# Top

**URL:** https://discuss.elastic.co/top.md?page=1320&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1321

---

## [Не получается загрузить таблицу русских синонимов с tokenizer: standard](https://discuss.elastic.co/t/tokenizer-standard/131371)

<div class="topic-metadata">

**Author:** [@0a65943d6710c3373c00](https://discuss.elastic.co/u/0a65943d6710c3373c00)\
**Replies:** 6\
**Last updated:** [May 11, 2018, 2:44pm UTC](https://discuss.elastic.co/t/tokenizer-standard/131371 "2018-05-11T14:44:16Z")

</div>

analyzer: analy: tokenizer: standard filter: \[ synonym\_filter \] filter: synonym\_filter: type: synonym\_graph synonyms: - 'тюб, тюбик' приводит к: failed to build synon…

---

## [CommunityBeat - JMXProxyBeat Issue](https://discuss.elastic.co/t/communitybeat-jmxproxybeat-issue/124735)

<div class="topic-metadata">

**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\
**Replies:** 6\
**Last updated:** [March 22, 2018, 10:09am UTC](https://discuss.elastic.co/t/communitybeat-jmxproxybeat-issue/124735 "2018-03-22T10:09:51Z")

</div>

Hi, I am trying to configure the JMXProxyBeat from the community beats for monitoring the Tomcat parameters through the ELK stack. The configuration settings are as follows, ElasticSerach - Logstash - Kibana - JMXPr…

---

## [Transfer Unix messages to ELS](https://discuss.elastic.co/t/transfer-unix-messages-to-els/101927)

<div class="topic-metadata">

**Author:** [@bigsol](https://discuss.elastic.co/u/bigsol)\
**Replies:** 6\
**Last updated:** [September 27, 2017, 11:25am UTC](https://discuss.elastic.co/t/transfer-unix-messages-to-els/101927 "2017-09-27T11:25:28Z")

</div>

Hello all, I need your help to understand how I forward UNIX SYSTEM (SOLARIS) messages to ELS? Thanks

---

## [Event correlation in 7.7](https://discuss.elastic.co/t/event-correlation-in-7-7/233621)

<div class="topic-metadata">

**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 12:02pm UTC](https://discuss.elastic.co/t/event-correlation-in-7-7/233621 "2020-05-21T12:02:50Z")

</div>

Hi all, Following on from the release of 7.7.0 and the new "Alerting and Actions" feature, I'm wondering what the best method of alerting based on correlated events would be. Loking to implement Alerting using the stac…

---

## [Combining 2 fields in logstash](https://discuss.elastic.co/t/combining-2-fields-in-logstash/179066)

<div class="topic-metadata">

**Author:** [@satyajeet\_dutt](https://discuss.elastic.co/u/satyajeet_dutt)\
**Replies:** 1\
**Last updated:** [May 24, 2019, 3:18pm UTC](https://discuss.elastic.co/t/combining-2-fields-in-logstash/179066 "2019-05-24T15:18:54Z")

</div>

I have been trying to combine 2 fields in logstash. My first clickstream log contains {x=y, software=DEMO, language=EN} as a parameter. My second log contains clickstream log {a=b, projectId=DEMO, language=EN} as a pa…

---

## [\_exists\_ doesn't seems work in 6.5.4](https://discuss.elastic.co/t/exists-doesnt-seems-work-in-6-5-4/168954)

<div class="topic-metadata">

**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 3:22am UTC](https://discuss.elastic.co/t/exists-doesnt-seems-work-in-6-5-4/168954 "2019-02-20T03:22:42Z")

</div>

The query exists:fieldname doesn't work in Kibana, when querying via search bar, but works with filter UI ("Add a filter" button). The query created in the first case: ... "filter":\[{ "bool":{ "should":\[{"match":{"e…

---

## [Avoir une liste de sujets dans la page Discover Kibana (un index ou plusieurs index)](https://discuss.elastic.co/t/avoir-une-liste-de-sujets-dans-la-page-discover-kibana-un-index-ou-plusieurs-index/129103)

