# Top

**URL:** https://discuss.elastic.co/top.md?page=1366&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1367

---

## [How to add ssl certificate for MySQL connection for metricbeat](https://discuss.elastic.co/t/how-to-add-ssl-certificate-for-mysql-connection-for-metricbeat/217851)

<div class="topic-metadata">

**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\
**Replies:** 5\
**Last updated:** [February 6, 2020, 1:09pm UTC](https://discuss.elastic.co/t/how-to-add-ssl-certificate-for-mysql-connection-for-metricbeat/217851 "2020-02-06T13:09:44Z")

</div>

Where can i add the SSL certificate to connect to MySQL server when i configure the MySQL module file (mysql.yaml)? Sorry if this is something obvious but i can't find it anywhere. https://www.elastic.co/guide/en/beats…

---

## [Filebeat not uploading lastest ingest grok pattern to elasticsearch](https://discuss.elastic.co/t/filebeat-not-uploading-lastest-ingest-grok-pattern-to-elasticsearch/179174)

<div class="topic-metadata">

**Author:** [@Dylan\_Nicholson](https://discuss.elastic.co/u/Dylan_Nicholson)\
**Replies:** 5\
**Last updated:** [May 3, 2019, 1:43am UTC](https://discuss.elastic.co/t/filebeat-not-uploading-lastest-ingest-grok-pattern-to-elasticsearch/179174 "2019-05-03T01:43:16Z")

</div>

I'm trying to test out an issue with my grok pattern (specifically, it seems to be ending parsing of the field on a space, despite the pattern requiring that a } be at the end), but it seems no matter what I put in the j…

---

## [Filebeat can't see single line when timestamp is the same](https://discuss.elastic.co/t/filebeat-cant-see-single-line-when-timestamp-is-the-same/125227)

<div class="topic-metadata">

**Author:** [@twan](https://discuss.elastic.co/u/twan)\
**Replies:** 5\
**Last updated:** [March 28, 2018, 2:48pm UTC](https://discuss.elastic.co/t/filebeat-cant-see-single-line-when-timestamp-is-the-same/125227 "2018-03-28T14:48:16Z")

</div>

Hi people! I've been breaking my head on this problem I have with filebeat. The application log that needs to be send to Logstash logs 2 lines with the same timestamp. I've added an example below (removed IP/Ports): Ma…

---

## [Elastic search error : bad certificate](https://discuss.elastic.co/t/elastic-search-error-bad-certificate/320212)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [December 1, 2022, 11:03pm UTC](https://discuss.elastic.co/t/elastic-search-error-bad-certificate/320212 "2022-12-01T23:03:56Z")

</div>

Hello team, We are getting bad certificate issue in 2 elk nodes out of 7. Can you please help me to identify what is exact issue here. \[2022-12-01T14:11:59,261\]\[WARN \]\[o.e.h.AbstractHttpServerTransport\] \[ELKDPCPRD001\] …

---

## [Extracting JSON key and values to separated fields](https://discuss.elastic.co/t/extracting-json-key-and-values-to-separated-fields/236289)

<div class="topic-metadata">

**Author:** [@mihailo](https://discuss.elastic.co/u/mihailo)\
**Replies:** 1\
**Last updated:** [June 9, 2020, 12:13pm UTC](https://discuss.elastic.co/t/extracting-json-key-and-values-to-separated-fields/236289 "2020-06-09T12:13:51Z")

</div>

Hi, I need help with processing JSON file. My input looks like this (I need to keep it intact): input { s3 { bucket =\> "${S3\_BUCKET}" access\_key\_id =\> "${S3\_ACCESS\_KEY}" secret\_access\_key =\> "${S3\_S…

---

## [Kibana - Visualize an array with variable number of fields in each document](https://discuss.elastic.co/t/kibana-visualize-an-array-with-variable-number-of-fields-in-each-document/169198)

<div class="topic-metadata">

**Author:** [@Vaibzz](https://discuss.elastic.co/u/Vaibzz)\
**Replies:** 1\
**Last updated:** [February 20, 2019, 8:30pm UTC](https://discuss.elastic.co/t/kibana-visualize-an-array-with-variable-number-of-fields-in-each-document/169198 "2019-02-20T20:30:41Z")

