# Top

**URL:** https://discuss.elastic.co/top.md?page=1463&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1464

---

## [Rolling upgrade from v5.6 to v6.8](https://discuss.elastic.co/t/rolling-upgrade-from-v5-6-to-v6-8/206852)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 5\
**Last updated:** [November 11, 2019, 3:10pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-v5-6-to-v6-8/206852 "2019-11-11T15:10:30Z")

</div>

Hi guys, I read the documentation regarding the rolling upgrade procedure that could be used to do not interrupt service. In my cluster, I have this situation: 3 master nodes 12 data nodes 2 coordinating only nodes …

---

## [Ingesting table-like data](https://discuss.elastic.co/t/ingesting-table-like-data/83771)

<div class="topic-metadata">

**Author:** [@WiemDW](https://discuss.elastic.co/u/WiemDW)\
**Replies:** 5\
**Last updated:** [May 2, 2017, 8:38am UTC](https://discuss.elastic.co/t/ingesting-table-like-data/83771 "2017-05-02T08:38:44Z")

</div>

Hi, I am trying to ingest the following file format: \<Some header lines\> =================== X 1 2 Y 1 3 And would like the following document format in Elasticsearch 5.x {'item': 'X', 'value': '1'} {'item…

---

## [When adding setSize, no records return](https://discuss.elastic.co/t/when-adding-setsize-no-records-return/67311)

<div class="topic-metadata">

**Author:** [@Cherry\_Zhang](https://discuss.elastic.co/u/Cherry_Zhang)\
**Replies:** 5\
**Last updated:** [November 29, 2016, 10:50am UTC](https://discuss.elastic.co/t/when-adding-setsize-no-records-return/67311 "2016-11-29T10:50:13Z")

</div>

my code is as below: sr = client.prepareSearch(lastIndex) .setQuery(boolQueryBuilder) .setRouting(elasticRouting) .addSort("startTime", SortOrde…

---

## [Is the elasticsearch relevance score an ordinal or interval value?](https://discuss.elastic.co/t/is-the-elasticsearch-relevance-score-an-ordinal-or-interval-value/36061)

<div class="topic-metadata">

**Author:** [@ollieglass](https://discuss.elastic.co/u/ollieglass)\
**Replies:** 5\
**Last updated:** [December 1, 2015, 3:57pm UTC](https://discuss.elastic.co/t/is-the-elasticsearch-relevance-score-an-ordinal-or-interval-value/36061 "2015-12-01T15:57:02Z")

</div>

Is the elasticsearch relevance score an ordinal or interval value? In other words, is the difference between scores of 0.7 and 0.8 the same as the difference between scores of 0.5 and 0.6? Or is the 0.1 difference mea…

---

## [I/O wait is increasing after many reindexing](https://discuss.elastic.co/t/i-o-wait-is-increasing-after-many-reindexing/337695)

<div class="topic-metadata">

**Author:** [@yannlef](https://discuss.elastic.co/u/yannlef)\
**Replies:** 3\
**Last updated:** [July 18, 2023, 8:21am UTC](https://discuss.elastic.co/t/i-o-wait-is-increasing-after-many-reindexing/337695 "2023-07-18T08:21:13Z")

</div>

Hello, I'm trying to find some response here, since I think I exhausted all my solutions on that problem. I'm also totally new with this subject. I am working on an old ELK (5.5), hosted on a docker in a dedicated VM …

---

## [Upgrade Java for Elasticsearch and logstash](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644)

<div class="topic-metadata">

**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\
**Replies:** 8\
**Last updated:** [December 8, 2022, 9:19am UTC](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-and-logstash/319644 "2022-12-08T09:19:37Z")

</div>

Hi, Can anyone let me know how I can upgrade the java JDK on Elasticsearch and logstash. Path : /usr/share/logstash/jdk/ Installed version : 11.0.14.1 2022-02-08 Upgrade to a version greater than 11.0.16 Path : /…

