# Top

**URL:** https://discuss.elastic.co/top.md?page=1487&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1488

---

## [Kibana HTML Login](https://discuss.elastic.co/t/kibana-html-login/59697)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 1\
**Last updated:** [September 7, 2016, 7:48pm UTC](https://discuss.elastic.co/t/kibana-html-login/59697 "2016-09-07T19:48:35Z")

</div>

Hi Team, Is there a way to configure HTML WebSSO on Kibana server? Currently i have implemented shield (integrated with AD) and kibana is populating a window for user authentication. We have setup an identity managemen…

---

## [ElasticSearch CORS problem](https://discuss.elastic.co/t/elasticsearch-cors-problem/29828)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 1\
**Last updated:** [October 20, 2015, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-cors-problem/29828 "2015-10-20T12:24:52Z")

</div>

Hi All, I am trying to access my elastic search cluster and pulling data using ajax calls and representing to UI.when I tried and found following properties to enable CORS ,added to elasticsearch.yml file. http.…

---

## [How to shutdown ES using API call](https://discuss.elastic.co/t/how-to-shutdown-es-using-api-call/336210)

<div class="topic-metadata">

**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Replies:** 5\
**Last updated:** [June 16, 2023, 4:51pm UTC](https://discuss.elastic.co/t/how-to-shutdown-es-using-api-call/336210 "2023-06-16T16:51:54Z")

</div>

Hi, I am wondering if there is a way or an API using which I can shutdown my ES server?

---

## [Unable to receive source fields over email from Watcher alerting](https://discuss.elastic.co/t/unable-to-receive-source-fields-over-email-from-watcher-alerting/269914)

<div class="topic-metadata">

**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\
**Replies:** 5\
**Last updated:** [April 19, 2021, 3:44pm UTC](https://discuss.elastic.co/t/unable-to-receive-source-fields-over-email-from-watcher-alerting/269914 "2021-04-19T15:44:06Z")

</div>

Hi All, I have been trying for nearly 4 hours already to get an email alert with data table using Watcher, despite receiving the email it fails to send the data using the \_source fields specified. My Watcher alert is as…

---

## [Creating a visualization that uses filter ratios to see utilization rate of a certain field](https://discuss.elastic.co/t/creating-a-visualization-that-uses-filter-ratios-to-see-utilization-rate-of-a-certain-field/237308)

<div class="topic-metadata">

**Author:** [@Rietty](https://discuss.elastic.co/u/Rietty)\
**Replies:** 5\
**Last updated:** [June 16, 2020, 2:55pm UTC](https://discuss.elastic.co/t/creating-a-visualization-that-uses-filter-ratios-to-see-utilization-rate-of-a-certain-field/237308 "2020-06-16T14:55:00Z")

</div>

Hi! I have a very simple query that I need to make with a dashboard/visualization, but can't figure out how. I believe I need to use the visualization builder widget and filter ratios for this, but perhaps there is a bet…

---

## [Group apache org.apache.http request into a single object](https://discuss.elastic.co/t/group-apache-org-apache-http-request-into-a-single-object/120684)

<div class="topic-metadata">

**Author:** [@shacoshe](https://discuss.elastic.co/u/shacoshe)\
**Replies:** 5\
**Last updated:** [February 21, 2018, 1:34pm UTC](https://discuss.elastic.co/t/group-apache-org-apache-http-request-into-a-single-object/120684 "2018-02-21T13:34:40Z")

</div>

hello all :slight\_smile: i have a log file the look like this \[DEBUG\]\[DefaultHttpClient\]\[2018-02-20 18:29:50,348\] Attempt 1 to execute request \[DEBUG\]\[DefaultClientConnection\]\[2018-02-20 18:29:50,348\] Sending request…

---

## [Understanding local gateway](https://discuss.elastic.co/t/understanding-local-gateway/5001)

<div class="topic-metadata">

**Author:** [@Ahmet\_Arslan](https://discuss.elastic.co/u/Ahmet_Arslan)\
**Replies:** 5\
**Last updated:** [August 1, 2011, 9:00pm UTC](https://discuss.elastic.co/t/understanding-local-gateway/5001 "2011-08-01T21:00:57Z")