</div>

I have an index pattern in my kibana with an array field. The array field contains variable number of strings in each document. I have to visualize the count of each string in all documents. I went through many articles…

---

## [Show more than 10 buckets](https://discuss.elastic.co/t/show-more-than-10-buckets/86962)

<div class="topic-metadata">

**Author:** [@Maiko\_Kuipers](https://discuss.elastic.co/u/Maiko_Kuipers)\
**Replies:** 1\
**Last updated:** [May 24, 2017, 12:11pm UTC](https://discuss.elastic.co/t/show-more-than-10-buckets/86962 "2017-05-24T12:11:44Z")

</div>

I created a query which groups transactions and returns them as buckets. The problem that I'm currently facing is that elasticsearch only returns 10 buckets. How can I make my query return more than 10 buckets? I post…

---

## [How can I Recover from Snapshot Exception?](https://discuss.elastic.co/t/how-can-i-recover-from-snapshot-exception/76170)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 8:25am UTC](https://discuss.elastic.co/t/how-can-i-recover-from-snapshot-exception/76170 "2017-02-23T08:25:26Z")

</div>

I take a snapshot of a cluster every night using Curator to snapshot the last 7 days of indices. I am doing this in preparation for an upgrade from ES2.3 to ES5.2 which is scheduled for this evening so wanted to have a b…

---

## [What is the End Of Life (EOL) plan for Kibana 3?](https://discuss.elastic.co/t/what-is-the-end-of-life-eol-plan-for-kibana-3/102)

<div class="topic-metadata">

**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Replies:** 1\
**Last updated:** [February 9, 2017, 10:03pm UTC](https://discuss.elastic.co/t/what-is-the-end-of-life-eol-plan-for-kibana-3/102 "2017-02-09T22:03:49Z")

</div>

The following is our current EOL plan for Kibana 3: 3.0.x will EOL on Sept 18, 2015. The latter of: 18 months from GA of 3.0.0 (March 18, 2014) 30 days from GA of 3.1.0 (May 15, 2014) 3.1.x will EOL on Nov 15, 2015…

---

## [Unable to Find the Package PreBuiltTransportClient in 5.1.1 version](https://discuss.elastic.co/t/unable-to-find-the-package-prebuilttransportclient-in-5-1-1-version/69772)

<div class="topic-metadata">

**Author:** [@TTNarendran](https://discuss.elastic.co/u/TTNarendran)\
**Replies:** 1\
**Last updated:** [December 22, 2016, 11:11am UTC](https://discuss.elastic.co/t/unable-to-find-the-package-prebuilttransportclient-in-5-1-1-version/69772 "2016-12-22T11:11:07Z")

</div>

Hi Team client = new PreBuiltTransportClient(Settings.builder() .put("cluster.name", "testcluster") .put("client.transport.sniff", true) .build()); Am not able to Find the P…

---

## [Why no wadl for rest services?](https://discuss.elastic.co/t/why-no-wadl-for-rest-services/37154)

<div class="topic-metadata">

**Author:** [@Joel\_Stewart](https://discuss.elastic.co/u/Joel_Stewart)\
**Replies:** 1\
**Last updated:** [December 14, 2015, 6:11pm UTC](https://discuss.elastic.co/t/why-no-wadl-for-rest-services/37154 "2015-12-14T18:11:50Z")

</div>

I am curious why there is no wadl. I think the client api implementations are great, but sometimes reading a wadl is more convenient. I have been using Soap UI to do some development maintenance tasks, and it would be …

---

## [Week Over Week Aggregations?](https://discuss.elastic.co/t/week-over-week-aggregations/2587)

<div class="topic-metadata">

**Author:** [@guardianmoon](https://discuss.elastic.co/u/guardianmoon)\
**Replies:** 1\
**Last updated:** [June 17, 2015, 4:28am UTC](https://discuss.elastic.co/t/week-over-week-aggregations/2587 "2015-06-17T04:28:37Z")

