# Top

**URL:** https://discuss.elastic.co/top.md?page=1407&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1408

---

## [Choice of unique document id and performance](https://discuss.elastic.co/t/choice-of-unique-document-id-and-performance/67086)

<div class="topic-metadata">

**Author:** [@avaneeshr](https://discuss.elastic.co/u/avaneeshr)\
**Replies:** 2\
**Last updated:** [November 25, 2016, 3:27pm UTC](https://discuss.elastic.co/t/choice-of-unique-document-id-and-performance/67086 "2016-11-25T15:27:09Z")

</div>

Hi, I am indexing around 100M webpages (HTML). I assign the document ID as the SHA256 of the url while indexing. Considering that my usage would be search query intensive (full-text, no aggregations etc.), would my choi…

---

## [How many processes are used to transfer the files from file beat to log stash?](https://discuss.elastic.co/t/how-many-processes-are-used-to-transfer-the-files-from-file-beat-to-log-stash/50187)

<div class="topic-metadata">

**Author:** [@karuneshupadhyay](https://discuss.elastic.co/u/karuneshupadhyay)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 5:58am UTC](https://discuss.elastic.co/t/how-many-processes-are-used-to-transfer-the-files-from-file-beat-to-log-stash/50187 "2016-05-18T05:58:34Z")

</div>

Hi, How many processes are used to transfer the files from file beat to log stash ? Is it only 1 process or we have multiple processes? How can I check the details information on this ? Thanks and Regards, Karunesh U…

---

## [How to EXPIRE a key in logstash?](https://discuss.elastic.co/t/how-to-expire-a-key-in-logstash/38320)

<div class="topic-metadata">

**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\
**Replies:** 2\
**Last updated:** [January 4, 2016, 3:02pm UTC](https://discuss.elastic.co/t/how-to-expire-a-key-in-logstash/38320 "2016-01-04T15:02:50Z")

</div>

correct way of expiring a key in logstash input { http { host =\> "127.0.0.1" # default: 0.0.0.0 port =\> 31311 # default: 8080 } } output { redis { host =\> 'localhost' data\_type =\> 'list' key…

---

## [Plugin is incompatible with Elasticsearch \[2.1.0\]. Was designed for version \[2.0.0\]](https://discuss.elastic.co/t/plugin-is-incompatible-with-elasticsearch-2-1-0-was-designed-for-version-2-0-0/36238)

<div class="topic-metadata">

**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\
**Replies:** 2\
**Last updated:** [December 3, 2015, 1:41pm UTC](https://discuss.elastic.co/t/plugin-is-incompatible-with-elasticsearch-2-1-0-was-designed-for-version-2-0-0/36238 "2015-12-03T13:41:50Z")

</div>

I am upgrading my custom plugin (named magellan) from 2.0 to 2.1. But when I try to install the plug-in I get the following error: -\> Installing from file:/Users/Andrew/Source/Repos/Magellan/magellan-es-plugin/target…

---

## [Window size never grow up](https://discuss.elastic.co/t/window-size-never-grow-up/169517)

<div class="topic-metadata">

**Author:** [@keyolk](https://discuss.elastic.co/u/keyolk)\
**Replies:** 5\
**Last updated:** [March 5, 2019, 3:19pm UTC](https://discuss.elastic.co/t/window-size-never-grow-up/169517 "2019-03-05T15:19:48Z")

</div>

In our service environment, some of filebeats consume almost 100% of cpu core. After checking lumberjack protocol link and its tcpdump, I found that it always sends window size 1 And from below seems that if windowSi…

---

## [Hints to improve performance for numerous aggregations with high cardinalities](https://discuss.elastic.co/t/hints-to-improve-performance-for-numerous-aggregations-with-high-cardinalities/155745)

<div class="topic-metadata">

**Author:** [@ivanqwam](https://discuss.elastic.co/u/ivanqwam)\
**Replies:** 5\
**Last updated:** [January 2, 2019, 10:11am UTC](https://discuss.elastic.co/t/hints-to-improve-performance-for-numerous-aggregations-with-high-cardinalities/155745 "2019-01-02T10:11:15Z")

