic.co/t/filebeat-pushs-syslog-logs-to-elasticsearch-through-logstash/205149)

<div class="topic-metadata">

**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\
**Replies:** 3\
**Last updated:** [October 25, 2019, 8:53pm UTC](https://discuss.elastic.co/t/filebeat-pushs-syslog-logs-to-elasticsearch-through-logstash/205149 "2019-10-25T20:53:29Z")

</div>

Hi everyone! I'm trying to push syslog logs to elasticsearch by using Filebeat and Logstash. How should my configuration files look like? #=========================== Filebeat inputs ============================= file…

---

## [Log sequence issue in Kibana](https://discuss.elastic.co/t/log-sequence-issue-in-kibana/199607)

<div class="topic-metadata">

**Author:** [@Vipin\_Gaur](https://discuss.elastic.co/u/Vipin_Gaur)\
**Replies:** 3\
**Last updated:** [September 17, 2019, 2:18pm UTC](https://discuss.elastic.co/t/log-sequence-issue-in-kibana/199607 "2019-09-17T14:18:15Z")

</div>

All, We are successfully shipping logs to ELK,Actual App Logs are generating in Kibana but with different sequence.Basically I want the log lines shown on Kibana to be in the same order as I would see them in the actual…

---

## [How to prevent terms aggregation from causing OOM on data nodes](https://discuss.elastic.co/t/how-to-prevent-terms-aggregation-from-causing-oom-on-data-nodes/190941)

<div class="topic-metadata">

**Author:** [@stephen.palfreyman](https://discuss.elastic.co/u/stephen.palfreyman)\
**Replies:** 3\
**Last updated:** [July 17, 2019, 10:15am UTC](https://discuss.elastic.co/t/how-to-prevent-terms-aggregation-from-causing-oom-on-data-nodes/190941 "2019-07-17T10:15:52Z")

</div>

We have experienced a similar issue to that described in this thread whereby one of our users tries to create a huge data table in a visualization in Kibana. This table has 2 buckets which result in 180,000 discrete valu…

---

## [Filebeat cipher configurations](https://discuss.elastic.co/t/filebeat-cipher-configurations/164995)

<div class="topic-metadata">

**Author:** [@Madhan1911](https://discuss.elastic.co/u/Madhan1911)\
**Replies:** 3\
**Last updated:** [January 22, 2019, 11:24am UTC](https://discuss.elastic.co/t/filebeat-cipher-configurations/164995 "2019-01-22T11:24:04Z")

</div>

ssl.cipher\_suites: \[RSA-AES-128-CBC-SHA, RSA-AES-256-CBC-SHA , ECDHE-ECDSA-AES-128-CBC-SHA, ECDHE-ECDSA-AES-256-CBC-SHA, ECDHE-RSA-AES-128-CBC-SHA, ECDHE-RSA-AES-256-CBC-SHA, ECDHE-RSA-AES-128-GCM-SHA256, ECDHE-ECDSA-AES…

---

## [Kibana 6.3.0 failing on \> management \> Index Patterns](https://discuss.elastic.co/t/kibana-6-3-0-failing-on-management-index-patterns/140325)

<div class="topic-metadata">

**Author:** [@pankaj\_ghadge](https://discuss.elastic.co/u/pankaj_ghadge)\
**Replies:** 3\
**Last updated:** [July 19, 2018, 10:28am UTC](https://discuss.elastic.co/t/kibana-6-3-0-failing-on-management-index-patterns/140325 "2018-07-19T10:28:20Z")

</div>

Hello, I'm new newbie to ELK I have installed Elastic search + Kibana using following URL on centos 7 http://xxx.xxx.xxx.xxx:5601/app/kibana#/management/kibana/indices/ Change 1. changed the installation location fo…

---

## [Elasticsearch giving warning for painless script](https://discuss.elastic.co/t/elasticsearch-giving-warning-for-painless-script/113030)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 3\
**Last updated:** [December 23, 2017, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-giving-warning-for-painless-script/113030 "2017-12-23T13:28:04Z")

</div>

Hi team, I have a question regarding Date API. As you can see in the below script, i am trying to subtract two dates. As this script does give me the result but with that it's also giving me a Deprecation warning. \[ima…

