# Top **URL:** https://discuss.elastic.co/top.md?page=1456&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1457 --- ## [Kibana Reporting error](https://discuss.elastic.co/t/kibana-reporting-error/233632)
**Author:** [@111317](https://discuss.elastic.co/u/111317)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 2:32am UTC](https://discuss.elastic.co/t/kibana-reporting-error/233632 "2020-05-29T02:32:54Z")
Reporting error Errors An error occurred when trying to open the Kibana URL. You may need to increase 'xpack.reporting.capture.timeouts.openUrl'. TimeoutError: waiting for selector ".application" failed: timeout 30000ms… --- ## [Swifttype Crawl Rate](https://discuss.elastic.co/t/swifttype-crawl-rate/169709)
**Author:** [@legislat.io](https://discuss.elastic.co/u/legislat.io)\ **Replies:** 3\ **Last updated:** [February 24, 2019, 6:59pm UTC](https://discuss.elastic.co/t/swifttype-crawl-rate/169709 "2019-02-24T18:59:01Z")
I'm trialing the service to see if it will help a project we're working on. but I don't seem to get the crawler working across the site. I fed it the seed and a sitemap, but it only crawls 20 pages in 12 hours, vs the m… --- ## [Join multiple input with different input types](https://discuss.elastic.co/t/join-multiple-input-with-different-input-types/164123)
**Author:** [@chaire](https://discuss.elastic.co/u/chaire)\ **Replies:** 3\ **Last updated:** [January 16, 2019, 6:09am UTC](https://discuss.elastic.co/t/join-multiple-input-with-different-input-types/164123 "2019-01-16T06:09:08Z")
I'm using Logstash along with Filebeat, Elasticsearch, and Kibana. I have 2 inputs to join, one is a filelog (Apache file) and another one is database file (sql). I can't find any documentation that explains how to use … --- ## [Intermittent connection closure when performing GET operations](https://discuss.elastic.co/t/intermittent-connection-closure-when-performing-get-operations/142978)
**Author:** [@Ashish\_Goel1](https://discuss.elastic.co/u/Ashish_Goel1)\ **Replies:** 0\ **Last updated:** [August 3, 2018, 9:38pm UTC](https://discuss.elastic.co/t/intermittent-connection-closure-when-performing-get-operations/142978 "2018-08-03T21:38:19Z")
Hi there, We are experiencing some intermittent issues when performing GET operations with our cluster 6.2.3 and client is 6.2.x (JAVA). Every now and then we get a ConnectionClosedException. Below is the stack trace fo… --- ## [Passing JSON query in GWT](https://discuss.elastic.co/t/passing-json-query-in-gwt/66315)
**Author:** [@Velusamy\_Velu](https://discuss.elastic.co/u/Velusamy_Velu)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 1:29pm UTC](https://discuss.elastic.co/t/passing-json-query-in-gwt/66315 "2016-11-18T13:29:53Z")
I'm trying to run the below query from a Java RESTful client - http://localhost:9200/catalog/drawings/\_search? -d '{"query":{"bool":{"must":{"term":{"hashCode":1049279250}}}},"sort":\[{"dateLastEdited":{"order":"desc",… --- ## [Multiple nodes on the same machine](https://discuss.elastic.co/t/multiple-nodes-on-the-same-machine/63834)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 0\ **Last updated:** [October 25, 2016, 6:58am UTC](https://discuss.elastic.co/t/multiple-nodes-on-the-same-machine/63834 "2016-10-25T06:58:56Z")
I'm in the progress setting up multiple nodes in one box, using this article as a reference. A couple of doubts: 1) number of cores, Does this refer to physical cores or cores including hyper-threading? With hyper-threa… --- ## [How to get documents based aggregated condition](https://discuss.elastic.co/t/how-to-get-documents-based-aggregated-condition/44686)
**Author:** [@K\_Samanth\_Kumar\_Redd](https://discuss.elastic.co/u/K_Samanth_Kumar_Redd)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 10:45am UTC](https://discuss.elastic.co/t/how-to-get-documents-based-aggregated-condition/44686 "2016-03-21T10:45:39Z")
Hi, I am working on elasticsearch aggreations. I have the below scenario: scenario: I have indexed customer data along with orders. Here "orders" are stored as nested type. example document: {"company":"ABC","orders"… --- ## [Log4j input](https://discuss.elastic.co/t/log4j-input/33557)
