# Top

**URL:** https://discuss.elastic.co/top.md?page=1471&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1472

---

## [Timelion and splines](https://discuss.elastic.co/t/timelion-and-splines/101789)

<div class="topic-metadata">

**Author:** [@massim0](https://discuss.elastic.co/u/massim0)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 7:24am UTC](https://discuss.elastic.co/t/timelion-and-splines/101789 "2017-09-28T07:24:29Z")

</div>

Hello, I would need to use math function splines in timelion. How can I do? Is it supported? There is an alternative way to smooth the angles of line chart in timelion? thank you very much for help me!!

---

## [Name queries in multisearch to know which result belongs to which query](https://discuss.elastic.co/t/name-queries-in-multisearch-to-know-which-result-belongs-to-which-query/96756)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 2\
**Last updated:** [August 15, 2017, 10:22am UTC](https://discuss.elastic.co/t/name-queries-in-multisearch-to-know-which-result-belongs-to-which-query/96756 "2017-08-15T10:22:52Z")

</div>

I am creating a multisearch query that consists of several queries and I need to know which query provided which result. Example \_msearch: {"index": "myindex"} {"query": {"bool": {"must":{...}, "filter":{...}}}} {"inde…

---

## [Compute distance between current and previous value](https://discuss.elastic.co/t/compute-distance-between-current-and-previous-value/91902)

<div class="topic-metadata">

**Author:** [@pksingla](https://discuss.elastic.co/u/pksingla)\
**Replies:** 2\
**Last updated:** [July 5, 2017, 4:56pm UTC](https://discuss.elastic.co/t/compute-distance-between-current-and-previous-value/91902 "2017-07-05T16:56:20Z")

</div>

I have CPU Utilization data ingested into Elastic Search. My requirement is to calculate distance between 2 subsequent values e.g. current value and previous value. Please provide any pointers to achieve the same using s…

---

## [How to use ingest DeDot processor](https://discuss.elastic.co/t/how-to-use-ingest-dedot-processor/90694)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 2\
**Last updated:** [June 26, 2017, 7:15am UTC](https://discuss.elastic.co/t/how-to-use-ingest-dedot-processor/90694 "2017-06-26T07:15:48Z")

</div>

We want to replace dots with underscores while ingesting the data. I found de-dot processor which seems to be a good solution. Here is the PR that was merged early last year, but I don't find that in the code anymore or …

---

## [Multiline pattern works on The Go Playground but not filebeat](https://discuss.elastic.co/t/multiline-pattern-works-on-the-go-playground-but-not-filebeat/85604)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 1:36pm UTC](https://discuss.elastic.co/t/multiline-pattern-works-on-the-go-playground-but-not-filebeat/85604 "2017-05-15T13:36:01Z")

</div>

I am trying to parse xml logs which are in multiline format. The pattern works fine when I checked on The Go Playground , but not working when I actually start filebeat. Filebeat version (5.3.1) running on RHEL7 Input …

---

## [ELK on Windows: Very Poor Performance](https://discuss.elastic.co/t/elk-on-windows-very-poor-performance/82769)

<div class="topic-metadata">

**Author:** [@gokhankocak](https://discuss.elastic.co/u/gokhankocak)\
**Replies:** 2\
**Last updated:** [April 19, 2017, 6:17am UTC](https://discuss.elastic.co/t/elk-on-windows-very-poor-performance/82769 "2017-04-19T06:17:36Z")

</div>

We setup a cluster with 2 data nodes on Hyper-V VMs. Daily index size is around 200 GB. Performance is very poor, elasticsearch does not respond at all. 2 data nodes use 100% CPU and 32 GB of memory (each node). We use t…

---

## [Js client could not connect to elasticsearch behind nginx](https://discuss.elastic.co/t/js-client-could-not-connect-to-elasticsearch-behind-nginx/33210)

<div class="topic-metadata">

**Author:** [@devaraj](https://discuss.elastic.co/u/devaraj)\
**Replies:** 2\
**Last updated:** [October 29, 2015, 6:25am UTC](https://discuss.elastic.co/t/js-client-could-not-connect-to-elasticsearch-behind-nginx/33210 "2015-10-29T06:25:40Z")

