# Top

**URL:** https://discuss.elastic.co/top.md?page=1334&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1335

---

## [Dealing with varied log format](https://discuss.elastic.co/t/dealing-with-varied-log-format/77324)

<div class="topic-metadata">

**Author:** [@kristoffer](https://discuss.elastic.co/u/kristoffer)\
**Replies:** 2\
**Last updated:** [March 5, 2017, 6:15am UTC](https://discuss.elastic.co/t/dealing-with-varied-log-format/77324 "2017-03-05T06:15:29Z")

</div>

Hello! I just finished reading the Logstash Book (great introduction to the subject!) and would like to start experimenting with proper log collection in my environment. I would like to start off with out firewall. Get…

---

## [Filebeat and Multiline Problem](https://discuss.elastic.co/t/filebeat-and-multiline-problem/58831)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 2\
**Last updated:** [August 24, 2016, 3:49pm UTC](https://discuss.elastic.co/t/filebeat-and-multiline-problem/58831 "2016-08-24T15:49:34Z")

</div>

Hi, I'm using Filbeat 1.2.3 on Windows and seeing a problem with multiline and would appreciate someone pointing out what I must be doing wrong. I'm sending my Filebeat events to Logstash. Here are the relevant confi…

---

## [How to load saved search by default in Kibana](https://discuss.elastic.co/t/how-to-load-saved-search-by-default-in-kibana/45725)

<div class="topic-metadata">

**Author:** [@bilguuna](https://discuss.elastic.co/u/bilguuna)\
**Replies:** 2\
**Last updated:** [March 29, 2016, 8:26pm UTC](https://discuss.elastic.co/t/how-to-load-saved-search-by-default-in-kibana/45725 "2016-03-29T20:26:09Z")

</div>

Hello, I am using Kibana 4.4.2 and saved a search by adding some columns. I would like to load this saved search by default from whenever users access to kibana first. Is that possible? Thanks Bilguun

---

## [ES 1.4.2 Performance Issue](https://discuss.elastic.co/t/es-1-4-2-performance-issue/28831)

<div class="topic-metadata">

**Author:** [@Hagai\_T](https://discuss.elastic.co/u/Hagai_T)\
**Replies:** 2\
**Last updated:** [September 10, 2015, 5:58am UTC](https://discuss.elastic.co/t/es-1-4-2-performance-issue/28831 "2015-09-10T05:58:51Z")

</div>

Hi, I have 8 nodes cluster running over Amazon AWS. 2 Master/Client nodes and 6 Data Nodes (each data node has 16 cores and 64GB of RAM - c4.4xlarge) Elasticsearch version: is 1.4.2, OS: Amazon AMI In the last few d…

---

## [Match exact substring in not analyzed field](https://discuss.elastic.co/t/match-exact-substring-in-not-analyzed-field/15125)

<div class="topic-metadata">

**Author:** [@Maya](https://discuss.elastic.co/u/Maya)\
**Replies:** 2\
**Last updated:** [January 8, 2014, 7:33am UTC](https://discuss.elastic.co/t/match-exact-substring-in-not-analyzed-field/15125 "2014-01-08T07:33:25Z")

</div>

Hi, I have a multi\_field mapping: "testMulti": { "type": "multi\_field", "fields": { "testMulti": { "type": "string", "index": "analyzed", …

---

## [How can i decrease the size of Pie chart](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 4\
**Last updated:** [February 14, 2022, 1:15pm UTC](https://discuss.elastic.co/t/how-can-i-decrease-the-size-of-pie-chart/294796 "2022-02-14T13:15:07Z")

</div>

Recently i have upgraded my Kibana version to kibana:7.16.2 and in this version have observed that Pie chart default visualization size has increased. Due to this in our case, visualization values are not showing compl…