</div>

Searching with numerous agregations, each with high cardinalities, can be very slow (10-15s). Kibana dashboards involving those same aggregations are slow too (over 10s), but they contain multiple visualizations. Coul…

---

## [Why do I have mappings for types that do not exist in my index?](https://discuss.elastic.co/t/why-do-i-have-mappings-for-types-that-do-not-exist-in-my-index/28434)

<div class="topic-metadata">

**Author:** [@cpattonj](https://discuss.elastic.co/u/cpattonj)\
**Replies:** 5\
**Last updated:** [September 2, 2015, 12:52am UTC](https://discuss.elastic.co/t/why-do-i-have-mappings-for-types-that-do-not-exist-in-my-index/28434 "2015-09-02T00:52:15Z")

</div>

The way I understand it, ES automatically determines the mappings as best it can when there is not a template match for a given type. That's all fine and dandy but what about this situation? My Type Count Pastebin I…

---

## [Apm-server in a container to use with amazon ES](https://discuss.elastic.co/t/apm-server-in-a-container-to-use-with-amazon-es/232288)

<div class="topic-metadata">

**Author:** [@Diogo\_Silva](https://discuss.elastic.co/u/Diogo_Silva)\
**Replies:** 4\
**Last updated:** [May 15, 2020, 2:55am UTC](https://discuss.elastic.co/t/apm-server-in-a-container-to-use-with-amazon-es/232288 "2020-05-15T02:55:46Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.4.…

---

## [Help with terminate\_after returns more results than must](https://discuss.elastic.co/t/help-with-terminate-after-returns-more-results-than-must/211595)

<div class="topic-metadata">

**Author:** [@AndriyImp](https://discuss.elastic.co/u/AndriyImp)\
**Replies:** 4\
**Last updated:** [December 12, 2019, 9:16am UTC](https://discuss.elastic.co/t/help-with-terminate-after-returns-more-results-than-must/211595 "2019-12-12T09:16:26Z")

</div>

Hi All! I have strange result when make my query request - on local all ok and works like expected, but on AWS haves issue - i set terminate\_after but it not works like expected, see attached screen. data = response\[…

---

## [Elasticsearch org.elasticsearch.index.engine.EngineException"failed to recover translog"](https://discuss.elastic.co/t/elasticsearch-org-elasticsearch-index-engine-engineexception-failed-to-recover-translog/209714)

<div class="topic-metadata">

**Author:** [@apizano](https://discuss.elastic.co/u/apizano)\
**Replies:** 4\
**Last updated:** [November 27, 2019, 5:58pm UTC](https://discuss.elastic.co/t/elasticsearch-org-elasticsearch-index-engine-engineexception-failed-to-recover-translog/209714 "2019-11-27T17:58:12Z")

</div>

Hi guys, I'm an intern at my software engineering company adding a health endpoint (using Spring Actuator) to our API for our Elasticsearch service. I am using POSTMAN to view the JSON response and it's sending it corre…

---

## [Elasticsearch suddenly stop](https://discuss.elastic.co/t/elasticsearch-suddenly-stop/167754)

<div class="topic-metadata">

**Author:** [@mmortada](https://discuss.elastic.co/u/mmortada)\
**Replies:** 4\
**Last updated:** [February 10, 2019, 2:25pm UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-stop/167754 "2019-02-10T14:25:47Z")

</div>

hi all i was configuring elastic search node to be integrated with Bitbucket DC cluster and it was working fine suddenly stop working when i tried to start the service it start successfully for less than 1 second then s…

---

## [Scroll api：How to understand “Keeping the search context alive”？](https://discuss.elastic.co/t/scroll-api-how-to-understand-keeping-the-search-context-alive/142051)

<div class="topic-metadata">

**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 9:33am UTC](https://discuss.elastic.co/t/scroll-api-how-to-understand-keeping-the-search-context-alive/142051 "2018-08-02T09:33:59Z")

