# Top

**URL:** https://discuss.elastic.co/top.md?page=1404&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1405

---

## [Using a boolean setting in Java plugin crashes logstash](https://discuss.elastic.co/t/using-a-boolean-setting-in-java-plugin-crashes-logstash/189120)

<div class="topic-metadata">

**Author:** [@SavioAlp](https://discuss.elastic.co/u/SavioAlp)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 2:52pm UTC](https://discuss.elastic.co/t/using-a-boolean-setting-in-java-plugin-crashes-logstash/189120 "2019-07-05T14:52:01Z")

</div>

I am building my own java filter plugin for logstash and trying to make use of the booleanSetting available in PluginConfigSpec, but when I attempt to use it in a logstash instance it throws a IllegalStateException I've …

---

## [Authentification before connecting in Kibana with Kubernetes and Ingress](https://discuss.elastic.co/t/authentification-before-connecting-in-kibana-with-kubernetes-and-ingress/178631)

<div class="topic-metadata">

**Author:** [@Lydia\_Khalfoun](https://discuss.elastic.co/u/Lydia_Khalfoun)\
**Replies:** 1\
**Last updated:** [April 26, 2019, 4:24pm UTC](https://discuss.elastic.co/t/authentification-before-connecting-in-kibana-with-kubernetes-and-ingress/178631 "2019-04-26T16:24:29Z")

</div>

Hi, I had a kubernetes cluster with kibana and Elasticsearch. It works well. Now I want to add an authentification with Ingress (user/password). I want results like this link : https://blog.bigbinary.com/2018/08/14/usin…

---

## [Problem in updating beat.hostname](https://discuss.elastic.co/t/problem-in-updating-beat-hostname/50409)

<div class="topic-metadata">

**Author:** [@preehana](https://discuss.elastic.co/u/preehana)\
**Replies:** 1\
**Last updated:** [May 19, 2016, 10:38am UTC](https://discuss.elastic.co/t/problem-in-updating-beat-hostname/50409 "2016-05-19T10:38:59Z")

</div>

Hello, I am facing a problem in updating beat.hostname using mutate filter.I have made the following changes in my logstash configuration file . input { beats { port =\> "5044" } } …

---

## [Testing 2.3.0 - script\_lang not supported \[groovy\]](https://discuss.elastic.co/t/testing-2-3-0-script-lang-not-supported-groovy/46259)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\
**Replies:** 1\
**Last updated:** [April 5, 2016, 2:24am UTC](https://discuss.elastic.co/t/testing-2-3-0-script-lang-not-supported-groovy/46259 "2016-04-05T02:24:45Z")

</div>

\<dependency\> \<groupId\>org.codehaus.groovy\</groupId\> \<artifactId\>groovy-all\</artifactId\> \<version\>2.4.6\</version\> \</dependency\> Configuration: .put("script.inline", true) .put("script.inde…

---

## [Extracting fields and then indexing JSON in a log](https://discuss.elastic.co/t/extracting-fields-and-then-indexing-json-in-a-log/43936)

<div class="topic-metadata">

**Author:** [@poc](https://discuss.elastic.co/u/poc)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 8:26pm UTC](https://discuss.elastic.co/t/extracting-fields-and-then-indexing-json-in-a-log/43936 "2016-03-09T20:26:42Z")

</div>

Hi there, I am trying to get a proof of concept up and running with ELK to see if it could be a replacement for our Splunk installation. There is a particular log line in our tomcat application that gets logged for each…

---

## [How to find connection between filebeat and logstash](https://discuss.elastic.co/t/how-to-find-connection-between-filebeat-and-logstash/38581)

<div class="topic-metadata">

**Author:** [@usahitya](https://discuss.elastic.co/u/usahitya)\
**Replies:** 1\
**Last updated:** [January 7, 2016, 9:08am UTC](https://discuss.elastic.co/t/how-to-find-connection-between-filebeat-and-logstash/38581 "2016-01-07T09:08:32Z")

</div>

Hi Friends, I installed Kibana, elasticsearch, logstash on one server and installed filebeat on other server. there is no error while installing logstash or filebeat or kibana, elasticsearch, But there is no data is co…

