# Top

**URL:** https://discuss.elastic.co/top.md?page=1435&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1436

---

## [Unable to change output index according to event fields](https://discuss.elastic.co/t/unable-to-change-output-index-according-to-event-fields/107240)

<div class="topic-metadata">

**Author:** [@pravj](https://discuss.elastic.co/u/pravj)\
**Replies:** 3\
**Last updated:** [November 14, 2017, 6:25am UTC](https://discuss.elastic.co/t/unable-to-change-output-index-according-to-event-fields/107240 "2017-11-14T06:25:46Z")

</div>

I want to use different indices for "filebeat" and "metricbeat" input sources, shipping events to the logstash. Here is the logstash.conf we are using. input { beats { ssl =\> false host =\> "0.0.…

---

## [Filter specific words from a field in logstash](https://discuss.elastic.co/t/filter-specific-words-from-a-field-in-logstash/100614)

<div class="topic-metadata">

**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\
**Replies:** 3\
**Last updated:** [September 16, 2017, 2:32am UTC](https://discuss.elastic.co/t/filter-specific-words-from-a-field-in-logstash/100614 "2017-09-16T02:32:23Z")

</div>

I'm pulling data from SQL and one of the table has field called 'description' which contains values like alarm created, alarm discontinued, sound generated, api called, api call failed. All I wanted to do is capture onl…

---

## [Upgrading of Elasticsearch 1.7.3 to 2.3.5](https://discuss.elastic.co/t/upgrading-of-elasticsearch-1-7-3-to-2-3-5/57442)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 3\
**Last updated:** [August 11, 2016, 7:58am UTC](https://discuss.elastic.co/t/upgrading-of-elasticsearch-1-7-3-to-2-3-5/57442 "2016-08-11T07:58:16Z")

</div>

Anyone knows the steps to upgrade elasticsearch from 1.7.3 to 2.5.3? The link below is useless. They either lead to long list of exceptions or the indices will be not appear anymore. https://www.elastic.co/guide/en/e…

---

## [Allocation awareness and node replacement](https://discuss.elastic.co/t/allocation-awareness-and-node-replacement/6690)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 3\
**Last updated:** [February 14, 2012, 2:31pm UTC](https://discuss.elastic.co/t/allocation-awareness-and-node-replacement/6690 "2012-02-14T14:31:59Z")

</div>

Hi, This is a question about what ES does or doesn't do with shards/ replicas when: 1) a box/node with specific shard/replica allocation filtering goes down, and 2) a new box is added to the cluster in order to re…

---

## [Ansible-elasticsearch running minimum example results in ERROR! no action detected in task](https://discuss.elastic.co/t/ansible-elasticsearch-running-minimum-example-results-in-error-no-action-detected-in-task/119500)

<div class="topic-metadata">

**Author:** [@drmason13](https://discuss.elastic.co/u/drmason13)\
**Replies:** 0\
**Last updated:** [February 12, 2018, 3:31pm UTC](https://discuss.elastic.co/t/ansible-elasticsearch-running-minimum-example-results-in-error-no-action-detected-in-task/119500 "2018-02-12T15:31:08Z")

</div>

Hello, Very excited to make use of an elastic-developed ansible role but I'm afraid I am having difficulty running the "simple example". I am very new to Ansible so this could well be a misconfiguration on my part, howe…

---

## [Value on chart in line Visualization](https://discuss.elastic.co/t/value-on-chart-in-line-visualization/232174)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 9:13am UTC](https://discuss.elastic.co/t/value-on-chart-in-line-visualization/232174 "2020-05-13T09:13:32Z")

</div>

Hi All, I create a line visualization like this its posible to show the value in line chart like this? I think this is a much needed feature

---

## [Trouble installing kibana plugin](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984)

<div class="topic-metadata">

**Author:** [@terryE](https://discuss.elastic.co/u/terryE)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 8:05pm UTC](https://discuss.elastic.co/t/trouble-installing-kibana-plugin/207984 "2019-11-15T20:05:40Z")

</div>

I'm trying to use an init container to install a kibana plugin but I'm getting an error. Events: Type Reason Age From Message Warning ReconciliationErr…

---

## [Support for Shenandoah GC](https://discuss.elastic.co/t/support-for-shenandoah-gc/162378)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 1\
**Last updated:** [December 28, 2018, 9:12pm UTC](https://discuss.elastic.co/t/support-for-shenandoah-gc/162378 "2018-12-28T21:12:38Z")

</div>

Is there any official testing/support of the Shenandoah GC? The Shenandoah GC looks to have a vast number of improvements over the CMS GC that is standard.

