# Top

**URL:** https://discuss.elastic.co/top.md?page=1336&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1337

---

## [Calculating percent](https://discuss.elastic.co/t/calculating-percent/293688)

<div class="topic-metadata">

**Author:** [@nabil86](https://discuss.elastic.co/u/nabil86)\
**Replies:** 1\
**Last updated:** [January 7, 2022, 2:20am UTC](https://discuss.elastic.co/t/calculating-percent/293688 "2022-01-07T02:20:57Z")

</div>

Hello, I want to calculte the percent of a given type on my index: Ok\_Count/total , I wrote this query But it doesn't work as i excepted , could you help me to correct it { "aggs": { "total":{ "filter":…

---

## [Kibana not connecting to elasticsearch on 7.5.2](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-on-7-5-2/216459)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 1\
**Last updated:** [January 28, 2020, 4:01pm UTC](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticsearch-on-7-5-2/216459 "2020-01-28T16:01:36Z")

</div>

Hi, i've just set up an ELK stack in docker but Kibana doesnt seem to want to work. Curl to :5601 results in: {"statusCode":404,"error":"Not Found","message":"Not Found"} And the following pops out in the log: kibana…

---

## [Kibana Issues with 6.4.1](https://discuss.elastic.co/t/kibana-issues-with-6-4-1/149312)

<div class="topic-metadata">

**Author:** [@bn8595](https://discuss.elastic.co/u/bn8595)\
**Replies:** 1\
**Last updated:** [September 28, 2018, 6:18pm UTC](https://discuss.elastic.co/t/kibana-issues-with-6-4-1/149312 "2018-09-28T18:18:35Z")

</div>

Hi I am running below version of the kibana and facing issues. Ubuntu 16.04 elasticsearch/stable,stable,now 6.4.1 all \[installed\] filebeat/stable,now 6.4.1 amd64 \[installed\] kibana/stable,now 6.4.1 amd64 \[installed\] …

---

## [Highlighting in Elasticsearch for Exact phrase](https://discuss.elastic.co/t/highlighting-in-elasticsearch-for-exact-phrase/79097)

<div class="topic-metadata">

**Author:** [@ashit\_pupu](https://discuss.elastic.co/u/ashit_pupu)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 3:11pm UTC](https://discuss.elastic.co/t/highlighting-in-elasticsearch-for-exact-phrase/79097 "2017-03-24T15:11:05Z")

</div>

0 down vote favorite I am trying to do exact phrase search in Elasticsearch , but I am facing a issue in obtaining the complete document. My doc has a field "bkgcontent" :\[ "qucik brown fox", "qui…

---

## [Trouble to load data from my hadoop cluster to elasticsearch via pig and hive](https://discuss.elastic.co/t/trouble-to-load-data-from-my-hadoop-cluster-to-elasticsearch-via-pig-and-hive/22580)

<div class="topic-metadata">

**Author:** [@omar\_ben\_salem](https://discuss.elastic.co/u/omar_ben_salem)\
**Replies:** 1\
**Last updated:** [March 9, 2015, 4:16pm UTC](https://discuss.elastic.co/t/trouble-to-load-data-from-my-hadoop-cluster-to-elasticsearch-via-pig-and-hive/22580 "2015-03-09T16:16:04Z")

</div>

I have some issues with my project and here I am seeking for some guidance and help here is the situation : Pig : I have a hadoop cluster managed by Cloudera CDH 5.3. I have ElasticSearch 1.4.4 install…

---

## [Problem creating a s3 repository with Elasticsearch](https://discuss.elastic.co/t/problem-creating-a-s3-repository-with-elasticsearch/172269)

<div class="topic-metadata">

**Author:** [@Javier\_Parrondo](https://discuss.elastic.co/u/Javier_Parrondo)\
**Replies:** 0\
**Last updated:** [March 14, 2019, 7:43am UTC](https://discuss.elastic.co/t/problem-creating-a-s3-repository-with-elasticsearch/172269 "2019-03-14T07:43:03Z")

</div>

Hello, I have a bucket created in Amazon S3 and I dont get to create the repository withint it. Through the awscli client I list and see all the folders inside the bucket so I thinks that the access\_key and the secret\_…