---

## [Write Elasticsearch Plugin without using River](https://discuss.elastic.co/t/write-elasticsearch-plugin-without-using-river/2125)

<div class="topic-metadata">

**Author:** [@raghav280392](https://discuss.elastic.co/u/raghav280392)\
**Replies:** 1\
**Last updated:** [July 21, 2015, 11:56am UTC](https://discuss.elastic.co/t/write-elasticsearch-plugin-without-using-river/2125 "2015-07-21T11:56:35Z")

</div>

Hi I have created a plugin to generate Excel reports from Elasticsearch. Basically this plugin takes in simple input JSON and can send the report as mail or save the report to the server. Plugin: https://github.com/ragh…

---

## [Can a mapping conflict be resolved by deleting the old indices?](https://discuss.elastic.co/t/can-a-mapping-conflict-be-resolved-by-deleting-the-old-indices/29909)

<div class="topic-metadata">

**Author:** [@cinhtau](https://discuss.elastic.co/u/cinhtau)\
**Replies:** 0\
**Last updated:** [September 24, 2015, 10:53am UTC](https://discuss.elastic.co/t/can-a-mapping-conflict-be-resolved-by-deleting-the-old-indices/29909 "2015-09-24T10:53:46Z")

</div>

Dear community, we have several mapping conflicts in across our indices (separated on a daily basis). Mapping conflict! 60 fields are defined as several types (string, integer, etc) across the indices that match this …

---

## [Kibana isn't being displayed in web browser](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553)

<div class="topic-metadata">

**Author:** [@ROPA8](https://discuss.elastic.co/u/ROPA8)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 5:06pm UTC](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553 "2021-02-08T17:06:22Z")

</div>

Hi all, I have a problem with my Kibana. Elastic Search and Kibana run well but kibana isn't loaded in web browser and it just shows white page at localhost:5602. kibana console last messages: before starting saved o…

---

## [Rejections in Thread\_Pool v6.2.4](https://discuss.elastic.co/t/rejections-in-thread-pool-v6-2-4/287689)

<div class="topic-metadata">

**Author:** [@CCCowboy](https://discuss.elastic.co/u/CCCowboy)\
**Replies:** 4\
**Last updated:** [October 27, 2021, 7:02am UTC](https://discuss.elastic.co/t/rejections-in-thread-pool-v6-2-4/287689 "2021-10-27T07:02:42Z")

</div>

I have a problem with a node (different each time) that stops responding. When checking \_cat/thread\_pool in "hanging mode", the GET queue is full and have started rejected requests. The log file, though, indicates that …

---

## [High RAM usage by data nodes (Kubernetes)](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008)

<div class="topic-metadata">

**Author:** [@itsron](https://discuss.elastic.co/u/itsron)\
**Replies:** 4\
**Last updated:** [January 26, 2021, 7:58pm UTC](https://discuss.elastic.co/t/high-ram-usage-by-data-nodes-kubernetes/262008 "2021-01-26T19:58:32Z")

</div>

We are running v7.10.1 on Kubernetes. We've 4 data nodes each with 4 cpus and 16gb RAM (8gb heap). Currently it has only metricbeat and filebeat writing data into it which is a total of ~1.5M docs/hour (~10GB/day,retaine…

---

## [Kibana Dev Tools not working after enabling TLS](https://discuss.elastic.co/t/kibana-dev-tools-not-working-after-enabling-tls/229739)

<div class="topic-metadata">

**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\
**Replies:** 4\
**Last updated:** [April 26, 2020, 4:35am UTC](https://discuss.elastic.co/t/kibana-dev-tools-not-working-after-enabling-tls/229739 "2020-04-26T04:35:17Z")

</div>

Hi There, I'm running ELK 7.6.2. My ES nodes are 10.10.10.41-43 My Kibana node is 10.10.10.46 After enabling TLS, Kibana Dev Tools does not work. The error is: ki01 kibana\[1916\]: {"type":"error","@timestamp":"2020-0…

---

## [Настройки для поиска телефонных номеров](https://discuss.elastic.co/t/topic/222322)

<div class="topic-metadata">

**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 5:38pm UTC](https://discuss.elastic.co/t/topic/222322 "2020-03-05T17:38:55Z")