</div>

I'm trying to figure out if it's possible to do week over week aggregations and comparisons in Kibana in order to show a week over week % difference? I basically want to do this: \[Thursday2-Thursday1\]/Thursday1 Is th…

---

## [Metrics not visible in Elastic APM using Open Telemetry](https://discuss.elastic.co/t/metrics-not-visible-in-elastic-apm-using-open-telemetry/356313)

<div class="topic-metadata">

**Author:** [@Ingrid\_Rauany](https://discuss.elastic.co/u/Ingrid_Rauany)\
**Replies:** 2\
**Last updated:** [March 27, 2024, 5:12pm UTC](https://discuss.elastic.co/t/metrics-not-visible-in-elastic-apm-using-open-telemetry/356313 "2024-03-27T17:12:10Z")

</div>

I'm using the auto instrumentation of open telemetry (Releases · open-telemetry/opentelemetry-dotnet-instrumentation · GitHub) in a .NET 8 application to send logs, traces and metrics to elastic APM. My logs and traces …

---

## [Installa elasticsearch in a different directory](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226)

<div class="topic-metadata">

**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\
**Replies:** 2\
**Last updated:** [April 13, 2022, 2:27pm UTC](https://discuss.elastic.co/t/installa-elasticsearch-in-a-different-directory/302226 "2022-04-13T14:27:17Z")

</div>

hi, by default Elasticsearch are installed in / directory (/etc/Elasticsearch). but i have an partition in my centos that is dedicated just for the database, how can change the default installing partition and install …

---

## [Multiple users ...multiple kibana instances?](https://discuss.elastic.co/t/multiple-users-multiple-kibana-instances/213626)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 2\
**Last updated:** [January 3, 2020, 8:43am UTC](https://discuss.elastic.co/t/multiple-users-multiple-kibana-instances/213626 "2020-01-03T08:43:26Z")

</div>

Hi forum. After having my first xpack-enabled cluster I want to experiment with multiple users. The idea is having multiple users accessing their indices (so, multiple users share the EL cluster) while keeping them enc…

---

## [Login on SQL Server with domain account (using jdbc plugin)](https://discuss.elastic.co/t/login-on-sql-server-with-domain-account-using-jdbc-plugin/205742)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 2\
**Last updated:** [October 31, 2019, 7:23am UTC](https://discuss.elastic.co/t/login-on-sql-server-with-domain-account-using-jdbc-plugin/205742 "2019-10-31T07:23:19Z")

</div>

Hi all, is there a way to login on MS SQL server using domain credentials? Currently I'm not able to login on it using JDBC Logstash plugin.

---

## [Index Lifecycle Management - Not Deleting Properly](https://discuss.elastic.co/t/index-lifecycle-management-not-deleting-properly/179601)

<div class="topic-metadata">

**Author:** [@tami](https://discuss.elastic.co/u/tami)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 9:42pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-not-deleting-properly/179601 "2019-05-20T21:42:45Z")

</div>

I'm experimenting with Index Lifecycle Management in version 6.7.2. Currently just running Locally. I've set up a pretty simple policy { "policy": { "phases": { "hot": { "actions": { "rol…

---

## [Kibana Visualization Custom Label swapped](https://discuss.elastic.co/t/kibana-visualization-custom-label-swapped/176967)

<div class="topic-metadata">

**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\
**Replies:** 2\
**Last updated:** [April 17, 2019, 3:46pm UTC](https://discuss.elastic.co/t/kibana-visualization-custom-label-swapped/176967 "2019-04-17T15:46:29Z")

</div>

I am using Kibana 6.4.1. I am just trying a create a simple Visualization... with a custom label. And I noted the x and y axes labels are swapped. Is there any way around this issue?

