# Top **URL:** https://discuss.elastic.co/top.md?page=1482&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1483 --- ## [Eror : No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat/173510)
**Author:** [@allfreed](https://discuss.elastic.co/u/allfreed)\ **Replies:** 5\ **Last updated:** [March 25, 2019, 12:40pm UTC](https://discuss.elastic.co/t/eror-no-indices-match-pattern-filebeat/173510 "2019-03-25T12:40:01Z")
No matching indices found: No indices match pattern "filebeat-\*" Hi , I want to get apache access.log but while adding filebeat index pattern show this error. filebeat.yml file tried other beats(metricbeat,packetb… --- ## [How to display images stored per record in Kibana](https://discuss.elastic.co/t/how-to-display-images-stored-per-record-in-kibana/334487)
**Author:** [@damonmaria](https://discuss.elastic.co/u/damonmaria)\ **Replies:** 3\ **Last updated:** [May 28, 2023, 8:03am UTC](https://discuss.elastic.co/t/how-to-display-images-stored-per-record-in-kibana/334487 "2023-05-28T08:03:49Z")
Our records contain URLs to images (stored outside of ES). My goal is to be able to ad-hoc filter for records and then see all these images from the records. The best I've been able to achieve is switching from the Docu… --- ## [Using the Python Mysql Connector](https://discuss.elastic.co/t/using-the-python-mysql-connector/322570)
**Author:** [@andrewhossack](https://discuss.elastic.co/u/andrewhossack)\ **Replies:** 3\ **Last updated:** [January 10, 2023, 4:22am UTC](https://discuss.elastic.co/t/using-the-python-mysql-connector/322570 "2023-01-10T04:22:42Z")
Hello, I am running into issues when using GitHub - elastic/connectors-python: Official Connector Clients for Elastic Elasticsearch, Enterprise Search, App Search and Workplace Search CLI. I am able to run the connector … --- ## [Simpler Vega example?](https://discuss.elastic.co/t/simpler-vega-example/320688)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 3\ **Last updated:** [December 12, 2022, 8:31am UTC](https://discuss.elastic.co/t/simpler-vega-example/320688 "2022-12-12T08:31:55Z")
Hi! I'm new to Kibana and Vega. I'm following this guide: So far so good with the "Data-Driven" graph. I have however a lot of trouble to understand and make the jump to the "Dynamic Data with Elasticsearch and Kibana… --- ## [Kibana failed to start (after upgrade 7.4 \> 7.16)](https://discuss.elastic.co/t/kibana-failed-to-start-after-upgrade-7-4-7-16/293210)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 3\ **Last updated:** [December 31, 2021, 9:01am UTC](https://discuss.elastic.co/t/kibana-failed-to-start-after-upgrade-7-4-7-16/293210 "2021-12-31T09:01:38Z")
Hello, After updating my Elasticsearch nodes from 7.4 to 7.16, I followed the upgrade documentation and upgraded my Kibana node from 7.4 to 7.16 through rpm (rpm -Uvh kibana\[...\].rpm The install process finished and ev… --- ## [Most Efficient way to fetch multiple records by their Id](https://discuss.elastic.co/t/most-efficient-way-to-fetch-multiple-records-by-their-id/288035)
**Author:** [@Spyros\_Giannopoulos](https://discuss.elastic.co/u/Spyros_Giannopoulos)\ **Replies:** 3\ **Last updated:** [November 11, 2021, 4:16pm UTC](https://discuss.elastic.co/t/most-efficient-way-to-fetch-multiple-records-by-their-id/288035 "2021-11-11T16:16:21Z")
Hello, I have a case where I need to fetch a huge number of records but I know already their Id. I'm using c# Nest library. What would be the most efficient way to fetch them? The size of the records can vary from a few… --- ## [Elastic.Apm.StackExchange.Redis Instrumentation Does Not Report Keys](https://discuss.elastic.co/t/elastic-apm-stackexchange-redis-instrumentation-does-not-report-keys/267693)