</div>

Hello, I am using version 0.17.1. I activated local gateway in elasticsearch.yml file as follows: # Gateway Settings gateway: recover\_after\_nodes: 1 recover\_after\_time: 5m expected\_nodes: 2 …

---

## [Singel Node Opens Too Many Connections](https://discuss.elastic.co/t/singel-node-opens-too-many-connections/233040)

<div class="topic-metadata">

**Author:** [@chen-wu](https://discuss.elastic.co/u/chen-wu)\
**Replies:** 4\
**Last updated:** [May 18, 2020, 7:15am UTC](https://discuss.elastic.co/t/singel-node-opens-too-many-connections/233040 "2020-05-18T07:15:21Z")

</div>

Hello. We have an instance running in single node running on Windows. I saw that it opens a lot of connections to itself. Like: TCP 127.0.0.1:9200 127.0.0.1:52540 ESTABLISHED 21936 TCP 127.0.0…

---

## [Change field name during index](https://discuss.elastic.co/t/change-field-name-during-index/224193)

<div class="topic-metadata">

**Author:** [@Sukramolas](https://discuss.elastic.co/u/Sukramolas)\
**Replies:** 4\
**Last updated:** [March 19, 2020, 2:41pm UTC](https://discuss.elastic.co/t/change-field-name-during-index/224193 "2020-03-19T14:41:58Z")

</div>

It is possible to create a character map analyzer for fields that are indexed but is it possible to do the same for field names? Example field name would be "A|B" and the need would be to change the pipe to some other c…

---

## [Elasticsearch status is in red](https://discuss.elastic.co/t/elasticsearch-status-is-in-red/214933)

<div class="topic-metadata">

**Author:** [@gsumilhig](https://discuss.elastic.co/u/gsumilhig)\
**Replies:** 4\
**Last updated:** [January 15, 2020, 6:10am UTC](https://discuss.elastic.co/t/elasticsearch-status-is-in-red/214933 "2020-01-15T06:10:43Z")

</div>

elasticsearch is in red status and found this log in master node. \[2020-01-14T14:25:39,232\]\[INFO \]\[o.e.c.r.a.DiskThresholdMonitor\] \[elastic02\] low disk watermark \[85%\] exceeded on \[h\_w0x3riSpS1Dh-WQANUhQ\]\[elastic02\]\[/v…

---

## [No data show in Kibana wth vega-lite](https://discuss.elastic.co/t/no-data-show-in-kibana-wth-vega-lite/208029)

<div class="topic-metadata">

**Author:** [@msk\_76](https://discuss.elastic.co/u/msk_76)\
**Replies:** 4\
**Last updated:** [November 18, 2019, 9:46pm UTC](https://discuss.elastic.co/t/no-data-show-in-kibana-wth-vega-lite/208029 "2019-11-18T21:46:40Z")

</div>

I am new to vega-lite and trying to use the following vega-lite script { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "title": "Event counts from all indexes", "data": { "url": { "%conte…

---

## [./elasticsearch -E node.name=node0 ... can not run elasticsearch as root](https://discuss.elastic.co/t/elasticsearch-e-node-name-node0-can-not-run-elasticsearch-as-root/188363)

<div class="topic-metadata">

**Author:** [@rick\_zhang](https://discuss.elastic.co/u/rick_zhang)\
**Replies:** 4\
**Last updated:** [July 2, 2019, 3:37am UTC](https://discuss.elastic.co/t/elasticsearch-e-node-name-node0-can-not-run-elasticsearch-as-root/188363 "2019-07-02T03:37:14Z")

</div>

i have try to run a command start up elasticsearch node,"./elasticsearch -E node.name=node0 -E cluster.name=elasticsearch -E path.data=node0\_data ",but still not work have a error message, what is worry? OpenJDK 64-B…

---

## [MetricBeat to capture all available Mbeans from Jolokia](https://discuss.elastic.co/t/metricbeat-to-capture-all-available-mbeans-from-jolokia/146273)

