# Top **URL:** https://discuss.elastic.co/top.md?page=1400&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1401 --- ## [Log Storage Location - Elastic Defend Logs macOS](https://discuss.elastic.co/t/log-storage-location-elastic-defend-logs-macos/362904)
**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\ **Replies:** 2\ **Last updated:** [July 10, 2024, 6:57pm UTC](https://discuss.elastic.co/t/log-storage-location-elastic-defend-logs-macos/362904 "2024-07-10T18:57:58Z")
Hello everyone, i'm currently playing around with the Elastic Defend component. I recently rolled it out to a macOS machine in order to gather process and file events. My question here is, where are these logs stored l… --- ## [Cannot connect to Elasticsearch cluster using cloud\_id](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-cluster-using-cloud-id/316203)
**Author:** [@h.allaoui](https://discuss.elastic.co/u/h.allaoui)\ **Replies:** 8\ **Last updated:** [October 11, 2022, 7:57am UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-cluster-using-cloud-id/316203 "2022-10-11T07:57:00Z")
Hi All, I have an issue, I cannot to connect to my Elasticsearch cluster from python client using its cloud\_id. I am getting following error: File "D:\\Data\\Hamid\\Workspace\\Python\\MyTools\\venv\\lib\\site-packages\\elast… --- ## [How to filter my logs](https://discuss.elastic.co/t/how-to-filter-my-logs/133292)
**Author:** [@kimfut](https://discuss.elastic.co/u/kimfut)\ **Replies:** 8\ **Last updated:** [June 1, 2018, 8:53am UTC](https://discuss.elastic.co/t/how-to-filter-my-logs/133292 "2018-06-01T08:53:13Z")
hello everyone , i am trying to filter my logs to something more structured , mostly the message with url part , i tried a lot of grok filter that i found online but everytime i got " \_grokparsefailure" in my logs and no… --- ## [How to reset elasticsearch "elastic" user password?](https://discuss.elastic.co/t/how-to-reset-elasticsearch-elastic-user-password/371673)
**Author:** [@aalaskapedh](https://discuss.elastic.co/u/aalaskapedh)\ **Replies:** 5\ **Last updated:** [December 9, 2024, 3:52pm UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-elastic-user-password/371673 "2024-12-09T15:52:57Z")
install-elasticsearch.sh sudo dnf install -y java-17-openjdk java-17-openjdk-devel sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch cat \<\< EOF \> /etc/yum.repos.d/elasticsearch.repo \[elasticsearch\] na… --- ## [Filebeat Module O365 API URI?](https://discuss.elastic.co/t/filebeat-module-o365-api-uri/293471)
**Author:** [@elasticband](https://discuss.elastic.co/u/elasticband)\ **Replies:** 5\ **Last updated:** [January 10, 2022, 7:23pm UTC](https://discuss.elastic.co/t/filebeat-module-o365-api-uri/293471 "2022-01-10T19:23:15Z")
I am trying to get some support from Microsoft because I am not seeing all the login data I see in the Azure AD Console via the O365 Module. They would like to know what URI the module is using for API calls and I am not… --- ## [Data type for Log Message Fields, does keyword add overhead?](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 6\ **Last updated:** [May 8, 2022, 6:23am UTC](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043 "2022-05-08T06:23:46Z")
Currently I'm indexing log messages into Elasticsearch. Generally the initial 'message' field is dissected and stored in the following fields: @timestamp(date), logLevel(keyword), logMessage(keyword/text). … --- ## [Timestamp differs by 6 seconds between Kafka record timestamp and the elasticsearch index timestamp](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056)
**Author:** [@Strive](https://discuss.elastic.co/u/Strive)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 4:20am UTC](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056 "2020-11-04T04:20:46Z")
Hi, There is a ~6 seconds difference in the @timestamp field sent to elasticsearch through Kafka. Here are the details: The JSON object is built in java and is published to Kafka. The Logstash consumes data from Kafk… --- ## [How logstash parse sqlite data to json file](https://discuss.elastic.co/t/how-logstash-parse-sqlite-data-to-json-file/158162)