---

## [Memory usage grows in (short-ish) time](https://discuss.elastic.co/t/memory-usage-grows-in-short-ish-time/286817)

<div class="topic-metadata">

**Author:** [@depesz](https://discuss.elastic.co/u/depesz)\
**Replies:** 4\
**Last updated:** [October 18, 2021, 10:15am UTC](https://discuss.elastic.co/t/memory-usage-grows-in-short-ish-time/286817 "2021-10-18T10:15:52Z")

</div>

We just recently started trying to use logstash. The problem is that memory usage grows, at least within first 2 days, to the point that we can't use it. I tried reducing Xms and Xmx from default of 1G to 512M. restarte…

---

## [Multiline is split from main log message - Any help please](https://discuss.elastic.co/t/multiline-is-split-from-main-log-message-any-help-please/241254)

<div class="topic-metadata">

**Author:** [@calanon](https://discuss.elastic.co/u/calanon)\
**Replies:** 4\
**Last updated:** [July 17, 2020, 8:00pm UTC](https://discuss.elastic.co/t/multiline-is-split-from-main-log-message-any-help-please/241254 "2020-07-17T20:00:43Z")

</div>

Here is a snippet of the raw log output: \[2020-07-15T08:21:58+02:00\] 172.16.35.104 ERROR Exception: \<log:context\>{"exception":"\[object\] (App\\\\Action\\\\Exception\\\\MethodNotAllowedException(code: 405): There is no action d…

---

## [Setting the User-Agent of heartbeat](https://discuss.elastic.co/t/setting-the-user-agent-of-heartbeat/238806)

<div class="topic-metadata">

**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 11:12am UTC](https://discuss.elastic.co/t/setting-the-user-agent-of-heartbeat/238806 "2020-06-26T11:12:19Z")

</div>

Is there a way to set override the user-agent of heartbeat? The default one is "Go-http-client/1.1" I want to change that to "heartbeat".

---

## [How to set SSL certificate and key in kibana.yml?](https://discuss.elastic.co/t/how-to-set-ssl-certificate-and-key-in-kibana-yml/168213)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 4\
**Last updated:** [February 20, 2019, 12:52am UTC](https://discuss.elastic.co/t/how-to-set-ssl-certificate-and-key-in-kibana-yml/168213 "2019-02-20T00:52:48Z")

</div>

in Kibana.yml, there are: #Optional settings that provide the paths to the PEM-format SSL certificate and key files. #These files validate that your Elasticsearch backend uses the same key files. elasticsearch.ssl.cer…

---

## [Re-indexing past day-wise indices to reduce no of shards](https://discuss.elastic.co/t/re-indexing-past-day-wise-indices-to-reduce-no-of-shards/159648)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 8:38pm UTC](https://discuss.elastic.co/t/re-indexing-past-day-wise-indices-to-reduce-no-of-shards/159648 "2018-12-06T20:38:09Z")

</div>

In our ES 5.x cluster, we've 5 shards and 1 replica and we use day-wise indices with a retention of 150 days (150 indices at any time). The pri.store.size for a day-wise index is around 17 GB and with 1 replica the tota…

---

## [Json\_parse\_exception on reindex](https://discuss.elastic.co/t/json-parse-exception-on-reindex/153838)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 4\
**Last updated:** [October 25, 2018, 9:40am UTC](https://discuss.elastic.co/t/json-parse-exception-on-reindex/153838 "2018-10-25T09:40:53Z")

</div>

I'm getting json\_parse\_exception on reindex from a bunch of daily indices to a consolidated monthly one, quite likely due to the same field in different daily indices being automapped to different types. How do I tell r…

---

## [Problem with replace some char using RegExp. under mutate/gsub](https://discuss.elastic.co/t/problem-with-replace-some-char-using-regexp-under-mutate-gsub/143273)

<div class="topic-metadata">

**Author:** [@richard20427176](https://discuss.elastic.co/u/richard20427176)\
**Replies:** 4\
**Last updated:** [August 13, 2018, 7:23am UTC](https://discuss.elastic.co/t/problem-with-replace-some-char-using-regexp-under-mutate-gsub/143273 "2018-08-13T07:23:28Z")

