# Top

**URL:** https://discuss.elastic.co/top.md?page=1477&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1478

---

## [What is the query string format used to express filters, etc?](https://discuss.elastic.co/t/what-is-the-query-string-format-used-to-express-filters-etc/30101)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 5\
**Last updated:** [October 1, 2015, 11:03am UTC](https://discuss.elastic.co/t/what-is-the-query-string-format-used-to-express-filters-etc/30101 "2015-10-01T11:03:29Z")

</div>

Hi Kibana experts, I need to parse the query string used to specify date ranges and filters within Kibana's state URLs. Is there a standard format this string follows? Best, Dan.

---

## [Filebeat windows docker image](https://discuss.elastic.co/t/filebeat-windows-docker-image/209534)

<div class="topic-metadata">

**Author:** [@sahinguler](https://discuss.elastic.co/u/sahinguler)\
**Replies:** 0\
**Last updated:** [November 26, 2019, 2:40pm UTC](https://discuss.elastic.co/t/filebeat-windows-docker-image/209534 "2019-11-26T14:40:47Z")

</div>

Hi all, Do you have filebeat docker image for windows ?

---

## [Stopping/uninstalling Winlogbeat 8.8.2 fails](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209)

<div class="topic-metadata">

**Author:** [@ben-sec](https://discuss.elastic.co/u/ben-sec)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 1:00pm UTC](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209 "2023-10-17T13:00:29Z")

</div>

Hello! I have problems with Winlogbeat 8.8.2 on 5% of my clients (service is running but I don't get any logs) and want to get rid of it, but I'm unable to stop the service and to uninstall Winlogbeat. Is there any kind…

---

## [Filebeat receives HTTP 405 from Elasticsearch after 7.x -\> 8.1 upgrade](https://discuss.elastic.co/t/filebeat-receives-http-405-from-elasticsearch-after-7-x-8-1-upgrade/303821)

<div class="topic-metadata">

**Author:** [@Specialist](https://discuss.elastic.co/u/Specialist)\
**Replies:** 1\
**Last updated:** [June 16, 2022, 4:21pm UTC](https://discuss.elastic.co/t/filebeat-receives-http-405-from-elasticsearch-after-7-x-8-1-upgrade/303821 "2022-06-16T16:21:37Z")

</div>

Hi there, since upgrading to v8.1 Filebeat no longer starts with the following error: Connection marked as failed because the onConnect callback failed: error loading template: failure while checking if template exist…

---

## [Shading dependencies](https://discuss.elastic.co/t/shading-dependencies/296502)

<div class="topic-metadata">

**Author:** [@amodric](https://discuss.elastic.co/u/amodric)\
**Replies:** 7\
**Last updated:** [February 8, 2022, 1:29pm UTC](https://discuss.elastic.co/t/shading-dependencies/296502 "2022-02-08T13:29:00Z")

</div>

apm-agent-java uses shading for some of the dependencies it uses, but it doesn't change package names for them. This caused dependencies to clash with different versions I had in my project, which defeats the purpose of…

---

## [Fleet Agent not showing logs - Fleet Agent not opening port syslog (panw module - filebeat)](https://discuss.elastic.co/t/fleet-agent-not-showing-logs-fleet-agent-not-opening-port-syslog-panw-module-filebeat/296111)

<div class="topic-metadata">

**Author:** [@AMe](https://discuss.elastic.co/u/AMe)\
**Replies:** 1\
**Last updated:** [February 2, 2022, 7:23pm UTC](https://discuss.elastic.co/t/fleet-agent-not-showing-logs-fleet-agent-not-opening-port-syslog-panw-module-filebeat/296111 "2022-02-02T19:23:31Z")

</div>

Elastic Agent has not opened the port for Syslog to receive data. Fleet integration - filebeat module - Palo Alto firewall network (panw) - via Syslog. Use Case: I set up a fleet server, created a new policy and added …

---

## [Clarify high level REST client compatibility between 6 and 7](https://discuss.elastic.co/t/clarify-high-level-rest-client-compatibility-between-6-and-7/241973)