---

## [Kibana in RED just because one index is RED](https://discuss.elastic.co/t/kibana-in-red-just-because-one-index-is-red/89265)

<div class="topic-metadata">

**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\
**Replies:** 1\
**Last updated:** [June 14, 2017, 4:35pm UTC](https://discuss.elastic.co/t/kibana-in-red-just-because-one-index-is-red/89265 "2017-06-14T16:35:07Z")

</div>

Hi If any one of index in ElasticSeach cluster is RED, then Kibana is down with status RED. People can't search the data & see their dasbhoards..etc. But as per the Elastic Search Documents, the data is searchable even…

---

## [Custom realm and parsing request params](https://discuss.elastic.co/t/custom-realm-and-parsing-request-params/79775)

<div class="topic-metadata">

**Author:** [@Piotr\_Rydzewski](https://discuss.elastic.co/u/Piotr_Rydzewski)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 5:00pm UTC](https://discuss.elastic.co/t/custom-realm-and-parsing-request-params/79775 "2017-03-24T17:00:14Z")

</div>

Hi, In my case I would like to implement custom realm to handle authorization token generated by another identity server. And my question is whether it is possible to obtain token from request parameter because i'm build…

---

## [How to set default analyzer for new Logstash indices?](https://discuss.elastic.co/t/how-to-set-default-analyzer-for-new-logstash-indices/163976)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 2\
**Last updated:** [January 13, 2019, 4:34am UTC](https://discuss.elastic.co/t/how-to-set-default-analyzer-for-new-logstash-indices/163976 "2019-01-13T04:34:38Z")

</div>

Hi, I'm new to the Elastic stack in general. I would like to know how to set or modify the default analyzer for new indices. I'm currently modifying the analyzer to stop queries from lower-casing the tokens. I have succe…

---

## [Filebeat 6.x idle\_timeout](https://discuss.elastic.co/t/filebeat-6-x-idle-timeout/141920)

<div class="topic-metadata">

**Author:** [@wklken](https://discuss.elastic.co/u/wklken)\
**Replies:** 2\
**Last updated:** [July 30, 2018, 4:31am UTC](https://discuss.elastic.co/t/filebeat-6-x-idle-timeout/141920 "2018-07-30T04:31:34Z")

</div>

Hi team: I have recently upgraded to filebeat 6.3.2 from 5.3 Then I found the break changes: spooler is removed so the config is not working anymore. filebeat.idle\_timeout: 2s In our cluster, we collect the docker …

---

## [Logstash GROK](https://discuss.elastic.co/t/logstash-grok/248485)

<div class="topic-metadata">

**Author:** [@Jokie74](https://discuss.elastic.co/u/Jokie74)\
**Replies:** 4\
**Last updated:** [September 14, 2020, 9:08am UTC](https://discuss.elastic.co/t/logstash-grok/248485 "2020-09-14T09:08:42Z")

</div>

Hello Community, I'm a bit lost with creating a grok filter and need some help... I am using filebeat for AIX to send errpt messages with syslog to logstash and Kibana to visualize... The Log coming from AIX error\_dea…

---

## [Help needed, Elastic+Kibana Ubuntu 18.04.LTS problem](https://discuss.elastic.co/t/help-needed-elastic-kibana-ubuntu-18-04-lts-problem/217507)

<div class="topic-metadata">

**Author:** [@mmalisa12](https://discuss.elastic.co/u/mmalisa12)\
**Replies:** 4\
**Last updated:** [February 2, 2020, 5:16pm UTC](https://discuss.elastic.co/t/help-needed-elastic-kibana-ubuntu-18-04-lts-problem/217507 "2020-02-02T17:16:30Z")