</div>

Hi Guys, I meet some problem when I use logstash to parse some data from the nginx logs. I have the log content as below: {"reqtime":"06/Aug/2018:09:02:17 +0800", "reqbody":"------WebKitFormBoundaryM2dvVjK2xtgaOP6a\\r\\…

---

## [How to display time in kibana timelion](https://discuss.elastic.co/t/how-to-display-time-in-kibana-timelion/118321)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 9:10pm UTC](https://discuss.elastic.co/t/how-to-display-time-in-kibana-timelion/118321 "2018-02-13T21:10:16Z")

</div>

Hello, How can we show Time in Kibana timelion visualization in Kibana 6.0. I can show values in legends for metrics used. However could not see time.

---

## [Filebeat and logstash-shipper](https://discuss.elastic.co/t/filebeat-and-logstash-shipper/117487)

<div class="topic-metadata">

**Author:** [@ggutsche](https://discuss.elastic.co/u/ggutsche)\
**Replies:** 4\
**Last updated:** [January 29, 2018, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-shipper/117487 "2018-01-29T16:07:42Z")

</div>

Hi! I try to integrate some new stages to our older ELK-Stack. For the new stages I would like to use filebeat and I want to connect to the logstash-shipper. But I get the error message from filebeat 18/01/29 15:35:13.…

---

## [Logstash email output plugin issue](https://discuss.elastic.co/t/logstash-email-output-plugin-issue/105248)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 4\
**Last updated:** [October 26, 2017, 9:46am UTC](https://discuss.elastic.co/t/logstash-email-output-plugin-issue/105248 "2017-10-26T09:46:34Z")

</div>

Getting below error while using email output plugin \[ERROR\]\[logstash.outputs.email \] Something happen while delivering an email {:exception=\>#\<Errno::ECONNREFUSED: Connection refused - Connection refused\>} Kindly hel…

---

## [Streaming data from bugzilla to elastic server](https://discuss.elastic.co/t/streaming-data-from-bugzilla-to-elastic-server/63472)

<div class="topic-metadata">

**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\
**Replies:** 4\
**Last updated:** [October 20, 2016, 10:50am UTC](https://discuss.elastic.co/t/streaming-data-from-bugzilla-to-elastic-server/63472 "2016-10-20T10:50:53Z")

</div>

i want to create a critical bug dashboard in kibana. I want to stream data from Bugzilla to elastic server. Is there any way to do that or any plugin available?

---

## [Not capturing syslog output \[SOLVED\]](https://discuss.elastic.co/t/not-capturing-syslog-output-solved/54735)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 4\
**Last updated:** [July 7, 2016, 3:32pm UTC](https://discuss.elastic.co/t/not-capturing-syslog-output-solved/54735 "2016-07-07T15:32:52Z")

</div>

Hello, all. I have the latest ELK components installed on a CentOS 6 server, and running well. I'm currently capturing Windows logs, and CentOS 6 and 7 logs via Filebeat. However, I have a number of CentOS 5 boxes o…

---

## [UNASSIGNED indexes](https://discuss.elastic.co/t/unassigned-indexes/23064)

<div class="topic-metadata">

**Author:** [@Darius](https://discuss.elastic.co/u/Darius)\
**Replies:** 4\
**Last updated:** [April 7, 2015, 3:36pm UTC](https://discuss.elastic.co/t/unassigned-indexes/23064 "2015-04-07T15:36:31Z")

</div>

Hello, Quick description of the problem: I had 1 elasticsearch server cluster with 0 replicas for all indexes, then added a second ES server to the cluster and then set that all existing indexes should have 1 repl…