</div>

Доброго времени суток. Хочу перевести телефонный справочник сотрудников (3 основных поля - Фио, номер и заметка) из MS SQL на Elastic (так исторически сложилось, что в заметках о сотрудниках содержится значимая текстов…

---

## [Kibana SSO via Azure user unauthorized](https://discuss.elastic.co/t/kibana-sso-via-azure-user-unauthorized/160187)

<div class="topic-metadata">

**Author:** [@rani](https://discuss.elastic.co/u/rani)\
**Replies:** 4\
**Last updated:** [December 17, 2018, 8:51am UTC](https://discuss.elastic.co/t/kibana-sso-via-azure-user-unauthorized/160187 "2018-12-17T08:51:35Z")

</div>

Hello there I'm currently trying to set up single sign-on via Azure. If I log in with my test account I can pass the authentication but I get the following error message: {"message":"action \[indices:data/read/search\] …

---

## [Kibana auto-refresh for custome changes](https://discuss.elastic.co/t/kibana-auto-refresh-for-custome-changes/96513)

<div class="topic-metadata">

**Author:** [@anuroop](https://discuss.elastic.co/u/anuroop)\
**Replies:** 4\
**Last updated:** [September 4, 2017, 7:22pm UTC](https://discuss.elastic.co/t/kibana-auto-refresh-for-custome-changes/96513 "2017-09-04T19:22:34Z")

</div>

how to configure Kibana to do Auto refresh and also show only message and time stamp in GUI . We are doing through kibana GUI but if other user and opening they are not greeting my updated custome change , is there any w…

---

## [Range query inside another range query in ElasticSearch](https://discuss.elastic.co/t/range-query-inside-another-range-query-in-elasticsearch/86981)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 4\
**Last updated:** [May 26, 2017, 11:49am UTC](https://discuss.elastic.co/t/range-query-inside-another-range-query-in-elasticsearch/86981 "2017-05-26T11:49:21Z")

</div>

Hello, I have two different range queries & I want to apply one range query within another range query. But ES does not allow should query to be used in a range query. Is there any other way to perform this query? I …

---

## [Elasticsearch creating files but not releasing them until I restart the service](https://discuss.elastic.co/t/elasticsearch-creating-files-but-not-releasing-them-until-i-restart-the-service/37385)

<div class="topic-metadata">

**Author:** [@swarzech](https://discuss.elastic.co/u/swarzech)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 9:06pm UTC](https://discuss.elastic.co/t/elasticsearch-creating-files-but-not-releasing-them-until-i-restart-the-service/37385 "2015-12-16T21:06:18Z")

</div>

I am running elastcsearch 0.90.5 and recently I have been having issues with the disk running out of space. This is not caused by my indexes increasing in size but by the elasticsearch service holding on to the disk spa…

---

## [ELK Stack into AKS](https://discuss.elastic.co/t/elk-stack-into-aks/339086)

<div class="topic-metadata">

**Author:** [@izbant](https://discuss.elastic.co/u/izbant)\
**Replies:** 6\
**Last updated:** [August 11, 2023, 2:30pm UTC](https://discuss.elastic.co/t/elk-stack-into-aks/339086 "2023-08-11T14:30:11Z")

</div>

Hello, I am trying to deploy ELK Stack with basic license into my AKS cluster, but i am unable to secure connection between logstash and elasticsearch. Is there any documentation for deploying ELK Stack into an AKS clu…

---

## [Esrally client option](https://discuss.elastic.co/t/esrally-client-option/329638)

<div class="topic-metadata">

**Author:** [@tmdgk490255](https://discuss.elastic.co/u/tmdgk490255)\
**Replies:** 6\
**Last updated:** [April 12, 2023, 9:32am UTC](https://discuss.elastic.co/t/esrally-client-option/329638 "2023-04-12T09:32:40Z")

</div>

there is some options to specify the number of clients for certain operation in rally track "schedule": \[ { "operation": "force-merge", "clients": 1 // here }, { "operation": "match-all-qu…

---

## [How to join/combine data from 2 indices using a common/join field in Elastic?](https://discuss.elastic.co/t/how-to-join-combine-data-from-2-indices-using-a-common-join-field-in-elastic/317195)

