# Top

**URL:** https://discuss.elastic.co/top.md?page=1486&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1487

---

## [Question about create data view API](https://discuss.elastic.co/t/question-about-create-data-view-api/308530)

<div class="topic-metadata">

**Author:** [@busishe](https://discuss.elastic.co/u/busishe)\
**Replies:** 4\
**Last updated:** [July 5, 2022, 1:20am UTC](https://discuss.elastic.co/t/question-about-create-data-view-api/308530 "2022-07-05T01:20:32Z")

</div>

i want to create a dataview with only "message" field,how can i make the post request? the example only show "fields" is an object,but didnt tell the detail properties in the object. $ curl -X POST api/data\_views/dat…

---

## [Attachments on ELK](https://discuss.elastic.co/t/attachments-on-elk/256717)

<div class="topic-metadata">

**Author:** [@AChopra](https://discuss.elastic.co/u/AChopra)\
**Replies:** 4\
**Last updated:** [November 26, 2020, 10:07am UTC](https://discuss.elastic.co/t/attachments-on-elk/256717 "2020-11-26T10:07:35Z")

</div>

Hello, I have some attachments which need to be ingested into elastic. There are of varying types i.e PDF, TXT, CSV, XLS, DOC, MSG (Outlook emails). As far as I could find out , I got to know that I can use Ingest Att…

---

## [How many users' traffic can be handled by one kibana instance?](https://discuss.elastic.co/t/how-many-users-traffic-can-be-handled-by-one-kibana-instance/255932)

<div class="topic-metadata">

**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\
**Replies:** 4\
**Last updated:** [November 19, 2020, 5:25pm UTC](https://discuss.elastic.co/t/how-many-users-traffic-can-be-handled-by-one-kibana-instance/255932 "2020-11-19T17:25:33Z")

</div>

we have implemented a ES cluster with 4 nodes; out of 4, 3 nodes are master eligible nodes and also those nodes are data nodes, 4th node is a data node and also marked as a ingest node. We use this cluster for logs. We …

---

## [Error building Kibana RPM package (6.4.2)](https://discuss.elastic.co/t/error-building-kibana-rpm-package-6-4-2/152371)

<div class="topic-metadata">

**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Replies:** 4\
**Last updated:** [October 21, 2018, 2:09am UTC](https://discuss.elastic.co/t/error-building-kibana-rpm-package-6-4-2/152371 "2018-10-21T02:09:55Z")

</div>

Hi, I'm trying to build Kibana into an RPM. I keep getting an error from FPM, saying the 'target' directory doesn't exist. Trying to get around this, I manually create the 'target' before doing the build. Unfortunately,…

---

## [Same message being sent twice](https://discuss.elastic.co/t/same-message-being-sent-twice/141893)

<div class="topic-metadata">

**Author:** [@xShadow](https://discuss.elastic.co/u/xShadow)\
**Replies:** 4\
**Last updated:** [July 27, 2018, 8:13am UTC](https://discuss.elastic.co/t/same-message-being-sent-twice/141893 "2018-07-27T08:13:47Z")

</div>

Hi, I am not sure if I should place this topic under logstash or elasticsearch but I was testing the function of sending logs from logstash to elasticsearch and I noticed that the same message appears twice in the elast…

---

## [X-pack licence is activae but API status gives](https://discuss.elastic.co/t/x-pack-licence-is-activae-but-api-status-gives/141290)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 4\
**Last updated:** [July 24, 2018, 8:08pm UTC](https://discuss.elastic.co/t/x-pack-licence-is-activae-but-api-status-gives/141290 "2018-07-24T20:08:02Z")

</div>

Hello Community, I have configured X-pack and I can see my trail was started in elasticsearch logs and through API as well, { "license": { "status": "active", "uid": "29afaf59-69c5-427b-bf3e-60f11ff05087",…