---

## [Logstash timestamp/time/date problems](https://discuss.elastic.co/t/logstash-timestamp-time-date-problems/79753)

<div class="topic-metadata">

**Author:** [@hologram](https://discuss.elastic.co/u/hologram)\
**Replies:** 3\
**Last updated:** [March 23, 2017, 1:58pm UTC](https://discuss.elastic.co/t/logstash-timestamp-time-date-problems/79753 "2017-03-23T13:58:47Z")

</div>

Hi all I need some help. I set my first elk this morning . I used this tutorial. https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7 At the end I wa…

---

## [Moment erorr in kibana dev env](https://discuss.elastic.co/t/moment-erorr-in-kibana-dev-env/78433)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 3\
**Last updated:** [March 17, 2017, 4:11pm UTC](https://discuss.elastic.co/t/moment-erorr-in-kibana-dev-env/78433 "2017-03-17T16:11:31Z")

</div>

PSP: everything is ok in non-dev mode after npm install, then I run ./bin/kibana --dev --no-ssl --no-base-path, after I refresh the chrome, I got below error later: WARNING in ./~/.2.13.0@moment/min/moment.min.js …

---

## [Problem running WMI plugin](https://discuss.elastic.co/t/problem-running-wmi-plugin/63643)

<div class="topic-metadata">

**Author:** [@fmeehan](https://discuss.elastic.co/u/fmeehan)\
**Replies:** 3\
**Last updated:** [November 2, 2016, 1:15pm UTC](https://discuss.elastic.co/t/problem-running-wmi-plugin/63643 "2016-11-02T13:15:47Z")

</div>

Hi all , I am trying to use logstash-input-wmi version 3.0 with logstash 2.4.0 on a Windows Server 2012r2. I have downloaded the Gem file and ran the logstash-plugin install script, it ran fine, when I run logstash-…

---

## [Cloudtrail codec - failed to parse \[requestParameters.buckeyPolicy.Statement.Principal\]](https://discuss.elastic.co/t/cloudtrail-codec-failed-to-parse-requestparameters-buckeypolicy-statement-principal/62498)

<div class="topic-metadata">

**Author:** [@stivi21](https://discuss.elastic.co/u/stivi21)\
**Replies:** 3\
**Last updated:** [October 11, 2016, 9:05pm UTC](https://discuss.elastic.co/t/cloudtrail-codec-failed-to-parse-requestparameters-buckeypolicy-statement-principal/62498 "2016-10-11T21:05:23Z")

</div>

Hello I have problems with parse in some situation, where I have error: "type"=\>"mapper\_parsing\_exception", "reason"=\>"failed to parse \[requestParameters.buckeyPolicy.Statement.Principal\]", "caused\_by"=\>{"type"=\>"illegal…

---

## [Problem with Or filter](https://discuss.elastic.co/t/problem-with-or-filter/3636)

<div class="topic-metadata">

**Author:** [@rs1050](https://discuss.elastic.co/u/rs1050)\
**Replies:** 8\
**Last updated:** [December 8, 2010, 6:06am UTC](https://discuss.elastic.co/t/problem-with-or-filter/3636 "2010-12-08T06:06:30Z")

</div>

I am getting this exception Dec 06 20:35:56,30 \[31223651@qtp-32715418-11\] ERROR org.elasticsearch.action.search.SearchPhaseExecutionException: Failed to execute phase \[dfs\], total failure; shardFailures {null: Rem…

---

## [Change output for agent policies disabled in](https://discuss.elastic.co/t/change-output-for-agent-policies-disabled-in/341958)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 1\
**Last updated:** [August 30, 2023, 10:13am UTC](https://discuss.elastic.co/t/change-output-for-agent-policies-disabled-in/341958 "2023-08-30T10:13:06Z")

</div>

We are running 8.x fleet server and i am trying to change my output for agents based on different agent policies ( They correlate to different Data Centers ) The output does not allow me to change anything but default, …

---

## [Fail for update certificate elastic cloud enterprise](https://discuss.elastic.co/t/fail-for-update-certificate-elastic-cloud-enterprise/253607)