---

## [Loss of performance with Cisco module](https://discuss.elastic.co/t/loss-of-performance-with-cisco-module/226397)

<div class="topic-metadata">

**Author:** [@frbcr](https://discuss.elastic.co/u/frbcr)\
**Replies:** 6\
**Last updated:** [April 8, 2020, 1:43pm UTC](https://discuss.elastic.co/t/loss-of-performance-with-cisco-module/226397 "2020-04-08T13:43:17Z")

</div>

Hello, We have being trying to import our logs coming from a Cisco ASA into the ElasticSearch using Filebeat. The Cisco ASA is sending an average of 8,000 events/seconds. At first we were importing them as syslog liste…

---

## [APM Workshop Pet Clinic demo error](https://discuss.elastic.co/t/apm-workshop-pet-clinic-demo-error/188746)

<div class="topic-metadata">

**Author:** [@aasseli](https://discuss.elastic.co/u/aasseli)\
**Replies:** 6\
**Last updated:** [July 10, 2019, 3:27pm UTC](https://discuss.elastic.co/t/apm-workshop-pet-clinic-demo-error/188746 "2019-07-10T15:27:37Z")

</div>

Browser version: Firefox Original install method (e.g. download page, yum, deb, from source, etc.) and version: github Fresh install or upgraded from other version? fresh Description of the problem including expected …

---

## [Connect oracle to elastic / kibana](https://discuss.elastic.co/t/connect-oracle-to-elastic-kibana/338436)

<div class="topic-metadata">

**Author:** [@Oytoch](https://discuss.elastic.co/u/Oytoch)\
**Replies:** 5\
**Last updated:** [July 17, 2023, 9:03am UTC](https://discuss.elastic.co/t/connect-oracle-to-elastic-kibana/338436 "2023-07-17T09:03:53Z")

</div>

Hi, I try to understand kibana / Elasticsearch to interface my oracle database in order to make dashboard with kibana ( BI) I work with an "on premise" version First question, is it possible to do that with kibana ? …

---

## [Adding additional fields for Logstash Kinesis Input](https://discuss.elastic.co/t/adding-additional-fields-for-logstash-kinesis-input/240542)

<div class="topic-metadata">

**Author:** [@beyondcompare](https://discuss.elastic.co/u/beyondcompare)\
**Replies:** 5\
**Last updated:** [July 14, 2020, 4:19pm UTC](https://discuss.elastic.co/t/adding-additional-fields-for-logstash-kinesis-input/240542 "2020-07-14T16:19:04Z")

</div>

Hi everyone, I'd like to ask for some help from you please about adding additional fields to Logstash Kinesis Input. I have three logstash servers consuming a Kinesis Stream using Kinesis Input Plugin. Example like th…

---

## [Logstash conditional each line (messages) not sending data to elasticsearch?](https://discuss.elastic.co/t/logstash-conditional-each-line-messages-not-sending-data-to-elasticsearch/133990)

<div class="topic-metadata">

**Author:** [@beckblurry](https://discuss.elastic.co/u/beckblurry)\
**Replies:** 5\
**Last updated:** [June 2, 2018, 12:55pm UTC](https://discuss.elastic.co/t/logstash-conditional-each-line-messages-not-sending-data-to-elasticsearch/133990 "2018-06-02T12:55:14Z")

</div>

Hello, I run filebeat and filebeat run each line from log to logstash, and I have each grok for each line message. But why grok not sending the second data (different field) to Elasticsearch.. This bellow my configura…

---

## [Problem adding document field to alert's webhook body](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794)

<div class="topic-metadata">

**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 4:23pm UTC](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794 "2022-11-14T16:23:49Z")

</div>

New to ES and having an issue with adding details in the body of a webhook. I am wanting to add the field information (ex: city) so that it will be included in the alert details. I have tried adding "City": "{{\_source.…

---

## [Alert - Query to get distinct count](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583)

<div class="topic-metadata">

**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 6:13pm UTC](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583 "2021-10-27T18:13:25Z")