**Author:** [@Brandon\_Liles](https://discuss.elastic.co/u/Brandon_Liles)\ **Replies:** 3\ **Last updated:** [August 11, 2021, 12:15pm UTC](https://discuss.elastic.co/t/elastic-apm-stackexchange-redis-instrumentation-does-not-report-keys/267693 "2021-08-11T12:15:03Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: dotnet 1.8.1 Browser version: Edge 89 Original install method (e.g. download page, yum, deb, from sou… --- ## [Endpoint Security Integration not working localhost](https://discuss.elastic.co/t/endpoint-security-integration-not-working-localhost/271807)
**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 8:27pm UTC](https://discuss.elastic.co/t/endpoint-security-integration-not-working-localhost/271807 "2021-04-30T20:27:46Z")
I am using elastic-agent 7.12.1 and elasticsearch/kibana docker 7.12.1. Everything is running as https://0.0.0.0 Setup is here if needed: Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/.README.md at master · … --- ## [Failed to send event to MongoDB, retrying in 3 seconds {:event=\>#\, :exception=\>#\ **Author:** [@Ricky\_Tokdis](https://discuss.elastic.co/u/Ricky_Tokdis)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 12:06pm UTC](https://discuss.elastic.co/t/failed-to-send-event-to-mongodb-retrying-in-3-seconds-event-logstash-0x2545634-exception-argumenterror-wrong-number-of-arguments/190424 "2019-07-16T12:06:38Z") How to fix this problem? input { jdbc { jdbc\_driver\_library =\> "/etc/mysql-connector/mysql-connector-java-5.1.46/mysql-connector-java-5.1.46-bin.jar" jdbc\_driver\_class =\> "com.mysql.jdbc.Driver" jdbc\_connection\_stri… --- ## [Anyway to exclude IP ranges in discover?](https://discuss.elastic.co/t/anyway-to-exclude-ip-ranges-in-discover/159622)
**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\ **Replies:** 3\ **Last updated:** [December 6, 2018, 12:17am UTC](https://discuss.elastic.co/t/anyway-to-exclude-ip-ranges-in-discover/159622 "2018-12-06T00:17:32Z")
Hello, I was wondering if there was a way to exclude a whole range of IP's from the discover search area. I can easily exclude a single IP, but I have not been able to find a reliable way to exclude a whole range, is th… --- ## [Automatic XML parsing, how to avoid array creation](https://discuss.elastic.co/t/automatic-xml-parsing-how-to-avoid-array-creation/124572)
**Author:** [@l3m0ntr33](https://discuss.elastic.co/u/l3m0ntr33)\ **Replies:** 3\ **Last updated:** [March 20, 2018, 7:27am UTC](https://discuss.elastic.co/t/automatic-xml-parsing-how-to-avoid-array-creation/124572 "2018-03-20T07:27:34Z")
Hello, I want to parse Windows Event XML Log with logstash. I use MULTILINE input plugin and XML filter but i did not manage to have the output i want. This is my input file: \ **Author:** [@MarkMellar](https://discuss.elastic.co/u/MarkMellar)\ **Replies:** 3\ **Last updated:** [July 24, 2017, 8:00am UTC](https://discuss.elastic.co/t/regexp-matches-when-it-shouldnt-doesnt-match-when-it-should/93996 "2017-07-24T08:00:27Z") Hi there! Pretty new to ES so please bear with me! So, I have an index "dirs" which contains a bunch of documents, each representing a directory in some filesystem. Looks a bit like this... { "settings":{ "number\_… --- ## [Gz file input problem (terminal shows no response)](https://discuss.elastic.co/t/gz-file-input-problem-terminal-shows-no-response/59472)
**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\ **Replies:** 3\ **Last updated:** [September 1, 2016, 7:00pm UTC](https://discuss.elastic.co/t/gz-file-input-problem-terminal-shows-no-response/59472 "2016-09-01T19:00:39Z")
This might be a basic problem. I have the error code of "invalid config" when i try to parse gz file into logstash. Below is my config: input { file { type =\> "gzip" path =\> "/Users/yangyan/Desktop/log\_file/s… --- ## [TF/IDF wihout TF](https://discuss.elastic.co/t/tf-idf-wihout-tf/21407)
