# Top

**URL:** https://discuss.elastic.co/top.md?page=1413&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1414

---

## [Error when updating xpack license](https://discuss.elastic.co/t/error-when-updating-xpack-license/68716)

<div class="topic-metadata">

**Author:** [@YLombardi](https://discuss.elastic.co/u/YLombardi)\
**Replies:** 2\
**Last updated:** [December 12, 2016, 2:10pm UTC](https://discuss.elastic.co/t/error-when-updating-xpack-license/68716 "2016-12-12T14:10:58Z")

</div>

I just create a new license here : https://register.elastic.co/xpack\_register Then I download the license json file. I follow this documentation to update license : https://www.elastic.co/guide/en/x-pack/current/inst…

---

## [How to configureLogstash HTTP output plugin](https://discuss.elastic.co/t/how-to-configurelogstash-http-output-plugin/24707)

<div class="topic-metadata">

**Author:** [@venkaty](https://discuss.elastic.co/u/venkaty)\
**Replies:** 2\
**Last updated:** [October 3, 2015, 7:47pm UTC](https://discuss.elastic.co/t/how-to-configurelogstash-http-output-plugin/24707 "2015-10-03T19:47:11Z")

</div>

What is the significance of verify\_ssl option of HTTP output plug-in ? How to configure Logstash HTTP output plugin with the following options Enable SSL (Https) Enable client certificate path so that server side a…

---

## [Is there any news or roadmap about marvel?](https://discuss.elastic.co/t/is-there-any-news-or-roadmap-about-marvel/29650)

<div class="topic-metadata">

**Author:** [@more](https://discuss.elastic.co/u/more)\
**Replies:** 2\
**Last updated:** [September 20, 2015, 7:09am UTC](https://discuss.elastic.co/t/is-there-any-news-or-roadmap-about-marvel/29650 "2015-09-20T07:09:16Z")

</div>

Will there be marvel 2.0 for ES2.0? Will the new marvel be based on Kibana4？ If there is, when will it be released? Many Thanks!

---

## [ES Shard re-distribution problem](https://discuss.elastic.co/t/es-shard-re-distribution-problem/7385)

<div class="topic-metadata">

**Author:** [@Nitish\_Sharma](https://discuss.elastic.co/u/Nitish_Sharma)\
**Replies:** 2\
**Last updated:** [April 19, 2012, 2:54pm UTC](https://discuss.elastic.co/t/es-shard-re-distribution-problem/7385 "2012-04-19T14:54:02Z")

</div>

Hi, I've a ES cluster of 4 nodes with 3 indices each having 10 shards and 2 replicas. After indexing some data into it and running some performance tests, I realised 4 nodes may not be enough and added an additional…

---

## [Kibana - Crowdstrike Connector 8.18.8, 8.19.5, 9.0.8, and 9.1.5 Security Update (ESA-2025-19)](https://discuss.elastic.co/t/kibana-crowdstrike-connector-8-18-8-8-19-5-9-0-8-and-9-1-5-security-update-esa-2025-19/382455)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [October 6, 2025, 4:44pm UTC](https://discuss.elastic.co/t/kibana-crowdstrike-connector-8-18-8-8-19-5-9-0-8-and-9-1-5-security-update-esa-2025-19/382455 "2025-10-06T16:44:50Z")

</div>

Kibana Insufficiently Protected Credentials in the CrowdStrike Connector (ESA-2025-19) Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user…

---

## [ILM Daily indices with date retention](https://discuss.elastic.co/t/ilm-daily-indices-with-date-retention/234520)

<div class="topic-metadata">

**Author:** [@Jiri\_Petak](https://discuss.elastic.co/u/Jiri_Petak)\
**Replies:** 4\
**Last updated:** [May 28, 2020, 8:02am UTC](https://discuss.elastic.co/t/ilm-daily-indices-with-date-retention/234520 "2020-05-28T08:02:39Z")

</div>

Hi, i wanna ask about ILM creating daily indices. Or more likely i am confused about ILM concept with indices based on size. For example: We are logging infrastructure logs from syslog with filebeat. When i use ILM like: …