<div class="topic-metadata">

**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\
**Replies:** 1\
**Last updated:** [July 23, 2020, 7:46am UTC](https://discuss.elastic.co/t/clarify-high-level-rest-client-compatibility-between-6-and-7/241973 "2020-07-23T07:46:17Z")

</div>

I have traffic coming in constantly in my application and I need to migrate from ES6 to 7. According to the doc the client should be migrated last. But will a client 6 work with a cluster in version 7? How this should be…

---

## [Grok: how to handle not found patterns](https://discuss.elastic.co/t/grok-how-to-handle-not-found-patterns/168323)

<div class="topic-metadata">

**Author:** [@shimpi](https://discuss.elastic.co/u/shimpi)\
**Replies:** 1\
**Last updated:** [February 14, 2019, 2:49pm UTC](https://discuss.elastic.co/t/grok-how-to-handle-not-found-patterns/168323 "2019-02-14T14:49:24Z")

</div>

Hello Members, I'm receiving this string as input event: 2019-02-13 19:20:07,659 INFO 00ACDD5C000BAFFDC4D1353F49568680 \[main\] TEST (some\_text) and I'm using pretty simple pattern: grok { # grab the date, log le…

---

## [How to connect sql server 2016 with Elastic Search](https://discuss.elastic.co/t/how-to-connect-sql-server-2016-with-elastic-search/107837)

<div class="topic-metadata">

**Author:** [@Bhanu\_Y](https://discuss.elastic.co/u/Bhanu_Y)\
**Replies:** 1\
**Last updated:** [November 16, 2017, 1:07am UTC](https://discuss.elastic.co/t/how-to-connect-sql-server-2016-with-elastic-search/107837 "2017-11-16T01:07:43Z")

</div>

Hi, Can anyone help me in finding solution for integrating sql server 2016 with elastic search. I tried this http://hintdesk.com/how-to-connect-elasticsearch-to-ms-sql-server/ but didn't work out. Any help is appreciat…

---

## [What is the best rest client to learn/test elasticsearch with?](https://discuss.elastic.co/t/what-is-the-best-rest-client-to-learn-test-elasticsearch-with/64588)

<div class="topic-metadata">

**Author:** [@glagidse](https://discuss.elastic.co/u/glagidse)\
**Replies:** 1\
**Last updated:** [November 1, 2016, 4:41pm UTC](https://discuss.elastic.co/t/what-is-the-best-rest-client-to-learn-test-elasticsearch-with/64588 "2016-11-01T16:41:53Z")

</div>

Hi all, I've been learning about Elasticsearch since Friday, and I think it's pretty great, but I'm wondering what you all think is the best rest client to learn/test elasticsearch with? I'm using the httprequester p…

---

## [How to keep user signed in?](https://discuss.elastic.co/t/how-to-keep-user-signed-in/55039)

<div class="topic-metadata">

**Author:** [@igorgatis](https://discuss.elastic.co/u/igorgatis)\
**Replies:** 1\
**Last updated:** [July 8, 2016, 9:07pm UTC](https://discuss.elastic.co/t/how-to-keep-user-signed-in/55039 "2016-07-08T21:07:35Z")

</div>

I have a set of large screens shown to operations team which keeps asking for credentials when network goes down. Is there a way to (safely) persist credentials so it wont ask over and over?

---

## [Changing the Legends Position](https://discuss.elastic.co/t/changing-the-legends-position/41981)

<div class="topic-metadata">

**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\
**Replies:** 1\
**Last updated:** [February 17, 2016, 6:11pm UTC](https://discuss.elastic.co/t/changing-the-legends-position/41981 "2016-02-17T18:11:41Z")

</div>

Is there any feature in the current version 4.4, to change the position of the graph Legends from right to Bottom, like in MS Excel ..