<div class="topic-metadata">

**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\
**Replies:** 7\
**Last updated:** [April 26, 2018, 8:05am UTC](https://discuss.elastic.co/t/avoir-une-liste-de-sujets-dans-la-page-discover-kibana-un-index-ou-plusieurs-index/129103 "2018-04-26T08:05:09Z")

</div>

Bonjour à tous, Je suis nouvelle dans le ELK. Je souhaite avoir une liste de sujet (ici projet) dans la page Discover Kibana. par exemple, avoir une liste défini des projets souhaités: Projet 1 Projet 2 ... Projet…

---

## [Kibana dashboard modes: edit vs view](https://discuss.elastic.co/t/kibana-dashboard-modes-edit-vs-view/57844)

<div class="topic-metadata">

**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\
**Replies:** 1\
**Last updated:** [August 11, 2016, 7:30pm UTC](https://discuss.elastic.co/t/kibana-dashboard-modes-edit-vs-view/57844 "2016-08-11T19:30:45Z")

</div>

In Kibana 5.0, the dashboard appears to be much cleaner and save a lot of screen real estate by removing the widget borders, padding and headers. However, when hovering over a dashboard with many widgets, the headers t…

---

## [How to create sub indexes for an index in config file of logstash](https://discuss.elastic.co/t/how-to-create-sub-indexes-for-an-index-in-config-file-of-logstash/55881)

<div class="topic-metadata">

**Author:** [@pavana](https://discuss.elastic.co/u/pavana)\
**Replies:** 7\
**Last updated:** [July 20, 2016, 11:48am UTC](https://discuss.elastic.co/t/how-to-create-sub-indexes-for-an-index-in-config-file-of-logstash/55881 "2016-07-20T11:48:36Z")

</div>

I have QueueMessage and MessageID as two fields which i defined using csv as shown below. input { log4j { mode =\> "server" host =\> "0.0.0.0" port =\> 3456 type =\> "log4j" } } filter{ csv{ columns=\> …

---

## [Nested Mapping Performance & Retrieving "Complete" Nested Objects](https://discuss.elastic.co/t/nested-mapping-performance-retrieving-complete-nested-objects/572)

<div class="topic-metadata">

**Author:** [@jdh2550](https://discuss.elastic.co/u/jdh2550)\
**Replies:** 1\
**Last updated:** [May 14, 2015, 2:00pm UTC](https://discuss.elastic.co/t/nested-mapping-performance-retrieving-complete-nested-objects/572 "2015-05-14T14:00:07Z")

</div>

I have two questions regarding nested mapping: 1) If I have millions of documents that each contain a nested array with up to fifty entries in the array and each array entry consisting of an object having up to a dozen…

---

## [Nested内のオブジェクト数で絞り込みする方法について](https://discuss.elastic.co/t/nested/207430)

<div class="topic-metadata">

**Author:** [@onorioriori](https://discuss.elastic.co/u/onorioriori)\
**Replies:** 2\
**Last updated:** [November 14, 2019, 4:55am UTC](https://discuss.elastic.co/t/nested/207430 "2019-11-14T04:55:18Z")

</div>

お世話になっております。 以前質問させて頂いた「Nested内のオブジェクト数でソートする方法について」の延長上にあるのですが、 以下のようなnestedフィールドのインデックスを作成し、 PUT my\_index { "mappings": { "properties": { "user": { "type": "nested" } } } } nested内…

---

## [Filebeat not able to send logs to logstash (Filebeat fails to connect logstash)](https://discuss.elastic.co/t/filebeat-not-able-to-send-logs-to-logstash-filebeat-fails-to-connect-logstash/164821)

<div class="topic-metadata">

**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\
**Replies:** 2\
**Last updated:** [January 18, 2019, 8:22pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-logs-to-logstash-filebeat-fails-to-connect-logstash/164821 "2019-01-18T20:22:53Z")

</div>

I'm using two servers on the cloud on one server (A) I installed filebeat and on second server (B) I have installed logstash, elasticsearch, and kibana. So I'm facing problem while sending logs from server A to server B …

---

## [Failure\_type\_logging\_whitelist not working for document\_missing\_exception type](https://discuss.elastic.co/t/failure-type-logging-whitelist-not-working-for-document-missing-exception-type/164845)

