# Top

**URL:** https://discuss.elastic.co/top.md?page=1355&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1356

---

## [\[Solved\] Kibana 4.4.0 repos and SL6 (and possible other distros)](https://discuss.elastic.co/t/solved-kibana-4-4-0-repos-and-sl6-and-possible-other-distros/40833)

<div class="topic-metadata">

**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\
**Replies:** 4\
**Last updated:** [February 4, 2016, 10:59am UTC](https://discuss.elastic.co/t/solved-kibana-4-4-0-repos-and-sl6-and-possible-other-distros/40833 "2016-02-04T10:59:16Z")

</div>

Hello, new kibana repo config is not working for ScientificLinux 6.7 (flavour of Centos 6) Yum is not aware of {branch}. It won't help when I tried to substitute {branch} for current or stable.

---

## [Inability to set up Shield/Security within X-Pack Trial](https://discuss.elastic.co/t/inability-to-set-up-shield-security-within-x-pack-trial/142924)

<div class="topic-metadata">

**Author:** [@tvoll](https://discuss.elastic.co/u/tvoll)\
**Replies:** 6\
**Last updated:** [August 3, 2018, 8:48pm UTC](https://discuss.elastic.co/t/inability-to-set-up-shield-security-within-x-pack-trial/142924 "2018-08-03T20:48:43Z")

</div>

So, I'm currently testing out the trial of X-Pack on my test install, and i'm having an issue enabling the Security portion of X-Pack. From the guides provided, it is presented that it should be as easy as entering xpac…

---

## [Logstash-syslog-output failed to load plugin code](https://discuss.elastic.co/t/logstash-syslog-output-failed-to-load-plugin-code/156552)

<div class="topic-metadata">

**Author:** [@chris\_a.k](https://discuss.elastic.co/u/chris_a.k)\
**Replies:** 0\
**Last updated:** [November 13, 2018, 10:12pm UTC](https://discuss.elastic.co/t/logstash-syslog-output-failed-to-load-plugin-code/156552 "2018-11-13T22:12:56Z")

</div>

Hello, I am a newbie trying to write standard output into my syslog server, I am having issues to load Syslog output plugin code. Find below the error received: \[2018-11-14T01:07:00,302\]\[WARN \]\[logstash.config.source.m…

---

## [How can I send my custom Windows AD server event logs to Logstash?](https://discuss.elastic.co/t/how-can-i-send-my-custom-windows-ad-server-event-logs-to-logstash/84485)

<div class="topic-metadata">

**Author:** [@flyfish](https://discuss.elastic.co/u/flyfish)\
**Replies:** 0\
**Last updated:** [May 4, 2017, 5:55am UTC](https://discuss.elastic.co/t/how-can-i-send-my-custom-windows-ad-server-event-logs-to-logstash/84485 "2017-05-04T05:55:08Z")

</div>

Hello, I'd like to send my Windows server 2008 AD server logs to ELK via Nxlog, but I only see "Security" log send to KIbana, but I want "Active directory domain services,DHCP server, DNS Server, Application, Security,S…

---

## [Mapping conflict but no way to resolve anymore](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 1\
**Last updated:** [December 22, 2021, 10:56am UTC](https://discuss.elastic.co/t/mapping-conflict-but-no-way-to-resolve-anymore/292617 "2021-12-22T10:56:01Z")

</div>

In the past, you could click on the conflict field and see which indices are causing the conflict but for some reason you have removed that functionality. Is there some way to see which index is causing the conflict?

---

## [Filebeat read tcp i/o timeout which is causing duplicate event to get stored in elasticsearch](https://discuss.elastic.co/t/filebeat-read-tcp-i-o-timeout-which-is-causing-duplicate-event-to-get-stored-in-elasticsearch/218985)

<div class="topic-metadata">

**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\
**Replies:** 1\
**Last updated:** [February 13, 2020, 11:14am UTC](https://discuss.elastic.co/t/filebeat-read-tcp-i-o-timeout-which-is-causing-duplicate-event-to-get-stored-in-elasticsearch/218985 "2020-02-13T11:14:59Z")

</div>

I am sending data via filebeat \> logstash \> elasticsearch \> kibana. Due to timeout at filebeat it's sending duplicate events. filebeat.log 2020-02-07T18:40:08.968+0400 ERROR logstash/async.go:256 Failed to publi…