</div>

scroll api：How to understand “Keeping the search context alive”？

---

## [IP address ranges for elastic nodes](https://discuss.elastic.co/t/ip-address-ranges-for-elastic-nodes/98991)

<div class="topic-metadata">

**Author:** [@wmjb](https://discuss.elastic.co/u/wmjb)\
**Replies:** 4\
**Last updated:** [September 1, 2017, 8:00am UTC](https://discuss.elastic.co/t/ip-address-ranges-for-elastic-nodes/98991 "2017-09-01T08:00:24Z")

</div>

Hi, My hosting service requesting me to provide IP address ranges for elastic search nodes in order for them to white-list the out going ports. May I know where I can find those? Thank you

---

## [Missing in bulk response](https://discuss.elastic.co/t/missing-in-bulk-response/9282)

<div class="topic-metadata">

**Author:** [@arta](https://discuss.elastic.co/u/arta)\
**Replies:** 4\
**Last updated:** [October 11, 2012, 5:24pm UTC](https://discuss.elastic.co/t/missing-in-bulk-response/9282 "2012-10-11T17:24:15Z")

</div>

Hi, Often times I observe that Java BulkItemResponse does not contain some of documents I put in the corresponding BulkRequest. I don't see any error log in ES's log file. (I have action: DEBUG in logging.yml) …

---

## [Frozen tier - Conenience in multiple zones](https://discuss.elastic.co/t/frozen-tier-conenience-in-multiple-zones/333475)

<div class="topic-metadata">

**Author:** [@Alberallo](https://discuss.elastic.co/u/Alberallo)\
**Replies:** 8\
**Last updated:** [May 18, 2023, 9:48am UTC](https://discuss.elastic.co/t/frozen-tier-conenience-in-multiple-zones/333475 "2023-05-18T09:48:42Z")

</div>

HI, since high availability is guaranteed by default for frozen nodes, why should there be any convenience in configuring a cluster with more than one zone for the frozen tier? In particular, during the execution of th…

---

## [Golang apm DetachedContext before goroutine not record span](https://discuss.elastic.co/t/golang-apm-detachedcontext-before-goroutine-not-record-span/320208)

<div class="topic-metadata">

**Author:** [@zt9788](https://discuss.elastic.co/u/zt9788)\
**Replies:** 8\
**Last updated:** [December 1, 2022, 8:48am UTC](https://discuss.elastic.co/t/golang-apm-detachedcontext-before-goroutine-not-record-span/320208 "2022-12-01T08:48:36Z")

</div>

es7,apm server7 When use DetachedContext before (go func(...)) there is not record span I saw #475 //use the zero framework redis quene //in the consume task func ProcessTask(ctx context.Context, t \*asynq.Task) error{…

---

## [Unable to delete index pattern in Kibana 7.15](https://discuss.elastic.co/t/unable-to-delete-index-pattern-in-kibana-7-15/295179)

<div class="topic-metadata">

**Author:** [@abhinav\_chourasia](https://discuss.elastic.co/u/abhinav_chourasia)\
**Replies:** 3\
**Last updated:** [January 25, 2022, 7:00am UTC](https://discuss.elastic.co/t/unable-to-delete-index-pattern-in-kibana-7-15/295179 "2022-01-25T07:00:29Z")

</div>

I have moved from ELK 7.9 to ELK 7.15 in an attempt to solve this problem and it looks like all that effort was of no use. I am still unable to delete the index pattern in Kibana, neither through the console, nor through…

---

## [Running LS in two user sessions of the same server](https://discuss.elastic.co/t/running-ls-in-two-user-sessions-of-the-same-server/124307)

<div class="topic-metadata">

**Author:** [@Loic\_Bellot](https://discuss.elastic.co/u/Loic_Bellot)\
**Replies:** 8\
**Last updated:** [March 19, 2018, 8:58am UTC](https://discuss.elastic.co/t/running-ls-in-two-user-sessions-of-the-same-server/124307 "2018-03-19T08:58:25Z")

</div>

Hi everybody, I'm trying to run LS in two user sessions of the same server. No problem to run the first LS instance in the first session. No problem to run the first AND second LS instances in the first session. But …