---

## [Observability - APM RUM user experience data on SPA route-change](https://discuss.elastic.co/t/observability-apm-rum-user-experience-data-on-spa-route-change/315993)

<div class="topic-metadata">

**Author:** [@john\_b](https://discuss.elastic.co/u/john_b)\
**Replies:** 3\
**Last updated:** [November 28, 2022, 4:21pm UTC](https://discuss.elastic.co/t/observability-apm-rum-user-experience-data-on-spa-route-change/315993 "2022-11-28T16:21:14Z")

</div>

I have a question that is a bit similar with APM is working, but not User Experience I'm using the rum agent for a VueJS (nuxt) SPA app and only getting experience data on page-load events and not on route-change. Is t…

---

## [Csv filter output splitting a row in two because of some special char](https://discuss.elastic.co/t/csv-filter-output-splitting-a-row-in-two-because-of-some-special-char/288710)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 8\
**Last updated:** [November 10, 2021, 2:59pm UTC](https://discuss.elastic.co/t/csv-filter-output-splitting-a-row-in-two-because-of-some-special-char/288710 "2021-11-10T14:59:24Z")

</div>

I have a csv file with 7543 entries that I'd like to get to cloud SIEM. My config file is as follows input { file { …

---

## [Outputting to Kafka is failing with obscure error](https://discuss.elastic.co/t/outputting-to-kafka-is-failing-with-obscure-error/284429)

<div class="topic-metadata">

**Author:** [@bgingras](https://discuss.elastic.co/u/bgingras)\
**Replies:** 0\
**Last updated:** [September 16, 2021, 7:18pm UTC](https://discuss.elastic.co/t/outputting-to-kafka-is-failing-with-obscure-error/284429 "2021-09-16T19:18:41Z")

</div>

I am using a Kafka output plugin to send syslogs to a topic but am encountering errors: \[org.apache.kafka.common.protocol.Errors\]\[main\] Unexpected error code: 87. As well as the following: KafkaProducer.send() failed…

---

## [How to know if logfile is finished harvested on windows for filebeat 7.10](https://discuss.elastic.co/t/how-to-know-if-logfile-is-finished-harvested-on-windows-for-filebeat-7-10/258056)

<div class="topic-metadata">

**Author:** [@eirik](https://discuss.elastic.co/u/eirik)\
**Replies:** 3\
**Last updated:** [December 11, 2020, 10:37am UTC](https://discuss.elastic.co/t/how-to-know-if-logfile-is-finished-harvested-on-windows-for-filebeat-7-10/258056 "2020-12-11T10:37:28Z")

</div>

I am running Filebeat 7.10 sending log events to logstash on Windows server 2016. As filebeat is not cleaning up logfiles I need to write my own script for this, but for this to work I need to know when the harvesting is…

---

## [How to create multiple span within single transaction(using Httplistener) using vb.net](https://discuss.elastic.co/t/how-to-create-multiple-span-within-single-transaction-using-httplistener-using-vb-net/222638)

<div class="topic-metadata">

**Author:** [@Vinod.Kashid](https://discuss.elastic.co/u/Vinod.Kashid)\
**Replies:** 3\
**Last updated:** [March 24, 2020, 9:20am UTC](https://discuss.elastic.co/t/how-to-create-multiple-span-within-single-transaction-using-httplistener-using-vb-net/222638 "2020-03-24T09:20:05Z")

</div>

Kibana version:7.6.0 Elasticsearch version:7.6.0 APM Server version:7.6.0 APM Agent language and version: Elastic APM .NET Agent 1.3.1.0 Browser version:Chrome 80.0.3987.122 (Official Build) (64-bit) \*\*Fresh install…

---

## [Recommended cipher](https://discuss.elastic.co/t/recommended-cipher/223828)

<div class="topic-metadata">

**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 8:44am UTC](https://discuss.elastic.co/t/recommended-cipher/223828 "2020-03-17T08:44:53Z")