**Author:** [@sbecker](https://discuss.elastic.co/u/sbecker)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 7:50am UTC](https://discuss.elastic.co/t/log4j-input/33557 "2015-11-03T07:50:04Z")
I have tried to input several log4j messages, generated by our internal apps, into logstash with no luck. If I can to a TCP input on port 4560, it works. Do I need a specific log4j message format? I have searched ext… --- ## [Correctly indexing data into one place with multiple analyzers](https://discuss.elastic.co/t/correctly-indexing-data-into-one-place-with-multiple-analyzers/15743)
**Author:** [@Kevin\_Claggett](https://discuss.elastic.co/u/Kevin_Claggett)\ **Replies:** 3\ **Last updated:** [February 12, 2014, 8:09pm UTC](https://discuss.elastic.co/t/correctly-indexing-data-into-one-place-with-multiple-analyzers/15743 "2014-02-12T20:09:59Z")
I have some documents with ~30 fields, most of which i just want to analyze with the defaults, a couple i want to use snowballing or other custom analyzers on. The recommended way to do this seems to be using the … --- ## [Making API POST request in Kibana plugin](https://discuss.elastic.co/t/making-api-post-request-in-kibana-plugin/337003)
**Author:** [@trosagnant](https://discuss.elastic.co/u/trosagnant)\ **Replies:** 1\ **Last updated:** [June 27, 2023, 7:32pm UTC](https://discuss.elastic.co/t/making-api-post-request-in-kibana-plugin/337003 "2023-06-27T19:32:49Z")
Hello everyone, I'm trying to create a simple Kibana plugin which should send \_update\_by\_query request to elasticsearch, with values to updated provided by GUI in said plugin, but I can't quite grasp how making API call… --- ## [Failed to authenticate user \[elastic\] on Kibana v.6.4.0](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-on-kibana-v-6-4-0/156195)
**Author:** [@Okay\_SK](https://discuss.elastic.co/u/Okay_SK)\ **Replies:** 1\ **Last updated:** [November 11, 2018, 12:14pm UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic-on-kibana-v-6-4-0/156195 "2018-11-11T12:14:09Z")
$ curl -XPUT -u elastic 'localhost:9200/\_xpack/security/user/elastic/\_password' -H "Content-Type: application/json" -d '{ "password" : “1234” }' Enter host password for user 'elastic': {"error":{"root\_cause":\[{"type"… --- ## [Cannot index nested documents with ES-Hadoop 6.x.x jar](https://discuss.elastic.co/t/cannot-index-nested-documents-with-es-hadoop-6-x-x-jar/126290)
**Author:** [@hk4](https://discuss.elastic.co/u/hk4)\ **Replies:** 1\ **Last updated:** [April 12, 2018, 10:50am UTC](https://discuss.elastic.co/t/cannot-index-nested-documents-with-es-hadoop-6-x-x-jar/126290 "2018-04-12T10:50:38Z")
I have the following input json data with 'user' as a nested object: {"id":"1","user":\[{"first":"John","last":"Smith","amount":100.0}\]} {"id":"2","user":\[{"first":"Jane","last":"Hay","amount":50.0}\]} Before indexing th… --- ## [Disk Space Metrics "wrong" when working with overlay mounts](https://discuss.elastic.co/t/disk-space-metrics-wrong-when-working-with-overlay-mounts/72442)
**Author:** [@guenther](https://discuss.elastic.co/u/guenther)\ **Replies:** 1\ **Last updated:** [January 23, 2017, 1:01pm UTC](https://discuss.elastic.co/t/disk-space-metrics-wrong-when-working-with-overlay-mounts/72442 "2017-01-23T13:01:18Z")
Hi, I'm using Metricbeat on a machine where several overlay Filesystems are mounted. The hard drive actually only has about 440G but the Kibana Dashboards of Metricbeats show me, that the server has several TeraByte. … --- ## [Scripting with ES - size of array of objects](https://discuss.elastic.co/t/scripting-with-es-size-of-array-of-objects/22350)