---

## [Extra " while using bulk api](https://discuss.elastic.co/t/extra-while-using-bulk-api/89233)

<div class="topic-metadata">

**Author:** [@kaushah](https://discuss.elastic.co/u/kaushah)\
**Replies:** 3\
**Last updated:** [June 16, 2017, 10:02am UTC](https://discuss.elastic.co/t/extra-while-using-bulk-api/89233 "2017-06-16T10:02:41Z")

</div>

I am using Bulk Java Api into ingest the data into the ElasticSearch. JsonNode rootNode = mapper.readTree(json); Iterator\<Map.Entry\<String,JsonNode\>\> fieldsIterator = rootNode.getFields(); …

---

## [GeoIP Fields != desired geo\_point type](https://discuss.elastic.co/t/geoip-fields-desired-geo-point-type/75954)

<div class="topic-metadata">

**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\
**Replies:** 3\
**Last updated:** [February 21, 2017, 9:27pm UTC](https://discuss.elastic.co/t/geoip-fields-desired-geo-point-type/75954 "2017-02-21T21:27:02Z")

</div>

Elastic 2.3.1, Kibana 4.5 Two fields src\_geoip.location, dest\_geoip.location are being indexed are not the desired geo\_point type, but instead as number. Despite the below: Logstash Conf file filter section: geoip { …

---

## [Convert Query-Context into Filter-Context](https://discuss.elastic.co/t/convert-query-context-into-filter-context/70428)

<div class="topic-metadata">

**Author:** [@mos](https://discuss.elastic.co/u/mos)\
**Replies:** 3\
**Last updated:** [January 3, 2017, 12:48pm UTC](https://discuss.elastic.co/t/convert-query-context-into-filter-context/70428 "2017-01-03T12:48:59Z")

</div>

Using ES 5.1.1 - imagine the following simple query: GET /bank/\_search { "query": { "match": { "firstname": "Amber" } } } This query shouldn't be executed as a query,…

---

## [Exclude more then 1 pattern](https://discuss.elastic.co/t/exclude-more-then-1-pattern/40330)

<div class="topic-metadata">

**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\
**Replies:** 3\
**Last updated:** [January 31, 2016, 7:54pm UTC](https://discuss.elastic.co/t/exclude-more-then-1-pattern/40330 "2016-01-31T19:54:12Z")

</div>

Hi , How can I exclude more than 1 pattern ? For example , I want to exclude Warning and in progress status. BR, Chen

---

## [Not able to configure Index pattern on date field](https://discuss.elastic.co/t/not-able-to-configure-index-pattern-on-date-field/36823)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 3\
**Last updated:** [December 11, 2015, 2:10am UTC](https://discuss.elastic.co/t/not-able-to-configure-index-pattern-on-date-field/36823 "2015-12-11T02:10:14Z")

</div>

Hi Experts , In ES 2.1 I have created following index . It has 2 date fields , Publish\_date and test\_date but in kibana when I am configuring an Index pattern I can only see publish\_date in the time filed drop down .So …

---

## [Ctx.results in Kibana Alerting](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473)

<div class="topic-metadata">

**Author:** [@Priyan\_Murugan](https://discuss.elastic.co/u/Priyan_Murugan)\
**Replies:** 0\
**Last updated:** [February 28, 2020, 5:56pm UTC](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473 "2020-02-28T17:56:51Z")

</div>

Hi I have created the below mustache template to send alert notification to slack. Mustache Template: Total hits: {{#ctx.results}}{{#hits}}{{total}}{{/hits}}{{/ctx.results}} Period start: {{ctx.periodStart}} Period e…

---

## [Listener timeout after waiting for \[30000\] ms in RestHightLevel Client](https://discuss.elastic.co/t/listener-timeout-after-waiting-for-30000-ms-in-resthightlevel-client/179643)

<div class="topic-metadata">

**Author:** [@Sanjay\_Das](https://discuss.elastic.co/u/Sanjay_Das)\
**Replies:** 0\
**Last updated:** [May 4, 2019, 10:05pm UTC](https://discuss.elastic.co/t/listener-timeout-after-waiting-for-30000-ms-in-resthightlevel-client/179643 "2019-05-04T22:05:30Z")

</div>

Hi I am facing error on Elasticsearch rest hight level client. I checked with elasticsearch host, but it is working correctly. I can able to fetch the data by doing GET request. Even , when I start my java application ,…

