# Top

**URL:** https://discuss.elastic.co/top.md?page=1394&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1395

---

## [Need info regarding Kibana cross site scripting (XSS) issue (ESA-2018-14)](https://discuss.elastic.co/t/need-info-regarding-kibana-cross-site-scripting-xss-issue-esa-2018-14/164211)

<div class="topic-metadata">

**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\
**Replies:** 2\
**Last updated:** [January 16, 2019, 10:10pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-cross-site-scripting-xss-issue-esa-2018-14/164211 "2019-01-16T22:10:06Z")

</div>

Hi, currently I'm evaluating 6.x version for getting the fix regarding this: Given that we cannot move our kibana to 6.4.1, I'd like to bring the patch for this on our code. (Or at least determine exactly in which co…

---

## [Connection refuse issue in Elasticsearch cluster](https://discuss.elastic.co/t/connection-refuse-issue-in-elasticsearch-cluster/157234)

<div class="topic-metadata">

**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\
**Replies:** 2\
**Last updated:** [November 19, 2018, 5:20am UTC](https://discuss.elastic.co/t/connection-refuse-issue-in-elasticsearch-cluster/157234 "2018-11-19T05:20:26Z")

</div>

Hi All I have setup 3 mode ELK cluster and it worked well. But recently I upgrade it to latest version now Elasticsearch service and kibana service working well but when I execute curl command to verify elasticsearch I …

---

## [Cant‘s create logstash service in Centos 6](https://discuss.elastic.co/t/cant-s-create-logstash-service-in-centos-6/152144)

<div class="topic-metadata">

**Author:** [@Haitianisgood](https://discuss.elastic.co/u/Haitianisgood)\
**Replies:** 2\
**Last updated:** [October 19, 2018, 2:48am UTC](https://discuss.elastic.co/t/cant-s-create-logstash-service-in-centos-6/152144 "2018-10-19T02:48:24Z")

</div>

ENV: CentOS release 6.8 (Final) 64bit logstash 6.4.2 I installed logstash with yum. I executed service logstash start,but it reported logstash: unrecognized service. I had executed initctl start logstash but not work…

---

## [Question About Dynamically Generated Keyword Fields](https://discuss.elastic.co/t/question-about-dynamically-generated-keyword-fields/97815)

<div class="topic-metadata">

**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\
**Replies:** 2\
**Last updated:** [August 25, 2017, 5:58pm UTC](https://discuss.elastic.co/t/question-about-dynamically-generated-keyword-fields/97815 "2017-08-25T17:58:22Z")

</div>

I am getting ready to make the jump from 2.4 to 5.X and see that string fields are now dynamically mapped as both a text and keyword field by default. My question is, does it hurt anything to leave the keyword field in p…

---

## [How to use third-party angular component in kibana/dashboard](https://discuss.elastic.co/t/how-to-use-third-party-angular-component-in-kibana-dashboard/86789)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 2\
**Last updated:** [May 24, 2017, 1:19am UTC](https://discuss.elastic.co/t/how-to-use-third-party-angular-component-in-kibana-dashboard/86789 "2017-05-24T01:19:16Z")

</div>

for example, I wanna use angular-xeditable in dashboard\_listing.js, what should I do? PS: dashboard\_listing.js located at src/core\_plugins/kibana/public/dashboard/listing/dashboard\_listing.js I tried below but failed…

---

## [Last update timestamp for a specific field?](https://discuss.elastic.co/t/last-update-timestamp-for-a-specific-field/65283)

<div class="topic-metadata">

**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 11:00pm UTC](https://discuss.elastic.co/t/last-update-timestamp-for-a-specific-field/65283 "2016-11-07T23:00:22Z")

</div>

I have an index with 30+ columns and different columns are updated by different process. Hence the time each column got updated is different. So is it possible to retrieve the last update timestamp on a specific field?…

---

## [Error in Elasticsearch logs: index.engine indexname \[0\] failed to acquire searcher, source indices\_ttl](https://discuss.elastic.co/t/error-in-elasticsearch-logs-index-engine-indexname-0-failed-to-acquire-searcher-source-indices-ttl/56327)

