# Top **URL:** https://discuss.elastic.co/top.md?page=1397&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1398 --- ## [Canvas: duplicate date across table using formatdate](https://discuss.elastic.co/t/canvas-duplicate-date-across-table-using-formatdate/189055)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 6:18pm UTC](https://discuss.elastic.co/t/canvas-duplicate-date-across-table-using-formatdate/189055 "2019-07-09T18:18:08Z")
Hello, I am using canvas and have some trouble getting a nice formatted time. I would like to ask why is my formatted time on the right most column always output UTC time and it duplicates across the table. I follow… --- ## [I am trying to create index and upload data in elasticsearch using curl](https://discuss.elastic.co/t/i-am-trying-to-create-index-and-upload-data-in-elasticsearch-using-curl/188213)
**Author:** [@SalOomeii](https://discuss.elastic.co/u/SalOomeii)\ **Replies:** 2\ **Last updated:** [July 1, 2019, 10:47am UTC](https://discuss.elastic.co/t/i-am-trying-to-create-index-and-upload-data-in-elasticsearch-using-curl/188213 "2019-07-01T10:47:03Z")
Hello everyone ! I am trying to create new index with those data in Elasticsearch I have big data in json format I save it in a file named weather\_to\_json.json and then I use this curl $ curl -s -H "Content-Type: … --- ## [Run remote commands from DevTools](https://discuss.elastic.co/t/run-remote-commands-from-devtools/168290)
**Author:** [@rmsys](https://discuss.elastic.co/u/rmsys)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 7:31pm UTC](https://discuss.elastic.co/t/run-remote-commands-from-devtools/168290 "2019-02-21T19:31:59Z")
Hi I configured out this scenario cluster: lab client-node data-node master-node cluster: kibana-lab els + kibana (localhost) remote cluster config When a run command 'GET /\_remote/info' from DevTools in kibana, … --- ## [Converting MMM to MM in Logstash 2](https://discuss.elastic.co/t/converting-mmm-to-mm-in-logstash-2/145640)
**Author:** [@Lydia](https://discuss.elastic.co/u/Lydia)\ **Replies:** 2\ **Last updated:** [August 28, 2018, 7:18am UTC](https://discuss.elastic.co/t/converting-mmm-to-mm-in-logstash-2/145640 "2018-08-28T07:18:33Z")
I have the same problem with this person, and i am trying to make the output of my log\_date as the following format but i don't have a clue how to do it. log original input : \[23/AUG/2018:00:00:00 +0800\] and the outp… --- ## [Visual Builder: cumulative sum doesn't work using a "calculation" as metric?](https://discuss.elastic.co/t/visual-builder-cumulative-sum-doesnt-work-using-a-calculation-as-metric/109036)
**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\ **Replies:** 2\ **Last updated:** [November 29, 2017, 9:48am UTC](https://discuss.elastic.co/t/visual-builder-cumulative-sum-doesnt-work-using-a-calculation-as-metric/109036 "2017-11-29T09:48:21Z")
Hello Using Visual Builder I am trying to compute a cumulative sum on a calculation (on 2 aggs). I get this error: "The request for this panel failed" \[zzz\] Thanks in advance for you help. Pascal --- ## [Filebeat not forwarding tags to logstash](https://discuss.elastic.co/t/filebeat-not-forwarding-tags-to-logstash/97035)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 11:39pm UTC](https://discuss.elastic.co/t/filebeat-not-forwarding-tags-to-logstash/97035 "2017-08-14T23:39:07Z")
Here’s my filebeat config: logging.level: debug filebeat.registry\_file: /tmp/registry filebeat.prospectors: - type: log enabled: true paths: - /log/\* shipper: tags: - source:docker - pod:sts-emergenc… --- ## [Multiline codec in filebeats](https://discuss.elastic.co/t/multiline-codec-in-filebeats/95418)
**Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\ **Replies:** 2\ **Last updated:** [August 1, 2017, 9:48pm UTC](https://discuss.elastic.co/t/multiline-codec-in-filebeats/95418 "2017-08-01T21:48:19Z")
Hi there! I’m trying to use multiline codec in filebeat.yml for stack trace exceptions Here is my filebeat.conf - input\_type: log multiline.pattern: '^\[\[:space:\]\]' multiline.negate: false multiline.match: afte… --- ## [Hardware configuration](https://discuss.elastic.co/t/hardware-configuration/72420)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [January 23, 2017, 1:33am UTC](https://discuss.elastic.co/t/hardware-configuration/72420 "2017-01-23T01:33:54Z")
Hi, I am in process of setting up a cluster. Plan is to make it production setup once the necessary load testing is done. I will start with : 3 master nodes. 2 coordinating nodes. 5 data nodes. The number of data no… --- ## [Recipient variable in Watcher email template?](https://discuss.elastic.co/t/recipient-variable-in-watcher-email-template/67670)
**Author:** [@jeffedwards](https://discuss.elastic.co/u/jeffedwards)\ **Replies:** 2\ **Last updated:** [December 1, 2016, 3:41pm UTC](https://discuss.elastic.co/t/recipient-variable-in-watcher-email-template/67670 "2016-12-01T15:41:21Z")
I want to load a link in an email with the recipient's email as a parameter, but this email is going to multiple recipients and their addresses won't appear in the payload. Is there a {{\_recipient}} variable I can use? … --- ## [Angular JS + elasticsearch Query - Response](https://discuss.elastic.co/t/angular-js-elasticsearch-query-response/43966)
**Author:** [@Vivek\_rai](https://discuss.elastic.co/u/Vivek_rai)\ **Replies:** 2\ **Last updated:** [March 10, 2016, 2:34am UTC](https://discuss.elastic.co/t/angular-js-elasticsearch-query-response/43966 "2016-03-10T02:34:16Z")
I have the following program which is working fine , the issue is when i introduce ng-repeat tag. The results are not getting printed ... I'm sorry to be verbose but wanted to provide all details to see if iam missing … --- ## [Puppet-elasticsearch - yum error on CentOS](https://discuss.elastic.co/t/puppet-elasticsearch-yum-error-on-centos/14239)
**Author:** [@Tim\_S](https://discuss.elastic.co/u/Tim_S)\ **Replies:** 2\ **Last updated:** [November 5, 2013, 3:27pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-yum-error-on-centos/14239 "2013-11-05T15:27:13Z")
I'm using puppet enterprise on CentOS, and getting an error from Yum. I've tried GitHub - voxpupuli/puppet-elasticsearch: Elasticsearch Puppet module and https://forge.puppetlabs.com/ispavailability/elasticsearch - in … --- ## [Jira and Confluence connector issue](https://discuss.elastic.co/t/jira-and-confluence-connector-issue/314684)
**Author:** [@PA3mEP](https://discuss.elastic.co/u/PA3mEP)\ **Replies:** 8\ **Last updated:** [September 21, 2022, 7:01pm UTC](https://discuss.elastic.co/t/jira-and-confluence-connector-issue/314684 "2022-09-21T19:01:21Z")
Hi, beautiful people. It seems that I cannot integrate out Jira and Confluence with Enterprise Search any more. Jira(Server) version 9.0.0 and Confluence(Server) 7.18.2. It feels like Atlassian has deprecated OAuth1.0 an… --- ## [\[ANNOUNCEMENT\] - Elasticsearch File System Crawler 2.1 released](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-1-released/56423)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [July 26, 2016, 5:19pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-1-released/56423 "2016-07-26T17:19:45Z")