---

## [Non-prefix-based Completion Suggester](https://discuss.elastic.co/t/non-prefix-based-completion-suggester/100443)

<div class="topic-metadata">

**Author:** [@milenkozahovic](https://discuss.elastic.co/u/milenkozahovic)\
**Replies:** 2\
**Last updated:** [September 15, 2017, 7:55am UTC](https://discuss.elastic.co/t/non-prefix-based-completion-suggester/100443 "2017-09-15T07:55:06Z")

</div>

I have my mapping type as follows: { "mappings": { "book": { "properties": { "title": { "type": "completion" } } } } } and index a data: {"create": {"\_index": "library…

---

## [How to search on specific fields but return the entire object matching to the fields?](https://discuss.elastic.co/t/how-to-search-on-specific-fields-but-return-the-entire-object-matching-to-the-fields/27997)

<div class="topic-metadata">

**Author:** [@Sathish\_Dv](https://discuss.elastic.co/u/Sathish_Dv)\
**Replies:** 2\
**Last updated:** [August 25, 2015, 5:33pm UTC](https://discuss.elastic.co/t/how-to-search-on-specific-fields-but-return-the-entire-object-matching-to-the-fields/27997 "2015-08-25T17:33:27Z")

</div>

Hi, I need to search on specific fields, but respond back with entire source object matching to the fields. I tried passing the Fields property with required field but I get response with only those fields populated w…

---

## [Some apache log fields appear as “pairs” in duplicated records](https://discuss.elastic.co/t/some-apache-log-fields-appear-as-pairs-in-duplicated-records/26525)

<div class="topic-metadata">

**Author:** [@Guimou](https://discuss.elastic.co/u/Guimou)\
**Replies:** 2\
**Last updated:** [July 30, 2015, 2:05pm UTC](https://discuss.elastic.co/t/some-apache-log-fields-appear-as-pairs-in-duplicated-records/26525 "2015-07-30T14:05:00Z")

</div>

Hi, I have a setup with Logstash forwarding Apache access logs to Elastic Search for analysis in Kibana. As this is a shared server (WHM/Cpanel) I forward the COMBINEDVHOST log, grok it with " %{IPORHOST:vhost}:%{POSIN…

---

## [Elastic badrequest error: contains unrecognized parameter: \[type\]](https://discuss.elastic.co/t/elastic-badrequest-error-contains-unrecognized-parameter-type/353427)

<div class="topic-metadata">

**Author:** [@Vicapelli](https://discuss.elastic.co/u/Vicapelli)\
**Replies:** 4\
**Last updated:** [February 17, 2024, 9:45pm UTC](https://discuss.elastic.co/t/elastic-badrequest-error-contains-unrecognized-parameter-type/353427 "2024-02-17T21:45:37Z")

</div>

I am using Elasticsearch in a Rails application through the Elasticsearch-rails gem. After creating the indexes, I want to import the data into these indexes. But I am getting the following error: Elastic::Transport::T…

---

## [Scaling Out a Cloud Deployment](https://discuss.elastic.co/t/scaling-out-a-cloud-deployment/290650)

<div class="topic-metadata">

**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\
**Replies:** 4\
**Last updated:** [December 2, 2021, 6:48pm UTC](https://discuss.elastic.co/t/scaling-out-a-cloud-deployment/290650 "2021-12-02T18:48:31Z")

</div>

We have an Elastic Cloud deployment and I'd like to scale out the hot data tier. However, it's not clear to me how to scale out vs. scaling up. Questions: Does changing "Size per zone" result in scaling out or only in …

---

## [CCR user permission issue. \[indices:admin/seq\_no/renew\_retention\_lease\] is unauthorized for user \[ccr\_user\]](https://discuss.elastic.co/t/ccr-user-permission-issue-indices-admin-seq-no-renew-retention-lease-is-unauthorized-for-user-ccr-user/276677)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 4\
**Last updated:** [June 23, 2021, 8:12am UTC](https://discuss.elastic.co/t/ccr-user-permission-issue-indices-admin-seq-no-renew-retention-lease-is-unauthorized-for-user-ccr-user/276677 "2021-06-23T08:12:31Z")

</div>

I have two clusters 7.7.1 deployed, tested CCR, using super user. Now I defined ccr\_user with two newly created roles (ccr\_leader, ccr\_follower), which I am using on both leader and follower clusters. Roles looks like …