<div class="topic-metadata">

**Author:** [@Kathir\_J](https://discuss.elastic.co/u/Kathir_J)\
**Replies:** 4\
**Last updated:** [August 30, 2018, 4:30pm UTC](https://discuss.elastic.co/t/metricbeat-to-capture-all-available-mbeans-from-jolokia/146273 "2018-08-30T16:30:16Z")

</div>

Hello Team, I really enjoyed working with Metricbeat and jolokia together to get my application Mbeans. Below is my module configuration from metricbeat.yml In this I have one static Mbean name which will never get ch…

---

## [X-pack security custom roles provider example](https://discuss.elastic.co/t/x-pack-security-custom-roles-provider-example/98762)

<div class="topic-metadata">

**Author:** [@asanderson](https://discuss.elastic.co/u/asanderson)\
**Replies:** 4\
**Last updated:** [August 29, 2017, 11:38pm UTC](https://discuss.elastic.co/t/x-pack-security-custom-roles-provider-example/98762 "2017-08-29T23:38:43Z")

</div>

I would greatly appreciate if someone would point me to a working example of a x-pack security custom roles provider as briefly explained here: https://www.elastic.co/guide/en/x-pack/5.5/custom-roles-provider.html.

---

## [Equivalent of setCreate() for a particular document](https://discuss.elastic.co/t/equivalent-of-setcreate-for-a-particular-document/74520)

<div class="topic-metadata">

**Author:** [@jnioche](https://discuss.elastic.co/u/jnioche)\
**Replies:** 4\
**Last updated:** [March 13, 2017, 3:34pm UTC](https://discuss.elastic.co/t/equivalent-of-setcreate-for-a-particular-document/74520 "2017-03-13T15:34:52Z")

</div>

I am trying to do the equivalent of IndexRequestBuilder request = connection.getClient() .prepareIndex(indexName, docType).setSource(builder) .setCreate(create).setId(sha256hex); if (StringUtils.isNotB…

---

## [Heartbeat should support context passing](https://discuss.elastic.co/t/heartbeat-should-support-context-passing/77241)

<div class="topic-metadata">

**Author:** [@anjia0532](https://discuss.elastic.co/u/anjia0532)\
**Replies:** 4\
**Last updated:** [March 11, 2017, 6:03pm UTC](https://discuss.elastic.co/t/heartbeat-should-support-context-passing/77241 "2017-03-11T18:03:17Z")

</div>

I want to monitor the web service login do somethings with cookies/params (login response) I don't know how to do it. zabbix it's easy do that

---

## [Elastic 5.0 master node + distant path data \[SOLVED\]](https://discuss.elastic.co/t/elastic-5-0-master-node-distant-path-data-solved/70571)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 4\
**Last updated:** [January 5, 2017, 8:19am UTC](https://discuss.elastic.co/t/elastic-5-0-master-node-distant-path-data-solved/70571 "2017-01-05T08:19:46Z")

</div>

I'm configuring my Elasticsearch cluster 5.0. My question concern the master nodes. As the documentation say i have added the following lines to my configuration : node.master: true node.data: false node.ingest: fa…

---

## [OR query in ElasticSearch 2.0](https://discuss.elastic.co/t/or-query-in-elasticsearch-2-0/34333)

<div class="topic-metadata">

**Author:** [@jygoubet](https://discuss.elastic.co/u/jygoubet)\
**Replies:** 4\
**Last updated:** [November 12, 2015, 8:55am UTC](https://discuss.elastic.co/t/or-query-in-elasticsearch-2-0/34333 "2015-11-12T08:55:11Z")

</div>

Hi, I don't understand what happened to the OR filter in 2.0, I understand that AND filters can be replaced with multiple filter clauses in a bool query but I don't get how to manage it with the OR condition. Any ideas ? …

---

## [How to get details of fleet server](https://discuss.elastic.co/t/how-to-get-details-of-fleet-server/338868)

<div class="topic-metadata">

**Author:** [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Replies:** 3\
**Last updated:** [July 25, 2023, 10:00am UTC](https://discuss.elastic.co/t/how-to-get-details-of-fleet-server/338868 "2023-07-25T10:00:49Z")

</div>

How can I list number/name of hosts connected to any specific Fleet server.