**Author:** [@DH1](https://discuss.elastic.co/u/DH1)\ **Replies:** 1\ **Last updated:** [February 25, 2015, 7:39am UTC](https://discuss.elastic.co/t/scripting-with-es-size-of-array-of-objects/22350 "2015-02-25T07:39:39Z")
Hi, everyone. I'm currently facing a problem I can't seem to solve by myself, so, I came to seek the help of ES users more seasoned than I happen to be. I need to calculate the max size or a nested array of objec… --- ## [Runtime: VirtualAlloc of 1056768 bytes failed with errno=1455](https://discuss.elastic.co/t/runtime-virtualalloc-of-1056768-bytes-failed-with-errno-1455/238983)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 0\ **Last updated:** [June 28, 2020, 3:03am UTC](https://discuss.elastic.co/t/runtime-virtualalloc-of-1056768-bytes-failed-with-errno-1455/238983 "2020-06-28T03:03:48Z")
Hi All, Wondering whether any one can help me understand what happened. Been running filebeat for the past 6 months, and have been upgrading accordingly to our logstash. Currently on version 7.7 Never has it crashed ou… --- ## [Illegal\_argument\_exception when searching with scroll in new elasticserach java client](https://discuss.elastic.co/t/illegal-argument-exception-when-searching-with-scroll-in-new-elasticserach-java-client/310970)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 2\ **Last updated:** [July 29, 2022, 5:02pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-when-searching-with-scroll-in-new-elasticserach-java-client/310970 "2022-07-29T17:02:54Z")
What is the correct syntax when building a search request with scroll. I did this but I get an exception final co.elastic.clients.elasticsearch.core.SearchRequest req = rbuilder .index(indexPref… --- ## [Passing the security credentials in REST Search API](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [January 16, 2020, 6:29am UTC](https://discuss.elastic.co/t/passing-the-security-credentials-in-rest-search-api/214944 "2020-01-16T06:29:33Z")
I am looking for the way to transfer the credential details for the REST Search API request. Checked the API specification and haven't found any fields. Would like to know how the authentication and authorization is … --- ## [Failure to convert epoch number in scientific format to date](https://discuss.elastic.co/t/failure-to-convert-epoch-number-in-scientific-format-to-date/211871)
**Author:** [@jlevym](https://discuss.elastic.co/u/jlevym)\ **Replies:** 2\ **Last updated:** [December 15, 2019, 5:10pm UTC](https://discuss.elastic.co/t/failure-to-convert-epoch-number-in-scientific-format-to-date/211871 "2019-12-15T17:10:04Z")
my input json file (coming from mongoexport) is showing the time in scientific notation, for example: "lastUpdate":1.575882773525e+12 When I try and convert this to date format using "UNIX\_MX" I get the following l… --- ## [Start optimize process during docker build?](https://discuss.elastic.co/t/start-optimize-process-during-docker-build/173634)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [March 26, 2019, 7:38pm UTC](https://discuss.elastic.co/t/start-optimize-process-during-docker-build/173634 "2019-03-26T19:38:51Z")
Hi, is here a way to start optimizing step during the build explicitly and stop kibana directly after it is done? I want to prepare a custom image of kibana docker container. Due to some config changes kibana is runnni… --- ## [Stop Watcher after first alert](https://discuss.elastic.co/t/stop-watcher-after-first-alert/142204)
**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\ **Replies:** 2\ **Last updated:** [August 3, 2018, 3:27pm UTC](https://discuss.elastic.co/t/stop-watcher-after-first-alert/142204 "2018-08-03T15:27:33Z")
Is there a way to stop watcher sending alerts after the first one? so it only send alerts for new errors. I tried adding a second conditions so its not only just checking for a payload grater than 1 but for ctx.execut… --- ## [Query with Date filter](https://discuss.elastic.co/t/query-with-date-filter/114718)
**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\ **Replies:** 2\ **Last updated:** [January 11, 2018, 9:42am UTC](https://discuss.elastic.co/t/query-with-date-filter/114718 "2018-01-11T09:42:47Z")
Hello, I'm trying to return documents for the month of December that have a time stamp between 8AM to 4PM of every day. I currently have a timestamp field which is a date/time field (in the form 2017-12-17T22:00:00.355… --- ## [Query for X Y or Z using match](https://discuss.elastic.co/t/query-for-x-y-or-z-using-match/98217)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 2\ **Last updated:** [August 28, 2017, 9:20am UTC](https://discuss.elastic.co/t/query-for-x-y-or-z-using-match/98217 "2017-08-28T09:20:23Z")