</div>

Hi I want to set the http and transport protocol to TLSv1.2. I want to know the recommended ciphers that I can use with TLSv1.2. for now I have enabled, "TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384", "TLS\_ECDHE\_ECDSA\_WIT…

---

## [Logstash server specification for heavy load](https://discuss.elastic.co/t/logstash-server-specification-for-heavy-load/219458)

<div class="topic-metadata">

**Author:** [@kulwantmor](https://discuss.elastic.co/u/kulwantmor)\
**Replies:** 3\
**Last updated:** [February 16, 2020, 1:45pm UTC](https://discuss.elastic.co/t/logstash-server-specification-for-heavy-load/219458 "2020-02-16T13:45:57Z")

</div>

Hi, I am having requirement where multiple hosts ( count would be approx 120) sending data via filebeat. Amount of data would be more during business hours and less during night. Total avg data ingested is 35 GB per day…

---

## [JDBC I/P Plugin -Connecting to DB2](https://discuss.elastic.co/t/jdbc-i-p-plugin-connecting-to-db2/145433)

<div class="topic-metadata">

**Author:** [@parvipul](https://discuss.elastic.co/u/parvipul)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 4:49pm UTC](https://discuss.elastic.co/t/jdbc-i-p-plugin-connecting-to-db2/145433 "2018-08-21T16:49:32Z")

</div>

I trying to connect to DB2 database on Mainframe from my local m/c. I am using JDBC input plugin. It seems the jdbc driver license file is not getting loaded. Can someone please tell me how can I load the db2jcc\_license…

---

## [ElasticSearch, ingest-attachment error - Validation Failed: 1: source is missing;2: content type is missing](https://discuss.elastic.co/t/elasticsearch-ingest-attachment-error-validation-failed-1-source-is-missing-2-content-type-is-missing/136705)

<div class="topic-metadata">

**Author:** [@kartsh](https://discuss.elastic.co/u/kartsh)\
**Replies:** 0\
**Last updated:** [June 20, 2018, 1:40pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-attachment-error-validation-failed-1-source-is-missing-2-content-type-is-missing/136705 "2018-06-20T13:40:14Z")

</div>

Am trying to indexing my pdf file from local path via java code. During indexing am getting the below error. Exception in thread "main" org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: so…

---

## [Social graph distance based scoring using ES](https://discuss.elastic.co/t/social-graph-distance-based-scoring-using-es/128038)

<div class="topic-metadata">

**Author:** [@adambenayoun](https://discuss.elastic.co/u/adambenayoun)\
**Replies:** 3\
**Last updated:** [April 15, 2018, 11:34am UTC](https://discuss.elastic.co/t/social-graph-distance-based-scoring-using-es/128038 "2018-04-15T11:34:31Z")

</div>

Hi, We want to implement a personalized user search using ES. The idea is that we have a graph in which nodes represent users and edges represent trust, on top of that we want to let users search for other users such th…

---

## [Cannot find the way to calculate average count of events per hour in Elasticsearch](https://discuss.elastic.co/t/cannot-find-the-way-to-calculate-average-count-of-events-per-hour-in-elasticsearch/94356)

<div class="topic-metadata">

**Author:** [@ICG](https://discuss.elastic.co/u/ICG)\
**Replies:** 0\
**Last updated:** [July 24, 2017, 3:47pm UTC](https://discuss.elastic.co/t/cannot-find-the-way-to-calculate-average-count-of-events-per-hour-in-elasticsearch/94356 "2017-07-24T15:47:43Z")

</div>

I have several events occurred on different dates and hours. I want to know the average count of events per hour. How can I do it in Elasticsearch? This is my mapping: PUT /test { "mappings": { "registry": …

---

## [Kibana shows only last updated \_type](https://discuss.elastic.co/t/kibana-shows-only-last-updated--type/77265)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [March 16, 2017, 10:24pm UTC](https://discuss.elastic.co/t/kibana-shows-only-last-updated--type/77265 "2017-03-16T22:24:21Z")