---

## [ES 2.3 Issues, are these issues are fixed in 6.X?](https://discuss.elastic.co/t/es-2-3-issues-are-these-issues-are-fixed-in-6-x/139954)

<div class="topic-metadata">

**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\
**Replies:** 0\
**Last updated:** [July 13, 2018, 1:35pm UTC](https://discuss.elastic.co/t/es-2-3-issues-are-these-issues-are-fixed-in-6-x/139954 "2018-07-13T13:35:02Z")

</div>

Hi Team, I have issues in ElasticSearch. Though we have written applications to read and write for ES specific standard purposes. We face unpredictable issues with it. Firstly we are in Elasticsearch version 2.3. I kn…

---

## [Kibana integration without internet](https://discuss.elastic.co/t/kibana-integration-without-internet/354842)

<div class="topic-metadata">

**Author:** [@robbyq92](https://discuss.elastic.co/u/robbyq92)\
**Replies:** 3\
**Last updated:** [March 6, 2024, 4:59pm UTC](https://discuss.elastic.co/t/kibana-integration-without-internet/354842 "2024-03-06T16:59:51Z")

</div>

Hello, it possible install plugins/extensions in kibana for integrations dashboard or same? i have install elk in k8s, and i have metricbeats modules, kubernetes/istio etc, and i need to install dashboard integrations..…

---

## [Discovery.zen.fd.ping\_retries: 5](https://discuss.elastic.co/t/discovery-zen-fd-ping-retries-5/131859)

<div class="topic-metadata">

**Author:** [@jalaja](https://discuss.elastic.co/u/jalaja)\
**Replies:** 3\
**Last updated:** [May 16, 2018, 5:06am UTC](https://discuss.elastic.co/t/discovery-zen-fd-ping-retries-5/131859 "2018-05-16T05:06:03Z")

</div>

Is it possible to configure discovery.zen.fd.ping\_retries to be forever. here is the usecase I am looking at. ES is brought up when there is no connectivity between any of the nodes in the cluster and eventually the ne…

---

## [ES Server high CPU on CloseableThreadLocal](https://discuss.elastic.co/t/es-server-high-cpu-on-closeablethreadlocal/108455)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 3\
**Last updated:** [November 21, 2017, 2:05pm UTC](https://discuss.elastic.co/t/es-server-high-cpu-on-closeablethreadlocal/108455 "2017-11-21T14:05:51Z")

</div>

Hi, I have 2 servers out of 3 that have high constant CPU usage due to this hot thread: 83.8% (419.2ms out of 500ms) cpu usage by thread 'elasticsearch\[elasticsearch-003\]\[flush\]\[T#5\]' 6/10 snapshots sharing follow…

---

## [Indexing hierarchical data](https://discuss.elastic.co/t/indexing-hierarchical-data/38797)

<div class="topic-metadata">

**Author:** [@jiten.savla](https://discuss.elastic.co/u/jiten.savla)\
**Replies:** 3\
**Last updated:** [January 12, 2016, 1:22am UTC](https://discuss.elastic.co/t/indexing-hierarchical-data/38797 "2016-01-12T01:22:14Z")

</div>

We have situation where we have hierarchical data like regions and countries with the regions. For instance APAC contains Asia which contains South East Asia which contains India, Sri Lanka, Bangladesh etc. User has a ch…

---

## [Straightforward hardware question](https://discuss.elastic.co/t/straightforward-hardware-question/28322)

<div class="topic-metadata">

**Author:** [@pdh](https://discuss.elastic.co/u/pdh)\
**Replies:** 3\
**Last updated:** [September 1, 2015, 8:53am UTC](https://discuss.elastic.co/t/straightforward-hardware-question/28322 "2015-09-01T08:53:43Z")

</div>

Hi all, I apologise if this question is naive, but finding a definitive answer has absorbed too much time alread so I'm putting it to the community \[smile\] I am building a SIEM system based around the ELK stack. The…

---

## [Setting source compression on existing index not working](https://discuss.elastic.co/t/setting-source-compression-on-existing-index-not-working/9839)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 3\
**Last updated:** [November 29, 2012, 9:41am UTC](https://discuss.elastic.co/t/setting-source-compression-on-existing-index-not-working/9839 "2012-11-29T09:41:02Z")

