# Top

**URL:** https://discuss.elastic.co/top.md?page=1374&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1375

---

## [ElasticON Talks - Speaker Deck Error](https://discuss.elastic.co/t/elasticon-talks-speaker-deck-error/123669)

<div class="topic-metadata">

**Author:** [@mikedias](https://discuss.elastic.co/u/mikedias)\
**Replies:** 2\
**Last updated:** [March 13, 2018, 2:52am UTC](https://discuss.elastic.co/t/elasticon-talks-speaker-deck-error/123669 "2018-03-13T02:52:11Z")

</div>

Hi there, I don't know if here is the appropriated forum to report this, but are several Elastic{ON} 2018 talks that do not load in speaker deck. Here is an example: https://speakerdeck.com/elastic/elastic-on-2018-what…

---

## [Modifying the \`onclick\` event of kibana visualisations](https://discuss.elastic.co/t/modifying-the-onclick-event-of-kibana-visualisations/145189)

<div class="topic-metadata">

**Author:** [@Jonathan\_Tan](https://discuss.elastic.co/u/Jonathan_Tan)\
**Replies:** 2\
**Last updated:** [August 21, 2018, 7:08am UTC](https://discuss.elastic.co/t/modifying-the-onclick-event-of-kibana-visualisations/145189 "2018-08-21T07:08:40Z")

</div>

Hi, I'm exploring another approach to meeting my requirements, and am currently looking at iframe embeds of my kibana visualisations. My specific use case is when a user clicks on a graph item (e.g. bars in a histogram…

---

## [Hdfs repository illegal argument exception](https://discuss.elastic.co/t/hdfs-repository-illegal-argument-exception/126380)

<div class="topic-metadata">

**Author:** [@7518f42b92157eda0e44](https://discuss.elastic.co/u/7518f42b92157eda0e44)\
**Replies:** 2\
**Last updated:** [April 4, 2018, 2:09am UTC](https://discuss.elastic.co/t/hdfs-repository-illegal-argument-exception/126380 "2018-04-04T02:09:31Z")

</div>

Good morning. I want to use hdfs-repository. But it does not work well. My define the configuration "PUT \_snapshot/my\_hdfs\_repository { "type": "hdfs", "settings": { "uri": "hdfs://namenode:8020/", "path": "elast…

---

## [Hiding Kibana plugin from navbar, routes disabled?](https://discuss.elastic.co/t/hiding-kibana-plugin-from-navbar-routes-disabled/97925)

<div class="topic-metadata">

**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 12:19am UTC](https://discuss.elastic.co/t/hiding-kibana-plugin-from-navbar-routes-disabled/97925 "2017-08-23T00:19:38Z")

</div>

Hello, So I am developing a kibana plugin and I would like to hide the plugin from the navbar From the blog post suggested from the kibana resources in the “Writing kibana plugins” documentation We can hide the plu…

---

## [Filebeat in docker, cannot reload configuration](https://discuss.elastic.co/t/filebeat-in-docker-cannot-reload-configuration/90210)

<div class="topic-metadata">

**Author:** [@delphi1989](https://discuss.elastic.co/u/delphi1989)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 9:10am UTC](https://discuss.elastic.co/t/filebeat-in-docker-cannot-reload-configuration/90210 "2017-06-21T09:10:59Z")

</div>

Hello :smiley: I'm wondering why it's not working if I modify the filebeat.yml file Here is my configuration: # ========= # input # ========= filebeat.prospectors: - input\_type: log …

---

## [Logstash 5.2.2 offline install on Windows - Can't find file](https://discuss.elastic.co/t/logstash-5-2-2-offline-install-on-windows-cant-find-file/77542)

<div class="topic-metadata">

**Author:** [@franhoeyemac](https://discuss.elastic.co/u/franhoeyemac)\
**Replies:** 2\
**Last updated:** [March 30, 2017, 12:48pm UTC](https://discuss.elastic.co/t/logstash-5-2-2-offline-install-on-windows-cant-find-file/77542 "2017-03-30T12:48:57Z")

</div>

I'm trying to setup logstash on a server with no internet access to read windows event logs I've followed the instructions here - https://www.elastic.co/guide/en/logstash/current/offline-plugins.html Installed logst…