<div class="topic-metadata">

**Author:** [@AshwiniPrabhu](https://discuss.elastic.co/u/AshwiniPrabhu)\
**Replies:** 6\
**Last updated:** [October 26, 2022, 6:10am UTC](https://discuss.elastic.co/t/how-to-join-combine-data-from-2-indices-using-a-common-join-field-in-elastic/317195 "2022-10-26T06:10:10Z")

</div>

Hi, Thank you for your time for reading the question. I have 2 indices: Index 1 (Activation) - Order Id, Activation Date Index 2 (Identity) - Order Id, Identity Date. The join field/common field is Order id. I have t…

---

## [Upgrade from ELK 5.4 to 7.6](https://discuss.elastic.co/t/upgrade-from-elk-5-4-to-7-6/228721)

<div class="topic-metadata">

**Author:** [@111320](https://discuss.elastic.co/u/111320)\
**Replies:** 6\
**Last updated:** [April 19, 2020, 6:05pm UTC](https://discuss.elastic.co/t/upgrade-from-elk-5-4-to-7-6/228721 "2020-04-19T18:05:11Z")

</div>

I need to upgrade my system (linux) from ELK 5.4 to 7.6. I saw several guides about using Upgrade Assistant but it is not exist in Kibana 5.4. I don't need the old indices and I already delete all indices. The system …

---

## [Query to find if a field exists in last 7 hours](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 8\
**Last updated:** [August 11, 2021, 2:20pm UTC](https://discuss.elastic.co/t/query-to-find-if-a-field-exists-in-last-7-hours/281056 "2021-08-11T14:20:44Z")

</div>

I am trying to find documents containing opsgenieAction:create in the last 7 hours. I constructed the following query but somehow the result is not as expected. can someone help to find what is wrong here? Query : GET…

---

## [Packetbeat hardware / software requirements](https://discuss.elastic.co/t/packetbeat-hardware-software-requirements/271729)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 8\
**Last updated:** [May 20, 2021, 11:20pm UTC](https://discuss.elastic.co/t/packetbeat-hardware-software-requirements/271729 "2021-05-20T23:20:01Z")

</div>

I have a sensor with a i5-4590, 8GB memory running packetbeat and am still getting "dropped\_because\_of\_gaps" I've followed all the directions about enabling af\_packet, etc yet even on a low traffic link (1-5mbps) I stil…

---

## [Problem with Dashboard on system module (URGENT)](https://discuss.elastic.co/t/problem-with-dashboard-on-system-module-urgent/171777)

<div class="topic-metadata">

**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\
**Replies:** 8\
**Last updated:** [March 14, 2019, 7:28am UTC](https://discuss.elastic.co/t/problem-with-dashboard-on-system-module-urgent/171777 "2019-03-14T07:28:21Z")

</div>

Hi, I get the following error, I don't understand why this is happening. Why not load values? Logstash input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["http://172.28.26.152:9200"\] m…

---

## [Running Rally race on benchmark-only pipeline gives TransportError 302](https://discuss.elastic.co/t/running-rally-race-on-benchmark-only-pipeline-gives-transporterror-302/166397)

<div class="topic-metadata">

**Author:** [@pitamonster](https://discuss.elastic.co/u/pitamonster)\
**Replies:** 3\
**Last updated:** [February 28, 2019, 4:50am UTC](https://discuss.elastic.co/t/running-rally-race-on-benchmark-only-pipeline-gives-transporterror-302/166397 "2019-02-28T04:50:39Z")

</div>

Hello! First thank you so much for building such an exciting tool! I am completely new to Rally and am attempting to benchmark an existing cluster that we host in ElasticCloud. I've created a custom track and am attempti…

---

## [Logstash-filter-for multiple log formats](https://discuss.elastic.co/t/logstash-filter-for-multiple-log-formats/143145)

<div class="topic-metadata">

**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\
**Replies:** 3\
**Last updated:** [August 6, 2018, 11:26am UTC](https://discuss.elastic.co/t/logstash-filter-for-multiple-log-formats/143145 "2018-08-06T11:26:31Z")

</div>

Hi, How to parse logs using filters in logstash, so that i will get fields in kibana Examples of my logs shown below 2018-08-06 00:00:03,828 \[ Logging.java:http-nio-9093-exec-141:50\] - Request "{"request":…

