# Top

**URL:** https://discuss.elastic.co/top.md?page=1351&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1352

---

## [Is filebeat parse the timestamp from the log line and use it as the timestamp of the event?](https://discuss.elastic.co/t/is-filebeat-parse-the-timestamp-from-the-log-line-and-use-it-as-the-timestamp-of-the-event/161813)

<div class="topic-metadata">

**Author:** [@pradeep57498755](https://discuss.elastic.co/u/pradeep57498755)\
**Replies:** 4\
**Last updated:** [December 26, 2018, 7:35am UTC](https://discuss.elastic.co/t/is-filebeat-parse-the-timestamp-from-the-log-line-and-use-it-as-the-timestamp-of-the-event/161813 "2018-12-26T07:35:10Z")

</div>

Hi, Am using filebeat on graylog and i want to parse the timestamp from the log line and use it as the timestamp field using filebeat ,how can i grok the log timestamp without logstash log sample Thu Dec 20 12:36:56 +0…

---

## [Kibana average\_bucket , max\_bucket and min\_bucket shows invalid results](https://discuss.elastic.co/t/kibana-average-bucket-max-bucket-and-min-bucket-shows-invalid-results/142675)

<div class="topic-metadata">

**Author:** [@Manoj\_Hettiarachchi](https://discuss.elastic.co/u/Manoj_Hettiarachchi)\
**Replies:** 4\
**Last updated:** [August 8, 2018, 9:52am UTC](https://discuss.elastic.co/t/kibana-average-bucket-max-bucket-and-min-bucket-shows-invalid-results/142675 "2018-08-08T09:52:06Z")

</div>

In my system, I am using Filebeat, Logstash, Elasticsearch, and Kibana. For every transaction in the system, a log is printed in the log file and it is saved in the Elasticsearch db. Sample logline: TID: \[-1234\] \[\] \[2…

---

## ["not enough master nodes discovered during pinging" Error in AWS WEST only East comes up fine!](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-error-in-aws-west-only-east-comes-up-fine/139436)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 4\
**Last updated:** [July 11, 2018, 2:48pm UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-error-in-aws-west-only-east-comes-up-fine/139436 "2018-07-11T14:48:48Z")

</div>

I understand this has been asked before. Our situation is a bit odd where this USED to work a few days ago and does work on our AWS EAST stack. However, we get this error on our WEST region stack. The security groups hav…

---

## [Problem with logstash:name error](https://discuss.elastic.co/t/problem-with-logstash-name-error/129996)

<div class="topic-metadata">

**Author:** [@wiem](https://discuss.elastic.co/u/wiem)\
**Replies:** 4\
**Last updated:** [May 8, 2018, 8:28am UTC](https://discuss.elastic.co/t/problem-with-logstash-name-error/129996 "2018-05-08T08:28:31Z")

</div>

Need help SOS! i have been using Logstash for 2 months now .2days ago out of nowhere a problem appeared that i can't find its origin: logstash- java.lang.illegalStateException:org.jruby.exceptions.RaiseException : ca…

---

## [\[UNSUPPORTED\] Extract fields from syslog messages](https://discuss.elastic.co/t/unsupported-extract-fields-from-syslog-messages/65402)

<div class="topic-metadata">

**Author:** [@Andrrrey](https://discuss.elastic.co/u/Andrrrey)\
**Replies:** 4\
**Last updated:** [November 10, 2016, 2:43pm UTC](https://discuss.elastic.co/t/unsupported-extract-fields-from-syslog-messages/65402 "2016-11-10T14:43:22Z")

</div>

There was similar question about JSON messages before... Setup: txt file--------\> filebeat----------\>elasticsearch File has syslog formatted and not formatted messages from different devices (sometimes format diffe…

---

## [Upgrade elasticsearch.jar from 1.7.5 to 2.3.5](https://discuss.elastic.co/t/upgrade-elasticsearch-jar-from-1-7-5-to-2-3-5/59528)

<div class="topic-metadata">

**Author:** [@mahesh.maney](https://discuss.elastic.co/u/mahesh.maney)\
**Replies:** 4\
**Last updated:** [September 6, 2016, 7:11am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-jar-from-1-7-5-to-2-3-5/59528 "2016-09-06T07:11:52Z")

