# Top

**URL:** https://discuss.elastic.co/top.md?page=1434&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1435

---

## [Exiting: error initializing publisher: output type http undefined in filebeat.yml](https://discuss.elastic.co/t/exiting-error-initializing-publisher-output-type-http-undefined-in-filebeat-yml/330258)

<div class="topic-metadata">

**Author:** [@karthic](https://discuss.elastic.co/u/karthic)\
**Replies:** 1\
**Last updated:** [April 19, 2023, 5:39am UTC](https://discuss.elastic.co/t/exiting-error-initializing-publisher-output-type-http-undefined-in-filebeat-yml/330258 "2023-04-19T05:39:28Z")

</div>

Hi I need to forward the logs to my own api, In the config, i am using Http.output which says the error "Exiting: error initializing publisher: output type http undefined in filebeat" output.http: url: "https://API…

---

## [Vega visualization issue](https://discuss.elastic.co/t/vega-visualization-issue/275929)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 7\
**Last updated:** [June 17, 2021, 4:41am UTC](https://discuss.elastic.co/t/vega-visualization-issue/275929 "2021-06-17T04:41:25Z")

</div>

My Vega visual is throwing below errors. Can anyone help me on what these errors signify.

---

## [Forming a new document with all the fields everytime a new event comes in](https://discuss.elastic.co/t/forming-a-new-document-with-all-the-fields-everytime-a-new-event-comes-in/265248)

<div class="topic-metadata">

**Author:** [@karanp](https://discuss.elastic.co/u/karanp)\
**Replies:** 7\
**Last updated:** [March 10, 2021, 6:27pm UTC](https://discuss.elastic.co/t/forming-a-new-document-with-all-the-fields-everytime-a-new-event-comes-in/265248 "2021-03-10T18:27:42Z")

</div>

Hello, So I am currently trying to figure this out and would love to know if my current approach is correct and if not, is there a way to do it. So, the question is We have these events coming in with each event having …

---

## [MetricBeat error](https://discuss.elastic.co/t/metricbeat-error/262153)

<div class="topic-metadata">

**Author:** [@cloudenv](https://discuss.elastic.co/u/cloudenv)\
**Replies:** 7\
**Last updated:** [January 28, 2021, 3:52pm UTC](https://discuss.elastic.co/t/metricbeat-error/262153 "2021-01-28T15:52:46Z")

</div>

Ok will try to be civil here, but 'd be hard as Im furious. Have spent all f\* day tryting to setup Kibana ( cloud / self ) Am trying to configure metricbeat using this. Im getting Anyone? PS: why all texts here are…

---

## [Update By Query & Version Conflicts](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054)

<div class="topic-metadata">

**Author:** [@Chris\_White](https://discuss.elastic.co/u/Chris_White)\
**Replies:** 1\
**Last updated:** [October 7, 2019, 3:59pm UTC](https://discuss.elastic.co/t/update-by-query-version-conflicts/202054 "2019-10-07T15:59:46Z")

</div>

I've just been stung by running an update-by-query where the Java Client API (High Level REST) has a query build method of setMaxRetries - but in fact update-by-query does not support retries - it's up to the developer t…

---

## [Access field name with blanks via painless](https://discuss.elastic.co/t/access-field-name-with-blanks-via-painless/194062)

<div class="topic-metadata">

**Author:** [@brille1980](https://discuss.elastic.co/u/brille1980)\
**Replies:** 1\
**Last updated:** [August 6, 2019, 7:45pm UTC](https://discuss.elastic.co/t/access-field-name-with-blanks-via-painless/194062 "2019-08-06T19:45:49Z")

</div>

Hi there, how do I access a field name that includes blanks (e.g. "Event ID" : 23) via script? ctx.Event\\ ID = 42 doesn't work ("Error parsing ingest pipeline: JSON Parse error: Invalid escape character") neither does…

---

## [Problem on Infrastructure and Metricbeats](https://discuss.elastic.co/t/problem-on-infrastructure-and-metricbeats/188864)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 2:49pm UTC](https://discuss.elastic.co/t/problem-on-infrastructure-and-metricbeats/188864 "2019-07-05T14:49:57Z")