The Elasticsearch File System Crawler team is pleased to announce the fscrawler-2.1 release! FS Crawler offers a simple way to index local files into elasticsearch. Changes in this version include: New features: o … --- ## [Issue :Hive support for ES for nested field(JSON string) with other string fields](https://discuss.elastic.co/t/issue-hive-support-for-es-for-nested-field-json-string-with-other-string-fields/56220)
**Author:** [@elasticsearch6](https://discuss.elastic.co/u/elasticsearch6)\ **Replies:** 0\ **Last updated:** [July 24, 2016, 1:11am UTC](https://discuss.elastic.co/t/issue-hive-support-for-es-for-nested-field-json-string-with-other-string-fields/56220 "2016-07-24T01:11:37Z")
Hi, Truly appreciate any help to resolve the below issue I am facing. Issue: Hive support for ES for nested field(JSON string) with other fields. How to represent the nested field in HIVE where the structure in unkn… --- ## [Kibana Dashboard field value count](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494)
**Author:** [@shanthveeresh](https://discuss.elastic.co/u/shanthveeresh)\ **Replies:** 4\ **Last updated:** [February 27, 2022, 3:30pm UTC](https://discuss.elastic.co/t/kibana-dashboard-field-value-count/297494 "2022-02-27T15:30:20Z")
Hi All, I am trying to find a .json script or keyword to count the number of field value count in Kibana dashboard, let me know if there is any way to do it, it will be very helpful. --- ## [Problème : Logs reçus, mais ne s'affichent pas dans le dashboard](https://discuss.elastic.co/t/probleme-logs-recus-mais-ne-saffichent-pas-dans-le-dashboard/288310)
**Author:** [@PapyMouzzo](https://discuss.elastic.co/u/PapyMouzzo)\ **Replies:** 4\ **Last updated:** [November 4, 2021, 10:57am UTC](https://discuss.elastic.co/t/probleme-logs-recus-mais-ne-saffichent-pas-dans-le-dashboard/288310 "2021-11-04T10:57:00Z")
Bonjour, Alors voici mon problème, j'ai une machine "serveur" hébergeant Elasticsearch, Kibana ainsi que Filebeat. Je reçois bien les logs de cette dernière et j'arrive à exploiter les logs dans un dashboard. Je souha… --- ## [ECK Operator 1.4 stuck in deployment - Error: no matches for kind "EnterpriseSearch" in version "enterpriseseach.k8s.elastic.co/v1"](https://discuss.elastic.co/t/eck-operator-1-4-stuck-in-deployment-error-no-matches-for-kind-enterprisesearch-in-version-enterpriseseach-k8s-elastic-co-v1/271818)
**Author:** [@Jorge\_Alvarado](https://discuss.elastic.co/u/Jorge_Alvarado)\ **Replies:** 4\ **Last updated:** [May 6, 2021, 5:34pm UTC](https://discuss.elastic.co/t/eck-operator-1-4-stuck-in-deployment-error-no-matches-for-kind-enterprisesearch-in-version-enterpriseseach-k8s-elastic-co-v1/271818 "2021-05-06T17:34:51Z")
Hi, I am trying to deploy eck operator 1.4 but it gets stuck. Using eck operator 1.3.2 deployment works as expected. Also, I've using latest version of elasticsearch 7.12.0 and kibana version 7.12.0. I have attached the… --- ## [Installation of delete by query plugin fails](https://discuss.elastic.co/t/installation-of-delete-by-query-plugin-fails/127779)
**Author:** [@jfey](https://discuss.elastic.co/u/jfey)\ **Replies:** 4\ **Last updated:** [April 12, 2018, 12:13pm UTC](https://discuss.elastic.co/t/installation-of-delete-by-query-plugin-fails/127779 "2018-04-12T12:13:43Z")
Hello, I am trying to install the delete by query plugin for an Elasticsearch 2.4.6 instance. I have encountered the following issue: sudo bin/plugin install delete-by-query --verbose -\> Installing delete-by-query..… --- ## [Grok failure even after the fields were filtered out successfully](https://discuss.elastic.co/t/grok-failure-even-after-the-fields-were-filtered-out-successfully/110688)