**Author:** [@Andrew\_Gaydenko](https://discuss.elastic.co/u/Andrew_Gaydenko)\ **Replies:** 3\ **Last updated:** [December 28, 2014, 12:37am UTC](https://discuss.elastic.co/t/tf-idf-wihout-tf/21407 "2014-12-28T00:37:57Z")
How to turn TF off (that is a single term in a field is the same as multiple ones) in scoring (keeping IDF and field length)? -- You received this message because you are subscribed to the Google Groups "elasticse… --- ## [\[Elasticsearch - Java api \] - How to write the select query for searching text mixed with special characters(John-one) across multiple fields using elasticsearch java api?](https://discuss.elastic.co/t/elasticsearch-java-api-how-to-write-the-select-query-for-searching-text-mixed-with-special-characters-john-one-across-multiple-fields-using-elasticsearch-java-api/15406)
**Author:** [@purna2207](https://discuss.elastic.co/u/purna2207)\ **Replies:** 3\ **Last updated:** [January 27, 2014, 2:10pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-how-to-write-the-select-query-for-searching-text-mixed-with-special-characters-john-one-across-multiple-fields-using-elasticsearch-java-api/15406 "2014-01-27T14:10:31Z")
Hi everybody good afternoon, Please help me to come out of this problem. I spent so much time to resolve this issue but I am not able to succeed. I have two users in my db collection and those names are… --- ## [Efficient Index Concatenation Without Reindexing](https://discuss.elastic.co/t/efficient-index-concatenation-without-reindexing/14229)
**Author:** [@EricMCornelius](https://discuss.elastic.co/u/EricMCornelius)\ **Replies:** 3\ **Last updated:** [November 3, 2013, 8:22am UTC](https://discuss.elastic.co/t/efficient-index-concatenation-without-reindexing/14229 "2013-11-03T08:22:52Z")
Hello all, I am currently working on a project which requires indexing substantial amounts of timeseries event data. Based on the feedback from other projects doing similar work (i.e. Logstash), I've decided to t… --- ## [Multisearch query problems](https://discuss.elastic.co/t/multisearch-query-problems/8049)
**Author:** [@Yorubawarrior](https://discuss.elastic.co/u/Yorubawarrior)\ **Replies:** 3\ **Last updated:** [June 13, 2012, 6:47pm UTC](https://discuss.elastic.co/t/multisearch-query-problems/8049 "2012-06-13T18:47:03Z")
Hi: I am attempting to do multisearch with Elasticsearch and it is causing me problems. I generate my queries using php and also use php curl to interface with my server which is running Elasticsearch 0.19.4. There a… --- ## [Is it possible to have an alias that points two multiple indexes with duplicate IDs with preference ordering?](https://discuss.elastic.co/t/is-it-possible-to-have-an-alias-that-points-two-multiple-indexes-with-duplicate-ids-with-preference-ordering/244480)
**Author:** [@jacobm](https://discuss.elastic.co/u/jacobm)\ **Replies:** 1\ **Last updated:** [August 11, 2020, 7:06am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-an-alias-that-points-two-multiple-indexes-with-duplicate-ids-with-preference-ordering/244480 "2020-08-11T07:06:52Z")
My situation is: I have a big index (let's call it old) that allows search on documents that I derive from information in a relational database. I need to change the index mapping and add data to every document, and the … --- ## [timepicker:quickRanges ignored in Kibana 7.x?](https://discuss.elastic.co/t/timepicker-quickranges-ignored-in-kibana-7-x/194648)