---

## [Elastic-scala-httpclientの検索について](https://discuss.elastic.co/t/elastic-scala-httpclient/72866)

<div class="topic-metadata">

**Author:** [@yoshida](https://discuss.elastic.co/u/yoshida)\
**Replies:** 4\
**Last updated:** [February 1, 2017, 2:04am UTC](https://discuss.elastic.co/t/elastic-scala-httpclient/72866 "2017-02-01T02:04:04Z")

</div>

Scala 2.11環境において、以下のサイトに記載されているelastic-scala-httpclientのHow to useを実行しているのですが、findとlistが異常終了してしまいます。 対処について、ご教示いただけるとありがたいです。 // Find one document val tweet: Option\[(String, Tweet)\] = client.findTweet{ searcher …

---

## [Kibana showing wrong sales per month](https://discuss.elastic.co/t/kibana-showing-wrong-sales-per-month/22894)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 4\
**Last updated:** [March 31, 2015, 1:31pm UTC](https://discuss.elastic.co/t/kibana-showing-wrong-sales-per-month/22894 "2015-03-31T13:31:10Z")

</div>

Hi All, i have the following scenario in kibana I am using kibana version 3.1.2. I am getting my monthly sales wrong in kibana dashboards. let say i have all the data for Jan on elastic search now I creat…

---

## [Elasticsearch modules' releases and repositories](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601)

<div class="topic-metadata">

**Author:** [@bamthomas](https://discuss.elastic.co/u/bamthomas)\
**Replies:** 7\
**Last updated:** [January 19, 2022, 10:57am UTC](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601 "2022-01-19T10:57:54Z")

</div>

Hello, We have an embedded node in our java app and 5 modules that are loaded : Netty4 ParentJoin CommonAnalysis Painless Reindex Lately we wanted to upgrade the ES libraries from 7.10 to 7.16. We found the main Elas…

---

## [Замедление индексирования документов в связи с ошибками в Logstash](https://discuss.elastic.co/t/logstash/239096)

<div class="topic-metadata">

**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\
**Replies:** 7\
**Last updated:** [June 30, 2020, 12:05pm UTC](https://discuss.elastic.co/t/logstash/239096 "2020-06-30T12:05:23Z")

</div>

Добрый день! Имею связку filebeat -\> kafka \<- logstash -\> elasticsearch Появилась проблема связанная с изменением типа поля, что вызывало такую запись в логе Logstash и отбрасывание документа: "status"=\>400, "error"=\>{…

---

## [Unknown setting 'jass\_path' for kafka in kafka input](https://discuss.elastic.co/t/unknown-setting-jass-path-for-kafka-in-kafka-input/184953)

<div class="topic-metadata">

**Author:** [@Sharon\_Abu](https://discuss.elastic.co/u/Sharon_Abu)\
**Replies:** 1\
**Last updated:** [June 10, 2019, 12:38pm UTC](https://discuss.elastic.co/t/unknown-setting-jass-path-for-kafka-in-kafka-input/184953 "2019-06-10T12:38:11Z")

</div>

Hi, I'm trying to configure logstash to connect to confluent cloud kafka using input configuration a jaas file using docker compose with logstash image version 6.0.1 (also tried with v6.8) my docker service looks like…

---

## [Sort Order Inconsistent](https://discuss.elastic.co/t/sort-order-inconsistent/156922)

<div class="topic-metadata">

**Author:** [@sshaw](https://discuss.elastic.co/u/sshaw)\
**Replies:** 1\
**Last updated:** [November 16, 2018, 6:14pm UTC](https://discuss.elastic.co/t/sort-order-inconsistent/156922 "2018-11-16T18:14:53Z")

</div>

Elasticsearch is running in a cluster with multiple shards. Two are primary, the rest are not. Using version 5.5.2. I have several records with the same address but different document id. When I sort by address the orde…

---

## [ESRally: Problems cloning tracks git repo](https://discuss.elastic.co/t/esrally-problems-cloning-tracks-git-repo/141645)