---

## [Query strategy for stateful event timeseries](https://discuss.elastic.co/t/query-strategy-for-stateful-event-timeseries/35602)

<div class="topic-metadata">

**Author:** [@rrva](https://discuss.elastic.co/u/rrva)\
**Replies:** 1\
**Last updated:** [November 26, 2015, 8:09am UTC](https://discuss.elastic.co/t/query-strategy-for-stateful-event-timeseries/35602 "2015-11-26T08:09:35Z")

</div>

Hello. I am looking for suggestions on a query strategy for the following data model Lets say I use ES to index state change events of a widget (alerts). A widget is identified by an unique id and has a state (green…

---

## [Sort (or group) results from query based on a field](https://discuss.elastic.co/t/sort-or-group-results-from-query-based-on-a-field/18745)

<div class="topic-metadata">

**Author:** [@Michael\_Liang](https://discuss.elastic.co/u/Michael_Liang)\
**Replies:** 1\
**Last updated:** [July 29, 2014, 11:46pm UTC](https://discuss.elastic.co/t/sort-or-group-results-from-query-based-on-a-field/18745 "2014-07-29T23:46:20Z")

</div>

I have a bunch of entries In my elasticsearch db, each with keys 'hostname', 'time\_recorded', 'status', whose values are of type string, int, string. I want to create a query that prints out each entry such that i…

---

## [Cannot retrieve search results in kibana:\[parent\] Data too large, data for \[indices:data/read/async\_search/get\]](https://discuss.elastic.co/t/cannot-retrieve-search-results-in-kibana-parent-data-too-large-data-for-indices-data-read-async-search-get/341514)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 2\
**Last updated:** [August 28, 2023, 10:24am UTC](https://discuss.elastic.co/t/cannot-retrieve-search-results-in-kibana-parent-data-too-large-data-for-indices-data-read-async-search-get/341514 "2023-08-28T10:24:16Z")

</div>

Hello All, I am facing one issue while executing a perl script from logstash and getting data,the data is configured to get from perl script execution through loh=gstash every 30 min. I am unbale to see any data in disc…

---

## [Painlessly turning a string of multiple numbers into multiple fields of numbers](https://discuss.elastic.co/t/painlessly-turning-a-string-of-multiple-numbers-into-multiple-fields-of-numbers/326800)

<div class="topic-metadata">

**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\
**Replies:** 2\
**Last updated:** [March 3, 2023, 10:38am UTC](https://discuss.elastic.co/t/painlessly-turning-a-string-of-multiple-numbers-into-multiple-fields-of-numbers/326800 "2023-03-03T10:38:24Z")

</div>

Hey all, I'm ingesting JSON formatted logs from nginx. The JSON is all ECS style nested fields. I've currently got a need to visualize the upstream response time, http.upstream.response.time. Fundamentally this is a fl…

---

## [Max requests per Keep-Alive Connection](https://discuss.elastic.co/t/max-requests-per-keep-alive-connection/255586)

<div class="topic-metadata">

**Author:** [@Vish\_M](https://discuss.elastic.co/u/Vish_M)\
**Replies:** 2\
**Last updated:** [November 18, 2020, 3:41am UTC](https://discuss.elastic.co/t/max-requests-per-keep-alive-connection/255586 "2020-11-18T03:41:03Z")

</div>

Hello, How can I set the max number of requests that a Keep-Alive Connection can serve before it is closed. I am looking to set the max parameter here. Any pointers in this regard is much appreciated.

---

## [Question about filtering in a visualisation in Kibana](https://discuss.elastic.co/t/question-about-filtering-in-a-visualisation-in-kibana/252652)

<div class="topic-metadata">

**Author:** [@blansdown](https://discuss.elastic.co/u/blansdown)\
**Replies:** 2\
**Last updated:** [October 23, 2020, 9:49am UTC](https://discuss.elastic.co/t/question-about-filtering-in-a-visualisation-in-kibana/252652 "2020-10-23T09:49:55Z")

</div>

Hi, New to Elastic/Kibana and have got a simple question about filtering in a visualisation in Kibana. I have some data stored in a rollup index, and when I visualise it, the y-axis displays 'count', and the buckets are…

---

## [【ダッシュボード】Discoverの表示時間を短縮する方法](https://discuss.elastic.co/t/discover/241250)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [July 16, 2020, 5:09am UTC](https://discuss.elastic.co/t/discover/241250 "2020-07-16T05:09:17Z")

