# Top

**URL:** https://discuss.elastic.co/top.md?page=1458&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1459

---

## [Time in IST for log-rotation - Logstash](https://discuss.elastic.co/t/time-in-ist-for-log-rotation-logstash/211612)

<div class="topic-metadata">

**Author:** [@singhankit.iem](https://discuss.elastic.co/u/singhankit.iem)\
**Replies:** 2\
**Last updated:** [December 12, 2019, 1:28pm UTC](https://discuss.elastic.co/t/time-in-ist-for-log-rotation-logstash/211612 "2019-12-12T13:28:44Z")

</div>

I have configured file-beat on all the App servers and Logstash in a centralized server for the log rotation. The config file in Log rotation is input { beats { port =\> 5044 } } filter{ mutate { remove\_field =\> \[…

---

## [Elastic search cluster health is always red](https://discuss.elastic.co/t/elastic-search-cluster-health-is-always-red/175396)

<div class="topic-metadata">

**Author:** [@hemamalini](https://discuss.elastic.co/u/hemamalini)\
**Replies:** 2\
**Last updated:** [April 8, 2019, 11:09am UTC](https://discuss.elastic.co/t/elastic-search-cluster-health-is-always-red/175396 "2019-04-08T11:09:42Z")

</div>

Elastic search version - 5.6.14 with kibana is installed using MPack - elasticsearch\_mpack-0.7.1.0.tar.gz in centos7. Below is the elasticsearch.yml configuration cluster: name: metron routing: allocation.node\_c…

---

## [Precision in timelion labels](https://discuss.elastic.co/t/precision-in-timelion-labels/173038)

<div class="topic-metadata">

**Author:** [@camjesus2](https://discuss.elastic.co/u/camjesus2)\
**Replies:** 2\
**Last updated:** [March 20, 2019, 6:57pm UTC](https://discuss.elastic.co/t/precision-in-timelion-labels/173038 "2019-03-20T18:57:43Z")

</div>

Hi! I'm having some difficulties with the labels of my timelion charts (Kibana 6.6.2). The thing is that the value printed on the label is somehow a rounding of the value on the chart. In the next chart, ALL values in …

---

## [Elasticsearch reports wrong version after upgrading from 5.6.x to 6.x](https://discuss.elastic.co/t/elasticsearch-reports-wrong-version-after-upgrading-from-5-6-x-to-6-x/125121)

<div class="topic-metadata">

**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-reports-wrong-version-after-upgrading-from-5-6-x-to-6-x/125121 "2018-04-03T07:41:13Z")

</div>

Hi, Before updating my production server from 5.6.5 to 6.x I've tried updating my test cluster, but my cluster entered some weird state. So I have a cluster where are two PCs with elasticsearch 5.6.5 installed from deb…

---

## [Parsing fields containing jason](https://discuss.elastic.co/t/parsing-fields-containing-jason/97364)

<div class="topic-metadata">

**Author:** [@SunilSaini](https://discuss.elastic.co/u/SunilSaini)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 5:51am UTC](https://discuss.elastic.co/t/parsing-fields-containing-jason/97364 "2017-08-18T05:51:45Z")

</div>

Hi, I am using Kibana 4. I have one field that contains message in Jason format (highlight in yellow in the image). Field: args = {"orderRequest":{"DeptId":83,"ClassId":4,"ItemId":2478,"StoreType":"ST"}} What i am lo…

---

## [IndexOutofBound Exception and Merge Exception](https://discuss.elastic.co/t/indexoutofbound-exception-and-merge-exception/51297)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 2\
**Last updated:** [May 30, 2016, 4:44pm UTC](https://discuss.elastic.co/t/indexoutofbound-exception-and-merge-exception/51297 "2016-05-30T16:44:00Z")

</div>

Hi Team. I am getting following exception in the elasticsearch.log file while running the elastics search instance continously, I am running in elasticsearch-1.7.4 . \[hids\_5\]\[4\] received shard failed for \[hids\_5\]\[4\]…