---

## [Exiting: 1 error: error making http request:](https://discuss.elastic.co/t/exiting-1-error-error-making-http-request/211669)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 8:10pm UTC](https://discuss.elastic.co/t/exiting-1-error-error-making-http-request/211669 "2019-12-12T20:10:30Z")

</div>

I am setting up metricbeat on a node with Kibana and Elasticsearch (coordinator role) I have setup the kibana portion and it injected the dashboards but at the end of the run it still fails with Exiting: 1 error: error…

---

## [Dissect vs. GROK + other tweak questions](https://discuss.elastic.co/t/dissect-vs-grok-other-tweak-questions/124677)

<div class="topic-metadata">

**Author:** [@kabilan](https://discuss.elastic.co/u/kabilan)\
**Replies:** 1\
**Last updated:** [March 20, 2018, 5:57am UTC](https://discuss.elastic.co/t/dissect-vs-grok-other-tweak-questions/124677 "2018-03-20T05:57:38Z")

</div>

I am looking to migrate many of parsers away from grokking and towards dissect when feasible. i had a question pertaining to performance %{header}-%{timestamp}-%{payload} -Dissect logs into 3 segments -Timestamp will …

---

## [Kibana5.5.2 TimeSeriesのIntervalについて](https://discuss.elastic.co/t/kibana5-5-2-timeseries-interval/114227)

<div class="topic-metadata">

**Author:** [@4a595559cb5befd82a68](https://discuss.elastic.co/u/4a595559cb5befd82a68)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 1:29pm UTC](https://discuss.elastic.co/t/kibana5-5-2-timeseries-interval/114227 "2018-01-05T13:29:56Z")

</div>

お世話になります。 timestampが1分定期で送信されるログに対しTimeSeriesにてLineChartを出力したいのですが、 PanelOptionsのIntervalに"auto"を指定すると短い時間の指定で1分未満(30秒間隔など)が指定されてしまい、 lineが表示されません。 PanelOptionsのIntervalに"1m"を指定しても、長い時間を表示させたときに重くなってしまいます。 PanelOpti…

---

## [Can't get location show up on the map in Kibana](https://discuss.elastic.co/t/cant-get-location-show-up-on-the-map-in-kibana/102872)

<div class="topic-metadata">

**Author:** [@waynez](https://discuss.elastic.co/u/waynez)\
**Replies:** 1\
**Last updated:** [October 6, 2017, 10:05pm UTC](https://discuss.elastic.co/t/cant-get-location-show-up-on-the-map-in-kibana/102872 "2017-10-06T22:05:00Z")

</div>

I have been trying to figure out how to get my geo ip location shown up on Kibana map. But I always get the following error: The "metricbeat\*" index pattern does not contain any of the following field types: geo\_point I…

---

## [Correct @timestamp format for JSON ingress](https://discuss.elastic.co/t/correct-timestamp-format-for-json-ingress/76653)

<div class="topic-metadata">

**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\
**Replies:** 1\
**Last updated:** [March 1, 2017, 9:28am UTC](https://discuss.elastic.co/t/correct-timestamp-format-for-json-ingress/76653 "2017-03-01T09:28:05Z")

</div>

Hi. I'm using Filebeat to import data from a log file that is putting a JSON object in a log file. I am getting parser errors on import: @timestamp not overwritten (parse error on 2017-02-27T16:19:08) An example of …

---

## [Filebeat and Structured Json logging](https://discuss.elastic.co/t/filebeat-and-structured-json-logging/55747)

<div class="topic-metadata">

**Author:** [@fatmanmclone90](https://discuss.elastic.co/u/fatmanmclone90)\
**Replies:** 1\
**Last updated:** [July 18, 2016, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-and-structured-json-logging/55747 "2016-07-18T14:03:21Z")

</div>

We are using the Serilog library to log JSON formatted messages to disk and exporting these to Elasticsearch via Filebeat. In Filebeat Alpha 5 Alpha 4 is there a way to get Filebeat to export the logs in a way that Ela…

