# Top

**URL:** https://discuss.elastic.co/top.md?page=1508&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1509

---

## [Connection problem to elasticsearch](https://discuss.elastic.co/t/connection-problem-to-elasticsearch/22243)

<div class="topic-metadata">

**Author:** [@Ali\_Lotfdar](https://discuss.elastic.co/u/Ali_Lotfdar)\
**Replies:** 1\
**Last updated:** [February 18, 2015, 11:45pm UTC](https://discuss.elastic.co/t/connection-problem-to-elasticsearch/22243 "2015-02-18T23:45:53Z")

</div>

Hello All, I am completely confused in managing and connection elasticsearch. Thanks a lot to help me solve my problem. -I started to create some Index inside ElasticSearch but even when I delete them they retu…

---

## [Full Collection rebuild for Indexing fails](https://discuss.elastic.co/t/full-collection-rebuild-for-indexing-fails/277679)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 5\
**Last updated:** [July 8, 2021, 4:20pm UTC](https://discuss.elastic.co/t/full-collection-rebuild-for-indexing-fails/277679 "2021-07-08T16:20:07Z")

</div>

Upgraded to new Oracle12c CMS and migrated ~4 Million documents. However running the Full Collection Rebuild for Indexing fails with below error. 2 difference CMS instances are pointing to same Elasticsearch.. Error: "\>…

---

## [Elasticsearch query type alert in kibana alerts](https://discuss.elastic.co/t/elasticsearch-query-type-alert-in-kibana-alerts/273921)

<div class="topic-metadata">

**Author:** [@Priyanka\_chauhan](https://discuss.elastic.co/u/Priyanka_chauhan)\
**Replies:** 5\
**Last updated:** [May 27, 2021, 4:46am UTC](https://discuss.elastic.co/t/elasticsearch-query-type-alert-in-kibana-alerts/273921 "2021-05-27T04:46:14Z")

</div>

I am creating elasticsearch query type alerts in Kibana Alerts and Action section. I have put a condition to send an alert when blacklist IP met with threshold condition in my query. Alerts are generated in index with p…

---

## [Independent Y axes for dual axis wrapped facet](https://discuss.elastic.co/t/independent-y-axes-for-dual-axis-wrapped-facet/265992)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 5\
**Last updated:** [March 7, 2021, 3:04pm UTC](https://discuss.elastic.co/t/independent-y-axes-for-dual-axis-wrapped-facet/265992 "2021-03-07T15:04:34Z")

</div>

Hello, My requirement is to get dual axis charts in wrapped facet as in below link. I have used the same code with my data , but wasn't getting independent Y axes for dual charts as below : { "$schema": "https:…

---

## [Geeting "Status : RED " error](https://discuss.elastic.co/t/geeting-status-red-error/121799)

<div class="topic-metadata">

**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\
**Replies:** 5\
**Last updated:** [March 6, 2018, 1:45pm UTC](https://discuss.elastic.co/t/geeting-status-red-error/121799 "2018-03-06T13:45:58Z")

</div>

My Elastic search server contains 88GB of indices in lib file, and my server runs out of memory. Any possibility to delete some older files here? \[kibana-error\] Any help ?

---

## [How do you update plugins in CentOS](https://discuss.elastic.co/t/how-do-you-update-plugins-in-centos/65732)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 5\
**Last updated:** [November 11, 2016, 7:09pm UTC](https://discuss.elastic.co/t/how-do-you-update-plugins-in-centos/65732 "2016-11-11T19:09:17Z")

</div>

Hi, This may be obvious to some of you, but I dont know how to update grok when ELK is run as a service becuase there is no /bin file. Please help! :slight\_smile:

---

## [ElasticSearch Multi-Node Configuration issue with Marvel](https://discuss.elastic.co/t/elasticsearch-multi-node-configuration-issue-with-marvel/35447)

<div class="topic-metadata">

**Author:** [@rahulnadella](https://discuss.elastic.co/u/rahulnadella)\
**Replies:** 5\
**Last updated:** [November 30, 2015, 11:35am UTC](https://discuss.elastic.co/t/elasticsearch-multi-node-configuration-issue-with-marvel/35447 "2015-11-30T11:35:40Z")