<div class="topic-metadata">

**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\
**Replies:** 1\
**Last updated:** [November 10, 2020, 1:45pm UTC](https://discuss.elastic.co/t/fail-for-update-certificate-elastic-cloud-enterprise/253607 "2020-11-10T13:45:26Z")

</div>

Hi everyone, I'm new with Elastic Cloud Enterprise and installation worked fine but when tested in my web browser, say that certificate not trusted. So i tryed updated certificate generated with the "certbot" the EC…

---

## [ILM - How to configure to delete indexes older than 24 hours?](https://discuss.elastic.co/t/ilm-how-to-configure-to-delete-indexes-older-than-24-hours/202941)

<div class="topic-metadata">

**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\
**Replies:** 1\
**Last updated:** [October 10, 2019, 8:46pm UTC](https://discuss.elastic.co/t/ilm-how-to-configure-to-delete-indexes-older-than-24-hours/202941 "2019-10-10T20:46:32Z")

</div>

Hello, I have indexes getting generated from logstash in below format : indexname-yyyy-mm-dd and so on... I want to set up index lifecycle management so that index older than a day gets deleted. How to achieve that ? …

---

## [Set minimum\_master\_nodes](https://discuss.elastic.co/t/set-minimum-master-nodes/152187)

<div class="topic-metadata">

**Author:** [@bert\_vervaele](https://discuss.elastic.co/u/bert_vervaele)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 9:43am UTC](https://discuss.elastic.co/t/set-minimum-master-nodes/152187 "2018-10-12T09:43:32Z")

</div>

Hey, I was wondering if I had to set the "discovery.zen.minimum\_master\_nodes" setting in the yml of all my nodes in the cluster or only the master eligible ones? Kind regards Bert

---

## [How to config logstash to listen privilage port without root access](https://discuss.elastic.co/t/how-to-config-logstash-to-listen-privilage-port-without-root-access/67080)

<div class="topic-metadata">

**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\
**Replies:** 1\
**Last updated:** [November 28, 2016, 8:14am UTC](https://discuss.elastic.co/t/how-to-config-logstash-to-listen-privilage-port-without-root-access/67080 "2016-11-28T08:14:46Z")

</div>

I want to collect syslogs from cisco switch which will use UDP 514 to send syslogs. I tried setcap command and port forwarding on firewall. But failed. I used following commands, setcap - setcap cap\_net\_bind\_service=…

---

## [Kibana Controls shows only top 10 values](https://discuss.elastic.co/t/kibana-controls-shows-only-top-10-values/297949)

<div class="topic-metadata">

**Author:** [@Eduard\_Abril](https://discuss.elastic.co/u/Eduard_Abril)\
**Replies:** 4\
**Last updated:** [February 23, 2022, 10:14pm UTC](https://discuss.elastic.co/t/kibana-controls-shows-only-top-10-values/297949 "2022-02-23T22:14:15Z")

</div>

Hi guys, I'm building some kibana dashbaords using control panel and I have a problem because control panel is showing only the first 10 values or at least it seems so. I understand that control panel does a terms aggr…

---

## [Support for asynchronous message communication with Spring Cloud Stream on RabbitMQ](https://discuss.elastic.co/t/support-for-asynchronous-message-communication-with-spring-cloud-stream-on-rabbitmq/218175)

<div class="topic-metadata">

**Author:** [@DannyT](https://discuss.elastic.co/u/DannyT)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 5:51am UTC](https://discuss.elastic.co/t/support-for-asynchronous-message-communication-with-spring-cloud-stream-on-rabbitmq/218175 "2020-02-10T05:51:41Z")

</div>

Hi everyone, according to Does Elastic APM support Spring Cloud Stream? the current Java Agent (elastic-apm-agent-1.12.0.jar and Elastic 7.5.1) does not support creation of transactions and spans from asynchronous mess…

---

## [Cannot Start Free Trial for Elastic Cloud](https://discuss.elastic.co/t/cannot-start-free-trial-for-elastic-cloud/212580)

<div class="topic-metadata">

**Author:** [@danielbt](https://discuss.elastic.co/u/danielbt)\
**Replies:** 4\
**Last updated:** [December 20, 2019, 1:58pm UTC](https://discuss.elastic.co/t/cannot-start-free-trial-for-elastic-cloud/212580 "2019-12-20T13:58:10Z")