**Author:** [@Kickinsix](https://discuss.elastic.co/u/Kickinsix)\ **Replies:** 1\ **Last updated:** [August 10, 2019, 12:36am UTC](https://discuss.elastic.co/t/timepicker-quickranges-ignored-in-kibana-7-x/194648 "2019-08-10T00:36:29Z")
I'm running Kibana 7.2.0 and the new time picker dropdown is now missing the timepicker:quickRanges list. I would like to know (1) why is the quickRanges not visible anymore and (2) why have the setting if it's not used? … --- ## [Get elasticsearch's indices names - and names only](https://discuss.elastic.co/t/get-elasticsearchs-indices-names-and-names-only/165981)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 1\ **Last updated:** [January 28, 2019, 10:47am UTC](https://discuss.elastic.co/t/get-elasticsearchs-indices-names-and-names-only/165981 "2019-01-28T10:47:32Z")
Hi there. I know that in order to get all indices I need to use: GET /\_cat/indices?v But then I get response body that contains alot of information that I don't need (like index size) and I'm having trouble parsing the… --- ## [What are the pricing for Gold & Platinum Subscriptions?](https://discuss.elastic.co/t/what-are-the-pricing-for-gold-platinum-subscriptions/141379)
**Author:** [@katiyar](https://discuss.elastic.co/u/katiyar)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 1:21pm UTC](https://discuss.elastic.co/t/what-are-the-pricing-for-gold-platinum-subscriptions/141379 "2018-07-24T13:21:58Z")
What are the pricing for Gold & Platinum Subscriptions ? --- ## [Elasticsearch really needs a "update if document exists" ability](https://discuss.elastic.co/t/elasticsearch-really-needs-a-update-if-document-exists-ability/130493)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 1\ **Last updated:** [May 14, 2018, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-really-needs-a-update-if-document-exists-ability/130493 "2018-05-14T08:59:25Z")
Prior to 6.x, I believe something like this would work: {"update":{"\_type":"submission","\_index":"rs\_2018-05","\_id":511393606}} {"script":{"source":"ctx.\_source.num\_comments += params.count","lang":"painless","params":… --- ## [Change Initial Loading GIF Image](https://discuss.elastic.co/t/change-initial-loading-gif-image/111433)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 1\ **Last updated:** [December 14, 2017, 5:57pm UTC](https://discuss.elastic.co/t/change-initial-loading-gif-image/111433 "2017-12-14T17:57:57Z")
Hi- I'm running Kibana with the latest version (6.x), Would someone let me know how do I change the initial loading GIF image. Thanks --- ## [Reverse nested query for filter in aggregations required](https://discuss.elastic.co/t/reverse-nested-query-for-filter-in-aggregations-required/104263)
**Author:** [@david\_](https://discuss.elastic.co/u/david_)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 1:28pm UTC](https://discuss.elastic.co/t/reverse-nested-query-for-filter-in-aggregations-required/104263 "2017-11-03T13:28:29Z")
Let's assume I have a document A with fields a and b, b is a list of nested documents B with fields b1 and b2 Now set up some documents for A: {a:1, b:\[{b1:1, b2:1}, {b1:2, b2:2}\] } {a:2, b:\[{b1:3, b2:1}, {b1:4, b2:2… --- ## [Case insensitive search on index:"not\_analyzed"](https://discuss.elastic.co/t/case-insensitive-search-on-index-not-analyzed/56951)
**Author:** [@Lavakush](https://discuss.elastic.co/u/Lavakush)\ **Replies:** 1\ **Last updated:** [August 2, 2016, 5:50am UTC](https://discuss.elastic.co/t/case-insensitive-search-on-index-not-analyzed/56951 "2016-08-02T05:50:54Z")
Hi All, I have fields whose indexes like "index":"not\_analyzed" on these kinds of fields searching has become case sensitive. Is there any way to make it case insensitive? Thanks Lavakush --- ## [Set @timestamp manually](https://discuss.elastic.co/t/set-timestamp-manually/36176)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 1\ **Last updated:** [December 2, 2015, 5:48pm UTC](https://discuss.elastic.co/t/set-timestamp-manually/36176 "2015-12-02T17:48:53Z")