<div class="topic-metadata">

**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\
**Replies:** 1\
**Last updated:** [July 26, 2018, 6:14am UTC](https://discuss.elastic.co/t/esrally-problems-cloning-tracks-git-repo/141645 "2018-07-26T06:14:53Z")

</div>

I am attempting to run a rally benchmark from a benchmark coordinator using the configuration described in "Benchmarking a remote cluster" in https://esrally.readthedocs.io/en/stable/recipes.html. Operating system is Ama…

---

## [Visualization Filter Missing Rows when Quering Long Strings](https://discuss.elastic.co/t/visualization-filter-missing-rows-when-quering-long-strings/100203)

<div class="topic-metadata">

**Author:** [@ofernachum](https://discuss.elastic.co/u/ofernachum)\
**Replies:** 1\
**Last updated:** [September 12, 2017, 12:52pm UTC](https://discuss.elastic.co/t/visualization-filter-missing-rows-when-quering-long-strings/100203 "2017-09-12T12:52:43Z")

</div>

Hey folks, Im running Kiban 5.2.1 with Elasticsearch 5.2.1. I have an Index with mapping that include string field containing long strings. For example: Path.keyword = "{ORS}{FGG only}{/D444/ORS Modifications/EIXXS O…

---

## [Splitting the elastic index to am and pm](https://discuss.elastic.co/t/splitting-the-elastic-index-to-am-and-pm/92513)

<div class="topic-metadata">

**Author:** [@putharekulu](https://discuss.elastic.co/u/putharekulu)\
**Replies:** 7\
**Last updated:** [July 10, 2017, 8:15pm UTC](https://discuss.elastic.co/t/splitting-the-elastic-index-to-am-and-pm/92513 "2017-07-10T20:15:28Z")

</div>

i have an elastic index on date basis and it should get 1B documents/day. in the current scenario i am able to get only 500-600M and it is too slow \[ like getting yesterday's logs today to elastic\] . I am thinking of spl…

---

## [Alerting to syslog](https://discuss.elastic.co/t/alerting-to-syslog/91234)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 1\
**Last updated:** [July 3, 2017, 8:12am UTC](https://discuss.elastic.co/t/alerting-to-syslog/91234 "2017-07-03T08:12:08Z")

</div>

Hi, I'm trying to configure watcher generate an alert but I need it to be sent to a remote host via Syslog. I was trying to ask this from the support but I got a response like this: 'This is what the HTTP/S callout i…

---

## [How to call a command from within a mutate email block then include the output in the email?](https://discuss.elastic.co/t/how-to-call-a-command-from-within-a-mutate-email-block-then-include-the-output-in-the-email/69066)

<div class="topic-metadata">

**Author:** [@TomK](https://discuss.elastic.co/u/TomK)\
**Replies:** 7\
**Last updated:** [December 17, 2016, 3:02am UTC](https://discuss.elastic.co/t/how-to-call-a-command-from-within-a-mutate-email-block-then-include-the-output-in-the-email/69066 "2016-12-17T03:02:05Z")

</div>

(Rephrasing) We're trying to achieve the following: 1) Retrieve a UID from a log file entry / line. 2) Lookup that UID to get the real User Name. 3) Email the Log Entry / Line , the UID and the User Name (based on th…

---

## [Unable to search text containing only special characters using elasticsearch query](https://discuss.elastic.co/t/unable-to-search-text-containing-only-special-characters-using-elasticsearch-query/62200)

<div class="topic-metadata">

**Author:** [@abhisheknath07](https://discuss.elastic.co/u/abhisheknath07)\
**Replies:** 1\
**Last updated:** [October 5, 2016, 10:25am UTC](https://discuss.elastic.co/t/unable-to-search-text-containing-only-special-characters-using-elasticsearch-query/62200 "2016-10-05T10:25:03Z")

</div>

Hi, Here is my index with settings and mappings curl -XPUT 'http://localhost:9200/special\_index' -d '{ "settings": { "numberOfShards": "5", "numberOfReplicas": "1", "analysis": { "filter": { "edge\_ngram…

