# Top **URL:** https://discuss.elastic.co/top.md?page=1393&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1394 --- ## [Watcher Parse Exception Unknown Input Type Condition](https://discuss.elastic.co/t/watcher-parse-exception-unknown-input-type-condition/150242)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 11:49pm UTC](https://discuss.elastic.co/t/watcher-parse-exception-unknown-input-type-condition/150242 "2018-09-27T23:49:29Z")
When trying to create a watch I'm receiving: Watcher: \[parse\_exception\] could not parse input for watch \[watch name\]. unknown input type \[condition\] I have put the below in a JSON formatter to help ensure validity. My… --- ## [Elasticsearch 6.x hardware sizing for an enterprise deployment](https://discuss.elastic.co/t/elasticsearch-6-x-hardware-sizing-for-an-enterprise-deployment/133816)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [May 30, 2018, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-hardware-sizing-for-an-enterprise-deployment/133816 "2018-05-30T10:00:47Z")
Hey Guys, Have searched fully in Elastic portal and didn't find any document regarding hardware sizing of elasticsearch. We are planning to deploy elasticsearch on an enterprise level which includes around 4000+ server… --- ## [Time based Index pattern expansion with aliases](https://discuss.elastic.co/t/time-based-index-pattern-expansion-with-aliases/78133)
**Author:** [@tktr](https://discuss.elastic.co/u/tktr)\ **Replies:** 1\ **Last updated:** [March 10, 2017, 7:44pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-expansion-with-aliases/78133 "2017-03-10T19:44:57Z")
I'm currently experiencing an issue with Kibana using time based index patterns with aliases. Basically, I have time based indices which are rotated daily in the form foo-YYYY.MM.DD . Each index uses filtered aliases bar … --- ## [FileBeat problem while conencting to logstash](https://discuss.elastic.co/t/filebeat-problem-while-conencting-to-logstash/44676)
**Author:** [@Muddassir](https://discuss.elastic.co/u/Muddassir)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 12:01pm UTC](https://discuss.elastic.co/t/filebeat-problem-while-conencting-to-logstash/44676 "2016-03-17T12:01:20Z")
Hi concerns. I am having the following issue in ELK setup. can anyone help me. Thanks. /etc/init.d/filebeat start Starting filebeat: 2016/03/17 08:43:59.371599 transport.go:125: ERR SSL client failed to connect with… --- ## [OLAP analytics in Elasticsearch](https://discuss.elastic.co/t/olap-analytics-in-elasticsearch/19820)
**Author:** [@Maaz\_Bin\_Tariq](https://discuss.elastic.co/u/Maaz_Bin_Tariq)\ **Replies:** 1\ **Last updated:** [September 18, 2014, 8:47am UTC](https://discuss.elastic.co/t/olap-analytics-in-elasticsearch/19820 "2014-09-18T08:47:50Z")
I am working with Analytic of events, I use hadoop to process the logs and store some results in Mysql. This did not work now due to scalability issues as logs are keep coming daily. We need to show stats per year… --- ## [Ports for Java client?](https://discuss.elastic.co/t/ports-for-java-client/6358)
**Author:** [@Frank\_LaRosa](https://discuss.elastic.co/u/Frank_LaRosa)\ **Replies:** 1\ **Last updated:** [January 12, 2012, 10:48am UTC](https://discuss.elastic.co/t/ports-for-java-client/6358 "2012-01-12T10:48:23Z")
Hi, I'm confused about which port the server listens on. When I test it from the command line via curl, I use port 9200. But in the Java examples, the Java client seems to be connecting on port 9300. There are also… --- ## [Logstash configuration best practices](https://discuss.elastic.co/t/logstash-configuration-best-practices/271051)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 3\ **Last updated:** [April 27, 2021, 7:09am UTC](https://discuss.elastic.co/t/logstash-configuration-best-practices/271051 "2021-04-27T07:09:17Z")
Hi everyone, I would like to know a bit more about logstash best practices I need to setup a monitoring system for about 20 servers at the moment and more to come in the future. Onto these servers, i'll have multiple … --- ## [Prettify Watcher JSON Response](https://discuss.elastic.co/t/prettify-watcher-json-response/250947)