</div>

I have a index which includes two types of \_type . However , on Kibana , I am only able to see 1 type. This index has 2 types, text and binary. I have indexed two different types from different source in below order…

---

## [ES 2.3.4 unresponsive during index recovery](https://discuss.elastic.co/t/es-2-3-4-unresponsive-during-index-recovery/58277)

<div class="topic-metadata">

**Author:** [@mhenderson](https://discuss.elastic.co/u/mhenderson)\
**Replies:** 3\
**Last updated:** [August 19, 2016, 10:12pm UTC](https://discuss.elastic.co/t/es-2-3-4-unresponsive-during-index-recovery/58277 "2016-08-19T22:12:45Z")

</div>

We have a six-node ElasticSearch cluster, with a total of 6 nodes, 853 indexes, 5269 primary shards and 9bn documents in around 6.3TB of data. After a node restart, the index recovery process takes around 15-30 minutes …

---

## [Trending?](https://discuss.elastic.co/t/trending/51190)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 3\
**Last updated:** [June 8, 2016, 10:13am UTC](https://discuss.elastic.co/t/trending/51190 "2016-06-08T10:13:43Z")

</div>

Are there any plans on including a trending function in Kibana, e.g. displaying an up or down arrow in the metric visualization next to the count?

---

## [How do I route logs that coming through beats?](https://discuss.elastic.co/t/how-do-i-route-logs-that-coming-through-beats/44015)

<div class="topic-metadata">

**Author:** [@panda87](https://discuss.elastic.co/u/panda87)\
**Replies:** 3\
**Last updated:** [March 18, 2016, 1:43pm UTC](https://discuss.elastic.co/t/how-do-i-route-logs-that-coming-through-beats/44015 "2016-03-18T13:43:11Z")

</div>

I saw today that on v5 you implemented kafka as output which is great! My question is if I'll be able to route the logs to different topics with beats according fields in the log?

---

## [Which options are global?](https://discuss.elastic.co/t/which-options-are-global/40247)

<div class="topic-metadata">

**Author:** [@pcfens](https://discuss.elastic.co/u/pcfens)\
**Replies:** 3\
**Last updated:** [January 27, 2016, 4:27pm UTC](https://discuss.elastic.co/t/which-options-are-global/40247 "2016-01-27T16:27:47Z")

</div>

Under the config\_dir setting, there's a note that "All global options, such as spool\_size, are ignored." Individual options don't list whether or not they're global - is there a list somewhere that I've missed?

---

## [\[AU\] Melbourne Search Users Group - 19th May 2015](https://discuss.elastic.co/t/au-melbourne-search-users-group-19th-may-2015/777)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [May 15, 2015, 11:48pm UTC](https://discuss.elastic.co/t/au-melbourne-search-users-group-19th-may-2015/777 "2015-05-15T23:48:26Z")

</div>

I'll be heading along to this Meetup to chat with our fantastic local users, so please come along and say G'Day! Here's a summary of the talks; Migrating from Hibernate Search to Elasticsearch - Experiences from Onlin…

---

## [Transport 502 Error: Need Help Isolating Error](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590)

<div class="topic-metadata">

**Author:** [@raphaelli1](https://discuss.elastic.co/u/raphaelli1)\
**Replies:** 2\
**Last updated:** [June 13, 2022, 6:23pm UTC](https://discuss.elastic.co/t/transport-502-error-need-help-isolating-error/306590 "2022-06-13T18:23:20Z")

</div>

The command we are using is this: esrally race --track=http\_logs --target-hosts=\[IP address\] --pipeline=benchmark-only --report-file=es\_report\_E3\_32gb.md --report-format=csv --kill-running-processes The IP address is t…