---

## [Adding screenshots to cases](https://discuss.elastic.co/t/adding-screenshots-to-cases/251556)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 4\
**Last updated:** [October 20, 2020, 3:38pm UTC](https://discuss.elastic.co/t/adding-screenshots-to-cases/251556 "2020-10-20T15:38:17Z")

</div>

Hello, An awesome enhancement to SIEM would be the ability to paste screenshots in the created cases. Although the timeline is a handy thing, a quick screenshot makes things a lot more clear. Is this a feature that woul…

---

## [Indexing for only updated data using logstash](https://discuss.elastic.co/t/indexing-for-only-updated-data-using-logstash/179705)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 4\
**Last updated:** [May 7, 2019, 5:28am UTC](https://discuss.elastic.co/t/indexing-for-only-updated-data-using-logstash/179705 "2019-05-07T05:28:50Z")

</div>

Hello, Using jdbc input plugin in logstash, I have fetched all the data which I have wanted the most from database tables. Now I want only updated data from all that db tables. Every time I don’t want to index whole da…

---

## [Hardware that can last longer and IOPS needed](https://discuss.elastic.co/t/hardware-that-can-last-longer-and-iops-needed/140845)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 4\
**Last updated:** [July 23, 2018, 6:56am UTC](https://discuss.elastic.co/t/hardware-that-can-last-longer-and-iops-needed/140845 "2018-07-23T06:56:41Z")

</div>

Hello. I am planning to build local cluster with following assumptions and hardware which I already have. Worker nodes: Number of worker nodes: 2 RAM: 64 GB DDR4 physical per node, 32 GB per heap. CPU: AMD Ryzen™ Th…

---

## [Combining 2 index to visualize data in Kibana](https://discuss.elastic.co/t/combining-2-index-to-visualize-data-in-kibana/114626)

<div class="topic-metadata">

**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\
**Replies:** 4\
**Last updated:** [January 9, 2018, 6:49pm UTC](https://discuss.elastic.co/t/combining-2-index-to-visualize-data-in-kibana/114626 "2018-01-09T18:49:15Z")

</div>

Hello Everyone, I have 2 index with same field as \_id in Kibana and I want to visualize data from both index. Using \_all and index-\* i can see all the data fields but when I select fields for visualize it just says No R…

---

## [Huge difference in index size when bulk indexing geoshapes across ES versions](https://discuss.elastic.co/t/huge-difference-in-index-size-when-bulk-indexing-geoshapes-across-es-versions/97137)

<div class="topic-metadata">

**Author:** [@sbocconi](https://discuss.elastic.co/u/sbocconi)\
**Replies:** 4\
**Last updated:** [September 13, 2017, 3:34pm UTC](https://discuss.elastic.co/t/huge-difference-in-index-size-when-bulk-indexing-geoshapes-across-es-versions/97137 "2017-09-13T15:34:04Z")

</div>

I get huge differences in index size when bulk indexing large MultiPolygons across version of ES (1.5.2 and 5.5.0) with the following mapping: { "settings": { "number\_of\_shards": 5, "number…

---

## [Relocate shards in local disks](https://discuss.elastic.co/t/relocate-shards-in-local-disks/34612)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 4\
**Last updated:** [September 26, 2016, 1:33pm UTC](https://discuss.elastic.co/t/relocate-shards-in-local-disks/34612 "2016-09-26T13:33:37Z")

</div>

Hi, I have multiple ES (1.5) servers with multiple disks. I have added an additional disk to all of the servers and i want ES to relocate the shards so that the new disk will take an equal % of current storage usage. …

---

## [Elastic search recovering indices](https://discuss.elastic.co/t/elastic-search-recovering-indices/31596)

<div class="topic-metadata">

**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\
**Replies:** 4\
**Last updated:** [October 6, 2015, 4:53pm UTC](https://discuss.elastic.co/t/elastic-search-recovering-indices/31596 "2015-10-06T16:53:46Z")

</div>

Hello, I'm new to ELK stack. I have installed ELK in to my virtual machine which has 1GB of RAM, CentOS 7. It was working great. But recently I'm getting high load spikes and when I searched the logs (/var/log/elastics…