</div>

Hi, pretty frustrating installation of Elastic and Kibana. Elastic is running OK, checked with curl, got "You know, for searching" reply. Starting kibana with --allow-root to see where problem is and message is: Licen…

---

## [Can't understand ML plugin Functionalities](https://discuss.elastic.co/t/cant-understand-ml-plugin-functionalities/125973)

<div class="topic-metadata">

**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\
**Replies:** 4\
**Last updated:** [March 29, 2018, 2:45pm UTC](https://discuss.elastic.co/t/cant-understand-ml-plugin-functionalities/125973 "2018-03-29T14:45:06Z")

</div>

HeLLO every one, Please , can someone explain this two values(actual and typical). If i based my job on the max of a field(hdopDevice) why i cant see this value?!! \[image\] else when i select this period , i see an an…

---

## [How put 2 scripts in a watcher](https://discuss.elastic.co/t/how-put-2-scripts-in-a-watcher/252350)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 5\
**Last updated:** [October 16, 2020, 2:21pm UTC](https://discuss.elastic.co/t/how-put-2-scripts-in-a-watcher/252350 "2020-10-16T14:21:08Z")

</div>

hello how can i put 2 scripts in an alert? i have one that is from "ctx.payload.time\_triggered" and the other is for "metric.agg". i need help with this... { "trigger": { "schedule": { "interval": "1h" }…

---

## [Issue indexing a field on elasticsearch 6.8](https://discuss.elastic.co/t/issue-indexing-a-field-on-elasticsearch-6-8/211140)

<div class="topic-metadata">

**Author:** [@mgaspereyra](https://discuss.elastic.co/u/mgaspereyra)\
**Replies:** 5\
**Last updated:** [December 13, 2019, 4:40pm UTC](https://discuss.elastic.co/t/issue-indexing-a-field-on-elasticsearch-6-8/211140 "2019-12-13T16:40:09Z")

</div>

Hi Everybody! I Apologize to post this issue, as I think it should be easy to solve, but I am not finding the way to solve it. My situation is as follows: I have a Kong server which pushes his logs to elasticsearch, t…

---

## [Elasticseach index problem - closing randomly](https://discuss.elastic.co/t/elasticseach-index-problem-closing-randomly/143917)

<div class="topic-metadata">

**Author:** [@Sanj\_Gunetileke](https://discuss.elastic.co/u/Sanj_Gunetileke)\
**Replies:** 5\
**Last updated:** [August 14, 2018, 9:37pm UTC](https://discuss.elastic.co/t/elasticseach-index-problem-closing-randomly/143917 "2018-08-14T21:37:38Z")

</div>

Hello, I have a node with 3 indexes and each index has 3 shards. Total disk usage is about 9GB. OS: Windows server 2016 (virtual machine) ES: 6.2.4 memory: 16GB HD: 250GB. Virusscanner: mcafee. Some indexes close…

---

## [The current index was generated by Lucene 7 while one of the directories contains an index that was generated with Lucene 6](https://discuss.elastic.co/t/the-current-index-was-generated-by-lucene-7-while-one-of-the-directories-contains-an-index-that-was-generated-with-lucene-6/115142)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 5\
**Last updated:** [January 18, 2018, 6:32pm UTC](https://discuss.elastic.co/t/the-current-index-was-generated-by-lucene-7-while-one-of-the-directories-contains-an-index-that-was-generated-with-lucene-6/115142 "2018-01-18T18:32:07Z")

</div>

Hi all.... i have updated my ES cluster from 5.4 to 6.0.0 version recently, Now i am trying to shrink the index with curator scripts but i am getting following error \[2018-01-10T20:26:13,358\]\[INFO \]\[o.e.c.m.MetaDataC…

---

## [Heartbeat uptime service sample dashboard](https://discuss.elastic.co/t/heartbeat-uptime-service-sample-dashboard/282759)

<div class="topic-metadata">

**Author:** [@Sherabu](https://discuss.elastic.co/u/Sherabu)\
**Replies:** 7\
**Last updated:** [August 31, 2021, 2:48am UTC](https://discuss.elastic.co/t/heartbeat-uptime-service-sample-dashboard/282759 "2021-08-31T02:48:43Z")

