# Top **URL:** https://discuss.elastic.co/top.md?page=1391&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1392 --- ## ['Cannot find /home/node/.rally/benchmarks/data/http\_logs/documents-191998.json.bz2. Please disable offline mode and retry again.'](https://discuss.elastic.co/t/cannot-find-home-node-rally-benchmarks-data-http-logs-documents-191998-json-bz2-please-disable-offline-mode-and-retry-again/226314)
**Author:** [@xilei](https://discuss.elastic.co/u/xilei)\ **Replies:** 5\ **Last updated:** [April 9, 2020, 8:23am UTC](https://discuss.elastic.co/t/cannot-find-home-node-rally-benchmarks-data-http-logs-documents-191998-json-bz2-please-disable-offline-mode-and-retry-again/226314 "2020-04-09T08:23:53Z")
Hi, When i run ./esrally race --pipeline=benchmark-only --target-hosts=192.168.2.28:9200 --offline --track=http\_logs --challenge=append-no-conflicts-index-only --distribution-version=5.6.10, show error as \[ERROR\] Cannot… --- ## [Logstash host field set as docker bridge network gateway](https://discuss.elastic.co/t/logstash-host-field-set-as-docker-bridge-network-gateway/196395)
**Author:** [@dcmott86](https://discuss.elastic.co/u/dcmott86)\ **Replies:** 5\ **Last updated:** [August 23, 2019, 6:31pm UTC](https://discuss.elastic.co/t/logstash-host-field-set-as-docker-bridge-network-gateway/196395 "2019-08-23T18:31:07Z")
Running logstash 7.3.0 as a docker container. I have a UDP input receiving messages from from some Cisco ASA's and the host field is populating with the docker bridge network gateway address vs the firewall's IP. Ruby … --- ## [Grid layout sizing changed after upgrade from 6.2.4 to 6.7.1](https://discuss.elastic.co/t/grid-layout-sizing-changed-after-upgrade-from-6-2-4-to-6-7-1/178089)
**Author:** [@jmcclure](https://discuss.elastic.co/u/jmcclure)\ **Replies:** 5\ **Last updated:** [April 25, 2019, 2:07pm UTC](https://discuss.elastic.co/t/grid-layout-sizing-changed-after-upgrade-from-6-2-4-to-6-7-1/178089 "2019-04-25T14:07:29Z")
I have upgraded Kibana from 6.2.4 to 6.7.1 and find that dashboard layouts have changed (a squished visualization). As I understand it, the Kibana grid is now more fine grained than before. Other than go through the ex… --- ## [Graphical spans?](https://discuss.elastic.co/t/graphical-spans/146777)
**Author:** [@Jas\_Ahluwalia](https://discuss.elastic.co/u/Jas_Ahluwalia)\ **Replies:** 5\ **Last updated:** [September 10, 2018, 4:25pm UTC](https://discuss.elastic.co/t/graphical-spans/146777 "2018-09-10T16:25:47Z")
Hi, I'd like to trace what my microservices are doing and have a visual representation of a call, much like zipkin. MIcroserviceA/hello takes 50 ms, but 20 of those were spent in an external http call to MicroserviceB/… --- ## [Why did Elasticsearch automatically rename all of my indices?](https://discuss.elastic.co/t/why-did-elasticsearch-automatically-rename-all-of-my-indices/122301)
**Author:** [@daved](https://discuss.elastic.co/u/daved)\ **Replies:** 5\ **Last updated:** [March 3, 2018, 12:59am UTC](https://discuss.elastic.co/t/why-did-elasticsearch-automatically-rename-all-of-my-indices/122301 "2018-03-03T00:59:09Z")
Hi, I have been trying to upgrade from 2.x to 6.x and am seeing very strange behavior. Most recently, I noticed that elasticsearch has renamed my indices from my human-readable names to some random uncomprehendable name… --- ## [Kibana degraded, available on Kubernetes](https://discuss.elastic.co/t/kibana-degraded-available-on-kubernetes/327059)