---

## [Kibana5 plug-in operation will not work from behind our proxy](https://discuss.elastic.co/t/kibana5-plug-in-operation-will-not-work-from-behind-our-proxy/64935)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 4:18pm UTC](https://discuss.elastic.co/t/kibana5-plug-in-operation-will-not-work-from-behind-our-proxy/64935 "2016-11-07T16:18:33Z")

</div>

I am trying to install x-pack without success: \[pp-1 bin\]# ./kibana-plugin install x-pack Attempting to transfer from x-pack Attempting to transfer from https://artifacts.elastic.co/downloads/kibana-plugins/x-pack/x-pa…

---

## [Load(1m) Yellow/Red](https://discuss.elastic.co/t/load-1m-yellow-red/33811)

<div class="topic-metadata">

**Author:** [@vha14](https://discuss.elastic.co/u/vha14)\
**Replies:** 2\
**Last updated:** [November 6, 2015, 6:45pm UTC](https://discuss.elastic.co/t/load-1m-yellow-red/33811 "2015-11-06T18:45:45Z")

</div>

Hi, what does the Load(1m) and the red/yellow color code mean? Specifically: What does "1m" mean? What does red mean? I usually see this color if the load metric is greater than 10. Is it 10% load? If red means the cl…

---

## [Visualising survival data as a survival plot](https://discuss.elastic.co/t/visualising-survival-data-as-a-survival-plot/176193)

<div class="topic-metadata">

**Author:** [@theflyingcarpet](https://discuss.elastic.co/u/theflyingcarpet)\
**Replies:** 6\
**Last updated:** [April 24, 2019, 10:33am UTC](https://discuss.elastic.co/t/visualising-survival-data-as-a-survival-plot/176193 "2019-04-24T10:33:51Z")

</div>

Hi, I wonder if anyone can help me to draw a survival plot in Kibana. Survival plots are a well known way of displaying the survival of a population over time (wikipedia ) and I have the data to do it but can't work it…

---

## [Large SOLR migration recommendations (3.6 Billion+ docs)](https://discuss.elastic.co/t/large-solr-migration-recommendations-3-6-billion-docs/10627)

<div class="topic-metadata">

**Author:** [@ocryan\_2](https://discuss.elastic.co/u/ocryan_2)\
**Replies:** 6\
**Last updated:** [February 13, 2013, 6:49pm UTC](https://discuss.elastic.co/t/large-solr-migration-recommendations-3-6-billion-docs/10627 "2013-02-13T18:49:39Z")

</div>

We are considering migrating from Solr to ES and are planning our server/shard setup now. I thought that perhaps the group has some recommendations based on our current Solr environment. Currently we have: 4xDedic…

---

## [Usage of Groovy to index data with ElasticSearch](https://discuss.elastic.co/t/usage-of-groovy-to-index-data-with-elasticsearch/5045)

<div class="topic-metadata">

**Author:** [@Jason\_N](https://discuss.elastic.co/u/Jason_N)\
**Replies:** 6\
**Last updated:** [September 9, 2011, 1:44pm UTC](https://discuss.elastic.co/t/usage-of-groovy-to-index-data-with-elasticsearch/5045 "2011-09-09T13:44:59Z")

</div>

Hello, I'm trying to chase down some memory errors, and although I've searched around, the answer seems to elude me. Trying to index ~500m records with an average record size of 12k from a server that isn't parti…

---

## [Logstash 7.x service fails to start on Ubuntu 18.04 LTS with OpenJDK 11 JDK as a service but starts otherwise](https://discuss.elastic.co/t/logstash-7-x-service-fails-to-start-on-ubuntu-18-04-lts-with-openjdk-11-jdk-as-a-service-but-starts-otherwise/246506)

<div class="topic-metadata">

**Author:** [@Henri.C.Lefevre](https://discuss.elastic.co/u/Henri.C.Lefevre)\
**Replies:** 4\
**Last updated:** [August 27, 2020, 3:58pm UTC](https://discuss.elastic.co/t/logstash-7-x-service-fails-to-start-on-ubuntu-18-04-lts-with-openjdk-11-jdk-as-a-service-but-starts-otherwise/246506 "2020-08-27T15:58:15Z")