</div>

Hi friends I really need your help. I have few service for few instances. I need visualize 1 instance how many service is up and how many was down. U can use table. But I wish to have like graph but I really no idea how…

---

## [How to filter certain span in a transaction](https://discuss.elastic.co/t/how-to-filter-certain-span-in-a-transaction/206042)

<div class="topic-metadata">

**Author:** [@aladine](https://discuss.elastic.co/u/aladine)\
**Replies:** 1\
**Last updated:** [November 12, 2019, 8:52am UTC](https://discuss.elastic.co/t/how-to-filter-certain-span-in-a-transaction/206042 "2019-11-12T08:52:37Z")

</div>

I am using go agent for apm. In a (http request) transaction, when I integrate with apmsql to display the span of db, it displays in Kibana of both span.action=prepare and span.action=query. Is there any way I can confi…

---

## [Prometheus module is not working](https://discuss.elastic.co/t/prometheus-module-is-not-working/161988)

<div class="topic-metadata">

**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\
**Replies:** 1\
**Last updated:** [December 31, 2018, 10:18pm UTC](https://discuss.elastic.co/t/prometheus-module-is-not-working/161988 "2018-12-31T22:18:00Z")

</div>

I test on V6.4.3 and V6.5.0. First of all, the configuration template in prometheus.yml.disabled is wrong. if we enable this module by mv prometheus.yml.disabled to prometheus.yml, will print ERROR as below 2018-12-24T…

---

## [Passing Dynamic data to other Visualizations](https://discuss.elastic.co/t/passing-dynamic-data-to-other-visualizations/105226)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [October 25, 2017, 2:46pm UTC](https://discuss.elastic.co/t/passing-dynamic-data-to-other-visualizations/105226 "2017-10-25T14:46:06Z")

</div>

Hi - I have a requirement, to show the data as per the request coming in from the other visualization. Lets say I've a mark down visualization which shows build numbers (1....10) which will be as a hyperlink and when u…

---

## [How to add filters on healthmetric in json input](https://discuss.elastic.co/t/how-to-add-filters-on-healthmetric-in-json-input/75485)

<div class="topic-metadata">

**Author:** [@mehdichilla](https://discuss.elastic.co/u/mehdichilla)\
**Replies:** 1\
**Last updated:** [February 18, 2017, 1:40pm UTC](https://discuss.elastic.co/t/how-to-add-filters-on-healthmetric-in-json-input/75485 "2017-02-18T13:40:18Z")

</div>

Hello, we use kibana 5.1.1 & elasticsearch 5.1.1 with gauge-sg et health metric plugins. I am trying to filter in the construction of my visualization the values a zero of the deconnected people. Would you have a trac…

---

## [Keeping cassandra and elastic search in sync](https://discuss.elastic.co/t/keeping-cassandra-and-elastic-search-in-sync/48977)

<div class="topic-metadata">

**Author:** [@aakkhilashaheen](https://discuss.elastic.co/u/aakkhilashaheen)\
**Replies:** 1\
**Last updated:** [January 26, 2017, 10:20am UTC](https://discuss.elastic.co/t/keeping-cassandra-and-elastic-search-in-sync/48977 "2017-01-26T10:20:22Z")

</div>

How to do a one time migration of data from cassandra to elastic search?

---

## [ES 1.2.1 sort by \_timestamp](https://discuss.elastic.co/t/es-1-2-1-sort-by--timestamp/18064)

<div class="topic-metadata">

**Author:** [@Stefan\_Eberl](https://discuss.elastic.co/u/Stefan_Eberl)\
**Replies:** 7\
**Last updated:** [June 13, 2014, 10:01am UTC](https://discuss.elastic.co/t/es-1-2-1-sort-by--timestamp/18064 "2014-06-13T10:01:55Z")

</div>

Hey all, I have a question regarding sorting by \_timestamp. The \_timestamp "enabled" setting is set to true, everything else is not explicitly specified (so I assume default values are used). I have an applicati…

---

## [Limited number of results showing in pdf report](https://discuss.elastic.co/t/limited-number-of-results-showing-in-pdf-report/70420)

<div class="topic-metadata">

**Author:** [@odibrowne](https://discuss.elastic.co/u/odibrowne)\
**Replies:** 1\
**Last updated:** [January 3, 2017, 2:49pm UTC](https://discuss.elastic.co/t/limited-number-of-results-showing-in-pdf-report/70420 "2017-01-03T14:49:16Z")

</div>

In the discover tab, the results show over 30,000 hits. When I view the generated report from the results it is only showing 5 hits. How can I configure it to display all hits or is there a limit.