</div>

log : 1 { "\_index": "some index", "fields": { "PARTITION": \[ 4 \], "APPLICATION\_NAME": \[ "order-app" \], } } ----- log : 2 { "\_index": "some index", "fields": { "PARTITION": \[ …

---

## ["no cached mapping for this field"](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/255514)

<div class="topic-metadata">

**Author:** [@obloboblo](https://discuss.elastic.co/u/obloboblo)\
**Replies:** 3\
**Last updated:** [November 18, 2020, 7:36am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/255514 "2020-11-18T07:36:58Z")

</div>

hello I've seen that a warning from the topic subject makes some troubles also for other users on this forum, but I believe this one is new here. this warning shows for a field with epoch timestamp value. after some ti…

---

## [Use envoy proxy between elasticsearch nodes](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433)

<div class="topic-metadata">

**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\
**Replies:** 3\
**Last updated:** [August 3, 2020, 8:38pm UTC](https://discuss.elastic.co/t/use-envoy-proxy-between-elasticsearch-nodes/243433 "2020-08-03T20:38:45Z")

</div>

Is it possible to use envoy proxy between elasticsearch nodes? The purpose is to enable tls verifications for any communication between nodes through envoy proxy. I am still in the early stage of this task, but would li…

---

## [ECE Weird Full Restart Deployment](https://discuss.elastic.co/t/ece-weird-full-restart-deployment/169937)

<div class="topic-metadata">

**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\
**Replies:** 3\
**Last updated:** [February 26, 2019, 2:21pm UTC](https://discuss.elastic.co/t/ece-weird-full-restart-deployment/169937 "2019-02-26T14:21:18Z")

</div>

Hi, I met full restart deployment case when I scaled 3 nodes to 6 nodes. This is very weird and scared because a full restart deployment means cluster is not available for user during this time. During this plan, w…

---

## [Manticore::ResolutionFailure while sending logs to elasticsearch](https://discuss.elastic.co/t/manticore-resolutionfailure-while-sending-logs-to-elasticsearch/137113)

<div class="topic-metadata">

**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\
**Replies:** 3\
**Last updated:** [June 24, 2018, 12:36pm UTC](https://discuss.elastic.co/t/manticore-resolutionfailure-while-sending-logs-to-elasticsearch/137113 "2018-06-24T12:36:29Z")

</div>

Hi, I am trying to send large amount of log files (around 700 files) from logstash to Elasticsearch. But when I start logstash, logs are not sending to the elasticsearch. It throws error something like this, {:timestam…

---

## [Kibana only displaying certain ip address from csv file](https://discuss.elastic.co/t/kibana-only-displaying-certain-ip-address-from-csv-file/98740)

<div class="topic-metadata">

**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\
**Replies:** 3\
**Last updated:** [August 31, 2017, 10:05am UTC](https://discuss.elastic.co/t/kibana-only-displaying-certain-ip-address-from-csv-file/98740 "2017-08-31T10:05:53Z")

</div>

I am posting a csv file directly to elasticsearch and Kibana only displays certain ip addresses. Below might explain better. csv file: id,IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Posi…

---

## [Kibana's opensoc interface](https://discuss.elastic.co/t/kibanas-opensoc-interface/51280)

<div class="topic-metadata">

**Author:** [@murakamik7](https://discuss.elastic.co/u/murakamik7)\
**Replies:** 3\
**Last updated:** [May 30, 2016, 10:43pm UTC](https://discuss.elastic.co/t/kibanas-opensoc-interface/51280 "2016-05-30T22:43:36Z")

</div>

Hi folks, We are all beginners abour kibana and elasticsearch. Would you please tell us about kibana's opensoc interface? We did installed fluentd, kafka, elasticsearch and will install storm and kibana for presentatio…

---

## [How to stop ElasticSearch from doing type casting?](https://discuss.elastic.co/t/how-to-stop-elasticsearch-from-doing-type-casting/41836)