</div>

お世話になります。 Kibana(バージョン7.7)のダッシュボードにて、 Discoverのログ一覧・Visualizeのグラフを複数表示しています。 Discoverのログ一覧の表示時間がかかっているため、 レスポンスを早くするためのチューニングポイントはありますでしょうか？ Discoverの設定値は以下の通りです。 ・検索コンソール…複数のidをor条件で指定 ・23項目をスクリプトフィールドに追加(全てのログ項目…

---

## [Automation Anywhere BOTS Logs Visualisation using KIbana](https://discuss.elastic.co/t/automation-anywhere-bots-logs-visualisation-using-kibana/227296)

<div class="topic-metadata">

**Author:** [@hem\_sai\_chand](https://discuss.elastic.co/u/hem_sai_chand)\
**Replies:** 2\
**Last updated:** [May 4, 2020, 2:51am UTC](https://discuss.elastic.co/t/automation-anywhere-bots-logs-visualisation-using-kibana/227296 "2020-05-04T02:51:13Z")

</div>

Hello techies, We would like to visualize our Automation anywehere bots using Kibana. Bots usually generates different types of logs with good amount of information. This could be a great oppurtunity for me disscuss and…

---

## [Missing authentication token for REST request \[/\_bulk\]](https://discuss.elastic.co/t/missing-authentication-token-for-rest-request--bulk/97706)

<div class="topic-metadata">

**Author:** [@jefry\_he](https://discuss.elastic.co/u/jefry_he)\
**Replies:** 2\
**Last updated:** [August 22, 2017, 10:38am UTC](https://discuss.elastic.co/t/missing-authentication-token-for-rest-request--bulk/97706 "2017-08-22T10:38:10Z")

</div>

ES 5.5.2 error:missing authentication token for REST request \[/\_bulk\]

---

## [HTTPS support to Elasticsearch](https://discuss.elastic.co/t/https-support-to-elasticsearch/57028)

<div class="topic-metadata">

**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\
**Replies:** 2\
**Last updated:** [August 2, 2016, 3:45pm UTC](https://discuss.elastic.co/t/https-support-to-elasticsearch/57028 "2016-08-02T15:45:10Z")

</div>

Elasticsearch queries are not getting executed using https. Please suggest configuration to be done to make elastic search work with https.

---

## [One node frequently goes into 100% CPU and GC loop](https://discuss.elastic.co/t/one-node-frequently-goes-into-100-cpu-and-gc-loop/39948)

<div class="topic-metadata">

**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\
**Replies:** 2\
**Last updated:** [January 24, 2016, 12:06pm UTC](https://discuss.elastic.co/t/one-node-frequently-goes-into-100-cpu-and-gc-loop/39948 "2016-01-24T12:06:04Z")

</div>

ES 2.1.0. I have 3 node cluster, identical config. One node always goes into 100% CPU and continuous GC when I send high traffic. Even if I stop sending any traffic, that node always remains in 100% CPU and continuous GC…

---

## [GC seems to be not working](https://discuss.elastic.co/t/gc-seems-to-be-not-working/25305)

<div class="topic-metadata">

**Author:** [@Fodoj](https://discuss.elastic.co/u/Fodoj)\
**Replies:** 2\
**Last updated:** [July 10, 2015, 9:14pm UTC](https://discuss.elastic.co/t/gc-seems-to-be-not-working/25305 "2015-07-10T21:14:33Z")

</div>

We are meeting serious issues with rather simple Logstash setup and averagely low load (20k requests per minute). The problem is that after Logstash instance is started consumption of memory slowly grows over two-three d…

---

## [Use difference between two numeric values as query criteria in kibana](https://discuss.elastic.co/t/use-difference-between-two-numeric-values-as-query-criteria-in-kibana/347400)

<div class="topic-metadata">

**Author:** [@markus](https://discuss.elastic.co/u/markus)\
**Replies:** 6\
**Last updated:** [November 21, 2023, 10:38am UTC](https://discuss.elastic.co/t/use-difference-between-two-numeric-values-as-query-criteria-in-kibana/347400 "2023-11-21T10:38:09Z")

</div>

Hi, we have a logsource that we are ingesting into kibana using logstash fileinput. The logsource contains amon other things two numerical values. The fields are indexed as numerical values. What I'd like to do is fin…

