# Top

**URL:** https://discuss.elastic.co/top.md?page=1364&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1365

---

## [Docker container to build plugins](https://discuss.elastic.co/t/docker-container-to-build-plugins/270159)

<div class="topic-metadata">

**Author:** [@padakwaak](https://discuss.elastic.co/u/padakwaak)\
**Replies:** 1\
**Last updated:** [April 15, 2021, 11:37am UTC](https://discuss.elastic.co/t/docker-container-to-build-plugins/270159 "2021-04-15T11:37:41Z")

</div>

Hi, I'm not a Ruby/JRuby programmer and I find it quite difficult to get all the necessary build tools in place to build and test my modifications that I'm doing to some of the existing Logstash plugins. Another user c…

---

## [How to remove a line break from a field in logstash](https://discuss.elastic.co/t/how-to-remove-a-line-break-from-a-field-in-logstash/183572)

<div class="topic-metadata">

**Author:** [@Carlos.limaElaw](https://discuss.elastic.co/u/Carlos.limaElaw)\
**Replies:** 1\
**Last updated:** [May 30, 2019, 4:18pm UTC](https://discuss.elastic.co/t/how-to-remove-a-line-break-from-a-field-in-logstash/183572 "2019-05-30T16:18:54Z")

</div>

Hello, everyone! I'm trying to ingest a csv like this in logstash using csv filter: column1;column2;column3;column4;column5; 201905; DADOS PARA O CADASTRO;2019-05-22 09:48:08;2019-05-22 10:06:05;"Criar acesso para …

---

## [How to do the elastic search bulk get operation with multiple document Id's using python](https://discuss.elastic.co/t/how-to-do-the-elastic-search-bulk-get-operation-with-multiple-document-ids-using-python/163986)

<div class="topic-metadata">

**Author:** [@vinodanumarla](https://discuss.elastic.co/u/vinodanumarla)\
**Replies:** 1\
**Last updated:** [January 12, 2019, 1:26pm UTC](https://discuss.elastic.co/t/how-to-do-the-elastic-search-bulk-get-operation-with-multiple-document-ids-using-python/163986 "2019-01-12T13:26:18Z")

</div>

I would like to do elastic search bulk get operation with multiple document Id's using python. But I could able to find proper solution. Code which I'm using to get the single document based on document Id. import elas…

---

## [Auditbeat event types](https://discuss.elastic.co/t/auditbeat-event-types/123966)

<div class="topic-metadata">

**Author:** [@grants](https://discuss.elastic.co/u/grants)\
**Replies:** 1\
**Last updated:** [March 14, 2018, 6:10pm UTC](https://discuss.elastic.co/t/auditbeat-event-types/123966 "2018-03-14T18:10:14Z")

</div>

Is there a list of auditbeat event types and categories? It seems that auditbeat is logging authentication events when I don't see anything besides 1 single rule in my auditbeat.yml config file so I'm curious if there is…

---

## [Is filebeat 6.1.0 support multi templates setup?](https://discuss.elastic.co/t/is-filebeat-6-1-0-support-multi-templates-setup/112941)

<div class="topic-metadata">

**Author:** [@Astralidea](https://discuss.elastic.co/u/Astralidea)\
**Replies:** 1\
**Last updated:** [December 26, 2017, 10:08pm UTC](https://discuss.elastic.co/t/is-filebeat-6-1-0-support-multi-templates-setup/112941 "2017-12-26T22:08:35Z")

</div>

filebeat.prospectors: - paths: \["/home/ec2-user/filebeat/app1.log"\] fields: type: "app1" - paths: \["/home/ec2-user/filebeat/app2.log"\] fields: type: "app2" setup.template.settings: index.number\_of\_shards: …

---

## [\[JSON Input\] Is there a max\_doc\_count filtering function similar to min\_doc\_count?](https://discuss.elastic.co/t/json-input-is-there-a-max-doc-count-filtering-function-similar-to-min-doc-count/113035)

<div class="topic-metadata">

**Author:** [@steno](https://discuss.elastic.co/u/steno)\
**Replies:** 1\
**Last updated:** [December 26, 2017, 6:03pm UTC](https://discuss.elastic.co/t/json-input-is-there-a-max-doc-count-filtering-function-similar-to-min-doc-count/113035 "2017-12-26T18:03:17Z")