</div>

Hi, I have problem on the Infrastructure tab on Kibana. I cannot see any data of the metrics of my hosts. In the past i could see all the metrics for all the hosts there. After upgrading ELK 7.1 to 7.2 and all the metr…

---

## [Hive Runtime Error while processing row Caused by: org.elasticsearch.hadoop.serialization.EsHadoopSerializationException:](https://discuss.elastic.co/t/hive-runtime-error-while-processing-row-caused-by-org-elasticsearch-hadoop-serialization-eshadoopserializationexception/156098)

<div class="topic-metadata">

**Author:** [@praga](https://discuss.elastic.co/u/praga)\
**Replies:** 1\
**Last updated:** [November 27, 2018, 4:07pm UTC](https://discuss.elastic.co/t/hive-runtime-error-while-processing-row-caused-by-org-elasticsearch-hadoop-serialization-eshadoopserializationexception/156098 "2018-11-27T16:07:15Z")

</div>

Hi, I have been trying to create Hive Table with elastic index .Ended up with an issue.Please find the followed procedure below Employee table from Employee database - MySQL sample imported into Hadoop via Sqoop /user/…

---

## [Problems with geo\_point](https://discuss.elastic.co/t/problems-with-geo-point/140967)

<div class="topic-metadata">

**Author:** [@noob\_cakes](https://discuss.elastic.co/u/noob_cakes)\
**Replies:** 7\
**Last updated:** [July 20, 2018, 11:57pm UTC](https://discuss.elastic.co/t/problems-with-geo-point/140967 "2018-07-20T23:57:52Z")

</div>

Hello all, I'm very new to elastic, so please bear with me. I'm trying to get a data type 'geo\_point' in ES 6.3 via a template referenced in my logstash pipeline. I'm getting geo data populating in elasticsearch, just n…

---

## [CPU a 100 %, conseils et astuces](https://discuss.elastic.co/t/cpu-a-100-conseils-et-astuces/116541)

<div class="topic-metadata">

**Author:** [@Sylvain-69](https://discuss.elastic.co/u/Sylvain-69)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 10:28am UTC](https://discuss.elastic.co/t/cpu-a-100-conseils-et-astuces/116541 "2018-01-23T10:28:54Z")

</div>

Bonjour à tous, pour mon tout premier poste en français je viens vous demander quelques conseils. Tout d'abord j'aimerais préciser que je débute sur ELK, que je n'ai aucune notion en base de donnée et/ou en développeme…

---

## [Searching over multiple untouched fields without "\_all"](https://discuss.elastic.co/t/searching-over-multiple-untouched-fields-without--all/14383)

<div class="topic-metadata">

**Author:** [@Nd\_Coderific](https://discuss.elastic.co/u/Nd_Coderific)\
**Replies:** 1\
**Last updated:** [November 13, 2013, 8:01pm UTC](https://discuss.elastic.co/t/searching-over-multiple-untouched-fields-without--all/14383 "2013-11-13T20:01:27Z")

</div>

Hi there, I´m new to Elasticsearch. I tried to search over multiple untouched fields with the following query: { "from" : searchPageNumberFTS, "size":10, "sort":{}, "query":\[ { "filtered" : { "quer…

---

## [Enhanced table](https://discuss.elastic.co/t/enhanced-table/302006)

<div class="topic-metadata">

**Author:** [@Alejandra\_Mata1](https://discuss.elastic.co/u/Alejandra_Mata1)\
**Replies:** 8\
**Last updated:** [April 11, 2022, 5:00pm UTC](https://discuss.elastic.co/t/enhanced-table/302006 "2022-04-11T17:00:11Z")

</div>

Hi @fbaligand i would like to use enhanced table in 8.1 version .... will you able help me?