</div>

hi, i want to enable source compression on an existing test index. but i dont think my setting is working. can someone confirm - curl -XPUT 'http://localhost:9200/test/\_settings?pretty=true' -d '{"index" : { "\_sour…

---

## [Kibana alerts (cluster health yellow) on new index creation](https://discuss.elastic.co/t/kibana-alerts-cluster-health-yellow-on-new-index-creation/254493)

<div class="topic-metadata">

**Author:** [@JoranDox](https://discuss.elastic.co/u/JoranDox)\
**Replies:** 4\
**Last updated:** [November 9, 2020, 1:16pm UTC](https://discuss.elastic.co/t/kibana-alerts-cluster-health-yellow-on-new-index-creation/254493 "2020-11-09T13:16:02Z")

</div>

(not sure if I should put this in elasticsearch or kibana topic) Setup: logstash -\> elasticsearch, index name is based on timestamp of event, so every day around midnight we get a new index. The issue is twofold: ela…

---

## [TLS/SSL on Elasticsearch (new version 7.1) (Basic License)](https://discuss.elastic.co/t/tls-ssl-on-elasticsearch-new-version-7-1-basic-license/182623)

<div class="topic-metadata">

**Author:** [@Victor\_Vicente](https://discuss.elastic.co/u/Victor_Vicente)\
**Replies:** 4\
**Last updated:** [May 27, 2019, 1:13pm UTC](https://discuss.elastic.co/t/tls-ssl-on-elasticsearch-new-version-7-1-basic-license/182623 "2019-05-27T13:13:27Z")

</div>

Hi, now with version 7.1 TLS and RBAC are licensed under the free-of-charge Elastic Basic license. I was able to configure TLS from Kibana to Browser. But in the documentation, to do the same for elasticsearch (HTTPS) …

---

## [Logstash 6.2.2: Empty square brackets in json field names crash the pipeline](https://discuss.elastic.co/t/logstash-6-2-2-empty-square-brackets-in-json-field-names-crash-the-pipeline/166443)

<div class="topic-metadata">

**Author:** [@vtipparam](https://discuss.elastic.co/u/vtipparam)\
**Replies:** 4\
**Last updated:** [January 31, 2019, 1:44am UTC](https://discuss.elastic.co/t/logstash-6-2-2-empty-square-brackets-in-json-field-names-crash-the-pipeline/166443 "2019-01-31T01:44:42Z")

</div>

Empty square brackets in field names causes the Logstash pipeline to crash with following error: Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restar…

---

## [Scripted Field - Loop through documents in an index and add field value to list](https://discuss.elastic.co/t/scripted-field-loop-through-documents-in-an-index-and-add-field-value-to-list/153947)

<div class="topic-metadata">

**Author:** [@chickennuggets](https://discuss.elastic.co/u/chickennuggets)\
**Replies:** 4\
**Last updated:** [October 31, 2018, 6:50am UTC](https://discuss.elastic.co/t/scripted-field-loop-through-documents-in-an-index-and-add-field-value-to-list/153947 "2018-10-31T06:50:00Z")

</div>

Hi, I've just started using Kibana and was wondering how to solve the problem in the title. I've looked through somewhat related posts, but they haven't been any help. Essentially, what I'd like to do is loop through al…

---

## [Can I run indexing-task and searching-task in parallel？](https://discuss.elastic.co/t/can-i-run-indexing-task-and-searching-task-in-parallel/69446)

<div class="topic-metadata">

**Author:** [@a943013827](https://discuss.elastic.co/u/a943013827)\
**Replies:** 4\
**Last updated:** [December 20, 2016, 7:05am UTC](https://discuss.elastic.co/t/can-i-run-indexing-task-and-searching-task-in-parallel/69446 "2016-12-20T07:05:53Z")

</div>

Now I need to test the performance of elasticsearch while indexing and searching . But according to http://esrally.readthedocs.io/en/latest/adding\_tracks.html#running-tasks-in-parallel it seems that esrally only support …