**Author:** [@PustyB](https://discuss.elastic.co/u/PustyB)\ **Replies:** 3\ **Last updated:** [March 19, 2023, 11:26pm UTC](https://discuss.elastic.co/t/kibana-degraded-available-on-kubernetes/327059 "2023-03-19T23:26:58Z")
Hey I've had a problem with Kibana for a while now. I installed Elastic Stack on kubernetes using the operator. At first everything was fine, however, since some time in the kibana logs it started throwing such errors: … --- ## [Uptime showing no uptime moniters found even though can see heartbeat data in discovery tab](https://discuss.elastic.co/t/uptime-showing-no-uptime-moniters-found-even-though-can-see-heartbeat-data-in-discovery-tab/233954)
**Author:** [@Abhilash1](https://discuss.elastic.co/u/Abhilash1)\ **Replies:** 3\ **Last updated:** [May 23, 2020, 9:22am UTC](https://discuss.elastic.co/t/uptime-showing-no-uptime-moniters-found-even-though-can-see-heartbeat-data-in-discovery-tab/233954 "2020-05-23T09:22:21Z")
I recently installed logstash , kibana and elasticsearch 7.7 and currently running them inside a docker container , I have manually configured heartbeat on a remote machine and I can verify heartbeat is sending the data … --- ## [Visualization line : divide Sum](https://discuss.elastic.co/t/visualization-line-divide-sum/219641)
**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 3:04pm UTC](https://discuss.elastic.co/t/visualization-line-divide-sum/219641 "2020-02-18T15:04:07Z")
Hello I want divide a Sum on "Visualization Line" graph Sum is Bytes and I want Sum in Megabytes If someone have a solution ? Thanks --- ## [APM Tracer doesn't show Python code time](https://discuss.elastic.co/t/apm-tracer-doesnt-show-python-code-time/210063)
**Author:** [@ChillarAnand](https://discuss.elastic.co/u/ChillarAnand)\ **Replies:** 3\ **Last updated:** [December 1, 2019, 9:21pm UTC](https://discuss.elastic.co/t/apm-tracer-doesnt-show-python-code-time/210063 "2019-12-01T21:21:55Z")
When looking at trace, APM shows a timeline only DB queries but not for Python code. Is it possible to show this timeline for Python code as well? Otherwise, how is it possible to find the slowest part of the code. --- ## [Elasticsearch - How to list exact match at the top](https://discuss.elastic.co/t/elasticsearch-how-to-list-exact-match-at-the-top/151251)
**Author:** [@somethingyouwant](https://discuss.elastic.co/u/somethingyouwant)\ **Replies:** 3\ **Last updated:** [October 10, 2018, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-list-exact-match-at-the-top/151251 "2018-10-10T08:07:58Z")
I am searching the word "Adana" in Elasticsearch and want it to come at top because it is the exact word, but it doesn't. Instead "Bilmemne Adana Otel" comes at top. Normal query doesn't do any good so I tried the bool… --- ## [Visualize: "field" is a required parameter](https://discuss.elastic.co/t/visualize-field-is-a-required-parameter/134377)
**Author:** [@Jukocross](https://discuss.elastic.co/u/Jukocross)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 1:08am UTC](https://discuss.elastic.co/t/visualize-field-is-a-required-parameter/134377 "2018-06-05T01:08:47Z")
Hi, i understand that this is a known problem. I'm really new to ELKstack and would like to receive helps on this matter. Error: TypeError: "field" is a required parameter at FieldParamTypeProvider.FieldParamType.writ… --- ## [Display an xml attribute value using xml filter](https://discuss.elastic.co/t/display-an-xml-attribute-value-using-xml-filter/38104)
**Author:** [@Sudeesh](https://discuss.elastic.co/u/Sudeesh)\ **Replies:** 3\ **Last updated:** [December 30, 2015, 8:40am UTC](https://discuss.elastic.co/t/display-an-xml-attribute-value-using-xml-filter/38104 "2015-12-30T08:40:42Z")
Here is the xml file, i want to print the attribute value name from class tag. And my conf file is below input { file { path=\>\["C:/logstash-2.1.1/Data/Te… --- ## [log4j:WARN](https://discuss.elastic.co/t/log4j-warn/37125)