**Author:** [@T\_Putra\_Safrul\_Huda](https://discuss.elastic.co/u/T_Putra_Safrul_Huda)\ **Replies:** 6\ **Last updated:** [November 26, 2018, 1:35pm UTC](https://discuss.elastic.co/t/how-logstash-parse-sqlite-data-to-json-file/158162 "2018-11-26T13:35:41Z")
my purpose is using elasticsearch for sqlite data analysis and i am use logstash for parse sqlite to json format, i not understand how setting that, can you help me --- ## [How Aggs use template like "template query"?](https://discuss.elastic.co/t/how-aggs-use-template-like-template-query/62898)
**Author:** [@wanglifengwf](https://discuss.elastic.co/u/wanglifengwf)\ **Replies:** 6\ **Last updated:** [October 13, 2016, 9:40am UTC](https://discuss.elastic.co/t/how-aggs-use-template-like-template-query/62898 "2016-10-13T09:40:27Z")
How Aggs use template like "template query"? --- ## [Confusing replica count setting](https://discuss.elastic.co/t/confusing-replica-count-setting/3384)
**Author:** [@Ask\_Bjorn\_Hansen](https://discuss.elastic.co/u/Ask_Bjorn_Hansen)\ **Replies:** 6\ **Last updated:** [September 30, 2010, 10:42am UTC](https://discuss.elastic.co/t/confusing-replica-count-setting/3384 "2010-09-30T10:42:07Z")
Hi everyone, I am running 0.11.0. I have a two node cluster (for testing and not much data). I wanted to make sure that the data is on both nodes so if one goes away, the system will continue running on the othe… --- ## [Combine App and Workplace search](https://discuss.elastic.co/t/combine-app-and-workplace-search/254466)
**Author:** [@icechunk\_k9](https://discuss.elastic.co/u/icechunk_k9)\ **Replies:** 7\ **Last updated:** [November 10, 2020, 3:03pm UTC](https://discuss.elastic.co/t/combine-app-and-workplace-search/254466 "2020-11-10T15:03:21Z")
If we want to use workplace search with an application sources (Confluence) and then include content from our website (Wordpress) into a unified search. How can we do that? it seems like App search (Wordpress) and Workpl… --- ## [How to get exact unique doc count based on some fields](https://discuss.elastic.co/t/how-to-get-exact-unique-doc-count-based-on-some-fields/241718)
**Author:** [@sandeep\_rana](https://discuss.elastic.co/u/sandeep_rana)\ **Replies:** 7\ **Last updated:** [July 21, 2020, 5:38pm UTC](https://discuss.elastic.co/t/how-to-get-exact-unique-doc-count-based-on-some-fields/241718 "2020-07-21T17:38:53Z")
Any way to find exact unique document count .. based on some fields.. I have also tried cardinality its not working as expected --- ## [Could not find java in JAVA\_HOME or bundled at /usr/lib/jvm/java-8-openjdk-amd64/jre//bin/java\\](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-usr-lib-jvm-java-8-openjdk-amd64-jre-bin-java/200983)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 1\ **Last updated:** [September 25, 2019, 12:35pm UTC](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-usr-lib-jvm-java-8-openjdk-amd64-jre-bin-java/200983 "2019-09-25T12:35:31Z")
Hello I am facing issue with JAVA\_HOME can someone help me out with this. --- ## [Upgrade from 6.3.2 to 6.4.0 but have cert errors now and ES won't start](https://discuss.elastic.co/t/upgrade-from-6-3-2-to-6-4-0-but-have-cert-errors-now-and-es-wont-start/145873)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 1\ **Last updated:** [August 26, 2018, 2:51am UTC](https://discuss.elastic.co/t/upgrade-from-6-3-2-to-6-4-0-but-have-cert-errors-now-and-es-wont-start/145873 "2018-08-26T02:51:40Z")
Hello. Just started the upgarde of my Elastic Cluster from 6.3.2 to 6.4.0 but I am getting this error message in my cluster.log file and ES isn't starting. I have x.pack configured and everything was working fine until … --- ## [Running Kibana on multi-node cluster](https://discuss.elastic.co/t/running-kibana-on-multi-node-cluster/132372)