<div class="topic-metadata">

**Author:** [@newelasticuser](https://discuss.elastic.co/u/newelasticuser)\
**Replies:** 2\
**Last updated:** [July 26, 2016, 5:01pm UTC](https://discuss.elastic.co/t/error-in-elasticsearch-logs-index-engine-indexname-0-failed-to-acquire-searcher-source-indices-ttl/56327 "2016-07-26T17:01:54Z")

</div>

The following exception is thrown every minute in the logs Error in Elasticsearch logs: index.engine indexname \[0\] failed to acquire searcher, source indices\_ttl java.lang.illegalstateexception: can't locate the orig…

---

## [Translate plugin: translate array values/use tag instead of field/use wildcard/regex in field](https://discuss.elastic.co/t/translate-plugin-translate-array-values-use-tag-instead-of-field-use-wildcard-regex-in-field/46725)

<div class="topic-metadata">

**Author:** [@CSUMBmWall](https://discuss.elastic.co/u/CSUMBmWall)\
**Replies:** 2\
**Last updated:** [April 19, 2016, 3:13pm UTC](https://discuss.elastic.co/t/translate-plugin-translate-array-values-use-tag-instead-of-field-use-wildcard-regex-in-field/46725 "2016-04-19T15:13:48Z")

</div>

I have a field with an array of values I need translated. Since translate only works on the first value, I renamed all of the fields dynamically to input\_\["value"\]. Now I can't use translate on them because it requi…

---

## [How to include a shield protected node into tribe node setup?](https://discuss.elastic.co/t/how-to-include-a-shield-protected-node-into-tribe-node-setup/40952)

<div class="topic-metadata">

**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\
**Replies:** 2\
**Last updated:** [February 16, 2016, 9:34am UTC](https://discuss.elastic.co/t/how-to-include-a-shield-protected-node-into-tribe-node-setup/40952 "2016-02-16T09:34:58Z")

</div>

I am having one data node with shield and one tribe node without shield. When I try to bind the tribe node with data node. I am getting authentication error as below, ElasticsearchSecurityException\[missing authenticat…

---

## [Listen on \_local\_ and \_ec2\_](https://discuss.elastic.co/t/listen-on--local--and--ec2-/39534)

<div class="topic-metadata">

**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\
**Replies:** 2\
**Last updated:** [January 19, 2016, 1:23pm UTC](https://discuss.elastic.co/t/listen-on--local--and--ec2-/39534 "2016-01-19T13:23:08Z")

</div>

Hi - I am just in the process of moving from 1.7 to 2.1. I am using AWS to run my ES instances and have separate VPC networks setup for production and staging. I have my ES instances sitting behind an Elastic load-bala…

---

## [Highlight part ignored in the spring data @Query](https://discuss.elastic.co/t/highlight-part-ignored-in-the-spring-data-query/230846)

<div class="topic-metadata">

**Author:** [@suryas16](https://discuss.elastic.co/u/suryas16)\
**Replies:** 3\
**Last updated:** [May 4, 2020, 12:48am UTC](https://discuss.elastic.co/t/highlight-part-ignored-in-the-spring-data-query/230846 "2020-05-04T00:48:03Z")

</div>

I'm using spring data elasticsearch @Query annotation, i don't get the highlighted values returned from this query, it works fine on elasticsearch { "from":0, "size":1, "highlight": { "fields": { "code…

---

## [Main class not found or loaded while using elasticsearch apm](https://discuss.elastic.co/t/main-class-not-found-or-loaded-while-using-elasticsearch-apm/184180)

<div class="topic-metadata">

**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\
**Replies:** 3\
**Last updated:** [June 13, 2019, 1:14pm UTC](https://discuss.elastic.co/t/main-class-not-found-or-loaded-while-using-elasticsearch-apm/184180 "2019-06-13T13:14:28Z")

</div>

Error: Could not find or load main class DummyProject I have set this in catalina.sh JAVA\_OPTS="$JAVA\_OPTS -javaagent:/home/abc/Pictures/apm-agent-attach-1.5.0/elastic-apm-agent.jar" I have set this in setenv.sh expo…