---

## [Send data to elasticsearch index from kafka that is named the same as the topic](https://discuss.elastic.co/t/send-data-to-elasticsearch-index-from-kafka-that-is-named-the-same-as-the-topic/47365)

<div class="topic-metadata">

**Author:** [@amb](https://discuss.elastic.co/u/amb)\
**Replies:** 2\
**Last updated:** [April 14, 2016, 9:36am UTC](https://discuss.elastic.co/t/send-data-to-elasticsearch-index-from-kafka-that-is-named-the-same-as-the-topic/47365 "2016-04-14T09:36:35Z")

</div>

As it says in the title I want to pull out the topic name from the incoming event and write to an index in elasticsearchthat is named the same as that topic name. input { kafka { zk\_connect =\> "zookeeper:2181" group…

---

## [Filebeat load balance problem](https://discuss.elastic.co/t/filebeat-load-balance-problem/39898)

<div class="topic-metadata">

**Author:** [@baoxiao](https://discuss.elastic.co/u/baoxiao)\
**Replies:** 2\
**Last updated:** [January 25, 2016, 5:31pm UTC](https://discuss.elastic.co/t/filebeat-load-balance-problem/39898 "2016-01-25T17:31:32Z")

</div>

I try to set up filebeat to send log file to 2 logstash instances using load balance with this logstash: hosts: \["host1:5044","host2:5044"\] loadbalance: true but filebeat always send logs to hosts1 even afte…

---

## [Watcher matching isn't working - any help?](https://discuss.elastic.co/t/watcher-matching-isnt-working-any-help/26960)

<div class="topic-metadata">

**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\
**Replies:** 2\
**Last updated:** [August 13, 2015, 1:16pm UTC](https://discuss.elastic.co/t/watcher-matching-isnt-working-any-help/26960 "2015-08-13T13:16:51Z")

</div>

I'm trying to evaluate watcher as a replacement for an application that monitors our syslog. This is probably the biggest use case for watcher out there. I need to match multiple specific strings (in separate watches) …

---

## [LS forwarder erroring out on the LS server](https://discuss.elastic.co/t/ls-forwarder-erroring-out-on-the-ls-server/25740)

<div class="topic-metadata">

**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\
**Replies:** 2\
**Last updated:** [July 30, 2015, 3:55pm UTC](https://discuss.elastic.co/t/ls-forwarder-erroring-out-on-the-ls-server/25740 "2015-07-30T15:55:54Z")

</div>

Hey guys, We have logstash forwarder setup on a bunch of nodes. And initially we had results turn up in the logstash interface when you did a search. However the servers that were running forwarder stopped turning up…

---

## [ElasticAgent enrolled with Fleet server - Connection failure Elastic Defend](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219)

<div class="topic-metadata">

**Author:** [@Fasertio](https://discuss.elastic.co/u/Fasertio)\
**Replies:** 8\
**Last updated:** [October 22, 2024, 3:05pm UTC](https://discuss.elastic.co/t/elasticagent-enrolled-with-fleet-server-connection-failure-elastic-defend/369219 "2024-10-22T15:05:37Z")

</div>

Dear all, I've installed Elasticsearch, kibana and a Fleet server on a Ubuntu machine for Security testing. The main goal is to install the elastic agent with the Defend integration for XDR on a Windows machine. The i…

---

## [Any suggestions on creating watches for derivative values?](https://discuss.elastic.co/t/any-suggestions-on-creating-watches-for-derivative-values/229133)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 8\
**Last updated:** [April 23, 2020, 10:21pm UTC](https://discuss.elastic.co/t/any-suggestions-on-creating-watches-for-derivative-values/229133 "2020-04-23T22:21:05Z")

</div>

I'm interested in creating a threshold alert for bits/s or packets/s of my data. This is leading me down a rabbit hole, and it seems like doing any analysis (sorting/aggregation) on this kind of per second data is quite …

---

## [Index Lifecycle Error- Check rollover ready](https://discuss.elastic.co/t/index-lifecycle-error-check-rollover-ready/208556)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 0\
**Last updated:** [November 19, 2019, 6:04pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-check-rollover-ready/208556 "2019-11-19T18:04:44Z")