**Author:** [@Jose\_Coutin](https://discuss.elastic.co/u/Jose_Coutin)\ **Replies:** 3\ **Last updated:** [December 14, 2015, 6:45pm UTC](https://discuss.elastic.co/t/log4j-warn/37125 "2015-12-14T18:45:42Z")
Bonjour, Des messages d'erreur log4j apparaissent lorsque je tape certaines commandes dans la console. Par exemple dés que j'utilise la commande plugin bin/plugin list log4j:WARN No appenders c… --- ## [Does client verification require host based certificates?](https://discuss.elastic.co/t/does-client-verification-require-host-based-certificates/230243)
**Author:** [@sjne](https://discuss.elastic.co/u/sjne)\ **Replies:** 2\ **Last updated:** [April 28, 2020, 10:47pm UTC](https://discuss.elastic.co/t/does-client-verification-require-host-based-certificates/230243 "2020-04-28T22:47:53Z")
When using ssl\_verify\_mode: force\_peer for client verification with Filebeat, does the client certificate need to be issued to the specific host name/IP? I.e the CN is the host name of the node. For example can I use (i… --- ## [Logstash set up issue](https://discuss.elastic.co/t/logstash-set-up-issue/300160)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 4\ **Last updated:** [March 24, 2022, 6:06am UTC](https://discuss.elastic.co/t/logstash-set-up-issue/300160 "2022-03-24T06:06:33Z")
Hello, I am struggling with my logstash set up, which doesn't seem to be connected to the ELK stack. I cannot see Logstash under Stack Monitoring: However, I can see my custom log data which is ingested using logst… --- ## [Differences in values between Dev Tools SQL and Visualization](https://discuss.elastic.co/t/differences-in-values-between-dev-tools-sql-and-visualization/272955)
**Author:** [@Christopher\_Mello](https://discuss.elastic.co/u/Christopher_Mello)\ **Replies:** 4\ **Last updated:** [May 13, 2021, 9:44pm UTC](https://discuss.elastic.co/t/differences-in-values-between-dev-tools-sql-and-visualization/272955 "2021-05-13T21:44:57Z")
Hi all, I am new to elasticsearch/kibana but am having issues matching out the figures between two seemingly similar queries in the Kibana's Dev Tools SQL function and Kibana's visualization tool. The figures are extrem… --- ## [Index not rollover when the date changes](https://discuss.elastic.co/t/index-not-rollover-when-the-date-changes/272385)
**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\ **Replies:** 4\ **Last updated:** [May 10, 2021, 1:37pm UTC](https://discuss.elastic.co/t/index-not-rollover-when-the-date-changes/272385 "2021-05-10T13:37:33Z")
Hi Team With ILM policy, we can do rollover using different parameters such as size/document\_count/age. This works fine and if we create first index with date-math, we are able to generate date-wise index. But the prob… --- ## [Elastic Cloud Heroku REST not allowed](https://discuss.elastic.co/t/elastic-cloud-heroku-rest-not-allowed/68138)
**Author:** [@Shirsendu\_Karmakar](https://discuss.elastic.co/u/Shirsendu_Karmakar)\ **Replies:** 4\ **Last updated:** [December 6, 2016, 9:45am UTC](https://discuss.elastic.co/t/elastic-cloud-heroku-rest-not-allowed/68138 "2016-12-06T09:45:19Z")
Hii, I am getting the following error while trying to setup a RoR application. What am I missing? Elasticsearch::Transport::Transport::Errors::Unauthorized: \[401\] {"error":{"root\_cause":\[{"type":"security\_exception",… --- ## [BULK Indexing using JAVA API](https://discuss.elastic.co/t/bulk-indexing-using-java-api/32614)