---

## [ES sniffing in logstash 2.1 vs 2.0](https://discuss.elastic.co/t/es-sniffing-in-logstash-2-1-vs-2-0/36886)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [December 11, 2015, 5:17pm UTC](https://discuss.elastic.co/t/es-sniffing-in-logstash-2-1-vs-2-0/36886 "2015-12-11T17:17:29Z")

</div>

Updated from logstash 2.0 to 2.1 on a CentOS 6.7 box and now when launching it I found below issue. Am using sniffing to a ES cluster. Any hints, TIA? {:timestamp=\>"2015-12-10T15:31:31.852000+0100", :message=\>"undefine…

---

## [Unable to format rule/alert in Kibana](https://discuss.elastic.co/t/unable-to-format-rule-alert-in-kibana/354730)

<div class="topic-metadata">

**Author:** [@Nikhil\_SA](https://discuss.elastic.co/u/Nikhil_SA)\
**Replies:** 3\
**Last updated:** [March 26, 2024, 9:52am UTC](https://discuss.elastic.co/t/unable-to-format-rule-alert-in-kibana/354730 "2024-03-26T09:52:33Z")

</div>

I'm using a email connector for action in our rule and I'm unable to format the alert mail body. This is creating very clumsy mail being sent which is not at all appealing to the customer. How to format the alert proper…

---

## [Arm64 docker containers](https://discuss.elastic.co/t/arm64-docker-containers/256508)

<div class="topic-metadata">

**Author:** [@netthier](https://discuss.elastic.co/u/netthier)\
**Replies:** 3\
**Last updated:** [November 24, 2020, 4:04pm UTC](https://discuss.elastic.co/t/arm64-docker-containers/256508 "2020-11-24T16:04:13Z")

</div>

Given that elasticsearch already has an arm64 docker image, are arm64 docker images planned for kibana and logstash?

---

## [Filebeat write errors](https://discuss.elastic.co/t/filebeat-write-errors/230257)

<div class="topic-metadata">

**Author:** [@Marcus\_Simonsen](https://discuss.elastic.co/u/Marcus_Simonsen)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 1:01pm UTC](https://discuss.elastic.co/t/filebeat-write-errors/230257 "2020-05-07T13:01:01Z")

</div>

In terms of filebeat monitoring: What is the difference between libbeat.output VS libbeat.pipeline? Is a non-zero libbeat.output.failed a cause for concern? Are we losing data? We are using Filebeat 7.4.1 in producti…

---

## [ModuleNotFoundError: No module named 'yaml' on execute make update on filebeat](https://discuss.elastic.co/t/modulenotfounderror-no-module-named-yaml-on-execute-make-update-on-filebeat/166636)

<div class="topic-metadata">

**Author:** [@gleon](https://discuss.elastic.co/u/gleon)\
**Replies:** 0\
**Last updated:** [January 31, 2019, 8:28pm UTC](https://discuss.elastic.co/t/modulenotfounderror-no-module-named-yaml-on-execute-make-update-on-filebeat/166636 "2019-01-31T20:28:04Z")

</div>

Hi everyone I'm experiencing the following error while trying to do make update on filebeat source \[administratoruser@linux-centos-7-201901171514 filebeat\]$ pwd /home/administratoruser/go/src/github.com/elastic/beats/…

---

## [Changing the analyzer type fields are no longer aggregatable](https://discuss.elastic.co/t/changing-the-analyzer-type-fields-are-no-longer-aggregatable/156554)

<div class="topic-metadata">

**Author:** [@CamTheMan](https://discuss.elastic.co/u/CamTheMan)\
**Replies:** 3\
**Last updated:** [November 19, 2018, 4:11am UTC](https://discuss.elastic.co/t/changing-the-analyzer-type-fields-are-no-longer-aggregatable/156554 "2018-11-19T04:11:36Z")

</div>

Hi All, I changed the index mapping for my index, and now I can't perform visualisations on the fields! Example index template: PUT /\_template/my\_logstash { "order": 1000, "index\_patterns": \[ "logstash-\*", "docker…

---

## [How to regenate ui\_framework/dist/ui\_framework.css](https://discuss.elastic.co/t/how-to-regenate-ui-framework-dist-ui-framework-css/87975)