</div>

After I ran these queries, my filebeat index isn't collecting data on discover and gives me following error- PUT filebeat-7.4.0-2019.11.08-000001/\_settings { "index": { "blocks": { "read\_only\_allow\_dele…

---

## [Calling elastic-search url from react using axios](https://discuss.elastic.co/t/calling-elastic-search-url-from-react-using-axios/102680)

<div class="topic-metadata">

**Author:** [@hamza\_moummid](https://discuss.elastic.co/u/hamza_moummid)\
**Replies:** 0\
**Last updated:** [October 4, 2017, 10:28am UTC](https://discuss.elastic.co/t/calling-elastic-search-url-from-react-using-axios/102680 "2017-10-04T10:28:33Z")

</div>

I have an Elasticsearch Node running and I can successfully recieve a Json response from the url: localhost:8882/rest/search/all using chrome. However when I call it from react like this: var config = { headers: {'Acc…

---

## [Need Assistance with Displaying Current Rate Metric in Kibana](https://discuss.elastic.co/t/need-assistance-with-displaying-current-rate-metric-in-kibana/345190)

<div class="topic-metadata">

**Author:** [@Behnam.R](https://discuss.elastic.co/u/Behnam.R)\
**Replies:** 7\
**Last updated:** [October 18, 2023, 7:35pm UTC](https://discuss.elastic.co/t/need-assistance-with-displaying-current-rate-metric-in-kibana/345190 "2023-10-18T19:35:07Z")

</div>

I'm using Elasticsearch 8.6 and I've set up a line chart showing the sum of picked items (sum(quantity)) in a project. I've adjusted the chart to display hourly rates, even though Kibana dynamically changes the interval …

---

## [Iterate watcher hits and perform action on each hit](https://discuss.elastic.co/t/iterate-watcher-hits-and-perform-action-on-each-hit/236702)

<div class="topic-metadata">

**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\
**Replies:** 1\
**Last updated:** [June 30, 2020, 8:13am UTC](https://discuss.elastic.co/t/iterate-watcher-hits-and-perform-action-on-each-hit/236702 "2020-06-30T08:13:35Z")

</div>

Hi, in the example below I have a condition where I send an alert if the first hit contains the query 'some\_query'. Is it possible to iterate all hits and sent/stack all hits in an action? "condition": { "script": …

---

## [Adding new field to existing index where field does not exist](https://discuss.elastic.co/t/adding-new-field-to-existing-index-where-field-does-not-exist/227587)

<div class="topic-metadata">

**Author:** [@Rowan](https://discuss.elastic.co/u/Rowan)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 2:59pm UTC](https://discuss.elastic.co/t/adding-new-field-to-existing-index-where-field-does-not-exist/227587 "2020-05-11T14:59:38Z")

</div>

Firstly, totally new to the ELK stack so still struggling with the terminology. I have been trying to create some visualizations and discovered that merging fields via a JSON scipt is kind of finicky, and apparently not…

---

## [Error with bulk upload & Role permissions](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363)

<div class="topic-metadata">

**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\
**Replies:** 1\
**Last updated:** [April 9, 2020, 4:03pm UTC](https://discuss.elastic.co/t/error-with-bulk-upload-role-permissions/227363 "2020-04-09T16:03:22Z")

</div>

I'm trying to bulk upload using a specific user/role and getting an error I don't understand given my configuration. Other than a .yml security file (which I'm not using) I can't work out how to set the specific permiss…

---

## [Streaming Sink doesnt work without checkpoint?](https://discuss.elastic.co/t/streaming-sink-doesnt-work-without-checkpoint/186345)

<div class="topic-metadata">

**Author:** [@RahulGS](https://discuss.elastic.co/u/RahulGS)\
**Replies:** 1\
**Last updated:** [June 18, 2019, 8:55pm UTC](https://discuss.elastic.co/t/streaming-sink-doesnt-work-without-checkpoint/186345 "2019-06-18T20:55:31Z")