---

## [Logstash problems with xml filter](https://discuss.elastic.co/t/logstash-problems-with-xml-filter/264667)

<div class="topic-metadata">

**Author:** [@Er1csson](https://discuss.elastic.co/u/Er1csson)\
**Replies:** 8\
**Last updated:** [February 19, 2021, 11:15pm UTC](https://discuss.elastic.co/t/logstash-problems-with-xml-filter/264667 "2021-02-19T23:15:26Z")

</div>

Hi all, I want to collect only certain tags from my xml file (data with Parameter tag). Here is the example of xml file I want to parse: // \<Instrument Name="GLPO" DisplayName="AAAA" HeartBeat="BBBB"\> // \<Comp…

---

## [Filebeat version 6.4.0 unable to send logs to Kafka directly . Filebeat not starting](https://discuss.elastic.co/t/filebeat-version-6-4-0-unable-to-send-logs-to-kafka-directly-filebeat-not-starting/244350)

<div class="topic-metadata">

**Author:** [@Dibyendu\_Dutta](https://discuss.elastic.co/u/Dibyendu_Dutta)\
**Replies:** 8\
**Last updated:** [August 10, 2020, 9:09pm UTC](https://discuss.elastic.co/t/filebeat-version-6-4-0-unable-to-send-logs-to-kafka-directly-filebeat-not-starting/244350 "2020-08-10T21:09:30Z")

</div>

I want to send filebeat (logs) data to kafka directly. I have commented logstash/elasticsearch output and set the kafka output like below. But after that my filebeat instance is not starting . Getting error message Fail…

---

## [Sum of derivated data by particular fieald](https://discuss.elastic.co/t/sum-of-derivated-data-by-particular-fieald/148153)

<div class="topic-metadata">

**Author:** [@Ludek](https://discuss.elastic.co/u/Ludek)\
**Replies:** 8\
**Last updated:** [October 3, 2018, 12:22pm UTC](https://discuss.elastic.co/t/sum-of-derivated-data-by-particular-fieald/148153 "2018-10-03T12:22:07Z")

</div>

Hi there, I have data from a lot of servers and need to summarize. All data are counting up, so I need derivate by hostname. After that make sum. My sample data Time hostname actions.add header \[time\] mx1 …

---

## [ElasticSearch with stemming/snwoball](https://discuss.elastic.co/t/elasticsearch-with-stemming-snwoball/4005)

<div class="topic-metadata">

**Author:** [@Torsten](https://discuss.elastic.co/u/Torsten)\
**Replies:** 8\
**Last updated:** [March 4, 2011, 1:44am UTC](https://discuss.elastic.co/t/elasticsearch-with-stemming-snwoball/4005 "2011-03-04T01:44:23Z")

</div>

Hello, I am using ElasticSearch (0.15.0) as a search engine with full-text search and word highlighting. It works but I'm not able to configure an analyser with word stemming. I know that my problem is very similar…

---

## [No logstash directory in /usr/share](https://discuss.elastic.co/t/no-logstash-directory-in-usr-share/218851)

<div class="topic-metadata">

**Author:** [@kevin5617](https://discuss.elastic.co/u/kevin5617)\
**Replies:** 3\
**Last updated:** [February 13, 2020, 7:27am UTC](https://discuss.elastic.co/t/no-logstash-directory-in-usr-share/218851 "2020-02-13T07:27:18Z")

</div>

I am running Logstash with Docker and after I pull the docker image, there is no logstash directory in /usr/share to add config files.