</div>

Hi, I am using nginx to protect the elasticsearch. When trying to access elasticsearch in client js. Its throwing Unable to revive connection: http://ubuntulocal:80:9200/ error. My question is how to connect the elas…

---

## [Daily Reporting](https://discuss.elastic.co/t/daily-reporting/31924)

<div class="topic-metadata">

**Author:** [@just5guy](https://discuss.elastic.co/u/just5guy)\
**Replies:** 2\
**Last updated:** [October 10, 2015, 2:47am UTC](https://discuss.elastic.co/t/daily-reporting/31924 "2015-10-10T02:47:14Z")

</div>

I am currently using the ELK stack to monitor Energy usage in my home. I have nice dashboards set up for Today, Yesterday, Weekly, and so on. What I am looking to do is now send out an email with either entire dashboa…

---

## [Workflow ai.agent prompt gives completely different answer than when asking the same agent in the chat interface](https://discuss.elastic.co/t/workflow-ai-agent-prompt-gives-completely-different-answer-than-when-asking-the-same-agent-in-the-chat-interface/387391)

<div class="topic-metadata">

**Author:** [@Tiemen](https://discuss.elastic.co/u/Tiemen)\
**Replies:** 8\
**Last updated:** [July 16, 2026, 8:27am UTC](https://discuss.elastic.co/t/workflow-ai-agent-prompt-gives-completely-different-answer-than-when-asking-the-same-agent-in-the-chat-interface/387391 "2026-07-16T08:27:59Z")

</div>

So I'm messing around with workflows and found out that the answers i get from that prompt are completely different and less expansive than when I copy-paste that prompt into the chat with the exact same agent. this is t…

---

## [Logstash and elasticsearch on different machines](https://discuss.elastic.co/t/logstash-and-elasticsearch-on-different-machines/233352)

<div class="topic-metadata">

**Author:** [@persepherone](https://discuss.elastic.co/u/persepherone)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 9:55am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-on-different-machines/233352 "2020-05-20T09:55:42Z")

</div>

I have logstash and Elastsearch on different machines. When i run Logstash on same machine it works all fine(with 'localhost' in hosts) but when i specify IP address in the Hosts section of Conf file it does not creates …

---

## [Cant seem to connect to Elastic Search or Kibana](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200)

<div class="topic-metadata">

**Author:** [@jrp30506](https://discuss.elastic.co/u/jrp30506)\
**Replies:** 7\
**Last updated:** [January 16, 2023, 7:24pm UTC](https://discuss.elastic.co/t/cant-seem-to-connect-to-elastic-search-or-kibana/323200 "2023-01-16T19:24:05Z")

</div>

Afternoon everyone. I recently built an ELK stack on Ubuntu 22.04 by following instructions I found by searching for the installation procedure. I followed the article to the letter and after completion, when trying to c…

---

## [Widen date filter on embedded dashboard](https://discuss.elastic.co/t/widen-date-filter-on-embedded-dashboard/245390)

<div class="topic-metadata">

**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\
**Replies:** 7\
**Last updated:** [August 27, 2020, 4:17pm UTC](https://discuss.elastic.co/t/widen-date-filter-on-embedded-dashboard/245390 "2020-08-27T16:17:32Z")

</div>

I have several visualizations as an embedded dashboard. When a user clicks on part of the dashboard it adds a filter to the bar at the top and they can remove it. However if they select a date range on the record frequen…

---

## [Filbeat with docker compose](https://discuss.elastic.co/t/filbeat-with-docker-compose/214728)

<div class="topic-metadata">

**Author:** [@Haritz\_Saiz](https://discuss.elastic.co/u/Haritz_Saiz)\
**Replies:** 1\
**Last updated:** [January 13, 2020, 6:38pm UTC](https://discuss.elastic.co/t/filbeat-with-docker-compose/214728 "2020-01-13T18:38:14Z")