<div class="topic-metadata">

**Author:** [@anjith.p](https://discuss.elastic.co/u/anjith.p)\
**Replies:** 3\
**Last updated:** [February 16, 2016, 5:51am UTC](https://discuss.elastic.co/t/how-to-stop-elasticsearch-from-doing-type-casting/41836 "2016-02-16T05:51:11Z")

</div>

I've a field,let's say f1,with type "String" in an index. Now, if I send integer data into field f1, ES is converting the value to String - normally this is the accepted behavior. But in our case we need to prevent this…

---

## [The error reported is: - logstash error](https://discuss.elastic.co/t/the-error-reported-is-logstash-error/32945)

<div class="topic-metadata">

**Author:** [@tushar.hadoop](https://discuss.elastic.co/u/tushar.hadoop)\
**Replies:** 3\
**Last updated:** [October 26, 2015, 5:19am UTC](https://discuss.elastic.co/t/the-error-reported-is-logstash-error/32945 "2015-10-26T05:19:29Z")

</div>

i am facing this issue for logstash 1.5.4 this is my configuration output { rabbitmq { key =\> "ambari-key" exchange =\> "ambari-exchange-type" exchange\_type =\> "direct" user =\> "rabbit" …

---

## [Some queries crash my cluster](https://discuss.elastic.co/t/some-queries-crash-my-cluster/11154)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 3\
**Last updated:** [March 14, 2013, 12:33pm UTC](https://discuss.elastic.co/t/some-queries-crash-my-cluster/11154 "2013-03-14T12:33:51Z")

</div>

Hi all, Sometimes, if I query over lots of indices, my cluster stops indexing stuff and takes 100% CPU of one core. It cries a lot with ConcurrentMarkSweep messages and I could see this trace (http://sprunge.us/C…

---

## [Passing ES\_JAVA\_OPTS variable with spaces when using docker compose](https://discuss.elastic.co/t/passing-es-java-opts-variable-with-spaces-when-using-docker-compose/91897)

<div class="topic-metadata">

**Author:** [@NathanBaulch](https://discuss.elastic.co/u/NathanBaulch)\
**Replies:** 0\
**Last updated:** [July 5, 2017, 12:16pm UTC](https://discuss.elastic.co/t/passing-es-java-opts-variable-with-spaces-when-using-docker-compose/91897 "2017-07-05T12:16:37Z")

</div>

I'm trying to run Elasticsearch using docker compose but I'm not sure how to correctly pass the ES\_JAVA\_OPTS="-Xms512m -Xmx512m" environmental variable. I've tried lots of combinations of single and double quotes but the…

---

## [Failed to update datasource using Grafana](https://discuss.elastic.co/t/failed-to-update-datasource-using-grafana/184657)

<div class="topic-metadata">

**Author:** [@Giovani\_Hoff](https://discuss.elastic.co/u/Giovani_Hoff)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 2:01am UTC](https://discuss.elastic.co/t/failed-to-update-datasource-using-grafana/184657 "2019-06-07T02:01:30Z")

</div>

Hi! I am not able to communicate Elasticsearch with Grafana. Please, why is it so hard??? I am running the following versions: Grafana 6.2.1 Elasticsearch 7.1.0 macOS 10.14.3 From http://localhost:9200 I get { "na…

---

## [Logstash TCP/SSL | General OpenSslEngine problem](https://discuss.elastic.co/t/logstash-tcp-ssl-general-opensslengine-problem/158044)

<div class="topic-metadata">

**Author:** [@x4cker](https://discuss.elastic.co/u/x4cker)\
**Replies:** 1\
**Last updated:** [December 12, 2018, 5:44am UTC](https://discuss.elastic.co/t/logstash-tcp-ssl-general-opensslengine-problem/158044 "2018-12-12T05:44:13Z")