Hi, Currently we use the logstash date filter to match our timestamp field (named \_time) using this config: date { match =\> \["\_time", "UNIX\_MS"\] remove\_field =\> \["\_time"\] } I see that all this … --- ## [Logstash-forwarder category?](https://discuss.elastic.co/t/logstash-forwarder-category/367)
**Author:** [@allenmchan](https://discuss.elastic.co/u/allenmchan)\ **Replies:** 1\ **Last updated:** [May 8, 2015, 10:03am UTC](https://discuss.elastic.co/t/logstash-forwarder-category/367 "2015-05-08T10:03:49Z")
Should discussions about logstash-forwarder go under logstash? Seems like two separate software so maybe logstash-forwarder should have it's own category. --- ## [UpdateRequest with JSON in JavaAPIClient getting parsing error](https://discuss.elastic.co/t/updaterequest-with-json-in-javaapiclient-getting-parsing-error/352533)
**Author:** [@Krishna\_Sailesh](https://discuss.elastic.co/u/Krishna_Sailesh)\ **Replies:** 4\ **Last updated:** [February 6, 2024, 12:02pm UTC](https://discuss.elastic.co/t/updaterequest-with-json-in-javaapiclient-getting-parsing-error/352533 "2024-02-06T12:02:04Z")
I am trying to update the existing record with Java API client but getting the below issue. index record json { "docId": "1", "id": 1, "name": "aegon", "details": { "id":1234 } } // update json Str… --- ## ["Azure Data Explorer" output plugin error](https://discuss.elastic.co/t/azure-data-explorer-output-plugin-error/294197)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 4\ **Last updated:** [January 13, 2022, 2:45am UTC](https://discuss.elastic.co/t/azure-data-explorer-output-plugin-error/294197 "2022-01-13T02:45:11Z")
Hello All, Using the kusto output plugin for Azure Data explorer I did a successful test with the example as per the documentation below References: Ingest data from Logstash to Azure Data Explorer | Microsoft Docs G… --- ## [Trouble configuring datastore](https://discuss.elastic.co/t/trouble-configuring-datastore/242206)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 4\ **Last updated:** [July 22, 2020, 2:51pm UTC](https://discuss.elastic.co/t/trouble-configuring-datastore/242206 "2020-07-22T14:51:50Z")
I am unable to use an existing elasticsearch cluster as a datastore. I am unable to find how to disable certificate verification for the datastore, thus the only way I can run rally is to use the in-memory datastore. I … --- ## [Repository verification exception when registering new ES snapshot](https://discuss.elastic.co/t/repository-verification-exception-when-registering-new-es-snapshot/237473)
**Author:** [@cpb14pk](https://discuss.elastic.co/u/cpb14pk)\ **Replies:** 4\ **Last updated:** [June 17, 2020, 1:53pm UTC](https://discuss.elastic.co/t/repository-verification-exception-when-registering-new-es-snapshot/237473 "2020-06-17T13:53:00Z")
Hi, I am trying to snapshot an elasticsearch repository. I have three different nodes across three different centos servers, e.g. 10.212.145.10, 10.212.145.20, 10.212.145.30. I have added the path.repo field in my ela… --- ## [EventID 4801 and 4800 are not getting visualised in Kibana through Winlogbeat](https://discuss.elastic.co/t/eventid-4801-and-4800-are-not-getting-visualised-in-kibana-through-winlogbeat/154625)