</div>

Hi there, I was wondering if there is a max\_doc\_count with the opposite behaviour of min\_doc\_count. I was trying to show in a Kibana 6.1 Data Table visualization only the terms that sums up to a maximum number of 1 hit…

---

## [How to create a Pareto chart](https://discuss.elastic.co/t/how-to-create-a-pareto-chart/101899)

<div class="topic-metadata">

**Author:** [@komyg](https://discuss.elastic.co/u/komyg)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 10:16pm UTC](https://discuss.elastic.co/t/how-to-create-a-pareto-chart/101899 "2017-09-26T22:16:59Z")

</div>

Hi, I am new to Kibana and I am trying to create a pareto chart. However I wasn't able to tell Kibana to use the absolute value of my filter on the left axis and its percent on the right axis. Is there a way to do this,…

---

## [The error message stack trace log is being printed in separate rows instead of a single row](https://discuss.elastic.co/t/the-error-message-stack-trace-log-is-being-printed-in-separate-rows-instead-of-a-single-row/358626)

<div class="topic-metadata">

**Author:** [@kasecen637](https://discuss.elastic.co/u/kasecen637)\
**Replies:** 4\
**Last updated:** [June 12, 2024, 10:53am UTC](https://discuss.elastic.co/t/the-error-message-stack-trace-log-is-being-printed-in-separate-rows-instead-of-a-single-row/358626 "2024-06-12T10:53:53Z")

</div>

Hi Elastic Discuss Community, In kibana when i seee the logs message when an error log messges comes it print every error messge in every different line i want that the error message whole stack trace log should get in …

---

## [Updating documents - immutability](https://discuss.elastic.co/t/updating-documents-immutability/266041)

<div class="topic-metadata">

**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 2:33am UTC](https://discuss.elastic.co/t/updating-documents-immutability/266041 "2021-03-03T02:33:45Z")

</div>

Hi, I have a use case where a document can be updated or nested entries added to it over time. I get that documents are technically immutable and a new version is created, with the older one being soft deleted. Will this…

---

## [Changing Elasticsearch + Fscrawler tokenizing methods to recognize Social Security Numbers/Passport Machine Readable Zones](https://discuss.elastic.co/t/changing-elasticsearch-fscrawler-tokenizing-methods-to-recognize-social-security-numbers-passport-machine-readable-zones/251502)

<div class="topic-metadata">

**Author:** [@morningkaren](https://discuss.elastic.co/u/morningkaren)\
**Replies:** 4\
**Last updated:** [October 15, 2020, 8:34pm UTC](https://discuss.elastic.co/t/changing-elasticsearch-fscrawler-tokenizing-methods-to-recognize-social-security-numbers-passport-machine-readable-zones/251502 "2020-10-15T20:34:09Z")

</div>

Hello, I have used fscrawler to index some files that have social security numbers in the format of XXX-XX-XXXX and also the machine readable zones of passports such as \<\<\<\<\<\<Karen\<Ouyang\<\<\<\<\<. They appear in the conten…

---

## [Logrotate](https://discuss.elastic.co/t/logrotate/173643)

<div class="topic-metadata">

**Author:** [@praveen1](https://discuss.elastic.co/u/praveen1)\
**Replies:** 4\
**Last updated:** [March 25, 2019, 10:40am UTC](https://discuss.elastic.co/t/logrotate/173643 "2019-03-25T10:40:07Z")

</div>

Hi Teams, can anyone help me in configuring logrotate in "version" : {"number" : "6.1.1", to reduce my Disk size, I want to only keep 7 days logs and in zipped format. i could see these 2 file in logstash file: log…

---

## [Performance tuning advisory needed](https://discuss.elastic.co/t/performance-tuning-advisory-needed/81121)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [April 18, 2017, 11:24am UTC](https://discuss.elastic.co/t/performance-tuning-advisory-needed/81121 "2017-04-18T11:24:38Z")

</div>

Hi all, we came from nagios logserver with a single node. It crashed quite often, but acted much faster than our current sinlge node instance on pure ELK 5.1.2. Once we migrated we also changed our index / shard allo…

---

## [Elastic Stack shipped dashboards for Kibana](https://discuss.elastic.co/t/elastic-stack-shipped-dashboards-for-kibana/71975)