---

## [Convert a string field to date in order to sort it](https://discuss.elastic.co/t/convert-a-string-field-to-date-in-order-to-sort-it/141791)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 3\
**Last updated:** [July 26, 2018, 3:06pm UTC](https://discuss.elastic.co/t/convert-a-string-field-to-date-in-order-to-sort-it/141791 "2018-07-26T15:06:43Z")

</div>

Hello! I want to sort a field that happens to be a string. but the actual value of that string is date. Is there any way to convert this field to date? GET /index/\_search { "query": { "bool": { "must": \[ { "matc…

---

## [Problem with Vega Kibana 6.2](https://discuss.elastic.co/t/problem-with-vega-kibana-6-2/120677)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 3\
**Last updated:** [February 21, 2018, 8:15am UTC](https://discuss.elastic.co/t/problem-with-vega-kibana-6-2/120677 "2018-02-21T08:15:30Z")

</div>

Hi there. I just started using VegaLite in Vega plugin in Kibana. However, I get an empty result instead of vizualisation. I am using "logstash-\*" created by Makelogs. I want to have daily log counts in a line graph. Ins…

---

## [Modifying Data Table field types](https://discuss.elastic.co/t/modifying-data-table-field-types/101682)

<div class="topic-metadata">

**Author:** [@cito.ets](https://discuss.elastic.co/u/cito.ets)\
**Replies:** 3\
**Last updated:** [September 26, 2017, 3:44pm UTC](https://discuss.elastic.co/t/modifying-data-table-field-types/101682 "2017-09-26T15:44:12Z")

</div>

Can anyone point me how to control field types in Data Table metrics and aggregations? (JSON Input?) e.g. I want percentile values to be displayed as integer and be stripped off of decimal values

---

## [Curator: delay deleting shrunk indices](https://discuss.elastic.co/t/curator-delay-deleting-shrunk-indices/101437)

<div class="topic-metadata">

**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Replies:** 3\
**Last updated:** [September 23, 2017, 4:32pm UTC](https://discuss.elastic.co/t/curator-delay-deleting-shrunk-indices/101437 "2017-09-23T16:32:51Z")

</div>

Hello, I am trying to implement the rollover pattern, as described in this excellent blog post, using curator, and I'm having some trouble with the shrinking part. I would like to: Shrink the index, and create the sh…

---

## [Kibana service goes down & result in systemctl daemon-reload (without any changes)](https://discuss.elastic.co/t/kibana-service-goes-down-result-in-systemctl-daemon-reload-without-any-changes/175557)

<div class="topic-metadata">

**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 9:39am UTC](https://discuss.elastic.co/t/kibana-service-goes-down-result-in-systemctl-daemon-reload-without-any-changes/175557 "2019-04-05T09:39:31Z")

</div>

\[elasticsearch@gcp6207hdfqa02 ~\]$ sudo systemctl status kibana.service -l ● kibana.service - Kibana Loaded: loaded (/etc/systemd/system/kibana.service; enabled; vendor preset: disabled) Active: inactive (dead) since F…

---

## [Elastic heapdumponoutofmemoryerror](https://discuss.elastic.co/t/elastic-heapdumponoutofmemoryerror/96166)

<div class="topic-metadata">

**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 1:43am UTC](https://discuss.elastic.co/t/elastic-heapdumponoutofmemoryerror/96166 "2017-08-08T01:43:15Z")

</div>

heapdumponoutofmemoryerror received when trying to start elastic

---

## [Kibana 5.1: dashboard: add: filter for visualization type](https://discuss.elastic.co/t/kibana-5-1-dashboard-add-filter-for-visualization-type/72890)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [January 26, 2017, 2:09pm UTC](https://discuss.elastic.co/t/kibana-5-1-dashboard-add-filter-for-visualization-type/72890 "2017-01-26T14:09:52Z")