---

## [Https://docker-auth.elastic.co not working](https://discuss.elastic.co/t/https-docker-auth-elastic-co-not-working/334665)

<div class="topic-metadata">

**Author:** [@ITMBF](https://discuss.elastic.co/u/ITMBF)\
**Replies:** 6\
**Last updated:** [June 22, 2023, 5:01am UTC](https://discuss.elastic.co/t/https-docker-auth-elastic-co-not-working/334665 "2023-06-22T05:01:38Z")

</div>

Hi guys, I am looking to build a ppc64le version of filebeat and try to get the golang-crossbuild containers. In order to do that I want to obtain them from docker.elastic.co/beats-dev/golang-crossbuild:\[TAG\] When run…

---

## [Filebeat processor for single line logs?](https://discuss.elastic.co/t/filebeat-processor-for-single-line-logs/242812)

<div class="topic-metadata">

**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\
**Replies:** 6\
**Last updated:** [August 24, 2020, 4:24pm UTC](https://discuss.elastic.co/t/filebeat-processor-for-single-line-logs/242812 "2020-08-24T16:24:15Z")

</div>

I ran into this threat in Github so I just copy-paste: Steps to Reproduce: Enable Apache module in Filebeat and use the DNS processor; configuration example below: - dns: type: reverse action: append field…

---

## [Server disk broken and recover, but failed to start](https://discuss.elastic.co/t/server-disk-broken-and-recover-but-failed-to-start/242140)

<div class="topic-metadata">

**Author:** [@jinjinbari](https://discuss.elastic.co/u/jinjinbari)\
**Replies:** 6\
**Last updated:** [July 23, 2020, 6:52am UTC](https://discuss.elastic.co/t/server-disk-broken-and-recover-but-failed-to-start/242140 "2020-07-23T06:52:06Z")

</div>

Hello. My server disk was broken and recover now. But the elasticsearch service isn\`t started. Here is my logs. \[2020-07-22T15:54:22,153\]\[INFO \]\[o.e.e.NodeEnvironment \] \[apm-data-node4\] using \[1\] data paths, mount…

---

## [Not the best first impression of new beats development](https://discuss.elastic.co/t/not-the-best-first-impression-of-new-beats-development/205272)

<div class="topic-metadata">

**Author:** [@rmauri](https://discuss.elastic.co/u/rmauri)\
**Replies:** 2\
**Last updated:** [October 28, 2019, 4:15pm UTC](https://discuss.elastic.co/t/not-the-best-first-impression-of-new-beats-development/205272 "2019-10-28T16:15:03Z")

</div>

Greetings, I am just gettings started with Elastic beats development. I have been developing with Golang for a few years and was excited to try to develop my first Helloworldbeat. I allocated a couple hours to the task. …

---

## [Error when using Java REST Client in Android Studio](https://discuss.elastic.co/t/error-when-using-java-rest-client-in-android-studio/180904)

<div class="topic-metadata">

**Author:** [@fmisso](https://discuss.elastic.co/u/fmisso)\
**Replies:** 2\
**Last updated:** [May 21, 2019, 9:44pm UTC](https://discuss.elastic.co/t/error-when-using-java-rest-client-in-android-studio/180904 "2019-05-21T21:44:25Z")

</div>

Hello, I'm trying your Java REST client API in Android Studio. But i have this error Caused by: java.lang.NoSuchFieldError: No field INSTANCE of type Lorg/apache/http/message/BasicLineFormatter; in class Lorg/apache/…

---

## [Forecast limit](https://discuss.elastic.co/t/forecast-limit/137215)

<div class="topic-metadata">

**Author:** [@chrillebile](https://discuss.elastic.co/u/chrillebile)\
**Replies:** 2\
**Last updated:** [April 25, 2019, 4:19pm UTC](https://discuss.elastic.co/t/forecast-limit/137215 "2019-04-25T16:19:40Z")

</div>

Hey! Are you able to change the forecast limit from 8 weeks to something else?