<div class="topic-metadata">

**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\
**Replies:** 2\
**Last updated:** [January 18, 2019, 7:29pm UTC](https://discuss.elastic.co/t/failure-type-logging-whitelist-not-working-for-document-missing-exception-type/164845 "2019-01-18T19:29:23Z")

</div>

I have a pipeline set up to update documents in elasticsearch if they are found to have been removed from a database. Due to implementation details, I've decided it's easier to issue updates that fail if documents don't …

---

## [Incorrect order by Term in Heat Map aggregations](https://discuss.elastic.co/t/incorrect-order-by-term-in-heat-map-aggregations/123360)

<div class="topic-metadata">

**Author:** [@m.hashemian](https://discuss.elastic.co/u/m.hashemian)\
**Replies:** 2\
**Last updated:** [March 12, 2018, 5:49pm UTC](https://discuss.elastic.co/t/incorrect-order-by-term-in-heat-map-aggregations/123360 "2018-03-12T17:49:56Z")

</div>

Hi there, I have an index where each document has the following fields: record\_time, group\_id, user\_id. I want to create a heat map where Y-axis is the user\_id, and X-axis is the date and doc count is mapped to color. …

---

## [Error starting logstash](https://discuss.elastic.co/t/error-starting-logstash/99066)

<div class="topic-metadata">

**Author:** [@elk\_of\_the\_forest](https://discuss.elastic.co/u/elk_of_the_forest)\
**Replies:** 2\
**Last updated:** [September 1, 2017, 12:47am UTC](https://discuss.elastic.co/t/error-starting-logstash/99066 "2017-09-01T00:47:25Z")

</div>

Im using this command to start logstash: $ bin/logstash -f logstash-config/02-beats-input.conf -f logstash-config/10-syslog-filter.conf -f logstash-config/30-elasticsearch-output.conf Logstash gives this error. NameEr…

---

## [Elasticsearch 5.2.2 X-Pack disable default user](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-disable-default-user/95753)

<div class="topic-metadata">

**Author:** [@eramitsinha](https://discuss.elastic.co/u/eramitsinha)\
**Replies:** 2\
**Last updated:** [August 4, 2017, 6:27am UTC](https://discuss.elastic.co/t/elasticsearch-5-2-2-x-pack-disable-default-user/95753 "2017-08-04T06:27:39Z")

</div>

Hi, How to Disable Default User(elastic, kibana, logstash\_system) for production for 5.2.2 version. In 5.4, I could see following: xpack.security.authc.accept\_default\_password Thanks, Amit.

---

## [NameError with DLQ input plugin](https://discuss.elastic.co/t/nameerror-with-dlq-input-plugin/92688)

<div class="topic-metadata">

**Author:** [@scarletdenizen](https://discuss.elastic.co/u/scarletdenizen)\
**Replies:** 2\
**Last updated:** [July 14, 2017, 3:01pm UTC](https://discuss.elastic.co/t/nameerror-with-dlq-input-plugin/92688 "2017-07-14T15:01:58Z")

</div>

I'm trying to use the dead\_letter\_queue input plugin to reintroduce Elasticsearch events that get dropped back into the Logstash pipe and tag them. It appears as the Logstash 5.5 distribution fails to find the dead\_lette…

---

## [Type keyword in mapping but not able to aggregate on field kibana](https://discuss.elastic.co/t/type-keyword-in-mapping-but-not-able-to-aggregate-on-field-kibana/78331)

<div class="topic-metadata">

**Author:** [@ankush\_goswami](https://discuss.elastic.co/u/ankush_goswami)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 6:59pm UTC](https://discuss.elastic.co/t/type-keyword-in-mapping-but-not-able-to-aggregate-on-field-kibana/78331 "2017-03-15T18:59:51Z")

</div>

Hi All, I have updated mapping for my logs in Elasticsearch. Below is the mapping I have:- "beat" : { "properties" : { "hostname" : { "type" : "keyword" }, "nam…