---

## [Elasticsearch 7.10.2 End of Support Date and End of Life Date](https://discuss.elastic.co/t/elasticsearch-7-10-2-end-of-support-date-and-end-of-life-date/357941)

<div class="topic-metadata">

**Author:** [@zhangyifei](https://discuss.elastic.co/u/zhangyifei)\
**Replies:** 1\
**Last updated:** [April 22, 2024, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2-end-of-support-date-and-end-of-life-date/357941 "2024-04-22T20:05:45Z")

</div>

Hi Team, Are there any documents specifying the End of Support Date and End of Life Date for Elasticsearch 7.10.2? The website currently only provides this information for version 7.17.x. Thanks.

---

## [S3 Curator delete process slow - Is this a bad idea?](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430)

<div class="topic-metadata">

**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\
**Replies:** 7\
**Last updated:** [November 8, 2022, 7:52pm UTC](https://discuss.elastic.co/t/s3-curator-delete-process-slow-is-this-a-bad-idea/318430 "2022-11-08T19:52:51Z")

</div>

We have a backup process using curator that is backup to S3, unfortunately, the delete job for the snapshots has not been processed. Deleting from curator is very slow for s3 and reading on the forums this is caused by t…

---

## [Fleet managed Elastic Agent - Wrong ES output configuration for Filebeat/Metricbeat](https://discuss.elastic.co/t/fleet-managed-elastic-agent-wrong-es-output-configuration-for-filebeat-metricbeat/297925)

<div class="topic-metadata">

**Author:** [@fuphil](https://discuss.elastic.co/u/fuphil)\
**Replies:** 1\
**Last updated:** [March 1, 2022, 3:03pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-wrong-es-output-configuration-for-filebeat-metricbeat/297925 "2022-03-01T15:03:33Z")

</div>

Hi! I successfully set up a fleet server and 2 more elastic agents on different hosts. They all show up as "healthy" and seem fine in Kibana. I recognized after trying a few integrations, that only the Fleet server i…

---

## [Application URL not working after upgrade from 7.8 to 7.14.2](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840)

<div class="topic-metadata">

**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\
**Replies:** 1\
**Last updated:** [October 5, 2021, 12:35pm UTC](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840 "2021-10-05T12:35:04Z")

</div>

Hello, I am encountering following two issues: I get 'Application Not Found No application was found at this URL. Try going back or choosing an app from the menu.' when trying to access dashboards. See attached Co…

---

## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215)

<div class="topic-metadata">

**Author:** [@jojbapsaekki](https://discuss.elastic.co/u/jojbapsaekki)\
**Replies:** 1\
**Last updated:** [April 26, 2021, 5:51am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215 "2021-04-26T05:51:17Z")

</div>

xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 xpack.security.tran…

---

## [Apm-agent-attach-standalone.jar I am new , elastic APM](https://discuss.elastic.co/t/apm-agent-attach-standalone-jar-i-am-new-elastic-apm/268049)

<div class="topic-metadata">

**Author:** [@Abhishek\_Tiwari1](https://discuss.elastic.co/u/Abhishek_Tiwari1)\
**Replies:** 7\
**Last updated:** [March 25, 2021, 10:07am UTC](https://discuss.elastic.co/t/apm-agent-attach-standalone-jar-i-am-new-elastic-apm/268049 "2021-03-25T10:07:15Z")

</div>

HI , I am new in elastic APM , need help to setup. I am trying to setup run Jar using "apm-agent-attach-1.21.0-standalone.jar', but i am not able to run it. Below is my command : java -jar '/opt/elastic/apm/apm-agent…

---

## [Unable to parse Meraki MX](https://discuss.elastic.co/t/unable-to-parse-meraki-mx/156712)

<div class="topic-metadata">

**Author:** [@Frank\_Shearer](https://discuss.elastic.co/u/Frank_Shearer)\
**Replies:** 1\
**Last updated:** [November 15, 2018, 6:37pm UTC](https://discuss.elastic.co/t/unable-to-parse-meraki-mx/156712 "2018-11-15T18:37:17Z")