---

## [Reserved underscore field names](https://discuss.elastic.co/t/reserved-underscore-field-names/319212)

<div class="topic-metadata">

**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 12:59am UTC](https://discuss.elastic.co/t/reserved-underscore-field-names/319212 "2022-11-29T00:59:10Z")

</div>

Hello, ELK stack version: v7.x ... latest (Elasticsearch + Kibana + Filebeat) there are fields in the documents like \_id, \_index, \_score, \_type . I would like to add custom fields with names starting with an undersco…

---

## [Get a list of dashboards](https://discuss.elastic.co/t/get-a-list-of-dashboards/233031)

<div class="topic-metadata">

**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\
**Replies:** 3\
**Last updated:** [May 19, 2020, 5:00am UTC](https://discuss.elastic.co/t/get-a-list-of-dashboards/233031 "2020-05-19T05:00:37Z")

</div>

I am trying to get a list of dashboards. Here is my command: curl -u 'elastic:xxxxx' -XGET --cacert /opt/ssl-certs/client-ca.cer -s https://x.x.x.x:9201/.kibana/\_search?type=dashboard&size=40 | grep Metricbeat But all…

---

## [Importing CSV into Kibana and mapping geo\_point](https://discuss.elastic.co/t/importing-csv-into-kibana-and-mapping-geo-point/210848)

<div class="topic-metadata">

**Author:** [@davidmgm-ES](https://discuss.elastic.co/u/davidmgm-ES)\
**Replies:** 3\
**Last updated:** [December 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/importing-csv-into-kibana-and-mapping-geo-point/210848 "2019-12-19T19:04:12Z")

</div>

Hello ES Community. I'm fairly new to ES/Kibana 7.5. I have the following CSV file with 3 columns.; first\_seen, last\_seen and geom. Dropbox link to the CSV file Type of the first two columns are date and type of the …

---

## [PNG Watcher Report not working](https://discuss.elastic.co/t/png-watcher-report-not-working/170039)

<div class="topic-metadata">

**Author:** [@Sean\_Lambert](https://discuss.elastic.co/u/Sean_Lambert)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 2:20pm UTC](https://discuss.elastic.co/t/png-watcher-report-not-working/170039 "2019-03-01T14:20:55Z")

</div>

I'm attempting to use Watcher to generate regularly scheduled dashboard reports. I'd like to have the reports be inline PNG files. None of the ways listed in any documentation I've found seems to work. First I tried s…

---

## [Elastic basic License version ELK use in production server](https://discuss.elastic.co/t/elastic-basic-license-version-elk-use-in-production-server/169772)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 3\
**Last updated:** [February 25, 2019, 9:53am UTC](https://discuss.elastic.co/t/elastic-basic-license-version-elk-use-in-production-server/169772 "2019-02-25T09:53:59Z")

</div>

i saw both apache 2 version and elastic license version when i am downloading ELK. Can i use elastic basic license version ELK for my customer in their production server ? or should i use apache 2.0 versioned ELK ?

---

## [Elasticsearch 6.5.4: Initialising BulkProcessor](https://discuss.elastic.co/t/elasticsearch-6-5-4-initialising-bulkprocessor/162782)

<div class="topic-metadata">

**Author:** [@LGans316](https://discuss.elastic.co/u/LGans316)\
**Replies:** 3\
**Last updated:** [January 3, 2019, 11:22am UTC](https://discuss.elastic.co/t/elasticsearch-6-5-4-initialising-bulkprocessor/162782 "2019-01-03T11:22:19Z")

</div>

Trying to upgrade from 6.4.0 to 6.5.4 and noticed many deprecations. Fixed most of them except for one. This is how the BulkProcessor was initialised in 6.4.0. indexClient is RestHighLevelClient and BulkProcessorListene…

---

## [Use Logstash-input-snmp，cannot receive DELL TEST TRAP](https://discuss.elastic.co/t/use-logstash-input-snmp-cannot-receive-dell-test-trap/143656)

<div class="topic-metadata">

**Author:** [@Uncel\_wang\_shushu](https://discuss.elastic.co/u/Uncel_wang_shushu)\
**Replies:** 3\
**Last updated:** [August 10, 2018, 2:37am UTC](https://discuss.elastic.co/t/use-logstash-input-snmp-cannot-receive-dell-test-trap/143656 "2018-08-10T02:37:10Z")