---

## [How to use the high level rest API to build an Aggregation from JSON](https://discuss.elastic.co/t/how-to-use-the-high-level-rest-api-to-build-an-aggregation-from-json/171981)

<div class="topic-metadata">

**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\
**Replies:** 3\
**Last updated:** [March 12, 2019, 4:26pm UTC](https://discuss.elastic.co/t/how-to-use-the-high-level-rest-api-to-build-an-aggregation-from-json/171981 "2019-03-12T16:26:04Z")

</div>

need help ! How to make the "set aggregation" from JSON string ! I have an application where i build a json string with aggregations in frontend (angular) then i send this json to backend (Spring boot) to perform the re…

---

## [Shard relocation keeps restarting?](https://discuss.elastic.co/t/shard-relocation-keeps-restarting/154226)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 3\
**Last updated:** [October 29, 2018, 9:10am UTC](https://discuss.elastic.co/t/shard-relocation-keeps-restarting/154226 "2018-10-29T09:10:03Z")

</div>

Three nodes, 1,2,3, replacing one of them, so added 4, and told the system not to allocate anything to 3. What it's now trying to do is move two shards off 3, these are non-trivial in size (around 5Gbyte) and the link is…

---

## [Fuzzy & Exact Match Queries Using NEST API](https://discuss.elastic.co/t/fuzzy-exact-match-queries-using-nest-api/59993)

<div class="topic-metadata">

**Author:** [@luke305](https://discuss.elastic.co/u/luke305)\
**Replies:** 0\
**Last updated:** [September 7, 2016, 2:05pm UTC](https://discuss.elastic.co/t/fuzzy-exact-match-queries-using-nest-api/59993 "2016-09-07T14:05:58Z")

</div>

I'm using NEST v2.0 and trying to build a query such that when I search for a term that is in the index it will return that exact matches first along with possible fuzzy terms that are like the query but if I search for…

---

## [Logstash can't add fields?](https://discuss.elastic.co/t/logstash-cant-add-fields/55258)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 3\
**Last updated:** [July 12, 2016, 6:34am UTC](https://discuss.elastic.co/t/logstash-cant-add-fields/55258 "2016-07-12T06:34:27Z")

</div>

I have been using logstash to read some DB restore logs. Here is some lines of sample records. 07/08/2016 6:33:22.50: START restore database SQL2540W Restore is successful, however a warning "2539" was encounte…

---

## [Elasticsearch 1.7.4 only one node queue is full other is normal, maybe is a bug](https://discuss.elastic.co/t/elasticsearch-1-7-4-only-one-node-queue-is-full-other-is-normal-maybe-is-a-bug/46759)

<div class="topic-metadata">

**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\
**Replies:** 3\
**Last updated:** [April 9, 2016, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-4-only-one-node-queue-is-full-other-is-normal-maybe-is-a-bug/46759 "2016-04-09T00:40:57Z")

</div>

our's es' version is 1.7.4 ,today es-6 is down and is unavailable ,es-6'shard move to es-7 ,at this moment , \[es-m-7\] \[14297421\] Failed to execute fetch phase org.elasticsearch.common.util.concurrent.EsRejectedExecutio…

---

## [Getting {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."} when accessing kibana dashboard](https://discuss.elastic.co/t/getting-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-when-accessing-kibana-dashboard/353245)

<div class="topic-metadata">

**Author:** [@Avishka\_Pasindu](https://discuss.elastic.co/u/Avishka_Pasindu)\
**Replies:** 0\
**Last updated:** [February 14, 2024, 9:10am UTC](https://discuss.elastic.co/t/getting-statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred-when-accessing-kibana-dashboard/353245 "2024-02-14T09:10:25Z")

</div>

{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred."} Im getting above error on the browser when trying to access an already deployed kibana service's kibana dashboard. By r…

---

## [Monitoring AWS Lambda .Net runtimes with Elastic APM](https://discuss.elastic.co/t/monitoring-aws-lambda-net-runtimes-with-elastic-apm/313531)

<div class="topic-metadata">

**Author:** [@javaripa](https://discuss.elastic.co/u/javaripa)\
**Replies:** 0\
**Last updated:** [September 2, 2022, 9:08am UTC](https://discuss.elastic.co/t/monitoring-aws-lambda-net-runtimes-with-elastic-apm/313531 "2022-09-02T09:08:40Z")

</div>

I'm interested in monitoring AWS Lambda Functions in .Net (.NET Core 3.1 & .NET 6). According to the following document, only Node.js, Python & Java is supported What is the recommended approach for my case?