</div>

Hi there, when adding a visualization to kibana 5.1.2, is there a possibility to filter for the type of the visualization (e.g area chart, line chart, metric, etc.? I think we are getting plenty of each type and I do…

---

## [Counting unique root objects on nested aggregations](https://discuss.elastic.co/t/counting-unique-root-objects-on-nested-aggregations/18719)

<div class="topic-metadata">

**Author:** [@Kallin\_Nagelberg](https://discuss.elastic.co/u/Kallin_Nagelberg)\
**Replies:** 1\
**Last updated:** [July 17, 2014, 6:17pm UTC](https://discuss.elastic.co/t/counting-unique-root-objects-on-nested-aggregations/18719 "2014-07-17T18:17:37Z")

</div>

I'm trying to build a query to aggregate on some fields in a nested document, but instead of returning the count of the nested documents for each aggregation, I'd like to know the number of root objects. IE., I…

---

## [Winlogbeat "ignore\_older" rule not working](https://discuss.elastic.co/t/winlogbeat-ignore-older-rule-not-working/342454)

<div class="topic-metadata">

**Author:** [@cesq](https://discuss.elastic.co/u/cesq)\
**Replies:** 6\
**Last updated:** [September 7, 2023, 10:12am UTC](https://discuss.elastic.co/t/winlogbeat-ignore-older-rule-not-working/342454 "2023-09-07T10:12:12Z")

</div>

I've been deploying winlogbeat with graylog-sidecar and for some reason the "ignore\_older" option does not work for me. I am using the latest graylog-sidecar version as well as winlogbeat. In my configuration I have spe…

---

## [Yet another issue using Kibana API to import Dashboard](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088)

<div class="topic-metadata">

**Author:** [@skiefer](https://discuss.elastic.co/u/skiefer)\
**Replies:** 6\
**Last updated:** [October 21, 2021, 11:10am UTC](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088 "2021-10-21T11:10:04Z")

</div>

I've read thru all the previous posts on the subject, and every google result I can find, but still can't get this running. I was provided a json file of Dashboard configuration to load into my environment. Kibana vers…

---

## [Upgrade ECE from 2.4.3 to 2.6.1](https://discuss.elastic.co/t/upgrade-ece-from-2-4-3-to-2-6-1/248017)

<div class="topic-metadata">

**Author:** [@ece\_master](https://discuss.elastic.co/u/ece_master)\
**Replies:** 6\
**Last updated:** [September 11, 2020, 6:11am UTC](https://discuss.elastic.co/t/upgrade-ece-from-2-4-3-to-2-6-1/248017 "2020-09-11T06:11:34Z")

</div>

Hi , i have some trouble with the ECE upgrade. Some facts: 6 VM´s Fresh cluster install with version 2.4.1 Start of some deployments from version 6.8.0 to 7.9.1 Start upgrade Upgrade logs Running Upgrade Initial c…

---

## [Watcher Email Configuration not able to send mail:](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 6\
**Last updated:** [September 1, 2020, 8:38pm UTC](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850 "2020-09-01T20:38:39Z")

</div>

Continuing the discussion from Watcher email configuration: 1)I am facing this Issue while testing Mail through watcher: 2)This is yml configuration: 3)Secure Password: For the Email Configuration i have do…

---

## [Unfounded script recompilations](https://discuss.elastic.co/t/unfounded-script-recompilations/193575)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 6\
**Last updated:** [August 7, 2019, 1:37pm UTC](https://discuss.elastic.co/t/unfounded-script-recompilations/193575 "2019-08-07T13:37:28Z")

</div>

In preparation for upgrading our Prod environment, we've built up our Dev environment to have more processors and memory and are testing out our heavy watcher load to see if all is well there before doing the same upgrad…

---

## [Logstash Giving failed to parse \[Records.apiVersion\]](https://discuss.elastic.co/t/logstash-giving-failed-to-parse-records-apiversion/156781)

<div class="topic-metadata">

**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\
**Replies:** 6\
**Last updated:** [November 30, 2018, 6:19am UTC](https://discuss.elastic.co/t/logstash-giving-failed-to-parse-records-apiversion/156781 "2018-11-30T06:19:26Z")