</div>

Streaming sink with commit log disabled still throws the exception , any reason why it looks for checkpointlocation when i have option set not to use checkpoint ? :frowning: org.apache.spark.sql.AnalysisException: check…

---

## [Kibana Infra View Docker Container/Pods](https://discuss.elastic.co/t/kibana-infra-view-docker-container-pods/181936)

<div class="topic-metadata">

**Author:** [@Rafal\_Radziejewski](https://discuss.elastic.co/u/Rafal_Radziejewski)\
**Replies:** 7\
**Last updated:** [May 22, 2019, 3:36pm UTC](https://discuss.elastic.co/t/kibana-infra-view-docker-container-pods/181936 "2019-05-22T15:36:04Z")

</div>

I have 2 problems firstly i am unable to see pods metrics in kubernetes tab in infra view. Second problem is that docker containers have really high cpu usage metrics which i believe cannot be true. Those strong bl…

---

## [Ruby SyntaxError - unexpected tCONSTANT](https://discuss.elastic.co/t/ruby-syntaxerror-unexpected-tconstant/168676)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 1\
**Last updated:** [February 16, 2019, 12:26pm UTC](https://discuss.elastic.co/t/ruby-syntaxerror-unexpected-tconstant/168676 "2019-02-16T12:26:53Z")

</div>

Hi, That is my error I am getting when Logstash start: error: (SyntaxError) (ruby filter code):15: syntax error, unexpected tCONSTANT event.set('NonPrimeTimeUnavailabilityinPrecentage, ((event.get('NonPrimeTimeUnavail…

---

## [Filebeat apache2 configuration](https://discuss.elastic.co/t/filebeat-apache2-configuration/139927)

<div class="topic-metadata">

**Author:** [@cahlasem](https://discuss.elastic.co/u/cahlasem)\
**Replies:** 7\
**Last updated:** [July 18, 2018, 10:26am UTC](https://discuss.elastic.co/t/filebeat-apache2-configuration/139927 "2018-07-18T10:26:23Z")

</div>

Hi All, I am just trying elastic cloud and want to forward my apache logs into the cloud. I am getting my website up and running using XAMPP The installation location is at C:\\AppServ I try to enable apache2 module an…

---

## [Single line with Filebeat to logstash](https://discuss.elastic.co/t/single-line-with-filebeat-to-logstash/117621)

<div class="topic-metadata">

**Author:** [@SarojELK](https://discuss.elastic.co/u/SarojELK)\
**Replies:** 1\
**Last updated:** [January 30, 2018, 2:45pm UTC](https://discuss.elastic.co/t/single-line-with-filebeat-to-logstash/117621 "2018-01-30T14:45:19Z")

</div>

Hi, is there any option with filebeat to extract lines only matching keywords from my input file ? normally my log file size is 25MB /day and similar to that i have almost more than 100+ files where i want to index only …

---

## [Help to parse JSON key value object](https://discuss.elastic.co/t/help-to-parse-json-key-value-object/78319)

<div class="topic-metadata">

**Author:** [@Hunk\_Huang](https://discuss.elastic.co/u/Hunk_Huang)\
**Replies:** 1\
**Last updated:** [March 15, 2017, 7:09am UTC](https://discuss.elastic.co/t/help-to-parse-json-key-value-object/78319 "2017-03-15T07:09:35Z")

</div>

Hi Logstash Team. I'd like to load data struct as below. INPUT: { "vmdata":{ "vm1": "UP", "vm2": "Down", "vm3": "UP" ..... } …

---

## [Dynamically adding a replica node doesn't do anything](https://discuss.elastic.co/t/dynamically-adding-a-replica-node-doesnt-do-anything/35439)

<div class="topic-metadata">

**Author:** [@Flavio\_Pompermaier](https://discuss.elastic.co/u/Flavio_Pompermaier)\
**Replies:** 7\
**Last updated:** [December 2, 2015, 10:59am UTC](https://discuss.elastic.co/t/dynamically-adding-a-replica-node-doesnt-do-anything/35439 "2015-12-02T10:59:11Z")