</div>

As per the Lab Instructions, I have visited https://www.elastic.co/cloud/elasticsearch-service/signup , given my email address (which matches the email address used in this course), and clicked the "Start free trial" but…

---

## [Kibana(6.7.2) run in docker raise \[ERR\_TOO\_MANY\_REDIRECTS\]](https://discuss.elastic.co/t/kibana-6-7-2-run-in-docker-raise-err-too-many-redirects/196077)

<div class="topic-metadata">

**Author:** [@chen\_steven](https://discuss.elastic.co/u/chen_steven)\
**Replies:** 4\
**Last updated:** [August 27, 2019, 3:10am UTC](https://discuss.elastic.co/t/kibana-6-7-2-run-in-docker-raise-err-too-many-redirects/196077 "2019-08-27T03:10:29Z")

</div>

OS: centos 7 kibana version: 6.7.2 Docker version 1.13.1, build b2f74b2/1.13.1 docker-compose version 1.18.0, build 8dd22a9 and other odds and ends I've tried to start a kibana node by docker-compose version: '2' …

---

## [How do I create a DB query with variable parameters?](https://discuss.elastic.co/t/how-do-i-create-a-db-query-with-variable-parameters/149818)

<div class="topic-metadata">

**Author:** [@sversienti](https://discuss.elastic.co/u/sversienti)\
**Replies:** 4\
**Last updated:** [September 26, 2018, 12:27pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-db-query-with-variable-parameters/149818 "2018-09-26T12:27:27Z")

</div>

Hi, I'd like to set up a parameterized query. I configured my logstash.conf to query my Oracle database. My table has a REF\_DATE field valued with a date CHAR(10 BYTE). I need to make the following query: \`SELECT COUN…

---

## [Any schedule for 1.0.2](https://discuss.elastic.co/t/any-schedule-for-1-0-2/92429)

<div class="topic-metadata">

**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\
**Replies:** 4\
**Last updated:** [July 11, 2017, 3:38am UTC](https://discuss.elastic.co/t/any-schedule-for-1-0-2/92429 "2017-07-11T03:38:51Z")

</div>

Hi ECE. We worry about for 1.0.1 ECE we installed, we can not upgrade to 1.0.2. So we are waiting for 1.0.2 to be released then to use in production service. Is there any ETA for that?

---

## [Enrich policy execution interval in Elasticsearch 8.5](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863)

<div class="topic-metadata">

**Author:** [@Jan\_lindroos](https://discuss.elastic.co/u/Jan_lindroos)\
**Replies:** 5\
**Last updated:** [November 27, 2022, 1:05pm UTC](https://discuss.elastic.co/t/enrich-policy-execution-interval-in-elasticsearch-8-5/319863 "2022-11-27T13:05:15Z")

</div>

Hi, the elastic docs for 8.5 says that by default the execution policies are executed every 15 minutes, but as far as I can see from the timestamp of the enrich index, the policy has not been executed after I initially e…

---

## [Configure Alerts in elastic cloud 7.7](https://discuss.elastic.co/t/configure-alerts-in-elastic-cloud-7-7/233744)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 5\
**Last updated:** [May 25, 2020, 5:13pm UTC](https://discuss.elastic.co/t/configure-alerts-in-elastic-cloud-7-7/233744 "2020-05-25T17:13:39Z")

</div>

Hi, I have Elastic Cloud service, recently I've updated to 7.7 but I don't see the way to use alerts notifications with slack or my email. That's functionalities are premium or something? or I should have the possibili…

---

## [Logstash Filter for JSON data](https://discuss.elastic.co/t/logstash-filter-for-json-data/72574)

<div class="topic-metadata">

**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\
**Replies:** 5\
**Last updated:** [January 24, 2017, 8:11am UTC](https://discuss.elastic.co/t/logstash-filter-for-json-data/72574 "2017-01-24T08:11:03Z")

</div>

hello, i have the same issue with this post. the difference is he use filebeat to send data to logstash, then the logstash will send data to elasticsearch. i use logstash to load my log file (written in json), then …

---

## [Kibana Reporting](https://discuss.elastic.co/t/kibana-reporting/59724)

<div class="topic-metadata">

**Author:** [@Ucyber](https://discuss.elastic.co/u/Ucyber)\
**Replies:** 5\
**Last updated:** [September 6, 2016, 11:27pm UTC](https://discuss.elastic.co/t/kibana-reporting/59724 "2016-09-06T23:27:19Z")

</div>

Where do Kibana reports are saved ?