---

## [Which versions of elasticsearch will shield be compatible with?](https://discuss.elastic.co/t/which-versions-of-elasticsearch-will-shield-be-compatible-with/21484)

<div class="topic-metadata">

**Author:** [@Tim\_S](https://discuss.elastic.co/u/Tim_S)\
**Replies:** 0\
**Last updated:** [January 5, 2015, 3:12pm UTC](https://discuss.elastic.co/t/which-versions-of-elasticsearch-will-shield-be-compatible-with/21484 "2015-01-05T15:12:27Z")

</div>

Hi, Does anyone know which versions of elasticsearch shield can be used with? Will it just be the latest version at the time of release (1.4.2 currently) or will it work with older versions? Thanks, Tim. -…

---

## [Apache Log4j 2.0 \< 2.3.2 / 2.4 \< 2.12.4 / 2.13 \< 2.17.1 RCE](https://discuss.elastic.co/t/apache-log4j-2-0-2-3-2-2-4-2-12-4-2-13-2-17-1-rce/323614)

<div class="topic-metadata">

**Author:** [@khadija70](https://discuss.elastic.co/u/khadija70)\
**Replies:** 6\
**Last updated:** [January 20, 2023, 6:51pm UTC](https://discuss.elastic.co/t/apache-log4j-2-0-2-3-2-2-4-2-12-4-2-13-2-17-1-rce/323614 "2023-01-20T18:51:19Z")

</div>

Hi , We have recently receive security vulnerabilities related to Log4j , as solution proposed is to Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later. Could you please confirm if there is a patch to …

---

## [Delete file in ruby filter logstash](https://discuss.elastic.co/t/delete-file-in-ruby-filter-logstash/289671)

<div class="topic-metadata">

**Author:** [@Hertz\_Drive](https://discuss.elastic.co/u/Hertz_Drive)\
**Replies:** 6\
**Last updated:** [November 22, 2021, 4:28am UTC](https://discuss.elastic.co/t/delete-file-in-ruby-filter-logstash/289671 "2021-11-22T04:28:53Z")

</div>

my code in ruby filter def register(params) print "heello ruby come in" end def filter(event) Dir.glob('/home/hz/COM.txt').each { |file| File.chmod(0777, file) File.delete(file) print(file) } #return…

---

## [Openid based user access changes is not reflecting immediately in elasticsearch](https://discuss.elastic.co/t/openid-based-user-access-changes-is-not-reflecting-immediately-in-elasticsearch/209459)

<div class="topic-metadata">

**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Replies:** 6\
**Last updated:** [November 26, 2019, 11:30am UTC](https://discuss.elastic.co/t/openid-based-user-access-changes-is-not-reflecting-immediately-in-elasticsearch/209459 "2019-11-26T11:30:49Z")

</div>

ES version: 7.3.2 I am using OpenID based User Authorization, similar to this documentation, https://www.elastic.co/guide/en/elasticsearch/reference/7.4/oidc-role-mapping.html If I change any roles, the changes reflect…

---

## [Агрегирование данных](https://discuss.elastic.co/t/topic/170624)

<div class="topic-metadata">

**Author:** [@Lewik](https://discuss.elastic.co/u/Lewik)\
**Replies:** 6\
**Last updated:** [March 6, 2019, 3:48pm UTC](https://discuss.elastic.co/t/topic/170624 "2019-03-06T15:48:13Z")

</div>

Использую filebeat logstash elastic kibana есть у меня записи в логе типа timestamp seriviceName guid ON и timestamp seriviceName guid OFF Как мне вывести все ON для которых нет соответсвующих OFF и время как давно …

---

## [How to make a search result which can filter by options like amazon.com?](https://discuss.elastic.co/t/how-to-make-a-search-result-which-can-filter-by-options-like-amazon-com/124538)