</div>

Hi to all, I was playing with ES in order to test dynamic scaling. I have a working cluster with some indices and I want to start replicating one of them. I tried to use curl -XPUT 'master-node:9200/my\_index/\_settings' -…

---

## [Who could help me to find a conf file in Logstash for MySQL slowlog](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113)

<div class="topic-metadata">

**Author:** [@apaul](https://discuss.elastic.co/u/apaul)\
**Replies:** 1\
**Last updated:** [June 10, 2015, 12:27pm UTC](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113 "2015-06-10T12:27:40Z")

</div>

Hi I have a simple data with mysql slow query format as below. 2015-05-26 09:06:39^^^apaul\[apaul\] @ \[192.168.1.1\]^^^00:00:14^^^00:00:00^^^36772^^^2090463^^^mysql^^^select \* from general\_log The Separator is ^^^, …

---

## [\[Feature\] Logstash Module with JVM & Pipelines](https://discuss.elastic.co/t/feature-logstash-module-with-jvm-pipelines/192645)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 0\
**Last updated:** [July 29, 2019, 8:28am UTC](https://discuss.elastic.co/t/feature-logstash-module-with-jvm-pipelines/192645 "2019-07-29T08:28:18Z")

</div>

Hi, everyone I would like to know if it is planned that Metricbeat's Logstash module (Link) can provide information about pipelines and JVM (heap, gc). Currently, it is possible to get Logstash’s metrics by using Joloki…

---

## [Cannot start services after restart](https://discuss.elastic.co/t/cannot-start-services-after-restart/139388)

<div class="topic-metadata">

**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\
**Replies:** 0\
**Last updated:** [July 10, 2018, 3:36pm UTC](https://discuss.elastic.co/t/cannot-start-services-after-restart/139388 "2018-07-10T15:36:21Z")

</div>

Hi, I have been running a 3 node elasticsearch cluster for a couple of months but since restarting the machines I now cannot start the service :frowning: Log is as follows: \[2018-07-10T16:29:48,065\]\[INFO \]\[o.e.n.Node …

---

## [Anomaly Detection Assistance](https://discuss.elastic.co/t/anomaly-detection-assistance/326004)

<div class="topic-metadata">

**Author:** [@tr78](https://discuss.elastic.co/u/tr78)\
**Replies:** 6\
**Last updated:** [February 22, 2023, 8:50pm UTC](https://discuss.elastic.co/t/anomaly-detection-assistance/326004 "2023-02-22T20:50:37Z")

</div>

Kibana version: 8.6.1 (ECK) Elasticsearch version: 8.6.1 (ECK) APM Server version: Fleet 8.6.1 (ECK) APM Agent language and version: Browser version: Chrome 110.0.5481.104 Original install method (e.g. download …

---

## [Is there any solution for just checking the file availability？](https://discuss.elastic.co/t/is-there-any-solution-for-just-checking-the-file-availability/282668)

<div class="topic-metadata">

**Author:** [@lpf86731782](https://discuss.elastic.co/u/lpf86731782)\
**Replies:** 6\
**Last updated:** [September 1, 2021, 9:44am UTC](https://discuss.elastic.co/t/is-there-any-solution-for-just-checking-the-file-availability/282668 "2021-09-01T09:44:05Z")

</div>

the system receives a bunch of files daily, monitoring the file availability and size is important for the service quality. No need to check the file content though. Is there any proper way to achieve this with ELK?