**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\ **Replies:** 1\ **Last updated:** [May 17, 2018, 4:33pm UTC](https://discuss.elastic.co/t/running-kibana-on-multi-node-cluster/132372 "2018-05-17T16:33:43Z")
Hi, Does anyone know if its possible to run Kibana on a multi-node elasticsearch cluster where there is an external load balancer to route traffic to each node? The version of Elasticsearch and Kibana is the latest 6.2… --- ## [Reindex with Logstash (Elasticsearch --\> Filter --\> Elasticsearch) looses data on the way](https://discuss.elastic.co/t/reindex-with-logstash-elasticsearch-filter-elasticsearch-looses-data-on-the-way/110164)
**Author:** [@infomaniac](https://discuss.elastic.co/u/infomaniac)\ **Replies:** 1\ **Last updated:** [December 14, 2017, 11:26am UTC](https://discuss.elastic.co/t/reindex-with-logstash-elasticsearch-filter-elasticsearch-looses-data-on-the-way/110164 "2017-12-14T11:26:01Z")
Hi I am trying to reindex data from a daily index to an daily archive index, while dropping or combining some fields. Easiest way to do this seams to be with LS and elasticsearch input and output with some filters in b… --- ## [One grok pattern for Messages,Secure ,cron and yum.log](https://discuss.elastic.co/t/one-grok-pattern-for-messages-secure-cron-and-yum-log/65902)
**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\ **Replies:** 1\ **Last updated:** [November 17, 2016, 6:38am UTC](https://discuss.elastic.co/t/one-grok-pattern-for-messages-secure-cron-and-yum-log/65902 "2016-11-17T06:38:29Z")
Hello, I would need some help in generating a grok pattern. I am trying to build a grok pattern for Messages,Secure ,cron and yum.log. Although we have a grok pattern for secure and messages file,but it says grok pars… --- ## [Logstash index without timestemp](https://discuss.elastic.co/t/logstash-index-without-timestemp/41141)
**Author:** [@ggilat](https://discuss.elastic.co/u/ggilat)\ **Replies:** 7\ **Last updated:** [February 7, 2016, 8:51pm UTC](https://discuss.elastic.co/t/logstash-index-without-timestemp/41141 "2016-02-07T20:51:51Z")
hello all, i'm ELK newbie and i having a few problems with log reading. i'm trying to read a csv file that have no times-temp field in it. for that i built configuration file using this guide help (https://kevinki… --- ## [How does Filebeat manage problems connecting to Logstash?](https://discuss.elastic.co/t/how-does-filebeat-manage-problems-connecting-to-logstash/34800)
**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\ **Replies:** 1\ **Last updated:** [November 17, 2015, 5:11pm UTC](https://discuss.elastic.co/t/how-does-filebeat-manage-problems-connecting-to-logstash/34800 "2015-11-17T17:11:34Z")
Hello all, I'd like to know how Filebeat behaves when it can't connect with Logstash. From the libbeat documentation, in case Logstash is down (or there is a network problem that prevent it reaching Logstash), Filebe… --- ## [Watcher multiple query with \< and \> in match](https://discuss.elastic.co/t/watcher-multiple-query-with-and-in-match/248691)
**Author:** [@suryanaj](https://discuss.elastic.co/u/suryanaj)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 9:46am UTC](https://discuss.elastic.co/t/watcher-multiple-query-with-and-in-match/248691 "2020-09-16T09:46:10Z")
i am not getting any output and getting number match exception in output in 2nd query. Please suggest. i want to use match like { "match": { "http.response.status\_code": "\<500 && \>599" } }, … --- ## [Point in Polygon query doesn't match document](https://discuss.elastic.co/t/point-in-polygon-query-doesnt-match-document/152133)
**Author:** [@Ganesh\_Kudva](https://discuss.elastic.co/u/Ganesh_Kudva)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 2:26pm UTC](https://discuss.elastic.co/t/point-in-polygon-query-doesnt-match-document/152133 "2018-10-18T14:26:53Z")
I am trying to perform a Point in Polygon query with latest Elasticsearch(version 6.2.4). This is my index mapping { "check": { "mappings": { "doc": { "properties": { "location": { … --- ## [Filebeat monitor nginx 1 record, send ２ records data to elasticsearch, one json format good, the other bad](https://discuss.elastic.co/t/filebeat-monitor-nginx-1-record-send-records-data-to-elasticsearch-one-json-format-good-the-other-bad/146383)