</div>

Hi All, I'm having an issue maybe someone can help me out with, I am trying to parse Meraki flows messages which look like this: my input conf is this: and my filter conf is this: I continually get this in s…

---

## [Unable send logs from filebeat 6 to kafka](https://discuss.elastic.co/t/unable-send-logs-from-filebeat-6-to-kafka/113513)

<div class="topic-metadata">

**Author:** [@ktella](https://discuss.elastic.co/u/ktella)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 1:01pm UTC](https://discuss.elastic.co/t/unable-send-logs-from-filebeat-6-to-kafka/113513 "2018-01-04T13:01:49Z")

</div>

Below is my filebeat6 config. -sh-4.1$ grep -v # filebeat.yml filebeat.prospectors: type: log enabled: true paths: /var/log/nginx/ss-xxxxx.access.log exclude\_files: \['.gz$'\] tags: \["xxxxx"\] filebeat.config.mo…

---

## [NoClassDefFoundError: Could not initialize class org.elasticsearch.common.network.NetworkService](https://discuss.elastic.co/t/noclassdeffounderror-could-not-initialize-class-org-elasticsearch-common-network-networkservice/100020)

<div class="topic-metadata">

**Author:** [@Kirito940613](https://discuss.elastic.co/u/Kirito940613)\
**Replies:** 1\
**Last updated:** [September 12, 2017, 3:40pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-could-not-initialize-class-org-elasticsearch-common-network-networkservice/100020 "2017-09-12T15:40:27Z")

</div>

public final static TransportClient getClient() { synchronized (EsUtil.class) { if(client == null) try { Settings settings = Settings.builder() .put("cluster.name", clusterName…

---

## [Logstash syslog output - remove headers](https://discuss.elastic.co/t/logstash-syslog-output-remove-headers/60049)

<div class="topic-metadata">

**Author:** [@dorr](https://discuss.elastic.co/u/dorr)\
**Replies:** 1\
**Last updated:** [September 8, 2016, 8:19am UTC](https://discuss.elastic.co/t/logstash-syslog-output-remove-headers/60049 "2016-09-08T08:19:38Z")

</div>

Hello, I am using the syslog output, and a customer recently asked if I could send the syslog message without the headers, to simplify the message's parsing. I do want to use the syslog transport, but I want the sent s…

---

## [Out Of memory error in kibana](https://discuss.elastic.co/t/out-of-memory-error-in-kibana/43893)

<div class="topic-metadata">

**Author:** [@astro](https://discuss.elastic.co/u/astro)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 6:49pm UTC](https://discuss.elastic.co/t/out-of-memory-error-in-kibana/43893 "2016-03-09T18:49:10Z")

</div>

I am not pretty much sure but I received Discover: \[out\_of\_memory\_error\] Java heap space .... After clicking more info I received this Error: \[out\_of\_memory\_error\] Java heap space ErrorAbstract@http://X.X.X.X/bun…

---

## [How to parse nested json events](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039)

<div class="topic-metadata">

**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\
**Replies:** 3\
**Last updated:** [December 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-events/292039 "2021-12-22T14:02:10Z")

</div>

Hello! I have nested json objects like this : { "\_index": "impe\_logs-2021.11.19-1", "\_type": "\_doc", "\_id": "tyu", "\_version": 1, "\_score": null, "\_source": { "port": 54640, "impe": { "abp": {…

---

## [Elasticsearch output pipeline error with api\_key](https://discuss.elastic.co/t/elasticsearch-output-pipeline-error-with-api-key/287618)

<div class="topic-metadata">

**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-output-pipeline-error-with-api-key/287618 "2021-10-27T08:49:09Z")

</div>

Hello, I created a Logstash config to send files on index of Elasticsearch 7.15.1, on the same server. I got this error \[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<Mant…

---

## [Logstash stuck in \[2021-02-17T12:32:52,208\]\[DEBUG\]\[org.logstash.execution.PeriodicFlush\]\[main\] Pushing flush onto pipeline](https://discuss.elastic.co/t/logstash-stuck-in-2021-02-17t1252-208-debug-org-logstash-execution-periodicflush-main-pushing-flush-onto-pipeline/264559)