</div>

Hi, I have upgraded the client(elasticsearch.jar) from 1.7.5 to 2.3.5 One of the major changes was "org.elasticsearch.client.transport.TransportClient". In 1.7.5 version org.elasticsearch.client.transport.TransportClie…

---

## [Systemctl status kibana & systemctl status Elasticsearch is Running but kibana page is not loading](https://discuss.elastic.co/t/systemctl-status-kibana-systemctl-status-elasticsearch-is-running-but-kibana-page-is-not-loading/308467)

<div class="topic-metadata">

**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\
**Replies:** 2\
**Last updated:** [June 29, 2022, 1:15pm UTC](https://discuss.elastic.co/t/systemctl-status-kibana-systemctl-status-elasticsearch-is-running-but-kibana-page-is-not-loading/308467 "2022-06-29T13:15:14Z")

</div>

command result :==\> journalctl -fu kibana.service Jun 29 18:18:13 linux kibana\[54048\]: FATAL Error: Unable to complete saved object migrations for the \[.kibana\] index. Please check the health of your Elasticsearch clu…

---

## [Duplicate results when paging](https://discuss.elastic.co/t/duplicate-results-when-paging/260895)

<div class="topic-metadata">

**Author:** [@noah-elastic](https://discuss.elastic.co/u/noah-elastic)\
**Replies:** 2\
**Last updated:** [January 13, 2021, 2:46pm UTC](https://discuss.elastic.co/t/duplicate-results-when-paging/260895 "2021-01-13T14:46:54Z")

</div>

Hello Folks -- I'm researching an interesting situation that one of our users pointed out. We have a somewhat simple query that searches on a couple fields. We are using size/from to allow the users to step through the …

---

## [Scripted fields vs real fields](https://discuss.elastic.co/t/scripted-fields-vs-real-fields/211710)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 2\
**Last updated:** [December 13, 2019, 12:35pm UTC](https://discuss.elastic.co/t/scripted-fields-vs-real-fields/211710 "2019-12-13T12:35:13Z")

</div>

Hi i've defind some scripted fields for my index patterns, but have some doubts: When you define them you get a warning message "Scripted fields can be used to display and aggregate calculated values. As such, they ca…

---

## [MetricBeat Stopping](https://discuss.elastic.co/t/metricbeat-stopping/146998)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 2\
**Last updated:** [September 3, 2018, 12:21pm UTC](https://discuss.elastic.co/t/metricbeat-stopping/146998 "2018-09-03T12:21:46Z")

</div>

I ran 2 exact installations of MetricBeat and the beat works on 1 (I See data on Kibana) but the other one gives this error. For my naked eye everything looks identical! Can someone please help? 2018-09-02T18:05:49.337-…

---

## [Elk 6.2.3 starting Elasticsearch Server fails](https://discuss.elastic.co/t/elk-6-2-3-starting-elasticsearch-server-fails/135638)

<div class="topic-metadata">

**Author:** [@Gowrisankar\_M](https://discuss.elastic.co/u/Gowrisankar_M)\
**Replies:** 2\
**Last updated:** [June 18, 2018, 1:44pm UTC](https://discuss.elastic.co/t/elk-6-2-3-starting-elasticsearch-server-fails/135638 "2018-06-18T13:44:20Z")

</div>

Hello, I am using readonlyplugin for 6.2.3 which fails as like below ? any help here ? Starting Elasticsearch Server …

---

## [IPFix Custom Cisco ASR1k some not parsing](https://discuss.elastic.co/t/ipfix-custom-cisco-asr1k-some-not-parsing/107475)

<div class="topic-metadata">

**Author:** [@sudoritz](https://discuss.elastic.co/u/sudoritz)\
**Replies:** 2\
**Last updated:** [December 3, 2017, 7:17pm UTC](https://discuss.elastic.co/t/ipfix-custom-cisco-asr1k-some-not-parsing/107475 "2017-12-03T19:17:32Z")

</div>

buildig Custom asr1k IPFIX flows I looked at some template data / pcaps n such and got these to work with SPlunk Stream(BUT 12235/12236/12237 doesnt seem to parse right in it) So im trying to rule out and look at trying…