---

## [Error makes logstash to crash](https://discuss.elastic.co/t/error-makes-logstash-to-crash/55094)

<div class="topic-metadata">

**Author:** [@Adrian\_Gallego](https://discuss.elastic.co/u/Adrian_Gallego)\
**Replies:** 2\
**Last updated:** [July 10, 2016, 8:05pm UTC](https://discuss.elastic.co/t/error-makes-logstash-to-crash/55094 "2016-07-10T20:05:44Z")

</div>

Hi, Currently I'm using logstash with sns output plugin to send alerts to Amazon SNS service. I have found that logstash is crashing with the following error Seahorse::Client::NetworkingError: execution expired …

---

## [ESHadoop - Hadoop vs Spark](https://discuss.elastic.co/t/eshadoop-hadoop-vs-spark/47509)

<div class="topic-metadata">

**Author:** [@Pat\_Humphreys](https://discuss.elastic.co/u/Pat_Humphreys)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 6:08am UTC](https://discuss.elastic.co/t/eshadoop-hadoop-vs-spark/47509 "2016-04-21T06:08:35Z")

</div>

I have a current Hadoop job running on AWS EMR, running ESHadoop with Cascading. It does bulk inserts of 10,000 4k records about 300M of them. I was wondering would there be any speed benefits of using Spark instead?

---

## [Timestamp error ElasticSearch 2.0.0](https://discuss.elastic.co/t/timestamp-error-elasticsearch-2-0-0/35034)

<div class="topic-metadata">

**Author:** [@emolla](https://discuss.elastic.co/u/emolla)\
**Replies:** 2\
**Last updated:** [November 19, 2015, 3:16pm UTC](https://discuss.elastic.co/t/timestamp-error-elasticsearch-2-0-0/35034 "2015-11-19T15:16:07Z")

</div>

Hello, I'm having problems with my mapping timestamp. My mapping is: { "\_source" : { "excludes" : \["file"\] }, "\_timestamp": { "enabled": true, "format": "dd-MM-yyyy HH:mm:ss|…

---

## [Kibana 4 3D Visualization -- starting work](https://discuss.elastic.co/t/kibana-4-3d-visualization-starting-work/28273)

<div class="topic-metadata">

**Author:** [@coderextreme](https://discuss.elastic.co/u/coderextreme)\
**Replies:** 2\
**Last updated:** [August 29, 2015, 7:59pm UTC](https://discuss.elastic.co/t/kibana-4-3d-visualization-starting-work/28273 "2015-08-29T19:59:54Z")

</div>

I'm starting work on a 3D visualization for Kibana 4. I'm getting ready to check my code into my github fork. Is there any gotchas I need to know about? I'm working on clearing errors from git commit right now. I inc…

---

## [Unable to find apikey warning](https://discuss.elastic.co/t/unable-to-find-apikey-warning/335956)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 4\
**Last updated:** [June 19, 2023, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-find-apikey-warning/335956 "2023-06-19T13:41:05Z")

</div>

Hello, for the info my cluster is on version 7.17.4 and it's based on 3 nodes that are all master eligible and data nodes. I keep getting this warning on my master node logs non-stop, \[2023-06-13T15:44:07,212\]\[WARN \]\[…

---

## [Wrong url in uptime UI for ERR\_CERT\_AUTHORITY\_INVALID](https://discuss.elastic.co/t/wrong-url-in-uptime-ui-for-err-cert-authority-invalid/269965)

<div class="topic-metadata">

**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Replies:** 4\
**Last updated:** [April 16, 2021, 7:26am UTC](https://discuss.elastic.co/t/wrong-url-in-uptime-ui-for-err-cert-authority-invalid/269965 "2021-04-16T07:26:26Z")

</div>

Hi, I am testing the synthetics package in version 7.12: I have a simple journey that looks like this: - type: browser id: pdl-ui-test name: pdl-ui-test schedule: "@every 1m" source: inline: script…

---

## [How to enable/disable custom plugin for particular user/spaces?](https://discuss.elastic.co/t/how-to-enable-disable-custom-plugin-for-particular-user-spaces/263546)

<div class="topic-metadata">

**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 10:09am UTC](https://discuss.elastic.co/t/how-to-enable-disable-custom-plugin-for-particular-user-spaces/263546 "2021-02-09T10:09:53Z")