---

## [Document-level security query params](https://discuss.elastic.co/t/document-level-security-query-params/108693)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 4\
**Last updated:** [November 27, 2017, 8:27am UTC](https://discuss.elastic.co/t/document-level-security-query-params/108693 "2017-11-27T08:27:02Z")

</div>

Hi all, I am new in x-pack security module. I was wondering, I can use parameters having in the main query inside Doc-level query. Actually, what I want to do is: Having application level users which are different fro…

---

## [LS loosing messages with persisted queue](https://discuss.elastic.co/t/ls-loosing-messages-with-persisted-queue/93868)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 4\
**Last updated:** [July 31, 2017, 7:11pm UTC](https://discuss.elastic.co/t/ls-loosing-messages-with-persisted-queue/93868 "2017-07-31T19:11:59Z")

</div>

Hello Logstash experts, I've encountered a very weird issue: I was indexing a database using the JDBC input, but realized, what the document count in ES was less than in the source table. It tuned out, that the reason …

---

## [Trying to Enable dynamic scripting](https://discuss.elastic.co/t/trying-to-enable-dynamic-scripting/80044)

<div class="topic-metadata">

**Author:** [@Bumblebee](https://discuss.elastic.co/u/Bumblebee)\
**Replies:** 4\
**Last updated:** [March 27, 2017, 11:32am UTC](https://discuss.elastic.co/t/trying-to-enable-dynamic-scripting/80044 "2017-03-27T11:32:02Z")

</div>

Hi, Following this document https://www.elastic.co/guide/en/elasticsearch/reference/2.4/modules-scripting.html I added the following lines to the end of the config/elasticsearch.yml file. script.inline: true script.i…

---

## [Transport client document insert with version 1.5 string is splitting with space](https://discuss.elastic.co/t/transport-client-document-insert-with-version-1-5-string-is-splitting-with-space/42873)

<div class="topic-metadata">

**Author:** [@Shashi-GS](https://discuss.elastic.co/u/Shashi-GS)\
**Replies:** 4\
**Last updated:** [June 23, 2016, 11:34am UTC](https://discuss.elastic.co/t/transport-client-document-insert-with-version-1-5-string-is-splitting-with-space/42873 "2016-06-23T11:34:57Z")

</div>

elastic search transport client document insert is splitting the word with space. e.g., Sachin Tendulkar is splitted as Sachin and Tendulkar two words. When we query I am getting the first word only. Please let me k…

---

## [Connect multiple logstash to single elastic search](https://discuss.elastic.co/t/connect-multiple-logstash-to-single-elastic-search/36748)

<div class="topic-metadata">

**Author:** [@tejus](https://discuss.elastic.co/u/tejus)\
**Replies:** 4\
**Last updated:** [December 9, 2015, 2:57pm UTC](https://discuss.elastic.co/t/connect-multiple-logstash-to-single-elastic-search/36748 "2015-12-09T14:57:16Z")

</div>

i have an elastic search instance in found and i want to push data from different servers where logstash is running. these logstash instances are in different countries. will it work ??

---

## [Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-206)](https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-206/391360)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [November 3, 2026, 4:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-206/391360 "2026-11-03T16:28:24Z")

</div>

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Function…

---

## [Logstash JDBC plugin maintain state in database instead of file](https://discuss.elastic.co/t/logstash-jdbc-plugin-maintain-state-in-database-instead-of-file/321106)

<div class="topic-metadata">

**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 9:50am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-maintain-state-in-database-instead-of-file/321106 "2022-12-13T09:50:40Z")

</div>

Hi all, I am wondering if it would be possible to maintain the sql\_last\_value in a database instead of a .yml file? This would be beneficial in my case, because it is easier accessible for modification and initializatio…

---

## [What is the maximum number of indices allowed in elasticsearch?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793)

<div class="topic-metadata">

**Author:** [@raqeeb](https://discuss.elastic.co/u/raqeeb)\
**Replies:** 1\
**Last updated:** [April 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793 "2022-04-26T01:39:32Z")