</div>

Hi Team, Great morning, Hope you are doing awesome. I am trying to ship cloudtrail logs in my ELK. But I'm getting following warning \[WARN \] 2018-11-14 23:45:37.775 \[Ruby-0-Thread-6@\[main\]\>worker0: :1\] elasticsearch -…

---

## [Unexpected behavior while restoring snapshots from 2.x to 5.x](https://discuss.elastic.co/t/unexpected-behavior-while-restoring-snapshots-from-2-x-to-5-x/110930)

<div class="topic-metadata">

**Author:** [@JohnDone](https://discuss.elastic.co/u/JohnDone)\
**Replies:** 6\
**Last updated:** [December 11, 2017, 1:35pm UTC](https://discuss.elastic.co/t/unexpected-behavior-while-restoring-snapshots-from-2-x-to-5-x/110930 "2017-12-11T13:35:26Z")

</div>

I've tried to restore snapshots from es 2.x to 5.x. I've connected newly created es 5.x to the same S3 repo as es 2.x. But let me point out that only es 2.x has been creating snapshots. Everything was fine, es 5.x has s…

---

## [\[ERROR\] Ruby exception occurred: undefined method \`+' for nil:NilClass](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-for-nil-nilclass/277377)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 4\
**Last updated:** [June 29, 2021, 6:32pm UTC](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-for-nil-nilclass/277377 "2021-06-29T18:32:35Z")

</div>

Hi everyone, I have a problem with a filter in ruby, I am doing an operation between 2 metrics, but I get the following error: \[ERROR\] 2021-06-29 14:02:24.847 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined m…

---

## [Cluster configuarton for ELK stack with Kafka](https://discuss.elastic.co/t/cluster-configuarton-for-elk-stack-with-kafka/112823)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 4\
**Last updated:** [December 22, 2017, 9:29am UTC](https://discuss.elastic.co/t/cluster-configuarton-for-elk-stack-with-kafka/112823 "2017-12-22T09:29:54Z")

</div>

Hi All, I am done with standalone testing of ELK with Kafka now i want to implement Full Clustered ELK + Kafka . Please share docs and imp points for the same .

---

## [Got error when installing X-Pack](https://discuss.elastic.co/t/got-error-when-installing-x-pack/108211)

<div class="topic-metadata">

**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\
**Replies:** 4\
**Last updated:** [November 18, 2017, 12:52am UTC](https://discuss.elastic.co/t/got-error-when-installing-x-pack/108211 "2017-11-18T00:52:01Z")

</div>

Hi, I got the error "Error: Could not find or load main class Xms4g -Xmx4g" when trying to install X-Pack with the command "bin\\elasticsearch-plugin install C:\\Users\\xzhang\\Downloads\\x-pack-5.2.2.zip" under %ES\_HOME% on…

---

## [TSVB Start of day showing 6:00 pm when using Interval 1d](https://discuss.elastic.co/t/tsvb-start-of-day-showing-6-00-pm-when-using-interval-1d/95238)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 4\
**Last updated:** [August 16, 2017, 4:24pm UTC](https://discuss.elastic.co/t/tsvb-start-of-day-showing-6-00-pm-when-using-interval-1d/95238 "2017-08-16T16:24:27Z")

</div>

In this video you can see that in Discovery there are 19 count for the 24th 1 of those items at 6:05 pm (18:05) You can see that when I switch to the TSVB where my interval is by 1d it starts the day at 6:00 pm and on…

---

## [Filter cache evictions with extremely high values](https://discuss.elastic.co/t/filter-cache-evictions-with-extremely-high-values/74074)

<div class="topic-metadata">

**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\
**Replies:** 4\
**Last updated:** [February 7, 2017, 8:55am UTC](https://discuss.elastic.co/t/filter-cache-evictions-with-extremely-high-values/74074 "2017-02-07T08:55:48Z")

</div>

Hi, I have two cluster with ES 1.7.5, one have 15 nodes and another has 12 nodes , each cluster has one index with 20 primary shards and with small differences in the data size. Both clusters running same queries and ha…