**Author:** [@rohitbordia](https://discuss.elastic.co/u/rohitbordia)\ **Replies:** 4\ **Last updated:** [October 20, 2015, 11:13pm UTC](https://discuss.elastic.co/t/bulk-indexing-using-java-api/32614 "2015-10-20T23:13:26Z")
Guys, We are working on a POC for indexing 10 million plus document and also a delta update which might have 2-3 milliion data updates. We are seeing connection reset error between client and cluster and some times we ge… --- ## [Performance et limite des Query](https://discuss.elastic.co/t/performance-et-limite-des-query/26069)
**Author:** [@Fnizou](https://discuss.elastic.co/u/Fnizou)\ **Replies:** 4\ **Last updated:** [July 22, 2015, 1:16pm UTC](https://discuss.elastic.co/t/performance-et-limite-des-query/26069 "2015-07-22T13:16:33Z")
Bonjour, en utilisant une query de type : { "query": { "bool": { "must\_not": \[ { "terms": { "\_id": \[ "1", "2", "3" \] } } } } } Comb… --- ## [Timelion - metric=median query?](https://discuss.elastic.co/t/timelion-metric-median-query/240727)
**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 4:05am UTC](https://discuss.elastic.co/t/timelion-metric-median-query/240727 "2020-07-15T04:05:05Z")
I am using timelion to do sum and averages, but is there an internal metric function to determine median? example: .es(offset=-24h,index=system\_stats\*,interval=5m, timefield='@timestamp', metric=avg:downnodes, q=island… --- ## [ELK cluster installation on 3 nodes + 1 node for Kibana only](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 3:59am UTC](https://discuss.elastic.co/t/elk-cluster-installation-on-3-nodes-1-node-for-kibana-only/226966 "2020-04-10T03:59:53Z")
Dears, I need your help and opinions in my case. I've got a request for installation ELK Cluster in such configuration: 3 x nodes for Elasticsearch, each node will be master/data/ingest node, on each node will be inst… --- ## [Kibana 7.3 - Default Dashboard for IIS - 3 of 5 Elements Have Visualization Errors](https://discuss.elastic.co/t/kibana-7-3-default-dashboard-for-iis-3-of-5-elements-have-visualization-errors/200080)
**Author:** [@antonio84](https://discuss.elastic.co/u/antonio84)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 2:26pm UTC](https://discuss.elastic.co/t/kibana-7-3-default-dashboard-for-iis-3-of-5-elements-have-visualization-errors/200080 "2019-09-19T14:26:50Z")
Fresh install ELK Stack v7.3, with Filebeat agent on a Win 2012 Server. I'm using the \[Filebeat IIS\] Access and Error Logs ECS dashboard, and each time it loads, I get three errors about visualization. Two of the Eleme… --- ## [Score 1 returned when querying geo\_point with value of NULL](https://discuss.elastic.co/t/score-1-returned-when-querying-geo-point-with-value-of-null/183048)
**Author:** [@stan\_ml6](https://discuss.elastic.co/u/stan_ml6)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 2:12pm UTC](https://discuss.elastic.co/t/score-1-returned-when-querying-geo-point-with-value-of-null/183048 "2019-06-12T14:12:24Z")
ElasticSearch returns a score of 1 when querying locations that have a NULL value for their location. While I would expect that when a location is NULL that the scoring function returns a value of 0. Below I create an E… --- ## [構造的なデータの取り込みについて](https://discuss.elastic.co/t/topic/104866)
**Author:** [@e5da94b0de01a92c429f](https://discuss.elastic.co/u/e5da94b0de01a92c429f)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 8:14am UTC](https://discuss.elastic.co/t/topic/104866 "2017-10-25T08:14:29Z")
お世話になります。 フォーラムへは初投稿です。 RDBにあるデータをElasticsearchへ取り込みたいと考えています。 構造を保ったまま取り込むか、フラットなテキストにして取り込むかの判断をしたく、 メリット・デメリットなどの判断材料がほしいのです。 大まかな現状としては下記です。 ・現時点では、分析ではなく検索利用を想定しています。（今後、分析目的の利用もあるかもしれません） ・構造データとしてはNested Oj… --- ## [Winlogbeat event\_id](https://discuss.elastic.co/t/winlogbeat-event-id/88209)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [June 5, 2017, 11:54pm UTC](https://discuss.elastic.co/t/winlogbeat-event-id/88209 "2017-06-05T23:54:22Z")