</div>

I am using MySQL for storing data in my software. We have to generate hundreds of reports using the data and it is taking more time when the size of data in increasing. For some reports it is taking 1 or 2 minutes. So we…

---

## [Index filled EC2 completely, manually deleted nodes, no longer able to start Elasticsearch](https://discuss.elastic.co/t/index-filled-ec2-completely-manually-deleted-nodes-no-longer-able-to-start-elasticsearch/300221)

<div class="topic-metadata">

**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\
**Replies:** 7\
**Last updated:** [March 22, 2022, 2:18pm UTC](https://discuss.elastic.co/t/index-filled-ec2-completely-manually-deleted-nodes-no-longer-able-to-start-elasticsearch/300221 "2022-03-22T14:18:02Z")

</div>

I recently had an issue where I was ingesting data from S3 via Logstash and the S3 Input Plugin (aka the pipeline feature) into my AWS EC2 instance running ELK 7.5.2. Overnight, the index filled up my entire EC2 storage…

---

## [Kibana Build failure](https://discuss.elastic.co/t/kibana-build-failure/252841)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 1\
**Last updated:** [October 22, 2020, 7:34am UTC](https://discuss.elastic.co/t/kibana-build-failure/252841 "2020-10-22T07:34:01Z")

</div>

Hello, I am trying to build Kibana from the code source and I am facing this errors ( I got these errors after I run git pull, before that I built it and I had no problem ) yarn kbn bootstrap : warning Error running i…

---

## [Elasticsearch not populating timestamp / unable to change timestamp filter in kibana visualization](https://discuss.elastic.co/t/elasticsearch-not-populating-timestamp-unable-to-change-timestamp-filter-in-kibana-visualization/229411)

<div class="topic-metadata">

**Author:** [@bobonacus](https://discuss.elastic.co/u/bobonacus)\
**Replies:** 1\
**Last updated:** [April 23, 2020, 12:56pm UTC](https://discuss.elastic.co/t/elasticsearch-not-populating-timestamp-unable-to-change-timestamp-filter-in-kibana-visualization/229411 "2020-04-23T12:56:05Z")

</div>

I have Elasticsearch / Kibana 7.6.2 running in docker I originally loaded a new index from a csv file using kibana upload import csv which created the new index I've created dozens of visualizations on a dashboard whic…

---

## [Date Range - custom labels](https://discuss.elastic.co/t/date-range-custom-labels/216992)

<div class="topic-metadata">

**Author:** [@fgbogdan](https://discuss.elastic.co/u/fgbogdan)\
**Replies:** 1\
**Last updated:** [January 29, 2020, 8:28pm UTC](https://discuss.elastic.co/t/date-range-custom-labels/216992 "2020-01-29T20:28:14Z")

</div>

I use a vertical chart visualization with Date Range like in the image How can I display the "Legend" into a nicer format ... now it is somehow unreadable. Maybe adding a Label for each Range value ?

---

## [Elastalert: Problem with @timestamp field](https://discuss.elastic.co/t/elastalert-problem-with-timestamp-field/150830)

<div class="topic-metadata">

**Author:** [@ashwinid](https://discuss.elastic.co/u/ashwinid)\
**Replies:** 1\
**Last updated:** [October 4, 2018, 8:47am UTC](https://discuss.elastic.co/t/elastalert-problem-with-timestamp-field/150830 "2018-10-04T08:47:58Z")

</div>

I am installing elastalert (version :0.1.33) on the linux (7.5) server where my elasticsearch(6.4) is also installed. I am not able to send the alert messages at the real time. My timezone is UTC+5.30 and elastalert send…

---

## [Force merge on read\_only index yields error](https://discuss.elastic.co/t/force-merge-on-read-only-index-yields-error/136528)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 1\
**Last updated:** [June 20, 2018, 5:46pm UTC](https://discuss.elastic.co/t/force-merge-on-read-only-index-yields-error/136528 "2018-06-20T17:46:28Z")