<div class="topic-metadata">

**Author:** [@patrickwai](https://discuss.elastic.co/u/patrickwai)\
**Replies:** 6\
**Last updated:** [March 19, 2018, 4:35pm UTC](https://discuss.elastic.co/t/how-to-make-a-search-result-which-can-filter-by-options-like-amazon-com/124538 "2018-03-19T16:35:52Z")

</div>

Hello I am building a search project for products with following requirement: get results by a keyword then can filter results by some options in the web page. filter options , for example filter by categories, by br…

---

## [Highlighting Inconsistent behaviour](https://discuss.elastic.co/t/highlighting-inconsistent-behaviour/9724)

<div class="topic-metadata">

**Author:** [@Eric\_Kazaki](https://discuss.elastic.co/u/Eric_Kazaki)\
**Replies:** 6\
**Last updated:** [November 19, 2012, 11:52am UTC](https://discuss.elastic.co/t/highlighting-inconsistent-behaviour/9724 "2012-11-19T11:52:01Z")

</div>

Hi I'm testing highlighting and getting very strange errors on a 3 nodes cluster. Without highlighting the query runs fine and I get all the documents I want without failures. When I add highlighting, the same que…

---

## [Vault audit log issue sending to elasticsearch](https://discuss.elastic.co/t/vault-audit-log-issue-sending-to-elasticsearch/205757)

<div class="topic-metadata">

**Author:** [@polaaditya](https://discuss.elastic.co/u/polaaditya)\
**Replies:** 0\
**Last updated:** [October 29, 2019, 8:55pm UTC](https://discuss.elastic.co/t/vault-audit-log-issue-sending-to-elasticsearch/205757 "2019-10-29T20:55:13Z")

</div>

My filebeat config filebeat.inputs: - type: log enabled: true json.keys\_under\_root: true json.overwrite\_keys: true json.message\_key: log paths: - /var/log/vault\_audit.log …

---

## [Issue with sending to Kafka 0.10.2.1 over TLS](https://discuss.elastic.co/t/issue-with-sending-to-kafka-0-10-2-1-over-tls/111252)

<div class="topic-metadata">

**Author:** [@Pepe](https://discuss.elastic.co/u/Pepe)\
**Replies:** 0\
**Last updated:** [December 12, 2017, 7:23am UTC](https://discuss.elastic.co/t/issue-with-sending-to-kafka-0-10-2-1-over-tls/111252 "2017-12-12T07:23:18Z")

</div>

I've been trying to get Filebeat to work with Kafka over TLS and after numerous tries I've gotten Filebeat to connect and receive metadata, but I just can't get it to send messages to Kafka. My log looks something like t…

---

## [Filebeat azure module error code 409 BlobAlreadyExists](https://discuss.elastic.co/t/filebeat-azure-module-error-code-409-blobalreadyexists/269251)

<div class="topic-metadata">

**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 5:03pm UTC](https://discuss.elastic.co/t/filebeat-azure-module-error-code-409-blobalreadyexists/269251 "2021-04-07T17:03:38Z")

</div>

Hi, I'm getting this error from filebeat: Apr 05 15:14:43 SOMETHING filebeat\[410843\]: / \_\_\_\_/ \_\_\_\_\_ \_\_\_\_ / /\_/ / / /\_ \_\_/ /\_ \_\_\_\_\_ Apr 05 15:14:43 SOMETHING filebeat\[410843\]: / \_\_/ | | / / \_ \\/ \_\_ \\/ \_\_/ /\_/…

---

## [Create scripted field count total](https://discuss.elastic.co/t/create-scripted-field-count-total/241573)

<div class="topic-metadata">

**Author:** [@whyptrap](https://discuss.elastic.co/u/whyptrap)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 6:22am UTC](https://discuss.elastic.co/t/create-scripted-field-count-total/241573 "2020-08-05T06:22:47Z")

</div>

I have field called "My Name", there's available same value for example : \[1\] Smith \[2\] Jason \[3\] Pedro \[4\] Rossi \[5\] James \[6\] Smith \[7\] Jason \[8\] James In kibana (scripted field), how can i count the same docu…

[Previous page](https://discuss.elastic.co/top.md?page=1434&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1436&per_page=50&period=all)