**Author:** [@Porton](https://discuss.elastic.co/u/Porton)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 8:31am UTC](https://discuss.elastic.co/t/prettify-watcher-json-response/250947 "2020-10-08T08:31:38Z")
What is the best way to pretty JSON response from Elasticsearch Watch ? Currently doing webhook to MS Teams, body": "{ title: 'Server Metrics Alert', text: '{{#toJson}}ctx.payload.hits{{/toJson}}' }", Everything works… --- ## [Cannot get Filebeat to stream](https://discuss.elastic.co/t/cannot-get-filebeat-to-stream/216529)
**Author:** [@arutale](https://discuss.elastic.co/u/arutale)\ **Replies:** 3\ **Last updated:** [January 28, 2020, 8:45am UTC](https://discuss.elastic.co/t/cannot-get-filebeat-to-stream/216529 "2020-01-28T08:45:23Z")
I'm trying out elastic.co I have installed Beats on my server and i'm trying to configure the filebeat.yml file. Under cloud, i have applied the configuration following these instructions: Configure the output for the… --- ## [Painless script query giving error for "message" field and working fine for other fields in filebeats](https://discuss.elastic.co/t/painless-script-query-giving-error-for-message-field-and-working-fine-for-other-fields-in-filebeats/161981)
**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\ **Replies:** 3\ **Last updated:** [December 26, 2018, 9:36am UTC](https://discuss.elastic.co/t/painless-script-query-giving-error-for-message-field-and-working-fine-for-other-fields-in-filebeats/161981 "2018-12-26T09:36:01Z")
I have 2 fields of string type in filebeat index: \_index = kibana\_sample\_data\_flights (This field is marked aggregatable by default) message : 2018-12-21 02:31:31,792;INFO ;XSYD.2.5.0.1a5e8-uye1-9d87-8744-5343db… --- ## [Percentage of docs which contain keyword in array field](https://discuss.elastic.co/t/percentage-of-docs-which-contain-keyword-in-array-field/140761)
**Author:** [@Jasper\_Timm](https://discuss.elastic.co/u/Jasper_Timm)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 1:12pm UTC](https://discuss.elastic.co/t/percentage-of-docs-which-contain-keyword-in-array-field/140761 "2018-08-09T13:12:02Z")
Hi there, I have data with a field with values that are an array of strings. For each unique string, I'm trying to get it's percentage for the total doc count in the index, displayed as a bar graph for each keyword. i.… --- ## [Yarn start not working](https://discuss.elastic.co/t/yarn-start-not-working/136750)
**Author:** [@alexv9](https://discuss.elastic.co/u/alexv9)\ **Replies:** 3\ **Last updated:** [June 20, 2018, 6:55pm UTC](https://discuss.elastic.co/t/yarn-start-not-working/136750 "2018-06-20T18:55:03Z")
Hi, Just yesterday yarn start was working perfectly when I needed to set up a development server from the master branch. Today for some reason it keeps failing with failed to watch files! Error: watch /home/user/kibana… --- ## [Can I only install X-Pack for Kinbana](https://discuss.elastic.co/t/can-i-only-install-x-pack-for-kinbana/102125)
**Author:** [@feijiangnan](https://discuss.elastic.co/u/feijiangnan)\ **Replies:** 3\ **Last updated:** [September 28, 2017, 11:11pm UTC](https://discuss.elastic.co/t/can-i-only-install-x-pack-for-kinbana/102125 "2017-09-28T23:11:26Z")
Hi there, I installed x-pack for Kibana, Elasticsearch and Logstash twice, and it messed up my ELK twice. To my scenario, I only need protect Kibana. Can I only install x-pack for Kibana to make user has to login? Reg… --- ## [Grok doesn't split fields properly](https://discuss.elastic.co/t/grok-doesnt-split-fields-properly/77047)
**Author:** [@kishorramanan](https://discuss.elastic.co/u/kishorramanan)\ **Replies:** 3\ **Last updated:** [March 3, 2017, 1:29am UTC](https://discuss.elastic.co/t/grok-doesnt-split-fields-properly/77047 "2017-03-03T01:29:51Z")
Log file: INFO 2017-02-24 14:25:12,612 ScriptEngines.java:191 - Loaded groovy ScriptEngine WARN 2017-02-24 14:25:12,814 DseSessionOpProcessor.java:295 - Exception processing a script on request \[RequestMessage{, mana… --- ## [Elasticsearch IoT interface for a beginner](https://discuss.elastic.co/t/elasticsearch-iot-interface-for-a-beginner/75291)