</div>

Hello everyone I am trying to send the generated logs by cowrie to logstash: Here is my docker compose: version: '3' volumes: cowrie-etc: driver: local cowrie-var: driver: local services: cowrie: con…

---

## [Time Series + Aggregation + Netflow](https://discuss.elastic.co/t/time-series-aggregation-netflow/114568)

<div class="topic-metadata">

**Author:** [@j-white](https://discuss.elastic.co/u/j-white)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 4:46pm UTC](https://discuss.elastic.co/t/time-series-aggregation-netflow/114568 "2018-01-10T16:46:01Z")

</div>

We are looking to generate time series data for Netflow records stored in ES and we’re facing some challenges in determining the appropriate way to perform necessary aggregations. In our case, each Netflow record is sto…

---

## [How to disassociate parent-child relationship through re-indexing](https://discuss.elastic.co/t/how-to-disassociate-parent-child-relationship-through-re-indexing/61463)

<div class="topic-metadata">

**Author:** [@Abhishek\_Vaid](https://discuss.elastic.co/u/Abhishek_Vaid)\
**Replies:** 1\
**Last updated:** [September 25, 2016, 1:57pm UTC](https://discuss.elastic.co/t/how-to-disassociate-parent-child-relationship-through-re-indexing/61463 "2016-09-25T13:57:57Z")

</div>

I have a index with parent-child relationship. A type is the parent of C type. I want to reindex C type documents into its own index. I'm doing this through reindex API. When I run the command, I get following error: {…

---

## [Not indexed nested objects](https://discuss.elastic.co/t/not-indexed-nested-objects/39081)

<div class="topic-metadata">

**Author:** [@Igor\_Samusenko](https://discuss.elastic.co/u/Igor_Samusenko)\
**Replies:** 1\
**Last updated:** [January 13, 2016, 12:59pm UTC](https://discuss.elastic.co/t/not-indexed-nested-objects/39081 "2016-01-13T12:59:49Z")

</div>

Hi everyone, I've just started using logstash + elasticsearch for storing logs. I started exploring my data and I figured that nested objects were not indexed, thus I can not visualise them, and I even can not use them …

---

## [Match query with type vs filter match query with type](https://discuss.elastic.co/t/match-query-with-type-vs-filter-match-query-with-type/12908)

<div class="topic-metadata">

**Author:** [@Stefanie](https://discuss.elastic.co/u/Stefanie)\
**Replies:** 1\
**Last updated:** [July 24, 2013, 9:44am UTC](https://discuss.elastic.co/t/match-query-with-type-vs-filter-match-query-with-type/12908 "2013-07-24T09:44:17Z")

</div>

I am working on translating my query into a filter for an alias and when I add a type to the match query I get an error in the filter. My query looks like this: curl -X GET 'http://localhost:9200/u1/\_search?from=…

---

## [Filebeat Kafka topic mappings](https://discuss.elastic.co/t/filebeat-kafka-topic-mappings/233584)

<div class="topic-metadata">

**Author:** [@Darshan\_B\_M](https://discuss.elastic.co/u/Darshan_B_M)\
**Replies:** 0\
**Last updated:** [May 20, 2020, 5:53pm UTC](https://discuss.elastic.co/t/filebeat-kafka-topic-mappings/233584 "2020-05-20T17:53:48Z")

</div>

Hi I am trying to setup filebeat to send events to Kafka and have a requirement that I will need to send events from different apps to a different topic. I tried to set the configs as mentioned in the documentation(http…

---

## [Using Elastic Search as a No-SQL for financial analytics with reasonable accuracy (exact terms match with non-analyzed strings, histogram aggregations)](https://discuss.elastic.co/t/using-elastic-search-as-a-no-sql-for-financial-analytics-with-reasonable-accuracy-exact-terms-match-with-non-analyzed-strings-histogram-aggregations/19336)

<div class="topic-metadata">

**Author:** [@Chris\_Dumke](https://discuss.elastic.co/u/Chris_Dumke)\
**Replies:** 0\
**Last updated:** [August 19, 2014, 2:42am UTC](https://discuss.elastic.co/t/using-elastic-search-as-a-no-sql-for-financial-analytics-with-reasonable-accuracy-exact-terms-match-with-non-analyzed-strings-histogram-aggregations/19336 "2014-08-19T02:42:19Z")