</div>

I'm looking to manage some of our old indices by making them read only and force merging them down to one segment. According to https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-forcemerge.html I…

---

## [Interger field showing as string](https://discuss.elastic.co/t/interger-field-showing-as-string/120988)

<div class="topic-metadata">

**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\
**Replies:** 7\
**Last updated:** [February 22, 2018, 7:36am UTC](https://discuss.elastic.co/t/interger-field-showing-as-string/120988 "2018-02-22T07:36:33Z")

</div>

GROK grok { match =\> \[ # IOS "message", "%{IP:host\_nagios}: Nagios-Log device\_id=%{WORD:hostname} rtt=%{NUMBER:RTT} avgSD=%{NUMBER:SDLATENCY} avgDS=% {NUMBER:DSLATENCY} syslog\_sev\_level=%{INT:syslo…

---

## [From Elasticsearch Regex to Java Pattern](https://discuss.elastic.co/t/from-elasticsearch-regex-to-java-pattern/76106)

<div class="topic-metadata">

**Author:** [@jdh2550](https://discuss.elastic.co/u/jdh2550)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 3:22pm UTC](https://discuss.elastic.co/t/from-elasticsearch-regex-to-java-pattern/76106 "2017-02-23T15:22:50Z")

</div>

Hi, Does anyone know if there's an easy way to go from ES's flavor of Regex to Java's? For example, if I understand the documentation correctly: 1) the ES pattern /"some\\doslike\\path"/ would match some\\doslike\\path…

---

## [How to convert string to date in logstash](https://discuss.elastic.co/t/how-to-convert-string-to-date-in-logstash/57914)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [August 12, 2016, 11:24am UTC](https://discuss.elastic.co/t/how-to-convert-string-to-date-in-logstash/57914 "2016-08-12T11:24:00Z")

</div>

HI, I want to convert my string field into date field how could i perform that in logstash coding.

---

## [Elasticsearch TransportClient singleton instance](https://discuss.elastic.co/t/elasticsearch-transportclient-singleton-instance/16887)

<div class="topic-metadata">

**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\
**Replies:** 1\
**Last updated:** [April 9, 2014, 9:26pm UTC](https://discuss.elastic.co/t/elasticsearch-transportclient-singleton-instance/16887 "2014-04-09T21:26:06Z")

</div>

Hi, I'm trying to use a singleton instance of client for multiple index creation. Below is the code for the same. But every time I'm getting instance as null and it's creating a new instance. Please let me know wh…

---

## [How to use Kibana API in plugin development](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 3\
**Last updated:** [December 7, 2021, 4:55pm UTC](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131 "2021-12-07T16:55:32Z")

</div>

Hi there, we're trying to develop a custom plugin and we're stuck when it comes to call a Kibana APIs. We can import the RequestHandlerContext interface to provide a context we can use to call Elasticsearch APIs, but w…

---

## [Security -\> Administration Page not getting past Enrollment](https://discuss.elastic.co/t/security-administration-page-not-getting-past-enrollment/246125)

<div class="topic-metadata">

**Author:** [@nicpenning](https://discuss.elastic.co/u/nicpenning)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 11:19am UTC](https://discuss.elastic.co/t/security-administration-page-not-getting-past-enrollment/246125 "2020-10-30T11:19:36Z")

</div>

Hello, We have been testing the new Elastic Agent and Endpoint security functionality introduced in 7.9.0. We have an agent already enrolled by the Administration page keeps prompting use to enroll the agent. We can va…

---

## [Alerting passing from Fired==\>OK](https://discuss.elastic.co/t/alerting-passing-from-fired-ok/224603)

<div class="topic-metadata">

**Author:** [@pasqualecapalbo](https://discuss.elastic.co/u/pasqualecapalbo)\
**Replies:** 8\
**Last updated:** [April 6, 2020, 1:15pm UTC](https://discuss.elastic.co/t/alerting-passing-from-fired-ok/224603 "2020-04-06T13:15:30Z")