---

## [Limiting buckets on histogram agg](https://discuss.elastic.co/t/limiting-buckets-on-histogram-agg/19610)

<div class="topic-metadata">

**Author:** [@Doug\_Nelson](https://discuss.elastic.co/u/Doug_Nelson)\
**Replies:** 4\
**Last updated:** [September 4, 2014, 7:07pm UTC](https://discuss.elastic.co/t/limiting-buckets-on-histogram-agg/19610 "2014-09-04T19:07:50Z")

</div>

So I am getting up to speed with elastic search and I was surprised to find no way to set the number of buckets for a histogram. In my use case, I have a index of search clicks and one of the parameters is the it…

---

## [Index.ttl.disable\_purge flag not working?](https://discuss.elastic.co/t/index-ttl-disable-purge-flag-not-working/8057)

<div class="topic-metadata">

**Author:** [@Stefan\_Pi](https://discuss.elastic.co/u/Stefan_Pi)\
**Replies:** 4\
**Last updated:** [June 13, 2012, 10:25am UTC](https://discuss.elastic.co/t/index-ttl-disable-purge-flag-not-working/8057 "2012-06-13T10:25:19Z")

</div>

Hi everybody, I'm using ES 0.19.4. I tried to disable the deletion process for documents of an existing index that was initially created with a TTL (The TTL deletion is working fine). I've tried to update the inde…

---

## [Boolean operators entered in lower case returning unexpected results](https://discuss.elastic.co/t/boolean-operators-entered-in-lower-case-returning-unexpected-results/6139)

<div class="topic-metadata">

**Author:** [@kranti\_vns](https://discuss.elastic.co/u/kranti_vns)\
**Replies:** 4\
**Last updated:** [January 9, 2012, 8:00pm UTC](https://discuss.elastic.co/t/boolean-operators-entered-in-lower-case-returning-unexpected-results/6139 "2012-01-09T20:00:38Z")

</div>

Hi Team, We are facing an issue when query string consists of Boolean operators (AND, OR and NOT) in lower case.For e. g. when following query is fired on ES server we are getting back the results even when there is…

---

## [Unable to connect Kibana to Elasticsearch through AWS load balancer with an SSL certificate](https://discuss.elastic.co/t/unable-to-connect-kibana-to-elasticsearch-through-aws-load-balancer-with-an-ssl-certificate/244409)

<div class="topic-metadata">

**Author:** [@matt.farrow](https://discuss.elastic.co/u/matt.farrow)\
**Replies:** 2\
**Last updated:** [August 11, 2020, 2:12pm UTC](https://discuss.elastic.co/t/unable-to-connect-kibana-to-elasticsearch-through-aws-load-balancer-with-an-ssl-certificate/244409 "2020-08-11T14:12:46Z")

</div>

Hi, hopefully I am able to provide all the necessary information needed for my problem. Let me know if anything extra is required. My current set up currently is an AWS load balancer with an SSL certificate attached to …

---

## [Elastic Query Returning Results With doc\_count Lower Than Expected](https://discuss.elastic.co/t/elastic-query-returning-results-with-doc-count-lower-than-expected/100254)

<div class="topic-metadata">

**Author:** [@cb2015](https://discuss.elastic.co/u/cb2015)\
**Replies:** 2\
**Last updated:** [September 14, 2017, 6:49pm UTC](https://discuss.elastic.co/t/elastic-query-returning-results-with-doc-count-lower-than-expected/100254 "2017-09-14T18:49:42Z")

</div>

Hi, So I am running a query to get the number of api calls in my logs. When I use this query, the numbers come in too low { "query": { "bool": { "must": \[ { "query\_string": { "analyze\_wildcard": tru…

---

## [Package beat with proper RPM naming](https://discuss.elastic.co/t/package-beat-with-proper-rpm-naming/82542)

<div class="topic-metadata">

**Author:** [@yuanlinios](https://discuss.elastic.co/u/yuanlinios)\
**Replies:** 2\
**Last updated:** [April 18, 2017, 1:32am UTC](https://discuss.elastic.co/t/package-beat-with-proper-rpm-naming/82542 "2017-04-18T01:32:53Z")

</div>

Hello experts I developed a customized community beat, and want to build RPMs, and then deploy to my environment. I can use "make package" to build RPMs successfully, but I want to make the package name and its rpm …