---

## [GCP module - Add cluster\_name for GKE / k8s.io logs](https://discuss.elastic.co/t/gcp-module-add-cluster-name-for-gke-k8s-io-logs/271278)

<div class="topic-metadata">

**Author:** [@aryon](https://discuss.elastic.co/u/aryon)\
**Replies:** 8\
**Last updated:** [April 28, 2021, 4:05pm UTC](https://discuss.elastic.co/t/gcp-module-add-cluster-name-for-gke-k8s-io-logs/271278 "2021-04-28T16:05:05Z")

</div>

Hello, I am using the GCP module to collect GCP audit logs. I noticed that for GKE / k8s.io logs, we do not have the cluster\_name in the ingested event. The field is present in the original event collected in Pub/Sub, …

---

## [Multiple tokenizers inside one Custom Analyser in Elasticsearch](https://discuss.elastic.co/t/multiple-tokenizers-inside-one-custom-analyser-in-elasticsearch/150297)

<div class="topic-metadata">

**Author:** [@pranav24](https://discuss.elastic.co/u/pranav24)\
**Replies:** 0\
**Last updated:** [September 28, 2018, 6:37am UTC](https://discuss.elastic.co/t/multiple-tokenizers-inside-one-custom-analyser-in-elasticsearch/150297 "2018-09-28T06:37:15Z")

</div>

I am using Custom NGRAM Analyzer which has a ngram tokenizer. I have also used lowercase filter. The query is working fine for searches without characters. But when I am searching for certain symbols, it fails. Since I h…

---

## [Kibana Data View update API request doesn't work](https://discuss.elastic.co/t/kibana-data-view-update-api-request-doesnt-work/327435)

<div class="topic-metadata">

**Author:** [@nilaksha](https://discuss.elastic.co/u/nilaksha)\
**Replies:** 5\
**Last updated:** [March 20, 2023, 3:19pm UTC](https://discuss.elastic.co/t/kibana-data-view-update-api-request-doesnt-work/327435 "2023-03-20T15:19:43Z")

</div>

I'm using latest version of 8.6.2 kibana and i need to change the index pattern in kibana Data View to visualize data dynamically. so i have to do it using kibana rest API and found Data View Update API Documentation. bu…

---

## [Esrally ingesting to two indices parallelly](https://discuss.elastic.co/t/esrally-ingesting-to-two-indices-parallelly/279933)

<div class="topic-metadata">

**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\
**Replies:** 5\
**Last updated:** [July 29, 2021, 1:44pm UTC](https://discuss.elastic.co/t/esrally-ingesting-to-two-indices-parallelly/279933 "2021-07-29T13:44:57Z")

</div>

I want to add documents to two indices simultaneously. For that, I tried with parallel option . But it stills run sequentially and add data to firstly mentioned index and later to the second one . Is this supported is …

---

## [UTC vs EST log events in Kibana](https://discuss.elastic.co/t/utc-vs-est-log-events-in-kibana/264921)

<div class="topic-metadata">

**Author:** [@Yuri\_Sibirski](https://discuss.elastic.co/u/Yuri_Sibirski)\
**Replies:** 5\
**Last updated:** [February 24, 2021, 4:09pm UTC](https://discuss.elastic.co/t/utc-vs-est-log-events-in-kibana/264921 "2021-02-24T16:09:45Z")

</div>

Hi there. I was not able to find a solution for my problem that is why I am creating this post. My problem is that we are sending logs to elasticsearch from linux nodes using either UTC or EST as their timezones. For EST…

---

## [Nfs filesystem: DirectoryIteratorException No error information](https://discuss.elastic.co/t/nfs-filesystem-directoryiteratorexception-no-error-information/195596)

<div class="topic-metadata">

**Author:** [@hsarkar](https://discuss.elastic.co/u/hsarkar)\
**Replies:** 5\
**Last updated:** [August 26, 2019, 2:11pm UTC](https://discuss.elastic.co/t/nfs-filesystem-directoryiteratorexception-no-error-information/195596 "2019-08-26T14:11:58Z")

</div>

I am running a 3 node elasticsearch cluster with the following configuration Version: 6.5.4 Environment: Docker Xmx = 3.75 Filesystem type: nfs Replication: 1 I am getting following error in stdout logs. \[pastebin\]…

---

## [SSO\\SAML auth failure](https://discuss.elastic.co/t/sso-saml-auth-failure/184892)

<div class="topic-metadata">

**Author:** [@bkasrai](https://discuss.elastic.co/u/bkasrai)\
**Replies:** 5\
**Last updated:** [June 11, 2019, 4:27pm UTC](https://discuss.elastic.co/t/sso-saml-auth-failure/184892 "2019-06-11T16:27:05Z")