Hi there, Is there a way to include meaningful descriptions to each of the event\_ids that are being ingested into logstash? When I use the event\_id to display top five for example I get the actual Event ID from Windows … --- ## [Kibana elasticsearch\_url](https://discuss.elastic.co/t/kibana-elasticsearch-url/24048)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [June 21, 2015, 7:21pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-url/24048 "2015-06-21T19:21:38Z")
I have a production ELK environment and I want to have multiple kibana search load balancers. Right now I have two nodes set to not become master and not have data. I have places those 2 IP's in their own domain but wh… --- ## [How to measure daily log volume (count and size) in Elasticsearch?](https://discuss.elastic.co/t/how-to-measure-daily-log-volume-count-and-size-in-elasticsearch/384485)
**Author:** [@gueguet57](https://discuss.elastic.co/u/gueguet57)\ **Replies:** 3\ **Last updated:** [January 13, 2026, 3:30pm UTC](https://discuss.elastic.co/t/how-to-measure-daily-log-volume-count-and-size-in-elasticsearch/384485 "2026-01-13T15:30:00Z")
Hi Elastic community, I’m looking for a reliable way to track the amount of logs we are receiving in our Elasticsearch/ELK stack on a daily basis. Specifically, I’d like to know: The number of logs ingested per day. … --- ## [Elasticsearch Query for good title keyword results](https://discuss.elastic.co/t/elasticsearch-query-for-good-title-keyword-results/191812)
**Author:** [@SimonEritsch](https://discuss.elastic.co/u/SimonEritsch)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-query-for-good-title-keyword-results/191812 "2019-07-23T14:05:02Z")
We have a elasticsearch index containing a catalog of products, that we want to search by title and description. We want it to have the following constraints: We are searching title and description for occurences (mat… --- ## [Logstash is replacing : with =\> How can I get : on the output](https://discuss.elastic.co/t/logstash-is-replacing-with-how-can-i-get-on-the-output/186433)
**Author:** [@Raj\_Sekhar](https://discuss.elastic.co/u/Raj_Sekhar)\ **Replies:** 7\ **Last updated:** [June 19, 2019, 1:15pm UTC](https://discuss.elastic.co/t/logstash-is-replacing-with-how-can-i-get-on-the-output/186433 "2019-06-19T13:15:56Z")
Logstash is replacing : with =\> How can I get : on the output My input file: { "customfield\_10150": \[ {"key": "caanyimi", "displayName": "Anyimi, Charles"} \] } Output: "name""=\>""caanyimi"", ""emailAddress""=\>"… --- ## [Manual dashboard refresh on Kibana](https://discuss.elastic.co/t/manual-dashboard-refresh-on-kibana/156814)
**Author:** [@Stuart\_Kenworthy](https://discuss.elastic.co/u/Stuart_Kenworthy)\ **Replies:** 1\ **Last updated:** [November 15, 2018, 9:10am UTC](https://discuss.elastic.co/t/manual-dashboard-refresh-on-kibana/156814 "2018-11-15T09:10:04Z")
I have been unable to manually refresh the dashboard view in Kibana since installing 6.4, maybe earlier but not much. Previously once the dashboard was loaded you could manually refresh the results by clicking on the sp… --- ## [Bytes formating in kibana](https://discuss.elastic.co/t/bytes-formating-in-kibana/102094)
**Author:** [@aboullaite](https://discuss.elastic.co/u/aboullaite)\ **Replies:** 1\ **Last updated:** [September 29, 2017, 8:22am UTC](https://discuss.elastic.co/t/bytes-formating-in-kibana/102094 "2017-09-29T08:22:50Z")
Hi, Actually I know that's byte formatting is possible through kibana interface. However my question is a bit different since I'm getting some metrics in Kb and while using kibana bytes formation it consider it as bytes… --- ## [Ability to remove tags field from output broke in 5.0.1 and above](https://discuss.elastic.co/t/ability-to-remove-tags-field-from-output-broke-in-5-0-1-and-above/69206)