---

## [How to call vis object in the controller?](https://discuss.elastic.co/t/how-to-call-vis-object-in-the-controller/60066)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [September 8, 2016, 10:27pm UTC](https://discuss.elastic.co/t/how-to-call-vis-object-in-the-controller/60066 "2016-09-08T22:27:29Z")

</div>

According to below site, variables set in the visualization are available as vis.params.xxx in template. However, I want to use the vis.params in the controller instead of template. When I do this, I get below erro…

---

## [How to check the "doc\_value" and "field data" in Kibana](https://discuss.elastic.co/t/how-to-check-the-doc-value-and-field-data-in-kibana/52956)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 2\
**Last updated:** [July 4, 2016, 12:29pm UTC](https://discuss.elastic.co/t/how-to-check-the-doc-value-and-field-data-in-kibana/52956 "2016-07-04T12:29:45Z")

</div>

Hi Team, I have added below things in mapping: "doc\_values" : true and "fielddata": { "loading" : "eager\_global\_ordinals" } inorder to resolve the space issues with the String fields.…

---

## ["Cannot invoke "java.util.List.get(int)" because "nestedParsedSource" is null" when using nested properties + has\_parent + inner\_hits](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967)

<div class="topic-metadata">

**Author:** [@pavelfry](https://discuss.elastic.co/u/pavelfry)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 10:38am UTC](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967 "2021-07-29T10:38:19Z")

</div>

Hello everyone, I've been banging my head against this for a while and it seems I've reached a dead end. I've tried to simplify the code as much as possible. Problem: I'm using the child/parent relationships and neste…

---

## [Conditional grok parsing using elasticsearch processor pipeline](https://discuss.elastic.co/t/conditional-grok-parsing-using-elasticsearch-processor-pipeline/249977)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 3\
**Last updated:** [September 29, 2020, 9:44am UTC](https://discuss.elastic.co/t/conditional-grok-parsing-using-elasticsearch-processor-pipeline/249977 "2020-09-29T09:44:26Z")

</div>

We use the default apache error elasticsearch pipeline but, we have the requirement that needs a further parsing. We need an additional grok parsing for message field. How to perform grok parsing when field event\_type i…

---

## [Index setting read\_only\_allow\_delete does not allow \_delete\_by\_query](https://discuss.elastic.co/t/index-setting-read-only-allow-delete-does-not-allow-delete-by-query/169719)

<div class="topic-metadata">

**Author:** [@iamredlus](https://discuss.elastic.co/u/iamredlus)\
**Replies:** 3\
**Last updated:** [February 24, 2019, 8:55pm UTC](https://discuss.elastic.co/t/index-setting-read-only-allow-delete-does-not-allow-delete-by-query/169719 "2019-02-24T20:55:01Z")

</div>

Hi After applying read\_only\_allow\_delete to an index - PUT /index\_name/\_settings { "index": { "blocks": { "read\_only\_allow\_delete": true } } } Issuing a \_delete\_by\_query produces t…

---

## [How to combine Repeat image with values over it in Canvas?](https://discuss.elastic.co/t/how-to-combine-repeat-image-with-values-over-it-in-canvas/147564)

<div class="topic-metadata">

**Author:** [@GGorast](https://discuss.elastic.co/u/GGorast)\
**Replies:** 3\
**Last updated:** [September 6, 2018, 9:04pm UTC](https://discuss.elastic.co/t/how-to-combine-repeat-image-with-values-over-it-in-canvas/147564 "2018-09-06T21:04:07Z")

</div>

Hi, I have this Code that is producing top 3 of something: filters | esdocs index="elastalert" q="match\_body.intent:\\"Reconnaissance & Probing\\"" fields="match\_body.src\_ip" | sort column="count" | ply by="match\_body.src…

---

## [Scripted field rounds values \<1 to 0](https://discuss.elastic.co/t/scripted-field-rounds-values-1-to-0/139420)

<div class="topic-metadata">

**Author:** [@apatel](https://discuss.elastic.co/u/apatel)\
**Replies:** 3\
**Last updated:** [July 11, 2018, 2:49pm UTC](https://discuss.elastic.co/t/scripted-field-rounds-values-1-to-0/139420 "2018-07-11T14:49:42Z")