---

## [Split "event\_data" to only show the original field](https://discuss.elastic.co/t/split-event-data-to-only-show-the-original-field/78587)

<div class="topic-metadata">

**Author:** [@peanut](https://discuss.elastic.co/u/peanut)\
**Replies:** 2\
**Last updated:** [March 16, 2017, 10:46pm UTC](https://discuss.elastic.co/t/split-event-data-to-only-show-the-original-field/78587 "2017-03-16T22:46:26Z")

</div>

Good afternoon elastic community, I posted this question on the Logstash section but I figured it would be helpful to get your Winlogbeat expertise too. Is it best practice to mutate all the fields with the "event\_data…

---

## [Unable install any plugin to elastic](https://discuss.elastic.co/t/unable-install-any-plugin-to-elastic/52986)

<div class="topic-metadata">

**Author:** [@breezzz](https://discuss.elastic.co/u/breezzz)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 12:50pm UTC](https://discuss.elastic.co/t/unable-install-any-plugin-to-elastic/52986 "2016-06-16T12:50:27Z")

</div>

\[root@elastic01 ~\]# /usr/share/elasticsearch/bin/plugin Error: Could not find or load main class org.elasticsearch.plugins.PluginManagerCliParser early i was change /etc/sysconfig/elasticsearch: ES\_HOME=/home/elast…

---

## [Shield with Custom REST plugins](https://discuss.elastic.co/t/shield-with-custom-rest-plugins/40499)

<div class="topic-metadata">

**Author:** [@leeho](https://discuss.elastic.co/u/leeho)\
**Replies:** 2\
**Last updated:** [February 12, 2016, 11:23am UTC](https://discuss.elastic.co/t/shield-with-custom-rest-plugins/40499 "2016-02-12T11:23:47Z")

</div>

Hi, We've been scratching our heads at this for a while so we thought we'd give it a shot here. Some background: We have an application that uses ElasticSearch with a custom plugin with a custom REST endpoint that w…

---

## [HIVE query time based indices](https://discuss.elastic.co/t/hive-query-time-based-indices/36626)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 2\
**Last updated:** [December 9, 2015, 8:34am UTC](https://discuss.elastic.co/t/hive-query-time-based-indices/36626 "2015-12-09T08:34:49Z")

</div>

Hi guys, i set up i development hadoop cluster with the HIVE infrastructure and the elasticsearch-hadoop connector to allow SQL-like queries using ES-data. As all work quite fine and sweet Joins are working and we t…

---

## [Is TEST a reserved keyword?](https://discuss.elastic.co/t/is-test-a-reserved-keyword/10301)

<div class="topic-metadata">

**Author:** [@Emanuele\_Massara](https://discuss.elastic.co/u/Emanuele_Massara)\
**Replies:** 2\
**Last updated:** [January 11, 2013, 10:57am UTC](https://discuss.elastic.co/t/is-test-a-reserved-keyword/10301 "2013-01-11T10:57:45Z")

</div>

Hi there, today we run into an issue that took almost one hour to debug and solve. Like I posted on https://gist.github.com/4505957 , we had a really simple schema, BUT one of the fields contained "TEST" as its va…

---

## [Swiftype Hosted API - error Failed to fetch 9:39am (cors issue)](https://discuss.elastic.co/t/swiftype-hosted-api-error-failed-to-fetch-9-39am-cors-issue/208473)

<div class="topic-metadata">

**Author:** [@Harry\_Knowles](https://discuss.elastic.co/u/Harry_Knowles)\
**Replies:** 5\
**Last updated:** [November 19, 2019, 1:45pm UTC](https://discuss.elastic.co/t/swiftype-hosted-api-error-failed-to-fetch-9-39am-cors-issue/208473 "2019-11-19T13:45:37Z")

</div>

Hi, I'm having an issue with the API currently. Website: https://www.rydale.com/ We're recieving a CORS error: Access to fetch at 'https://host-64fz8w.api.swiftype.com/api/as/v1/engines/rydale/search.json' from origi…