---

## [Updating document with script](https://discuss.elastic.co/t/updating-document-with-script/53065)

<div class="topic-metadata">

**Author:** [@TodayandTomorrow](https://discuss.elastic.co/u/TodayandTomorrow)\
**Replies:** 1\
**Last updated:** [June 17, 2016, 7:19am UTC](https://discuss.elastic.co/t/updating-document-with-script/53065 "2016-06-17T07:19:47Z")

</div>

I am attempting to update some documents with the update\_by\_query API and ES scripting. sample documents: doc = { "name" : "Today"} doc = { "name" : "Today", "tag": \["yellow", "red"\]} doc = { "name" : "Today", "tag": \[…

---

## [Highlighting attachments](https://discuss.elastic.co/t/highlighting-attachments/13529)

<div class="topic-metadata">

**Author:** [@Andrew\_Soep\_2](https://discuss.elastic.co/u/Andrew_Soep_2)\
**Replies:** 7\
**Last updated:** [September 12, 2013, 10:40pm UTC](https://discuss.elastic.co/t/highlighting-attachments/13529 "2013-09-12T22:40:58Z")

</div>

I've been struggling with getting highlighting to work with attachments. I've tried a number of different mappings, and I'm not sure what I'm doing wrong. I can't imagine that anything else is causing the issue. I…

---

## [Timestamp not being overwriten (ECS)](https://discuss.elastic.co/t/timestamp-not-being-overwriten-ecs/288544)

<div class="topic-metadata">

**Author:** [@vcaleffi](https://discuss.elastic.co/u/vcaleffi)\
**Replies:** 2\
**Last updated:** [November 6, 2021, 6:41pm UTC](https://discuss.elastic.co/t/timestamp-not-being-overwriten-ecs/288544 "2021-11-06T18:41:03Z")

</div>

Hello, I'm very new to filebeat and I'm trying to import logs created by my application (PHP - symfony). The application uses monolog and ECS formatter to write to a log file. Monolog configuration: monolog: handl…

---

## [Problems with Shard allocation](https://discuss.elastic.co/t/problems-with-shard-allocation/286687)

<div class="topic-metadata">

**Author:** [@Olakunle\_Oladimeji](https://discuss.elastic.co/u/Olakunle_Oladimeji)\
**Replies:** 2\
**Last updated:** [October 14, 2021, 8:09am UTC](https://discuss.elastic.co/t/problems-with-shard-allocation/286687 "2021-10-14T08:09:25Z")

</div>

We currently run Elasticsearch version 7.6.1 on three machines with roles dilm for all. Our index is divided into three shards and 2 replicas. Lately we've noticed that shards are not allocated on one node. When I run …

---

## [Magento 2.3.5 p1 - Elastic Search 7.7. /var/www/html/vendor/elasticsearch/elasticsearch/src/Elasticsearch/Connections/Connection.php:632)](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182)

<div class="topic-metadata">

**Author:** [@danielJ](https://discuss.elastic.co/u/danielJ)\
**Replies:** 2\
**Last updated:** [December 21, 2020, 5:37pm UTC](https://discuss.elastic.co/t/magento-2-3-5-p1-elastic-search-7-7-var-www-html-vendor-elasticsearch-elasticsearch-src-elasticsearch-connections-connection-php-632/259182 "2020-12-21T17:37:07Z")

</div>

Hello Team, I am using Magento 2.3.5p1 using mysql on an AWS EC2 instance with installed Elasticsearch version 7.7. I get the test successful but on the front end the search does not work with there's no item matching y…

---

## [Elastic Search percentile aggregations filtering issue](https://discuss.elastic.co/t/elastic-search-percentile-aggregations-filtering-issue/165037)

<div class="topic-metadata">

**Author:** [@sukku77](https://discuss.elastic.co/u/sukku77)\
**Replies:** 2\
**Last updated:** [January 29, 2019, 8:29am UTC](https://discuss.elastic.co/t/elastic-search-percentile-aggregations-filtering-issue/165037 "2019-01-29T08:29:58Z")