</div>

Hello Elastic Search forum, quick question regarding accuracy of results, since ES is a search engine. Can one use ES for financial reporting where accuracy is important. E.g. using exact terms matching (non-analy…

---

## [Unable to load elasticsearch certificate](https://discuss.elastic.co/t/unable-to-load-elasticsearch-certificate/304821)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 3\
**Last updated:** [May 17, 2022, 6:18am UTC](https://discuss.elastic.co/t/unable-to-load-elasticsearch-certificate/304821 "2022-05-17T06:18:26Z")

</div>

Hello team, I am getting below error on while running Elasticsearch. I have added new certificate and error start coming. \[2022-05-16T11:32:39,322\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[as-dev-2\] uncaugh…

---

## [Reset password api is not working](https://discuss.elastic.co/t/reset-password-api-is-not-working/296028)

<div class="topic-metadata">

**Author:** [@Sunil\_Bhakar](https://discuss.elastic.co/u/Sunil_Bhakar)\
**Replies:** 3\
**Last updated:** [February 2, 2022, 9:12am UTC](https://discuss.elastic.co/t/reset-password-api-is-not-working/296028 "2022-02-02T09:12:27Z")

</div>

{ "error" : { "root\_cause" : \[ { "type" : "status\_exception", "reason" : "Cluster state has not been recovered yet, cannot write to the \[null\] index" } \], "type" : "status\_exception", "reason" : "Cluster state h…

---

## [Как совпадения с более точными совпадениями поднять выше?](https://discuss.elastic.co/t/topic/91732)

<div class="topic-metadata">

**Author:** [@bio](https://discuss.elastic.co/u/bio)\
**Replies:** 3\
**Last updated:** [July 6, 2017, 7:17pm UTC](https://discuss.elastic.co/t/topic/91732 "2017-07-06T19:17:35Z")

</div>

Добрый день. Имеется поиск по нескольким полям, которые лежат в разных индексах. Запрос примерно такой: https://pastebin.com/raw/u0Ae1v9T Поиск вроде бы работает, но вес документов в каждой функции всегда одинаковый. На…

---

## [Kibana discover: time filter](https://discuss.elastic.co/t/kibana-discover-time-filter/89434)

<div class="topic-metadata">

**Author:** [@Jinghua.Ge](https://discuss.elastic.co/u/Jinghua.Ge)\
**Replies:** 3\
**Last updated:** [June 14, 2017, 7:56pm UTC](https://discuss.elastic.co/t/kibana-discover-time-filter/89434 "2017-06-14T19:56:37Z")

</div>

Hi There! Is it possible to set the time filter from 8:28AM to now? I see a today so far which is 0:00 to now, can this be customized? Thanks for any advice! -- JInghua

---

## [Mapper conflict](https://discuss.elastic.co/t/mapper-conflict/62700)

<div class="topic-metadata">

**Author:** [@minniek](https://discuss.elastic.co/u/minniek)\
**Replies:** 3\
**Last updated:** [October 11, 2016, 11:07am UTC](https://discuss.elastic.co/t/mapper-conflict/62700 "2016-10-11T11:07:47Z")

</div>

I updated my ES v1.5 to 2.4 and I am getting so many errors about mapper conflicts. I would like to know if it is possible to change the mapper field of every index before starting the elasticsearch service or ignore all…

---

## [How to generate init scripts for community beats?](https://discuss.elastic.co/t/how-to-generate-init-scripts-for-community-beats/44493)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 3\
**Last updated:** [March 21, 2016, 7:39am UTC](https://discuss.elastic.co/t/how-to-generate-init-scripts-for-community-beats/44493 "2016-03-21T07:39:13Z")

</div>

I was just experimenting with apachebeat. I was able to get it working well on the test server. Then I was ready to add it to more server, but realized that it did not come with an init file. What is the best way to …