---

## [Query Profiler Missing](https://discuss.elastic.co/t/query-profiler-missing/150614)

<div class="topic-metadata">

**Author:** [@tklg](https://discuss.elastic.co/u/tklg)\
**Replies:** 5\
**Last updated:** [October 2, 2018, 7:33pm UTC](https://discuss.elastic.co/t/query-profiler-missing/150614 "2018-10-02T19:33:24Z")

</div>

I'm having trouble understanding why Profiler is missing from my kibana instance, installed with default helm chart with xpack authentication configured. What I want is this: What I'm getting is this: And this lin…

---

## [Using multiple outputs and reliability](https://discuss.elastic.co/t/using-multiple-outputs-and-reliability/141610)

<div class="topic-metadata">

**Author:** [@Mark\_van\_Rossum](https://discuss.elastic.co/u/Mark_van_Rossum)\
**Replies:** 5\
**Last updated:** [July 27, 2018, 4:01pm UTC](https://discuss.elastic.co/t/using-multiple-outputs-and-reliability/141610 "2018-07-27T16:01:04Z")

</div>

We currently have a web cluster in Azure which streams HTTP logs from HAProxy over syslog to an Azure hosted logstash instance. We then have two outputs, the 1st writes the logs to an Azure storage bucket - which is rel…

---

## [How to exclude records in between two records in elasticsearch?](https://discuss.elastic.co/t/how-to-exclude-records-in-between-two-records-in-elasticsearch/95670)

<div class="topic-metadata">

**Author:** [@patrickian](https://discuss.elastic.co/u/patrickian)\
**Replies:** 5\
**Last updated:** [August 3, 2017, 3:16pm UTC](https://discuss.elastic.co/t/how-to-exclude-records-in-between-two-records-in-elasticsearch/95670 "2017-08-03T15:16:30Z")

</div>

Let’s say I have 10 documents in an index. document 2 has the k-v pair: 'activity': 'start' and document 8 has 'activity':'end'. I want to exclude all documents between and including documents 2 and 8. How can I do this…

---

## [Highlighting highlights all words in all fields when searching for field:\*](https://discuss.elastic.co/t/highlighting-highlights-all-words-in-all-fields-when-searching-for-field/8777)

<div class="topic-metadata">

**Author:** [@Mark\_Waddle\_2](https://discuss.elastic.co/u/Mark_Waddle_2)\
**Replies:** 5\
**Last updated:** [August 23, 2012, 6:48am UTC](https://discuss.elastic.co/t/highlighting-highlights-all-words-in-all-fields-when-searching-for-field/8777 "2012-08-23T06:48:46Z")

</div>

When I execute a search with a query like "field:\*", and specify a number of fields to be highlighted, it seems to highlight all words, except stop words, for all of those fields. It doesn't matter whether the field …

---

## [Elastic Stack Agentless Installation](https://discuss.elastic.co/t/elastic-stack-agentless-installation/354218)

<div class="topic-metadata">

**Author:** [@spazzrabbit](https://discuss.elastic.co/u/spazzrabbit)\
**Replies:** 7\
**Last updated:** [February 27, 2024, 1:02pm UTC](https://discuss.elastic.co/t/elastic-stack-agentless-installation/354218 "2024-02-27T13:02:58Z")

</div>

Hello everyone ! Is there any way to monitor windows machines without agent/script on target machine ? ForExample: Tool/Script on logstash to login and read logs from the target machine via SSH etc. Then process in the…

---

## [Elasticsearch security permission for logstash](https://discuss.elastic.co/t/elasticsearch-security-permission-for-logstash/310015)

<div class="topic-metadata">

**Author:** [@ciaroda](https://discuss.elastic.co/u/ciaroda)\
**Replies:** 1\
**Last updated:** [July 21, 2022, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-security-permission-for-logstash/310015 "2022-07-21T12:27:21Z")

</div>

Hi all, I played with ELK stack for a week or so... After installing elasticsearch and kibana (7.17 version), I enabled simple security following this guide. Later I installed logstash (version 7.17) with security con…

---

## [Resource management with Ingest and Transform](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 7\
**Last updated:** [April 25, 2022, 7:23am UTC](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239 "2022-04-25T07:23:13Z")

</div>

Hi, I currently have a running pipeline like this: Filebeat -\> Logstash -\> Elasticsearch \> Elasticsearch Transform I'm trying to process 10GB of logs. The data ingestion (Logstash -\> Elasticsearch) takes 30 mins, use…