---

## [Data showing wrong when searched](https://discuss.elastic.co/t/data-showing-wrong-when-searched/98934)

<div class="topic-metadata">

**Author:** [@vaibhav2903](https://discuss.elastic.co/u/vaibhav2903)\
**Replies:** 8\
**Last updated:** [August 31, 2017, 7:43am UTC](https://discuss.elastic.co/t/data-showing-wrong-when-searched/98934 "2017-08-31T07:43:38Z")

</div>

Hi! i have a dataset of more than 10 lac rows. I have integrated elasticsearch with Mysql using logstash. When i type the following URL to fetch in postman, http://localhost:9200/persondetails/Document/\_search?q=\* i g…

---

## [GeoIp is not working with packetbeat](https://discuss.elastic.co/t/geoip-is-not-working-with-packetbeat/68451)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 3\
**Last updated:** [December 14, 2016, 7:56pm UTC](https://discuss.elastic.co/t/geoip-is-not-working-with-packetbeat/68451 "2016-12-14T19:56:21Z")

</div>

input { beats { port =\> 7467 } } filter { geoip { source =\> "dest.ip" target =\> "dest.ip\_location" database =\> "/opt/geoip/GeoLite2-City.mmdb" (ive trie…

---

## [IIS Logs - Using Logstash as Forwarder and second Logstash Server indexing the data into Elasticsearch](https://discuss.elastic.co/t/iis-logs-using-logstash-as-forwarder-and-second-logstash-server-indexing-the-data-into-elasticsearch/66914)

<div class="topic-metadata">

**Author:** [@vikram\_yerneni](https://discuss.elastic.co/u/vikram_yerneni)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 8:50pm UTC](https://discuss.elastic.co/t/iis-logs-using-logstash-as-forwarder-and-second-logstash-server-indexing-the-data-into-elasticsearch/66914 "2016-12-05T20:50:21Z")

</div>

Hello All, Here is the issue I am facing: I am using Logstash Agent as a forwarder on our Windows Server 2008 R2 for indexing the IIS logs. And for the logstash forwarder conf file I relied on this site: https://blog.sst…

---

## [Elasticsearch Collerator](https://discuss.elastic.co/t/elasticsearch-collerator/46960)

<div class="topic-metadata">

**Author:** [@Ilam](https://discuss.elastic.co/u/Ilam)\
**Replies:** 3\
**Last updated:** [April 13, 2016, 10:34am UTC](https://discuss.elastic.co/t/elasticsearch-collerator/46960 "2016-04-13T10:34:45Z")

</div>

Hello, I installed ELK, sending logs to ElasticSearch and display the results on Kibana. But I do not know how to correlate the information. What do you use how free tool for correlation? I tried Watcher, but he is payin…

---

## [ElasticSearch and CentOS 7: Failed to start elasticsearch-.service: Unit not found](https://discuss.elastic.co/t/elasticsearch-and-centos-7-failed-to-start-elasticsearch-service-unit-not-found/217676)

<div class="topic-metadata">

**Author:** [@psohn](https://discuss.elastic.co/u/psohn)\
**Replies:** 0\
**Last updated:** [February 3, 2020, 6:57pm UTC](https://discuss.elastic.co/t/elasticsearch-and-centos-7-failed-to-start-elasticsearch-service-unit-not-found/217676 "2020-02-03T18:57:02Z")

</div>

Hello, First time trying to install and configure ElkStack on CentOS7 and ran into some issues. Was able to install the Elasticsearch package, however, I have not been able to start ElasticSearch after using systemctl s…

---

## [useNavigate() and useSearchParams() gives Object(...) is not a function error](https://discuss.elastic.co/t/usenavigate-and-usesearchparams-gives-object-is-not-a-function-error/336955)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 1\
**Last updated:** [June 29, 2023, 9:59am UTC](https://discuss.elastic.co/t/usenavigate-and-usesearchparams-gives-object-is-not-a-function-error/336955 "2023-06-29T09:59:45Z")

</div>

Hi, I am developing a custom plugin using React in Kibana main branch (8.9). When I use useSearchParams() or useNavigate() from react-router v6, I get an error in the browser saying Object(...) is not a function. But w…