</div>

Hi, I'm forwarding logs from logstash to logstash using tcp output/input plugins over SSL. on the client side i use this config in the output: tcp{ host =\> "logstash01.domain.tld" port =\> 8443 codec =\> json\_l…

---

## [Java error elasticsearch-certutil](https://discuss.elastic.co/t/java-error-elasticsearch-certutil/155600)

<div class="topic-metadata">

**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\
**Replies:** 1\
**Last updated:** [November 6, 2018, 8:15pm UTC](https://discuss.elastic.co/t/java-error-elasticsearch-certutil/155600 "2018-11-06T20:15:25Z")

</div>

I can run elastic-search , no problem there, so i guess java is correctly configured But this tool (command -\>) bin/elasticsearch-certutil cert -ca elastic-stack-ca.p12 Gives this error Enter password for CA (elastic-…

---

## [Send data from Logstash to hadoop](https://discuss.elastic.co/t/send-data-from-logstash-to-hadoop/133976)

<div class="topic-metadata">

**Author:** [@anush\_jayan](https://discuss.elastic.co/u/anush_jayan)\
**Replies:** 1\
**Last updated:** [May 31, 2018, 11:11am UTC](https://discuss.elastic.co/t/send-data-from-logstash-to-hadoop/133976 "2018-05-31T11:11:46Z")

</div>

hi can help me how can i send data to hadoop or hive using logstash this is my config file input{ stdin{} } filter{ grok { # patterns\_dir =\> \["/etc/logstash/conf.d/patterns"\] match =\> { "message" =\> "%{TIMESTAMP\_…

---

## [Created and modified date](https://discuss.elastic.co/t/created-and-modified-date/110604)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 9:23am UTC](https://discuss.elastic.co/t/created-and-modified-date/110604 "2017-12-07T09:23:16Z")

</div>

Hi I need to store created datetime and modified datetime for index. While getting data how I can read that? Thanks Aneesh

---

## [Ingest attachment image metadata](https://discuss.elastic.co/t/ingest-attachment-image-metadata/91484)

<div class="topic-metadata">

**Author:** [@Pedro\_Garrett](https://discuss.elastic.co/u/Pedro_Garrett)\
**Replies:** 1\
**Last updated:** [June 30, 2017, 8:13pm UTC](https://discuss.elastic.co/t/ingest-attachment-image-metadata/91484 "2017-06-30T20:13:49Z")

</div>

I'm new ES and have just set it up with the ingest-attachment plugin to index various files that I send to it. It indexes all the files I send to it, but I've noticed that for pdfs, for example, a lot of meta data gets i…

---

## [Priority of pending tasks](https://discuss.elastic.co/t/priority-of-pending-tasks/18309)

<div class="topic-metadata">

**Author:** [@Ashish\_Nigam\_3](https://discuss.elastic.co/u/Ashish_Nigam_3)\
**Replies:** 1\
**Last updated:** [January 22, 2015, 6:24pm UTC](https://discuss.elastic.co/t/priority-of-pending-tasks/18309 "2015-01-22T18:24:49Z")

</div>

Hi, Is there any way to update how elasticsearch manages priority in pending tasks queue? Here's some background - My cluster was in yellow state for more than a day and now it is green, But it seems shards are bein…

---

## [Command to rename a type. Not a field](https://discuss.elastic.co/t/command-to-rename-a-type-not-a-field/14290)

<div class="topic-metadata">

**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\
**Replies:** 1\
**Last updated:** [November 6, 2013, 3:43pm UTC](https://discuss.elastic.co/t/command-to-rename-a-type-not-a-field/14290 "2013-11-06T15:43:13Z")

</div>

It it possible for me to rename localhost:9200/myindex/typeA to localhost:9200/myindex/typeB Thank you. I can't seem to find this in documentation. -- You received this message because you are subscr…