<div class="topic-metadata">

**Author:** [@ametad](https://discuss.elastic.co/u/ametad)\
**Replies:** 4\
**Last updated:** [January 19, 2017, 10:32am UTC](https://discuss.elastic.co/t/elastic-stack-shipped-dashboards-for-kibana/71975 "2017-01-19T10:32:14Z")

</div>

Hi community, I am fairly new to Elastic Stack (or ELK) and I am a bit confused about the role of Logstash in conjunction with the Beats. Because Beats ships with dashboard you can import easily... But these dashboards…

---

## [Sorting values when they come from different types](https://discuss.elastic.co/t/sorting-values-when-they-come-from-different-types/60248)

<div class="topic-metadata">

**Author:** [@grago](https://discuss.elastic.co/u/grago)\
**Replies:** 4\
**Last updated:** [September 13, 2016, 1:11am UTC](https://discuss.elastic.co/t/sorting-values-when-they-come-from-different-types/60248 "2016-09-13T01:11:35Z")

</div>

Hello there, i'm really new to ES, so please forgive me if this is a very basic question. I think it must be a trivial case, but i wasn't able to find a solution. My problem is this: i have a list of products, and user…

---

## [Elasticsearch dedicated percolator doc values in percolator script](https://discuss.elastic.co/t/elasticsearch-dedicated-percolator-doc-values-in-percolator-script/48692)

<div class="topic-metadata">

**Author:** [@sandris](https://discuss.elastic.co/u/sandris)\
**Replies:** 4\
**Last updated:** [May 4, 2016, 7:46pm UTC](https://discuss.elastic.co/t/elasticsearch-dedicated-percolator-doc-values-in-percolator-script/48692 "2016-05-04T19:46:19Z")

</div>

Trying to migrate Elasticsearch from 1.x to 2.x, almost everything is done but I came up to this issue. As mentioned in the Elasticsearch docs - https://www.elastic.co/guide/en/elasticsearch/reference/current/search-pe…

---

## [Kibana4 not specifying date in search index \[SOLVED\]](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484)

<div class="topic-metadata">

**Author:** [@dm221](https://discuss.elastic.co/u/dm221)\
**Replies:** 4\
**Last updated:** [March 29, 2016, 6:11pm UTC](https://discuss.elastic.co/t/kibana4-not-specifying-date-in-search-index-solved/45484 "2016-03-29T18:11:13Z")

</div>

So we've been looking at moving to Kibana4.x lately but have noticed that simple 15min duration Discover queries take a long time (10 -60 seconds). Upon investigation it seems that Kibana4.1.7 does a msearch where it sp…

---

## [Is has\_child (parent/child) the best strategy for my use-case involving products and inventory?](https://discuss.elastic.co/t/is-has-child-parent-child-the-best-strategy-for-my-use-case-involving-products-and-inventory/15822)

<div class="topic-metadata">

**Author:** [@Ben\_Hirsch](https://discuss.elastic.co/u/Ben_Hirsch)\
**Replies:** 4\
**Last updated:** [February 17, 2014, 4:21am UTC](https://discuss.elastic.co/t/is-has-child-parent-child-the-best-strategy-for-my-use-case-involving-products-and-inventory/15822 "2014-02-17T04:21:09Z")

</div>

We are considering using Elastic Search for an upcoming project. I have done quite a bit of research on the API and am curious about a few things as they relate to a specific but very necessary use-case for the proje…

---

## [Faceting high cardinality fields - idea review](https://discuss.elastic.co/t/faceting-high-cardinality-fields-idea-review/8203)

<div class="topic-metadata">

**Author:** [@Boaz\_Leskes](https://discuss.elastic.co/u/Boaz_Leskes)\
**Replies:** 8\
**Last updated:** [October 14, 2012, 7:11am UTC](https://discuss.elastic.co/t/faceting-high-cardinality-fields-idea-review/8203 "2012-10-14T07:11:28Z")

</div>

Hi All, In my use case we need to facet fields with lots of possible unique values. For example, you can think of the author field in Amazon. Lot's of books written by lots of people. Still, it is useful to facet …

---

## [Search By Id in Java API Client](https://discuss.elastic.co/t/search-by-id-in-java-api-client/332435)

<div class="topic-metadata">

**Author:** [@DavJane](https://discuss.elastic.co/u/DavJane)\
**Replies:** 2\
**Last updated:** [May 4, 2023, 9:42am UTC](https://discuss.elastic.co/t/search-by-id-in-java-api-client/332435 "2023-05-04T09:42:11Z")