<div class="topic-metadata">

**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 9:20am UTC](https://discuss.elastic.co/t/logstash-stuck-in-2021-02-17t1252-208-debug-org-logstash-execution-periodicflush-main-pushing-flush-onto-pipeline/264559 "2021-02-18T09:20:59Z")

</div>

i see this message in logs of logstash \[2021-02-17T12:27:27,747\]\[DEBUG\]\[io.netty.util.internal.PlatformDependent0\]\[main\]\[f24f5a6935ca56387219d3b2bfdc6097466486c907605f8a15f69f812d2d4269\] direct buffer constructor: unava…

---

## [Decoding base64 logs when input is in JSON format?](https://discuss.elastic.co/t/decoding-base64-logs-when-input-is-in-json-format/254042)

<div class="topic-metadata">

**Author:** [@Mudabbir](https://discuss.elastic.co/u/Mudabbir)\
**Replies:** 3\
**Last updated:** [November 4, 2020, 11:52am UTC](https://discuss.elastic.co/t/decoding-base64-logs-when-input-is-in-json-format/254042 "2020-11-04T11:52:38Z")

</div>

Greetings ! I am unable to decode my base64 logs that are coming from nxlog server. Here is my logstash configuration. The error i am getting is shown below The log field is in base64 I have tried cipher filt…

---

## [Order Kibana bar graph by date](https://discuss.elastic.co/t/order-kibana-bar-graph-by-date/212533)

<div class="topic-metadata">

**Author:** [@Sergioc](https://discuss.elastic.co/u/Sergioc)\
**Replies:** 3\
**Last updated:** [December 23, 2019, 4:26pm UTC](https://discuss.elastic.co/t/order-kibana-bar-graph-by-date/212533 "2019-12-23T16:26:50Z")

</div>

Hello guys, I'm pretty new with Kibana and I have been trying to do a bar graph. I'm trying to order the bar based on dates. the graph shows the percentage or items by month. and this is the x-axis setting as yo…

---

## [Cannot use transform rank op in Vega-Lite](https://discuss.elastic.co/t/cannot-use-transform-rank-op-in-vega-lite/153586)

<div class="topic-metadata">

**Author:** [@georgeRD](https://discuss.elastic.co/u/georgeRD)\
**Replies:** 3\
**Last updated:** [November 6, 2018, 10:29pm UTC](https://discuss.elastic.co/t/cannot-use-transform-rank-op-in-vega-lite/153586 "2018-11-06T22:29:29Z")

</div>

Hi all, I created a horizontal bar in Kibana using Vega-lite which works fine (Kibana v6.2.3). Next task was to add ranking so that I can filter the results based on their rank. This seems to be trickier as I cannot see…

---

## [Kibana grouping query](https://discuss.elastic.co/t/kibana-grouping-query/106746)

<div class="topic-metadata">

**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\
**Replies:** 3\
**Last updated:** [November 8, 2017, 4:04pm UTC](https://discuss.elastic.co/t/kibana-grouping-query/106746 "2017-11-08T16:04:43Z")

</div>

Hello , I have some json logs from ES and looking for some customized output visualization on Kibana. Could you please confirm if this is possible, if yes how can i achieve this ? any help appreciated . logs:- { "STA…

---

## [Elaticsearch index shrink issue](https://discuss.elastic.co/t/elaticsearch-index-shrink-issue/97360)

<div class="topic-metadata">

**Author:** [@sreejithps303](https://discuss.elastic.co/u/sreejithps303)\
**Replies:** 3\
**Last updated:** [August 17, 2017, 12:51pm UTC](https://discuss.elastic.co/t/elaticsearch-index-shrink-issue/97360 "2017-08-17T12:51:41Z")

</div>

Hi , I am trying to shrink the indices in elasticsearch. Currenrly i have 5 primary shards and 1 replica . I want to change it to 1 primary and 1 replica shards. i have executed the steps mention in Shrink Index | Ela…

[Previous page](https://discuss.elastic.co/top.md?page=1365&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1367&per_page=50&period=all)