**Author:** [@tomoncle](https://discuss.elastic.co/u/tomoncle)\ **Replies:** 2\ **Last updated:** [August 29, 2018, 2:38am UTC](https://discuss.elastic.co/t/filebeat-monitor-nginx-1-record-send-records-data-to-elasticsearch-one-json-format-good-the-other-bad/146383 "2018-08-29T02:38:53Z")
filebeat Version: filebeat version 6.4.0 (amd64), libbeat 6.4.0 Operating System: centos 7 filebeat.yaml filebeat.inputs: - type: log enabled: true paths: - /var/log/nginx/\*.log filebeat.config.modules: p… --- ## [Query from ES 2.3 to 5.5](https://discuss.elastic.co/t/query-from-es-2-3-to-5-5/94695)
**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 8:28pm UTC](https://discuss.elastic.co/t/query-from-es-2-3-to-5-5/94695 "2017-07-26T20:28:22Z")
We're upgrading from ELK 2.3 to ELK 5.5, I'm trying to make this query work, tried to follow the query changes from ES 2.3 to 5.5 but every time I tweak something in it, different errors came up. Maybe someone can help m… --- ## [Отображение одинаковой записи из разных файлов как разных записей](https://discuss.elastic.co/t/topic/32277)
**Author:** [@11191](https://discuss.elastic.co/u/11191)\ **Replies:** 2\ **Last updated:** [October 16, 2015, 11:08am UTC](https://discuss.elastic.co/t/topic/32277 "2015-10-16T11:08:09Z")
Приветствую, дублирую тут вопрос, т.к. в англоязычной части пока помочь не смогли, суть вот в чем: одинаковая запись существующая в разных логах отображается в единственном экземпляре, а именно: т.е. в поле file 2 зн… --- ## [Release of 7.1.0 elasticsearch-spark-20](https://discuss.elastic.co/t/release-of-7-1-0-elasticsearch-spark-20/181523)
**Author:** [@yogiraj99](https://discuss.elastic.co/u/yogiraj99)\ **Replies:** 1\ **Last updated:** [May 20, 2019, 4:45pm UTC](https://discuss.elastic.co/t/release-of-7-1-0-elasticsearch-spark-20/181523 "2019-05-20T16:45:00Z")
Hi Team, When do you plan to release the elasticsearch-spark-20\_2.11 7.1.0 version. We are looking for a fix on #1276. --- ## [Issue with Node.js Vulnerabilities (CVE-2025) in Kibana 8.18.0](https://discuss.elastic.co/t/issue-with-node-js-vulnerabilities-cve-2025-in-kibana-8-18-0/378905)
**Author:** [@debbbuu](https://discuss.elastic.co/u/debbbuu)\ **Replies:** 3\ **Last updated:** [September 10, 2025, 8:49am UTC](https://discuss.elastic.co/t/issue-with-node-js-vulnerabilities-cve-2025-in-kibana-8-18-0/378905 "2025-09-10T08:49:09Z")
Hi, As part of the vulnerability assessment (VA) scan on our ELK servers, we identified that the Node.js version is affected by multiple vulnerabilities. We are using a self-managed cluster. Current Kibana Version: 8.1… --- ## [How to know Elasticsearch daily log intake?](https://discuss.elastic.co/t/how-to-know-elasticsearch-daily-log-intake/269104)
**Author:** [@mahesh.yerawar](https://discuss.elastic.co/u/mahesh.yerawar)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 8:47pm UTC](https://discuss.elastic.co/t/how-to-know-elasticsearch-daily-log-intake/269104 "2021-04-02T20:47:01Z")
Hi, I'm looking to understand how much data is getting ingested to our ELK cluster on a daily basis. anyone has any idea how to get these details? Thank you. --- ## [Timelion not equal](https://discuss.elastic.co/t/timelion-not-equal/249171)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 3\ **Last updated:** [September 30, 2020, 8:36pm UTC](https://discuss.elastic.co/t/timelion-not-equal/249171 "2020-09-30T20:36:07Z")
Here is my current Timelion query. How do I EXCLUDE lines? I'd like to exclude apache log lines that have source.ip ::1 and destination.domain localhost. Thanks. .es(q='event.dataset:apache.access AND agent.name:server7… --- ## [Single module for multiple similar logs](https://discuss.elastic.co/t/single-module-for-multiple-similar-logs/216931)
**Author:** [@Jim\_Ivey](https://discuss.elastic.co/u/Jim_Ivey)\ **Replies:** 3\ **Last updated:** [January 29, 2020, 5:07pm UTC](https://discuss.elastic.co/t/single-module-for-multiple-similar-logs/216931 "2020-01-29T17:07:15Z")
We have multiple instances of the same service. Consider, for example: sudo service my\_service\_1 start sudo service my\_service\_2 start sudo service my\_service\_3 start with log files respectively at: /var/log/my\_servi… --- ## [Bucket Script pipeline aggregation is not working with filter aggregation](https://discuss.elastic.co/t/bucket-script-pipeline-aggregation-is-not-working-with-filter-aggregation/196861)