Continuing the discussion from Query (must be X) and (must (Z or Y): Hi I built: GET filebeat-\*/log/\_search { "query": { "bool":{ "must": \[ "should" : \[ {"match" : {"clientId": "t… --- ## [Es5.1 - restore snapshot from es2.4](https://discuss.elastic.co/t/es5-1-restore-snapshot-from-es2-4/69712)
**Author:** [@Guillaume\_Vachon](https://discuss.elastic.co/u/Guillaume_Vachon)\ **Replies:** 2\ **Last updated:** [December 22, 2016, 2:10pm UTC](https://discuss.elastic.co/t/es5-1-restore-snapshot-from-es2-4/69712 "2016-12-22T14:10:00Z")
Hi all, Yesterday i created a small 3 node cluster that is 5.1. I wanted to start testing a few things. Among those thing was to use the s3-repository plugin to access my S3 snapshot from my in production 2.4 cluster.… --- ## [What is the future plan on shadow index?](https://discuss.elastic.co/t/what-is-the-future-plan-on-shadow-index/42818)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [February 29, 2016, 5:04am UTC](https://discuss.elastic.co/t/what-is-the-future-plan-on-shadow-index/42818 "2016-02-29T05:04:27Z")
I am interested in the shadow index feature, but find following statement: "This functionality is experimental and may be changed or removed completely in a future release." from https://www.elastic.co/guide/en/elasticse… --- ## [Is it possible to have fields of different type while using multi\_field?](https://discuss.elastic.co/t/is-it-possible-to-have-fields-of-different-type-while-using-multi-field/25455)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 2\ **Last updated:** [July 13, 2015, 3:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-fields-of-different-type-while-using-multi-field/25455 "2015-07-13T15:46:46Z")
I am trying to index plain text as well as text from attachment. Following is the mapping that i use: PUT /my-index/doc\_set/\_mapping { "properties": { "doc\_id": { "type": "string" }, "text": { … --- ## [Match / Text Phrase with Slop does not preserve order of tokens](https://discuss.elastic.co/t/match-text-phrase-with-slop-does-not-preserve-order-of-tokens/12771)
**Author:** [@ga\_gandhi](https://discuss.elastic.co/u/ga_gandhi)\ **Replies:** 2\ **Last updated:** [July 14, 2013, 10:14am UTC](https://discuss.elastic.co/t/match-text-phrase-with-slop-does-not-preserve-order-of-tokens/12771 "2013-07-14T10:14:45Z")
Hi, We are facing issue with Match or Text Phrase with Slop value 5. We have documents with below mentioned text and i am doing Match Phrase query for "organize house" with slop value 5. And i have Snow Ball filter … --- ## [Elasticsearch 8.11.4 Windows installation from zip not completing](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172)
**Author:** [@Echo9Zulu](https://discuss.elastic.co/u/Echo9Zulu)\ **Replies:** 5\ **Last updated:** [January 16, 2024, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-8-11-4-windows-installation-from-zip-not-completing/351172 "2024-01-16T14:40:42Z")
Hello! I am having difficulty installing Elasticsearch 8.11.4 on a laptop running Windows 10. Running elasticsearch.bat creates the following log in the command window. Shortly after running the command the install hang… --- ## [No Structured Logs Found in Stack Monitoring when using Logstashs](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776)
**Author:** [@akballow](https://discuss.elastic.co/u/akballow)\ **Replies:** 5\ **Last updated:** [April 10, 2022, 11:13pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776 "2022-04-10T23:13:54Z")
Hello All, Hope someone can help as I spent the past week trying to resolve this issue but couldn't. So some backstory. If I setup Elasticsearch with filebeat pointing to Elasticsearch, the Logs section in Stack Monito… --- ## [Watcher, Creating a kibana watcher to check an integer\[0-9\] value appears in logs in a give period of time](https://discuss.elastic.co/t/watcher-creating-a-kibana-watcher-to-check-an-integer-0-9-value-appears-in-logs-in-a-give-period-of-time/252589)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 4:58pm UTC](https://discuss.elastic.co/t/watcher-creating-a-kibana-watcher-to-check-an-integer-0-9-value-appears-in-logs-in-a-give-period-of-time/252589 "2020-11-03T16:58:25Z")