---

## [How to transfer users from an Elastic Cluster to another one](https://discuss.elastic.co/t/how-to-transfer-users-from-an-elastic-cluster-to-another-one/329366)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 3\
**Last updated:** [April 5, 2023, 10:54am UTC](https://discuss.elastic.co/t/how-to-transfer-users-from-an-elastic-cluster-to-another-one/329366 "2023-04-05T10:54:54Z")

</div>

Hey everyone! I need to copy the users and roles from an Elastic cluster 7.9 to a new 8.3.2 cluster. Is there a way to do that? Recreating manually is not possible since we have hundreds of users configured and most of…

---

## [ElasticSearch Output Plugin partial update results in entire document substitution](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512)

<div class="topic-metadata">

**Author:** [@samir\_varandas](https://discuss.elastic.co/u/samir_varandas)\
**Replies:** 3\
**Last updated:** [September 29, 2021, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-partial-update-results-in-entire-document-substitution/285512 "2021-09-29T23:19:32Z")

</div>

Hi friends, I am having some trouble with the Elasticsearch Output Plugin, I am trying to perform a partial update on a document inside my Elastic index, I want to update certain fields only (the ones mapped in my event)…

---

## [Deploying ECK with Network-attached PersistentVolumes (e.g. AWSElasticBlockStore)](https://discuss.elastic.co/t/deploying-eck-with-network-attached-persistentvolumes-e-g-awselasticblockstore/285353)

<div class="topic-metadata">

**Author:** [@brsolomon](https://discuss.elastic.co/u/brsolomon)\
**Replies:** 3\
**Last updated:** [September 28, 2021, 12:53pm UTC](https://discuss.elastic.co/t/deploying-eck-with-network-attached-persistentvolumes-e-g-awselasticblockstore/285353 "2021-09-28T12:53:39Z")

</div>

The ECK docs would greatly benefit from an MCVE on how to deploy ECK with Network-attached PersistentVolumes and a provisioner such as kubernetes.io/aws-ebs. The Best Practices in AWS section suggests using one of Instan…

---

## [Discover: How to show last occurrence?](https://discuss.elastic.co/t/discover-how-to-show-last-occurrence/251700)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 3\
**Last updated:** [October 13, 2020, 5:58am UTC](https://discuss.elastic.co/t/discover-how-to-show-last-occurrence/251700 "2020-10-13T05:58:39Z")

</div>

Hi, \[edit\] my ELK version: 7.8.0 I am able to get the last occurrence of my data in the console as following: However, when i copy the code to Discover, it return 5 results: May i know how do i get Discover to di…

---

## [Elasticsearch Rest High Level Client is not traced](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-is-not-traced/203223)

<div class="topic-metadata">

**Author:** [@Svetlana\_Nikitina](https://discuss.elastic.co/u/Svetlana_Nikitina)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-is-not-traced/203223 "2019-10-16T17:04:43Z")

</div>

Kibana version: 6.8.0 Elasticsearch version: 6.8.0 APM Server version: 6.8.0 APM Agent language and version: JAVA apm-agent-attach:1.10.0, apm-agent-api:1.10.0 Browser version: Chrome 77.0.3865.90 Java version: op…

---

## [ELK TAR Or RPM Installation is more useful](https://discuss.elastic.co/t/elk-tar-or-rpm-installation-is-more-useful/117294)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 3\
**Last updated:** [January 27, 2018, 9:26am UTC](https://discuss.elastic.co/t/elk-tar-or-rpm-installation-is-more-useful/117294 "2018-01-27T09:26:37Z")

</div>

Hi all , Its a theoretical question . I am using Tar file for ELK. Extracting and using it . Working well . Xpack also installed in Elasticsearch and Kibana . My question is in a production environment , which option…

---

## [Accessing a Separate Index in a Scripted Field](https://discuss.elastic.co/t/accessing-a-separate-index-in-a-scripted-field/27506)