</div>

I am trying to use logstash a SystemV service on Ubuntu 18.04 LTS. Whenever I try to use the service command, the service startup fails \> service logstash start && journalctl -u logstash logstash.service: Failed to ex…

---

## [Index size seems massive to what the data is being sent](https://discuss.elastic.co/t/index-size-seems-massive-to-what-the-data-is-being-sent/126977)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 4\
**Last updated:** [April 16, 2018, 2:57pm UTC](https://discuss.elastic.co/t/index-size-seems-massive-to-what-the-data-is-being-sent/126977 "2018-04-16T14:57:08Z")

</div>

Hello, I am sending metrics via collectd on a 10s interval rate. my daily index comes out to a size from 25-27gb. This seems a bit massive? The index settings are setup as follows "number\_of\_shards": "5", "number\_of\_re…

---

## [2.3 and 2.4 in the same cluster?](https://discuss.elastic.co/t/2-3-and-2-4-in-the-same-cluster/59505)

<div class="topic-metadata">

**Author:** [@pixelatedpete](https://discuss.elastic.co/u/pixelatedpete)\
**Replies:** 4\
**Last updated:** [September 1, 2016, 8:58am UTC](https://discuss.elastic.co/t/2-3-and-2-4-in-the-same-cluster/59505 "2016-09-01T08:58:05Z")

</div>

I've tried Google, this forum and the ElasticSearch docs but I can't find a definitive answer. When using the yum repository for ElasticSearch 2.x I've been happily using version 2.3.4 for some time. The other day I …

---

## [Searching vor numbers](https://discuss.elastic.co/t/searching-vor-numbers/42326)

<div class="topic-metadata">

**Author:** [@eutychus](https://discuss.elastic.co/u/eutychus)\
**Replies:** 4\
**Last updated:** [February 23, 2016, 5:23pm UTC](https://discuss.elastic.co/t/searching-vor-numbers/42326 "2016-02-23T17:23:51Z")

</div>

are there any analyzers to translate numbers to text? I want to have the ability to find values like 20 and zwanzig (twenty) as equals. TIA Eutychus

---

## [Question regarding cluster setup](https://discuss.elastic.co/t/question-regarding-cluster-setup/36670)

<div class="topic-metadata">

**Author:** [@tesseract](https://discuss.elastic.co/u/tesseract)\
**Replies:** 4\
**Last updated:** [December 8, 2015, 7:57pm UTC](https://discuss.elastic.co/t/question-regarding-cluster-setup/36670 "2015-12-08T19:57:58Z")

</div>

Hey guys, We are attempting to deploy our first cluster after lots and lots of testing. I had couple questions regarding a query node (master: false, data: false). Is there any requirements in terms of how powerful the q…

---

## [Elasticsearch stuck in ApplyingChanges phase on Openshift](https://discuss.elastic.co/t/elasticsearch-stuck-in-applyingchanges-phase-on-openshift/323228)

<div class="topic-metadata">

**Author:** [@TimTim](https://discuss.elastic.co/u/TimTim)\
**Replies:** 1\
**Last updated:** [January 16, 2023, 3:07pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-in-applyingchanges-phase-on-openshift/323228 "2023-01-16T15:07:59Z")

</div>

Hi! We're running Openshift 4.11 and we've installed ECK 2.6.2. I start an Elasticsearch instance with this YAML code (copied from the quickstart doc): cat \<\<EOF | oc apply -n 008ep-elk -f - # This sample sets up an El…

---

## [Problem when setting Kibana server as a proxy for Tiles Maps Download and Maps Visualizations](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594)

<div class="topic-metadata">

**Author:** [@Manuel\_Wong](https://discuss.elastic.co/u/Manuel_Wong)\
**Replies:** 1\
**Last updated:** [December 14, 2020, 4:16pm UTC](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594 "2020-12-14T16:16:21Z")

</div>

Hello All, We have a KIbana/Elasticsearch environment where the servers have access to the internet through a proxy. The web browser clients from which the users access to Kibana are also running from an environment tha…

---

## [Assistance Required Resolving Index Mapping Error on Text / Keyword Field](https://discuss.elastic.co/t/assistance-required-resolving-index-mapping-error-on-text-keyword-field/203938)