</div>

Hi Guys, Below is my problem statement I have one post search call to elasticsearch which is having query to calculate 99% percentile aggregations on one of the field. In return i am getting proper response with aggreg…

---

## [Can I change color of text in data table or markdown based on some condition in Kibana canvas?](https://discuss.elastic.co/t/can-i-change-color-of-text-in-data-table-or-markdown-based-on-some-condition-in-kibana-canvas/159852)

<div class="topic-metadata">

**Author:** [@RatanShreshtha](https://discuss.elastic.co/u/RatanShreshtha)\
**Replies:** 2\
**Last updated:** [January 2, 2019, 11:05am UTC](https://discuss.elastic.co/t/can-i-change-color-of-text-in-data-table-or-markdown-based-on-some-condition-in-kibana-canvas/159852 "2019-01-02T11:05:23Z")

</div>

I am trying to create a dashboard for showing different stages of our build pipeline for the latest build in Kibana canvas, is there a way to create such element in Kibana canvas ?

---

## [Multi word, single field AND query](https://discuss.elastic.co/t/multi-word-single-field-and-query/134898)

<div class="topic-metadata">

**Author:** [@fattyAtty](https://discuss.elastic.co/u/fattyAtty)\
**Replies:** 2\
**Last updated:** [June 14, 2018, 4:38am UTC](https://discuss.elastic.co/t/multi-word-single-field-and-query/134898 "2018-06-14T04:38:17Z")

</div>

Hi. I have a field TAGS that takes in a List of Strings. I want the user to specify the tags and the result should be records that contain at least all of the tags. For example, if she searches for A, B,C , i want the re…

---

## [Partial failure](https://discuss.elastic.co/t/partial-failure/112153)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 2\
**Last updated:** [December 18, 2017, 7:35am UTC](https://discuss.elastic.co/t/partial-failure/112153 "2017-12-18T07:35:05Z")

</div>

I have a 3 nodes cluster with 1 primary and 2 replica shards. I inserted a document and got this response: IndexResponse\[index=events\_1513522587069,type=events,id=112,version=1,result=created,shards= {"total":3,"succes…

---

## [SQLException: ORA-02396: exceeded maximum idle time](https://discuss.elastic.co/t/sqlexception-ora-02396-exceeded-maximum-idle-time/107764)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 2\
**Last updated:** [November 15, 2017, 2:47pm UTC](https://discuss.elastic.co/t/sqlexception-ora-02396-exceeded-maximum-idle-time/107764 "2017-11-15T14:47:59Z")

</div>

Hi Team, I tried to push bulk data using logstash configuration file.I have given all database connection related parameters and query but after sometime connection closed and getting below exception: Exception when ex…

---

## [Collecting Kibana monitoring data](https://discuss.elastic.co/t/collecting-kibana-monitoring-data/80780)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 3:20pm UTC](https://discuss.elastic.co/t/collecting-kibana-monitoring-data/80780 "2017-03-31T15:20:53Z")

</div>

hi everybody, we've got a multi-cluster setup with a tribe node and a dedicated ES node for ".kibana" index only (localhost:19200). All communications are SSL secured. There is no dedicated monitoring cluster so far. W…

---

## [Escaping index requests for REST API from Java](https://discuss.elastic.co/t/escaping-index-requests-for-rest-api-from-java/55253)

<div class="topic-metadata">

**Author:** [@hherman1](https://discuss.elastic.co/u/hherman1)\
**Replies:** 2\
**Last updated:** [July 14, 2016, 8:24am UTC](https://discuss.elastic.co/t/escaping-index-requests-for-rest-api-from-java/55253 "2016-07-14T08:24:14Z")

</div>

Hi, I'm trying to escape my document index PUT requests in Java, and having a hell of a time. Things I've tried: Apache commons-lang EscapeUtils.escapeJavascript Lucene QueryParser.escape Neither of these work, the f…

---

## [Completion Suggesters stopped working with 2.2.0 upgrade](https://discuss.elastic.co/t/completion-suggesters-stopped-working-with-2-2-0-upgrade/41380)