<div class="topic-metadata">

**Author:** [@stevenlocke](https://discuss.elastic.co/u/stevenlocke)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 9:54pm UTC](https://discuss.elastic.co/t/accessing-a-separate-index-in-a-scripted-field/27506 "2015-08-18T21:54:15Z")

</div>

Is it possible to create a scripted field which reads a value from indexA, performs a search in indexB, then takes that value and stores it back in indexA? For example, I have an index filled with IP addresses and the …

---

## [Failed to commit cluster state version](https://discuss.elastic.co/t/failed-to-commit-cluster-state-version/94785)

<div class="topic-metadata">

**Author:** [@krisko](https://discuss.elastic.co/u/krisko)\
**Replies:** 0\
**Last updated:** [July 27, 2017, 12:28pm UTC](https://discuss.elastic.co/t/failed-to-commit-cluster-state-version/94785 "2017-07-27T12:28:51Z")

</div>

Hi there! my original issue created on github can be viewed here https://github.com/elastic/elasticsearch/issues/25925 To repeat: We are running 2 nodes set as master, with discovery.zen.minimum\_master\_nodes: 2, one …

---

## [Range Slider](https://discuss.elastic.co/t/range-slider/317068)

<div class="topic-metadata">

**Author:** [@linhz](https://discuss.elastic.co/u/linhz)\
**Replies:** 6\
**Last updated:** [October 24, 2022, 11:19am UTC](https://discuss.elastic.co/t/range-slider/317068 "2022-10-24T11:19:34Z")

</div>

Hi. Does the topic cover come with negative value for ranger slider. Anyone could share with me how to input the negative value or any documents? I have input a + value, but when input "-" it have the error status.

---

## [Ошибка при создание бэкапа](https://discuss.elastic.co/t/topic/285693)

<div class="topic-metadata">

**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\
**Replies:** 6\
**Last updated:** [October 4, 2021, 3:18pm UTC](https://discuss.elastic.co/t/topic/285693 "2021-10-04T15:18:58Z")

</div>

Добрый вечер. Пытаюсь сделать бэкап. По официальной инструкции ввожу: curl -X PUT "localhost:9200/\_snapshot/graylog?pretty" -H 'Content-Type: application/json' -d' { "type": "fs", "settings": { "location": "/var/backup/…

---

## [Unable to run elasticsearch 7.2 with weblogic 12c](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-with-weblogic-12c/201368)

<div class="topic-metadata">

**Author:** [@Shubham\_Mittal](https://discuss.elastic.co/u/Shubham_Mittal)\
**Replies:** 6\
**Last updated:** [October 1, 2019, 1:26pm UTC](https://discuss.elastic.co/t/unable-to-run-elasticsearch-7-2-with-weblogic-12c/201368 "2019-10-01T13:26:39Z")

</div>

java.lang.IncompatibleClassChangeError: Implementing class at java.lang.ClassLoader.defineClass1(Native Method) at java.lang.ClassLoader.defineClass(ClassLoader.java:763) at java.security.SecureClassLoader.defineClass…

---

## [Can't send winlogbeat data to logstash](https://discuss.elastic.co/t/cant-send-winlogbeat-data-to-logstash/284489)

<div class="topic-metadata">

**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\
**Replies:** 2\
**Last updated:** [September 19, 2021, 10:51am UTC](https://discuss.elastic.co/t/cant-send-winlogbeat-data-to-logstash/284489 "2021-09-19T10:51:23Z")

</div>

Hi all, I now do the ELK lab with docker The repo: https://github.com/deviantony/docker-elk/ ELK stack host IP: 192.168.87.52 My logstash/pipeline/logstash.conf input { beats { port =\> 5044 …

---

## [How to change kibana tab title v7.6.1?](https://discuss.elastic.co/t/how-to-change-kibana-tab-title-v7-6-1/230081)

<div class="topic-metadata">

**Author:** [@Shikhar\_Dixit](https://discuss.elastic.co/u/Shikhar_Dixit)\
**Replies:** 2\
**Last updated:** [April 30, 2020, 7:35am UTC](https://discuss.elastic.co/t/how-to-change-kibana-tab-title-v7-6-1/230081 "2020-04-30T07:35:18Z")

</div>

I changed the tab logo of kibana by providing custom favicons, but am not able to change the title of the tab, can somebody please help.