---

## [Fetching long value from date field using Java API](https://discuss.elastic.co/t/fetching-long-value-from-date-field-using-java-api/13558)

<div class="topic-metadata">

**Author:** [@Adrian\_2](https://discuss.elastic.co/u/Adrian_2)\
**Replies:** 5\
**Last updated:** [September 12, 2013, 7:01pm UTC](https://discuss.elastic.co/t/fetching-long-value-from-date-field-using-java-api/13558 "2013-09-12T19:01:42Z")

</div>

Hi, is it possible to fetch the stored long value of the date field using the Java API, when this field is included in a SearchHit? Thanks, Adrian -- You received this message because you are subscribed to t…

---

## [Install elasticsearch-river-csv](https://discuss.elastic.co/t/install-elasticsearch-river-csv/13021)

<div class="topic-metadata">

**Author:** [@Faillissements\_Dossi](https://discuss.elastic.co/u/Faillissements_Dossi)\
**Replies:** 5\
**Last updated:** [August 1, 2013, 5:52am UTC](https://discuss.elastic.co/t/install-elasticsearch-river-csv/13021 "2013-08-01T05:52:13Z")

</div>

Hi, I try to use river csv on elasticsearch. As I saw in older posts the command bin/plugin -install xxBedy/elasticsearch-river-csv/1.0.1 does not work. The advice on Github is: If it doesn't work, clone git rep…

---

## [Elasticsearch with Go and Docker](https://discuss.elastic.co/t/elasticsearch-with-go-and-docker/305008)

<div class="topic-metadata">

**Author:** [@mrfirdauss-20](https://discuss.elastic.co/u/mrfirdauss-20)\
**Replies:** 2\
**Last updated:** [May 18, 2022, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-with-go-and-docker/305008 "2022-05-18T04:21:43Z")

</div>

I use docker and Elasticsearch, i got confused, when i set the Elasticsearch url (when initialize it) in golang to "Elasticsearch:9200", the massages shows \> "health check timeout: no Elasticsearch node available" but …

---

## [Watcher - Alerts to call an External API](https://discuss.elastic.co/t/watcher-alerts-to-call-an-external-api/238160)

<div class="topic-metadata">

**Author:** [@sushmamagesh](https://discuss.elastic.co/u/sushmamagesh)\
**Replies:** 2\
**Last updated:** [July 13, 2020, 11:13pm UTC](https://discuss.elastic.co/t/watcher-alerts-to-call-an-external-api/238160 "2020-07-13T23:13:54Z")

</div>

Hi Can you please point to any documentation on how to connect from watcher alerts to an external third party API, basically as http call that returns a set of parameters in JSON format. The alert then needs to be able …

---

## [Starting Kibana creates continual adding template message](https://discuss.elastic.co/t/starting-kibana-creates-continual-adding-template-message/178282)

<div class="topic-metadata">

**Author:** [@aviator](https://discuss.elastic.co/u/aviator)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 9:09am UTC](https://discuss.elastic.co/t/starting-kibana-creates-continual-adding-template-message/178282 "2019-04-25T09:09:20Z")

</div>

Update: So the kibana logs showed a permissions error unpacking phantom.js, a little further digging showed that the /var/lib/kibana directory needed permissions changing (https://github.com/elastic/kibana/issues/30583)…

---

## [Packetbeat logs filter DNS array fields](https://discuss.elastic.co/t/packetbeat-logs-filter-dns-array-fields/51858)

<div class="topic-metadata">

**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\
**Replies:** 2\
**Last updated:** [July 3, 2017, 3:40pm UTC](https://discuss.elastic.co/t/packetbeat-logs-filter-dns-array-fields/51858 "2017-07-03T15:40:55Z")