<div class="topic-metadata">

**Author:** [@datashaman](https://discuss.elastic.co/u/datashaman)\
**Replies:** 2\
**Last updated:** [February 17, 2016, 8:20am UTC](https://discuss.elastic.co/t/completion-suggesters-stopped-working-with-2-2-0-upgrade/41380 "2016-02-17T08:20:04Z")

</div>

Hi there, We've hit an error where a completion suggester which was working before is no longer working. The error thrown is the following: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Can't…

---

## [Shield Access Denied](https://discuss.elastic.co/t/shield-access-denied/33521)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 2\
**Last updated:** [November 3, 2015, 4:39am UTC](https://discuss.elastic.co/t/shield-access-denied/33521 "2015-11-03T04:39:15Z")

</div>

Hi Team, I have created a new user as espoweruser by the following command, bin/shield/esusers useradd espoweruser -r power\_user and it prompted for enter new password.After the successful password creation I have ve…

---

## [Elasticsearch server crashing](https://discuss.elastic.co/t/elasticsearch-server-crashing/8446)

<div class="topic-metadata">

**Author:** [@Abhishek\_Jajoria](https://discuss.elastic.co/u/Abhishek_Jajoria)\
**Replies:** 2\
**Last updated:** [July 20, 2012, 6:21am UTC](https://discuss.elastic.co/t/elasticsearch-server-crashing/8446 "2012-07-20T06:21:10Z")

</div>

My Es server keeps getting crashes .I get the following error file in my bin folder please tell me what does this error means and why it is occuring? # # An unexpected error has been detected by Java Runtime Envir…

---

## [Cannot generate report PDF or PNG](https://discuss.elastic.co/t/cannot-generate-report-pdf-or-png/311019)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 6\
**Last updated:** [August 1, 2022, 4:50pm UTC](https://discuss.elastic.co/t/cannot-generate-report-pdf-or-png/311019 "2022-08-01T16:50:30Z")

</div>

Hello there, I´m trying to generate reports using pdf or png but for some reason is not showing on the share option from kibana discover tab. After checking on the reporting diagnostics tab, I saw something that may be…

---

## [All beats have missing documents or timestamp not accurate](https://discuss.elastic.co/t/all-beats-have-missing-documents-or-timestamp-not-accurate/295065)

<div class="topic-metadata">

**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\
**Replies:** 6\
**Last updated:** [January 26, 2022, 1:38pm UTC](https://discuss.elastic.co/t/all-beats-have-missing-documents-or-timestamp-not-accurate/295065 "2022-01-26T13:38:51Z")

</div>

I am experiencing several documents missing after the upgrade to 7.0. Metricbeat dashboard used to show a regular update of the cpu and memory , however now it now shows a dash (-) for 1m before showing update. this make…

---

## [Changing the value of log entry in old index](https://discuss.elastic.co/t/changing-the-value-of-log-entry-in-old-index/207835)

<div class="topic-metadata">

**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\
**Replies:** 6\
**Last updated:** [November 19, 2019, 5:10am UTC](https://discuss.elastic.co/t/changing-the-value-of-log-entry-in-old-index/207835 "2019-11-19T05:10:53Z")

</div>

Hi All , i have an artifact which is sending logs in elastic for about 5 months. (every month one index) . now all of a sudden business is saying one of the values in the old logs is wrong. say eg: the log field nam…

---

## [Queueing LogEvents in Redis or similar needed?](https://discuss.elastic.co/t/queueing-logevents-in-redis-or-similar-needed/115308)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 6\
**Last updated:** [January 17, 2018, 10:14am UTC](https://discuss.elastic.co/t/queueing-logevents-in-redis-or-similar-needed/115308 "2018-01-17T10:14:14Z")

</div>

Hi, I sometimes find elastic architectures where Logstash, which parses the logs, is located behind a redis or kafka instance. What are the advantages of such a setup? Currently we are shipping our logs via filebeat (…

---

## [Found a bug in date parsing!](https://discuss.elastic.co/t/found-a-bug-in-date-parsing/115311)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 6\
**Last updated:** [January 15, 2018, 5:34pm UTC](https://discuss.elastic.co/t/found-a-bug-in-date-parsing/115311 "2018-01-15T17:34:46Z")