</div>

Error handling trap: Expected snmpTrapOID.0, found \[name=DELL-RAC-MIB::server3.5.3.1.1.0, value=TST001 (OCTET STRING)\] /data/logstash-6.3.0/vendor/bundle/jruby/2.3.0/gems/snmp-1.2.0/lib/snmp/pdu.rb:293:in trap\_oid' /dat…

---

## [Error with search\_after with java](https://discuss.elastic.co/t/error-with-search-after-with-java/116806)

<div class="topic-metadata">

**Author:** [@Ayshwarya\_sree](https://discuss.elastic.co/u/Ayshwarya_sree)\
**Replies:** 0\
**Last updated:** [January 24, 2018, 6:13am UTC](https://discuss.elastic.co/t/error-with-search-after-with-java/116806 "2018-01-24T06:13:25Z")

</div>

hi, i am using elastic search to produce results for a index based on a sort parameter. Now i want to use a search\_after to retrive fewer records. Search after gets its record from the previous result last hit. for e…

---

## [How to make visualize plugin height auto increated](https://discuss.elastic.co/t/how-to-make-visualize-plugin-height-auto-increated/84954)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 3\
**Last updated:** [May 8, 2017, 4:07pm UTC](https://discuss.elastic.co/t/how-to-make-visualize-plugin-height-auto-increated/84954 "2017-05-08T16:07:39Z")

</div>

kibana 5.4: I write a visualize plugin, and this plugin will dynamically add new element. so the height of this plugin should be increated automatically, but could you please tell me how to make the height auto responsiv…

---

## [Custom Log Level Log4J](https://discuss.elastic.co/t/custom-log-level-log4j/55733)

<div class="topic-metadata">

**Author:** [@pat123](https://discuss.elastic.co/u/pat123)\
**Replies:** 3\
**Last updated:** [July 18, 2016, 3:45pm UTC](https://discuss.elastic.co/t/custom-log-level-log4j/55733 "2016-07-18T15:45:12Z")

</div>

Hello, I would like to have a custom log level for some tests in my code. I using log4j in a java-project. The needed level is created and works in my local console output, but I can not show the log in Kibana. I think …

---

## [File plugin not reading files as expected](https://discuss.elastic.co/t/file-plugin-not-reading-files-as-expected/49844)

<div class="topic-metadata">

**Author:** [@null](https://discuss.elastic.co/u/null)\
**Replies:** 3\
**Last updated:** [May 12, 2016, 5:28am UTC](https://discuss.elastic.co/t/file-plugin-not-reading-files-as-expected/49844 "2016-05-12T05:28:44Z")

</div>

When set 'sincedb\_path' to '/dev/null' and 'start\_position' to 'beginning', logstash does not parse files as expected, it always start and hangs at output below: Settings: Default pipeline workers: 4 Pipeline main start…

---

## [Best way to log ES calls in a cloud environment](https://discuss.elastic.co/t/best-way-to-log-es-calls-in-a-cloud-environment/32399)

<div class="topic-metadata">

**Author:** [@gdeconto](https://discuss.elastic.co/u/gdeconto)\
**Replies:** 3\
**Last updated:** [October 16, 2015, 11:11pm UTC](https://discuss.elastic.co/t/best-way-to-log-es-calls-in-a-cloud-environment/32399 "2015-10-16T23:11:31Z")

</div>

hi all. I have an Elasticsearch cluster (lets call this the data cluster) setup on AWS EC2 servers. I log all calls made to that ES cluster into another AWS ES cluster (lets call this the logging cluster) for tracking…

---

## [How to tell, whether my Logstash instance ready?](https://discuss.elastic.co/t/how-to-tell-whether-my-logstash-instance-ready/26501)

<div class="topic-metadata">

**Author:** [@pradeepfn](https://discuss.elastic.co/u/pradeepfn)\
**Replies:** 3\
**Last updated:** [July 29, 2015, 7:10pm UTC](https://discuss.elastic.co/t/how-to-tell-whether-my-logstash-instance-ready/26501 "2015-07-29T19:10:18Z")

</div>

I want to determine whether my Logstash instance is ready for input data processing. In a manual installation, i look at the start-up logs and figure it out. Now i want to do the same programatically, for an orchestratio…