---

## [Матчасть, отказоустойчивость](https://discuss.elastic.co/t/topic/258162)

<div class="topic-metadata">

**Author:** [@Gigazo1d](https://discuss.elastic.co/u/Gigazo1d)\
**Replies:** 5\
**Last updated:** [December 11, 2020, 7:46pm UTC](https://discuss.elastic.co/t/topic/258162 "2020-12-11T19:46:20Z")

</div>

Доброго времени суток! Хотелось бы задать пару вопросов по Logstash. Из англоязычной документации не так отчетливо, как хотелось бы, понял разницы между: pipeline (конвейером); потоком (thread); процессом (хотя проце…

---

## [Filter in Timelion](https://discuss.elastic.co/t/filter-in-timelion/225481)

<div class="topic-metadata">

**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\
**Replies:** 5\
**Last updated:** [April 2, 2020, 2:38pm UTC](https://discuss.elastic.co/t/filter-in-timelion/225481 "2020-04-02T14:38:57Z")

</div>

I created a timelion to display cpu usage, I need to pass server names dynamically, using filter. Created dashboard but not finding all the options in "add filter" , it just shows me index, message, message.keyword but I…

---

## [Outermost aggregation in Visual Builder cannot be (term) Bucket](https://discuss.elastic.co/t/outermost-aggregation-in-visual-builder-cannot-be-term-bucket/151677)

<div class="topic-metadata">

**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\
**Replies:** 5\
**Last updated:** [October 23, 2018, 7:05pm UTC](https://discuss.elastic.co/t/outermost-aggregation-in-visual-builder-cannot-be-term-bucket/151677 "2018-10-23T19:05:21Z")

</div>

Is there a way to start with a bucket filter in Visual Builder? I want to do a bucket aggregation and have the child aggs of the outer bucket generate the time series of values. Something like this query which works ju…

---

## [Date histogram issues when moving from Kibana 5.3.0 to 5.6.3](https://discuss.elastic.co/t/date-histogram-issues-when-moving-from-kibana-5-3-0-to-5-6-3/106091)

<div class="topic-metadata">

**Author:** [@ristov](https://discuss.elastic.co/u/ristov)\
**Replies:** 5\
**Last updated:** [November 3, 2017, 4:11pm UTC](https://discuss.elastic.co/t/date-histogram-issues-when-moving-from-kibana-5-3-0-to-5-6-3/106091 "2017-11-03T16:11:35Z")

</div>

hi all, I have upgraded from Kibana 5.3.0 to 5.6.3 today, and noticed that bar charts do not display correctly in my dashboards. I have a number of date histograms which use stacked mode for displaying several values fo…

---

## [Template to store everything in string](https://discuss.elastic.co/t/template-to-store-everything-in-string/7299)

<div class="topic-metadata">

**Author:** [@grab](https://discuss.elastic.co/u/grab)\
**Replies:** 5\
**Last updated:** [April 16, 2012, 1:36pm UTC](https://discuss.elastic.co/t/template-to-store-everything-in-string/7299 "2012-04-16T13:36:24Z")

</div>

Hi, I have lots of data which don't have type all thing are string, when i store those data if the first one is a long then another one a string i have a NumberFormatException : "nested: NumberFormatException\[…

---

## [How to change timezone on painless script](https://discuss.elastic.co/t/how-to-change-timezone-on-painless-script/332871)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 2\
**Last updated:** [May 10, 2023, 3:30am UTC](https://discuss.elastic.co/t/how-to-change-timezone-on-painless-script/332871 "2023-05-10T03:30:59Z")

</div>

Hello everyone, i want to ask something about painless script. so i just made a painless script that look like this: but unfortunately the result of this script is still in utc and i want to change it to another time…

---

## [But,how to hide add filter?](https://discuss.elastic.co/t/but-how-to-hide-add-filter/326549)

<div class="topic-metadata">

**Author:** [@quan\_w](https://discuss.elastic.co/u/quan_w)\
**Replies:** 2\
**Last updated:** [March 3, 2023, 4:42am UTC](https://discuss.elastic.co/t/but-how-to-hide-add-filter/326549 "2023-03-03T04:42:48Z")