---

## [Using Kibana with FHIR (Questionnaire Response)](https://discuss.elastic.co/t/using-kibana-with-fhir-questionnaire-response/172635)

<div class="topic-metadata">

**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\
**Replies:** 2\
**Last updated:** [March 23, 2019, 1:42pm UTC](https://discuss.elastic.co/t/using-kibana-with-fhir-questionnaire-response/172635 "2019-03-23T13:42:04Z")

</div>

New to Kibana, I've created a few visualisations etc no problem but I actually need to do some visuals from data that is held in a FHIR QuestionnaireResponse format index. So for example if I wanted to split the questio…

---

## [Unable to create dynamic index with conditional check in logstash](https://discuss.elastic.co/t/unable-to-create-dynamic-index-with-conditional-check-in-logstash/148981)

<div class="topic-metadata">

**Author:** [@anra137](https://discuss.elastic.co/u/anra137)\
**Replies:** 2\
**Last updated:** [September 21, 2018, 8:21am UTC](https://discuss.elastic.co/t/unable-to-create-dynamic-index-with-conditional-check-in-logstash/148981 "2018-09-21T08:21:03Z")

</div>

Hi, I want to dynamically create index based on the events. I have configured configured several log files in filebeat and the events are successfully stored in ElasticSearch. But when I try to differentiate the logs in…

---

## [Java High Rest Client, how to call CLOSE() waiting for ASYNC request](https://discuss.elastic.co/t/java-high-rest-client-how-to-call-close-waiting-for-async-request/114563)

<div class="topic-metadata">

**Author:** [@michaelsogos](https://discuss.elastic.co/u/michaelsogos)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 5:07pm UTC](https://discuss.elastic.co/t/java-high-rest-client-how-to-call-close-waiting-for-async-request/114563 "2018-01-08T17:07:00Z")

</div>

Dear, How is it possible to wait for ASYNC REQUEST complete before call Close()? We are using Java High Rest Client. Our target is to create one instance of RestHighLevelClient, make many ASYNC requests (using indexAs…

---

## [Custom S3 Endpoint for ES 6.x](https://discuss.elastic.co/t/custom-s3-endpoint-for-es-6-x/114113)

<div class="topic-metadata">

**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 9:00pm UTC](https://discuss.elastic.co/t/custom-s3-endpoint-for-es-6-x/114113 "2018-01-04T21:00:15Z")

</div>

Hi there It seems like with ES 6.x a new system of specifying custom S3 endpoints (or S3 compatible systems) is introduced. Can you tell me how this can be configured over ECEs snapshot repository (non AWS buckets)? T…

---

## [Unable to load x-pack plugin in java application](https://discuss.elastic.co/t/unable-to-load-x-pack-plugin-in-java-application/67515)

<div class="topic-metadata">

**Author:** [@mrasante](https://discuss.elastic.co/u/mrasante)\
**Replies:** 2\
**Last updated:** [December 9, 2016, 7:08pm UTC](https://discuss.elastic.co/t/unable-to-load-x-pack-plugin-in-java-application/67515 "2016-12-09T19:08:58Z")

</div>

I have a java client (a JavaEE app built with maven and deployed on glassfish 4) that is currently unable to load x-pack plugin. Essentially the problem is that I hit an "ElasticsearchException\[Failed to load plugin clas…

---

## [Visualization](https://discuss.elastic.co/t/visualization/50149)

<div class="topic-metadata">

**Author:** [@bbhandari0121](https://discuss.elastic.co/u/bbhandari0121)\
**Replies:** 2\
**Last updated:** [May 17, 2016, 5:50am UTC](https://discuss.elastic.co/t/visualization/50149 "2016-05-17T05:50:30Z")

</div>

I have 5 nodes, 8gb ram each, 2 cpu each and 200 gb Volume each. I have 1shards per index, which was created by default. I have allocated 4gb heap size to the elastic search. Following is the amount of data that gets col…