</div>

Update: As stated below, I have a file with 3,951,165 csv llines that process properly with the config file shown below. In this, I get 153 lines that fail with dateparsefailure. After looking at the ruby debug output, …

---

## [Will many narrow index patterns improve search performance?](https://discuss.elastic.co/t/will-many-narrow-index-patterns-improve-search-performance/85359)

<div class="topic-metadata">

**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\
**Replies:** 6\
**Last updated:** [May 11, 2017, 6:37pm UTC](https://discuss.elastic.co/t/will-many-narrow-index-patterns-improve-search-performance/85359 "2017-05-11T18:37:24Z")

</div>

We're planning to migrate from single daily index to many indices in order to implement granular access policies. I.e. instead of logstash-DD.MM.YYYY we're going to have about 40 daily indices like logstash-applicaitonXX…

---

## [How to differentiate between two kubernetes clusters with metricbeats](https://discuss.elastic.co/t/how-to-differentiate-between-two-kubernetes-clusters-with-metricbeats/125985)

<div class="topic-metadata">

**Author:** [@David\_Michael\_Gang](https://discuss.elastic.co/u/David_Michael_Gang)\
**Replies:** 4\
**Last updated:** [April 8, 2018, 2:36pm UTC](https://discuss.elastic.co/t/how-to-differentiate-between-two-kubernetes-clusters-with-metricbeats/125985 "2018-04-08T14:36:50Z")

</div>

Hi all, The instructions to install metricbeats on kubernetes are here . Let's say i have two clusters A and B, Is there a way to differentiate between both cklusters so that two different dashboards are made? What i…

---

## [How to Create Kibana Visualization to show only highest 3 sum of values over a time period?](https://discuss.elastic.co/t/how-to-create-kibana-visualization-to-show-only-highest-3-sum-of-values-over-a-time-period/310000)

<div class="topic-metadata">

**Author:** [@rachana\_uday](https://discuss.elastic.co/u/rachana_uday)\
**Replies:** 3\
**Last updated:** [August 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-create-kibana-visualization-to-show-only-highest-3-sum-of-values-over-a-time-period/310000 "2022-08-03T09:12:09Z")

</div>

Hey Guys, I have a task to create a kibana Visualization \[preferably a data table\] that shows the maximum 3 values of the sum of values over a time period. Basically I want the visualization to obtain below: calculat…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/300236)

<div class="topic-metadata">

**Author:** [@justintaylor9](https://discuss.elastic.co/u/justintaylor9)\
**Replies:** 8\
**Last updated:** [March 25, 2022, 2:52pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/300236 "2022-03-25T14:52:34Z")

</div>

I am getting this error in the browser. Here are my configs: Kibana.yml: \</\> server.host: 10.241.89.153 Elasticsearch.hosts: "http://10.241.89.144:9200" server.port: 80 Elasticsearch.ssl.verificationMode: certifica…

---

## [Ruby on Rails APM agent isn't sending data to ELK server](https://discuss.elastic.co/t/ruby-on-rails-apm-agent-isnt-sending-data-to-elk-server/248416)

<div class="topic-metadata">

**Author:** [@MarkMichuda](https://discuss.elastic.co/u/MarkMichuda)\
**Replies:** 3\
**Last updated:** [September 15, 2020, 1:03pm UTC](https://discuss.elastic.co/t/ruby-on-rails-apm-agent-isnt-sending-data-to-elk-server/248416 "2020-09-15T13:03:29Z")

</div>

Kibana version : 7.8.0 Elasticsearch version : 7.8.0 APM Server version : 7.8.0 APM Gem Version : elastic-apm (0.4.3) Ruby Version : ruby 2.1.2p95 We're using ELK open source monitoring for our infra. APM monitoring…

---

## [How to monitor logstash remotely?](https://discuss.elastic.co/t/how-to-monitor-logstash-remotely/162682)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 3\
**Last updated:** [January 2, 2019, 5:37pm UTC](https://discuss.elastic.co/t/how-to-monitor-logstash-remotely/162682 "2019-01-02T17:37:51Z")