---

## [Elastic-agent in a docker container](https://discuss.elastic.co/t/elastic-agent-in-a-docker-container/281068)

<div class="topic-metadata">

**Author:** [@NatSav](https://discuss.elastic.co/u/NatSav)\
**Replies:** 1\
**Last updated:** [August 11, 2021, 1:20pm UTC](https://discuss.elastic.co/t/elastic-agent-in-a-docker-container/281068 "2021-08-11T13:20:49Z")

</div>

Hi all. Im trying to run an elastic-agent inside a docker container and im encountering a few issues. I know that docker isnt technically supported however I think im nearly there and im going to persevere with it. I h…

---

## [Memory lock check on Elastic Cloud](https://discuss.elastic.co/t/memory-lock-check-on-elastic-cloud/264867)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 7\
**Last updated:** [February 23, 2021, 7:41am UTC](https://discuss.elastic.co/t/memory-lock-check-on-elastic-cloud/264867 "2021-02-23T07:41:52Z")

</div>

I'm curious how it is possible that a cluster on Elastic Cloud passes the memory lock bootstrap check even though the memory doesn't seem to be locked. Here is the mlockall state on all nodes GET \_nodes?filter\_path=\*\*.…

---

## [Error in Visualization with scripted field](https://discuss.elastic.co/t/error-in-visualization-with-scripted-field/189220)

<div class="topic-metadata">

**Author:** [@lucardo0](https://discuss.elastic.co/u/lucardo0)\
**Replies:** 1\
**Last updated:** [July 8, 2019, 4:17pm UTC](https://discuss.elastic.co/t/error-in-visualization-with-scripted-field/189220 "2019-07-08T16:17:17Z")

</div>

Hi, i imported a csv file with a date column (Format example: '2019-05-01') and Kibana does not recognize it and read it like string. I tried to transform it with a scripted field: doc\['Fecha'\].value I put date in t…

---

## [Receiving OS logs](https://discuss.elastic.co/t/receiving-os-logs/188036)

<div class="topic-metadata">

**Author:** [@markov](https://discuss.elastic.co/u/markov)\
**Replies:** 7\
**Last updated:** [July 2, 2019, 9:41am UTC](https://discuss.elastic.co/t/receiving-os-logs/188036 "2019-07-02T09:41:40Z")

</div>

i'm sending logs withe filebeat from a defined path to elastic but i'm getting the OS logs logstash and xpack enabled

---

## [Date parsing error in ES - Invalid format](https://discuss.elastic.co/t/date-parsing-error-in-es-invalid-format/137067)

<div class="topic-metadata">

**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\
**Replies:** 1\
**Last updated:** [June 23, 2018, 8:12am UTC](https://discuss.elastic.co/t/date-parsing-error-in-es-invalid-format/137067 "2018-06-23T08:12:29Z")

</div>

Hi, I am facing issue regarding parsing date field in ES. Here's what I am seeing in ES logs for the date: Caused by: java.lang.IllegalArgumentException: Invalid format: "04:08:02" is malformed at ":08:02" at o…

---

## [Filter ids across multiple indexes](https://discuss.elastic.co/t/filter-ids-across-multiple-indexes/119768)

<div class="topic-metadata">

**Author:** [@NomNomCameron](https://discuss.elastic.co/u/NomNomCameron)\
**Replies:** 7\
**Last updated:** [February 15, 2018, 7:46am UTC](https://discuss.elastic.co/t/filter-ids-across-multiple-indexes/119768 "2018-02-15T07:46:08Z")

</div>

I'm querying all searchable fields across all indexes and need to filter certain ids of documents returned from different indexes, how would I be able to filter/query for these kinds of results?