</div>

We have vertically scaled ElasticSearch in our cluster - 3 nodes (which seems to be working through performance testing) but when we attempt to add Marvel to this we seem to be getting OutofMemoryError exceptions. We cur…

---

## [How to Select \* from Doc where description like '%keju%' and purchasedId = 'PG.R.UNC.01'](https://discuss.elastic.co/t/how-to-select-from-doc-where-description-like-keju-and-purchasedid-pg-r-unc-01/204204)

<div class="topic-metadata">

**Author:** [@Ahmad\_Teguh\_Satria](https://discuss.elastic.co/u/Ahmad_Teguh_Satria)\
**Replies:** 2\
**Last updated:** [October 18, 2019, 4:23pm UTC](https://discuss.elastic.co/t/how-to-select-from-doc-where-description-like-keju-and-purchasedid-pg-r-unc-01/204204 "2019-10-18T16:23:37Z")

</div>

Hello, i'm new on elastic search, still not understand how using query for elastic search i have data like this one { "\_index" : "normal", "\_type" : "product", "\_id" : "002417", "\_score" : 0.93070257, "\_source" :…

---

## [\[Kibana 6.x\]Changing logo & UI elements](https://discuss.elastic.co/t/kibana-6-x-changing-logo-ui-elements/150131)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [September 27, 2018, 7:33am UTC](https://discuss.elastic.co/t/kibana-6-x-changing-logo-ui-elements/150131 "2018-09-27T07:33:01Z")

</div>

Hi, I'm trying to change a couple of the Kibana UI elements. Top left logo Loading logo when you open Kibana Xpack login page (the logo and the background color) I did some searches on which files to edit but I canno…

---

## [Too many lines in Line Chart](https://discuss.elastic.co/t/too-many-lines-in-line-chart/147726)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 2\
**Last updated:** [September 13, 2018, 9:31am UTC](https://discuss.elastic.co/t/too-many-lines-in-line-chart/147726 "2018-09-13T09:31:13Z")

</div>

Hi There, i have crated a line chart visualization. In this visualization i use date histogram for x axis and count of a value for y axis. The visualization is ok but i have too many different counts. Kibana is showing…

---

## [Gigabit or Gigabyte?](https://discuss.elastic.co/t/gigabit-or-gigabyte/97332)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 2\
**Last updated:** [August 23, 2017, 10:27am UTC](https://discuss.elastic.co/t/gigabit-or-gigabyte/97332 "2017-08-23T10:27:21Z")

</div>

When I check my elasticsearch using http://localhost:9200/\_cat/indices?v, I can see that there is the size of the index. let’s say I have an index there with 10gb… Is it 10gigabit? or 10gigabyt?

---

## [Unable to parse out XML fields](https://discuss.elastic.co/t/unable-to-parse-out-xml-fields/94353)

<div class="topic-metadata">

**Author:** [@maverick88](https://discuss.elastic.co/u/maverick88)\
**Replies:** 2\
**Last updated:** [July 25, 2017, 9:29pm UTC](https://discuss.elastic.co/t/unable-to-parse-out-xml-fields/94353 "2017-07-25T21:29:11Z")

</div>

Hello - I've exported some Windows events to XML and need to parse them into fields, but I'm not having much luck. I'm able to parse each event into a separate log using the multiline filter, but nothing I seem to do is …

---

## [Not able to run aggregate query in ElasticSearch](https://discuss.elastic.co/t/not-able-to-run-aggregate-query-in-elasticsearch/60036)

<div class="topic-metadata">

**Author:** [@SindhujaM](https://discuss.elastic.co/u/SindhujaM)\
**Replies:** 2\
**Last updated:** [September 8, 2016, 8:57am UTC](https://discuss.elastic.co/t/not-able-to-run-aggregate-query-in-elasticsearch/60036 "2016-09-08T08:57:21Z")

</div>

PROBLEM : Version : ElasticSearch 2.4.0 Not able to run aggregate(Facets) query for a nested JsonLD. Step 1 : Input JSonLD File { "@graph" : \[ { "@id" : "http://www.xyz.com/ontology/Person/estate", "G…

---

## [How to transform large numbers into shorter readable number in Kibana 4](https://discuss.elastic.co/t/how-to-transform-large-numbers-into-shorter-readable-number-in-kibana-4/59556)