**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 12:39pm UTC](https://discuss.elastic.co/t/bucket-script-pipeline-aggregation-is-not-working-with-filter-aggregation/196861 "2019-09-25T12:39:31Z")
Fails with class org.elasticsearch.search.aggregations.bucket.filter.InternalFilter cannot be cast to class org.elasticsearch.search.aggregations.InternalMultiBucketAggregation Should it be that restrictive? For instan… --- ## [Error: unknown command "enroll" for "metricbeat"](https://discuss.elastic.co/t/error-unknown-command-enroll-for-metricbeat/157132)
**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\ **Replies:** 3\ **Last updated:** [November 30, 2018, 3:22pm UTC](https://discuss.elastic.co/t/error-unknown-command-enroll-for-metricbeat/157132 "2018-11-30T15:22:49Z")
Anyone know if Beats Central Management in 6.5 is supported on Metricbeat 6.5 for Windows?? using: PS C:\\Program Files\\metricbeat\> metricbeat.exe enroll https://localhost:5601/kibana d20f2f72baab42 c78a1961267424c086 T… --- ## [Cannot start logstash using bin\\logstash.bat -f logstash-lab.conf -r](https://discuss.elastic.co/t/cannot-start-logstash-using-bin-logstash-bat-f-logstash-lab-conf-r/80723)
**Author:** [@siq992](https://discuss.elastic.co/u/siq992)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 12:37am UTC](https://discuss.elastic.co/t/cannot-start-logstash-using-bin-logstash-bat-f-logstash-lab-conf-r/80723 "2017-03-31T00:37:11Z")
I am a newbie. I am trying to be as clear as I can. A team member recently attended elastic conference and brought back a zipped folder containing some training material and elastic stack 5.2.0. I am trying to follow th… --- ## [How to set max\_clause\_count in elasticsearch?](https://discuss.elastic.co/t/how-to-set-max-clause-count-in-elasticsearch/67376)
**Author:** [@madhan](https://discuss.elastic.co/u/madhan)\ **Replies:** 3\ **Last updated:** [November 28, 2016, 6:21pm UTC](https://discuss.elastic.co/t/how-to-set-max-clause-count-in-elasticsearch/67376 "2016-11-28T18:21:41Z")
I keep getting max\_clause\_count error in elasticsearch. I'm directly passing more than 2000 id's and i'm getting max\_clause\_count error. How to overcome this... --- ## [Issue in filebeat when file got rollover and deleted](https://discuss.elastic.co/t/issue-in-filebeat-when-file-got-rollover-and-deleted/61369)
**Author:** [@santhu227](https://discuss.elastic.co/u/santhu227)\ **Replies:** 3\ **Last updated:** [October 2, 2016, 7:43pm UTC](https://discuss.elastic.co/t/issue-in-filebeat-when-file-got-rollover-and-deleted/61369 "2016-10-02T19:43:00Z")
Hi all., We are using filebeat to push log to elastic search via logstash. Under heavy load the log is rolling over for every half an hour later once it crossed the number of files specified in log4j ( for say max roll… --- ## [Best\_compression feature of ElasticSearch](https://discuss.elastic.co/t/best-compression-feature-of-elasticsearch/43856)
**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\ **Replies:** 3\ **Last updated:** [March 10, 2016, 6:28am UTC](https://discuss.elastic.co/t/best-compression-feature-of-elasticsearch/43856 "2016-03-10T06:28:55Z")
I am using elasticsearch version 1.7. Will the best\_compression feature work? In which version was this feature introduced? --- ## [Extracting multiple schema and multiple tables data to Elasticsearch](https://discuss.elastic.co/t/extracting-multiple-schema-and-multiple-tables-data-to-elasticsearch/43543)
**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\ **Replies:** 3\ **Last updated:** [March 6, 2016, 7:57am UTC](https://discuss.elastic.co/t/extracting-multiple-schema-and-multiple-tables-data-to-elasticsearch/43543 "2016-03-06T07:57:51Z")
Continuing the discussion from 1) How to integrate Elasticsearch-Hadoop with MySQL DB at the backend and User interface developed in dhtmlx, Spring. 2) Also how to integrate Elasticsearch-Hadoop with Services written in … --- ## [Insertion de données dans ElasticSearch](https://discuss.elastic.co/t/insertion-de-donnees-dans-elasticsearch/93574)