<div class="topic-metadata">

**Author:** [@elasticTrouble](https://discuss.elastic.co/u/elasticTrouble)\
**Replies:** 1\
**Last updated:** [October 21, 2019, 10:51pm UTC](https://discuss.elastic.co/t/assistance-required-resolving-index-mapping-error-on-text-keyword-field/203938 "2019-10-21T22:51:12Z")

</div>

Howdy Elastic Community, I've got what I believe is a relatively simple issue that I need assistance resolving. Even though I believe I know the root cause of the issue, I'm asking for help because I haven't fully wrapp…

---

## [Using Keystores - not working (v6.6.0)](https://discuss.elastic.co/t/using-keystores-not-working-v6-6-0/167301)

<div class="topic-metadata">

**Author:** [@mark.lawton2](https://discuss.elastic.co/u/mark.lawton2)\
**Replies:** 1\
**Last updated:** [February 7, 2019, 9:04am UTC](https://discuss.elastic.co/t/using-keystores-not-working-v6-6-0/167301 "2019-02-07T09:04:47Z")

</div>

Hello, I'm trying to use a keystore value in my beat configuration and I can't seem to get it working... For example - I'm currently trying it with heartbeat. THIS WORKS - output.elasticsearch: password: "clear\_text…

---

## [Random newlines when using multiline-codec in tcp input](https://discuss.elastic.co/t/random-newlines-when-using-multiline-codec-in-tcp-input/160321)

<div class="topic-metadata">

**Author:** [@shkwarka](https://discuss.elastic.co/u/shkwarka)\
**Replies:** 1\
**Last updated:** [December 13, 2018, 3:10pm UTC](https://discuss.elastic.co/t/random-newlines-when-using-multiline-codec-in-tcp-input/160321 "2018-12-13T15:10:17Z")

</div>

Hello, I'm trying to process multiline messages received from rsyslog as a plain text over TCP with multiline codec in tcp input. In output for some messages i noticed parsing failed because Logstash inserted randomly "…

---

## [Marvel 2.0 Dark Theme for Kibana 4.2.1](https://discuss.elastic.co/t/marvel-2-0-dark-theme-for-kibana-4-2-1/35441)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [November 24, 2015, 2:45pm UTC](https://discuss.elastic.co/t/marvel-2-0-dark-theme-for-kibana-4-2-1/35441 "2015-11-24T14:45:13Z")

</div>

Hi, Is there a way to set the marvel theme to dark in kibana? I've set the default theme for new dashboards to dark in the kibana settings but don't see anything in the marvel plugin that will allow me to do the same. In…

---

## [Tcp output not working](https://discuss.elastic.co/t/tcp-output-not-working/29425)

<div class="topic-metadata">

**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\
**Replies:** 1\
**Last updated:** [September 16, 2015, 5:56pm UTC](https://discuss.elastic.co/t/tcp-output-not-working/29425 "2015-09-16T17:56:43Z")

</div>

Hello, I'd like to send http logs through tcp from one logstash A (output) to another (logstash B) (input) with the following configuration:- logstash A output { tcp { host =\> "xx.xx.xx.xx…

---

## [Moving indices from one volume to another](https://discuss.elastic.co/t/moving-indices-from-one-volume-to-another/20150)

<div class="topic-metadata">

**Author:** [@Tim\_Swetonic](https://discuss.elastic.co/u/Tim_Swetonic)\
**Replies:** 1\
**Last updated:** [October 8, 2014, 9:01pm UTC](https://discuss.elastic.co/t/moving-indices-from-one-volume-to-another/20150 "2014-10-08T21:01:15Z")

</div>

Hi all, I'm seeking to move our indices on disk from one volume to another, on the same machine. We using version 0.90.10, and we can't change that at the moment. I tried copying the data to the new volume, cha…

---

## [Alert if index has 0 documents in last X minutes (Rules and connectors or Detection Rules)](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/311695)

<div class="topic-metadata">

**Author:** [@stoza](https://discuss.elastic.co/u/stoza)\
**Replies:** 5\
**Last updated:** [August 11, 2022, 1:30pm UTC](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/311695 "2022-08-11T13:30:06Z")