</div>

Hi, I am trying to migrate my existing Elastic Search Rest High Level Client from 6.3.2 to the latest Java Client API. My current code has SearchRequest sr = new SearchRequest(indexName); …

---

## [Error while inserting data from Hadoop to ES](https://discuss.elastic.co/t/error-while-inserting-data-from-hadoop-to-es/219371)

<div class="topic-metadata">

**Author:** [@zizake](https://discuss.elastic.co/u/zizake)\
**Replies:** 2\
**Last updated:** [February 27, 2020, 4:01pm UTC](https://discuss.elastic.co/t/error-while-inserting-data-from-hadoop-to-es/219371 "2020-02-27T16:01:42Z")

</div>

Hello, ES: 6.2.3 Hadoop Plugin 6.2.3 I have an external table I want to be populated with some data from a Hive table (Parquet files) When I execute: INSERT OVERWRITE TABLE external\_es SELECT field-name1,field-name2,…

---

## [Item url {{key}} error in time series visualization](https://discuss.elastic.co/t/item-url-key-error-in-time-series-visualization/192464)

<div class="topic-metadata">

**Author:** [@rcodestuff](https://discuss.elastic.co/u/rcodestuff)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 10:57am UTC](https://discuss.elastic.co/t/item-url-key-error-in-time-series-visualization/192464 "2019-07-31T10:57:30Z")

</div>

Hi, In time series visual builder I created a table with the first column displaying string values. The data for which comes from field name called 'cities'. Next I modified the Item Url field under Panel Options to en…

---

## [Multiple IIS logs - Add field (?)](https://discuss.elastic.co/t/multiple-iis-logs-add-field/181319)

<div class="topic-metadata">

**Author:** [@shortcommand](https://discuss.elastic.co/u/shortcommand)\
**Replies:** 2\
**Last updated:** [May 23, 2019, 1:00am UTC](https://discuss.elastic.co/t/multiple-iis-logs-add-field/181319 "2019-05-23T01:00:05Z")

</div>

Hi, I don't know if this goes into filebeat category, logstash or both. I've around 50 websites on a single server. Running one instance of filebeat with IIS module enabled. My problem is that In Kibana I would like to …

---

## [How to find size of the document using scripting](https://discuss.elastic.co/t/how-to-find-size-of-the-document-using-scripting/174811)

<div class="topic-metadata">

**Author:** [@Riddhesh](https://discuss.elastic.co/u/Riddhesh)\
**Replies:** 2\
**Last updated:** [April 2, 2019, 11:04am UTC](https://discuss.elastic.co/t/how-to-find-size-of-the-document-using-scripting/174811 "2019-04-02T11:04:51Z")

</div>

I'm using ES 6.3, I want to find size of a document using script. I've tried: "script": "doc.toString().length()" But doc.toString() is classname org.elasticsearch.search.lookup.LeafDocLookup@57b1c349. I know I can e…

---

## [Kibana server is not ready yet - 6.3 to 6.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-6-3-to-6-5/162396)

<div class="topic-metadata">

**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\
**Replies:** 2\
**Last updated:** [December 30, 2018, 7:35am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-6-3-to-6-5/162396 "2018-12-30T07:35:12Z")

</div>

Hello, I have tried upgrade of Kibana from 6.3 to 6.5 and am getting "Kibana server is not ready yet" on Kibana. I have also tried removing the .kibana index but still the error persisit. Any help in here will be much …

---

## [Any settings to limit the max number of buckets?](https://discuss.elastic.co/t/any-settings-to-limit-the-max-number-of-buckets/130331)

<div class="topic-metadata">

**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Replies:** 2\
**Last updated:** [May 3, 2018, 12:22am UTC](https://discuss.elastic.co/t/any-settings-to-limit-the-max-number-of-buckets/130331 "2018-05-03T00:22:10Z")

</div>

I have a elasticsearch cluster and kibana dashboard. Kibana is used by external user I don't have control with. They sometimes ran very heavy aggregation query that made elasticsearch ran out of jvm heap space. So is th…

---

## [NullPointerException Creating hdfs repo because SSL](https://discuss.elastic.co/t/nullpointerexception-creating-hdfs-repo-because-ssl/88348)