---

## [Query on kibana space.id](https://discuss.elastic.co/t/query-on-kibana-space-id/279255)

<div class="topic-metadata">

**Author:** [@hsdevaraja](https://discuss.elastic.co/u/hsdevaraja)\
**Replies:** 2\
**Last updated:** [July 29, 2021, 1:33pm UTC](https://discuss.elastic.co/t/query-on-kibana-space-id/279255 "2021-07-29T13:33:42Z")

</div>

Hi, I was rereferring below link for setting up of Kibana spaces for logs isolation based on environment domain. We have single instance of Elastic search & Kibana(7.10.2) & Our requirement is create different Kibana …

---

## [What is maximum limit for new data records for index in data visualizer in kibana?](https://discuss.elastic.co/t/what-is-maximum-limit-for-new-data-records-for-index-in-data-visualizer-in-kibana/271406)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [April 29, 2021, 12:20am UTC](https://discuss.elastic.co/t/what-is-maximum-limit-for-new-data-records-for-index-in-data-visualizer-in-kibana/271406 "2021-04-29T00:20:27Z")

</div>

Hi all, I just wanted to know maximum how many records or lines of data can be uploaded for a new index in Kibana Data visualizer? What is limit for no of records or lines? Regards

---

## [Querying multiple condition on same field](https://discuss.elastic.co/t/querying-multiple-condition-on-same-field/207233)

<div class="topic-metadata">

**Author:** [@rsganesh83](https://discuss.elastic.co/u/rsganesh83)\
**Replies:** 2\
**Last updated:** [November 13, 2019, 6:49pm UTC](https://discuss.elastic.co/t/querying-multiple-condition-on-same-field/207233 "2019-11-13T18:49:44Z")

</div>

These are the sample documents(event based) indexed in my ES cluster version 6.8 { "user\_id": "user1", "account\_id": "account1", "event\_name": "event-1", "created\_dt": "2019-09-30T08:40:42.297Z" } { "user\_id": …

---

## [Group same errors on .keyword](https://discuss.elastic.co/t/group-same-errors-on-keyword/163337)

<div class="topic-metadata">

**Author:** [@Pietia](https://discuss.elastic.co/u/Pietia)\
**Replies:** 2\
**Last updated:** [January 16, 2019, 2:57pm UTC](https://discuss.elastic.co/t/group-same-errors-on-keyword/163337 "2019-01-16T14:57:59Z")

</div>

I'm trying to group same errors on kibana with elk stack however when I visualise data by Error not all errors are there I'm visualising data on err\_message.keyword field. What I noticed is that long strings are not …

---

## [Error when running \`yarn es snapshot\` in development](https://discuss.elastic.co/t/error-when-running-yarn-es-snapshot-in-development/162401)

<div class="topic-metadata">

**Author:** [@aaronoah](https://discuss.elastic.co/u/aaronoah)\
**Replies:** 2\
**Last updated:** [January 13, 2019, 6:50am UTC](https://discuss.elastic.co/t/error-when-running-yarn-es-snapshot-in-development/162401 "2019-01-13T06:50:07Z")

</div>

I came across the same post: There is something down on the server backend of snapshots.elastic.co. I tried many versions like 6.4.4, 6.4.3 and so on, they don't exist on the server. @thomasneirynck

---

## [Await is a reserved word - Using ES API to load list of hits by index](https://discuss.elastic.co/t/await-is-a-reserved-word-using-es-api-to-load-list-of-hits-by-index/142740)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 2\
**Last updated:** [August 3, 2018, 7:03am UTC](https://discuss.elastic.co/t/await-is-a-reserved-word-using-es-api-to-load-list-of-hits-by-index/142740 "2018-08-03T07:03:12Z")

</div>

Hello, I am using Kibana to load list of hits by index name using ElasticSearch API. The best way to do that, is using Scroll API and this is my routes.js code: const elasticsearch = require('elasticsearch'); export …

---

## [How to change elasticsearch rest api context path](https://discuss.elastic.co/t/how-to-change-elasticsearch-rest-api-context-path/139413)