</div>

I have two fields (px\_last and implied\_price) that I am trying to find the percent difference of using a scripted field in painless. I ran into problems trying to calculate it when I saw I was getting results of 200% dev…

---

## [Running multiple endpoints on the same node](https://discuss.elastic.co/t/running-multiple-endpoints-on-the-same-node/127952)

<div class="topic-metadata">

**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\
**Replies:** 3\
**Last updated:** [April 13, 2018, 7:54pm UTC](https://discuss.elastic.co/t/running-multiple-endpoints-on-the-same-node/127952 "2018-04-13T19:54:39Z")

</div>

Big picture I want to run atleast 2 nodes, put a load balancer on the front of them and have the requests fire in across the nodes, not sure if there is anything clever I have to do to ensure what I belive is called atle…

---

## [Pattern error - but which pattern? (logstash 2.4.0) (SOLVED)](https://discuss.elastic.co/t/pattern-error-but-which-pattern-logstash-2-4-0-solved/63861)

<div class="topic-metadata">

**Author:** [@al\_form2000](https://discuss.elastic.co/u/al_form2000)\
**Replies:** 3\
**Last updated:** [October 27, 2016, 9:22am UTC](https://discuss.elastic.co/t/pattern-error-but-which-pattern-logstash-2-4-0-solved/63861 "2016-10-27T09:22:45Z")

</div>

Greetings. I am trying (and failing) in getting custom patterns to work with logstash 2.4.0. Here is the relevant part of the conf file: #some parsing happens above... grok { patterns\_dir =\> \["/config\_dir/…

---

## [Nested aggregation count seems incorect](https://discuss.elastic.co/t/nested-aggregation-count-seems-incorect/49687)

<div class="topic-metadata">

**Author:** [@ffrinton](https://discuss.elastic.co/u/ffrinton)\
**Replies:** 3\
**Last updated:** [May 13, 2016, 4:26pm UTC](https://discuss.elastic.co/t/nested-aggregation-count-seems-incorect/49687 "2016-05-13T16:26:21Z")

</div>

ES v2.1.1 I have a data structure containing embedded history, where a docs history is an array of history objects, each of which contains a number of fields. Unfortunately the avail space for an issue here is limit…

---

## [Decay score based on number occurrences](https://discuss.elastic.co/t/decay-score-based-on-number-occurrences/21173)

<div class="topic-metadata">

**Author:** [@tsturzl](https://discuss.elastic.co/u/tsturzl)\
**Replies:** 3\
**Last updated:** [December 10, 2014, 5:34pm UTC](https://discuss.elastic.co/t/decay-score-based-on-number-occurrences/21173 "2014-12-10T17:34:26Z")

</div>

I'm trying to find a way to prevent multiple posts from appearing in search results that are from the same author. So far I've tried random scoring, which allows me to maintain pagination. However, I can still have u…

---

## [Elasticsearch cluster planning/sizing](https://discuss.elastic.co/t/elasticsearch-cluster-planning-sizing/330579)

<div class="topic-metadata">

**Author:** [@bentzy](https://discuss.elastic.co/u/bentzy)\
**Replies:** 1\
**Last updated:** [April 23, 2023, 1:49pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-planning-sizing/330579 "2023-04-23T13:49:32Z")

</div>

I want to deploy Elasticsearch with ECK to enable search in a large production GitLab Cluster. I read that Elasticsearch cluster size should be 0.5 of the total of all repos(0.5 \* 2TB). I ask about the ES cluster plannin…

---

## [If "keyword" in message not working for logstash](https://discuss.elastic.co/t/if-keyword-in-message-not-working-for-logstash/285622)

<div class="topic-metadata">

**Author:** [@kriss332](https://discuss.elastic.co/u/kriss332)\
**Replies:** 7\
**Last updated:** [October 1, 2021, 6:47pm UTC](https://discuss.elastic.co/t/if-keyword-in-message-not-working-for-logstash/285622 "2021-10-01T18:47:41Z")