<div class="topic-metadata">

**Author:** [@diego\_duenas](https://discuss.elastic.co/u/diego_duenas)\
**Replies:** 2\
**Last updated:** [June 6, 2017, 6:34pm UTC](https://discuss.elastic.co/t/nullpointerexception-creating-hdfs-repo-because-ssl/88348 "2017-06-06T18:34:15Z")

</div>

Hi All. I am trying to configure elasticsearch hadoop repository against kerberized and SSL protected HDFS. I can successfully autenticate against kerberos, but is giving me this error creating a repository: \[2…

---

## [Mistakenly identifies Multiple ES Hadoop Versions on Azure](https://discuss.elastic.co/t/mistakenly-identifies-multiple-es-hadoop-versions-on-azure/48696)

<div class="topic-metadata">

**Author:** [@sor123](https://discuss.elastic.co/u/sor123)\
**Replies:** 2\
**Last updated:** [May 3, 2016, 3:48pm UTC](https://discuss.elastic.co/t/mistakenly-identifies-multiple-es-hadoop-versions-on-azure/48696 "2016-05-03T15:48:11Z")

</div>

Hi, I'm running ES-Hadoop on an Azure HDinsight cluster. When I register version 2.3.0 in Pig it immediately fails with a "multiple ES-Hadoop versions" error. I created a new cluster and only registered one version. S…

---

## [Suggest to avoid localStorage limitations](https://discuss.elastic.co/t/suggest-to-avoid-localstorage-limitations/29369)

<div class="topic-metadata">

**Author:** [@comdiv](https://discuss.elastic.co/u/comdiv)\
**Replies:** 2\
**Last updated:** [November 10, 2015, 5:12pm UTC](https://discuss.elastic.co/t/suggest-to-avoid-localstorage-limitations/29369 "2015-11-10T17:12:37Z")

</div>

Sometimes query size exceed localStorage limitations. For examply when debug attachment data type working in sense (large B64 fields). In this cases sense doesn't show anything in result because it got exception on loc…

---

## [Metricbeat azure module - Simultaneously fetch multi-dimensional metric values](https://discuss.elastic.co/t/metricbeat-azure-module-simultaneously-fetch-multi-dimensional-metric-values/280326)

<div class="topic-metadata">

**Author:** [@ag\_joeb](https://discuss.elastic.co/u/ag_joeb)\
**Replies:** 0\
**Last updated:** [August 3, 2021, 2:03pm UTC](https://discuss.elastic.co/t/metricbeat-azure-module-simultaneously-fetch-multi-dimensional-metric-values/280326 "2021-08-03T14:03:30Z")

</div>

I'm trying to fetch Cosmos DB metrics from azure using metricbeat's azure module. An example: - module: azure metricsets: - monitor enabled: true period: 30s client\_id: '\<client\_id\>' client\_secret: '\<client\_…

---

## [CEF module and decode\_cef processor](https://discuss.elastic.co/t/cef-module-and-decode-cef-processor/245430)

<div class="topic-metadata">

**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\
**Replies:** 0\
**Last updated:** [August 18, 2020, 1:41pm UTC](https://discuss.elastic.co/t/cef-module-and-decode-cef-processor/245430 "2020-08-18T13:41:56Z")

</div>

Hi everyone, I have a question about the CEF module in Filebeat. Can it only be used to listen to incoming syslog traffic or can the module also read from locally stored files? I'm asking this because there is no defin…

---

## [Pagination in Completion Suggestor](https://discuss.elastic.co/t/pagination-in-completion-suggestor/197512)

<div class="topic-metadata">

**Author:** [@hardikbathla](https://discuss.elastic.co/u/hardikbathla)\
**Replies:** 0\
**Last updated:** [August 30, 2019, 11:57am UTC](https://discuss.elastic.co/t/pagination-in-completion-suggestor/197512 "2019-08-30T11:57:24Z")

</div>

On text based search, elastic engine supply parameters called "from " and "size" to paginate over result but same is not supported when using completion/suggestion based search. Is it intentionally restricted by Elastic …

---

## [Filebeat version 6.3.\* (amd64), libbeat 6.3.\* unable to resolve DNS lookups for downstream hosts after restarting](https://discuss.elastic.co/t/filebeat-version-6-3-amd64-libbeat-6-3-unable-to-resolve-dns-lookups-for-downstream-hosts-after-restarting/165817)