<div class="topic-metadata">

**Author:** [@sivakumarl](https://discuss.elastic.co/u/sivakumarl)\
**Replies:** 2\
**Last updated:** [July 10, 2018, 9:17pm UTC](https://discuss.elastic.co/t/how-to-change-elasticsearch-rest-api-context-path/139413 "2018-07-10T21:17:13Z")

</div>

Hi Team, I am newbie to elastic search, just curious to know how elastic search REST apis are deployed and where can i get the server configuration , is there feasibility to change to rest api context path as below. h…

---

## [Kibana Plugin installation on ECE](https://discuss.elastic.co/t/kibana-plugin-installation-on-ece/137663)

<div class="topic-metadata">

**Author:** [@pravekal](https://discuss.elastic.co/u/pravekal)\
**Replies:** 2\
**Last updated:** [June 27, 2018, 6:25pm UTC](https://discuss.elastic.co/t/kibana-plugin-installation-on-ece/137663 "2018-06-27T18:25:57Z")

</div>

Is there a way to install custom Kibana Plugins for ECE ?

---

## [Multiple config file logstash pipelines](https://discuss.elastic.co/t/multiple-config-file-logstash-pipelines/129091)

<div class="topic-metadata">

**Author:** [@kingmario](https://discuss.elastic.co/u/kingmario)\
**Replies:** 2\
**Last updated:** [April 24, 2018, 11:50am UTC](https://discuss.elastic.co/t/multiple-config-file-logstash-pipelines/129091 "2018-04-24T11:50:12Z")

</div>

Hey, I am setting up ELK with filebeats. I created some pipelines (apache, ssh..) in logstash. In my webserver, I setting up filebeat. I have multiple config file that I moved in a created directory in "/etc/filebeat/c…

---

## [Metricbeat 5.1.2 Windows service times out at startup](https://discuss.elastic.co/t/metricbeat-5-1-2-windows-service-times-out-at-startup/76993)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [March 1, 2017, 3:52pm UTC](https://discuss.elastic.co/t/metricbeat-5-1-2-windows-service-times-out-at-startup/76993 "2017-03-01T15:52:51Z")

</div>

Hi, metricbeat service is not starting in Win2012 R2 terminal server. When running manually it takes very long until until the first metrics is fetched. There are many errors like this in debug log: error getting proce…

---

## [Multiple pattern matching log file](https://discuss.elastic.co/t/multiple-pattern-matching-log-file/56008)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 2\
**Last updated:** [July 21, 2016, 6:31pm UTC](https://discuss.elastic.co/t/multiple-pattern-matching-log-file/56008 "2016-07-21T18:31:54Z")

</div>

Hi, So my log file contains multiple patterns (2 diff types) so i made 2 different match patterns to accompany both of them. Everythings working fine and I don't get \_grokparsefailure tags errors. However.. it is return…

---

## [Logstash does not work since version 2](https://discuss.elastic.co/t/logstash-does-not-work-since-version-2/50063)

<div class="topic-metadata">

**Author:** [@Urun\_Icin](https://discuss.elastic.co/u/Urun_Icin)\
**Replies:** 2\
**Last updated:** [May 15, 2016, 9:17am UTC](https://discuss.elastic.co/t/logstash-does-not-work-since-version-2/50063 "2016-05-15T09:17:33Z")

</div>

Hi, I am using version since logstash 1.5 for windows collect logs. Everything was very good but problems occurred after the 2 version I use ELK + Nxlog My config: nxlog: Module im\_msvistalog Module …

---

## [Selected windows log events](https://discuss.elastic.co/t/selected-windows-log-events/45441)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 2\
**Last updated:** [March 25, 2016, 2:56pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441 "2016-03-25T14:56:02Z")

</div>

Hello, I am looking for an information but I haven't found it, is it possible to exclude some events from sending to ELK installed and configured on Windows server?