**Author:** [@George\_Cherian](https://discuss.elastic.co/u/George_Cherian)\ **Replies:** 4\ **Last updated:** [December 11, 2017, 6:10am UTC](https://discuss.elastic.co/t/grok-failure-even-after-the-fields-were-filtered-out-successfully/110688 "2017-12-11T06:10:34Z")
Hi Everyone, I am encountering the following problem: I have been filtering out the "Via\_IP1" field from "Via1" which matches on both grok debugger and grok constructor.But when running on logstash ,i could observe gr… --- ## [Is the document of develop a new protocol up to date](https://discuss.elastic.co/t/is-the-document-of-develop-a-new-protocol-up-to-date/75180)
**Author:** [@jerome\_tan](https://discuss.elastic.co/u/jerome_tan)\ **Replies:** 4\ **Last updated:** [February 16, 2017, 5:22pm UTC](https://discuss.elastic.co/t/is-the-document-of-develop-a-new-protocol-up-to-date/75180 "2017-02-16T17:22:52Z")
Is the document "https://www.elastic.co/guide/en/beats/packetbeat/current/protocol-modules.html" up to date? In the document All protocol modules implement the TcpProtocolPlugin or the UdpProtocolPlugin (or both) from … --- ## [Filebeat dashboards are not loaded in kibana - Running on AWS](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-running-on-aws/259204)
**Author:** [@ats](https://discuss.elastic.co/u/ats)\ **Replies:** 3\ **Last updated:** [December 21, 2020, 3:31am UTC](https://discuss.elastic.co/t/filebeat-dashboards-are-not-loaded-in-kibana-running-on-aws/259204 "2020-12-21T03:31:57Z")
I am running 3 nodes in AWS: 1 master and 2 data nodes for Elasticsearch. I installed kibana fine with no issues. Now I'm running into an issue with setting up filebeat dashboard in Kibana. Getting the following error ro… --- ## [Send Email Alerts to Different Recipients Based on Condition](https://discuss.elastic.co/t/send-email-alerts-to-different-recipients-based-on-condition/164341)
**Author:** [@stevenmarrocco](https://discuss.elastic.co/u/stevenmarrocco)\ **Replies:** 3\ **Last updated:** [January 18, 2019, 1:22pm UTC](https://discuss.elastic.co/t/send-email-alerts-to-different-recipients-based-on-condition/164341 "2019-01-18T13:22:47Z")
I’m wondering if it is possible to send an watcher event to a specific individual depending on a certain attribute/condition. For example, if condition A is met from a watcher send alert to individual A. If conditon B i… --- ## [Which indexes does the new Infrastructure / Logs feature use?](https://discuss.elastic.co/t/which-indexes-does-the-new-infrastructure-logs-feature-use/157920)
**Author:** [@Matin\_Nayob](https://discuss.elastic.co/u/Matin_Nayob)\ **Replies:** 3\ **Last updated:** [November 28, 2018, 6:26pm UTC](https://discuss.elastic.co/t/which-indexes-does-the-new-infrastructure-logs-feature-use/157920 "2018-11-28T18:26:21Z")
The new logs feature in Kibana 6.5.0 only seems to display live logs from a subset of my indexes. Is there a way to configure this yet? I've tried adding specific indexes to the filter, but it doesnt display any data. T… --- ## [Simple multiplication on Count result](https://discuss.elastic.co/t/simple-multiplication-on-count-result/146191)
**Author:** [@Nerin](https://discuss.elastic.co/u/Nerin)\ **Replies:** 3\ **Last updated:** [August 29, 2018, 2:56pm UTC](https://discuss.elastic.co/t/simple-multiplication-on-count-result/146191 "2018-08-29T14:56:41Z")
Hi All, I newly joined the ELK world :slight\_smile: , and would love a little help with a simple Arithmetic problem. I am using version 6.4. I would like to multiple the output of a Count metric by 2. Currently the A… --- ## [JDBC Connect Error](https://discuss.elastic.co/t/jdbc-connect-error/128139)