<div class="topic-metadata">

**Author:** [@gloriagu](https://discuss.elastic.co/u/gloriagu)\
**Replies:** 3\
**Last updated:** [June 1, 2017, 11:14pm UTC](https://discuss.elastic.co/t/how-to-regenate-ui-framework-dist-ui-framework-css/87975 "2017-06-01T23:14:00Z")

</div>

I made some color changes to ui\_framework/components/button/index.scss, restart kiabana doesn't see to regenerate ui\_framework/dist/ui\_framework.css. It is a checkin file...how to regenerate it so it will pickup the chan…

---

## [Init: logstash main process ended, respawning](https://discuss.elastic.co/t/init-logstash-main-process-ended-respawning/79357)

<div class="topic-metadata">

**Author:** [@sdubey](https://discuss.elastic.co/u/sdubey)\
**Replies:** 0\
**Last updated:** [March 21, 2017, 6:59am UTC](https://discuss.elastic.co/t/init-logstash-main-process-ended-respawning/79357 "2017-03-21T06:59:04Z")

</div>

Hi, I am trying to setup ELK first time ever and has success in setting up Elasticsearch and Kibana but facing issue with Logstash. My env. - OS - Ubuntu 14.04 on Virtualbox Logstash - 5.0.2 installed using .deb offl…

---

## [How to process heterogeneous logs in one log file](https://discuss.elastic.co/t/how-to-process-heterogeneous-logs-in-one-log-file/24560)

<div class="topic-metadata">

**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\
**Replies:** 3\
**Last updated:** [June 30, 2015, 3:33am UTC](https://discuss.elastic.co/t/how-to-process-heterogeneous-logs-in-one-log-file/24560 "2015-06-30T03:33:11Z")

</div>

So the software we are using generate log files in different format and throw everthing in one big log file, so I am dealing with this one big log file with different types of logs, they all share the first couple fields…

---

## [Rails client getting socket connect timeouts regularly](https://discuss.elastic.co/t/rails-client-getting-socket-connect-timeouts-regularly/8651)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 3\
**Last updated:** [August 8, 2012, 11:51am UTC](https://discuss.elastic.co/t/rails-client-getting-socket-connect-timeouts-regularly/8651 "2012-08-08T11:51:57Z")

</div>

hi, we have an ES index that is accessed by a rails server.. things work well in general. but every few minutes (once/twice an hour), the client gets a socket connect failure from the ES server. has anyone seen this a…

---

## [AppSearch Peformance - Out of the Box - SLOW](https://discuss.elastic.co/t/appsearch-peformance-out-of-the-box-slow/265801)

<div class="topic-metadata">

**Author:** [@gves](https://discuss.elastic.co/u/gves)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 7:13pm UTC](https://discuss.elastic.co/t/appsearch-peformance-out-of-the-box-slow/265801 "2021-03-01T19:13:35Z")

</div>

I have been working to evaluate AppSearch -- even have Support Tickets out, but getting no response. VERY simple case -- i loaded only half of our available data set -- 2 Million simple documents that contain about 14 f…

---

## [Error Field \[data\] not present as part of path \[data\]](https://discuss.elastic.co/t/error-field-data-not-present-as-part-of-path-data/300642)

<div class="topic-metadata">

**Author:** [@Enxiad](https://discuss.elastic.co/u/Enxiad)\
**Replies:** 2\
**Last updated:** [March 25, 2022, 12:41pm UTC](https://discuss.elastic.co/t/error-field-data-not-present-as-part-of-path-data/300642 "2022-03-25T12:41:01Z")

</div>

(Redacted for improved clarity, please see next post on this thread)

---

## [Connect to Elasticsearch over SSH tunnel](https://discuss.elastic.co/t/connect-to-elasticsearch-over-ssh-tunnel/284522)

<div class="topic-metadata">

**Author:** [@Imy](https://discuss.elastic.co/u/Imy)\
**Replies:** 2\
**Last updated:** [September 20, 2021, 4:12pm UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-over-ssh-tunnel/284522 "2021-09-20T16:12:04Z")

</div>

I want to create a code that connects to Elasticsearch through a SSH tunnel. To do that, I created an EC2 instance where I was able to ssh into it and install Elasticsearch. Then, I created RestHighLevelClient using this…