</div>

Continuing the discussion from Show / Hide Global Filter Bar in Kibana:

---

## [Weird memory growth (ES 7.9)](https://discuss.elastic.co/t/weird-memory-growth-es-7-9/260479)

<div class="topic-metadata">

**Author:** [@zanettea](https://discuss.elastic.co/u/zanettea)\
**Replies:** 2\
**Last updated:** [January 10, 2021, 12:12pm UTC](https://discuss.elastic.co/t/weird-memory-growth-es-7-9/260479 "2021-01-10T12:12:53Z")

</div>

Hello, we are experiencing anomalous memory usage in a memory constrained cluster of 3 nodes running ES 7.9. We set 2GB heap size with 4 GB overall available RAM. After some days of normal operation where there are mainl…

---

## [Try to enable geoip on logstash](https://discuss.elastic.co/t/try-to-enable-geoip-on-logstash/234763)

<div class="topic-metadata">

**Author:** [@rocanelo](https://discuss.elastic.co/u/rocanelo)\
**Replies:** 2\
**Last updated:** [May 29, 2020, 4:33am UTC](https://discuss.elastic.co/t/try-to-enable-geoip-on-logstash/234763 "2020-05-29T04:33:22Z")

</div>

Hi everyone, I'm try to enable geoip on my logstash but have a message say the database is corrupted, I suscribe to maxmind and get the last database, I upgdate with command "geoupdate" but not working. I dont now what…

---

## [Help needed with search as you type](https://discuss.elastic.co/t/help-needed-with-search-as-you-type/204486)

<div class="topic-metadata">

**Author:** [@iuzzino](https://discuss.elastic.co/u/iuzzino)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 7:09am UTC](https://discuss.elastic.co/t/help-needed-with-search-as-you-type/204486 "2019-10-23T07:09:42Z")

</div>

My goal is to create a search engine (elasticsearch 7.x) that suggests you the correct searches to input, a sort of what amazon does, based on previous searches (machine learning). My fields to index are the following: …

---

## [302 errors becomes 502 error inside kubernetes](https://discuss.elastic.co/t/302-errors-becomes-502-error-inside-kubernetes/198867)

<div class="topic-metadata">

**Author:** [@Ross\_Lutsch](https://discuss.elastic.co/u/Ross_Lutsch)\
**Replies:** 2\
**Last updated:** [September 10, 2019, 1:37pm UTC](https://discuss.elastic.co/t/302-errors-becomes-502-error-inside-kubernetes/198867 "2019-09-10T13:37:23Z")

</div>

I'm using the same working images for elasticsearch/kibana/searchguard/jwtparams and can't access kibana front end, both services seem to be running but it has some sort of routing issue {"type":"log","@timestamp":"2019…

---

## [Define format/type of specific number fields](https://discuss.elastic.co/t/define-format-type-of-specific-number-fields/185229)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 4:11pm UTC](https://discuss.elastic.co/t/define-format-type-of-specific-number-fields/185229 "2019-06-11T16:11:35Z")

</div>

Hi here, Thanks in advance to take the time to read it and I hope help me out. I'm using a logstash filter with a ruby code to subtract two fields and create a 3rd one. Like below : input { jdbc { db details \[...\] } …

---

## [Wrong date shown in kibana](https://discuss.elastic.co/t/wrong-date-shown-in-kibana/144215)

<div class="topic-metadata">

**Author:** [@MartinCorrado](https://discuss.elastic.co/u/MartinCorrado)\
**Replies:** 2\
**Last updated:** [August 14, 2018, 2:28pm UTC](https://discuss.elastic.co/t/wrong-date-shown-in-kibana/144215 "2018-08-14T14:28:52Z")

</div>

Hi! I recently noted that I'm getting a date field wrong in kibana, the day before specifically (today, the 13ths of August, I'm getting 12th of August). When I check my db I see that the date is correct. Read somewher…

---

## [JSON Logs Parsed with JSON codec but not JSON filter](https://discuss.elastic.co/t/json-logs-parsed-with-json-codec-but-not-json-filter/115186)