<div class="topic-metadata">

**Author:** [@abhi\_chinchole](https://discuss.elastic.co/u/abhi_chinchole)\
**Replies:** 2\
**Last updated:** [September 2, 2016, 5:56am UTC](https://discuss.elastic.co/t/how-to-transform-large-numbers-into-shorter-readable-number-in-kibana-4/59556 "2016-09-02T05:56:24Z")

</div>

For example: 4,356,704 to 4356.704K or 4,356,704 to 4.356704M

---

## [Kibana 3 datetime format](https://discuss.elastic.co/t/kibana-3-datetime-format/41365)

<div class="topic-metadata">

**Author:** [@derp](https://discuss.elastic.co/u/derp)\
**Replies:** 2\
**Last updated:** [February 10, 2016, 2:22pm UTC](https://discuss.elastic.co/t/kibana-3-datetime-format/41365 "2016-02-10T14:22:35Z")

</div>

Would someone mind clarifying this basic question? Using Kibana 3 I have the timestamp returned from the API as 2016-02-07T04:00:54.090Z It looks like a standard ISO 8601 date format except the .090 is throwing me off…

---

## [Could not lock IndexWriter isLocked \[false\]](https://discuss.elastic.co/t/could-not-lock-indexwriter-islocked-false/17856)

<div class="topic-metadata">

**Author:** [@fatih](https://discuss.elastic.co/u/fatih)\
**Replies:** 2\
**Last updated:** [June 30, 2014, 4:48am UTC](https://discuss.elastic.co/t/could-not-lock-indexwriter-islocked-false/17856 "2014-06-30T04:48:50Z")

</div>

I try to create an index in a couple of seconds and i got this: \[2014-06-02 14:10:14,414\]\[WARN \]\[index.engine.internal \] \[shardicaprio\] \[ myindex\]\[0\] Could not lock IndexWriter isLocked \[false\] And here is full…

---

## [Failed to parse /etc/system-release](https://discuss.elastic.co/t/failed-to-parse-etc-system-release/222977)

<div class="topic-metadata">

**Author:** [@Martijn](https://discuss.elastic.co/u/Martijn)\
**Replies:** 8\
**Last updated:** [March 13, 2020, 9:36pm UTC](https://discuss.elastic.co/t/failed-to-parse-etc-system-release/222977 "2020-03-13T21:36:29Z")

</div>

Hi all, I am having an issue with the Metricbeat system module on red hat 6. I am getting the following error: "Error fetching data for metricset system.memory: VMStat: failed to read self process information: 1 error:…

---

## [ElasticSearch partial word highlighting with Java API](https://discuss.elastic.co/t/elasticsearch-partial-word-highlighting-with-java-api/41844)

<div class="topic-metadata">

**Author:** [@Shivang\_Sarawagi](https://discuss.elastic.co/u/Shivang_Sarawagi)\
**Replies:** 0\
**Last updated:** [February 16, 2016, 6:12am UTC](https://discuss.elastic.co/t/elasticsearch-partial-word-highlighting-with-java-api/41844 "2016-02-16T06:12:26Z")

</div>

I am using elastic search java api version 1.6 in my app for searching data. I wrote a query for the input search string MatchQueryBuilder qb = QueryBuilders.matchQuery("\_all", "search string"); SearchRequestBuilder …

---

## [FleetServer Policy with Logstash type output failing](https://discuss.elastic.co/t/fleetserver-policy-with-logstash-type-output-failing/329839)

<div class="topic-metadata">

**Author:** [@Bradut\_B](https://discuss.elastic.co/u/Bradut_B)\
**Replies:** 6\
**Last updated:** [April 13, 2023, 3:02pm UTC](https://discuss.elastic.co/t/fleetserver-policy-with-logstash-type-output-failing/329839 "2023-04-13T15:02:08Z")

</div>

I have the following scenario that works: FleetServer policy -\> output type Elasticsearch AgentPolicy -\> output type Logstash However if I try to change the output type for the Fleet Server policy, to Logstash I get a…