<div class="topic-metadata">

**Author:** [@esmith](https://discuss.elastic.co/u/esmith)\
**Replies:** 0\
**Last updated:** [January 25, 2019, 7:11pm UTC](https://discuss.elastic.co/t/filebeat-version-6-3-amd64-libbeat-6-3-unable-to-resolve-dns-lookups-for-downstream-hosts-after-restarting/165817 "2019-01-25T19:11:28Z")

</div>

Currently seeing an issue on linux hosts running filebeat 6.3.\* in which filebeat, if stopped and restarted for any reason, is no longer able to resolve dns lookups for downstream hosts such as elasticsearch, etc. I am …

---

## [Finding gaps in timestamps in documents](https://discuss.elastic.co/t/finding-gaps-in-timestamps-in-documents/142738)

<div class="topic-metadata">

**Author:** [@cohenran](https://discuss.elastic.co/u/cohenran)\
**Replies:** 0\
**Last updated:** [August 2, 2018, 9:53am UTC](https://discuss.elastic.co/t/finding-gaps-in-timestamps-in-documents/142738 "2018-08-02T09:53:52Z")

</div>

I have documents with different timestamps. How can I find out if there are 2 consecutive timestamps with more 10 seconds apart? If I have the timestamps: timestamp1: 1533130500544 timestamp2: 1533130509544 timestamp…

---

## [Excessively high bulk work\_queue counts right before OOM](https://discuss.elastic.co/t/excessively-high-bulk-work-queue-counts-right-before-oom/129121)

<div class="topic-metadata">

**Author:** [@eherot](https://discuss.elastic.co/u/eherot)\
**Replies:** 0\
**Last updated:** [April 23, 2018, 1:32pm UTC](https://discuss.elastic.co/t/excessively-high-bulk-work-queue-counts-right-before-oom/129121 "2018-04-23T13:32:59Z")

</div>

So going over the Prometheus data that my ELK cluster spewed out right before all of my coordinators died by running out of heap space, I saw that the there was a huge excursion in the number of tasks in the bulk work\_qu…

---

## [Logstash new codec plugin fails while using](https://discuss.elastic.co/t/logstash-new-codec-plugin-fails-while-using/221756)

<div class="topic-metadata">

**Author:** [@i-mohit-a](https://discuss.elastic.co/u/i-mohit-a)\
**Replies:** 1\
**Last updated:** [March 3, 2020, 12:59am UTC](https://discuss.elastic.co/t/logstash-new-codec-plugin-fails-while-using/221756 "2020-03-03T00:59:20Z")

</div>

While developing a new logstash codec plugin, the plugin gets installed successfully. But error occurs while using it. Steps to replicate: Install logstash 7.6 or pull the code from git and cd to the folder where log…

---

## [While Filebeat talking to Logstash, logstash throws this error](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495)

<div class="topic-metadata">

**Author:** [@praveenmak](https://discuss.elastic.co/u/praveenmak)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 2:11am UTC](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495 "2020-02-05T02:11:45Z")

</div>

I see this error in Logstash logs (earlier I started with DEBUG mode but seems its all the time). The data is not getting ingested at all. Any idea how to resolve this ? please help \[2020-01-24T17:30:22,282\]\[INFO \]\[or…

---

## [Using scripted fields in kibana to create a new field by parsing an existing message field](https://discuss.elastic.co/t/using-scripted-fields-in-kibana-to-create-a-new-field-by-parsing-an-existing-message-field/116595)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 3:52pm UTC](https://discuss.elastic.co/t/using-scripted-fields-in-kibana-to-create-a-new-field-by-parsing-an-existing-message-field/116595 "2018-01-24T15:52:30Z")

</div>

Hi I am using Kibana 5.6.4, I have two fields in the documents as below message: The WMI Performance hostWiley 0 down beat.hostname: hostWiley I want to create scripted field in kibana which can parse the message fi…

---

## [Group by count](https://discuss.elastic.co/t/group-by-count/80835)

<div class="topic-metadata">

**Author:** [@aamanati](https://discuss.elastic.co/u/aamanati)\
**Replies:** 1\
**Last updated:** [March 31, 2017, 7:09pm UTC](https://discuss.elastic.co/t/group-by-count/80835 "2017-03-31T19:09:16Z")