**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\ **Replies:** 3\ **Last updated:** [April 17, 2018, 1:05am UTC](https://discuss.elastic.co/t/jdbc-connect-error/128139 "2018-04-17T01:05:06Z")
How can I sove this Error..? using password?? Is there an option for using password in the Reference? Error: \[ERROR\]\[logstash.pipeline \] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 3\ **Last updated:** [December 20, 2017, 12:48am UTC](https://discuss.elastic.co/t/geoip-lookup-failure-but-not-specified/111348 "2017-12-20T00:48:59Z") Using filebeat to send IIS logs from Windows System and to my logstash server and then to elastic search and Kibana. Elastic search and Kibana - 5.3.2 Logstash and filebeat - 5.3.2 filebeat.yml : #====================… --- ## [Not able to Connect to Elasticsearcsearch and Kibana from remote machine](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearcsearch-and-kibana-from-remote-machine/105182)
**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\ **Replies:** 3\ **Last updated:** [October 26, 2017, 5:28am UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearcsearch-and-kibana-from-remote-machine/105182 "2017-10-26T05:28:36Z")
Hi, I have installed Elasticsearch and Kibana on Linux machine. Locally both are working fine and the ports 9200, 5601 are open and are listening. I have changed the network.host : 0.0.0.0 and transport.host : localho… --- ## [Monitoring core files?](https://discuss.elastic.co/t/monitoring-core-files/73986)
**Author:** [@test\_user](https://discuss.elastic.co/u/test_user)\ **Replies:** 3\ **Last updated:** [February 7, 2017, 1:10am UTC](https://discuss.elastic.co/t/monitoring-core-files/73986 "2017-02-07T01:10:41Z")
Hi folks, in order to check our test application against core dump files currently I have cronjob which is checking specific entries on related folder. Can I perform same task with filebeat, so I can remove my cronjob? --- ## [\[ANNOUNCEMENT\] - Elasticsearch File System Crawler 2.2 released](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-2-released/73808)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 3, 2017, 8:26am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-2-released/73808 "2017-02-03T08:26:39Z")
The Elasticsearch File System Crawler team is pleased to announce the fscrawler-2.2 release! FS Crawler offers a simple way to index local files into elasticsearch. Changes in this version include: New features: o … --- ## [Cluster stuck on high JVM heap usage](https://discuss.elastic.co/t/cluster-stuck-on-high-jvm-heap-usage/48958)
**Author:** [@radap](https://discuss.elastic.co/u/radap)\ **Replies:** 3\ **Last updated:** [May 3, 2016, 9:15pm UTC](https://discuss.elastic.co/t/cluster-stuck-on-high-jvm-heap-usage/48958 "2016-05-03T21:15:21Z")
I have Elasticsearch 2.2.0, 1 node cluster, 4g heap size, RAM: 7GB, CPU cores: 2. I also have configured indices.fielddata.cache.size: 40%. The problem is when I am using Kibana to query some thing (very simple queries… --- ## [Negate/Ignore certain files](https://discuss.elastic.co/t/negate-ignore-certain-files/38317)
**Author:** [@lwhitworth](https://discuss.elastic.co/u/lwhitworth)\ **Replies:** 3\ **Last updated:** [January 4, 2016, 2:24pm UTC](https://discuss.elastic.co/t/negate-ignore-certain-files/38317 "2016-01-04T14:24:17Z")
Hi all, I have a number of files in a folder called something similar to: file1-auth-detail-20160101.gz file1-auth-detail-20160102.gz file1-auth-detail-20160103 file1-auth-detail-20160104 I want to ingest the fil… --- ## [ElasticSearch sort by date in order](https://discuss.elastic.co/t/elasticsearch-sort-by-date-in-order/17989)