**Author:** [@Hardik](https://discuss.elastic.co/u/Hardik)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 7:02am UTC](https://discuss.elastic.co/t/elasticsearch-iot-interface-for-a-beginner/75291 "2017-02-16T07:02:02Z")
Hello Everyone, Our application is to store and visualize sensor data with arduino Wifi module and Elasticsearch+kibana. I am an electronics engineer with a little expertise in JSON, Java programming. I installed ES … --- ## [Logstash-Elasticsearch Output Using Templates](https://discuss.elastic.co/t/logstash-elasticsearch-output-using-templates/61160)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 3\ **Last updated:** [September 21, 2016, 6:09pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-using-templates/61160 "2016-09-21T18:09:54Z")
I have been wondering something about the "template" and "template\_overwrite" option in the elasticsearch output plugin for logstash. Because this is part of the output configuration, it should be invoked for every singl… --- ## [Unassigned Shards after After One of the Nodes Restart](https://discuss.elastic.co/t/unassigned-shards-after-after-one-of-the-nodes-restart/38124)
**Author:** [@abhishek\_ranjan](https://discuss.elastic.co/u/abhishek_ranjan)\ **Replies:** 3\ **Last updated:** [December 30, 2015, 8:01pm UTC](https://discuss.elastic.co/t/unassigned-shards-after-after-one-of-the-nodes-restart/38124 "2015-12-30T20:01:22Z")
Hi, I have set up a elasticsearch cluster over three machines . Elasticsearch Version : 1.7 elasticsearch1 elasticsearch2 elasticsearch3 Elastic picked elasticsearch1 as the master node.Now i restarted elasticsearch… --- ## [Elasticsearch custom analyzer not working](https://discuss.elastic.co/t/elasticsearch-custom-analyzer-not-working/32155)
**Author:** [@jinshui.tang](https://discuss.elastic.co/u/jinshui.tang)\ **Replies:** 3\ **Last updated:** [October 19, 2015, 2:00am UTC](https://discuss.elastic.co/t/elasticsearch-custom-analyzer-not-working/32155 "2015-10-19T02:00:29Z")
I am using elasticsearch as my search engine, I am now trying to create an custom analyzer to make the field value just lowercase. The following is my code: Create index and mapping create index with a custom analyze… --- ## [Import saved objects through API](https://discuss.elastic.co/t/import-saved-objects-through-api/315481)
**Author:** [@hemmerlin](https://discuss.elastic.co/u/hemmerlin)\ **Replies:** 2\ **Last updated:** [October 14, 2022, 4:00pm UTC](https://discuss.elastic.co/t/import-saved-objects-through-api/315481 "2022-10-14T16:00:32Z")
Hello, To summarize this post, I'm able to import Kibana saved objects using the web UI, but I face some issues importing them using the API. We use a dashboard.ndjson file which is the result of a saved object export … --- ## [SelectedFilter & ResetSearchButton](https://discuss.elastic.co/t/selectedfilter-resetsearchbutton/275284)
**Author:** [@mariobg](https://discuss.elastic.co/u/mariobg)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 7:24am UTC](https://discuss.elastic.co/t/selectedfilter-resetsearchbutton/275284 "2021-06-09T07:24:50Z")
Hello, is there some provision to make the a SelectedFilter components where the selected filters are easily seen and from where they can be deselected. And a ResetSearchButton component with which to clean all filters e… --- ## [ElasticSearch client nodes are continuously getting into GC and not restarting](https://discuss.elastic.co/t/elasticsearch-client-nodes-are-continuously-getting-into-gc-and-not-restarting/72792)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 2\ **Last updated:** [February 1, 2017, 11:21am UTC](https://discuss.elastic.co/t/elasticsearch-client-nodes-are-continuously-getting-into-gc-and-not-restarting/72792 "2017-02-01T11:21:10Z")
I have two Elasticsearch client nodes (2.3.5) each having 6GB heap, on 8GB RAM. Both client nodes are frequently getting into continuous GC loop and never completing. Client nodes serve search requests from Grafana and K… --- ## [Too many open files](https://discuss.elastic.co/t/too-many-open-files/1761)