---

## [Elasticsearch tile service map inaccurate](https://discuss.elastic.co/t/elasticsearch-tile-service-map-inaccurate/58491)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 4\
**Last updated:** [August 19, 2016, 10:46pm UTC](https://discuss.elastic.co/t/elasticsearch-tile-service-map-inaccurate/58491 "2016-08-19T22:46:33Z")

</div>

Hi, I am not sure if this question belongs to the Kibana category but here it goes.. Ok, this is very stranger. For some reason, Kibana is not displaying location for Users in the United States but other countries. Eve…

---

## [ElasticSearch Deployment recommendation](https://discuss.elastic.co/t/elasticsearch-deployment-recommendation/51976)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 4\
**Last updated:** [June 6, 2016, 4:50pm UTC](https://discuss.elastic.co/t/elasticsearch-deployment-recommendation/51976 "2016-06-06T16:50:49Z")

</div>

Hi, What would be the cons of having elasticsearch () running on a server that has another server application running that servers up lot of data and potentially 500 to 1000 users. Can we increase system specs to have …

---

## [Transaction / Span dichotomy](https://discuss.elastic.co/t/transaction-span-dichotomy/181787)

<div class="topic-metadata">

**Author:** [@magnayn](https://discuss.elastic.co/u/magnayn)\
**Replies:** 5\
**Last updated:** [May 21, 2019, 7:11am UTC](https://discuss.elastic.co/t/transaction-span-dichotomy/181787 "2019-05-21T07:11:10Z")

</div>

Hi - I'm currently experimenting with APM toolings, to see how easily they could be applied to our systems. I like what I am seeing with Elastic APM, but I am a bit uncertain as to the approach around transactions and s…

---

## [Reporting Error](https://discuss.elastic.co/t/reporting-error/101323)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 5\
**Last updated:** [September 28, 2017, 5:53pm UTC](https://discuss.elastic.co/t/reporting-error/101323 "2017-09-28T17:53:58Z")

</div>

Have configured the automatic reporting with watcher. Seeing the following error while watch is getting executed. Watch\[report\_dashboard\] reporting\[Dashboard.pdf\] Error when polling pdf from host\[11.22.22.99\], port\[5601…

---

## [Multi-value lists for elk rule](https://discuss.elastic.co/t/multi-value-lists-for-elk-rule/342579)

<div class="topic-metadata">

**Author:** [@Poukim0m](https://discuss.elastic.co/u/Poukim0m)\
**Replies:** 0\
**Last updated:** [September 8, 2023, 7:16am UTC](https://discuss.elastic.co/t/multi-value-lists-for-elk-rule/342579 "2023-09-08T07:16:27Z")

</div>

Do you know how to implement the functionality of lists (for the purpose of exclusion/whitelisting) that contain multiple (two or more) fields (values) in each entry? For example i need to have a list with the combinati…

---

## [London Information Retrieval Meetup (HYBRID) - 15th Sept 2021](https://discuss.elastic.co/t/london-information-retrieval-meetup-hybrid-15th-sept-2021/284165)

<div class="topic-metadata">

**Author:** [@lizbiella](https://discuss.elastic.co/u/lizbiella)\
**Replies:** 0\
**Last updated:** [September 14, 2021, 9:10am UTC](https://discuss.elastic.co/t/london-information-retrieval-meetup-hybrid-15th-sept-2021/284165 "2021-09-14T09:10:49Z")

</div>

We are so happy to announce the tenth London Information Retrieval Meetup, a free evening meetup aimed to Information Retrieval passionates and professionals who are curious to explore and discuss the latest trends in th…

---

## [Why elk requires a privilege container permission in Openshift](https://discuss.elastic.co/t/why-elk-requires-a-privilege-container-permission-in-openshift/264923)

<div class="topic-metadata">

**Author:** [@Roberto\_Ramirez](https://discuss.elastic.co/u/Roberto_Ramirez)\
**Replies:** 0\
**Last updated:** [February 19, 2021, 11:26pm UTC](https://discuss.elastic.co/t/why-elk-requires-a-privilege-container-permission-in-openshift/264923 "2021-02-19T23:26:14Z")