---

## [Filebeat unable to read stdout from Container via Autodiscover initiation](https://discuss.elastic.co/t/filebeat-unable-to-read-stdout-from-container-via-autodiscover-initiation/206797)

<div class="topic-metadata">

**Author:** [@miri](https://discuss.elastic.co/u/miri)\
**Replies:** 0\
**Last updated:** [November 6, 2019, 1:30pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-read-stdout-from-container-via-autodiscover-initiation/206797 "2019-11-06T13:30:03Z")

</div>

I m running an pod with one container writing into files and one sidecar. The sidecars simply tail'ing the mounted file from the main container to stdout. Have tested nearly the whole day to get the lines into filebeat…

---

## [How to fetch Kibana APi logs in Dashboard using Powershell](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369)

<div class="topic-metadata">

**Author:** [@Sahithi\_V](https://discuss.elastic.co/u/Sahithi_V)\
**Replies:** 2\
**Last updated:** [July 1, 2021, 12:34pm UTC](https://discuss.elastic.co/t/how-to-fetch-kibana-api-logs-in-dashboard-using-powershell/277369 "2021-07-01T12:34:43Z")

</div>

Recently part of automation we are trying to fetch kibana dashboard apis through any script lang ie Python /powershell . Tried to fetch with Rest APis, but through unable to connect. Server of Elastic search looks somet…

---

## [Watcher: how to dynamically calculate indices](https://discuss.elastic.co/t/watcher-how-to-dynamically-calculate-indices/48732)

<div class="topic-metadata">

**Author:** [@eeivin](https://discuss.elastic.co/u/eeivin)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 4:14pm UTC](https://discuss.elastic.co/t/watcher-how-to-dynamically-calculate-indices/48732 "2016-04-29T16:14:24Z")

</div>

Is there a way to use scripts/template to calculated indices dynamically, to achieve the following? "indices" : \[ "logstash-2016.{{Calendar.getInstance().MONTH}}.{{Calendar.getInstance().DAY\_OF\_MONTH}} Here is some ba…

---

## [Writing a custom highlighter](https://discuss.elastic.co/t/writing-a-custom-highlighter/35067)

<div class="topic-metadata">

**Author:** [@mos](https://discuss.elastic.co/u/mos)\
**Replies:** 2\
**Last updated:** [November 20, 2015, 2:47pm UTC](https://discuss.elastic.co/t/writing-a-custom-highlighter/35067 "2015-11-20T14:47:36Z")

</div>

I checked the documentation and googled around ... but I can't find a nice documentation how to build a custom highlighter for elasticsearch. I like to extend the plain-highlighter with some custom stuff (e.g. fragment…

---

## [Tag List in Kibana](https://discuss.elastic.co/t/tag-list-in-kibana/31486)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 2\
**Last updated:** [October 5, 2015, 1:12pm UTC](https://discuss.elastic.co/t/tag-list-in-kibana/31486 "2015-10-05T13:12:56Z")

</div>

Hello! I would like to know if there is a way to have a list of Tags in the Dashboard, similar to the Tag list that appears in the left side of the screen in the Discover Menu.

---

## [Kibana Failed to authenticate with host “https://\<IP\_Address\>:9200”: “”](https://discuss.elastic.co/t/kibana-failed-to-authenticate-with-host-https-ip-address-9200/353279)

<div class="topic-metadata">

**Author:** [@AlAnsari](https://discuss.elastic.co/u/AlAnsari)\
**Replies:** 3\
**Last updated:** [March 2, 2024, 5:15pm UTC](https://discuss.elastic.co/t/kibana-failed-to-authenticate-with-host-https-ip-address-9200/353279 "2024-03-02T17:15:37Z")

</div>

I've solved the errors for this issue that many others have had relative to not matching the host name and not verifying the first certificate by naturally adding the IP to the list of IPs generated in the instances.yml …

[Previous page](https://discuss.elastic.co/top.md?page=1333&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1335&per_page=50&period=all)