**Author:** [@erikhmeier](https://discuss.elastic.co/u/erikhmeier)\ **Replies:** 2\ **Last updated:** [June 2, 2015, 7:16pm UTC](https://discuss.elastic.co/t/too-many-open-files/1761 "2015-06-02T19:16:11Z")
We are running ElasticSearch 1.4.5 (CentOS 6/Java 7) and have run into an issue twice with too many open files on our staging cluster (limit set to 64k): \[image\] It seems to happen suddenly (nothing really busy on th… --- ## [Python json array ... minor problems](https://discuss.elastic.co/t/python-json-array-minor-problems/195989)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 6\ **Last updated:** [September 15, 2019, 7:41pm UTC](https://discuss.elastic.co/t/python-json-array-minor-problems/195989 "2019-09-15T19:41:59Z")
Elasticstack 7.3 I did a bulk import some info from shodan in json form, this is one of the hosts... { "host": { "data": \[ { "banner": "421 4.3.2 Service not available\\r\\n", "port": 25, … --- ## [Elasticsearch masters not discovering each other on Docker Swarm](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230)
**Author:** [@bushwhacker](https://discuss.elastic.co/u/bushwhacker)\ **Replies:** 5\ **Last updated:** [August 3, 2022, 1:12pm UTC](https://discuss.elastic.co/t/elasticsearch-masters-not-discovering-each-other-on-docker-swarm/311230 "2022-08-03T13:12:36Z")
I am trying to set up an elasticsearch stack using docker swarm (Don't really need swarm functionality, but the .yml has been written now) The problem I seem to be getting is that when i start up the stack, the two mast… --- ## [Filebeat multi-path configuration for send logs to Logstash](https://discuss.elastic.co/t/filebeat-multi-path-configuration-for-send-logs-to-logstash/267599)
**Author:** [@Nagavardhan25](https://discuss.elastic.co/u/Nagavardhan25)\ **Replies:** 5\ **Last updated:** [March 24, 2021, 9:44am UTC](https://discuss.elastic.co/t/filebeat-multi-path-configuration-for-send-logs-to-logstash/267599 "2021-03-24T09:44:44Z")
Hi, I have one config file in filebeat, i am trying to add two paths for reading the logs from two different locations and under feilds i have created two directories for storing the values in logstash side. Below is th… --- ## [Timelion Error in Canvas (getaddrinfo ENOTFOUND)](https://discuss.elastic.co/t/timelion-error-in-canvas-getaddrinfo-enotfound/165361)
**Author:** [@tomhel](https://discuss.elastic.co/u/tomhel)\ **Replies:** 5\ **Last updated:** [January 24, 2019, 9:12pm UTC](https://discuss.elastic.co/t/timelion-error-in-canvas-getaddrinfo-enotfound/165361 "2019-01-24T21:12:38Z")
Whenever I pick Timelion as datasource in Canvas, I get this error: \[timelion\] \> getaddrinfo ENOTFOUND www.0.com www.0.com:80 Timelion works fine in regular Kibana. It's just in Canvas that I get this error. Kibana an… --- ## [Need to create filter for logstash](https://discuss.elastic.co/t/need-to-create-filter-for-logstash/123042)
**Author:** [@mlala](https://discuss.elastic.co/u/mlala)\ **Replies:** 5\ **Last updated:** [March 12, 2018, 8:06am UTC](https://discuss.elastic.co/t/need-to-create-filter-for-logstash/123042 "2018-03-12T08:06:26Z")
Hi, I am trying to prepare filter for F5 ASM but using GROK Debugger i am facing issue related to same can anyone help with with proper logstash filter. i will paste the log file for your convenience. \<134\>Mar 8 12:40:… --- ## [De\_dot not working with certain inputs](https://discuss.elastic.co/t/de-dot-not-working-with-certain-inputs/87891)
**Author:** [@1stewart](https://discuss.elastic.co/u/1stewart)\ **Replies:** 5\ **Last updated:** [June 3, 2017, 2:56pm UTC](https://discuss.elastic.co/t/de-dot-not-working-with-certain-inputs/87891 "2017-06-03T14:56:58Z")
Hello, I'm trying to input json from azure via beats, but due to some of the field names containing schema addresses it's erroring due to them containing '.'. I can't exclude the lines as azlog is producing the logs as… --- ## [Memory Optimization](https://discuss.elastic.co/t/memory-optimization/12109)