---

## [Sort data so that my exact match will be on top and then semi exact match with most words snd so on](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338)

<div class="topic-metadata">

**Author:** [@Jaymin](https://discuss.elastic.co/u/Jaymin)\
**Replies:** 2\
**Last updated:** [September 6, 2021, 12:30pm UTC](https://discuss.elastic.co/t/sort-data-so-that-my-exact-match-will-be-on-top-and-then-semi-exact-match-with-most-words-snd-so-on/283338 "2021-09-06T12:30:48Z")

</div>

I am using query\_string for searching my data. and wanted to sort my data such that exact match should be on top and less matched words would follow exact match. For Instance, { "size": 100, //"explain":true, "qu…

---

## [Replace string by another in a field](https://discuss.elastic.co/t/replace-string-by-another-in-a-field/247780)

<div class="topic-metadata">

**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 6:46am UTC](https://discuss.elastic.co/t/replace-string-by-another-in-a-field/247780 "2020-09-08T06:46:37Z")

</div>

Hello, On Kibana 6.8.12 I want to replace a string in a field by another string. This string to replace appears many times. I want make this query 5 times for the 5 changes : But i have this result with the query …

---

## [Getting error while bypassing Kibana's login screen](https://discuss.elastic.co/t/getting-error-while-bypassing-kibanas-login-screen/154035)

<div class="topic-metadata">

**Author:** [@Khushboo](https://discuss.elastic.co/u/Khushboo)\
**Replies:** 2\
**Last updated:** [October 26, 2018, 8:20pm UTC](https://discuss.elastic.co/t/getting-error-while-bypassing-kibanas-login-screen/154035 "2018-10-26T20:20:04Z")

</div>

Hi All, I am trying to hit this url - https:HOST/api/security/v1/login to bypass login screen. What I want to achieve is to navigate from my angular application to Kibana without going to login screen. So, I got to know…

---

## [Expose a specific dasboard behind a static URL through Apache/Nginx proxy](https://discuss.elastic.co/t/expose-a-specific-dasboard-behind-a-static-url-through-apache-nginx-proxy/109101)

<div class="topic-metadata">

**Author:** [@shortsteps](https://discuss.elastic.co/u/shortsteps)\
**Replies:** 2\
**Last updated:** [December 13, 2017, 11:22am UTC](https://discuss.elastic.co/t/expose-a-specific-dasboard-behind-a-static-url-through-apache-nginx-proxy/109101 "2017-12-13T11:22:28Z")

</div>

Hi all, we have a Kibana 5.5.2 installation with many Dasboards configured, all works great connecting to IP:5601. A customer asked us to let his own dasboard be reachable under a specific hostname. We tried a lot of c…

---

## [Cache Kibana bundles at restart](https://discuss.elastic.co/t/cache-kibana-bundles-at-restart/104071)

<div class="topic-metadata">

**Author:** [@ccrecana](https://discuss.elastic.co/u/ccrecana)\
**Replies:** 2\
**Last updated:** [October 17, 2017, 11:34am UTC](https://discuss.elastic.co/t/cache-kibana-bundles-at-restart/104071 "2017-10-17T11:34:41Z")

</div>

Hello, I develop plugins for Kibana 5.5.0. Some of them uses libraries published as node modules. When I make a change inside a module I need to restart the Kibana server in order to rerun the lazy optimize step and to…

---

## [Curator log path setting](https://discuss.elastic.co/t/curator-log-path-setting/98203)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [August 27, 2017, 4:28pm UTC](https://discuss.elastic.co/t/curator-log-path-setting/98203 "2017-08-27T16:28:44Z")

</div>

Is there a way to set the daily rolling log file for the curator? logging: loglevel: INFO logfile:/tmp/curator.log logformat: default blacklist: \[‘elasticsearch’, ‘urllib3’\]

---

## [\_dateparsefailure again](https://discuss.elastic.co/t/-dateparsefailure-again/87475)

<div class="topic-metadata">

**Author:** [@santihago](https://discuss.elastic.co/u/santihago)\
**Replies:** 2\
**Last updated:** [May 30, 2017, 3:00pm UTC](https://discuss.elastic.co/t/-dateparsefailure-again/87475 "2017-05-30T15:00:31Z")