---

## [Elastic Search update api - updating complex data including array objects and parts of document](https://discuss.elastic.co/t/elastic-search-update-api-updating-complex-data-including-array-objects-and-parts-of-document/272644)

<div class="topic-metadata">

**Author:** [@ab.umarjikar](https://discuss.elastic.co/u/ab.umarjikar)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 9:20am UTC](https://discuss.elastic.co/t/elastic-search-update-api-updating-complex-data-including-array-objects-and-parts-of-document/272644 "2021-05-11T09:20:40Z")

</div>

I have complex structure of data coming in as bellow: { ​​​​​ "id": 1, "other\_details": \[{ ​​​​​ "address\_details": { ​​​​​ "city": "pune", …

---

## [Is there a way to look at data for a specific time daily on a kibana time series visualization](https://discuss.elastic.co/t/is-there-a-way-to-look-at-data-for-a-specific-time-daily-on-a-kibana-time-series-visualization/249679)

<div class="topic-metadata">

**Author:** [@nishnath.nandi](https://discuss.elastic.co/u/nishnath.nandi)\
**Replies:** 1\
**Last updated:** [September 23, 2020, 4:05pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-look-at-data-for-a-specific-time-daily-on-a-kibana-time-series-visualization/249679 "2020-09-23T16:05:30Z")

</div>

Currently, I am using Kibana visualizations with a date histogram to look at data for last 2 months. But I would like to filter it further and look at only week days and for business hours (9 A.M. to 5 P.M.)

---

## [Having trouble setting kerberos on Kibana](https://discuss.elastic.co/t/having-trouble-setting-kerberos-on-kibana/230038)

<div class="topic-metadata">

**Author:** [@lnitin12](https://discuss.elastic.co/u/lnitin12)\
**Replies:** 7\
**Last updated:** [April 28, 2020, 3:56pm UTC](https://discuss.elastic.co/t/having-trouble-setting-kerberos-on-kibana/230038 "2020-04-28T15:56:45Z")

</div>

There seems no proper documentation on setting up kerberos on kibana, on elasticsearch kerberos works fine with --negotiate user. But on Kibana once we add xpack.security.authc.providers:\[kerberos\] and try to load kiba…

---

## [Filebeat: read file inside container](https://discuss.elastic.co/t/filebeat-read-file-inside-container/160528)

<div class="topic-metadata">

**Author:** [@pranay\_sankpal](https://discuss.elastic.co/u/pranay_sankpal)\
**Replies:** 1\
**Last updated:** [December 13, 2018, 1:32pm UTC](https://discuss.elastic.co/t/filebeat-read-file-inside-container/160528 "2018-12-13T13:32:57Z")

</div>

Hi, We are setting up logging for services running on kubernetes. These services generates logs file in the APP\_DIR inside a container. How can I ship these logs to ES? I've refered : https://www.elastic.co/guide/en/b…

---

## [Expected one of #, input, filter, output at line 1, column 1 (byte 1) after](https://discuss.elastic.co/t/expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after/152435)

<div class="topic-metadata">

**Author:** [@jambhale12](https://discuss.elastic.co/u/jambhale12)\
**Replies:** 1\
**Last updated:** [October 16, 2018, 4:31pm UTC](https://discuss.elastic.co/t/expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after/152435 "2018-10-16T16:31:18Z")

</div>

Hello, Please help me to solve this issue I am getting below error message while running logstash-test.conf Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::C…

---

## [Handling exception: Connection reset by peer](https://discuss.elastic.co/t/handling-exception-connection-reset-by-peer/125194)

<div class="topic-metadata">

**Author:** [@Faktu4noCaM](https://discuss.elastic.co/u/Faktu4noCaM)\
**Replies:** 1\
**Last updated:** [March 26, 2018, 11:35am UTC](https://discuss.elastic.co/t/handling-exception-connection-reset-by-peer/125194 "2018-03-26T11:35:38Z")