**Author:** [@Rajesh\_Tarle](https://discuss.elastic.co/u/Rajesh_Tarle)\ **Replies:** 5\ **Last updated:** [May 25, 2013, 8:28am UTC](https://discuss.elastic.co/t/memory-optimization/12109 "2013-05-25T08:28:03Z")
Hi, I have a doubt. when I start elastic search it's taking memory around 510MB .now I created around 7,00,000 records in four indexes then it's taking around 3.7GB memory. but when i remove all four indexes mem… --- ## [Logstah filter for cisco device](https://discuss.elastic.co/t/logstah-filter-for-cisco-device/96606)
**Author:** [@muratungor](https://discuss.elastic.co/u/muratungor)\ **Replies:** 0\ **Last updated:** [August 10, 2017, 12:07pm UTC](https://discuss.elastic.co/t/logstah-filter-for-cisco-device/96606 "2017-08-10T12:07:47Z")
Hello we have syslog-ng server that collects logs from cisco switches, routers etc. and syslog-ng writes that logs to its filesistem. here is an example of lines from cisco Aug 10 14:56:30 ip…ip.ip.ip hostname: Aug 10 … --- ## [Spring Data ElasticSearch with ES 5.x](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-5-x/77461)
**Author:** [@vishalagr](https://discuss.elastic.co/u/vishalagr)\ **Replies:** 0\ **Last updated:** [March 6, 2017, 8:59am UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-with-es-5-x/77461 "2017-03-06T08:59:52Z")
Hello I have upgraded elasticsearch version from 2.x to 5.x and using the spring-data-elasticsearch but I am getting error while startup and its throwing exception - Caused by: org.springframework.beans.factory.BeanC… --- ## [Logstash JSON parser error](https://discuss.elastic.co/t/logstash-json-parser-error/323356)
**Author:** [@Ramesh\_Perumal](https://discuss.elastic.co/u/Ramesh_Perumal)\ **Replies:** 4\ **Last updated:** [January 19, 2023, 7:01am UTC](https://discuss.elastic.co/t/logstash-json-parser-error/323356 "2023-01-19T07:01:29Z")
Hi, We are getting json parser warning message as below: \[2023-01-08T13:21:12,936\]\[WARN \]\[logstash.filters.json \] Error parsing json {:source=\>"slmPart", :raw=\>"{"action":UPDATE,"information":"Signing CSR for root … --- ## [Kibana Infrastructure shows no data](https://discuss.elastic.co/t/kibana-infrastructure-shows-no-data/197247)
**Author:** [@Shivarhce](https://discuss.elastic.co/u/Shivarhce)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 7:41am UTC](https://discuss.elastic.co/t/kibana-infrastructure-shows-no-data/197247 "2019-08-30T07:41:37Z")
Hi Team, Kibana Infrastructure shows no data, but I can see data sending by metricbeat its working fine. what could be the problem to show data in Infrastructure UI. Thank you & regards Shiva S --- ## [Filebeat autodiscover advanced pod log shipping with container specific actions](https://discuss.elastic.co/t/filebeat-autodiscover-advanced-pod-log-shipping-with-container-specific-actions/143820)
**Author:** [@havlan](https://discuss.elastic.co/u/havlan)\ **Replies:** 4\ **Last updated:** [August 22, 2018, 10:05am UTC](https://discuss.elastic.co/t/filebeat-autodiscover-advanced-pod-log-shipping-with-container-specific-actions/143820 "2018-08-22T10:05:00Z")
Hi! I know autodiscover for Kubernetes/Docker is quite new. In a pod context where a pod has several containers, is it possible to specify a sidecar configuration from kubernetes metadata in terms of achieving logging … --- ## [Is it possible to make document\_id unique among indices?](https://discuss.elastic.co/t/is-it-possible-to-make-document-id-unique-among-indices/117690)
**Author:** [@Tao\_Liu1](https://discuss.elastic.co/u/Tao_Liu1)\ **Replies:** 4\ **Last updated:** [February 1, 2018, 3:17pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-document-id-unique-among-indices/117690 "2018-02-01T15:17:26Z")
Hi, I recently used a custom document\_id to avoid duplicate in ES. However, I found that the same document can be indexed in different indices. Is there a way to make sure the document itself is unique in ES? Thank you … --- ## [Logstash XML file with multiple patterns](https://discuss.elastic.co/t/logstash-xml-file-with-multiple-patterns/105914)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 4\ **Last updated:** [November 2, 2017, 11:01am UTC](https://discuss.elastic.co/t/logstash-xml-file-with-multiple-patterns/105914 "2017-11-02T11:01:17Z")