**Author:** [@ronnocol](https://discuss.elastic.co/u/ronnocol)\ **Replies:** 1\ **Last updated:** [December 16, 2016, 4:30pm UTC](https://discuss.elastic.co/t/ability-to-remove-tags-field-from-output-broke-in-5-0-1-and-above/69206 "2016-12-16T16:30:03Z")
I'm trying to output to a very picky HTTP API, and the existence of a field in the JSON that is posted causes it confusion. I originally did the integration work with 5.0.0 (latest at the time) but then when we went to d… --- ## [No hit using scan/scroll with has\_parent filter](https://discuss.elastic.co/t/no-hit-using-scan-scroll-with-has-parent-filter/15143)
**Author:** [@Jean\_Baptiste\_Lievre](https://discuss.elastic.co/u/Jean_Baptiste_Lievre)\ **Replies:** 7\ **Last updated:** [January 15, 2014, 9:32am UTC](https://discuss.elastic.co/t/no-hit-using-scan-scroll-with-has-parent-filter/15143 "2014-01-15T09:32:38Z")
Hi folks, I use a parent/child mapping configuration which works flawlessly with "classic" search requests, e.g using has\_parent to find child documents with criteria on the parent documents. I am trying to get… --- ## [Jvm.dll crashes](https://discuss.elastic.co/t/jvm-dll-crashes/21081)
**Author:** [@Vinayak\_Bhosale](https://discuss.elastic.co/u/Vinayak_Bhosale)\ **Replies:** 0\ **Last updated:** [December 4, 2014, 12:31pm UTC](https://discuss.elastic.co/t/jvm-dll-crashes/21081 "2014-12-04T12:31:18Z")
I have a test cluster with three nodes. Each node has 4 gigs of ram. What I see is, jvm on each nodes crashes once every day. Following is the event log message: Faulting application name: elasticsearch-service-x6… --- ## [Discover Results Do Not Match Visualization Results](https://discuss.elastic.co/t/discover-results-do-not-match-visualization-results/339845)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 6\ **Last updated:** [August 11, 2023, 9:55pm UTC](https://discuss.elastic.co/t/discover-results-do-not-match-visualization-results/339845 "2023-08-11T21:55:38Z")
Hi, Querying in Discover gives some number of results: The same query in a visualization isn't giving any results: Do both of these use the index pattern, and shouldn't both get the same query results for the sa… --- ## [Ruby code include?](https://discuss.elastic.co/t/ruby-code-include/340336)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 6\ **Last updated:** [August 11, 2023, 5:48am UTC](https://discuss.elastic.co/t/ruby-code-include/340336 "2023-08-11T05:48:03Z")
Hi All, I have this code that used to be working in ELK 7.12 now that I've upgrade to 8.7.1 it gives a weird error in logstash code =\> " ip\_src = Array.new ip\_… --- ## [How many days the data can be placed in the one index of ES?](https://discuss.elastic.co/t/how-many-days-the-data-can-be-placed-in-the-one-index-of-es/336641)
**Author:** [@merson](https://discuss.elastic.co/u/merson)\ **Replies:** 6\ **Last updated:** [June 26, 2023, 7:57am UTC](https://discuss.elastic.co/t/how-many-days-the-data-can-be-placed-in-the-one-index-of-es/336641 "2023-06-26T07:57:36Z")
If per day 4gb size logs from logstash in one index then how many days it will be stored in ES? --- ## [Machine learning typical value not set at the moment of firing watcher Part 2](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher-part-2/246933)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 6\ **Last updated:** [September 4, 2020, 7:57pm UTC](https://discuss.elastic.co/t/machine-learning-typical-value-not-set-at-the-moment-of-firing-watcher-part-2/246933 "2020-09-04T19:57:16Z")