**Author:** [@Edta](https://discuss.elastic.co/u/Edta)\ **Replies:** 0\ **Last updated:** [July 18, 2017, 12:00pm UTC](https://discuss.elastic.co/t/insertion-de-donnees-dans-elasticsearch/93574 "2017-07-18T12:00:30Z")
Bonjour, Tout d'abord, voici mon objectif : Visualiser les données du Endpoint "metrics" d'une application SpringBoot. On m'a demandé de réaliser cet objectif avec la suite ELK. J'ai essayé de mettre en place cette s… --- ## [Defend API integration](https://discuss.elastic.co/t/defend-api-integration/329487)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 4\ **Last updated:** [May 2, 2023, 6:03am UTC](https://discuss.elastic.co/t/defend-api-integration/329487 "2023-05-02T06:03:29Z")
Hi, I would like to create a customized Elastic Defend Integration via API, unfortunately such integration doesn't have the Preview API request as other integrations. I'm able to create the integration with the default… --- ## [Unable to show empty buckets when using Date Histogram on @timestamp field](https://discuss.elastic.co/t/unable-to-show-empty-buckets-when-using-date-histogram-on-timestamp-field/279238)
**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\ **Replies:** 4\ **Last updated:** [July 21, 2021, 10:32am UTC](https://discuss.elastic.co/t/unable-to-show-empty-buckets-when-using-date-histogram-on-timestamp-field/279238 "2021-07-21T10:32:00Z")
Hi Team, I am retrieving results of a query for last 7 days in visualisation, but in the response i am not seeing results for empty buckets i.e its not showing any result for that day when there is no data. There is no … --- ## [How to Run a single YAML IT test?](https://discuss.elastic.co/t/how-to-run-a-single-yaml-it-test/209928)
**Author:** [@Ethan-Zhang](https://discuss.elastic.co/u/Ethan-Zhang)\ **Replies:** 4\ **Last updated:** [November 29, 2019, 12:58pm UTC](https://discuss.elastic.co/t/how-to-run-a-single-yaml-it-test/209928 "2019-11-29T12:58:00Z")
Hi, Elastic team: I read the doc from TESTING, and If we want to run whole YAML IT, we should do as below: ./gradlew :distribution:archives:integ-test-zip:integTest -Dtests.class="org.elasticsearch.test.rest.\*Yaml\*IT" … --- ## [@elasticapm.capture\_span not working in some modules](https://discuss.elastic.co/t/elasticapm-capture-span-not-working-in-some-modules/138686)
**Author:** [@11191](https://discuss.elastic.co/u/11191)\ **Replies:** 4\ **Last updated:** [July 5, 2018, 11:53am UTC](https://discuss.elastic.co/t/elasticapm-capture-span-not-working-in-some-modules/138686 "2018-07-05T11:53:00Z")
Decorator elasticapm.capture\_span doesnt work in some modules while working in others. I dont do anything except importing elasticapm, so may be there are other dependencies? Anyone knows how to debug decorators and can… --- ## [Logstash: TCP output with tls is not working](https://discuss.elastic.co/t/logstash-tcp-output-with-tls-is-not-working/134193)
**Author:** [@mahibabar](https://discuss.elastic.co/u/mahibabar)\ **Replies:** 4\ **Last updated:** [June 8, 2018, 11:54am UTC](https://discuss.elastic.co/t/logstash-tcp-output-with-tls-is-not-working/134193 "2018-06-08T11:54:31Z")
Hello, I am trying to send events over secure TCP from logstash but facing issues with ssl settings: Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@inlikefletch](https://discuss.elastic.co/u/inlikefletch)\ **Replies:** 4\ **Last updated:** [January 7, 2016, 12:16am UTC](https://discuss.elastic.co/t/courier-fetch-x-of-y-shards-failed-field-type-double-mapping/31342 "2016-01-07T00:16:51Z") I am getting Courier Fetch shard failed errors when trying to build a visualization. I have narrowed it down to one field I am trying to map as number to obtain an average. I even try clearing data mapping, and I still g… --- ## [Elasticsearch 7.13 | Error deleting field mapping script, cluster return red state](https://discuss.elastic.co/t/elasticsearch-7-13-error-deleting-field-mapping-script-cluster-return-red-state/274655)