</div>

Hello everyone, I'm using kibana version 7.17.2 I work with rule and connector in order to receive an alert if I don't receive any new document in one of my index for the last X minutes. Select index: INDEX index\* WH…

---

## [Range query for date in filter ratio - TSVB](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 5\
**Last updated:** [May 20, 2021, 8:25pm UTC](https://discuss.elastic.co/t/range-query-for-date-in-filter-ratio-tsvb/272900 "2021-05-20T20:25:53Z")

</div>

I want to calculate percentage of sales between offer period. I have multiple stores having offers running during multiple dates. I tried with TSVB, filter ratio as in below image. I'm getting 0% even having data for con…

---

## [Metricbeat RabbitMQ module not sending all metric sets](https://discuss.elastic.co/t/metricbeat-rabbitmq-module-not-sending-all-metric-sets/144264)

<div class="topic-metadata">

**Author:** [@joshsmoore](https://discuss.elastic.co/u/joshsmoore)\
**Replies:** 5\
**Last updated:** [August 16, 2018, 12:50am UTC](https://discuss.elastic.co/t/metricbeat-rabbitmq-module-not-sending-all-metric-sets/144264 "2018-08-16T00:50:17Z")

</div>

I am using metric beat 6.3.0 to collect metrics from rabbitMQ. I was able to get it working for the node metricset. However, the connection and queue metric sets do not report any data. I am not seeing any errors in m…

---

## [After installing x-pack 5.4 , logstash 5.4 not working](https://discuss.elastic.co/t/after-installing-x-pack-5-4-logstash-5-4-not-working/129940)

<div class="topic-metadata">

**Author:** [@hedieh](https://discuss.elastic.co/u/hedieh)\
**Replies:** 5\
**Last updated:** [April 30, 2018, 7:56am UTC](https://discuss.elastic.co/t/after-installing-x-pack-5-4-logstash-5-4-not-working/129940 "2018-04-30T07:56:37Z")

</div>

Hi, after install x-pack on logstash , i get error below \[2018-04-29T11:19:56,973\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>#\<URI::HTTP:0x6f…

---

## [What if "query node" or the "gateway query node" fail in cluster having n nodes?](https://discuss.elastic.co/t/what-if-query-node-or-the-gateway-query-node-fail-in-cluster-having-n-nodes/90204)

<div class="topic-metadata">

**Author:** [@Sameer\_Sharma](https://discuss.elastic.co/u/Sameer_Sharma)\
**Replies:** 5\
**Last updated:** [June 22, 2017, 10:29pm UTC](https://discuss.elastic.co/t/what-if-query-node-or-the-gateway-query-node-fail-in-cluster-having-n-nodes/90204 "2017-06-22T22:29:31Z")

</div>

I have setup where i have 5 node and i want to fetch the data from one single cluster url. As of now what i have read and used is to query multiple nodes with multiple api url's. use case: Node1 : Url1 Node2 : Url2 N…

---

## [App search not able to connect to elasticsearch directly over https](https://discuss.elastic.co/t/app-search-not-able-to-connect-to-elasticsearch-directly-over-https/224070)

<div class="topic-metadata">

**Author:** [@Jaaved\_Ali\_Khan](https://discuss.elastic.co/u/Jaaved_Ali_Khan)\
**Replies:** 2\
**Last updated:** [March 27, 2020, 2:35pm UTC](https://discuss.elastic.co/t/app-search-not-able-to-connect-to-elasticsearch-directly-over-https/224070 "2020-03-27T14:35:15Z")

</div>

app search and elasticsearch are on same machine; I tried with both 7.5.2 and 7.6.1 versions of elasticsearch and app search. allow\_es\_settings\_modification: true elasticsearch.host: "https://kombare-es.com" elasticsea…

---

## [Ingest attachment install fail on elasticsearch 6.3.0](https://discuss.elastic.co/t/ingest-attachment-install-fail-on-elasticsearch-6-3-0/137381)

<div class="topic-metadata">

**Author:** [@xiaoxin01](https://discuss.elastic.co/u/xiaoxin01)\
**Replies:** 2\
**Last updated:** [June 26, 2018, 8:37am UTC](https://discuss.elastic.co/t/ingest-attachment-install-fail-on-elasticsearch-6-3-0/137381 "2018-06-26T08:37:38Z")