**Author:** [@SunilT](https://discuss.elastic.co/u/SunilT)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 6:38am UTC](https://discuss.elastic.co/t/eventid-4801-and-4800-are-not-getting-visualised-in-kibana-through-winlogbeat/154625 "2018-11-01T06:38:18Z")
I have configured the winlogbeat.yml file to take EventID:4801,4800,4624,4625, but when I am checking on Kibana, it is showing me logs of EventID:4625 and 4624. No logs are getting generated for EventId: 4800 and 4801. I… --- ## [Can Filebeat halt on failed published event?](https://discuss.elastic.co/t/can-filebeat-halt-on-failed-published-event/149956)
**Author:** [@tunder](https://discuss.elastic.co/u/tunder)\ **Replies:** 4\ **Last updated:** [September 30, 2018, 10:43am UTC](https://discuss.elastic.co/t/can-filebeat-halt-on-failed-published-event/149956 "2018-09-30T10:43:21Z")
Hi, Is there such an option to stop publishing (anything new) when output fails for whatever reason? To give an example My Filebeat config (minimal) is like this: filebeat.prospectors: - type: log json.keys\_under\_r… --- ## [SQL Access is missing in X-pack](https://discuss.elastic.co/t/sql-access-is-missing-in-x-pack/138933)
**Author:** [@wrahmouni](https://discuss.elastic.co/u/wrahmouni)\ **Replies:** 4\ **Last updated:** [July 11, 2018, 7:54am UTC](https://discuss.elastic.co/t/sql-access-is-missing-in-x-pack/138933 "2018-07-11T07:54:10Z")
Hi, After installing elasticsearch, I wanted to use the functionalities provided by SQL access, but unfortunately I could enable it. I'm using the basic license. When I want to run this instruction in kibana POST /\_xpa… --- ## [Kibana crashes nodes when doing an aggregation](https://discuss.elastic.co/t/kibana-crashes-nodes-when-doing-an-aggregation/110703)
**Author:** [@HockeyFan0000](https://discuss.elastic.co/u/HockeyFan0000)\ **Replies:** 4\ **Last updated:** [December 7, 2017, 4:31pm UTC](https://discuss.elastic.co/t/kibana-crashes-nodes-when-doing-an-aggregation/110703 "2017-12-07T16:31:07Z")
We use Graylog to gather our logs because we found out about it before we found ELK. We're going to migrate to ELK, but we've got issues with Kibana to solve first. Graylog can do a search on our 100 top log sources in… --- ## [Grok for - \[BT:CHROME, BV:55, BL:en, CC:CZ\]](https://discuss.elastic.co/t/grok-for-bt-chrome-bv-55-bl-en-cc-cz/85962)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 4\ **Last updated:** [May 19, 2017, 6:48pm UTC](https://discuss.elastic.co/t/grok-for-bt-chrome-bv-55-bl-en-cc-cz/85962 "2017-05-19T18:48:30Z")
Hi , i am trying to capture the while block in the grok along with the square brackets \[\] . The grok filter field should be displaying the data with the pattern inside it . Can someone please advise what should be grok f… --- ## [Logstash input for oracle database](https://discuss.elastic.co/t/logstash-input-for-oracle-database/301683)
**Author:** [@altink](https://discuss.elastic.co/u/altink)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 9:46pm UTC](https://discuss.elastic.co/t/logstash-input-for-oracle-database/301683 "2022-04-06T21:46:29Z")
I have an Bitnami virtual ova distribution, ELK 7.17 on Debian 10. Elastic, Kibana and Logstash run as services (daemons). I have put the logstash config file logstash-ora-01.conf under /opt/bitnami/logstash/config in… --- ## [키바나 대시보드에서 필터를 자동으로 지정할 수 있는 방법이 있을까요?](https://discuss.elastic.co/t/topic/284147)
**Author:** [@YJK](https://discuss.elastic.co/u/YJK)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 4:52am UTC](https://discuss.elastic.co/t/topic/284147 "2021-09-30T04:52:12Z")
혹시 키바나 대시보드를 이용할 때 필터를 수동으로 지정하지 않고 자동으로 지정되도록 할 수 있는 방법이 있을까요? 예를 들면 metric data를 활용하여 visualize를 만들고 대시보드에서 그래프 형태로 볼 때, (어떤 방법을 통해 특정 id값을 전달해주면) 대시보드에서 특정 id값을 가진 데이터의 그래프가 자동으로 보이도록 하고 싶습니다. (특정 id값은 정해둘 수 없고 늘 … --- ## [Using Filebeat to fetch CrowdStrike Falcon Data Replicator (FDR) logs with S3 SQS](https://discuss.elastic.co/t/using-filebeat-to-fetch-crowdstrike-falcon-data-replicator-fdr-logs-with-s3-sqs/276395)