---

## [How to get stacked line chart to ignore no-data values](https://discuss.elastic.co/t/how-to-get-stacked-line-chart-to-ignore-no-data-values/94779)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 9:08pm UTC](https://discuss.elastic.co/t/how-to-get-stacked-line-chart-to-ignore-no-data-values/94779 "2017-07-27T21:08:45Z")

</div>

Whenever I choose stacked mode to display data, I will always get the line to dip to 0 if I don’t set my data update interval to be high enough. How can I prevent this? See attached What I would like to see instead i…

---

## [Logstash Input UDP problem](https://discuss.elastic.co/t/logstash-input-udp-problem/49718)

<div class="topic-metadata">

**Author:** [@Yim\_JunHyeok](https://discuss.elastic.co/u/Yim_JunHyeok)\
**Replies:** 1\
**Last updated:** [May 11, 2016, 11:57pm UTC](https://discuss.elastic.co/t/logstash-input-udp-problem/49718 "2016-05-11T23:57:58Z")

</div>

First of all sorry for my bad english. I'm doing logstash input UDP performance test. Unfortunately every time when i proceed logstash, i'm facing data loss. not sure where i am going wrong. I Followed below steps. 1…

---

## [How many users can access Elasticsearch and Kibana at the same time?](https://discuss.elastic.co/t/how-many-users-can-access-elasticsearch-and-kibana-at-the-same-time/350392)

<div class="topic-metadata">

**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\
**Replies:** 8\
**Last updated:** [January 8, 2024, 1:55pm UTC](https://discuss.elastic.co/t/how-many-users-can-access-elasticsearch-and-kibana-at-the-same-time/350392 "2024-01-08T13:55:27Z")

</div>

Hi, I am running a Elasticsearch and Kibana(V8.10) instance on a single windows server which has 8vCPU and 32gb of RAM. I would like to get a rough idea on how much load can the Elastic and Kibana instance can handle a…

---

## [Build Quality/Lack of testing](https://discuss.elastic.co/t/build-quality-lack-of-testing/99468)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 8\
**Last updated:** [September 6, 2017, 5:47pm UTC](https://discuss.elastic.co/t/build-quality-lack-of-testing/99468 "2017-09-06T17:47:30Z")

</div>

Hi I have just upgraded ElasticSearch 5.5.2 on a simple 2 node Windows cluster. Running Kibana in discover works only for a few seconds, after which it will crash with " Unable to get property ‘data’ of undefined or nu…

---

## [Elasticsearch and Power bi connection through ODBC driver](https://discuss.elastic.co/t/elasticsearch-and-power-bi-connection-through-odbc-driver/325405)

<div class="topic-metadata">

**Author:** [@Vitaliy.N](https://discuss.elastic.co/u/Vitaliy.N)\
**Replies:** 6\
**Last updated:** [February 14, 2023, 8:31am UTC](https://discuss.elastic.co/t/elasticsearch-and-power-bi-connection-through-odbc-driver/325405 "2023-02-14T08:31:58Z")

</div>

Hello Everyone, I am trying to connect Elasticsearch (running in docker container) with desktop power bi and having some issues. When testing connection using ODBC driver I am getting this error "libcurl: failed to per…

---

## [How to secure communication between APM agent and APM server?](https://discuss.elastic.co/t/how-to-secure-communication-between-apm-agent-and-apm-server/261527)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 6\
**Last updated:** [January 19, 2021, 2:53pm UTC](https://discuss.elastic.co/t/how-to-secure-communication-between-apm-agent-and-apm-server/261527 "2021-01-19T14:53:51Z")

</div>

I want to avoid that anyone can send anything to APM server port. Do you have any experience in this case? I case of communication between APM server and ELK we are using ssl certificates. Best Regads, Dan

---

## [When i using the user-defined pattern it doesn't work](https://discuss.elastic.co/t/when-i-using-the-user-defined-pattern-it-doesnt-work/104375)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 6\
**Last updated:** [October 23, 2017, 3:27am UTC](https://discuss.elastic.co/t/when-i-using-the-user-defined-pattern-it-doesnt-work/104375 "2017-10-23T03:27:32Z")

</div>

i am now using the pattern as below \<%{NUMBER:message\_type\_id}\>%{NUMBER:internal\_id}:%{SPACE}%{SYSLOGHOST:origin\_hostname}:%{unp:hahha} and i defined unp as below unp ^\\s{1}\]$ When i input: \<187\>11497: PH18L1-CS29S…

[Previous page](https://discuss.elastic.co/top.md?page=1335&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1337&per_page=50&period=all)