**Author:** [@joao](https://discuss.elastic.co/u/joao)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-7-13-error-deleting-field-mapping-script-cluster-return-red-state/274655 "2021-06-01T14:48:33Z")
Hi, I've been testing the new features in the Elasticsearch 7.13, and I have a problem to deleting a field mapping script. This is my mapping: PUT runtime\_2\_indexed\_field { "mappings": { "propert… --- ## [How can i change the @timestamp in a dashboard?](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427)
**Author:** [@Raul\_dum](https://discuss.elastic.co/u/Raul_dum)\ **Replies:** 1\ **Last updated:** [December 8, 2022, 10:09pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427 "2022-12-08T22:09:38Z")
I want to change the timestamp from @timestamp per 12 hours to per seconds,if that's possible. --- ## [Copy values from one field to another within a nested object](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478)
**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478 "2022-01-05T14:18:45Z")
I have a document that has the structure with an field object with a nested field internally. The nested field is responsible for storing all interactions that occurred in an internal communication. It happens that I ne… --- ## [Search on "copy\_to"-"keyword" Field and Get/View indexed data of the "copy\_to"-"keyword"-Field (not "\_source")](https://discuss.elastic.co/t/search-on-copy-to-keyword-field-and-get-view-indexed-data-of-the-copy-to-keyword-field-not-source/216419)
**Author:** [@mero](https://discuss.elastic.co/u/mero)\ **Replies:** 1\ **Last updated:** [January 24, 2020, 4:22pm UTC](https://discuss.elastic.co/t/search-on-copy-to-keyword-field-and-get-view-indexed-data-of-the-copy-to-keyword-field-not-source/216419 "2020-01-24T16:22:45Z")
Hi together, is there a possibility to see or view the indexed data stored in an elasticsearch index? I have a Field which is filled by using "copy\_to" of other Fields ("Keyword") and now i have a query that is not fin… --- ## [Debian 9: ./bin/kibana running, but connection to port 5601 refused](https://discuss.elastic.co/t/debian-9-bin-kibana-running-but-connection-to-port-5601-refused/171458)
**Author:** [@realtebo](https://discuss.elastic.co/u/realtebo)\ **Replies:** 1\ **Last updated:** [March 8, 2019, 4:55pm UTC](https://discuss.elastic.co/t/debian-9-bin-kibana-running-but-connection-to-port-5601-refused/171458 "2019-03-08T16:55:18Z")
Hi ! I'm here for first time. I installed on a debian 9 elastic search and then I installed kibana. I am testing that is working, using ./bin/kibana Is it supposed to run using sudo ? In both normal and sudo mode, … --- ## [How to extend MetricBeat to execute external scripts?](https://discuss.elastic.co/t/how-to-extend-metricbeat-to-execute-external-scripts/102104)
**Author:** [@pascaldergane](https://discuss.elastic.co/u/pascaldergane)\ **Replies:** 1\ **Last updated:** [October 9, 2017, 8:57pm UTC](https://discuss.elastic.co/t/how-to-extend-metricbeat-to-execute-external-scripts/102104 "2017-10-09T20:57:52Z")
Hi all, I've got some "old" probes based on snmp command (snmpwalk, snmpget). I would like to reuse them. How can extend metricbeat to execute my old scripts? --- ## [StackTrace with multiline filter on logstash](https://discuss.elastic.co/t/stacktrace-with-multiline-filter-on-logstash/91718)
**Author:** [@Govind\_Raj](https://discuss.elastic.co/u/Govind_Raj)\ **Replies:** 1\ **Last updated:** [July 6, 2017, 8:20am UTC](https://discuss.elastic.co/t/stacktrace-with-multiline-filter-on-logstash/91718 "2017-07-06T08:20:32Z")
hi We user beats to send the logs to our centralized log server. We are finding it bit difficult to parse a stack trace . The sample log is below , INFO 2017-07-02 03:46:52,714 \[\[corn-ice-1.0.0-SNAPSHOT\].schedule-db\_… [Previous page](https://discuss.elastic.co/top.md?page=1399&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1401&per_page=50&period=all)