**Author:** [@sirkubax](https://discuss.elastic.co/u/sirkubax)\ **Replies:** 3\ **Last updated:** [June 9, 2014, 9:56pm UTC](https://discuss.elastic.co/t/elasticsearch-sort-by-date-in-order/17989 "2014-06-09T21:56:29Z")
Hi I have a problem with sorting in order elasticsearch queries. I have read that it is imposible to sort string multi-filed (is this true?) So I have created testdate7 field with custom mapping: curl -XPUT l… --- ## [Turn source store to false while using Java API](https://discuss.elastic.co/t/turn-source-store-to-false-while-using-java-api/12570)
**Author:** [@gc1](https://discuss.elastic.co/u/gc1)\ **Replies:** 3\ **Last updated:** [June 28, 2013, 7:18pm UTC](https://discuss.elastic.co/t/turn-source-store-to-false-while-using-java-api/12570 "2013-06-28T19:18:17Z")
Hi, I have just started using elasticsearch to enable searching through our logs. However, I do not want to store the source in due to store overheads. How can I set the \_source enabled to false using the Java A… --- ## [Fleet Call to action - osquerybeat-7.15.0-linux-arm64.tar.gz' returned unsuccessful status code: 404](https://discuss.elastic.co/t/fleet-call-to-action-osquerybeat-7-15-0-linux-arm64-tar-gz-returned-unsuccessful-status-code-404/285065)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 6\ **Last updated:** [October 14, 2021, 10:27pm UTC](https://discuss.elastic.co/t/fleet-call-to-action-osquerybeat-7-15-0-linux-arm64-tar-gz-returned-unsuccessful-status-code-404/285065 "2021-10-14T22:27:11Z")
When adding the Osquery Manager to a policy, I get the following error and the Elastic-Agent remains on UNHEALTHY until i remove the integration from the policy. The file doesn't exist on the repository, is it missing ? … --- ## [Kibana Elasticsearch -\> after 7 Days elastic user pw changed](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180)
**Author:** [@CleanerOne](https://discuss.elastic.co/u/CleanerOne)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:47am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180 "2021-06-07T06:47:34Z")
Hello Community Hello dear community, I have a problem ... I did Kibana and Elasticsearch after this tutorial installed in an AKS (Azure Kubernetes cluster). everything runs well until after 7 days the setup thinks… --- ## [Logstash drop unnecessary fields ( ip2location plugin )](https://discuss.elastic.co/t/logstash-drop-unnecessary-fields-ip2location-plugin/259694)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 6\ **Last updated:** [January 18, 2021, 11:42am UTC](https://discuss.elastic.co/t/logstash-drop-unnecessary-fields-ip2location-plugin/259694 "2021-01-18T11:42:46Z")
Hi, We use ip2locaion database and plugin to detect client's ISP. There are multiple versions of this database with different information but we bought the basic version with only ISP info. How can I prevent logstash t… --- ## [Elasticsearch All Shards failed on cluster with multiple nodes on azure VM](https://discuss.elastic.co/t/elasticsearch-all-shards-failed-on-cluster-with-multiple-nodes-on-azure-vm/241809)
**Author:** [@pranav\_patwardhan](https://discuss.elastic.co/u/pranav_patwardhan)\ **Replies:** 6\ **Last updated:** [July 22, 2020, 2:39am UTC](https://discuss.elastic.co/t/elasticsearch-all-shards-failed-on-cluster-with-multiple-nodes-on-azure-vm/241809 "2020-07-22T02:39:49Z")
I have Elasticsearch cluster with 3 master nodes, 2 data nodes, and cluster node deployed on different Virtual Machine on Azure. It was working fine but suddenly it failed and now \[search\_phase\_execution\_exception\] all s… --- ## [Tomcat / webapp with ES embedded in eclipse (debug mode)](https://discuss.elastic.co/t/tomcat-webapp-with-es-embedded-in-eclipse-debug-mode/6287)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 6\ **Last updated:** [January 6, 2012, 12:42pm UTC](https://discuss.elastic.co/t/tomcat-webapp-with-es-embedded-in-eclipse-debug-mode/6287 "2012-01-06T12:42:13Z")