Hi, I'm creating a kibana watcher to check an integer field has a value runs between 0 and 9. A field of type Integer, will have values between 0 through 9 on each record. The business conditions are, Each value sho… --- ## [Failed to parse field \[\[observer.hostname\]\]](https://discuss.elastic.co/t/failed-to-parse-field-observer-hostname/293676)
**Author:** [@eO2H\_LG](https://discuss.elastic.co/u/eO2H_LG)\ **Replies:** 3\ **Last updated:** [January 6, 2022, 6:48pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-observer-hostname/293676 "2022-01-06T18:48:07Z")
Hello All, Hoping somebody can assist me with the following error. It seems some of my DHCP data is failing to ingest due to a parsing issue with the observer.hostname field. Below is the error output from logstash-pla… --- ## [Incorrect Error Grouping for java apm client v 1.13](https://discuss.elastic.co/t/incorrect-error-grouping-for-java-apm-client-v-1-13/221578)
**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\ **Replies:** 8\ **Last updated:** [March 10, 2020, 8:46am UTC](https://discuss.elastic.co/t/incorrect-error-grouping-for-java-apm-client-v-1-13/221578 "2020-03-10T08:46:08Z")
I have the same issue with the 7.6.0 stack and java apm agent 1.13. like Incorrect Error Grouping: The errors is grouped by the excpetion class types. The messages are not considired. The apm java agent provides onl… --- ## [Logstash won't show output on console](https://discuss.elastic.co/t/logstash-wont-show-output-on-console/214941)
**Author:** [@Anindita\_Chavan](https://discuss.elastic.co/u/Anindita_Chavan)\ **Replies:** 8\ **Last updated:** [January 14, 2020, 5:40pm UTC](https://discuss.elastic.co/t/logstash-wont-show-output-on-console/214941 "2020-01-14T17:40:34Z")
This is my logstash configuration file: \< input { file { path =\> "/home/trimslogs/trims.log" sincedb\_path =\> "NUL" ignore\_older =\> 0 } } filter { grok { match =\> { "message" =\> "(\[(?%{YEAR}-%{MONTHNUM}-%{MONTH… --- ## [Is there any "Agent" for AWS EC2 to configure APM service?](https://discuss.elastic.co/t/is-there-any-agent-for-aws-ec2-to-configure-apm-service/179999)
**Author:** [@Hitesh\_Baldaniya1](https://discuss.elastic.co/u/Hitesh_Baldaniya1)\ **Replies:** 3\ **Last updated:** [May 8, 2019, 7:44am UTC](https://discuss.elastic.co/t/is-there-any-agent-for-aws-ec2-to-configure-apm-service/179999 "2019-05-08T07:44:07Z")
I have node service running on EC2 machine on AWS instead of using "elastic-apm-node-modules" to send logs to Elasticsearch APM service can we have some agent process running on host machine or docker which will sync dat… --- ## [Reporting Failed to unpack](https://discuss.elastic.co/t/reporting-failed-to-unpack/123880)
**Author:** [@Arief](https://discuss.elastic.co/u/Arief)\ **Replies:** 3\ **Last updated:** [March 16, 2018, 1:40pm UTC](https://discuss.elastic.co/t/reporting-failed-to-unpack/123880 "2018-03-16T13:40:04Z")
Hi There, I'm trying to install reporting on kibana by following the guide "https://www.elastic.co/guide/en/reporting/current/installing-reporting.html". While the installation went without a hitch, i unable run it on k… --- ## [Watch condition not met even though it should be](https://discuss.elastic.co/t/watch-condition-not-met-even-though-it-should-be/93826)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 3\ **Last updated:** [July 28, 2017, 1:47pm UTC](https://discuss.elastic.co/t/watch-condition-not-met-even-though-it-should-be/93826 "2017-07-28T13:47:13Z")
So i have an alert that as best as I can tell isn't completing the actions even though it should. Here are the pertinant parts of my watch and results: watch: "aggs": { "avg\_cst": { "avg":… --- ## [Create user login with limited permission for Kibana](https://discuss.elastic.co/t/create-user-login-with-limited-permission-for-kibana/94017)