I have an xml file as an input in Logstash and ElasticSeach as output. My xml has multiple patterns, where my xml file looks like: \< Header\> \< Value1\>xyz\< /Value1\> \< FileName\>name\< /FileName\> \< System\>test\< /System\> … --- ## [Bug? when searching on int/double and date range combined](https://discuss.elastic.co/t/bug-when-searching-on-int-double-and-date-range-combined/60373)
**Author:** [@barry1](https://discuss.elastic.co/u/barry1)\ **Replies:** 4\ **Last updated:** [September 13, 2016, 12:55pm UTC](https://discuss.elastic.co/t/bug-when-searching-on-int-double-and-date-range-combined/60373 "2016-09-13T12:55:04Z")
Hello, I have a field "price" which is a double, and a field "insert\_date" which is a datetime field. When I do a range search on the price field all works fine, same goed for the insert\_date. But when I do a combined … --- ## [Query for IP External IP Addresses Only](https://discuss.elastic.co/t/query-for-ip-external-ip-addresses-only/299024)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 1\ **Last updated:** [March 8, 2022, 7:55am UTC](https://discuss.elastic.co/t/query-for-ip-external-ip-addresses-only/299024 "2022-03-08T07:55:43Z")
Hi, I am trying to use a KQL query to search for non private (rfc1918) addresses. I am using the following query AND NOT destination.ip:10.0.0.0/8 OR NOT destination.ip:192.168.0.0/16 OR NOT destination.ip :172.16.0.0… --- ## [Postfix Dashboards visualization](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 4:36pm UTC](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731 "2021-10-27T16:36:03Z")
Hello everyone! i'm newie with ELK, my question is from a dummy person and I need some compassion :sweat\_smile: I install in a virtual machine with Ubuntu 20.04, Postfix, Logstash, Kibana and Elastic. I follow the next… --- ## [Trying to add an alias on Index Template using kibana Wizard](https://discuss.elastic.co/t/trying-to-add-an-alias-on-index-template-using-kibana-wizard/248037)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 1\ **Last updated:** [September 9, 2020, 7:32pm UTC](https://discuss.elastic.co/t/trying-to-add-an-alias-on-index-template-using-kibana-wizard/248037 "2020-09-09T19:32:22Z")
Hi, I just created an index template. Now, in order to to configure a lifecycle policy for rolling indices, I need to define an alias, so I'm using the Kibana Create template wizard to add it. I went to the "Aliases" … --- ## [Calculating percentage of Field values in Data table](https://discuss.elastic.co/t/calculating-percentage-of-field-values-in-data-table/171893)
**Author:** [@Rajgopalan](https://discuss.elastic.co/u/Rajgopalan)\ **Replies:** 1\ **Last updated:** [March 12, 2019, 4:47pm UTC](https://discuss.elastic.co/t/calculating-percentage-of-field-values-in-data-table/171893 "2019-03-12T16:47:41Z")
I need to populate a column which has the calculated percentage corresponding to another column. In this case I want to calculate Traffic percentage based on traffic volume ,which is one of the data columns. --- ## [Gitter for elastic search community communication](https://discuss.elastic.co/t/gitter-for-elastic-search-community-communication/170056)
**Author:** [@\_razi](https://discuss.elastic.co/u/_razi)\ **Replies:** 1\ **Last updated:** [February 26, 2019, 6:38pm UTC](https://discuss.elastic.co/t/gitter-for-elastic-search-community-communication/170056 "2019-02-26T18:38:09Z")
Continuing the discussion from Can we use Gitter for elastic search community communication?: --- ## [Codec line not working as expected](https://discuss.elastic.co/t/codec-line-not-working-as-expected/126219)
**Author:** [@ddebast](https://discuss.elastic.co/u/ddebast)\ **Replies:** 1\ **Last updated:** [March 31, 2018, 1:15am UTC](https://discuss.elastic.co/t/codec-line-not-working-as-expected/126219 "2018-03-31T01:15:27Z")
logstash version logstash 5.4.1 I have a beat input that ships logs from a linux host. What I'm receiving: "message" =\> "Mar 30 13:01:34 host su: pam\_unix(su-l:session): session closed for user user", Since I want … --- ## [Return many values from Painless script to aggregation](https://discuss.elastic.co/t/return-many-values-from-painless-script-to-aggregation/108150)