---

## [IIS module under filebeat not populating fields in discover](https://discuss.elastic.co/t/iis-module-under-filebeat-not-populating-fields-in-discover/321242)

<div class="topic-metadata">

**Author:** [@Priya\_Vardhan](https://discuss.elastic.co/u/Priya_Vardhan)\
**Replies:** 7\
**Last updated:** [December 14, 2022, 11:22pm UTC](https://discuss.elastic.co/t/iis-module-under-filebeat-not-populating-fields-in-discover/321242 "2022-12-14T23:22:40Z")

</div>

Hi All, I have enabled IIS module under filebeat after providing the log path for both access and error. I can see the IIS fields getting loaded in filebeat index, but it is not showing in discover. The data is not av…

---

## [Elastic Agent stops working](https://discuss.elastic.co/t/elastic-agent-stops-working/266219)

<div class="topic-metadata">

**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\
**Replies:** 7\
**Last updated:** [March 18, 2021, 3:52pm UTC](https://discuss.elastic.co/t/elastic-agent-stops-working/266219 "2021-03-18T15:52:18Z")

</div>

I've installed elastic agent and it connects to my Kibana, but after some seconds I get this error: "Application: metricbeat--7.11.1\[e9e46cd0-792e-11eb-8062-9be23ea21776\]: State changed to FAILED: 1 error: 1 error: Error…

---

## [Using field value from one filter logstash to another field](https://discuss.elastic.co/t/using-field-value-from-one-filter-logstash-to-another-field/204689)

<div class="topic-metadata">

**Author:** [@billymerendina](https://discuss.elastic.co/u/billymerendina)\
**Replies:** 1\
**Last updated:** [October 22, 2019, 4:17pm UTC](https://discuss.elastic.co/t/using-field-value-from-one-filter-logstash-to-another-field/204689 "2019-10-22T16:17:10Z")

</div>

Hi everyone, I have a question for you. I use Filebeat (two different log file input) , Logstash Elastisearch and Kibana and I want to use a field value from a filter logstash conf file and use it on another field with…

---

## [All Elasticsearch Indices in red(25%) & yellow(75%)](https://discuss.elastic.co/t/all-elasticsearch-indices-in-red-25-yellow-75/185790)

<div class="topic-metadata">

**Author:** [@ManimaranS](https://discuss.elastic.co/u/ManimaranS)\
**Replies:** 7\
**Last updated:** [June 17, 2019, 8:08am UTC](https://discuss.elastic.co/t/all-elasticsearch-indices-in-red-25-yellow-75/185790 "2019-06-17T08:08:38Z")

</div>

Hi I'm using 6.6.2 version with 3 nodes, having 1 as master. The uploading indices are becoming red, whereas the existing ones are in Yellow(75%) and red(25%). Can i have some help to resolve this. Let me know if you ne…

---

## [How to make each tenant user can see a different set of dashboards](https://discuss.elastic.co/t/how-to-make-each-tenant-user-can-see-a-different-set-of-dashboards/119196)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 7\
**Last updated:** [February 23, 2018, 1:04pm UTC](https://discuss.elastic.co/t/how-to-make-each-tenant-user-can-see-a-different-set-of-dashboards/119196 "2018-02-23T13:04:38Z")

</div>

In multi-tenant environment, each tenant user may create different Visualizations/dashboards, which shouldn't be visible to other tenant users. It seems that this isn't supported for now. Does anyone have any suggestio…

---

## [Non-optional base64 encoding in Avro codec](https://discuss.elastic.co/t/non-optional-base64-encoding-in-avro-codec/97373)

<div class="topic-metadata">

**Author:** [@robinklaassen](https://discuss.elastic.co/u/robinklaassen)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 1:23pm UTC](https://discuss.elastic.co/t/non-optional-base64-encoding-in-avro-codec/97373 "2017-08-30T13:23:06Z")

</div>

We’re using Logstash to write event data to a Kafka queue. The consumer of this queue expects an Avro binary blob (or fragment, the terminology seems to differ sometimes). It seems however, that using the Avro codec prov…