</div>

Hi, I wan't to install ingest attachment plugin in elk docker image but got an error. Hear is dockerfile: ARG ELK\_VERSION=6.3.0 FROM docker.elastic.co/elasticsearch/elasticsearch-oss:$ELK\_VERSION ARG ELK\_VERSION RUN …

---

## [Vega plugin - aggregations and accessing the document fields](https://discuss.elastic.co/t/vega-plugin-aggregations-and-accessing-the-document-fields/126799)

<div class="topic-metadata">

**Author:** [@angeliczka](https://discuss.elastic.co/u/angeliczka)\
**Replies:** 2\
**Last updated:** [April 6, 2018, 1:32pm UTC](https://discuss.elastic.co/t/vega-plugin-aggregations-and-accessing-the-document-fields/126799 "2018-04-06T13:32:05Z")

</div>

Im new to Vega and Kibana as well, Im trying to create a scatterplot showing hashtags and their average polarity, however I am stuck with two aspects, firstly getting the average polarity aggregated and secondly accessin…

---

## [IE 11 and Kibana](https://discuss.elastic.co/t/ie-11-and-kibana/110374)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 2\
**Last updated:** [December 11, 2017, 1:19pm UTC](https://discuss.elastic.co/t/ie-11-and-kibana/110374 "2017-12-11T13:19:56Z")

</div>

Hi All, I have created a dashboard using kibana , when am trying to view in good chrome i dont have any issues but we are supposed to use only IE11.But I have problems in viewing the dashboards and visualisation. Even…

---

## [Multiple outputs and filebeat back pressure management](https://discuss.elastic.co/t/multiple-outputs-and-filebeat-back-pressure-management/108553)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [November 21, 2017, 11:25am UTC](https://discuss.elastic.co/t/multiple-outputs-and-filebeat-back-pressure-management/108553 "2017-11-21T11:25:50Z")

</div>

In case of multiple outputs, how the back pressure management will be done at input say filebeat as the performance of each of the outputs will vary. Also what will happen if one of the output will fail. Whether the eve…

---

## [Event count per second and](https://discuss.elastic.co/t/event-count-per-second-and/102903)

<div class="topic-metadata">

**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\
**Replies:** 2\
**Last updated:** [October 6, 2017, 2:39am UTC](https://discuss.elastic.co/t/event-count-per-second-and/102903 "2017-10-06T02:39:18Z")

</div>

Hi, I'd like to count the events coming in per second, and then want to decide something based on the count. How can I achieve this? I tired to count the events by using aggregate plugin per second, but as you could im…

---

## [Using custom \_id (from Kinesis)](https://discuss.elastic.co/t/using-custom--id-from-kinesis/51936)

<div class="topic-metadata">

**Author:** [@shushu](https://discuss.elastic.co/u/shushu)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 6:52am UTC](https://discuss.elastic.co/t/using-custom--id-from-kinesis/51936 "2016-06-07T06:52:00Z")

</div>

Hello, Our app uses Spark job to read from Kinesis, and write to Elastic. We got a situation in which the job failed to write to Elastic, but kept reading from Kinesis, which made us missing data. Trying to figure out a …

---

## [Elasticsearch 2.1 node ID changed after restart](https://discuss.elastic.co/t/elasticsearch-2-1-node-id-changed-after-restart/35543)

<div class="topic-metadata">

**Author:** [@radu.stefanache](https://discuss.elastic.co/u/radu.stefanache)\
**Replies:** 2\
**Last updated:** [November 25, 2015, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-2-1-node-id-changed-after-restart/35543 "2015-11-25T14:50:17Z")

</div>

Hello everyone, I have a cluster with 3 nodes, each node has the name set in the elasticsearch.yml Today I've upgraded to ES 2.1 from 2.0 and found an interesting behaviour . Whenever I restart a node, it comes back wi…

---

## [Machine learning error: persistent task is awating node assignment](https://discuss.elastic.co/t/machine-learning-error-persistent-task-is-awating-node-assignment/290043)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 3\
**Last updated:** [November 25, 2021, 9:54am UTC](https://discuss.elastic.co/t/machine-learning-error-persistent-task-is-awating-node-assignment/290043 "2021-11-25T09:54:43Z")