<div class="topic-metadata">

**Author:** [@cappy](https://discuss.elastic.co/u/cappy)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 4:36pm UTC](https://discuss.elastic.co/t/json-logs-parsed-with-json-codec-but-not-json-filter/115186 "2018-01-18T16:36:20Z")

</div>

Hi, I'm running Filebeat and Logstash 5.6.5 and was having a bit of an issue with the json filter plugin provided for use with Logstash. I am pulling in multiline JSON logs with Filebeat, and I have an input configured…

---

## [Is there a way not set the document type when doing search?](https://discuss.elastic.co/t/is-there-a-way-not-set-the-document-type-when-doing-search/94042)

<div class="topic-metadata">

**Author:** [@MountainMoon](https://discuss.elastic.co/u/MountainMoon)\
**Replies:** 2\
**Last updated:** [July 21, 2017, 6:12pm UTC](https://discuss.elastic.co/t/is-there-a-way-not-set-the-document-type-when-doing-search/94042 "2017-07-21T18:12:33Z")

</div>

What I'm trying to do now is I would like to search two document types in two indices. But in C#, Nest, you need you add a in the search function like this "Client.Search". Since there are different types when search th…

---

## [Aggregations value formatter - on a multi indices query](https://discuss.elastic.co/t/aggregations-value-formatter-on-a-multi-indices-query/70076)

<div class="topic-metadata">

**Author:** [@LiorY89](https://discuss.elastic.co/u/LiorY89)\
**Replies:** 2\
**Last updated:** [January 1, 2017, 4:42pm UTC](https://discuss.elastic.co/t/aggregations-value-formatter-on-a-multi-indices-query/70076 "2017-01-01T16:42:54Z")

</div>

I'm trying to find the min date on documents of an index. All works good if i'm trying to do it on a specific index, such as: GET index1/\_search { "size": 0, "aggs": { "min\_date": { "min": { "fiel…

---

## [New to ELK (Syslog issue)](https://discuss.elastic.co/t/new-to-elk-syslog-issue/54141)

<div class="topic-metadata">

**Author:** [@Tommo](https://discuss.elastic.co/u/Tommo)\
**Replies:** 2\
**Last updated:** [July 1, 2016, 6:42am UTC](https://discuss.elastic.co/t/new-to-elk-syslog-issue/54141 "2016-07-01T06:42:23Z")

</div>

I've setup ELK on Windows 2012 and can't seem to get the syslog working. So at this stage my logstash.json file has a simple input for syslog. input { beats { port =\> 5044 type =\> log } syslog { } I…

---

## [Filter autocomplete query suggestions by language](https://discuss.elastic.co/t/filter-autocomplete-query-suggestions-by-language/317012)

<div class="topic-metadata">

**Author:** [@Charlie\_Fan](https://discuss.elastic.co/u/Charlie_Fan)\
**Replies:** 4\
**Last updated:** [November 18, 2022, 7:26pm UTC](https://discuss.elastic.co/t/filter-autocomplete-query-suggestions-by-language/317012 "2022-11-18T19:26:20Z")

</div>

Hi, I enabled autocompleteSuggestions={true} for \<SearchBox\>, however, I noticed the suggested query items are giving all language items back. I am wondering if it is possible to filter those query suggestions by langua…

---

## [APM Java agent v1.27.0+ instrumention errors on modulepath](https://discuss.elastic.co/t/apm-java-agent-v1-27-0-instrumention-errors-on-modulepath/292877)

<div class="topic-metadata">

**Author:** [@duponter](https://discuss.elastic.co/u/duponter)\
**Replies:** 4\
**Last updated:** [January 4, 2022, 9:04am UTC](https://discuss.elastic.co/t/apm-java-agent-v1-27-0-instrumention-errors-on-modulepath/292877 "2022-01-04T09:04:49Z")

</div>

Currently, APM Java agent v1.26.0 is attached successfully to a Spring Boot 2.6 application (JDK 17). This application has enabled Java modules and is therefore running on the modulepath. Although the APM Java Agent is…

---

## [Datafeed missing in ML job](https://discuss.elastic.co/t/datafeed-missing-in-ml-job/254343)

<div class="topic-metadata">

**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\
**Replies:** 4\
**Last updated:** [November 8, 2020, 4:32pm UTC](https://discuss.elastic.co/t/datafeed-missing-in-ml-job/254343 "2020-11-08T16:32:04Z")

</div>

Hi all, I always receive this warning on my jobs. Datafeed has missed 2 documents due to ingest latency. I have tried to increase the query\_delay but still the same. Any feedback? Much appreciated!