</div>

Hello all... I am receiving logs from 5 different sources on one single port. In fact it is a collection of files being sent through syslog from a server in realtime. The server stores logs from 4 VPN servers and one DN…

---

## [Manage events Logstash](https://discuss.elastic.co/t/manage-events-logstash/186806)

<div class="topic-metadata">

**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\
**Replies:** 1\
**Last updated:** [June 25, 2019, 6:24pm UTC](https://discuss.elastic.co/t/manage-events-logstash/186806 "2019-06-25T18:24:57Z")

</div>

Hi, Actually I'm using logstash to index/update some documents in ElasticSearch. I want know how I can manage the events that logstash recive of my inputs. For example if I need index 1000 documents , I want know in e…

---

## [Watcher and kibana](https://discuss.elastic.co/t/watcher-and-kibana/164146)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 7\
**Last updated:** [January 22, 2019, 7:59am UTC](https://discuss.elastic.co/t/watcher-and-kibana/164146 "2019-01-22T07:59:42Z")

</div>

If I uses a trail license and enables watcher of X-pack, do I need to install kibana? Since from the log, I see the following error messages when I have no kibana installed: at org.elasticsearch.painless.PainlessScript…

---

## [Filter Kafka JSON messages with Logstash grok](https://discuss.elastic.co/t/filter-kafka-json-messages-with-logstash-grok/107251)

<div class="topic-metadata">

**Author:** [@Konstantin\_Blag](https://discuss.elastic.co/u/Konstantin_Blag)\
**Replies:** 1\
**Last updated:** [November 13, 2017, 6:43am UTC](https://discuss.elastic.co/t/filter-kafka-json-messages-with-logstash-grok/107251 "2017-11-13T06:43:53Z")

</div>

I try to filter kafka json messages only for one Country - Germany (DE). To do that I have to write a grok expression. Can anyone help me in writing a grok pattern for this json? {"table":"ORDERS","type":"I","payload":{…

---

## [Place the Static HTML Page in kibana Dashboard](https://discuss.elastic.co/t/place-the-static-html-page-in-kibana-dashboard/106633)

<div class="topic-metadata">

**Author:** [@RajeshAJ](https://discuss.elastic.co/u/RajeshAJ)\
**Replies:** 1\
**Last updated:** [November 7, 2017, 5:11pm UTC](https://discuss.elastic.co/t/place-the-static-html-page-in-kibana-dashboard/106633 "2017-11-07T17:11:38Z")

</div>

I need to add the Static HTML file in Kibana dashboard.where i can hold my HTML file in Kibana. Note:Kibana version 5.6.3 I come across some kibana plugin like Kibana-html-plugin,kibana5-html-plugin , but it wont support…

---

## [Data Table in Kibana Click Event](https://discuss.elastic.co/t/data-table-in-kibana-click-event/77597)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 1\
**Last updated:** [March 7, 2017, 11:43pm UTC](https://discuss.elastic.co/t/data-table-in-kibana-click-event/77597 "2017-03-07T23:43:10Z")

</div>

Hi, I want to add click event to my data table. I wanted to open image on click of any row of Data table. I know we can drill down data table, but i want to open image on click of data row. Any Idea?

---

## [Dashboard AutoRefresh](https://discuss.elastic.co/t/dashboard-autorefresh/51709)

<div class="topic-metadata">

**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\
**Replies:** 1\
**Last updated:** [June 2, 2016, 2:43pm UTC](https://discuss.elastic.co/t/dashboard-autorefresh/51709 "2016-06-02T14:43:19Z")

</div>

In Kibana 3 you could set the AutoRefresh for the dashboard and it would save. I can't see how to save this in Kibana 4+

---

## [Where are the canvas stored?](https://discuss.elastic.co/t/where-are-the-canvas-stored/253170)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 5\
**Last updated:** [October 27, 2020, 1:49pm UTC](https://discuss.elastic.co/t/where-are-the-canvas-stored/253170 "2020-10-27T13:49:21Z")

</div>

Hello. I am using kibana to create some canvas which will store a couple visualizations. Now this is being done via docker-compose. I would like to know the location inside the container filesystem where the canvas I jus…