---

## [Kibana Security Settings](https://discuss.elastic.co/t/kibana-security-settings/214005)

<div class="topic-metadata">

**Author:** [@ulas.keskin](https://discuss.elastic.co/u/ulas.keskin)\
**Replies:** 6\
**Last updated:** [January 29, 2020, 11:26am UTC](https://discuss.elastic.co/t/kibana-security-settings/214005 "2020-01-29T11:26:22Z")

</div>

Hi, While I'm using security tab on Kibana, I'm getting permission denied error. Kindly help on this thanks in advance

---

## [Licence to include Filebeat in our commercial product?](https://discuss.elastic.co/t/licence-to-include-filebeat-in-our-commercial-product/207537)

<div class="topic-metadata">

**Author:** [@Vijay\_Daggumati](https://discuss.elastic.co/u/Vijay_Daggumati)\
**Replies:** 6\
**Last updated:** [November 15, 2019, 5:20pm UTC](https://discuss.elastic.co/t/licence-to-include-filebeat-in-our-commercial-product/207537 "2019-11-15T17:20:17Z")

</div>

Hi, I would like to know the details regarding usage of file beat in our commercial product. We have a piece of software which we sell to our clients. To be clear, we only run the software on client hardware. We don't …

---

## ["Connection refused" when running curl -XGET 'localhost:9200'](https://discuss.elastic.co/t/connection-refused-when-running-curl-xget-localhost-9200/60874)

<div class="topic-metadata">

**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\
**Replies:** 6\
**Last updated:** [September 26, 2016, 1:21pm UTC](https://discuss.elastic.co/t/connection-refused-when-running-curl-xget-localhost-9200/60874 "2016-09-26T13:21:00Z")

</div>

Hi All, I recently installed and configured elasticsearch-readonly-rest-plugin- which BTW works really well, however I'm unable to connect into the elasticsearch now- am I missing on something? When trying to import…

---

## [How i to analysis the es cluster?](https://discuss.elastic.co/t/how-i-to-analysis-the-es-cluster/55146)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 6\
**Last updated:** [July 11, 2016, 3:52am UTC](https://discuss.elastic.co/t/how-i-to-analysis-the-es-cluster/55146 "2016-07-11T03:52:16Z")

</div>

I find my es cluster sometimes index docs(use bulk api) very slow. At that time,I use cat thread\_pool api find bulk.active are all less 2(bulk.size are all 32).And i find my server's CPU's usage are also very little…

---

## [Memory management](https://discuss.elastic.co/t/memory-management/10056)

<div class="topic-metadata">

**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\
**Replies:** 6\
**Last updated:** [December 31, 2012, 8:23pm UTC](https://discuss.elastic.co/t/memory-management/10056 "2012-12-31T20:23:22Z")

</div>

Hi, Heap-Memory in my ES nodes still increases while filter and field cache is bounded. Filter cache is max 800MB, field cache is max 1.4GB (I check it in bigdesk plugin). Heap-Memory grows up to 7.9GB (max) after f…

---

## [APM Agent Settings Kibana Not Applying](https://discuss.elastic.co/t/apm-agent-settings-kibana-not-applying/261841)

<div class="topic-metadata">

**Author:** [@willis](https://discuss.elastic.co/u/willis)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 2:27pm UTC](https://discuss.elastic.co/t/apm-agent-settings-kibana-not-applying/261841 "2021-01-25T14:27:53Z")

</div>

Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Ruby, 3.13.0 \*\* Problem \*\* I am looking to use the Kibana APM Agent remote configuration to manage a R…

---

## [Logstash add @version which is not in the original document](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144)

<div class="topic-metadata">

**Author:** [@amralieg](https://discuss.elastic.co/u/amralieg)\
**Replies:** 3\
**Last updated:** [November 20, 2020, 4:23pm UTC](https://discuss.elastic.co/t/logstash-add-version-which-is-not-in-the-original-document/256144 "2020-11-20T16:23:04Z")

</div>

Hi, I have this logstash config that moves data between 2 elasticsearch, when I run it I get this error, any idea how to solve this? input { elasticsearch { hosts =\> \["\<source\>"\] user =\> "\*\*" …

---

## [Several difficulties with elasticsearch DSL](https://discuss.elastic.co/t/several-difficulties-with-elasticsearch-dsl/154936)

<div class="topic-metadata">

**Author:** [@guylando](https://discuss.elastic.co/u/guylando)\
**Replies:** 3\
**Last updated:** [November 1, 2018, 1:51pm UTC](https://discuss.elastic.co/t/several-difficulties-with-elasticsearch-dsl/154936 "2018-11-01T13:51:12Z")