</div>

I am trying to deploy elk in openshift 4.6 and i am getting the following error create Pod elksaastest-master-0 in StatefulSet elktest-master failed error: pods elkstest-master-0 is forbidden: unable to validate against…

---

## [Beats Homepage UI](https://discuss.elastic.co/t/beats-homepage-ui/143200)

<div class="topic-metadata">

**Author:** [@vic18](https://discuss.elastic.co/u/vic18)\
**Replies:** 0\
**Last updated:** [August 6, 2018, 6:07pm UTC](https://discuss.elastic.co/t/beats-homepage-ui/143200 "2018-08-06T18:07:28Z")

</div>

I found the beats homepage svg annimation so cool!! Just wonder how the animation is implemented? Can anyone shed some lights or help direct it to the UI team? https://www.elastic.co/products/beats

---

## [What is Logstash regex engine?](https://discuss.elastic.co/t/what-is-logstash-regex-engine/271387)

<div class="topic-metadata">

**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\
**Replies:** 2\
**Last updated:** [April 27, 2021, 3:10pm UTC](https://discuss.elastic.co/t/what-is-logstash-regex-engine/271387 "2021-04-27T15:10:08Z")

</div>

Hi, Just came across some regex in config files today and i cannot figure out which engine it is based on and documentation about the syntax i should use in my config. the thing i've stumbled across : if \[field\] !~ /…

---

## [How to make Rest API call from Mobile app to Kibana](https://discuss.elastic.co/t/how-to-make-rest-api-call-from-mobile-app-to-kibana/232642)

<div class="topic-metadata">

**Author:** [@Mike559](https://discuss.elastic.co/u/Mike559)\
**Replies:** 2\
**Last updated:** [May 18, 2020, 10:13am UTC](https://discuss.elastic.co/t/how-to-make-rest-api-call-from-mobile-app-to-kibana/232642 "2020-05-18T10:13:41Z")

</div>

I'm building a Mobile app for the Android & iOS platform. I want to fetch information from the Kibana dashboard into a mobile app using the REST API. the dashboard contains information in the form of charts and counts. …

---

## [There is no data to display. - beats via logstash](https://discuss.elastic.co/t/there-is-no-data-to-display-beats-via-logstash/197913)

<div class="topic-metadata">

**Author:** [@jlim0930](https://discuss.elastic.co/u/jlim0930)\
**Replies:** 2\
**Last updated:** [September 3, 2019, 5:35pm UTC](https://discuss.elastic.co/t/there-is-no-data-to-display-beats-via-logstash/197913 "2019-09-03T17:35:55Z")

</div>

I have metricbeats and filebeats installed on various machines all sending data into elastic via haproxy -\> logstash -\> elasticsearch. I do see the data but in the Infrastructure tab I only see "There is no data to disp…

---

## [Custom plugin installation error](https://discuss.elastic.co/t/custom-plugin-installation-error/139097)

<div class="topic-metadata">

**Author:** [@Divyansh](https://discuss.elastic.co/u/Divyansh)\
**Replies:** 2\
**Last updated:** [July 9, 2018, 7:22am UTC](https://discuss.elastic.co/t/custom-plugin-installation-error/139097 "2018-07-09T07:22:50Z")

</div>

The command is - sudo bin/elasticsearch-plugin install file:///home/divyansh/Documents/AwesomePlugin/target/release/elasticsearch-AwesomePlugin-6.3.1.zip run in /usr/share/elasticsearch Error- Downloading file:///home/…

---

## [How to setup Kafka input in Logstash ? i have ELK setup and kafka installed in windows ? How can we create a logstash.config by mentioning kafka as input?](https://discuss.elastic.co/t/how-to-setup-kafka-input-in-logstash-i-have-elk-setup-and-kafka-installed-in-windows-how-can-we-create-a-logstash-config-by-mentioning-kafka-as-input/101937)