</div>

Hi, I'm currently using Kibana 7.10, where I created a custom plugin that reflects the side navigation bar. Now I want to allow access for a specific user or space. Previously it was available for Kibana 7.6, now it has …

---

## [ECE config SAML](https://discuss.elastic.co/t/ece-config-saml/232499)

<div class="topic-metadata">

**Author:** [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Replies:** 4\
**Last updated:** [May 18, 2020, 12:28pm UTC](https://discuss.elastic.co/t/ece-config-saml/232499 "2020-05-18T12:28:46Z")

</div>

Hello I have a ECE cluster with 2 nodes (hot, warm) and with machine learning. I activated SAML configuration on one of the nodes. It actually works but not all the time. Do I need to add the configuration in the hot a…

---

## [Dont have Query count and cumulated duration \[Filebeat PostgreSQL\]](https://discuss.elastic.co/t/dont-have-query-count-and-cumulated-duration-filebeat-postgresql/173799)

<div class="topic-metadata">

**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 11:05pm UTC](https://discuss.elastic.co/t/dont-have-query-count-and-cumulated-duration-filebeat-postgresql/173799 "2019-03-27T23:05:20Z")

</div>

Hi. ELK stack version 6.6.2. I deployed a new server with PostgreSQL and I use Filebeat to send PostgreSQL logs the the elasticsearch cluster. I added the pluggin PostgreSQL and imported the dashboard (filebeat setup -e)…

---

## [Pipeline aggregation: full histogram of an aggregation](https://discuss.elastic.co/t/pipeline-aggregation-full-histogram-of-an-aggregation/66167)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Rezende](https://discuss.elastic.co/u/Rodrigo_Rezende)\
**Replies:** 4\
**Last updated:** [December 4, 2016, 7:18pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-full-histogram-of-an-aggregation/66167 "2016-12-04T19:18:41Z")

</div>

Hi, I want to estimate the distribution of an aggregation and I wonder if is there any way to perform the parent aggregation on all buckets (thing\_id) and then the percentiles over the sum so I can estimate the full hi…

---

## [How to write two queries in kibana search bar](https://discuss.elastic.co/t/how-to-write-two-queries-in-kibana-search-bar/35704)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 4\
**Last updated:** [November 27, 2015, 9:30am UTC](https://discuss.elastic.co/t/how-to-write-two-queries-in-kibana-search-bar/35704 "2015-11-27T09:30:55Z")

</div>

Hi Experts, I have a very basic requirement but I am struggling to achieve it. In Kibana I want to search all the logs where baseEventIds filed is not Null and priority should be "High" OR "VeryHigh". Individually bo…

---

## [Possible collision with child document \_id generation?](https://discuss.elastic.co/t/possible-collision-with-child-document--id-generation/4948)

<div class="topic-metadata">

**Author:** [@Dan\_Pilone](https://discuss.elastic.co/u/Dan_Pilone)\
**Replies:** 4\
**Last updated:** [July 26, 2011, 10:48pm UTC](https://discuss.elastic.co/t/possible-collision-with-child-document--id-generation/4948 "2011-07-26T22:48:46Z")

</div>

All, We're indexing millions of documents into a 3 (sometimes 4) node elastic cluster with 3 shards. Starting with 0.17.1 (we didn't try 0.17.0) and continuing to today's source I'm getting an occasional exception…

---

## [Filebeat is not send enough log to elasticsearch](https://discuss.elastic.co/t/filebeat-is-not-send-enough-log-to-elasticsearch/254196)

<div class="topic-metadata">

**Author:** [@AkatsukiPain](https://discuss.elastic.co/u/AkatsukiPain)\
**Replies:** 8\
**Last updated:** [November 10, 2020, 9:17am UTC](https://discuss.elastic.co/t/filebeat-is-not-send-enough-log-to-elasticsearch/254196 "2020-11-10T09:17:08Z")

</div>

My filebeat sending not enough logs to elasticsearch. Graph suddenly went down This is filebeat.yml filebeat.inputs: #============================= Filebeat modules =============================== filebeat.conf…