</div>

Hi! After update ELK stack from 6.2.2 to 6.2.3, i recieved warning message in Logstash logs: Log text\[2018-03-22T14:28:20,354\]\[INFO \]\[org.logstash.beats.BeatsHandler\] \[local: 0.0.0.0:5045, remote: 100.100.36.9:49199\] …

---

## [Problems retrieving term payload in custom query](https://discuss.elastic.co/t/problems-retrieving-term-payload-in-custom-query/37881)

<div class="topic-metadata">

**Author:** [@rjprice72](https://discuss.elastic.co/u/rjprice72)\
**Replies:** 1\
**Last updated:** [December 24, 2015, 4:28pm UTC](https://discuss.elastic.co/t/problems-retrieving-term-payload-in-custom-query/37881 "2015-12-24T16:28:02Z")

</div>

In elasticsearch 2.1.0 we have a plugin with a custom Lucene TokenFilter that adds a payload to a special term during indexing analysis, and we also have custom QueryParser that produces Lucene Query/Weight/Scorer classe…

---

## [Subfield not showing on the left side field after 7.16 upgrade](https://discuss.elastic.co/t/subfield-not-showing-on-the-left-side-field-after-7-16-upgrade/292626)

<div class="topic-metadata">

**Author:** [@isaackuang](https://discuss.elastic.co/u/isaackuang)\
**Replies:** 4\
**Last updated:** [January 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/subfield-not-showing-on-the-left-side-field-after-7-16-upgrade/292626 "2022-01-06T16:24:26Z")

</div>

When Upgrading to 7.16.1 from 7.15.2 The subfields from kubernetes object cannot show and analyze. But it can still searchable. Anyone can tell me how can I do to enable subfield parsing on left field for new ve…

---

## [MetricBeat Pod, Container and Volume Metricset for Kubernetes Module not working](https://discuss.elastic.co/t/metricbeat-pod-container-and-volume-metricset-for-kubernetes-module-not-working/356903)

<div class="topic-metadata">

**Author:** [@KarwendelMann](https://discuss.elastic.co/u/KarwendelMann)\
**Replies:** 6\
**Last updated:** [April 10, 2024, 2:37pm UTC](https://discuss.elastic.co/t/metricbeat-pod-container-and-volume-metricset-for-kubernetes-module-not-working/356903 "2024-04-10T14:37:20Z")

</div>

Hey there! I've been working on setting up Metricbeat within a local Kubernetes cluster to collect metrics from a microservices system, specifically from the onlineboutique application. My Kubernetes cluster is running …

---

## [Snapshot delete understanding](https://discuss.elastic.co/t/snapshot-delete-understanding/246783)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 6\
**Last updated:** [August 30, 2020, 2:11am UTC](https://discuss.elastic.co/t/snapshot-delete-understanding/246783 "2020-08-30T02:11:57Z")

</div>

Lets say when I run first snapshot it creates full backup and my snapshot name is 08-29-2020 now I created another one tomorrow and by default it will do incremental named 8-30-2020 now I created third one which will …

---

## [How to change inbuilt modules index name with the same fields?](https://discuss.elastic.co/t/how-to-change-inbuilt-modules-index-name-with-the-same-fields/237444)

<div class="topic-metadata">

**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\
**Replies:** 6\
**Last updated:** [June 18, 2020, 2:02pm UTC](https://discuss.elastic.co/t/how-to-change-inbuilt-modules-index-name-with-the-same-fields/237444 "2020-06-18T14:02:19Z")

</div>

I want to change default filebeat-\* index name to zeek-\* with the same fields as configured in the zeek.yml, Until now I have changed ''' hosts: \["localhost:9200"\] protocol: "http" index: "zeek-%{+yyyy.MM.dd}" setup…

---

## [Get surrounding documents via API](https://discuss.elastic.co/t/get-surrounding-documents-via-api/222656)

<div class="topic-metadata">

**Author:** [@elasticUser5](https://discuss.elastic.co/u/elasticUser5)\
**Replies:** 6\
**Last updated:** [March 23, 2020, 9:31am UTC](https://discuss.elastic.co/t/get-surrounding-documents-via-api/222656 "2020-03-23T09:31:04Z")

</div>

Hello! Is there any way to replicate "Surrounding Documents" function from Kibana but via API? I'm trying different ways, but none is working (span\_near, scroll API...). Any help is appreciated!