</div>

Hi everyone! I have this configuration: filter{ grok{ match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:timestamp} %{LOGLEVEL:severity} \[%{DATA:class}\] %{GREEDYDATA:message}" } } date{ match =\>…

---

## [Real time data how processing in elastic search](https://discuss.elastic.co/t/real-time-data-how-processing-in-elastic-search/61977)

<div class="topic-metadata">

**Author:** [@sathish](https://discuss.elastic.co/u/sathish)\
**Replies:** 2\
**Last updated:** [October 3, 2016, 12:08pm UTC](https://discuss.elastic.co/t/real-time-data-how-processing-in-elastic-search/61977 "2016-10-03T12:08:57Z")

</div>

my project aim real time sensor data live demo on kibana. data come some ip 192.168.1.23 port:1212 how to capture and how to push eslastic search ....any idea tell i try logstash cannot load but logstash configuration m…

---

## [Current time value in ES?](https://discuss.elastic.co/t/current-time-value-in-es/11636)

<div class="topic-metadata">

**Author:** [@OffensivelyBad\_2](https://discuss.elastic.co/u/OffensivelyBad_2)\
**Replies:** 2\
**Last updated:** [April 19, 2013, 5:50am UTC](https://discuss.elastic.co/t/current-time-value-in-es/11636 "2013-04-19T05:50:23Z")

</div>

Is there a way to indicate the current timestamp or current date in an ES query? I would like to filter some visualizations I have running by a range of the previous 24 hours. Is this possible? -- You receiv…

---

## [Match Query - Can you help me?](https://discuss.elastic.co/t/match-query-can-you-help-me/158457)

<div class="topic-metadata">

**Author:** [@Giorgi\_Kharchenko](https://discuss.elastic.co/u/Giorgi_Kharchenko)\
**Replies:** 5\
**Last updated:** [November 28, 2018, 7:35am UTC](https://discuss.elastic.co/t/match-query-can-you-help-me/158457 "2018-11-28T07:35:22Z")

</div>

Hi, I want to search this kind of thing. I have fields like this. identifiers:\[{key: "list1", value:"My name is Giorgi"}, {key:"list2", value:"Giorgi"}, {key:"list3", value:"Giorgi Kharchenko"}\] { "query" :{ "bool…

---

## [Failed to reconfigure Kibana in ECE 1.1.3](https://discuss.elastic.co/t/failed-to-reconfigure-kibana-in-ece-1-1-3/132384)

<div class="topic-metadata">

**Author:** [@jmtrc](https://discuss.elastic.co/u/jmtrc)\
**Replies:** 5\
**Last updated:** [May 18, 2018, 4:38pm UTC](https://discuss.elastic.co/t/failed-to-reconfigure-kibana-in-ece-1-1-3/132384 "2018-05-18T16:38:51Z")

</div>

I was trying to add an xpack option to kibana via ECE admin console: xpack.reporting.queue.timeout: 60000 However, kibana does not come back and reports: \[2018-05-17 18:40:42,682\]\[INFO \]\[no.found.cluster.plan.kibana.6…

---

## [ELK elasticsearch explosions, shard allocations](https://discuss.elastic.co/t/elk-elasticsearch-explosions-shard-allocations/33580)

<div class="topic-metadata">

**Author:** [@mtopolski](https://discuss.elastic.co/u/mtopolski)\
**Replies:** 5\
**Last updated:** [November 3, 2015, 1:49am UTC](https://discuss.elastic.co/t/elk-elasticsearch-explosions-shard-allocations/33580 "2015-11-03T01:49:53Z")

</div>

I've essentially inherited this ELK setup and there appear to be some serious problems with the current config. As far as I can see, a new indice is created daily. 5 shards are allocated to the indice with one replica (t…

---

## [Can't integrate Elasticsearch with Hive](https://discuss.elastic.co/t/cant-integrate-elasticsearch-with-hive/20967)

<div class="topic-metadata">

**Author:** [@Atul\_Paldhikar](https://discuss.elastic.co/u/Atul_Paldhikar)\
**Replies:** 5\
**Last updated:** [November 29, 2014, 1:52am UTC](https://discuss.elastic.co/t/cant-integrate-elasticsearch-with-hive/20967 "2014-11-29T01:52:30Z")