</div>

Hi, I wanna create a visualization where I group users in ranges \[1 to 10\] \[10 to 20\] etc depending on how many times they visited a specific page. For example: 10 users visited the page between \[1 to 10\] times 5 users …

---

## [Hide visualisation title](https://discuss.elastic.co/t/hide-visualisation-title/74900)

<div class="topic-metadata">

**Author:** [@crjo](https://discuss.elastic.co/u/crjo)\
**Replies:** 1\
**Last updated:** [February 13, 2017, 4:50pm UTC](https://discuss.elastic.co/t/hide-visualisation-title/74900 "2017-02-13T16:50:55Z")

</div>

Hi, Is it possible to hide the title of a visualisation on a dashboard? Thx.

---

## [Http output - automatic\_retries retry period](https://discuss.elastic.co/t/http-output-automatic-retries-retry-period/56182)

<div class="topic-metadata">

**Author:** [@auerbecktj](https://discuss.elastic.co/u/auerbecktj)\
**Replies:** 1\
**Last updated:** [July 29, 2016, 10:48am UTC](https://discuss.elastic.co/t/http-output-automatic-retries-retry-period/56182 "2016-07-29T10:48:54Z")

</div>

I'm currently using the http output plugin in order to post to an API. I noticed that the default for automatic\_retries is just 1. We essentially want this to keep retrying until it succeeds, but I don't see a straightfo…

---

## [Как в фильтре поиска проверять размер поля?](https://discuss.elastic.co/t/topic/242934)

<div class="topic-metadata">

**Author:** [@IlyaEvseev](https://discuss.elastic.co/u/IlyaEvseev)\
**Replies:** 3\
**Last updated:** [July 29, 2020, 2:01pm UTC](https://discuss.elastic.co/t/topic/242934 "2020-07-29T14:01:15Z")

</div>

Имеется ElasticSearch 7.3.2 Внутри него есть индекс с полем "message" типа "text". Пытаюсь найти в нём документы, в которых поле имеет большую длину: curl -XPOST -H 'Content-Type: application/json' -d ' { "query": {…

---

## [Failed to update shard information for ClusterInfoUpdateJob](https://discuss.elastic.co/t/failed-to-update-shard-information-for-clusterinfoupdatejob/221099)

<div class="topic-metadata">

**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\
**Replies:** 0\
**Last updated:** [February 26, 2020, 7:38pm UTC](https://discuss.elastic.co/t/failed-to-update-shard-information-for-clusterinfoupdatejob/221099 "2020-02-26T19:38:11Z")

</div>

Hi Team, My ES docker cluster is constantly getting below issue : {"type": "server", "timestamp": "2020-02-26T17:54:47,908Z", "level": "WARN", "component": "o.e.c.InternalClusterInfoService", "cluster.name": "XXXXX", …

---

## [Elrepo no longer maintains kernel-lt 4.4.155 in it's archive](https://discuss.elastic.co/t/elrepo-no-longer-maintains-kernel-lt-4-4-155-in-its-archive/166211)

<div class="topic-metadata">

**Author:** [@ryan.chadwick](https://discuss.elastic.co/u/ryan.chadwick)\
**Replies:** 3\
**Last updated:** [January 30, 2019, 8:43am UTC](https://discuss.elastic.co/t/elrepo-no-longer-maintains-kernel-lt-4-4-155-in-its-archive/166211 "2019-01-30T08:43:47Z")

</div>

I'm in the process of installing ECE on my first host. I've seen a number of similar topics with the issue of the kernel version being incorrect. The documentation very clearly states that kernel-lt 4.4.155 from elrepo…

---

## [Access index id in scripted field](https://discuss.elastic.co/t/access-index-id-in-scripted-field/146909)

<div class="topic-metadata">

**Author:** [@caub](https://discuss.elastic.co/u/caub)\
**Replies:** 3\
**Last updated:** [September 4, 2018, 1:30pm UTC](https://discuss.elastic.co/t/access-index-id-in-scripted-field/146909 "2018-09-04T13:30:46Z")

</div>

I'd like to create a scripted field URL, linking to the context of an event The context links look like: #/context/982353c0-ac85-11e8-a1c9-1f53c4cb4ccc/doc/LS9okWUBoR\_D7GtSWhbM?\_a=(columns:!(docker.container.name,err.me…