---

## [How can I get my kibana and elasticsearch url? for the filebeat?](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623)

<div class="topic-metadata">

**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\
**Replies:** 1\
**Last updated:** [June 20, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-get-my-kibana-and-elasticsearch-url-for-the-filebeat/307623 "2022-06-20T11:31:38Z")

</div>

Thanks, How can I know my kibana and Elasticsearch url? output.elasticsearch: hosts: \["\<es\_url\>"\] username: "elastic" password: "\<password\>" setup.kibana: host: "\<kibana\_url\>" how can I get these? thanks

---

## [APM agent for java is not working : Response code 410](https://discuss.elastic.co/t/apm-agent-for-java-is-not-working-response-code-410/245715)

<div class="topic-metadata">

**Author:** [@gijo](https://discuss.elastic.co/u/gijo)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 8:00am UTC](https://discuss.elastic.co/t/apm-agent-for-java-is-not-working-response-code-410/245715 "2020-08-20T08:00:26Z")

</div>

Hi, I have created a new elastic cloud deployment with version 7.8.1. And i have downloaded apm server with version 1.170. I added the apm parameters to my Java application.But the logs are not being sent. I get the f…

---

## [Logstash 6.2.2 Fatal error crashing background running logstash when stdout output plugin is used](https://discuss.elastic.co/t/logstash-6-2-2-fatal-error-crashing-background-running-logstash-when-stdout-output-plugin-is-used/122973)

<div class="topic-metadata">

**Author:** [@LLK](https://discuss.elastic.co/u/LLK)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 4:57am UTC](https://discuss.elastic.co/t/logstash-6-2-2-fatal-error-crashing-background-running-logstash-when-stdout-output-plugin-is-used/122973 "2018-03-09T04:57:41Z")

</div>

Hello, Same issue as with the other user's thread: Running logstash in the background with stdout plugin enabled crashes it: \[2018-03-07T17:18:19,623\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {…

---

## [Issue logstashing to Found - Continued discussion](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627)

<div class="topic-metadata">

**Author:** [@cstrzadala](https://discuss.elastic.co/u/cstrzadala)\
**Replies:** 1\
**Last updated:** [October 21, 2015, 1:50am UTC](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627 "2015-10-21T01:50:42Z")

</div>

Continuing the discussion from Issue logstashing to Found:

---

## [Floating point precision in response](https://discuss.elastic.co/t/floating-point-precision-in-response/19841)

<div class="topic-metadata">

**Author:** [@Thomas\_Bolis](https://discuss.elastic.co/u/Thomas_Bolis)\
**Replies:** 1\
**Last updated:** [September 28, 2014, 6:35pm UTC](https://discuss.elastic.co/t/floating-point-precision-in-response/19841 "2014-09-28T18:35:58Z")

</div>

Hi, I have a quick question with regards the response of numeric values. I perform an aggregation with the sum aggregation and when I get back the response in a curl request the number is shown as follows: "aggs":{ …

---

## [Create side by side bar chart for business data](https://discuss.elastic.co/t/create-side-by-side-bar-chart-for-business-data/235500)

<div class="topic-metadata">

**Author:** [@LWine](https://discuss.elastic.co/u/LWine)\
**Replies:** 2\
**Last updated:** [June 3, 2020, 3:16pm UTC](https://discuss.elastic.co/t/create-side-by-side-bar-chart-for-business-data/235500 "2020-06-03T15:16:53Z")

</div>

Hello! I am trying to find a way to visualize monthly revenues with three bars for each month (e.g. January 2020, 2019, 2018, then February 2020, 2019, 2018, and so on). Like this one: I tried with timelion, TSVB and…

---

## [Adding to security module the parse of event.id equals to 4663](https://discuss.elastic.co/t/adding-to-security-module-the-parse-of-event-id-equals-to-4663/231488)