---

## [\[7.10\] Que veut dire le status des alerts and actions?](https://discuss.elastic.co/t/7-10-que-veut-dire-le-status-des-alerts-and-actions/260186)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [January 5, 2021, 4:40pm UTC](https://discuss.elastic.co/t/7-10-que-veut-dire-le-status-des-alerts-and-actions/260186 "2021-01-05T16:40:47Z")

</div>

Hello, Je mets en place des alerts et actions (pour remplacer les watchers) Je suis sur elastic-cloud Mon alerte est dans le status pending. Ca veut dire quoi? Je ne vois pas de bouton pour la mettre en mode active P…

---

## [Problem implementing EuiSearchBar, cannot create queries with multiple boolean operators](https://discuss.elastic.co/t/problem-implementing-euisearchbar-cannot-create-queries-with-multiple-boolean-operators/248112)

<div class="topic-metadata">

**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\
**Replies:** 6\
**Last updated:** [September 21, 2020, 7:33am UTC](https://discuss.elastic.co/t/problem-implementing-euisearchbar-cannot-create-queries-with-multiple-boolean-operators/248112 "2020-09-21T07:33:22Z")

</div>

I am trying to create a Kibana plugin, where I need do search on entire page, similar to that of search in Discover app. But query formed using the EuiSearchBar from elastic eui components I have the following setup im…

---

## [Changing the workers number](https://discuss.elastic.co/t/changing-the-workers-number/197098)

<div class="topic-metadata">

**Author:** [@Alisa\_Faingold](https://discuss.elastic.co/u/Alisa_Faingold)\
**Replies:** 6\
**Last updated:** [August 29, 2019, 12:44pm UTC](https://discuss.elastic.co/t/changing-the-workers-number/197098 "2019-08-29T12:44:41Z")

</div>

Hi, I'm trying to define transactions with elapsed filter, and I got the "elapsed\_end\_without\_start" tag. I found that the same issue happens to other people and the solution that has been suggested is changing the wor…

---

## [WEB log config file](https://discuss.elastic.co/t/web-log-config-file/122080)

<div class="topic-metadata">

**Author:** [@Rahul07](https://discuss.elastic.co/u/Rahul07)\
**Replies:** 6\
**Last updated:** [March 2, 2018, 9:50am UTC](https://discuss.elastic.co/t/web-log-config-file/122080 "2018-03-02T09:50:21Z")

</div>

HI i am new to ELK i have created indices and deleted through Kibana by query and manually from C:\\ELK\\elasticsearch-5.6.3\\elasticsearch-5.6.3\\data\\nodes\\0\\indices. when i try to create again indices with config file m…

---

## [Elasticsearch Deployment architecture](https://discuss.elastic.co/t/elasticsearch-deployment-architecture/17255)

<div class="topic-metadata">

**Author:** [@Dinesh\_Chandra](https://discuss.elastic.co/u/Dinesh_Chandra)\
**Replies:** 6\
**Last updated:** [April 30, 2014, 10:03am UTC](https://discuss.elastic.co/t/elasticsearch-deployment-architecture/17255 "2014-04-30T10:03:46Z")

</div>

Hi, I am very new to elasticsearch, I am trying to deploy elasticsearch in my dev environment - While there are many ways in which Elasticsearch can be deployed, I and my team have arrived at this architecture …

---

## [Install Elastic Search using Powershell](https://discuss.elastic.co/t/install-elastic-search-using-powershell/354697)

<div class="topic-metadata">

**Author:** [@kottak01](https://discuss.elastic.co/u/kottak01)\
**Replies:** 7\
**Last updated:** [March 9, 2024, 5:56pm UTC](https://discuss.elastic.co/t/install-elastic-search-using-powershell/354697 "2024-03-09T17:56:13Z")

</div>

Hi, I'm currently using Powershell to install Elastic Search and Kibana as my command prompt is not working. I'm unable to install by running ".\\elasticsearch.bat" on powershell. Can anyone assist with my issue?