</div>

Hi All, I am using Hive 0.13.1 and trying to create an external table so data can me loaded from Hive to Elasticsearch. However I keep getting the following error. I have tried with following jars but same error. …

---

## [Export from Discovery to CSV](https://discuss.elastic.co/t/export-from-discovery-to-csv/353983)

<div class="topic-metadata">

**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\
**Replies:** 4\
**Last updated:** [February 28, 2024, 12:38pm UTC](https://discuss.elastic.co/t/export-from-discovery-to-csv/353983 "2024-02-28T12:38:17Z")

</div>

I have an ESQL search that outputs a list of unique IP addresses. When I Share to CSV, I'm getting "CSV may contain formulas, The report contains characters which spreadsheet applications can interpret as formulas. Whe…

---

## [Error Filebeat](https://discuss.elastic.co/t/error-filebeat/191825)

<div class="topic-metadata">

**Author:** [@sarahmech](https://discuss.elastic.co/u/sarahmech)\
**Replies:** 4\
**Last updated:** [July 30, 2019, 3:10pm UTC](https://discuss.elastic.co/t/error-filebeat/191825 "2019-07-30T15:10:08Z")

</div>

Hi this is my config, ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. The filebeat.referenc…

---

## [Kibana: put if condition to graphs](https://discuss.elastic.co/t/kibana-put-if-condition-to-graphs/166056)

<div class="topic-metadata">

**Author:** [@zuzka](https://discuss.elastic.co/u/zuzka)\
**Replies:** 4\
**Last updated:** [January 30, 2019, 6:03pm UTC](https://discuss.elastic.co/t/kibana-put-if-condition-to-graphs/166056 "2019-01-30T18:03:58Z")

</div>

Hi, i have logs coming to Kibana looking like this: runID: abc1 name: test1 result: pass runID: abc1 name: test2 result: fail So i have few tests under one run. I need to set a status of FAIL/PASS to each run as …

---

## [Exceptions from Elastic search during heavy publishing from logstash](https://discuss.elastic.co/t/exceptions-from-elastic-search-during-heavy-publishing-from-logstash/155272)

<div class="topic-metadata">

**Author:** [@Maddy\_M](https://discuss.elastic.co/u/Maddy_M)\
**Replies:** 4\
**Last updated:** [November 5, 2018, 1:39pm UTC](https://discuss.elastic.co/t/exceptions-from-elastic-search-during-heavy-publishing-from-logstash/155272 "2018-11-05T13:39:24Z")

</div>

Hi, I am running Elastic cluster with 3 nodes( with 3 masters \[ 2 data only nodes\] ) The version is 6.4. Each instance of ES is running with 8GB as Heap. I see following exceptions in ES and Logstash Exceptions from E…

---

## [Circuit breaker to prevent ES client from having OOM problem](https://discuss.elastic.co/t/circuit-breaker-to-prevent-es-client-from-having-oom-problem/131178)

<div class="topic-metadata">

**Author:** [@seanwang30](https://discuss.elastic.co/u/seanwang30)\
**Replies:** 4\
**Last updated:** [May 9, 2018, 5:14pm UTC](https://discuss.elastic.co/t/circuit-breaker-to-prevent-es-client-from-having-oom-problem/131178 "2018-05-09T17:14:46Z")

</div>

Hi all: Our elasticsearch cluster runs well for the most part, except that the client node would crash because of out-of-memory problem when executing large queries. (I think) It crashes in the gathering phase when all …

---

## [Make package in Gitlab CI with docker](https://discuss.elastic.co/t/make-package-in-gitlab-ci-with-docker/119827)

<div class="topic-metadata">

**Author:** [@lonangel](https://discuss.elastic.co/u/lonangel)\
**Replies:** 4\
**Last updated:** [February 14, 2018, 4:49pm UTC](https://discuss.elastic.co/t/make-package-in-gitlab-ci-with-docker/119827 "2018-02-14T16:49:17Z")

</div>

I'm creating a test beat and after following the code generator every thing seems to work of. Working with a Gitlab based CI system I tried to run the "make package" inside docker. The docker has the docker socket in a…