</div>

Good afternoon, I am working on enabling SSO within my test environment and I was able to get everything registered and created on my end. (sp\_metadata file and yml file update) Once I made the update on the ES yml and …

---

## [2.0.0 Beta doesn't seem to return highlights](https://discuss.elastic.co/t/2-0-0-beta-doesnt-seem-to-return-highlights/30046)

<div class="topic-metadata">

**Author:** [@Dexterama](https://discuss.elastic.co/u/Dexterama)\
**Replies:** 5\
**Last updated:** [September 28, 2015, 2:06pm UTC](https://discuss.elastic.co/t/2-0-0-beta-doesnt-seem-to-return-highlights/30046 "2015-09-28T14:06:52Z")

</div>

I have 1.51, 1.6.0, 1.7.2 and 2.0.0 beta installed locally for testing. Nothing seems different in the online docs in regards to highlights and 2.0.0 beta, but 2.0.0 does not return highlights to me and I was wondering i…

---

## [Announce Mailing List](https://discuss.elastic.co/t/announce-mailing-list/19899)

<div class="topic-metadata">

**Author:** [@Igal](https://discuss.elastic.co/u/Igal)\
**Replies:** 5\
**Last updated:** [November 6, 2014, 8:43pm UTC](https://discuss.elastic.co/t/announce-mailing-list/19899 "2014-11-06T20:43:13Z")

</div>

Is there an announce mailing list? ATM I am trying to cut down on the amount of emails that I get, but I am very interested in learning about new version releases etc. -- You received this message because you…

---

## [Show discover result in dashboard](https://discuss.elastic.co/t/show-discover-result-in-dashboard/336826)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 1\
**Last updated:** [June 25, 2023, 7:05am UTC](https://discuss.elastic.co/t/show-discover-result-in-dashboard/336826 "2023-06-25T07:05:23Z")

</div>

Hi Need to put discovery search on dashboard. how can i do this? the main issue is I've create table on dashboard that show top apm span by duration. as far as i know i can't add column that show this field "span.db.st…

---

## [Figure out how to link services using manual instrumentation](https://discuss.elastic.co/t/figure-out-how-to-link-services-using-manual-instrumentation/283027)

<div class="topic-metadata">

**Author:** [@Jagraj02](https://discuss.elastic.co/u/Jagraj02)\
**Replies:** 4\
**Last updated:** [September 2, 2021, 2:34pm UTC](https://discuss.elastic.co/t/figure-out-how-to-link-services-using-manual-instrumentation/283027 "2021-09-02T14:34:30Z")

</div>

I have three sample services that I am trying to instrument. Service 1 is linked to Service 2 via rest while Service 2 acts a producer for service 3 (uses AWS SQS). Service 3 is a consumer from SQS. I have 2 different s…

---

## [Cannot deploy functionbeat 7.14.0](https://discuss.elastic.co/t/cannot-deploy-functionbeat-7-14-0/282217)

<div class="topic-metadata">

**Author:** [@sproctor](https://discuss.elastic.co/u/sproctor)\
**Replies:** 4\
**Last updated:** [August 25, 2021, 10:52pm UTC](https://discuss.elastic.co/t/cannot-deploy-functionbeat-7-14-0/282217 "2021-08-25T22:52:16Z")

</div>

Did something change in the process needed to deploy functionbeat 7.14.0? I can deploy 7.13.4 fine. If I try to deploy 7.14.0, I get the following error: Function: st-cw-logs, could not deploy, error: bucket 'st-fb-dep…

---

## [Does logstash use openssl?](https://discuss.elastic.co/t/does-logstash-use-openssl/269827)

<div class="topic-metadata">

**Author:** [@TakaSeki](https://discuss.elastic.co/u/TakaSeki)\
**Replies:** 4\
**Last updated:** [April 13, 2021, 12:41am UTC](https://discuss.elastic.co/t/does-logstash-use-openssl/269827 "2021-04-13T00:41:09Z")

</div>

Does logstash use openssl when using the SSL / TLS protocol? If so, where can I find the version of openssl?