---

## [Inconsistent results using Lucene Query Syntax](https://discuss.elastic.co/t/inconsistent-results-using-lucene-query-syntax/129034)

<div class="topic-metadata">

**Author:** [@SRIpandu1729](https://discuss.elastic.co/u/SRIpandu1729)\
**Replies:** 8\
**Last updated:** [April 23, 2018, 7:05am UTC](https://discuss.elastic.co/t/inconsistent-results-using-lucene-query-syntax/129034 "2018-04-23T07:05:51Z")

</div>

I am using elasticstack for log analysis. When I am querying from Kibana using the Lucene Query Syntax I am gettting some inconsistent results. The queries along with their respective number of hits are: clientIP: \[66.…

---

## [Elasticsearch logformat:](https://discuss.elastic.co/t/elasticsearch-logformat/56499)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 8\
**Last updated:** [August 4, 2016, 12:13pm UTC](https://discuss.elastic.co/t/elasticsearch-logformat/56499 "2016-08-04T12:13:17Z")

</div>

HI All, We are using elasticsearch 1.3.7, below the sample slow log: \[2016-07-25 23:16:50,654\]\[INFO \]\[index.search.slowlog.query\] \[NODE\_NAME\] \[INDEX\_NAME\]\[2\] took\[5.2s\], took\_millis\[5200\], types\[244\], stats\[\], searc…

---

## [IMAPRiver plugin attachemnt index issue](https://discuss.elastic.co/t/imapriver-plugin-attachemnt-index-issue/18835)

<div class="topic-metadata">

**Author:** [@Gabriel\_Kapitany](https://discuss.elastic.co/u/Gabriel_Kapitany)\
**Replies:** 8\
**Last updated:** [July 23, 2014, 5:54pm UTC](https://discuss.elastic.co/t/imapriver-plugin-attachemnt-index-issue/18835 "2014-07-23T17:54:26Z")

</div>

Hi all, I have installed elasticserarch 1.2.1, and IMAPRiver plugin elasticsearch-river-imap-0.0.7-b20 with elasticsearch-mapper-attachments-2.2.0-SNAPSHOT. \[2014-07-23 11:56:44,304\]\[INFO \]\[node …

---

## [Feedback on bug bounty triage and reward processing timeline](https://discuss.elastic.co/t/feedback-on-bug-bounty-triage-and-reward-processing-timeline/385433)

<div class="topic-metadata">

**Author:** [@Attacker\_Tester](https://discuss.elastic.co/u/Attacker_Tester)\
**Replies:** 1\
**Last updated:** [March 12, 2026, 11:05pm UTC](https://discuss.elastic.co/t/feedback-on-bug-bounty-triage-and-reward-processing-timeline/385433 "2026-03-12T23:05:21Z")

</div>

Hello Elastic team, First of all, thank you for running a security program and for the work your team does to keep the ecosystem secure. I really appreciate the opportunity to contribute by reporting vulnerabilities aff…

---

## [Unable to output elastalert.log](https://discuss.elastic.co/t/unable-to-output-elastalert-log/215477)

<div class="topic-metadata">

**Author:** [@Sansao](https://discuss.elastic.co/u/Sansao)\
**Replies:** 1\
**Last updated:** [January 27, 2020, 11:03am UTC](https://discuss.elastic.co/t/unable-to-output-elastalert-log/215477 "2020-01-27T11:03:23Z")

</div>

I need to remove elastalert information from /var/log/messages, and I'm having trouble creating a log file for elastalert. the default configuration in config.yaml doesn't work and i'm not getting it through the /etc/rs…

---

## [Logstash not showing up in Index Patterns](https://discuss.elastic.co/t/logstash-not-showing-up-in-index-patterns/209156)

<div class="topic-metadata">

**Author:** [@Thijs\_Kunnen](https://discuss.elastic.co/u/Thijs_Kunnen)\
**Replies:** 1\
**Last updated:** [November 25, 2019, 11:16am UTC](https://discuss.elastic.co/t/logstash-not-showing-up-in-index-patterns/209156 "2019-11-25T11:16:31Z")