</div>

Hello, I hope this message finds Elastic community and their loved ones safe and healthy. I have a three node cluster: Node-1 and Node-2 hold data & carry out computation: both have has 24 GB of RAM with jvm set to…

---

## [Java API - trying to fetch data from Index](https://discuss.elastic.co/t/java-api-trying-to-fetch-data-from-index/238971)

<div class="topic-metadata">

**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\
**Replies:** 3\
**Last updated:** [June 30, 2020, 8:34pm UTC](https://discuss.elastic.co/t/java-api-trying-to-fetch-data-from-index/238971 "2020-06-30T20:34:25Z")

</div>

I am trying to fetch data from index using java API to generate a report using jasper reports. I have added the maven dependency and able to make connection to ES. While trying to fetch the data corresponding to the pa…

---

## [nHibernate supported by .NET agent?](https://discuss.elastic.co/t/nhibernate-supported-by-net-agent/204224)

<div class="topic-metadata">

**Author:** [@mwessman](https://discuss.elastic.co/u/mwessman)\
**Replies:** 3\
**Last updated:** [October 18, 2019, 1:01pm UTC](https://discuss.elastic.co/t/nhibernate-supported-by-net-agent/204224 "2019-10-18T13:01:50Z")

</div>

Hi! Attending a POC where .NET agent have been installed - data access technology is nHibernate; and we're not seeing any DB-spans. So; initial questions before digging deeper: is nHibernate supported at all? If yes - …

---

## [Elasticsearch is restarting like a loop after I remove x-pack security](https://discuss.elastic.co/t/elasticsearch-is-restarting-like-a-loop-after-i-remove-x-pack-security/200798)

<div class="topic-metadata">

**Author:** [@Abdul\_Rahuman](https://discuss.elastic.co/u/Abdul_Rahuman)\
**Replies:** 3\
**Last updated:** [September 24, 2019, 10:10am UTC](https://discuss.elastic.co/t/elasticsearch-is-restarting-like-a-loop-after-i-remove-x-pack-security/200798 "2019-09-24T10:10:59Z")

</div>

I downloaded using docker like this and the version I'm using is 5.6.8 docker run --name elasticsearch \\ -p 9200:9200 \\ -p 9300:9300 \\ -v /opt/esdata:/usr/share/elasticsearch/data \\ -e xpack.security.enabled="false"…

---

## [Logstash converting empty string into 0.0](https://discuss.elastic.co/t/logstash-converting-empty-string-into-0-0/188797)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 3\
**Last updated:** [July 3, 2019, 9:15pm UTC](https://discuss.elastic.co/t/logstash-converting-empty-string-into-0-0/188797 "2019-07-03T21:15:54Z")

</div>

Hi, I am converting an amount value into float as follows. mutate{ convert =\> { "AMT" =\> "float" } if "AMT"="" empty spcae ,it give 0.0 as the conversion output. this may mislead people since it is an amount field…

---

## [Australian Datacenter?](https://discuss.elastic.co/t/australian-datacenter/176499)

<div class="topic-metadata">

**Author:** [@Kim\_Pepper](https://discuss.elastic.co/u/Kim_Pepper)\
**Replies:** 3\
**Last updated:** [April 30, 2019, 3:25pm UTC](https://discuss.elastic.co/t/australian-datacenter/176499 "2019-04-30T15:25:25Z")

</div>

We are evaluating Site search for clients based in Australia. Is the managed Site search (Swiftype) located in Australia? We would like to minimise latency. Thanks!

---

## [Dashboard wide border after Kibana upgrade](https://discuss.elastic.co/t/dashboard-wide-border-after-kibana-upgrade/147570)

<div class="topic-metadata">

**Author:** [@gregpaskal](https://discuss.elastic.co/u/gregpaskal)\
**Replies:** 3\
**Last updated:** [September 7, 2018, 1:32pm UTC](https://discuss.elastic.co/t/dashboard-wide-border-after-kibana-upgrade/147570 "2018-09-07T13:32:03Z")

</div>

Kibana community, We just upgraded from Kibana 5.x to 6.3.1. After the upgrade, I noticed a wide, white border between all my visualizations on my dashboards. Does anyone know how to resolve this problem? Here is an ex…