<div class="topic-metadata">

**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\
**Replies:** 2\
**Last updated:** [September 27, 2017, 8:56am UTC](https://discuss.elastic.co/t/how-to-setup-kafka-input-in-logstash-i-have-elk-setup-and-kafka-installed-in-windows-how-can-we-create-a-logstash-config-by-mentioning-kafka-as-input/101937 "2017-09-27T08:56:30Z")

</div>

How to setup Kafka input in Logstash ? i have ELK setup and kafka installed in windows ? How can we create a logstash.config by mentioning kafka as input? I just installed ELK and kafka in my windows system. My requirem…

---

## [Annotations in TSVB using Cardinality](https://discuss.elastic.co/t/annotations-in-tsvb-using-cardinality/93430)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 2\
**Last updated:** [July 21, 2017, 4:09am UTC](https://discuss.elastic.co/t/annotations-in-tsvb-using-cardinality/93430 "2017-07-21T04:09:43Z")

</div>

Kibana 5.4.2 In TSVB I am using Sum to calculate a total and I am wanting to use the annotations to show specific dates where there are sums of a particular type of transactions. The annotation I am wanting to show the…

---

## [Combine elasticsearch 5.1.1 and repository hdfs](https://discuss.elastic.co/t/combine-elasticsearch-5-1-1-and-repository-hdfs/69659)

<div class="topic-metadata">

**Author:** [@111145](https://discuss.elastic.co/u/111145)\
**Replies:** 2\
**Last updated:** [December 21, 2016, 11:23am UTC](https://discuss.elastic.co/t/combine-elasticsearch-5-1-1-and-repository-hdfs/69659 "2016-12-21T11:23:25Z")

</div>

The hdfs attribute on elasticsearch.yml does not seem to be recognized my elasticsearch.yml file repositories: hdfs: uri: "hdfs://es-master:9000/" # optional - Hadoop file-system URI path: "some/path" # r…

---

## [Why there is GUI for the Watcher](https://discuss.elastic.co/t/why-there-is-gui-for-the-watcher/67422)

<div class="topic-metadata">

**Author:** [@sitanxin](https://discuss.elastic.co/u/sitanxin)\
**Replies:** 2\
**Last updated:** [November 29, 2016, 3:10am UTC](https://discuss.elastic.co/t/why-there-is-gui-for-the-watcher/67422 "2016-11-29T03:10:29Z")

</div>

Even though there is a dashboard for Watcher in Kibana, but why there is no GUI to config Watcher? It will be hard to maintain how much watcher and what are they if we have more than 100+ watcher rules...

---

## [Visualizing Pre-aggregated Data](https://discuss.elastic.co/t/visualizing-pre-aggregated-data/56313)

<div class="topic-metadata">

**Author:** [@susrich0810](https://discuss.elastic.co/u/susrich0810)\
**Replies:** 2\
**Last updated:** [July 26, 2016, 1:30pm UTC](https://discuss.elastic.co/t/visualizing-pre-aggregated-data/56313 "2016-07-26T13:30:30Z")

</div>

We've created a python script to pre-aggregate our data, and then re-index it into ES. We've done that part successfully, and we get re-indexed logs similar to the following: { "message…

---

## [Issue with a single node in cluster seemingly doing all the bulk indexing!](https://discuss.elastic.co/t/issue-with-a-single-node-in-cluster-seemingly-doing-all-the-bulk-indexing/29587)

<div class="topic-metadata">

**Author:** [@asharif](https://discuss.elastic.co/u/asharif)\
**Replies:** 2\
**Last updated:** [September 21, 2015, 5:37pm UTC](https://discuss.elastic.co/t/issue-with-a-single-node-in-cluster-seemingly-doing-all-the-bulk-indexing/29587 "2015-09-21T17:37:53Z")

</div>

So we have a 16 node cluster, indexes are spread across 16 shards. Up until last week it seemed to be correctly distributing across all the nodes/shards. The last couple days however it seems like a single node will ta…

[Previous page](https://discuss.elastic.co/top.md?page=1393&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1395&per_page=50&period=all)