---

## [Jvm.options - elasticsearch and logstash?](https://discuss.elastic.co/t/jvm-options-elasticsearch-and-logstash/141817)

<div class="topic-metadata">

**Author:** [@S\_Chase](https://discuss.elastic.co/u/S_Chase)\
**Replies:** 3\
**Last updated:** [August 14, 2018, 1:37pm UTC](https://discuss.elastic.co/t/jvm-options-elasticsearch-and-logstash/141817 "2018-08-14T13:37:54Z")

</div>

I was getting some JVM Heap errors and I was looking up on how to set all of that properly. I saw in ES documentation to set it at 50% of available memory (I have 8G total) up to 32G. But which one do I set - LS or ES …

---

## [Does Elastic APM for node js uses different thread for sending events or the same node thread?](https://discuss.elastic.co/t/does-elastic-apm-for-node-js-uses-different-thread-for-sending-events-or-the-same-node-thread/114714)

<div class="topic-metadata">

**Author:** [@khushbookatta](https://discuss.elastic.co/u/khushbookatta)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 4:19pm UTC](https://discuss.elastic.co/t/does-elastic-apm-for-node-js-uses-different-thread-for-sending-events-or-the-same-node-thread/114714 "2018-01-11T16:19:33Z")

</div>

Node js being a single thread application, How does APM behaves in such case? . Does it use same thread which application uses or a different thread . ? Will it impact the current performance of the application?

---

## [Saving time filter for a user session](https://discuss.elastic.co/t/saving-time-filter-for-a-user-session/111621)

<div class="topic-metadata">

**Author:** [@Shwetank](https://discuss.elastic.co/u/Shwetank)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 5:51pm UTC](https://discuss.elastic.co/t/saving-time-filter-for-a-user-session/111621 "2017-12-19T17:51:39Z")

</div>

Hi, Is there a way to save time filter selection for a user session. Use case : We have navigation from one dashboard to another using markdown. Dashboard were saved initially with time selection for e.g. last 24 hrs…

---

## [Distributing the load test driver seems to be stuck (?)](https://discuss.elastic.co/t/distributing-the-load-test-driver-seems-to-be-stuck/100812)

<div class="topic-metadata">

**Author:** [@sharathr83](https://discuss.elastic.co/u/sharathr83)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 9:37am UTC](https://discuss.elastic.co/t/distributing-the-load-test-driver-seems-to-be-stuck/100812 "2017-09-20T09:37:58Z")

</div>

I am trying to benchmark my ES cluster using multiple load test drivers (actually 1 load test driver) I have followed the documentation (for 0.7.1) and have done the following : I have 2 rally runner nodes. I am using 1…

---

## [Kibana5 でBASIC認証を実施](https://discuss.elastic.co/t/kibana5-basic/93766)

<div class="topic-metadata">

**Author:** [@kudo](https://discuss.elastic.co/u/kudo)\
**Replies:** 3\
**Last updated:** [July 23, 2017, 3:47pm UTC](https://discuss.elastic.co/t/kibana5-basic/93766 "2017-07-23T15:47:34Z")

</div>

Kibanaで、特定のページだけ、apacheのBASIC認証を設定したいのですが、良い方法がありましたら、お教え下さい。 X-Packの、Securityも良さそうに見えたのですが、無償で行えればと思っております。 apacheの設定だけでいけるかと思ったのですが、複雑そうなので、もしご存知の方がいましたら、ご教授下さい。 環境 ElasticSearch 5.4.1 Kibana 5.4.1

---

## [Logstash plugin install network error](https://discuss.elastic.co/t/logstash-plugin-install-network-error/67131)

<div class="topic-metadata">

**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\
**Replies:** 3\
**Last updated:** [November 30, 2016, 10:15am UTC](https://discuss.elastic.co/t/logstash-plugin-install-network-error/67131 "2016-11-30T10:15:12Z")

</div>

Hey, cant seem to install/update the beats plugin, keeps giving network error. I do have internet connection. ./bin/logstash-plugin update logstash-input-beats Updating logstash-input-beats Error Bundler::HTTPError, re…

[Previous page](https://discuss.elastic.co/top.md?page=1363&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1365&per_page=50&period=all)