Hi there, I'm playing with an embedded ES node in a webapp deployed in a tomcat container. ES Node is injected using Spring. ES is 0.18.5 Tomcat is 7.0.19 Spring is 3.1.0.RELEASE An… --- ## [Red cluster and don't come green all the night](https://discuss.elastic.co/t/red-cluster-and-dont-come-green-all-the-night/85892)
**Author:** [@breezzz](https://discuss.elastic.co/u/breezzz)\ **Replies:** 7\ **Last updated:** [May 18, 2017, 10:14am UTC](https://discuss.elastic.co/t/red-cluster-and-dont-come-green-all-the-night/85892 "2017-05-18T10:14:28Z")
Good day I was install plugin yesterday. with manual about rolling upgrade i do next things: PUT \_cluster/settings { "transient": { "cluster.routing.allocation.enable": "none" } } POST \_flush/synced system… --- ## [Timezone problem with date filter plugin](https://discuss.elastic.co/t/timezone-problem-with-date-filter-plugin/48899)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 1\ **Last updated:** [May 2, 2016, 12:56am UTC](https://discuss.elastic.co/t/timezone-problem-with-date-filter-plugin/48899 "2016-05-02T00:56:44Z")
Hi. With this configuration, $ cat test.conf input { stdin { codec =\> "json" } } filter { date { locale =\> "en" match =\> \["stat\_time", "YYYY-MM-dd'T'HH:mm:ss.SSSZ"\] … --- ## [Resetting Node Statistics](https://discuss.elastic.co/t/resetting-node-statistics/21689)
**Author:** [@Darren\_McDaniel](https://discuss.elastic.co/u/Darren_McDaniel)\ **Replies:** 1\ **Last updated:** [January 16, 2015, 11:25pm UTC](https://discuss.elastic.co/t/resetting-node-statistics/21689 "2015-01-16T23:25:07Z")
Short of restarting the node.. Is there any thought of giving a user the ability to reset the node statistics manually? For example, we're running our cluster in an ESX environment, and have recently VMotion'd th… --- ## [Metricbeat autodiscovery: use 'unique' with Prometheus exporters](https://discuss.elastic.co/t/metricbeat-autodiscovery-use-unique-with-prometheus-exporters/302707)
**Author:** [@Dali\_Ben\_amor](https://discuss.elastic.co/u/Dali_Ben_amor)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 9:34am UTC](https://discuss.elastic.co/t/metricbeat-autodiscovery-use-unique-with-prometheus-exporters/302707 "2022-04-21T09:34:35Z")
Metricbeat 7.16.2 Hi, I'm trying to scrape prometheus metrics of multiple pods on different nodes from the same metricbeat pod. Actually metricbeat is deployed as a daemonset and prometheus collection is done on node … --- ## [Updating old 6.x index pattern to use newer mapping requirments](https://discuss.elastic.co/t/updating-old-6-x-index-pattern-to-use-newer-mapping-requirments/286776)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 5\ **Last updated:** [November 8, 2021, 10:10am UTC](https://discuss.elastic.co/t/updating-old-6-x-index-pattern-to-use-newer-mapping-requirments/286776 "2021-11-08T10:10:56Z")
I have an ELK cluster which I have upgraded over time from early 6.x days. Focused on resolving other issues, but somewhere along the 7.x releases my old mapping broke. This was for a host that was pushing via filebeat… --- ## [Is it possible to process AWS Cloudwatch logs using the nginx module?](https://discuss.elastic.co/t/is-it-possible-to-process-aws-cloudwatch-logs-using-the-nginx-module/275438)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 5\ **Last updated:** [June 10, 2021, 8:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-process-aws-cloudwatch-logs-using-the-nginx-module/275438 "2021-06-10T20:34:48Z")