</div>

Hi All, I'm trying to implement a simple watcher that send an email when trigger itself change from Fired to OK status; I'm looking in .watcher-history\* index to find some useful column, but didn't find any clue. Can y…

---

## [If statement is not working for a certain path \[log\]\[file\]\[path\]](https://discuss.elastic.co/t/if-statement-is-not-working-for-a-certain-path-log-file-path/192976)

<div class="topic-metadata">

**Author:** [@nitzanm](https://discuss.elastic.co/u/nitzanm)\
**Replies:** 3\
**Last updated:** [July 31, 2019, 12:50pm UTC](https://discuss.elastic.co/t/if-statement-is-not-working-for-a-certain-path-log-file-path/192976 "2019-07-31T12:50:24Z")

</div>

can you please help me understand why this "if" is not working on this path? this path comes from filebeat to logstash: "E:\\OUM82\\EGGED\\TI\_DS\_FILES\\INFASQLS\_LOGS\\INFASQLS-Extractor-legacy\_BI\_Repository-28072019.log" i…

---

## [How to display two lines for same field but from different hosts in same visualization?](https://discuss.elastic.co/t/how-to-display-two-lines-for-same-field-but-from-different-hosts-in-same-visualization/152153)

<div class="topic-metadata">

**Author:** [@pramodchoudhari](https://discuss.elastic.co/u/pramodchoudhari)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 10:33pm UTC](https://discuss.elastic.co/t/how-to-display-two-lines-for-same-field-but-from-different-hosts-in-same-visualization/152153 "2018-10-17T22:33:32Z")

</div>

how to display two lines for same field but from different hosts in same visualization using kibana? i have peakload values from two different hosts and i want them to be displayed in same visualization each line repre…

---

## [Upgrade filebeat,metricbeat and winlogbeat from 5.5.1 version to 6.2.3 version in windows servers](https://discuss.elastic.co/t/upgrade-filebeat-metricbeat-and-winlogbeat-from-5-5-1-version-to-6-2-3-version-in-windows-servers/142574)

<div class="topic-metadata">

**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\
**Replies:** 3\
**Last updated:** [August 1, 2018, 6:19pm UTC](https://discuss.elastic.co/t/upgrade-filebeat-metricbeat-and-winlogbeat-from-5-5-1-version-to-6-2-3-version-in-windows-servers/142574 "2018-08-01T18:19:57Z")

</div>

Hello, I am trying to upgrade my beats agents from 5.5.1 version to 6.2.3. What I am doing is : 1\> stop agent 2\> run uninstall script 3\> copy the new version beats (filebeat, metricbeat, winlogbeat) folder to c:/Progra…

---

## [Cannot parse logs with date filter](https://discuss.elastic.co/t/cannot-parse-logs-with-date-filter/100891)

<div class="topic-metadata">

**Author:** [@omer](https://discuss.elastic.co/u/omer)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 9:09am UTC](https://discuss.elastic.co/t/cannot-parse-logs-with-date-filter/100891 "2017-09-20T09:09:17Z")

</div>

Hi; i am trying to parse my logs to fields but as you guess i failed :smiley: Here is a sample of my logs. \[INFO \] 23.08.2017 20:28:32.941 in \[pool-2-thread-20\] |com.defne.rbt.eventapi.client.kvp.EventJob:eventCall:23…

---

## [Logstash and ~8000 files in ~40 file inputs?](https://discuss.elastic.co/t/logstash-and-8000-files-in-40-file-inputs/35169)

<div class="topic-metadata">

**Author:** [@jsosic](https://discuss.elastic.co/u/jsosic)\
**Replies:** 3\
**Last updated:** [November 22, 2015, 11:36pm UTC](https://discuss.elastic.co/t/logstash-and-8000-files-in-40-file-inputs/35169 "2015-11-22T23:36:02Z")