---

## [Elasticsearch configuration for docker bridge](https://discuss.elastic.co/t/elasticsearch-configuration-for-docker-bridge/86040)

<div class="topic-metadata">

**Author:** [@butterflyinfly](https://discuss.elastic.co/u/butterflyinfly)\
**Replies:** 1\
**Last updated:** [May 18, 2017, 12:32pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-for-docker-bridge/86040 "2017-05-18T12:32:35Z")

</div>

Hello to everyone! I'm trying to change the current configuration of ELK cluster from docker host mode into docker bridge and faced with some problems. According to the documentation: https://www.elastic.co/blog/docker-n…

---

## [Ошибка please use TotalHitCountCollector if you just need the total hit count](https://discuss.elastic.co/t/please-use-totalhitcountcollector-if-you-just-need-the-total-hit-count/58984)

<div class="topic-metadata">

**Author:** [@Maksym\_Seleznev](https://discuss.elastic.co/u/Maksym_Seleznev)\
**Replies:** 1\
**Last updated:** [August 25, 2016, 9:34pm UTC](https://discuss.elastic.co/t/please-use-totalhitcountcollector-if-you-just-need-the-total-hit-count/58984 "2016-08-25T21:34:45Z")

</div>

часто падает такая ошибка но не знаю на какой запрос, можно как то отследить и что за сообщение в виде " IllegalArgumentException\[numHits must be \> 0; please use TotalHitCountCollector if you just need the total hit coun…

---

## [Elasticsearch snapshot stuck for several days](https://discuss.elastic.co/t/elasticsearch-snapshot-stuck-for-several-days/51724)

<div class="topic-metadata">

**Author:** [@ES\_3000](https://discuss.elastic.co/u/ES_3000)\
**Replies:** 1\
**Last updated:** [June 6, 2016, 4:26pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-stuck-for-several-days/51724 "2016-06-06T16:26:19Z")

</div>

We are having issues with a snapshot that failed to complete or timeout. It's been running now for 7 days. { "snapshots": \[ { "snapshot": "curator-20160528130005", "version\_id": 1070199, "version": "1.7.1", "ind…

---

## [Unable to delete child documents by query that uses "has parent" (ES 1.4.1)](https://discuss.elastic.co/t/unable-to-delete-child-documents-by-query-that-uses-has-parent-es-1-4-1/28276)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 1\
**Last updated:** [September 5, 2015, 8:33pm UTC](https://discuss.elastic.co/t/unable-to-delete-child-documents-by-query-that-uses-has-parent-es-1-4-1/28276 "2015-09-05T20:33:03Z")

</div>

Hi, I'm using the query below in my search to find all users without parents. The search works as expected, but delete by query fails with has\_parent\] query and filter unsupported in delete\_by\_query api I've searched…

---

## [Http://myserver:9200/\_plugin/marvel is blank](https://discuss.elastic.co/t/http-myserver-9200--plugin-marvel-is-blank/2005)

<div class="topic-metadata">

**Author:** [@bjoernsteffens](https://discuss.elastic.co/u/bjoernsteffens)\
**Replies:** 1\
**Last updated:** [June 5, 2015, 12:58pm UTC](https://discuss.elastic.co/t/http-myserver-9200--plugin-marvel-is-blank/2005 "2015-06-05T12:58:27Z")

</div>

Hi, After having installed the plugin, restarted elasticsearach and even rebooted the machine I still don't see anything on these pages. ThnX in advance for any pointers. bjoern

---

## [Elasticsearch (NO log stash) - Keys starting with dot in JSON field](https://discuss.elastic.co/t/elasticsearch-no-log-stash-keys-starting-with-dot-in-json-field/307570)

<div class="topic-metadata">

**Author:** [@M2r12n0](https://discuss.elastic.co/u/M2r12n0)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-no-log-stash-keys-starting-with-dot-in-json-field/307570 "2022-06-27T13:35:43Z")

</div>

Hi, Sorry for bothering with this, but I can not resolve it yet. I need to ingest a JSON type field but some of the keys starts with dots, something like this: { '.house.door' : 'nice', '.car.window' : 'blue' } I …

---

## [TCP input plugin generate additional port field](https://discuss.elastic.co/t/tcp-input-plugin-generate-additional-port-field/214459)