---

## [Message-\>Elastic-\>Kibana Timestamp](https://discuss.elastic.co/t/message-elastic-kibana-timestamp/45032)

<div class="topic-metadata">

**Author:** [@mcdo](https://discuss.elastic.co/u/mcdo)\
**Replies:** 2\
**Last updated:** [March 21, 2016, 8:32pm UTC](https://discuss.elastic.co/t/message-elastic-kibana-timestamp/45032 "2016-03-21T20:32:56Z")

</div>

Hi, Hi Im trying to understand how Elasticsearch/Kibana interprets time fields that doesn't come with a timezone in the raw message. In my case described below, I'm getting incorrect times in kibana. I have two log s…

---

## [TCP protocol](https://discuss.elastic.co/t/tcp-protocol/33927)

<div class="topic-metadata">

**Author:** [@choused](https://discuss.elastic.co/u/choused)\
**Replies:** 2\
**Last updated:** [November 12, 2015, 9:57pm UTC](https://discuss.elastic.co/t/tcp-protocol/33927 "2015-11-12T21:57:25Z")

</div>

I'm trying to monitor applications that don't have plugins built for them yet (MSSQL, etc.). I don't need to know the contents but just starting with the count would be great. I was hoping to use TCP as the protocol in…

---

## [How to add system.hostfs definition into the yml files](https://discuss.elastic.co/t/how-to-add-system-hostfs-definition-into-the-yml-files/225047)

<div class="topic-metadata">

**Author:** [@micas](https://discuss.elastic.co/u/micas)\
**Replies:** 1\
**Last updated:** [March 30, 2020, 4:59pm UTC](https://discuss.elastic.co/t/how-to-add-system-hostfs-definition-into-the-yml-files/225047 "2020-03-30T16:59:34Z")

</div>

According to https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-docker.html i need to pass on docker containers the "-e -system.hostfs=/hostfs" however is there any way that i can add that to either the …

---

## [Old vs new configuration settings](https://discuss.elastic.co/t/old-vs-new-configuration-settings/175330)

<div class="topic-metadata">

**Author:** [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 7:25am UTC](https://discuss.elastic.co/t/old-vs-new-configuration-settings/175330 "2019-04-04T07:25:10Z")

</div>

Hello I'm upgrade my Elasticsearch/Logstash Cluster form 6.6.x to 6.7.0 I saw in the logs some notice, that I'm using old config settings, which will not work after 7.0.0. Like old: xpack.monitoring.elasticsearch.url …

---

## [Failed to create event](https://discuss.elastic.co/t/failed-to-create-event/86006)

<div class="topic-metadata">

**Author:** [@craftytech1](https://discuss.elastic.co/u/craftytech1)\
**Replies:** 1\
**Last updated:** [May 17, 2017, 2:10pm UTC](https://discuss.elastic.co/t/failed-to-create-event/86006 "2017-05-17T14:10:06Z")

</div>

using ELK stack 5.3. I'm getting the following error message: \[ERROR\]\[logstash.inputs.metrics \] Failed to create monitoring event {:message=\>"For path: events", :error=\>"LogStash::Instrument::MetricStore::MetricNotFoun…

---

## [Is it possible to share saved searches between users?](https://discuss.elastic.co/t/is-it-possible-to-share-saved-searches-between-users/79044)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 1\
**Last updated:** [March 17, 2017, 2:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-share-saved-searches-between-users/79044 "2017-03-17T14:47:57Z")

</div>

Can one user share a saved search with other users through the "Load Saved Search" button? If so how? I know one can click on the "Share" button and then copy/paste the link but that is not what I'm talking about.