---

## [Filebeat stoped to write logs after K8S upgrade to 1.14.1 ver](https://discuss.elastic.co/t/filebeat-stoped-to-write-logs-after-k8s-upgrade-to-1-14-1-ver/183870)

<div class="topic-metadata">

**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\
**Replies:** 4\
**Last updated:** [June 7, 2019, 8:11am UTC](https://discuss.elastic.co/t/filebeat-stoped-to-write-logs-after-k8s-upgrade-to-1-14-1-ver/183870 "2019-06-07T08:11:15Z")

</div>

Hi there! After upgrading the K8S ver from 1.10 to 1.14.1 ver, our filebeat stoped to write logs. I did found something in k8s doc - The container log directory changed from /var/lib/docker/ to /var/log/pods/ . If y…

---

## [How to manage multiple virtual machines to send metrics to ELK](https://discuss.elastic.co/t/how-to-manage-multiple-virtual-machines-to-send-metrics-to-elk/306035)

<div class="topic-metadata">

**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\
**Replies:** 6\
**Last updated:** [June 3, 2022, 2:29am UTC](https://discuss.elastic.co/t/how-to-manage-multiple-virtual-machines-to-send-metrics-to-elk/306035 "2022-06-03T02:29:37Z")

</div>

Hello guys i'm trying to build a solution where i could monitor a group of virtual machines. i have installed metricbeat on these machines. what i want to do is send these metrics to my ELK stack deployed on a kubernete…

---

## [Uso do sinal de + em uma pesquisa em JSON com erro](https://discuss.elastic.co/t/uso-do-sinal-de-em-uma-pesquisa-em-json-com-erro/285085)

<div class="topic-metadata">

**Author:** [@Marlos](https://discuss.elastic.co/u/Marlos)\
**Replies:** 6\
**Last updated:** [October 1, 2021, 2:44pm UTC](https://discuss.elastic.co/t/uso-do-sinal-de-em-uma-pesquisa-em-json-com-erro/285085 "2021-10-01T14:44:41Z")

</div>

Olá tudo bem ? Estou realizando uma pesquisa de notícias utilizando o JSON e no nome contém o sinal de + ex:"a+ Medicina Diagnóstica" fiz a pesquisando utilizando o query\_string e colocar o "\\" antes do termo, ficando…

---

## [Index with additional field taking less space than the same index without it](https://discuss.elastic.co/t/index-with-additional-field-taking-less-space-than-the-same-index-without-it/237815)

<div class="topic-metadata">

**Author:** [@jnioche](https://discuss.elastic.co/u/jnioche)\
**Replies:** 6\
**Last updated:** [June 24, 2020, 8:36am UTC](https://discuss.elastic.co/t/index-with-additional-field-taking-less-space-than-the-same-index-without-it/237815 "2020-06-24T08:36:14Z")

</div>

Hi, We have been using a field in a similar way to what the old \_all field used to do. We have a bunch of copy\_to from most of our other fields to copy to that field. I have been trying to measure the impact on disk sp…

---

## [Check service is running or not on remote machine before run Logstash exec input plugin](https://discuss.elastic.co/t/check-service-is-running-or-not-on-remote-machine-before-run-logstash-exec-input-plugin/150252)

<div class="topic-metadata">

**Author:** [@Gireesh\_Deepak\_R](https://discuss.elastic.co/u/Gireesh_Deepak_R)\
**Replies:** 6\
**Last updated:** [October 3, 2018, 9:07pm UTC](https://discuss.elastic.co/t/check-service-is-running-or-not-on-remote-machine-before-run-logstash-exec-input-plugin/150252 "2018-10-03T21:07:23Z")

</div>

Hello Team, I need help to find a work around for my use case. I am using logstash exec input plugin to execute some bash scripts, to process data and index them into ES. And, exec was scheduled to run daily once at 12…

---

## [Je n'ai plus accès à mes anciens index ES](https://discuss.elastic.co/t/je-nai-plus-acces-a-mes-anciens-index-es/74538)

<div class="topic-metadata">

**Author:** [@amir\_BH](https://discuss.elastic.co/u/amir_BH)\
**Replies:** 6\
**Last updated:** [February 16, 2017, 8:20pm UTC](https://discuss.elastic.co/t/je-nai-plus-acces-a-mes-anciens-index-es/74538 "2017-02-16T20:20:32Z")