---

## [GeoIP2 without Coordinates in 2019?](https://discuss.elastic.co/t/geoip2-without-coordinates-in-2019/113725)

<div class="topic-metadata">

**Author:** [@MikeC0](https://discuss.elastic.co/u/MikeC0)\
**Replies:** 4\
**Last updated:** [January 6, 2018, 4:34am UTC](https://discuss.elastic.co/t/geoip2-without-coordinates-in-2019/113725 "2018-01-06T04:34:38Z")

</div>

Logstash depends to GeoIP2 for the coordinates in mapping. According to Maxmind, https://dev.maxmind.com/geoip/geoip2/downloadable/, they plan to discontinue the latitude and longitude coordinates in 2019. How does it…

---

## [\[Solved\]Logstash 1.5.0 could not get host field](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410)

<div class="topic-metadata">

**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Replies:** 4\
**Last updated:** [June 11, 2015, 7:36am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410 "2015-06-11T07:36:46Z")

</div>

Here is rubydebug on logstash 1.5.0: { "@timestamp" =\> "2015-06-11T06:29:51.220Z", "message" =\> "2015-06-11 14:29:50,565 \[vert.x-eventloop-thread-1\] DEBUG hawkeyes.rtds.store.domain.Equipment - Packages …

---

## [Fluent::Plugin::ElasticsearchOutput::RecoverableRequestFailure error="could not push logs to Elasticsearch cluster](https://discuss.elastic.co/t/fluent-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/212658)

<div class="topic-metadata">

**Author:** [@Tania\_Saez](https://discuss.elastic.co/u/Tania_Saez)\
**Replies:** 0\
**Last updated:** [December 20, 2019, 11:57am UTC](https://discuss.elastic.co/t/fluent-recoverablerequestfailure-error-could-not-push-logs-to-elasticsearch-cluster/212658 "2019-12-20T11:57:44Z")

</div>

Hello, I am having this error trying to send logs from fluentd/td-agent. 2019-12-20 12:46:00 +0100 \[warn\]: #0 failed to flush the buffer. retry\_time=18 next\_retry\_seconds=2019-12-20 12:46:27 +0100 chunk="59a205d168e33d…

---

## [Index size impact on search performance?](https://discuss.elastic.co/t/index-size-impact-on-search-performance/19018)

<div class="topic-metadata">

**Author:** [@limac](https://discuss.elastic.co/u/limac)\
**Replies:** 8\
**Last updated:** [August 1, 2014, 11:10am UTC](https://discuss.elastic.co/t/index-size-impact-on-search-performance/19018 "2014-08-01T11:10:27Z")

</div>

Hi folks, I have an index storing lots of time serial data. The data are put into index by : curl -XPUT 'localhost:9200/testindex/action1/1?pretty' -d ' { "val": 23, "timestamp": 1406822400 }…

---

## [Data in index not populating in the data view or kibana](https://discuss.elastic.co/t/data-in-index-not-populating-in-the-data-view-or-kibana/363366)

<div class="topic-metadata">

**Author:** [@Zachary\_Joyner](https://discuss.elastic.co/u/Zachary_Joyner)\
**Replies:** 7\
**Last updated:** [July 19, 2024, 6:14pm UTC](https://discuss.elastic.co/t/data-in-index-not-populating-in-the-data-view-or-kibana/363366 "2024-07-19T18:14:34Z")

</div>

Hello, I have a pipeline to update my documents with parsed url information via the uri\_parts processor. However when I look at the datastream or in kibana those addition fields are absent. I checked the data in the bac…

---

## [Service\_name auto-discovery issue](https://discuss.elastic.co/t/service-name-auto-discovery-issue/289604)

<div class="topic-metadata">

**Author:** [@coynef](https://discuss.elastic.co/u/coynef)\
**Replies:** 7\
**Last updated:** [November 22, 2021, 3:14pm UTC](https://discuss.elastic.co/t/service-name-auto-discovery-issue/289604 "2021-11-22T15:14:03Z")

</div>

Kibana version: 7.10.1 Elasticsearch version:7.10.1 APM Server version:7.10.1 APM Agent language and version: 1.26.0 Description of the problem including expected versus actual behavior. Please include screenshots (i…

[Previous page](https://discuss.elastic.co/top.md?page=1354&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1356&per_page=50&period=all)