<div class="topic-metadata">

**Author:** [@Aleix\_Abrie\_Prat](https://discuss.elastic.co/u/Aleix_Abrie_Prat)\
**Replies:** 2\
**Last updated:** [May 8, 2020, 11:03am UTC](https://discuss.elastic.co/t/adding-to-security-module-the-parse-of-event-id-equals-to-4663/231488 "2020-05-08T11:03:42Z")

</div>

Hello everyone, I want to have control of file access using Winlogbeat with parsing event with id 4663... I am modifying the "security" module so that it can read the events with that id. I have seen that there is a va…

---

## [Filter fields on list documents?](https://discuss.elastic.co/t/filter-fields-on-list-documents/201893)

<div class="topic-metadata">

**Author:** [@Sophistifunk](https://discuss.elastic.co/u/Sophistifunk)\
**Replies:** 2\
**Last updated:** [October 3, 2019, 3:04am UTC](https://discuss.elastic.co/t/filter-fields-on-list-documents/201893 "2019-10-03T03:04:51Z")

</div>

Is it possible to filter the list of returned fields when GETting ..../documents.json? I need a way to get a list of documents that are in the index without having to download the complete content of every document.

---

## [Getting Top 5 values from an Array](https://discuss.elastic.co/t/getting-top-5-values-from-an-array/153888)

<div class="topic-metadata">

**Author:** [@misiakj](https://discuss.elastic.co/u/misiakj)\
**Replies:** 2\
**Last updated:** [October 29, 2018, 11:12pm UTC](https://discuss.elastic.co/t/getting-top-5-values-from-an-array/153888 "2018-10-29T23:12:00Z")

</div>

I have a document that represents a Task, it looks similar to the below but with several more fields than shown. { "\_index": "index", "\_type": "type", "\_id": "1245", "\_version": 1, "\_score": null, "\_source": { "f…

---

## [Monitoring: System Load](https://discuss.elastic.co/t/monitoring-system-load/109228)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 6:22pm UTC](https://discuss.elastic.co/t/monitoring-system-load/109228 "2017-12-01T18:22:23Z")

</div>

Why the System Load visualization for elasticsearch is showing only the last 1 minute average load, wherein for the logstash node it is last 1 minute, 5 minutes and 13 minutes average load.

---

## [No network syslogs in logstash](https://discuss.elastic.co/t/no-network-syslogs-in-logstash/74931)

<div class="topic-metadata">

**Author:** [@GGabriele](https://discuss.elastic.co/u/GGabriele)\
**Replies:** 2\
**Last updated:** [February 14, 2017, 12:18pm UTC](https://discuss.elastic.co/t/no-network-syslogs-in-logstash/74931 "2017-02-14T12:18:52Z")

</div>

Hi all, I need to build something similar to this blog post but I'm having hard times while trying to make it work. I've installed logstash and configured it following the guide on the official website. I've tested t…

---

## [Populating user credentials to all nodes in cluster](https://discuss.elastic.co/t/populating-user-credentials-to-all-nodes-in-cluster/42536)

<div class="topic-metadata">

**Author:** [@megaforce1020](https://discuss.elastic.co/u/megaforce1020)\
**Replies:** 2\
**Last updated:** [February 24, 2016, 9:27pm UTC](https://discuss.elastic.co/t/populating-user-credentials-to-all-nodes-in-cluster/42536 "2016-02-24T21:27:46Z")

</div>

Hi, so I am fairly new to the Elastic Stack. I've setup a cluster of elasticsearch nodes (Masters, Datas, Clients). I also have Kibana setup as well. Both Elasticsearch and Kibana have Shield installed on their respec…

---

## [Logstash, Kibana in GCP?](https://discuss.elastic.co/t/logstash-kibana-in-gcp/32848)

<div class="topic-metadata">

**Author:** [@kumarhanu](https://discuss.elastic.co/u/kumarhanu)\
**Replies:** 2\
**Last updated:** [October 25, 2015, 10:44am UTC](https://discuss.elastic.co/t/logstash-kibana-in-gcp/32848 "2015-10-25T10:44:44Z")

</div>

I know that Elasticsearch can be deployed in Google Cloud Platform. Can Logstash and Kibana deployed in GCP?

[Previous page](https://discuss.elastic.co/top.md?page=1406&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1408&per_page=50&period=all)