</div>

Hi guys, I have a specific situation where I want to index ~8000 files from a network share. Those are IIS logs that are rotated regularly. Is this something that one 2.0.0 agent on Linux can handle, or is it maybe s…

---

## [How to use Elastic APM to collect performance for example from zabbix](https://discuss.elastic.co/t/how-to-use-elastic-apm-to-collect-performance-for-example-from-zabbix/267087)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 2\
**Last updated:** [March 14, 2021, 9:43pm UTC](https://discuss.elastic.co/t/how-to-use-elastic-apm-to-collect-performance-for-example-from-zabbix/267087 "2021-03-14T21:43:29Z")

</div>

This subject of APM is very new to me, I would like to know how do I monitor a zabbix application. I see several examples but everything is used an application created by the person himself. I work with monitoring and fo…

---

## [Reclaim persistent volume](https://discuss.elastic.co/t/reclaim-persistent-volume/228197)

<div class="topic-metadata">

**Author:** [@Nikolas\_Mousouros](https://discuss.elastic.co/u/Nikolas_Mousouros)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 3:04pm UTC](https://discuss.elastic.co/t/reclaim-persistent-volume/228197 "2020-04-17T15:04:00Z")

</div>

I deleted my stateful set on openshift believing that I could reuse my persistent volume claim but it got deleted. On the bright side I think I still have this EBS volume on AWS so I added it again on openshift but when…

---

## [Garbage collection and stop-of-the-world](https://discuss.elastic.co/t/garbage-collection-and-stop-of-the-world/214600)

<div class="topic-metadata">

**Author:** [@daniel\_Marq](https://discuss.elastic.co/u/daniel_Marq)\
**Replies:** 2\
**Last updated:** [January 10, 2020, 4:03pm UTC](https://discuss.elastic.co/t/garbage-collection-and-stop-of-the-world/214600 "2020-01-10T16:03:05Z")

</div>

Hi, We are using AWS Elasticsearch and we are having problems in our cluster when the JVM MemoryPressure reaches 75% in each of our nodes, at that moment a stop the world seems to happen and the nodes cause some unavail…

---

## [Inconsistent "Error in visualization: Request Entity Too Large"](https://discuss.elastic.co/t/inconsistent-error-in-visualization-request-entity-too-large/188353)

<div class="topic-metadata">

**Author:** [@ebalmeida](https://discuss.elastic.co/u/ebalmeida)\
**Replies:** 2\
**Last updated:** [July 10, 2019, 6:46pm UTC](https://discuss.elastic.co/t/inconsistent-error-in-visualization-request-entity-too-large/188353 "2019-07-10T18:46:13Z")

</div>

Hi guys, I have developed a kibana dasboard for a customer and it's deployed on a private cloud which is neither in my environment or the customer's. During development I got a few of the aforementioned errors so I chop…

---

## [Elastic Cloud Kibana & APM UI](https://discuss.elastic.co/t/elastic-cloud-kibana-apm-ui/143680)

<div class="topic-metadata">

**Author:** [@p-j](https://discuss.elastic.co/u/p-j)\
**Replies:** 2\
**Last updated:** [August 28, 2018, 3:28am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-apm-ui/143680 "2018-08-28T03:28:57Z")

</div>

Hi, I was under the impression following the last comment from APM UI in Elastic Cloud Kibana that we should see APM UI on Kibana now that the 6.3 is out. At the moment, with a brand new deployment, I don't and I could…

---

## [Horodatage et coupures de service - Filebeat et rsyslog](https://discuss.elastic.co/t/horodatage-et-coupures-de-service-filebeat-et-rsyslog/107774)

<div class="topic-metadata">

**Author:** [@crapoulou](https://discuss.elastic.co/u/crapoulou)\
**Replies:** 2\
**Last updated:** [November 27, 2017, 3:31pm UTC](https://discuss.elastic.co/t/horodatage-et-coupures-de-service-filebeat-et-rsyslog/107774 "2017-11-27T15:31:09Z")