</div>

Hello, would appreciate help with several difficulties that I have encountered: After applying terms aggregator and then bucket\_selector, I would like the query to return the number of buckets left. I used stats\_bucket…

---

## [Kibana bar chart - how to show only hours in the X-axis, not the entire date](https://discuss.elastic.co/t/kibana-bar-chart-how-to-show-only-hours-in-the-x-axis-not-the-entire-date/145810)

<div class="topic-metadata">

**Author:** [@Malli](https://discuss.elastic.co/u/Malli)\
**Replies:** 3\
**Last updated:** [August 24, 2018, 8:22pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-how-to-show-only-hours-in-the-x-axis-not-the-entire-date/145810 "2018-08-24T20:22:45Z")

</div>

I am creating a visualization with bar charts and using date histogram on the x-axis. i am selecting the hourly interval. when the data populates the X-axis shows the entire date, not just hours, what i want. How can i …

---

## [Rest and RestHighLevelClient query differences](https://discuss.elastic.co/t/rest-and-resthighlevelclient-query-differences/143557)

<div class="topic-metadata">

**Author:** [@katre](https://discuss.elastic.co/u/katre)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 10:26am UTC](https://discuss.elastic.co/t/rest-and-resthighlevelclient-query-differences/143557 "2018-08-10T10:26:46Z")

</div>

Hi, I have a case where same query via java api returns 0 hits and in kibana dev tools returns document. In java client: SearchRequest{searchType=QUERY\_THEN\_FETCH, indices=\[search-data\], indicesOptions=IndicesOptions\[i…

---

## [Tick interval](https://discuss.elastic.co/t/tick-interval/104847)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 3\
**Last updated:** [October 24, 2017, 7:15am UTC](https://discuss.elastic.co/t/tick-interval/104847 "2017-10-24T07:15:14Z")

</div>

Y axis tick interval is set by default.Is there a way to specify the y axis tick marks of custom interval(1hr,2hr)

---

## [Turn on debugging from commandline (get those 6 more lines)](https://discuss.elastic.co/t/turn-on-debugging-from-commandline-get-those-6-more-lines/93285)

<div class="topic-metadata">

**Author:** [@jtprince](https://discuss.elastic.co/u/jtprince)\
**Replies:** 3\
**Last updated:** [July 18, 2017, 4:56am UTC](https://discuss.elastic.co/t/turn-on-debugging-from-commandline-get-those-6-more-lines/93285 "2017-07-18T04:56:44Z")

</div>

I am starting elasticsearch in a docker container and getting an error on startup. The entire error message is being hidden with the phrase ... 6 more (indicating there are 6 more lines of error messages). I have run d…

---

## [Term aggregation count too high](https://discuss.elastic.co/t/term-aggregation-count-too-high/90284)

<div class="topic-metadata">

**Author:** [@srd](https://discuss.elastic.co/u/srd)\
**Replies:** 3\
**Last updated:** [June 21, 2017, 2:03pm UTC](https://discuss.elastic.co/t/term-aggregation-count-too-high/90284 "2017-06-21T14:03:16Z")

</div>

I'm using a boolean query with a mix of match, prefix and phrase queries in should, must and filter, and doing a term aggregation over a keyword. The results of the aggregation can be used to add further filters to the q…

---

## [Timestamp not getting my log value using date filter logstash](https://discuss.elastic.co/t/timestamp-not-getting-my-log-value-using-date-filter-logstash/83993)

<div class="topic-metadata">

**Author:** [@virendra\_oswal](https://discuss.elastic.co/u/virendra_oswal)\
**Replies:** 3\
**Last updated:** [April 28, 2017, 11:46am UTC](https://discuss.elastic.co/t/timestamp-not-getting-my-log-value-using-date-filter-logstash/83993 "2017-04-28T11:46:26Z")

</div>

I have following config to fetch Http call and log date at time call was made, but @timestamp shows when log was send from FileBeat server to logstash one. input { beats { port =\> 5044 } } filter { if \[message\]…