I have a service deployed to ECS which is basically an nginx instance. I want to ingest the logs using filebeat - I can do this using the aws cloudwatch input type, but it doesn't grok the message field like the nginx m… --- ## [Elasticsearch is still initializing the kibana index... Trying again in 2.5 second](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701 "2020-08-25T13:03:19Z")
Hi , I'm getting this error in Kibana Elasticsearch is still initializing the kibana index... Trying again in 2.5 second and the .kibana index is the only index in red mode any suggestions without losing all data ? E… --- ## [Upgrade Assistant Reindex Helper leaves old indices undeleted, can I test if operation is complete?](https://discuss.elastic.co/t/upgrade-assistant-reindex-helper-leaves-old-indices-undeleted-can-i-test-if-operation-is-complete/122561)
**Author:** [@daved](https://discuss.elastic.co/u/daved)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 6:01pm UTC](https://discuss.elastic.co/t/upgrade-assistant-reindex-helper-leaves-old-indices-undeleted-can-i-test-if-operation-is-complete/122561 "2018-03-20T18:01:17Z")
Hi, I've been using the Upgrade Assistant in 5.x to reindex indices from 2.x. I'm noticing that some of them didn't complete the process and when I click on the reindex button I get the following message: Index foo-re… --- ## [Add a custom tooltip to charts in Kibana?](https://discuss.elastic.co/t/add-a-custom-tooltip-to-charts-in-kibana/325487)
**Author:** [@Senol\_Kurt](https://discuss.elastic.co/u/Senol_Kurt)\ **Replies:** 2\ **Last updated:** [February 14, 2023, 3:50pm UTC](https://discuss.elastic.co/t/add-a-custom-tooltip-to-charts-in-kibana/325487 "2023-02-14T15:50:03Z")
I want to add a custom tooltip that explains charts created with Lens. Is it possible with Kibana? Elasticsearch v.8.3.3 --- ## [After creating Elasticsearch, and then changing the yaml file, apply fails](https://discuss.elastic.co/t/after-creating-elasticsearch-and-then-changing-the-yaml-file-apply-fails/265433)
**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 6:54am UTC](https://discuss.elastic.co/t/after-creating-elasticsearch-and-then-changing-the-yaml-file-apply-fails/265433 "2021-02-25T06:54:20Z")
apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: aimee spec: version: 7.10.1 securityContext: fsGroup: 1000 runAsUser: 1000 http: service: spec:… --- ## [Logstash not sending ACK to Filebeat thereby causing duplicate events](https://discuss.elastic.co/t/logstash-not-sending-ack-to-filebeat-thereby-causing-duplicate-events/218686)
**Author:** [@stratmike](https://discuss.elastic.co/u/stratmike)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 2:08pm UTC](https://discuss.elastic.co/t/logstash-not-sending-ack-to-filebeat-thereby-causing-duplicate-events/218686 "2020-02-14T14:08:17Z")
I have configured the following on a Windows 10 machine running on VMWare: Filebeat-\>Logstash-\>Elasticsearch All of these are running on the same machine. The problem is that Logstash is not sending an ACK to Filebeat… --- ## [Adding TAKE\_FILE\_OWNERSHIP=true to kibana](https://discuss.elastic.co/t/adding-take-file-ownership-true-to-kibana/210463)
**Author:** [@rdaimler](https://discuss.elastic.co/u/rdaimler)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 11:14pm UTC](https://discuss.elastic.co/t/adding-take-file-ownership-true-to-kibana/210463 "2019-12-12T23:14:52Z")
Hello, Elasticsearch has the environment variable TAKE\_FILE\_OWNERSHIP=true to loosen permissions on a custom data directory set with path.data. Would it be possible to add the same option to kibana? Thanks, Rob [Previous page](https://discuss.elastic.co/top.md?page=1396&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1398&per_page=50&period=all)