</div>

Is there any logstash monitoring tool like cerebro for elasticsearch ? because currently i have no idea how it is performing i checked visualvm, but it didn't give info other than heap size and cpu usage please help

---

## [Mac SHA512 Hash Doesn't Match Download](https://discuss.elastic.co/t/mac-sha512-hash-doesnt-match-download/153101)

<div class="topic-metadata">

**Author:** [@Spellinator](https://discuss.elastic.co/u/Spellinator)\
**Replies:** 3\
**Last updated:** [October 19, 2018, 2:46pm UTC](https://discuss.elastic.co/t/mac-sha512-hash-doesnt-match-download/153101 "2018-10-19T14:46:56Z")

</div>

Anyone else encounter this discrepancy? Did Elastic forget to update the SHA512 hash text for comparison with the Oct. 2nd release? Or has the download been corrupted?

---

## [Kibana and elasticsearch linking on docker](https://discuss.elastic.co/t/kibana-and-elasticsearch-linking-on-docker/122859)

<div class="topic-metadata">

**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\
**Replies:** 8\
**Last updated:** [March 8, 2018, 6:48am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-linking-on-docker/122859 "2018-03-08T06:48:51Z")

</div>

Hello I am new to ELK . I am facing a problem while using kibana I am working on a VM where in I have all my three containers running on docker i.e logstash elasticsearch and kibana Logstash works fine there and i can…

---

## [Dependecias logstash](https://discuss.elastic.co/t/dependecias-logstash/111139)

<div class="topic-metadata">

**Author:** [@Erick\_Garcia\_Perez](https://discuss.elastic.co/u/Erick_Garcia_Perez)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 7:37pm UTC](https://discuss.elastic.co/t/dependecias-logstash/111139 "2017-12-19T19:37:07Z")

</div>

hola buenos dias, epsero me ayuden! Cuando intento arrancar logstash me sale lo siguiente: \[clusterelastic@linux-z38e:~/cluster1/Nodo1/logapacheerror/logstash-5.5.2/bin\] sh logstash -f configuracion.conf LoadError: no…

---

## [How to solve in Kibana: Visualization of specific log entries with additional information?](https://discuss.elastic.co/t/how-to-solve-in-kibana-visualization-of-specific-log-entries-with-additional-information/79184)

<div class="topic-metadata">

**Author:** [@test\_user](https://discuss.elastic.co/u/test_user)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 6:28pm UTC](https://discuss.elastic.co/t/how-to-solve-in-kibana-visualization-of-specific-log-entries-with-additional-information/79184 "2017-03-28T18:28:14Z")

</div>

Hi all, We want to migrate existing script based solution into Kibana, with following features: handling multiple specific(fetching with regular expressions) text log entries. Should be not peformant has to run onl…

---

## [Having issues downloading Elastic packages today?](https://discuss.elastic.co/t/having-issues-downloading-elastic-packages-today/76871)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 3\
**Last updated:** [March 1, 2017, 12:14am UTC](https://discuss.elastic.co/t/having-issues-downloading-elastic-packages-today/76871 "2017-03-01T00:14:25Z")

</div>

G'Day all, AWS S3 is having some issues which is impacting our package repos. This covers things like DEB and RPMs for all products, Maven and docker images. Please be patient while the team at AWS resolve this issue a…

---

## [Some windows event ID message cant be displayed in kibana?](https://discuss.elastic.co/t/some-windows-event-id-message-cant-be-displayed-in-kibana/55669)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 3\
**Last updated:** [July 20, 2016, 3:19pm UTC](https://discuss.elastic.co/t/some-windows-event-id-message-cant-be-displayed-in-kibana/55669 "2016-07-20T15:19:28Z")

</div>

I am using winlogbeat to send Winds data to ES and also kibana later on for display. However, it seems that kibana cant display the message properly as shown. This is what shown in discover page. However, this is wha…

[Previous page](https://discuss.elastic.co/top.md?page=1412&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1414&per_page=50&period=all)