---

## [Simplifying Filebeat JSON Output Format](https://discuss.elastic.co/t/simplifying-filebeat-json-output-format/48085)

<div class="topic-metadata">

**Author:** [@rzaakir](https://discuss.elastic.co/u/rzaakir)\
**Replies:** 2\
**Last updated:** [April 22, 2016, 1:56pm UTC](https://discuss.elastic.co/t/simplifying-filebeat-json-output-format/48085 "2016-04-22T13:56:44Z")

</div>

Hello, I am new working with Filebeat and think it is a wonderful tool. I am currently using it to replace a tool that pushes weblogs to Kafka, and I want to just pass the "message" through without the other values. Is…

---

## [How to make ElasticHQ to auto-connect to my cluster?](https://discuss.elastic.co/t/how-to-make-elastichq-to-auto-connect-to-my-cluster/20122)

<div class="topic-metadata">

**Author:** [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\
**Replies:** 2\
**Last updated:** [October 8, 2014, 5:00pm UTC](https://discuss.elastic.co/t/how-to-make-elastichq-to-auto-connect-to-my-cluster/20122 "2014-10-08T17:00:18Z")

</div>

I would like to use ElasticHQ, hosted or as a plugin, but the fact that I have to enter my cluster URL and hit connect each time manually gets on my nerve. I wonder if anybody found a way to invoke it as a browser bo…

---

## [Are multilinestring supported?](https://discuss.elastic.co/t/are-multilinestring-supported/13788)

<div class="topic-metadata">

**Author:** [@Adrien\_Pavillet](https://discuss.elastic.co/u/Adrien_Pavillet)\
**Replies:** 2\
**Last updated:** [October 16, 2013, 1:54pm UTC](https://discuss.elastic.co/t/are-multilinestring-supported/13788 "2013-10-16T13:54:50Z")

</div>

Hello, From what I understand from these issues multilinstring is supported, also I think that when i built from source i could index multilinestring objects. But with version 0.90.5 these kind of shape seems no…

---

## [Metricbeat 7.0.1 causes parse errors on elasticsearch](https://discuss.elastic.co/t/metricbeat-7-0-1-causes-parse-errors-on-elasticsearch/180788)

<div class="topic-metadata">

**Author:** [@s.pawluk.krd](https://discuss.elastic.co/u/s.pawluk.krd)\
**Replies:** 2\
**Last updated:** [May 20, 2019, 7:27am UTC](https://discuss.elastic.co/t/metricbeat-7-0-1-causes-parse-errors-on-elasticsearch/180788 "2019-05-20T07:27:44Z")

</div>

\[2019-05-13T12:44:04,931\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[ELK-DATA03\] \[metricbeat-7.0.1-2019.05.13-000001\]\[0\] failed to execute bulk item (index) index {\[metricbeat-7.0.1\]\[\_doc\]\[HwrKsGoB-qY06G5b1mox\], source\[{"…

---

## [Two master nodes loose connection to the third master node, after its IP changes](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320)

<div class="topic-metadata">

**Author:** [@vibgy](https://discuss.elastic.co/u/vibgy)\
**Replies:** 7\
**Last updated:** [February 28, 2022, 8:59pm UTC](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320 "2022-02-28T20:59:01Z")

</div>

We are running 3 master nodes in k8s env (as a stateful set). When one of the master nodes dies and changes its IP, the other two master nodes are not able to find it. Any insights on what we can do better ? {"timesta…

---

## [SIEM ML Jobs Stuck | No Node Found to Open Job](https://discuss.elastic.co/t/siem-ml-jobs-stuck-no-node-found-to-open-job/233731)

<div class="topic-metadata">

**Author:** [@hpicass0](https://discuss.elastic.co/u/hpicass0)\
**Replies:** 1\
**Last updated:** [May 21, 2020, 12:30pm UTC](https://discuss.elastic.co/t/siem-ml-jobs-stuck-no-node-found-to-open-job/233731 "2020-05-21T12:30:05Z")

</div>

Hello Everyone, I hope you are safe and well I'm running a POC in Elastic Cloud, and I have an issue with ML jobs I have some jobs stuck as you see below. That's under SIEM \> Detections \> ML Job Settings They have be…