---

## [About Increasing Logstash Performance](https://discuss.elastic.co/t/about-increasing-logstash-performance/75179)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 3\
**Last updated:** [February 16, 2017, 4:27pm UTC](https://discuss.elastic.co/t/about-increasing-logstash-performance/75179 "2017-02-16T16:27:24Z")

</div>

Hi, I have a logstash agent that extracts data from redis, preprocesses it and reengines it in redis again. I have been able to incorporate in this agent the metric filter to give me an idea of ​​how fast the process…

---

## [Irregular spacing](https://discuss.elastic.co/t/irregular-spacing/28719)

<div class="topic-metadata">

**Author:** [@MrUnio](https://discuss.elastic.co/u/MrUnio)\
**Replies:** 3\
**Last updated:** [September 7, 2015, 12:58pm UTC](https://discuss.elastic.co/t/irregular-spacing/28719 "2015-09-07T12:58:11Z")

</div>

Hi guys! i am working on a filter and i am using grok, everything is good apart from one thing. The logs i need to design a filter have irregular spacing between particular fields, eg: log1: field1 field2 …

---

## [\[AU\] Big Data Adelaide - 26th August 2015](https://discuss.elastic.co/t/au-big-data-adelaide-26th-august-2015/27990)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [August 25, 2015, 4:56am UTC](https://discuss.elastic.co/t/au-big-data-adelaide-26th-august-2015/27990 "2015-08-25T04:56:21Z")

</div>

Elasticsearch... You know, for Search Wednesday, Aug 26, 2015, 6:00 PM Location details are available to members only. 70 Data Scientists Attending …

---

## [Unable to get ElasticsearchTestCase to work due to dependency hell](https://discuss.elastic.co/t/unable-to-get-elasticsearchtestcase-to-work-due-to-dependency-hell/20943)

<div class="topic-metadata">

**Author:** [@burtonator](https://discuss.elastic.co/u/burtonator)\
**Replies:** 3\
**Last updated:** [November 25, 2014, 10:14pm UTC](https://discuss.elastic.co/t/unable-to-get-elasticsearchtestcase-to-work-due-to-dependency-hell/20943 "2014-11-25T22:14:31Z")

</div>

I'm trying to use ElasticsearchTestCase in my test framework to start getting ES deployed in production. However, I'm in maven dependency hell and wanted some advice. I'm trying to use this: http://www.elastic…

---

## [Matching a document against a keyword - exact "substring" match between document and keywords](https://discuss.elastic.co/t/matching-a-document-against-a-keyword-exact-substring-match-between-document-and-keywords/6486)

<div class="topic-metadata">

**Author:** [@Raul\_Jr\_Martinez](https://discuss.elastic.co/u/Raul_Jr_Martinez)\
**Replies:** 3\
**Last updated:** [March 24, 2012, 12:37pm UTC](https://discuss.elastic.co/t/matching-a-document-against-a-keyword-exact-substring-match-between-document-and-keywords/6486 "2012-03-24T12:37:48Z")

</div>

Hello, My goal is to ensure that only those document whose value exactly matches (including word position) some part/substring of the keywords. To illustrate, I have a index/type that contains the following docu…

---

## [Add integration for Gitlab monitoring](https://discuss.elastic.co/t/add-integration-for-gitlab-monitoring/353038)

<div class="topic-metadata">

**Author:** [@Alphayeeeet](https://discuss.elastic.co/u/Alphayeeeet)\
**Replies:** 2\
**Last updated:** [February 12, 2024, 9:48am UTC](https://discuss.elastic.co/t/add-integration-for-gitlab-monitoring/353038 "2024-02-12T09:48:23Z")

</div>

We have our own on-premise Gitlab server, which we want to monitor using Elastic Stack. We are currently using Fleet-managed Elastic Agent to ship data from our different systems. As stated out above, we now want to ing…

[Previous page](https://discuss.elastic.co/top.md?page=1457&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1459&per_page=50&period=all)