</div>

Bonsoir, j'ai installé Syslog-ng/Elasticsearch/Kibana et je viens de me rendre compte que lorsque je filtre les logs via la date dans kibana il ne m'affiche plus les logs d'hier ou d'il y a 2/3 jours, il ne m'affiche q…

---

## [Using script fields in Kibana](https://discuss.elastic.co/t/using-script-fields-in-kibana/16736)

<div class="topic-metadata">

**Author:** [@Gal\_Zolkover](https://discuss.elastic.co/u/Gal_Zolkover)\
**Replies:** 6\
**Last updated:** [July 17, 2014, 5:30pm UTC](https://discuss.elastic.co/t/using-script-fields-in-kibana/16736 "2014-07-17T17:30:39Z")

</div>

Hi All I'm new to ES and Kibana and i have a simple question: I have ES collecting counters and i'd like to present in Kibana KPI based on the collected counters so i have a script that works in Chrome Sense ex…

---

## [Windows integration for event logs error](https://discuss.elastic.co/t/windows-integration-for-event-logs-error/284169)

<div class="topic-metadata">

**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\
**Replies:** 2\
**Last updated:** [September 15, 2021, 9:55am UTC](https://discuss.elastic.co/t/windows-integration-for-event-logs-error/284169 "2021-09-15T09:55:27Z")

</div>

Hi I have had a look at the Windows integration to collect events from the Windows event log but I believe there may be a mapping error. We have an environment where all Windows event logs are forwarded to a central lo…

---

## [I can't start elastcsearch](https://discuss.elastic.co/t/i-cant-start-elastcsearch/275436)

<div class="topic-metadata">

**Author:** [@sk88](https://discuss.elastic.co/u/sk88)\
**Replies:** 2\
**Last updated:** [June 9, 2021, 9:13pm UTC](https://discuss.elastic.co/t/i-cant-start-elastcsearch/275436 "2021-06-09T21:13:31Z")

</div>

type or paste code here STATUS: ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: timeout) since Wed 2021-06-0…

---

## [Syslog\_severity field is always using the default notice rather than the actual severity](https://discuss.elastic.co/t/syslog-severity-field-is-always-using-the-default-notice-rather-than-the-actual-severity/212478)

<div class="topic-metadata">

**Author:** [@oldhamuk](https://discuss.elastic.co/u/oldhamuk)\
**Replies:** 2\
**Last updated:** [December 20, 2019, 8:36am UTC](https://discuss.elastic.co/t/syslog-severity-field-is-always-using-the-default-notice-rather-than-the-actual-severity/212478 "2019-12-20T08:36:52Z")

</div>

Good Morning, I'm fairly new to ELK but have managed to build my self solution I can use for a syslog server and I'm happy with it with the exceptions of one thing at the moment. The severity of the syslog events seems…

---

## [Logstash output plugins and self signed certificates?](https://discuss.elastic.co/t/logstash-output-plugins-and-self-signed-certificates/192848)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [July 31, 2019, 6:03am UTC](https://discuss.elastic.co/t/logstash-output-plugins-and-self-signed-certificates/192848 "2019-07-31T06:03:26Z")

</div>

Hi, I want to use the Redmine output plugin but I'm running into a small problem. Our Redmine uses a self signed certificate and when I enable ssl =\> true in the output I get the following error which i assume is becaus…

---

## [Single search for multiple sites](https://discuss.elastic.co/t/single-search-for-multiple-sites/177784)

<div class="topic-metadata">

**Author:** [@digitalwise](https://discuss.elastic.co/u/digitalwise)\
**Replies:** 2\
**Last updated:** [April 22, 2019, 2:24am UTC](https://discuss.elastic.co/t/single-search-for-multiple-sites/177784 "2019-04-22T02:24:00Z")

</div>

We have a client that hired a design firm to move to a WordPress site. They are using Elasticsearch with the WordPress plug-in for the search for the new site. The client also has a few legacy apps that did not move in…

---

## [Winlogbeat Restart Services](https://discuss.elastic.co/t/winlogbeat-restart-services/168188)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 2\
**Last updated:** [February 15, 2019, 3:44pm UTC](https://discuss.elastic.co/t/winlogbeat-restart-services/168188 "2019-02-15T15:44:31Z")