---

## [Frequently modifing the configuration of syslog output plugin randomly cause stalling\_threads\_info](https://discuss.elastic.co/t/frequently-modifing-the-configuration-of-syslog-output-plugin-randomly-cause-stalling-threads-info/175082)

<div class="topic-metadata">

**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\
**Replies:** 1\
**Last updated:** [April 3, 2019, 1:49pm UTC](https://discuss.elastic.co/t/frequently-modifing-the-configuration-of-syslog-output-plugin-randomly-cause-stalling-threads-info/175082 "2019-04-03T13:49:21Z")

</div>

Hello, My program will frequently modify the configure of syslog output plugin, the host may be reachable or unreachable. I try many times,and it works well,but randomly the log threw out stalling\_threads\_info. At th…

---

## [How to Parse logfile with columns informations](https://discuss.elastic.co/t/how-to-parse-logfile-with-columns-informations/142699)

<div class="topic-metadata">

**Author:** [@Loudone](https://discuss.elastic.co/u/Loudone)\
**Replies:** 7\
**Last updated:** [August 2, 2018, 10:54am UTC](https://discuss.elastic.co/t/how-to-parse-logfile-with-columns-informations/142699 "2018-08-02T10:54:50Z")

</div>

Dear All, I'm trying to parse a very specific Log, this log look like this: pid user\_name user\_authentication client\_host client\_lib\_ver === ========= =================== =========== ============== 510 dmadmi…

---

## [Elasticsearch，如何基于时间来删除索引里面的数据](https://discuss.elastic.co/t/elasticsearch/134006)

<div class="topic-metadata">

**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\
**Replies:** 1\
**Last updated:** [June 5, 2018, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch/134006 "2018-06-05T14:43:49Z")

</div>

现有一个名为Log的索引，里面存放着2016年到2018年的日志信息，随着时间的增长，里面的日志信息也是相应的增长，如何删除索引里面2018年前的日志信息，而索引本身不删除？ 求解，谢谢！

---

## [Failed to parse value \[fals\]](https://discuss.elastic.co/t/failed-to-parse-value-fals/125260)

<div class="topic-metadata">

**Author:** [@bolivia](https://discuss.elastic.co/u/bolivia)\
**Replies:** 1\
**Last updated:** [March 22, 2018, 9:43pm UTC](https://discuss.elastic.co/t/failed-to-parse-value-fals/125260 "2018-03-22T21:43:53Z")

</div>

Hi, my Docker Conainer with elasticsearch 6.2.1 does not start anymore. Elasticsearch Version 6.2.1 Java 8 Updated 161 OS Windows 10 1709 16299.309 Description: elasticsearch\_1 | \[2018-03-19T20:06:30,779\]\[INFO \]\[o.…

---

## [Event.get("message") & http input - where is the message?](https://discuss.elastic.co/t/event-get-message-http-input-where-is-the-message/76000)

<div class="topic-metadata">

**Author:** [@NirKa](https://discuss.elastic.co/u/NirKa)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 6:44am UTC](https://discuss.elastic.co/t/event-get-message-http-input-where-is-the-message/76000 "2017-02-23T06:44:49Z")

</div>

Hi, I'm creating a new plugin that writes events to google pub sub. I don't understand the behavior of "message" when using http input. I tried using stdin input & I can see the content of the message when I execute …

---

## [Transport client?](https://discuss.elastic.co/t/transport-client/75000)

<div class="topic-metadata">

**Author:** [@pierB](https://discuss.elastic.co/u/pierB)\
**Replies:** 7\
**Last updated:** [February 14, 2017, 10:46am UTC](https://discuss.elastic.co/t/transport-client/75000 "2017-02-14T10:46:21Z")

</div>

Hi, ES newbie here so please bear with my noob question. I set a graylog stack, using ES / mongo /graylog server suite, I am using ES2.4 as this is the latest version supported by graylog-server. After setting up my E…

[Previous page](https://discuss.elastic.co/top.md?page=1486&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1488&per_page=50&period=all)