---

## [Classification with percolator](https://discuss.elastic.co/t/classification-with-percolator/15343)

<div class="topic-metadata">

**Author:** [@Arthur\_Denning](https://discuss.elastic.co/u/Arthur_Denning)\
**Replies:** 3\
**Last updated:** [January 22, 2014, 5:28pm UTC](https://discuss.elastic.co/t/classification-with-percolator/15343 "2014-01-22T17:28:50Z")

</div>

I am considering using the percolator API to classify document, namely, by posting query like "football", "art" to the percolator, and then when adding new documents, percolator should return the right tags. My conce…

---

## [Mapping for dynamic JSON payload](https://discuss.elastic.co/t/mapping-for-dynamic-json-payload/254132)

<div class="topic-metadata">

**Author:** [@akihu](https://discuss.elastic.co/u/akihu)\
**Replies:** 4\
**Last updated:** [November 3, 2020, 11:22am UTC](https://discuss.elastic.co/t/mapping-for-dynamic-json-payload/254132 "2020-11-03T11:22:16Z")

</div>

Good day to everyone! I'm trying to send JSON formated data directly to elasticsearch by using elasticsearch python library but I'm having a fight here with the index mapping. How can one define dynamic mapping to JSON…

---

## [Bootstrap checks failed](https://discuss.elastic.co/t/bootstrap-checks-failed/250679)

<div class="topic-metadata">

**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\
**Replies:** 4\
**Last updated:** [October 1, 2020, 1:11pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/250679 "2020-10-01T13:11:48Z")

</div>

\[2020-10-01T14:44:51,442\]\[INFO \]\[o.e.e.NodeEnvironment \] \[graylogES-1\] using \[1\] data paths, mounts \[\[/opt (/dev/mapper/vg00-lvopt)\]\], net usable\_space \[12.8gb\], net total\_space \[25.4gb\], types \[ext4\] \[2020-10-01T14:…

---

## [Logstash with cloudfront](https://discuss.elastic.co/t/logstash-with-cloudfront/197729)

<div class="topic-metadata">

**Author:** [@M\_H](https://discuss.elastic.co/u/M_H)\
**Replies:** 4\
**Last updated:** [September 5, 2019, 4:09pm UTC](https://discuss.elastic.co/t/logstash-with-cloudfront/197729 "2019-09-05T16:09:21Z")

</div>

Hi, i am facing issue while i am using following code in my logstash config file. my other logs perfectly land into elasticsearch but somehow this filter didn't enter into elasticsearch. If i used following code separ…

---

## [Import data from DB causes OutOfMemory](https://discuss.elastic.co/t/import-data-from-db-causes-outofmemory/142573)

<div class="topic-metadata">

**Author:** [@Isa](https://discuss.elastic.co/u/Isa)\
**Replies:** 4\
**Last updated:** [August 6, 2018, 6:32pm UTC](https://discuss.elastic.co/t/import-data-from-db-causes-outofmemory/142573 "2018-08-06T18:32:37Z")

</div>

Hi i am trying to import data from a postgreSQL DB however it never completes the imports becuase logstash runs out of Memory. If I limit the data in my select statement the data imports successfully. Current JVM Arg -…

---

## [Timelion: Scripted fields not working for "split" when it's applied to different index patterns](https://discuss.elastic.co/t/timelion-scripted-fields-not-working-for-split-when-its-applied-to-different-index-patterns/137250)

<div class="topic-metadata">

**Author:** [@lucas.alvarez](https://discuss.elastic.co/u/lucas.alvarez)\
**Replies:** 4\
**Last updated:** [July 3, 2018, 2:07pm UTC](https://discuss.elastic.co/t/timelion-scripted-fields-not-working-for-split-when-its-applied-to-different-index-patterns/137250 "2018-07-03T14:07:13Z")

</div>

Hello everybody!: The problem I'm experiencing is that apparently scripted fields cannot be aggregated within different patterns. I have 3 index patterns (that group indices of the same type of logs) that contain a fie…

[Previous page](https://discuss.elastic.co/top.md?page=1476&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1478&per_page=50&period=all)