---

## [Creating a VM Status Table - Visualization](https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775)

<div class="topic-metadata">

**Author:** [@stevenmarrocco](https://discuss.elastic.co/u/stevenmarrocco)\
**Replies:** 3\
**Last updated:** [August 28, 2018, 1:28pm UTC](https://discuss.elastic.co/t/creating-a-vm-status-table-visualization/144775 "2018-08-28T13:28:06Z")

</div>

I'm trying to create a status table dasboard. This table will consist of the following columns: Process ID | Next Schedule Run | VM Status | Process Status | Reasonable Duration (Will require some logic) The columns wi…

---

## [Invalid field format when writing data to influxdb from csv file using logstash-output-plugin](https://discuss.elastic.co/t/invalid-field-format-when-writing-data-to-influxdb-from-csv-file-using-logstash-output-plugin/135829)

<div class="topic-metadata">

**Author:** [@ebueno](https://discuss.elastic.co/u/ebueno)\
**Replies:** 0\
**Last updated:** [June 14, 2018, 5:07am UTC](https://discuss.elastic.co/t/invalid-field-format-when-writing-data-to-influxdb-from-csv-file-using-logstash-output-plugin/135829 "2018-06-14T05:07:24Z")

</div>

Hi there! I am trying to get vmstat output (in CSV format) and load the data into influxdb using logstash and logstash-output-plugin, but am getting error "invalid field format" when writing data to influxdb. See detail…

---

## [Fluent parse error, original data now in message field: undefined method merge for nil:NilClass](https://discuss.elastic.co/t/fluent-parse-error-original-data-now-in-message-field-undefined-method-merge-for-nil-nilclass/121343)

<div class="topic-metadata">

**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\
**Replies:** 0\
**Last updated:** [February 24, 2018, 5:11pm UTC](https://discuss.elastic.co/t/fluent-parse-error-original-data-now-in-message-field-undefined-method-merge-for-nil-nilclass/121343 "2018-02-24T17:11:21Z")

</div>

Привет всем! При обновлении td-agent с 2.3.4 до 2.3.6 перестали поступать логи в elasticsearch. Logstash ругается на \[2018-02-24T19:28:04,478\]\[ERROR\]\[logstash.codecs.fluent \] Fluent parse error, original data now i…

---

## [How to stop alert with another solution?](https://discuss.elastic.co/t/how-to-stop-alert-with-another-solution/93896)

<div class="topic-metadata">

**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\
**Replies:** 3\
**Last updated:** [July 28, 2017, 7:20am UTC](https://discuss.elastic.co/t/how-to-stop-alert-with-another-solution/93896 "2017-07-28T07:20:59Z")

</div>

HI, I having a question about stop alert. Example Alerting PUT \_xpack/watcher/watch/mem\_\_warning And how to stop it without using code ? thanks.

---

## [Version Specific Sense Plugin](https://discuss.elastic.co/t/version-specific-sense-plugin/59535)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [September 1, 2016, 5:50pm UTC](https://discuss.elastic.co/t/version-specific-sense-plugin/59535 "2016-09-01T17:50:48Z")

</div>

Hi, Where can I download the version of sense appropriate for kibana 4.4.2? The plugin install downloads the latest which isn't what I believe I need... Also, which sense version is required for kibana 4.4.2? Regards…

---

## [File beat reading data from rotated File not in prospect](https://discuss.elastic.co/t/file-beat-reading-data-from-rotated-file-not-in-prospect/47400)

<div class="topic-metadata">

**Author:** [@Rachit\_Puri](https://discuss.elastic.co/u/Rachit_Puri)\
**Replies:** 3\
**Last updated:** [April 15, 2016, 10:38am UTC](https://discuss.elastic.co/t/file-beat-reading-data-from-rotated-file-not-in-prospect/47400 "2016-04-15T10:38:39Z")

</div>

I am using two filebeat instance to dump logs from my application server. One dumps the accessLog and the other dumps the tomcat logs. My pipeline is Filebeat - Logstash - ElasticSearch. Application logs have rotation p…

[Previous page](https://discuss.elastic.co/top.md?page=1373&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1375&per_page=50&period=all)