---

## [Exception \[not an SSL/TLS record\] in es log and \[None of the configured nodes are available\] in java](https://discuss.elastic.co/t/exception-not-an-ssl-tls-record-in-es-log-and-none-of-the-configured-nodes-are-available-in-java/160875)

<div class="topic-metadata">

**Author:** [@lip](https://discuss.elastic.co/u/lip)\
**Replies:** 5\
**Last updated:** [December 17, 2018, 6:10am UTC](https://discuss.elastic.co/t/exception-not-an-ssl-tls-record-in-es-log-and-none-of-the-configured-nodes-are-available-in-java/160875 "2018-12-17T06:10:01Z")

</div>

There is another problem show out after i made dependencies right. Every time i try TransportClient search, es log : \[2018-12-14T16:57:38,235\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4ServerTransport\] \[PjlTJv4\] exception caug…

---

## [Access to documents in ScriptEngine plugin](https://discuss.elastic.co/t/access-to-documents-in-scriptengine-plugin/138278)

<div class="topic-metadata">

**Author:** [@Cameron\_VandenBerg](https://discuss.elastic.co/u/Cameron_VandenBerg)\
**Replies:** 5\
**Last updated:** [July 10, 2018, 6:46am UTC](https://discuss.elastic.co/t/access-to-documents-in-scriptengine-plugin/138278 "2018-07-10T06:46:35Z")

</div>

Is it possible to access document fields or termvectors within a plugin that implements ScriptEngine? I have a field for each document which contains the length of the document, and I would like to use that value as wel…

---

## [Running Filebeat on Azure App Service annoying exception](https://discuss.elastic.co/t/running-filebeat-on-azure-app-service-annoying-exception/134409)

<div class="topic-metadata">

**Author:** [@Alexander\_Sealook](https://discuss.elastic.co/u/Alexander_Sealook)\
**Replies:** 5\
**Last updated:** [June 6, 2018, 11:54am UTC](https://discuss.elastic.co/t/running-filebeat-on-azure-app-service-annoying-exception/134409 "2018-06-06T11:54:23Z")

</div>

Hey, I am running Filebeat as a webjob on Azure App Service and it's working fine, but I am annoyed with the exceptions it is constantly writing to the logs: 2018-06-04T11:15:16.433Z ERROR process/process.go:454 Error …

---

## [Json logstash](https://discuss.elastic.co/t/json-logstash/93331)

<div class="topic-metadata">

**Author:** [@ahongyun](https://discuss.elastic.co/u/ahongyun)\
**Replies:** 5\
**Last updated:** [July 17, 2017, 7:12am UTC](https://discuss.elastic.co/t/json-logstash/93331 "2017-07-17T07:12:21Z")

</div>

Hi all i have a json file and im trying to parse this thru logstash and into elasticsearch and kibana. I have the following config. input { file { path =\> "/appdir/logs/batch-timing.json" type =\> "dbatch"…

---

## [Default mapping Location](https://discuss.elastic.co/t/default-mapping-location/32950)

<div class="topic-metadata">

**Author:** [@hyphen1370](https://discuss.elastic.co/u/hyphen1370)\
**Replies:** 5\
**Last updated:** [October 26, 2015, 5:32pm UTC](https://discuss.elastic.co/t/default-mapping-location/32950 "2015-10-26T17:32:46Z")

</div>

Hello, Is there anyone has experience importing MySQL database through Logstash to ElasticSearch? I have issue with the default mapping that LogStash provides. It always convert date to string and Integer to Long. For …

---

## [Kibana Home Dashboard showing critical In Red and Non critical Green](https://discuss.elastic.co/t/kibana-home-dashboard-showing-critical-in-red-and-non-critical-green/352190)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 6\
**Last updated:** [February 5, 2024, 7:58am UTC](https://discuss.elastic.co/t/kibana-home-dashboard-showing-critical-in-red-and-non-critical-green/352190 "2024-02-05T07:58:40Z")

</div>

Hello All, Is there anyway I can transfer my Old implementaion to show HOME monitoring page to admins in this new way. This first approach is not required as per customer and asked instead for second approach that I do…