</div>

Bonjour, Je tente de comprendre 2 choses : Comment fonctionne logstash et les shippers réagissent lorsque le service Logstash-receiver (ou -indexer- d'ailleurs) est arrêté : perte de données ? Comment sont horodatés l…

---

## [Close output file after writing](https://discuss.elastic.co/t/close-output-file-after-writing/105870)

<div class="topic-metadata">

**Author:** [@cdra](https://discuss.elastic.co/u/cdra)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 11:29am UTC](https://discuss.elastic.co/t/close-output-file-after-writing/105870 "2017-10-31T11:29:48Z")

</div>

When I use output file /CSV file, I need to close it after event is writtten

---

## [Help with custom track repositories](https://discuss.elastic.co/t/help-with-custom-track-repositories/88110)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 2\
**Last updated:** [June 19, 2017, 7:10am UTC](https://discuss.elastic.co/t/help-with-custom-track-repositories/88110 "2017-06-19T07:10:59Z")

</div>

I'm following the create custom track repositories documentation and rally is throwing an error fatal: 'origin' does not appear to be a git repository. I followed the directions but renamed the directory from private t…

---

## [Kibana does not support using tribe nodes as the primary elasticsearch connection](https://discuss.elastic.co/t/kibana-does-not-support-using-tribe-nodes-as-the-primary-elasticsearch-connection/82524)

<div class="topic-metadata">

**Author:** [@Arter\_Xu](https://discuss.elastic.co/u/Arter_Xu)\
**Replies:** 2\
**Last updated:** [April 19, 2017, 2:23am UTC](https://discuss.elastic.co/t/kibana-does-not-support-using-tribe-nodes-as-the-primary-elasticsearch-connection/82524 "2017-04-19T02:23:20Z")

</div>

the right usage is: elasticsearch.url: "" elasticsearch.tribe.url: "" I get the answer,thanks anyway

---

## [Kibana query](https://discuss.elastic.co/t/kibana-query/49057)

<div class="topic-metadata">

**Author:** [@Giulio](https://discuss.elastic.co/u/Giulio)\
**Replies:** 2\
**Last updated:** [May 5, 2016, 9:49am UTC](https://discuss.elastic.co/t/kibana-query/49057 "2016-05-05T09:49:45Z")

</div>

Hi I have a question about the query system. It woks quite well, I can search what I want except that when I try to find a particular character from a query string (the single quote ' ) The query string is the follow…

---

## [How about elasticsearch for a heavy size load?](https://discuss.elastic.co/t/how-about-elasticsearch-for-a-heavy-size-load/9236)

<div class="topic-metadata">

**Author:** [@Hernan\_Leoni](https://discuss.elastic.co/u/Hernan_Leoni)\
**Replies:** 2\
**Last updated:** [October 4, 2012, 3:10pm UTC](https://discuss.elastic.co/t/how-about-elasticsearch-for-a-heavy-size-load/9236 "2012-10-04T15:10:19Z")

</div>

Hi group, I will be starting some testing using elastic search for a really heavy amount of data (at least heavy for me by now) I will need to handle a cluster handling about 5000GB of text for searching Should it …

---

## [PFSense Data and ECS - Data Fetch Failure](https://discuss.elastic.co/t/pfsense-data-and-ecs-data-fetch-failure/222525)

<div class="topic-metadata">

**Author:** [@somm15](https://discuss.elastic.co/u/somm15)\
**Replies:** 1\
**Last updated:** [March 10, 2020, 9:29am UTC](https://discuss.elastic.co/t/pfsense-data-and-ecs-data-fetch-failure/222525 "2020-03-10T09:29:07Z")

</div>

Hello, I am ingesting my PFSense logs and net flow using Filebeat. Filebeat feeds LogStash and it does the enrichment with select parts of the code from there: It works pretty well, each data type in its own index. …