</div>

Quick question. The ignore: 72h function in the Winlogbeat sends logs from 3 days ago. If I were to start winlogbeat and send a days worth of logs + the 3 days before and then restart winlogbeat. Would it send the 3 pr…

---

## [How to configure multiple sql instance in windows/metricbeat.yml](https://discuss.elastic.co/t/how-to-configure-multiple-sql-instance-in-windows-metricbeat-yml/161978)

<div class="topic-metadata">

**Author:** [@Akila](https://discuss.elastic.co/u/Akila)\
**Replies:** 2\
**Last updated:** [January 3, 2019, 6:26pm UTC](https://discuss.elastic.co/t/how-to-configure-multiple-sql-instance-in-windows-metricbeat-yml/161978 "2019-01-03T18:26:45Z")

</div>

We have installed metricbeat in windows and configured perfmon entry in windows.yml file to capture SQL instance ( MSSQL ) counters for single instance. In windows.yml file we hot-coded instance name under "instance\_nam…

---

## [Translog location](https://discuss.elastic.co/t/translog-location/93302)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 2\
**Last updated:** [July 16, 2017, 11:19pm UTC](https://discuss.elastic.co/t/translog-location/93302 "2017-07-16T23:19:24Z")

</div>

Is there any way to place the translog directory on a different disk than the data (I know it's a child of...)? Can it affect the time of the fsync if the translog will be located on a faster disk?

---

## [Multiple logstash instance running](https://discuss.elastic.co/t/multiple-logstash-instance-running/53173)

<div class="topic-metadata">

**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\
**Replies:** 2\
**Last updated:** [June 20, 2016, 3:52pm UTC](https://discuss.elastic.co/t/multiple-logstash-instance-running/53173 "2016-06-20T15:52:43Z")

</div>

In our environment we have multiple logstash harvestor running at same time. PS on commna line looks like this "logstash 1668 129 3.9 10291044 1302464 ? SNl 12:07 27:08 /usr/bin/java -XX:+UseParNewGC -XX…

---

## [Logstash with long GC](https://discuss.elastic.co/t/logstash-with-long-gc/42159)

<div class="topic-metadata">

**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\
**Replies:** 2\
**Last updated:** [March 7, 2016, 5:00pm UTC](https://discuss.elastic.co/t/logstash-with-long-gc/42159 "2016-03-07T17:00:54Z")

</div>

Hi, I still using Logstash 1.4.2 and in the last week begin a Long GC problem. I dont have any filters in this logstash(s) and I use only to ship logs to redis. There's some thing can create this problem in Logstas…

---

## [Elasticsearch 1.7.4 failed "error":"AmazonS3Exception](https://discuss.elastic.co/t/elasticsearch-1-7-4-failed-error-amazons3exception/41614)

<div class="topic-metadata">

**Author:** [@Vishal\_Singh1](https://discuss.elastic.co/u/Vishal_Singh1)\
**Replies:** 2\
**Last updated:** [February 12, 2016, 4:41pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-4-failed-error-amazons3exception/41614 "2016-02-12T16:41:25Z")

</div>

curl -XPUT 'http://localhost:9200/\_snapshot/my\_cluster1\_repository' -d '{ "type": "s3", "settings": { "bucket": "my-backup", "region": "us-east", "base\_path": "my\_backup/", "compress": true, "acce…

---

## [Saving zoom/center in tile map visualization](https://discuss.elastic.co/t/saving-zoom-center-in-tile-map-visualization/37006)

<div class="topic-metadata">

**Author:** [@gary](https://discuss.elastic.co/u/gary)\
**Replies:** 2\
**Last updated:** [December 12, 2015, 5:48pm UTC](https://discuss.elastic.co/t/saving-zoom-center-in-tile-map-visualization/37006 "2015-12-12T17:48:53Z")

</div>

Kibana 4.3.0, ElasticSearch 2.1.0 I've created a tile map visualization, and added it to a dashboard. Is there a way to save the zoom and center? Right now every time you re-open the dashboard or navigate away from …