---

## [Apikeys and elastic cloud](https://discuss.elastic.co/t/apikeys-and-elastic-cloud/269856)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 6\
**Last updated:** [April 14, 2021, 12:30pm UTC](https://discuss.elastic.co/t/apikeys-and-elastic-cloud/269856 "2021-04-14T12:30:42Z")

</div>

Hi all. We use elastic cloud 7.12. We have also metricbeat and filebeat running on node and k8s cluster and for their configurations I use cloud.id and cloud.auth has ta user (beats\_setup) with those privileges. Now I'…

---

## [Added new line in my log and cannot get the output correctly in filbeat (need to remove new line)](https://discuss.elastic.co/t/added-new-line-in-my-log-and-cannot-get-the-output-correctly-in-filbeat-need-to-remove-new-line/235123)

<div class="topic-metadata">

**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\
**Replies:** 6\
**Last updated:** [June 8, 2020, 6:11pm UTC](https://discuss.elastic.co/t/added-new-line-in-my-log-and-cannot-get-the-output-correctly-in-filbeat-need-to-remove-new-line/235123 "2020-06-08T18:11:27Z")

</div>

How to remove newline using multiline config in filebeat Log file: 2020-06-01T07:44:31.300103 H 80 DHandler.cpp:953 stdlog sql\_execute 11201 9 handcrafted admin 431-856b {"query","client","execution\_time","total\_time"}…

---

## [Elasticsearch Data Loss in Index in ELK 6.4.2](https://discuss.elastic.co/t/elasticsearch-data-loss-in-index-in-elk-6-4-2/233866)

<div class="topic-metadata">

**Author:** [@Shreyash](https://discuss.elastic.co/u/Shreyash)\
**Replies:** 6\
**Last updated:** [May 25, 2020, 5:06am UTC](https://discuss.elastic.co/t/elasticsearch-data-loss-in-index-in-elk-6-4-2/233866 "2020-05-25T05:06:40Z")

</div>

Hi All, I am using ELK stack 6.4.2 with Microsoft SQL Server. The Elasticsearch, Logstash are running in a Windows Virtual Machine. We have observed that a randomw document which was already index before goes missing fr…

---

## [Configure scheduled watcher against monitoring indices which only looks at the latest X minutes of data](https://discuss.elastic.co/t/configure-scheduled-watcher-against-monitoring-indices-which-only-looks-at-the-latest-x-minutes-of-data/148241)

<div class="topic-metadata">

**Author:** [@gautu7](https://discuss.elastic.co/u/gautu7)\
**Replies:** 6\
**Last updated:** [September 18, 2018, 6:48am UTC](https://discuss.elastic.co/t/configure-scheduled-watcher-against-monitoring-indices-which-only-looks-at-the-latest-x-minutes-of-data/148241 "2018-09-18T06:48:22Z")

</div>

Hi, I have a separate monitoring cluster which is housing all the xpack.monitoring data being sent from the production elasticsearch cluster. I want to put this monitoring data to good use by creating some alerts so I t…

---

## [Where does elasticsearch writes the logs when run in service](https://discuss.elastic.co/t/where-does-elasticsearch-writes-the-logs-when-run-in-service/117156)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 6\
**Last updated:** [January 26, 2018, 9:41am UTC](https://discuss.elastic.co/t/where-does-elasticsearch-writes-the-logs-when-run-in-service/117156 "2018-01-26T09:41:49Z")

</div>

Hi all, I wanted to know where does elasticsearch writes the log when run as service. I tried starting the elasticsearch as service and it fails. Theres no data in /var/log/elasticsearch/elasticsearch.log \[root@sample…

---

## [ES INSISTS on trying to create repos in wrong place](https://discuss.elastic.co/t/es-insists-on-trying-to-create-repos-in-wrong-place/101358)

<div class="topic-metadata">

**Author:** [@Bruce\_Carey](https://discuss.elastic.co/u/Bruce_Carey)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 6:58pm UTC](https://discuss.elastic.co/t/es-insists-on-trying-to-create-repos-in-wrong-place/101358 "2017-09-21T18:58:43Z")

</div>

Setup: Azure Ubuntu 16.04 Elasticsearch 1.7.3 (yes I know it's old, but we're not ready to change it yet) Challenge: We implemented backups. At some point, the path.repo didn't match the place the backup script was tr…