**Author:** [@Amna\_sayed\_ali](https://discuss.elastic.co/u/Amna_sayed_ali)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 10:34pm UTC](https://discuss.elastic.co/t/create-user-login-with-limited-permission-for-kibana/94017 "2017-07-21T22:34:04Z")
i have installed ELK system. Elsticsearch 5.4 Kibana 5.4 Logstash 5.4 i need to create login user with limited permission. i have tried Xpack but it's not free and basic licenses don't allow user creation feature. also… --- ## [Trouble with plugins - phonetic, etc](https://discuss.elastic.co/t/trouble-with-plugins-phonetic-etc/17238)
**Author:** [@Eric\_Sims](https://discuss.elastic.co/u/Eric_Sims)\ **Replies:** 3\ **Last updated:** [April 3, 2016, 8:33am UTC](https://discuss.elastic.co/t/trouble-with-plugins-phonetic-etc/17238 "2016-04-03T08:33:59Z")
sorry for a noob question. i'm trying to understand phonetic searches - how to install and use them. perhaps phonetics isn't the right way for my instance. i'm trying to return music artist results for 'lil wayne… --- ## [Grok Pattern](https://discuss.elastic.co/t/grok-pattern/281878)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 4\ **Last updated:** [August 19, 2021, 2:54pm UTC](https://discuss.elastic.co/t/grok-pattern/281878 "2021-08-19T14:54:53Z")
What is the correct syntax to incorporate raw regex expressions in between grok patterns? Ex (Cisco device): LOG: Aug 1 22:15:10 abc-hostname tcp GROK pattern: %{CISCOTIMESTAMP:timestamp} \\b\\w+-\\w+\\b %{WORD:protocol} … --- ## [Heatmap is hiding empty rows](https://discuss.elastic.co/t/heatmap-is-hiding-empty-rows/272938)
**Author:** [@gelfert](https://discuss.elastic.co/u/gelfert)\ **Replies:** 4\ **Last updated:** [May 21, 2021, 10:59pm UTC](https://discuss.elastic.co/t/heatmap-is-hiding-empty-rows/272938 "2021-05-21T22:59:48Z")
I am trying to create a heatmap on a numeric field over some time period, using the aggregation based tool. After selecting "Value: count", I create the y-axis histogram. I select "show empty buckets" and I get a bunch … --- ## [Cross cluster Search](https://discuss.elastic.co/t/cross-cluster-search/270882)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 4:40pm UTC](https://discuss.elastic.co/t/cross-cluster-search/270882 "2021-04-29T16:40:44Z")
Hi. Has anyone implemented CCS between Elastic running on GCP or AWS and on on-prem hardware ? I am getting a connection refused error message when I try to add a remote cluster running on GCP or AWS. Thanks Murali --- ## [Using cloudid in logstash](https://discuss.elastic.co/t/using-cloudid-in-logstash/186057)
**Author:** [@werowe](https://discuss.elastic.co/u/werowe)\ **Replies:** 1\ **Last updated:** [June 19, 2019, 7:11pm UTC](https://discuss.elastic.co/t/using-cloudid-in-logstash/186057 "2019-06-19T19:11:14Z")
This feature must be new because there are no examples. You are supposed to put cloud.id and cloud.auth in config/logstash.yml. My understanding is that would override the url provided in the logstash config file.But I… --- ## [ELK architecture choice](https://discuss.elastic.co/t/elk-architecture-choice/166138)
**Author:** [@jof300](https://discuss.elastic.co/u/jof300)\ **Replies:** 4\ **Last updated:** [January 29, 2019, 8:39pm UTC](https://discuss.elastic.co/t/elk-architecture-choice/166138 "2019-01-29T20:39:01Z")
Hello, I read a lot of docs about ELK architecture and I saw different designs. My team has to deploy a new ELK stack and we are facing with some choices. beats ==\> kafka ==\> logstash ==\> elasticsearch beats ==\> kafka… --- ## [Problem about embedding visualizations. Any clue about this?](https://discuss.elastic.co/t/problem-about-embedding-visualizations-any-clue-about-this/113597)
**Author:** [@jesusgn90](https://discuss.elastic.co/u/jesusgn90)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 4:12pm UTC](https://discuss.elastic.co/t/problem-about-embedding-visualizations-any-clue-about-this/113597 "2018-01-03T16:12:39Z")
ISSUE: https://github.com/elastic/kibana/issues/15790 Kibana version: 6.1.1 Elasticsearch version: 6.1.1 Server OS version: CentOS 7 Browser version: Versión 63.0.3239.84 (Build oficial) (64 bits) Browser OS version:… --- ## [General questions regarding ELK stack](https://discuss.elastic.co/t/general-questions-regarding-elk-stack/64085)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 5:32pm UTC](https://discuss.elastic.co/t/general-questions-regarding-elk-stack/64085 "2016-10-28T17:32:32Z")