---

## [Running out of space on main disk - will altering path.data help?](https://discuss.elastic.co/t/running-out-of-space-on-main-disk-will-altering-path-data-help/61958)

<div class="topic-metadata">

**Author:** [@botninja](https://discuss.elastic.co/u/botninja)\
**Replies:** 1\
**Last updated:** [October 1, 2016, 10:09am UTC](https://discuss.elastic.co/t/running-out-of-space-on-main-disk-will-altering-path-data-help/61958 "2016-10-01T10:09:59Z")

</div>

Hey all. I have a running single node ES that is running out of disk space. If I add another drive to the machine, format it and add it to the path.data so I have the line: path.data\["/var/lib/elasticsearch/data", "/…

---

## [Which charting library does Kibana use?](https://discuss.elastic.co/t/which-charting-library-does-kibana-use/26864)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 1\
**Last updated:** [August 7, 2015, 1:44am UTC](https://discuss.elastic.co/t/which-charting-library-does-kibana-use/26864 "2015-08-07T01:44:44Z")

</div>

Which charting library does kibana use for making its charts??

---

## [What is the multi-threading model for querying & indexing?](https://discuss.elastic.co/t/what-is-the-multi-threading-model-for-querying-indexing/5025)

<div class="topic-metadata">

**Author:** [@Paul\_Sabou](https://discuss.elastic.co/u/Paul_Sabou)\
**Replies:** 1\
**Last updated:** [August 2, 2011, 10:33am UTC](https://discuss.elastic.co/t/what-is-the-multi-threading-model-for-querying-indexing/5025 "2011-08-02T10:33:29Z")

</div>

Hi, I searched for this information all over the site and the old/new mailing list and I could not find anything specific, explaining the multi threading model for the indexing/querying. Could you guys provide mo…

---

## [Ruby script to quickly parse URL for easier filtering or use in visualizations](https://discuss.elastic.co/t/ruby-script-to-quickly-parse-url-for-easier-filtering-or-use-in-visualizations/145003)

<div class="topic-metadata">

**Author:** [@mbreest](https://discuss.elastic.co/u/mbreest)\
**Replies:** 0\
**Last updated:** [August 18, 2018, 11:40am UTC](https://discuss.elastic.co/t/ruby-script-to-quickly-parse-url-for-easier-filtering-or-use-in-visualizations/145003 "2018-08-18T11:40:48Z")

</div>

Hi folks, just wanted to share the Ruby script that we use for parsing the URLs the we receive in our CDN logs to do further analysis on it. It is a mix of what you can do with Grok plugin (https://www.elastic.co/guide/…

---

## [Filebeat - cannot change pipeline in nginx module](https://discuss.elastic.co/t/filebeat-cannot-change-pipeline-in-nginx-module/219360)

<div class="topic-metadata">

**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\
**Replies:** 2\
**Last updated:** [February 19, 2020, 9:12pm UTC](https://discuss.elastic.co/t/filebeat-cannot-change-pipeline-in-nginx-module/219360 "2020-02-19T21:12:31Z")

</div>

Hi, For processing our nginx access logs, we'd like to use a custom pipeline. Therefore I've changed the configuration to: - module: nginx # Access logs access: enabled: true input: pipeline: filebeat…

---

## [Add version for Mapping](https://discuss.elastic.co/t/add-version-for-mapping/313047)

<div class="topic-metadata">

**Author:** [@Ghassan\_Karwchan](https://discuss.elastic.co/u/Ghassan_Karwchan)\
**Replies:** 1\
**Last updated:** [August 27, 2022, 12:50am UTC](https://discuss.elastic.co/t/add-version-for-mapping/313047 "2022-08-27T00:50:13Z")

</div>

Hi. A newbie question. Can I add some kind of versioning for the mapping itself and not the document. So, it is not a property or attribute of the document being indexed, but the mapping itself. So, when I request th…

---

## [Restore an index on single node only](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250)

<div class="topic-metadata">

**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\
**Replies:** 4\
**Last updated:** [February 26, 2022, 6:04am UTC](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250 "2022-02-26T06:04:20Z")

</div>

Hi, we have a 3-node ES cluster. Each node provides both master-eligible & data role. Is it possible to restore an index there temporarily without spreading its contents across all nodes? Just the current node or the cur…

[Previous page](https://discuss.elastic.co/top.md?page=1462&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1464&per_page=50&period=all)