---

## [ログ出力先に複数フォーマットのログが出力される場合](https://discuss.elastic.co/t/topic/207979)

<div class="topic-metadata">

**Author:** [@keikei12](https://discuss.elastic.co/u/keikei12)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 3:06am UTC](https://discuss.elastic.co/t/topic/207979 "2019-11-15T03:06:20Z")

</div>

logstashの仕様でご存じでしたら教えて下さい。 現在下記のような設定を入れています。 input { beats { port =\> "5044" } } filter { grok { match =\> {"message" =\> '%{TIMESTAMP\_ISO8601}\\s\*%{DATESTAMP\_OTHER}%{LOGLEVEEL}:\\s\*%{GREE…

---

## [How does alphabetical sorting work in Kibana?](https://discuss.elastic.co/t/how-does-alphabetical-sorting-work-in-kibana/182060)

<div class="topic-metadata">

**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\
**Replies:** 1\
**Last updated:** [May 21, 2019, 9:20pm UTC](https://discuss.elastic.co/t/how-does-alphabetical-sorting-work-in-kibana/182060 "2019-05-21T21:20:19Z")

</div>

I'm trying to sort a heatmap X and Y based on alphabetical order. I expected it to work lexicographically for all series over all, but it seems like its sorting this on a bucket level This results is seemingly random o…

---

## [Update record in elasticsearch](https://discuss.elastic.co/t/update-record-in-elasticsearch/170410)

<div class="topic-metadata">

**Author:** [@rajatdey80](https://discuss.elastic.co/u/rajatdey80)\
**Replies:** 1\
**Last updated:** [March 1, 2019, 1:38am UTC](https://discuss.elastic.co/t/update-record-in-elasticsearch/170410 "2019-03-01T01:38:31Z")

</div>

Hi All. , I am not an expert in Elasticsearch, hence forgive me if this question is very silly . I am trying to update a record in. elastic search but unable to achieve the goal. . Elastic Version. : 6.6. \* Requiremen…

---

## [Personalized search solutions](https://discuss.elastic.co/t/personalized-search-solutions/115103)

<div class="topic-metadata">

**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 11:33pm UTC](https://discuss.elastic.co/t/personalized-search-solutions/115103 "2018-01-11T23:33:49Z")

</div>

Hi. i was wondering if there is some official Personalized search solution? meaning, i would like to show users more results that have something to do with what the users searched before or what other pepole searched. …

---

## [ECE installation hanging after Loaded bootstrap settings](https://discuss.elastic.co/t/ece-installation-hanging-after-loaded-bootstrap-settings/104552)

<div class="topic-metadata">

**Author:** [@adesouza](https://discuss.elastic.co/u/adesouza)\
**Replies:** 1\
**Last updated:** [October 23, 2017, 1:00pm UTC](https://discuss.elastic.co/t/ece-installation-hanging-after-loaded-bootstrap-settings/104552 "2017-10-23T13:00:22Z")

</div>

Hi, I'm installing ECE on RHEL 7.1 in AWS. I've followed the instructions from here (using the ec2-user) - https://www.elastic.co/guide/en/cloud-enterprise/current/ece-configure-hosts.html#ece-configure-hosts-rhel-cent…

---

## [NoNodeAvailableException when using Java client](https://discuss.elastic.co/t/nonodeavailableexception-when-using-java-client/72388)

<div class="topic-metadata">

**Author:** [@doopey](https://discuss.elastic.co/u/doopey)\
**Replies:** 1\
**Last updated:** [January 22, 2017, 10:54am UTC](https://discuss.elastic.co/t/nonodeavailableexception-when-using-java-client/72388 "2017-01-22T10:54:27Z")

</div>

I've got a NoNodeAvailableException while using Java Transport Client to connect with Elasticsearch 5.1.1. However I've also seen many topics here with the same title and I have no idea to solve this problem. The NoNode…

[Previous page](https://discuss.elastic.co/top.md?page=1485&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1487&per_page=50&period=all)