</div>

Hi All, I have requests assistance in the Packetbeat forum initially however was referred to the logstash section for assistance. Here is the link for additional information if required on the prior discussion: What I…

---

## [Logstash grok matching entire filebeat message instead of message inside](https://discuss.elastic.co/t/logstash-grok-matching-entire-filebeat-message-instead-of-message-inside/64976)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 5:59am UTC](https://discuss.elastic.co/t/logstash-grok-matching-entire-filebeat-message-instead-of-message-inside/64976 "2016-11-04T05:59:21Z")

</div>

I have setup Filebeat -\> Kafka -\> Logstash -\> Elasticseatch system. I have filebeat output like; {"@timestamp":"2016-11-04T05:16:16.108Z","beat":{"hostname":"localhost","name":"localhost","version":"5.0.0"},"fields":…

---

## [Will the snapshot repository able to capture the changes in mappings?](https://discuss.elastic.co/t/will-the-snapshot-repository-able-to-capture-the-changes-in-mappings/339244)

<div class="topic-metadata">

**Author:** [@ian.chan](https://discuss.elastic.co/u/ian.chan)\
**Replies:** 6\
**Last updated:** [July 27, 2023, 5:19am UTC](https://discuss.elastic.co/t/will-the-snapshot-repository-able-to-capture-the-changes-in-mappings/339244 "2023-07-27T05:19:09Z")

</div>

Hi. Let's say I have registered a snapshot repository for an index A, with slm policy taking snapshot every hour. Then I add a new field in the mapping of the index A, and add some new documents with values in this new…

---

## [Drill Down functionality](https://discuss.elastic.co/t/drill-down-functionality/76978)

<div class="topic-metadata">

**Author:** [@vandana](https://discuss.elastic.co/u/vandana)\
**Replies:** 1\
**Last updated:** [March 1, 2017, 5:49pm UTC](https://discuss.elastic.co/t/drill-down-functionality/76978 "2017-03-01T17:49:22Z")

</div>

I want drill down functionality in kibana charts. That is after clicking on a bar of a vertical bar chart i should be able to see the records from which the bar is been generated. Is there any way to do this?

---

## [\_rubyexception when accessing ‘event’ array in ruby code](https://discuss.elastic.co/t/-rubyexception-when-accessing-event-array-in-ruby-code/57553)

<div class="topic-metadata">

**Author:** [@k007](https://discuss.elastic.co/u/k007)\
**Replies:** 1\
**Last updated:** [August 9, 2016, 8:45am UTC](https://discuss.elastic.co/t/-rubyexception-when-accessing-event-array-in-ruby-code/57553 "2016-08-09T08:45:08Z")

</div>

Hello , I am trying to use below code in logstash 5 but getting \_rubyexception. code =\> "event\['dest-field'\] = event\['message'\]\[0..1\]"

---

## [Elasticsearch "status" : "yellow" How to fix the status?](https://discuss.elastic.co/t/elasticsearch-status-yellow-how-to-fix-the-status/316467)

<div class="topic-metadata">

**Author:** [@igor\_denisov](https://discuss.elastic.co/u/igor_denisov)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-status-yellow-how-to-fix-the-status/316467 "2022-10-13T13:01:56Z")

</div>

\#curl kibana:kibana@172.17.0.1:9200/\_cluster/health?pretty=true { "cluster\_name" : "xxxxx-cluster", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 2, "number\_of\_data\_nodes" : 2, "active\_primar…

---

## [Logstash using multiline for big log file](https://discuss.elastic.co/t/logstash-using-multiline-for-big-log-file/292150)

<div class="topic-metadata">

**Author:** [@pan1](https://discuss.elastic.co/u/pan1)\
**Replies:** 3\
**Last updated:** [December 17, 2021, 5:18pm UTC](https://discuss.elastic.co/t/logstash-using-multiline-for-big-log-file/292150 "2021-12-17T17:18:50Z")

</div>

Hello everyone, I have to handle big log-files (arround 50k lines) using ELK and want to extract some information out of it. A long story short, I want to use filter for searching for specific informations, store thos…

[Previous page](https://discuss.elastic.co/top.md?page=1310&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1312&per_page=50&period=all)