<div class="topic-metadata">

**Author:** [@lantern77](https://discuss.elastic.co/u/lantern77)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 7:00pm UTC](https://discuss.elastic.co/t/tcp-input-plugin-generate-additional-port-field/214459 "2020-01-09T19:00:12Z")

</div>

Hello, For some reason, I can't seem to figure out why, but whenever we use the tcp input plugin, an addition "port" field gets added to our documents. For example "port": 39750. Can anyone confirm if this is default b…

---

## [Falha ao criar chave de segurança para cada nó do cluster](https://discuss.elastic.co/t/falha-ao-criar-chave-de-seguranca-para-cada-no-do-cluster/209369)

<div class="topic-metadata">

**Author:** [@pedro.pacm](https://discuss.elastic.co/u/pedro.pacm)\
**Replies:** 2\
**Last updated:** [December 2, 2019, 7:23pm UTC](https://discuss.elastic.co/t/falha-ao-criar-chave-de-seguranca-para-cada-no-do-cluster/209369 "2019-12-02T19:23:22Z")

</div>

Preciso configurar um cluster elasticsearch para rodar em um cluster Kubernetes. Criei um CA, salvei em um secret, mapeei este secret para um volume... tudo certinho. Porém não consigo gerar a chave para cada nó para con…

---

## [Kibana index loosing all contents after cluster nodes rebooted](https://discuss.elastic.co/t/kibana-index-loosing-all-contents-after-cluster-nodes-rebooted/191711)

<div class="topic-metadata">

**Author:** [@bing0](https://discuss.elastic.co/u/bing0)\
**Replies:** 2\
**Last updated:** [July 23, 2019, 4:59am UTC](https://discuss.elastic.co/t/kibana-index-loosing-all-contents-after-cluster-nodes-rebooted/191711 "2019-07-23T04:59:36Z")

</div>

Hi All, Need your advice on the following issue please. Sorry if I'm posting this into wrong section, as I'm truly unsure if this is es or kb issue. However this happens only to .kibana index and has never happened to …

---

## [How to compare 2 number fields in the same document](https://discuss.elastic.co/t/how-to-compare-2-number-fields-in-the-same-document/153688)

<div class="topic-metadata">

**Author:** [@Philip\_Romero](https://discuss.elastic.co/u/Philip_Romero)\
**Replies:** 2\
**Last updated:** [October 24, 2018, 3:35pm UTC](https://discuss.elastic.co/t/how-to-compare-2-number-fields-in-the-same-document/153688 "2018-10-24T15:35:56Z")

</div>

I'm trying to set up what I feel should be a very simple watcher process, but I am new to building queries and having a very hard time. I'd like to compare the "actual" value to the "typical" value from a machine learnin…

---

## [ES 5.0 Security Policy for plugin using JNA to load libs](https://discuss.elastic.co/t/es-5-0-security-policy-for-plugin-using-jna-to-load-libs/67278)

<div class="topic-metadata">

**Author:** [@teemu](https://discuss.elastic.co/u/teemu)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 9:46am UTC](https://discuss.elastic.co/t/es-5-0-security-policy-for-plugin-using-jna-to-load-libs/67278 "2016-11-28T09:46:26Z")

</div>

Hi all, I am trying to upgrade to ElasticSearch 5.0.1. As part of this, I am trying to get the Finnish language analyzer plugin from https://bitbucket.org/evidentsolutions/elasticsearch-analysis-voikko/overview to wor…

---

## [Shield 2.0 Logstash Elasticsearch plugin missing](https://discuss.elastic.co/t/shield-2-0-logstash-elasticsearch-plugin-missing/34520)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 2\
**Last updated:** [November 18, 2015, 6:59am UTC](https://discuss.elastic.co/t/shield-2-0-logstash-elasticsearch-plugin-missing/34520 "2015-11-18T06:59:33Z")

</div>

The transport plugin for elasticsearch logstash output using shield does not seem to exist (again)? Using the documentation at https://www.elastic.co/guide/en/shield/current/logstash.html#ls-transport sudo logstash/…

[Previous page](https://discuss.elastic.co/top.md?page=1403&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1405&per_page=50&period=all)