**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 8:37pm UTC](https://discuss.elastic.co/t/using-filebeat-to-fetch-crowdstrike-falcon-data-replicator-fdr-logs-with-s3-sqs/276395 "2021-06-21T20:37:31Z")
I'm interested in using Filebeat to fetch CrowdStrike Falcon Data Replicator (FDR) logs with the aws-s3 plugin, and use its parallel processing functionality due to the sheer volume of data FDR produces. But I'm running… --- ## [Text Formatting](https://discuss.elastic.co/t/text-formatting/234034)
**Author:** [@Nav12](https://discuss.elastic.co/u/Nav12)\ **Replies:** 2\ **Last updated:** [May 24, 2020, 3:24pm UTC](https://discuss.elastic.co/t/text-formatting/234034 "2020-05-24T15:24:38Z")
Hi, This is probably not a Kibana issue (great start!)....or atleast the answer doesn't lie in Kibana....i dont know. When I search for my data sitting in elasticsearch using the Console in Kibana - there is a text fie… --- ## [Kibana起動時に「 Setup lifecycle of "apm" plugin wasn't completed in 30sec.」というエラーが出て起動できません。](https://discuss.elastic.co/t/kibana-setup-lifecycle-of-apm-plugin-wasnt-completed-in-30sec/221374)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 7:57am UTC](https://discuss.elastic.co/t/kibana-setup-lifecycle-of-apm-plugin-wasnt-completed-in-30sec/221374 "2020-03-02T07:57:41Z")
windows環境でpowershellからkibana起動時(kibana.bat実行時)に、 FATAL Error: Setup lifecycle of "apm" plugin wasn't completed in 30sec. Consider disabling the plugin and re-start. というエラーが出力され、起動できなくなりました。 対処方法などございましたら、ご教授いただけると嬉… --- ## [Value of .keyword in discover for existing indices](https://discuss.elastic.co/t/value-of-keyword-in-discover-for-existing-indices/180030)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [May 8, 2019, 3:52pm UTC](https://discuss.elastic.co/t/value-of-keyword-in-discover-for-existing-indices/180030 "2019-05-08T15:52:46Z")
Hi, I have existing indices with type text and .keyword. I do not see value of .keyword in discover. How can I see the value for .keyword in discover? I see only one option - reindex old indices with new mapping . Is… --- ## [Reindex to version 6 and unknown error parsing response](https://discuss.elastic.co/t/reindex-to-version-6-and-unknown-error-parsing-response/178900)
**Author:** [@magorbe](https://discuss.elastic.co/u/magorbe)\ **Replies:** 2\ **Last updated:** [April 29, 2019, 11:01am UTC](https://discuss.elastic.co/t/reindex-to-version-6-and-unknown-error-parsing-response/178900 "2019-04-29T11:01:13Z")
Hello. When i do reindex i have this error : {"error":{"root\_cause":\[{"type":"exception","reason":"Error parsing the response, remote is likely not an Elasticsearch instance"}\],"type":"exception","reason":"Error parsin… --- ## [How is memory usage calculated](https://discuss.elastic.co/t/how-is-memory-usage-calculated/167274)
**Author:** [@osykora](https://discuss.elastic.co/u/osykora)\ **Replies:** 2\ **Last updated:** [February 6, 2019, 3:25pm UTC](https://discuss.elastic.co/t/how-is-memory-usage-calculated/167274 "2019-02-06T15:25:36Z")
Hi, I'd like to understand how ECE console calculates memory usage per node, because the numbers don't add up for me. I will describe my situation: I have a cluster, 7 GB ram per node. ECE shows me 70 % JVM memory used… --- ## [Kibana BAD Request on index pattern creation and use](https://discuss.elastic.co/t/kibana-bad-request-on-index-pattern-creation-and-use/110127)