---

## [PayloadTermQuery in ElasticSearch](https://discuss.elastic.co/t/payloadtermquery-in-elasticsearch/22701)

<div class="topic-metadata">

**Author:** [@Devaraja\_Swami](https://discuss.elastic.co/u/Devaraja_Swami)\
**Replies:** 6\
**Last updated:** [March 20, 2015, 1:00pm UTC](https://discuss.elastic.co/t/payloadtermquery-in-elasticsearch/22701 "2015-03-20T13:00:13Z")

</div>

I need to use PayloadTermQuery from Lucene. Does anyone know how I can use this in ElasticSearch? I am using ES 1.4.4, with the Java API. In Lucene, I could use this by directly instantiating PayloadTermQuery, but t…

---

## [Can't start elasticsearch](https://discuss.elastic.co/t/cant-start-elasticsearch/277086)

<div class="topic-metadata">

**Author:** [@Fatma\_Alzahraa](https://discuss.elastic.co/u/Fatma_Alzahraa)\
**Replies:** 2\
**Last updated:** [June 28, 2021, 10:37am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch/277086 "2021-06-28T10:37:18Z")

</div>

Hello , I installed elasticsearch but can't start and get errors centos 7 jdk version : jdk 11 elasticsearch version : 7.13.2 \[root@server bin\]# systemctl status elasticsearch.service ● elasticsearch.service - Elas…

---

## [Default kibana dashboards with custom index name](https://discuss.elastic.co/t/default-kibana-dashboards-with-custom-index-name/205208)

<div class="topic-metadata">

**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\
**Replies:** 2\
**Last updated:** [November 8, 2019, 12:24pm UTC](https://discuss.elastic.co/t/default-kibana-dashboards-with-custom-index-name/205208 "2019-11-08T12:24:34Z")

</div>

Hi Team, I'm bit new to ELK stack. I enjoy learning it. I'm running on ELK 7.3.0 I have a question here. I have installed winlogbeat on the production server as well as the test server. I'm sending logs to logstas…

---

## [How to point to a local images in Markdown](https://discuss.elastic.co/t/how-to-point-to-a-local-images-in-markdown/147730)

<div class="topic-metadata">

**Author:** [@martb](https://discuss.elastic.co/u/martb)\
**Replies:** 2\
**Last updated:** [September 10, 2018, 9:25am UTC](https://discuss.elastic.co/t/how-to-point-to-a-local-images-in-markdown/147730 "2018-09-10T09:25:58Z")

</div>

Hi, v 6.2.2 open source instance. Using markdown I'm currently pointing the images on my dashboard to an URL i.e Has anyone managed to point to a local path on the actually Kibana server? Would appreciate some guida…

---

## [Logstash not creating new field](https://discuss.elastic.co/t/logstash-not-creating-new-field/69352)

<div class="topic-metadata">

**Author:** [@kitex](https://discuss.elastic.co/u/kitex)\
**Replies:** 2\
**Last updated:** [December 23, 2016, 7:26am UTC](https://discuss.elastic.co/t/logstash-not-creating-new-field/69352 "2016-12-23T07:26:48Z")

</div>

My Log Line: 2016-12-18 05:30:46 kannel 2016-12-18 05:30:46 SMS HTTP-request sender:44176845678 request: 'The Today Date "18/12/2016",Adam Smith "18/12/2016",and Time "05:30" I have installed logstash from rpm package …

---

## [Elasricsearch Documentation on Functional Big O Notation](https://discuss.elastic.co/t/elasricsearch-documentation-on-functional-big-o-notation/21862)

<div class="topic-metadata">

**Author:** [@webish](https://discuss.elastic.co/u/webish)\
**Replies:** 2\
**Last updated:** [January 28, 2015, 10:31am UTC](https://discuss.elastic.co/t/elasricsearch-documentation-on-functional-big-o-notation/21862 "2015-01-28T10:31:13Z")

</div>

I have often found myself looking into the performance of different functionality with Elasticsearch. I feel like this is a huge missing piece of the documentation with ES. The Redis documentation attempts to identi…

[Previous page](https://discuss.elastic.co/top.md?page=1350&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1352&per_page=50&period=all)