</div>

Hi, and thank you for reading this. I am trying to set up Kibana and add Logstash to view my logs. I started with installing elasticsearch. Here, things already started to get semi weird. I was able to curl localhost:9…

---

## [Logstash And InfluxDB configuration](https://discuss.elastic.co/t/logstash-and-influxdb-configuration/102769)

<div class="topic-metadata">

**Author:** [@Vishal\_Shah](https://discuss.elastic.co/u/Vishal_Shah)\
**Replies:** 1\
**Last updated:** [October 6, 2017, 4:44am UTC](https://discuss.elastic.co/t/logstash-and-influxdb-configuration/102769 "2017-10-06T04:44:53Z")

</div>

Hi I am trying to ingest the data collected by logstash into InfluxDB. Following are rows from the Log file: 2017-10-04 22:21:31 +0000 UTC | SourceNode | LogLevel | Module | ProcessStatus | ProcessName | DestinationNode …

---

## [Filebeat dynamically add new field](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589)

<div class="topic-metadata">

**Author:** [@ywang](https://discuss.elastic.co/u/ywang)\
**Replies:** 1\
**Last updated:** [October 10, 2016, 5:39am UTC](https://discuss.elastic.co/t/filebeat-dynamically-add-new-field/62589 "2016-10-10T05:39:22Z")

</div>

Hi expert here, I need to add a field dynamically based on a conf file locally on the host. It needs to be added for a subset of log entries based on the certain pattern of the log entry content. I read the filebeat tu…

---

## [Kibana 4.3 campos formateados](https://discuss.elastic.co/t/kibana-4-3-campos-formateados/38189)

<div class="topic-metadata">

**Author:** [@Jorge](https://discuss.elastic.co/u/Jorge)\
**Replies:** 1\
**Last updated:** [May 26, 2016, 6:20pm UTC](https://discuss.elastic.co/t/kibana-4-3-campos-formateados/38189 "2016-05-26T18:20:12Z")

</div>

Hola a todos..!!! He seguido este link https://www.elastic.co/blog/kibana-custom-field-formatters y no he logrado que me funcione, hay alguien que me pueda ayudar con un paso a paso de como hacer para que esto funcione. …

---

## [Remove elasticSearch 6.5.4. in docker](https://discuss.elastic.co/t/remove-elasticsearch-6-5-4-in-docker/311776)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 2\
**Last updated:** [August 9, 2022, 10:18pm UTC](https://discuss.elastic.co/t/remove-elasticsearch-6-5-4-in-docker/311776 "2022-08-09T22:18:45Z")

</div>

Would like to remove Elasticsearch 6.5.4 containers (installed by a vendor many years ago) but stopping or killing these container/s using stop/kill commands doesn’t exits its status, hence can't remove. There seems to b…

---

## [Is it possiable to create Variable in Kibana](https://discuss.elastic.co/t/is-it-possiable-to-create-variable-in-kibana/237607)

<div class="topic-metadata">

**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\
**Replies:** 2\
**Last updated:** [June 19, 2020, 5:13am UTC](https://discuss.elastic.co/t/is-it-possiable-to-create-variable-in-kibana/237607 "2020-06-19T05:13:45Z")

</div>

hi There, please help me to solve this one Thanks

---

## [Kibana dashboard takes too long to load](https://discuss.elastic.co/t/kibana-dashboard-takes-too-long-to-load/235282)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 2\
**Last updated:** [June 4, 2020, 7:04am UTC](https://discuss.elastic.co/t/kibana-dashboard-takes-too-long-to-load/235282 "2020-06-04T07:04:23Z")

</div>

Sorry, I am new to Kibana and this may sound repeating.. but kibana dashboard takes a long time to load.. when I try to load this problem appears.. how do I fix this / how do I evaluate what the problem is? Thanks, …

---

## [Kibana is showing only the first line of the txt log file](https://discuss.elastic.co/t/kibana-is-showing-only-the-first-line-of-the-txt-log-file/231542)

<div class="topic-metadata">

**Author:** [@meniem](https://discuss.elastic.co/u/meniem)\
**Replies:** 2\
**Last updated:** [May 8, 2020, 10:39pm UTC](https://discuss.elastic.co/t/kibana-is-showing-only-the-first-line-of-the-txt-log-file/231542 "2020-05-08T22:39:30Z")