**Author:** [@Noam](https://discuss.elastic.co/u/Noam)\ **Replies:** 2\ **Last updated:** [December 7, 2017, 1:51pm UTC](https://discuss.elastic.co/t/kibana-bad-request-on-index-pattern-creation-and-use/110127 "2017-12-07T13:51:14Z")
Hello, after upgrading ELK from 4.5 to 5.4.3 we encountered the following error, while trying to use or create some of the index patterns: Request to Elasticsearch failed: Bad Request. I found this related similar to… --- ## [Fail to start elasticsearch that is installed as non admin user on Centos 7 max file descriptors \[4096\] for elasticsearch process is too low, increase to at least \[65536\]](https://discuss.elastic.co/t/fail-to-start-elasticsearch-that-is-installed-as-non-admin-user-on-centos-7-max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65536/92241)
**Author:** [@Cristina](https://discuss.elastic.co/u/Cristina)\ **Replies:** 2\ **Last updated:** [July 7, 2017, 2:36pm UTC](https://discuss.elastic.co/t/fail-to-start-elasticsearch-that-is-installed-as-non-admin-user-on-centos-7-max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65536/92241 "2017-07-07T14:36:56Z")
Hello guys, I have installed jdk1.8.0\_131,elasticsearch-5.4.2 along with logstash 5.4.2 ,kibana 5.4.2 and X-Pack 5.4.2 for a non-admin user on Centos 7. I made also some configuration for elasticsearch. When trying to s… --- ## [Geo\_distance sort shapes](https://discuss.elastic.co/t/geo-distance-sort-shapes/74112)
**Author:** [@juanpujol](https://discuss.elastic.co/u/juanpujol)\ **Replies:** 2\ **Last updated:** [February 7, 2017, 3:45pm UTC](https://discuss.elastic.co/t/geo-distance-sort-shapes/74112 "2017-02-07T15:45:35Z")
What's the best way to sort by distance documents found by the geo\_shape query? Example, I'm running this query and I'll like to sort the documents found by the distance to the nearest point of a shape. GET /gsp/\_sea… --- ## [Can i survive without replication in elastic search?](https://discuss.elastic.co/t/can-i-survive-without-replication-in-elastic-search/72155)
**Author:** [@abhishekash](https://discuss.elastic.co/u/abhishekash)\ **Replies:** 2\ **Last updated:** [January 20, 2017, 4:46am UTC](https://discuss.elastic.co/t/can-i-survive-without-replication-in-elastic-search/72155 "2017-01-20T04:46:52Z")
0 down vote favorite I have gone through several documents but have not found much information on the following : 1) Can i survive with 0 replica shards ? We have tonnes of data and right now dont have enough infra to … --- ## [Oracle column date value is automatically getting converted by logstash to UTC zone](https://discuss.elastic.co/t/oracle-column-date-value-is-automatically-getting-converted-by-logstash-to-utc-zone/53669)
**Author:** [@KiranG](https://discuss.elastic.co/u/KiranG)\ **Replies:** 2\ **Last updated:** [June 23, 2016, 5:06am UTC](https://discuss.elastic.co/t/oracle-column-date-value-is-automatically-getting-converted-by-logstash-to-utc-zone/53669 "2016-06-23T05:06:42Z")
Hi, Logstash is modifying the data while writing to elastic search. There is a date column in oracle database with time in it. when I am pulling it using logstash2.1.0 to Elasticsearch, the time value is getting conv… --- ## [Topbeat leaks handles on Windows](https://discuss.elastic.co/t/topbeat-leaks-handles-on-windows/34704)
**Author:** [@lrolsen](https://discuss.elastic.co/u/lrolsen)\ **Replies:** 2\ **Last updated:** [November 16, 2015, 11:14pm UTC](https://discuss.elastic.co/t/topbeat-leaks-handles-on-windows/34704 "2015-11-16T23:14:20Z")
Topbeat seems to be leaking handles on Windows (2012R2). After running for appx. 12hours on a box with 16GB memory the taskmanager shows more than 250.000 handles (see screenshot below). After we kill the topbeat process… [Previous page](https://discuss.elastic.co/top.md?page=1481&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1483&per_page=50&period=all)