**Author:** [@merito](https://discuss.elastic.co/u/merito)\ **Replies:** 1\ **Last updated:** [November 17, 2017, 3:05pm UTC](https://discuss.elastic.co/t/return-many-values-from-painless-script-to-aggregation/108150 "2017-11-17T15:05:19Z")
Hi, is it possible to get more than one value from script in e.g., terms aggregation from one document? I would like to have an aggregation of values of two fields using the script. I know I can use copy\_to in mapping o… --- ## [Fail install apm agent output package.json not find](https://discuss.elastic.co/t/fail-install-apm-agent-output-package-json-not-find/104174)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 1\ **Last updated:** [October 17, 2017, 7:40pm UTC](https://discuss.elastic.co/t/fail-install-apm-agent-output-package-json-not-find/104174 "2017-10-17T19:40:22Z")
\[root@soc apm-server-6.0.0-rc1-linux-x86\_64\]#npm install elastic-apm --save npm WARN saveError ENOENT: no such file or directory, open '/opt/elasticsearch-apm/apm-server-6.0.0-rc1-linux-x86\_64/package.json' /opt/elasti… --- ## [Indexing performance degraded in Elasticsearch 7.10](https://discuss.elastic.co/t/indexing-performance-degraded-in-elasticsearch-7-10/267938)
**Author:** [@shamzeer](https://discuss.elastic.co/u/shamzeer)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 6:28am UTC](https://discuss.elastic.co/t/indexing-performance-degraded-in-elasticsearch-7-10/267938 "2021-03-31T06:28:01Z")
Hi, As per the blog below, there is considerable improvement made in Elasticsearch 7.10 in data storage needs. https://www.elastic.co/blog/save-space-and-money-with-improved-storage-efficiency-in-elasticsearch-7-10. I… --- ## [Configuring Enterprise-Search with SSL](https://discuss.elastic.co/t/configuring-enterprise-search-with-ssl/244017)
**Author:** [@turekg](https://discuss.elastic.co/u/turekg)\ **Replies:** 2\ **Last updated:** [September 29, 2020, 7:55am UTC](https://discuss.elastic.co/t/configuring-enterprise-search-with-ssl/244017 "2020-09-29T07:55:36Z")
I am trying to configure Enterprise Search with SSL. In the enterprise-search.yml I modified the forllowing entries: ent\_search.ssl.enabled: true ent\_search.ssl.keystore.path: server.jks ent\_search.ssl.keystore.passwor… --- ## [Kibana server not ready/SSL wrong version number](https://discuss.elastic.co/t/kibana-server-not-ready-ssl-wrong-version-number/367206)
**Author:** [@CipherMethod](https://discuss.elastic.co/u/CipherMethod)\ **Replies:** 2\ **Last updated:** [October 4, 2024, 4:43pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-ssl-wrong-version-number/367206 "2024-10-04T16:43:32Z")
Hello, After an OS patch and reboot of our Elasticsearch server, we are getting the "Kibana server not ready yet" when attempting to log in. The Kibana log shows: "message": "Unable to retrieve version information fro… --- ## [Kibana data table visualization and list of arrays question](https://discuss.elastic.co/t/kibana-data-table-visualization-and-list-of-arrays-question/225915)
**Author:** [@sriccio](https://discuss.elastic.co/u/sriccio)\ **Replies:** 2\ **Last updated:** [March 31, 2020, 8:00pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-and-list-of-arrays-question/225915 "2020-03-31T20:00:31Z")
Hello! Our antispam gateway is pushing metadata to our elasticsearch cluster. A pushed doc json looks like this: { "rspamd\_meta":{ "rspamd\_server":"out-mta01", "message\_id":"cf1a3fdd58f966a299e1b820d67e… --- ## [Cannot increase maxClauseCount](https://discuss.elastic.co/t/cannot-increase-maxclausecount/172088)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 2\ **Last updated:** [March 13, 2019, 9:27am UTC](https://discuss.elastic.co/t/cannot-increase-maxclausecount/172088 "2019-03-13T09:27:55Z")
Hi, i have created a docker container with elasticsearch 6.6.1 A query, that works on my server without any problems (version 6.2.4), doesn't work on in my docker container. I am getting this message: "caused\_by":{"ty… [Previous page](https://discuss.elastic.co/top.md?page=1392&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1394&per_page=50&period=all)