---

## [Logstash, nested json and AWS ELB logs](https://discuss.elastic.co/t/logstash-nested-json-and-aws-elb-logs/34957)

<div class="topic-metadata">

**Author:** [@aodj](https://discuss.elastic.co/u/aodj)\
**Replies:** 2\
**Last updated:** [November 27, 2015, 11:39am UTC](https://discuss.elastic.co/t/logstash-nested-json-and-aws-elb-logs/34957 "2015-11-27T11:39:46Z")

</div>

I've been using Logstash to parse my AWS ELB logs for a little while, but need to change my parsing since it's causing the ElasticSearch mapping to grow. What I have currently is this: if \[type\] == "elb" { grok { …

---

## [Histogram aggregation with float interval \< 1.0 gives ArithmeticException](https://discuss.elastic.co/t/histogram-aggregation-with-float-interval-1-0-gives-arithmeticexception/20447)

<div class="topic-metadata">

**Author:** [@LiquidMark](https://discuss.elastic.co/u/LiquidMark)\
**Replies:** 2\
**Last updated:** [October 27, 2014, 11:22pm UTC](https://discuss.elastic.co/t/histogram-aggregation-with-float-interval-1-0-gives-arithmeticexception/20447 "2014-10-27T23:22:13Z")

</div>

Hi, the following query (note bolded line): { "query": { "filtered": { "query": { "term": { "self\_and\_ancestors": "diamonds" } }, "filter": { "terms":…

---

## [\[Solved\] Using /\_xpack/sql endpoint with dates with curl](https://discuss.elastic.co/t/solved-using-xpack-sql-endpoint-with-dates-with-curl/252742)

<div class="topic-metadata">

**Author:** [@Tiago\_Cruz](https://discuss.elastic.co/u/Tiago_Cruz)\
**Replies:** 3\
**Last updated:** [October 22, 2020, 7:53am UTC](https://discuss.elastic.co/t/solved-using-xpack-sql-endpoint-with-dates-with-curl/252742 "2020-10-22T07:53:04Z")

</div>

Hello, This works good: $ curl -X POST "localhost:9200/\_xpack/sql?format=txt&pretty" -H 'Content-Type: application/json' -d' { "query": "SELECT count(\*) FROM whatsapp\_202010 WHERE clientInfo.customerId = 7503" } ' …

---

## [After windows update Filebeat service stops immediately](https://discuss.elastic.co/t/after-windows-update-filebeat-service-stops-immediately/233331)

<div class="topic-metadata">

**Author:** [@udbv](https://discuss.elastic.co/u/udbv)\
**Replies:** 3\
**Last updated:** [June 18, 2020, 2:56pm UTC](https://discuss.elastic.co/t/after-windows-update-filebeat-service-stops-immediately/233331 "2020-06-18T14:56:19Z")

</div>

Hello Situation - After applying May updates on windows filebeat service is stopped after 1-second execution. There are no errors in logs and the same trouble with version 7.7. I couldn't find any useful info in system…

---

## [Elastic APM agent services (APM server output configured to logstash) are not displayed in Kibana](https://discuss.elastic.co/t/elastic-apm-agent-services-apm-server-output-configured-to-logstash-are-not-displayed-in-kibana/165547)

<div class="topic-metadata">

**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\
**Replies:** 3\
**Last updated:** [January 24, 2019, 11:32am UTC](https://discuss.elastic.co/t/elastic-apm-agent-services-apm-server-output-configured-to-logstash-are-not-displayed-in-kibana/165547 "2019-01-24T11:32:31Z")

</div>

Hi, Problem: APM agent services not listed out in the Kibana APM services screen. Problem Description: I have configured my elastic APM Java agent and found that agent is able to communicate with APM server successfu…

---

## [Missing data in ES](https://discuss.elastic.co/t/missing-data-in-es/132813)

<div class="topic-metadata">

**Author:** [@Jyoti\_rs](https://discuss.elastic.co/u/Jyoti_rs)\
**Replies:** 3\
**Last updated:** [May 24, 2018, 12:46pm UTC](https://discuss.elastic.co/t/missing-data-in-es/132813 "2018-05-24T12:46:07Z")

</div>

I am using Elastic search version 2.2.0 and i published the data and i could see the response id but when i am trying to find the data in Kibana.The data is missing and not visible in kibana. Any quick support is appre…

[Previous page](https://discuss.elastic.co/top.md?page=1433&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1435&per_page=50&period=all)