---

## [HTTPD24\_ERRORLOG grok pattern issues](https://discuss.elastic.co/t/httpd24-errorlog-grok-pattern-issues/207946)

<div class="topic-metadata">

**Author:** [@CodeName](https://discuss.elastic.co/u/CodeName)\
**Replies:** 4\
**Last updated:** [November 15, 2019, 6:23pm UTC](https://discuss.elastic.co/t/httpd24-errorlog-grok-pattern-issues/207946 "2019-11-15T18:23:22Z")

</div>

I am having trouble getting the HTTPD24\_ERRORLOG to work when the module field is blank it works great in the kibana tester but not in logstash i get a grokparsefailue ls config input { stdin{} } filter{ grok{ m…

---

## [Embedding kibana visualisation](https://discuss.elastic.co/t/embedding-kibana-visualisation/198918)

<div class="topic-metadata">

**Author:** [@whitediver](https://discuss.elastic.co/u/whitediver)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 1:29pm UTC](https://discuss.elastic.co/t/embedding-kibana-visualisation/198918 "2019-09-12T13:29:54Z")

</div>

Then I try to embed visualization into my Kibana app I receive an error. webpack://%5Bname%5D/./node\_modules/angular/angular.js?:14928 SearchError: Couldn't find a search strategy for the search request at \_callee$ (htt…

---

## [Beats dashboard 1.3 load errors](https://discuss.elastic.co/t/beats-dashboard-1-3-load-errors/133634)

<div class="topic-metadata">

**Author:** [@Guido\_van\_Brakel](https://discuss.elastic.co/u/Guido_van_Brakel)\
**Replies:** 4\
**Last updated:** [May 30, 2018, 11:15am UTC](https://discuss.elastic.co/t/beats-dashboard-1-3-load-errors/133634 "2018-05-30T11:15:17Z")

</div>

When I try to load the beats dashboards, I get lots of errors like this ./load.sh -url http://127.0.0.1:9200 Loading dashboards to http://127.0.0.1:9200 in .kibana {"acknowledged":true,"shards\_acknowledged":true,"inde…

---

## [Best practices: testing, cluster configuration, data analysis integrity, query results](https://discuss.elastic.co/t/best-practices-testing-cluster-configuration-data-analysis-integrity-query-results/11265)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 4\
**Last updated:** [March 25, 2013, 4:58pm UTC](https://discuss.elastic.co/t/best-practices-testing-cluster-configuration-data-analysis-integrity-query-results/11265 "2013-03-25T16:58:17Z")

</div>

Hi, I would like to ask how do people do testing of Elasticsearch setup/configuration, especially in Java. For example, some search operations can be quite sensitive to even little mappings and analysis changes, …

---

## [Elascticsearch javax.net.ssl.SSLException: Tag mismatch!](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936)

<div class="topic-metadata">

**Author:** [@Roma\_Kruglickyi](https://discuss.elastic.co/u/Roma_Kruglickyi)\
**Replies:** 0\
**Last updated:** [May 11, 2020, 6:32am UTC](https://discuss.elastic.co/t/elascticsearch-javax-net-ssl-sslexception-tag-mismatch/231936 "2020-05-11T06:32:45Z")

</div>

I have 3 identical servers with elasticsearch 7.4.2 on Centos 7. I created cluster, 2 nodes work OK, but if I add 3rd node to the cluster , it is a lot of errors in logs and cluster become unstable. exception caught on…

[Previous page](https://discuss.elastic.co/top.md?page=1470&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1472&per_page=50&period=all)