Hi, I have a few questions regarding ELK stack. 1) what is the best option to pull data? Read from a log file or Database? Best option in terms of Performance/latency/data accuracy. a. If Database, then any drawbac… --- ## [Does logstash have anything as Pattern\_dir for Match\_Dir?](https://discuss.elastic.co/t/does-logstash-have-anything-as-pattern-dir-for-match-dir/47136)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 4\ **Last updated:** [April 13, 2016, 4:23am UTC](https://discuss.elastic.co/t/does-logstash-have-anything-as-pattern-dir-for-match-dir/47136 "2016-04-13T04:23:11Z")
I have multiple GROK match patterns. e.g. grok { match =\> { "message" =\> \[ "GROK Pattern 1", "GROK Pattern 2" \] } } Do we have anything as patterns\_dir for above match patterns. i.e. patterns\_dir =\> \["/opt/logstash… --- ## [Elasticsearch Unreachable Error](https://discuss.elastic.co/t/elasticsearch-unreachable-error/309185)
**Author:** [@pooja5](https://discuss.elastic.co/u/pooja5)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-error/309185 "2022-07-08T11:15:55Z")
Hello! We have observed a log message \[ERROR\]\[logstash.outputs.elasticsearch\]\[.monitoring-logstash\] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_messa… --- ## [Filebeat 8.2.1 kubernetes autodiscover template with multiple conditions doesn't work](https://discuss.elastic.co/t/filebeat-8-2-1-kubernetes-autodiscover-template-with-multiple-conditions-doesnt-work/305693)
**Author:** [@codrut\_alexandru](https://discuss.elastic.co/u/codrut_alexandru)\ **Replies:** 1\ **Last updated:** [May 30, 2022, 3:16pm UTC](https://discuss.elastic.co/t/filebeat-8-2-1-kubernetes-autodiscover-template-with-multiple-conditions-doesnt-work/305693 "2022-05-30T15:16:12Z")
Hi, Configuring filebeat version 8.2.1 autodiscover template with multiple conditions doesn't work: This works: templates: - condition.or: - not.equals: … --- ## [Detect CreditCard numbers in Logs](https://discuss.elastic.co/t/detect-creditcard-numbers-in-logs/255381)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [November 13, 2020, 10:12pm UTC](https://discuss.elastic.co/t/detect-creditcard-numbers-in-logs/255381 "2020-11-13T22:12:28Z")
Currently, we're running ELK-Stack and I would like to setup-configure detection & alerts for logs containing CreditCard numbers. I did skim through certain ELK-modules, but couldn't find any suitable that can achieve t… --- ## [Upgrade of Kibana from 7.7.1 to 7.8.0](https://discuss.elastic.co/t/upgrade-of-kibana-from-7-7-1-to-7-8-0/238895)
**Author:** [@drewlander](https://discuss.elastic.co/u/drewlander)\ **Replies:** 7\ **Last updated:** [July 27, 2020, 12:56pm UTC](https://discuss.elastic.co/t/upgrade-of-kibana-from-7-7-1-to-7-8-0/238895 "2020-07-27T12:56:41Z")
I upgraded from Kibana 7.7.1 to 7.8.0 (the elastic search cluster is now running 7.8.0) When starting Kibana, I get the following error message: kibana: FATAL Error: Document contains at least one immense term in fiel… --- ## [Elastic-Search Index not deleted but received ack. true](https://discuss.elastic.co/t/elastic-search-index-not-deleted-but-received-ack-true/233111)
**Author:** [@het](https://discuss.elastic.co/u/het)\ **Replies:** 7\ **Last updated:** [June 8, 2020, 12:02pm UTC](https://discuss.elastic.co/t/elastic-search-index-not-deleted-but-received-ack-true/233111 "2020-06-08T12:02:13Z")
Delete index API of elastic has responded with acknowledgment = true but the actual index is not deleted. We are using ES 5.3 Java TCP Client. We have 4 data nodes and 3 master nodes. In the elastic-search logs, we coul… [Previous page](https://discuss.elastic.co/top.md?page=1455&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1457&per_page=50&period=all)