Hi, this thread is a continuation of the previous thread which was closed due to inactivity and can be found here I urge you to visit it. Back at that time, I couldn't provide more info (watcher execution data, etc.) b… --- ## [Mutate filter unable to convert date to string](https://discuss.elastic.co/t/mutate-filter-unable-to-convert-date-to-string/142518)
**Author:** [@ravian100](https://discuss.elastic.co/u/ravian100)\ **Replies:** 6\ **Last updated:** [August 6, 2018, 6:33pm UTC](https://discuss.elastic.co/t/mutate-filter-unable-to-convert-date-to-string/142518 "2018-08-06T18:33:05Z")
I have searched a lot regarding this issue and now I am posting this problem. here is my configuration file. input { file { path =\> "/home/Kunden2.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } … --- ## [Mask presentation in Kibana](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 6\ **Last updated:** [July 23, 2017, 11:38pm UTC](https://discuss.elastic.co/t/mask-presentation-in-kibana/94031 "2017-07-23T23:38:47Z")
Hi, I have a mac number which I present in Kibana after parsing in Logstash, and the value looks like that: 20%3A10%3A7a%3A53%3A0e%3A63 I would like to replace the "%" by ":" meaning the presentation in kibana t… --- ## [Is there a reason not to have logstash on each host](https://discuss.elastic.co/t/is-there-a-reason-not-to-have-logstash-on-each-host/74076)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 6\ **Last updated:** [February 6, 2017, 10:34pm UTC](https://discuss.elastic.co/t/is-there-a-reason-not-to-have-logstash-on-each-host/74076 "2017-02-06T22:34:27Z")
Hello, i am curious if there is a reason that I should use file beat to ship the logs to a logstash agent rather than having a logstash agent on each host and eliminating the middle man? Thanks, Kenneth --- ## [Proper cluster setup](https://discuss.elastic.co/t/proper-cluster-setup/8492)
**Author:** [@GX1](https://discuss.elastic.co/u/GX1)\ **Replies:** 6\ **Last updated:** [August 1, 2012, 3:13am UTC](https://discuss.elastic.co/t/proper-cluster-setup/8492 "2012-08-01T03:13:14Z")
Hi All I been trying to get this setup working for some time but cant seen to get it right, I have a problem with the terminology used and often get mixed up what is needed. My configuration is as follows 4 … --- ## [Question on Analyzer Not Working](https://discuss.elastic.co/t/question-on-analyzer-not-working/6415)
**Author:** [@Scott\_Decker](https://discuss.elastic.co/u/Scott_Decker)\ **Replies:** 6\ **Last updated:** [January 19, 2012, 4:48pm UTC](https://discuss.elastic.co/t/question-on-analyzer-not-working/6415 "2012-01-19T16:48:23Z")
Hey All, have a quick analyzer question. We have an index analyzer setup like this: index: analysis: analyzer: pipeDelim: tokenizer: pattern pattern: | … --- ## [KIBANA FRONTEND VISUAL FEEDBACK](https://discuss.elastic.co/t/kibana-frontend-visual-feedback/342141)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [September 1, 2023, 5:45pm UTC](https://discuss.elastic.co/t/kibana-frontend-visual-feedback/342141 "2023-09-01T17:45:16Z")
Hello ElasticTeam, This is ingeneral feedback after working with two customers on elk stack usecases majorly with beats,kibana and logstash. In my opinion there is scope of lot of improvement to provide many visualizat… --- ## [RUM trace through iframe](https://discuss.elastic.co/t/rum-trace-through-iframe/313099)
**Author:** [@soandosps](https://discuss.elastic.co/u/soandosps)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 3:01pm UTC](https://discuss.elastic.co/t/rum-trace-through-iframe/313099 "2022-08-28T15:01:01Z")
I am trying to get the RUM JS agent to follow through iframes, and I am running into some difficulties. As far as I can tell, RUM does not work by default on resources, so something like \