</div>

I need to ship logs from 2 apps into ElasticSearch/Kibana, one of them is a Symfony app that generates logs in /var/www/html/logs/\*.log and they are displayed in the correct format on ES/Kibana. While the other is a Node…

---

## [Elastalertのrule.yamlの設定について](https://discuss.elastic.co/t/elastalert-rule-yaml/202180)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [October 16, 2019, 12:46pm UTC](https://discuss.elastic.co/t/elastalert-rule-yaml/202180 "2019-10-16T12:46:34Z")

</div>

elastalertにて /var/log/messagesをelasticsearchのindexに格納して、ログ監視したいです。 blacklistの文言が出力されたら、アラートメールを送信させてたいです。 初回 logger error:testtest で、blacklist内の文字列を出力させて、 アラートメールを送信させることができました。 二度目以降 logger error:testtestで、アラートメー…

---

## [Error when using ScrollAll for millions of records](https://discuss.elastic.co/t/error-when-using-scrollall-for-millions-of-records/187220)

<div class="topic-metadata">

**Author:** [@SudevPK](https://discuss.elastic.co/u/SudevPK)\
**Replies:** 2\
**Last updated:** [June 26, 2019, 9:17am UTC](https://discuss.elastic.co/t/error-when-using-scrollall-for-millions-of-records/187220 "2019-06-26T09:17:07Z")

</div>

Error scrolling search on /\_search/scroll?pretty=true with slice 4 was not valid on scroll iteration 1

---

## [Recommendations for performance tuning of a server with 256G of RAM](https://discuss.elastic.co/t/recommendations-for-performance-tuning-of-a-server-with-256g-of-ram/175616)

<div class="topic-metadata">

**Author:** [@mantis](https://discuss.elastic.co/u/mantis)\
**Replies:** 2\
**Last updated:** [April 5, 2019, 3:17pm UTC](https://discuss.elastic.co/t/recommendations-for-performance-tuning-of-a-server-with-256g-of-ram/175616 "2019-04-05T15:17:22Z")

</div>

Hello, I have set up an ELK server which is running elasticsearch, logstash and Kibana (standalone), no other servers or replicas involved. My server has 256 of RAM, can you please indicate the correct values to define…

---

## [Filebeat configuration's specific value](https://discuss.elastic.co/t/filebeat-configurations-specific-value/141928)

<div class="topic-metadata">

**Author:** [@\_kyllr](https://discuss.elastic.co/u/_kyllr)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 6:58am UTC](https://discuss.elastic.co/t/filebeat-configurations-specific-value/141928 "2018-07-30T06:58:55Z")

</div>

Can someone please help me understand the flow of this specific filebeat configuration? harvester\_limit: 15000 scan\_frequency: 1h close\_inactive: 3h Thank you!

---

## [Watcher Chained Input and Painless Script](https://discuss.elastic.co/t/watcher-chained-input-and-painless-script/85301)

<div class="topic-metadata">

**Author:** [@adonahoe](https://discuss.elastic.co/u/adonahoe)\
**Replies:** 2\
**Last updated:** [May 14, 2017, 7:37pm UTC](https://discuss.elastic.co/t/watcher-chained-input-and-painless-script/85301 "2017-05-14T19:37:06Z")

</div>

Hello All, I am wondering if it is possible to query one index based on the results of another query from a different index? For instance I have added my basic watcher below with a chained input. Not entirely sure how …

---

## [Curator 2.0 fails](https://discuss.elastic.co/t/curator-2-0-fails/35194)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [November 21, 2015, 12:48am UTC](https://discuss.elastic.co/t/curator-2-0-fails/35194 "2015-11-21T00:48:46Z")

</div>

guys, I've installed elasticsearch-curator 2.0, and it's unusable! I used the recommended install command that I found here: ES Curator Docs \[root@logs:~\] #pip install elasticsearch-curator==2.0.0 Collecting el…

[Previous page](https://discuss.elastic.co/top.md?page=1319&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1321&per_page=50&period=all)