---

## [Error when attempting to create component template using the ECS generator](https://discuss.elastic.co/t/error-when-attempting-to-create-component-template-using-the-ecs-generator/335004)

<div class="topic-metadata">

**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\
**Replies:** 1\
**Last updated:** [June 4, 2023, 6:40pm UTC](https://discuss.elastic.co/t/error-when-attempting-to-create-component-template-using-the-ecs-generator/335004 "2023-06-04T18:40:56Z")

</div>

Hello all, I am using the ECS mapping template generator to create the relevant components so we can start using the ECS fields. I cloned GitHub - elastic/ecs: Elastic Common Schema and generated essentially the default…

---

## [Prebuilt siem rules for cisco IOS and fortigate](https://discuss.elastic.co/t/prebuilt-siem-rules-for-cisco-ios-and-fortigate/244289)

<div class="topic-metadata">

**Author:** [@emahdij](https://discuss.elastic.co/u/emahdij)\
**Replies:** 1\
**Last updated:** [August 10, 2020, 3:36pm UTC](https://discuss.elastic.co/t/prebuilt-siem-rules-for-cisco-ios-and-fortigate/244289 "2020-08-10T15:36:25Z")

</div>

Hi I'm using ELK 7.6 with siem and we have cisco switches and fortigate firewall. Is there prebuilt siem rules for cisco IOS and fortigate?

---

## [Upgrade to 6.5 - snapshot error: Gateway Time-out](https://discuss.elastic.co/t/upgrade-to-6-5-snapshot-error-gateway-time-out/157676)

<div class="topic-metadata">

**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 12:04pm UTC](https://discuss.elastic.co/t/upgrade-to-6-5-snapshot-error-gateway-time-out/157676 "2018-11-21T12:04:47Z")

</div>

Hi guys, i would like to upgrade Elasticsearch (6.4), Kibana (6.4) and Logstash (6.4) to version 6.5. I found 2 links how to do the upgrade (it's my first upgrade at all), Rolling upgrades and Elastic Stack 6.3 Upgrade…

---

## [Isolating Hashtags in Twitter Feed](https://discuss.elastic.co/t/isolating-hashtags-in-twitter-feed/125532)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 7\
**Last updated:** [March 26, 2018, 5:11am UTC](https://discuss.elastic.co/t/isolating-hashtags-in-twitter-feed/125532 "2018-03-26T05:11:26Z")

</div>

Maybe my best bet is to start with my end goal and then someone can tell me if this is possible. I'd like to build Kibana visuals that show top mentions of hashtags as they appear in the \[extended\_tweet\]\[full\_text\] fiel…

---

## [Docker: best way to disable security?](https://discuss.elastic.co/t/docker-best-way-to-disable-security/124319)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [March 20, 2018, 3:14am UTC](https://discuss.elastic.co/t/docker-best-way-to-disable-security/124319 "2018-03-20T03:14:57Z")

</div>

Hi, I use basic license of xpack. Currently I am trying to get familar with docker. I would like to use the monitoring plugin of logstash to ship it's data to ES. But since I am only using basic license, I need to di…

---

## [NullPointerException Build.java:48](https://discuss.elastic.co/t/nullpointerexception-build-java-48/107830)

<div class="topic-metadata">

**Author:** [@dougbeasley](https://discuss.elastic.co/u/dougbeasley)\
**Replies:** 1\
**Last updated:** [November 20, 2017, 1:48pm UTC](https://discuss.elastic.co/t/nullpointerexception-build-java-48/107830 "2017-11-20T13:48:06Z")

</div>

I'm having an issue with using the RestHighLevelClient with the maven-jetty-plugin. This NPE only manifests when running locally with mvn jetty:run I don't have this issue when packaging as a war and deploying to a con…

---

## [Filebeat.full.yml Complete](https://discuss.elastic.co/t/filebeat-full-yml-complete/91782)

<div class="topic-metadata">

**Author:** [@erion](https://discuss.elastic.co/u/erion)\
**Replies:** 1\
**Last updated:** [July 4, 2017, 8:19pm UTC](https://discuss.elastic.co/t/filebeat-full-yml-complete/91782 "2017-07-04T20:19:07Z")

</div>

Hi, my ocnfiguration filebeat.yml in like Filebeat.prospectors: -input\_type: log Paths: /mnt/analog/file\_name\_log Output.elasticsearch: hosts: \[“27.49.258.78”\] protocol: “https” when i try to upload log with c…

---

## [Logstash filter for django logs not working](https://discuss.elastic.co/t/logstash-filter-for-django-logs-not-working/86209)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 1\
**Last updated:** [May 20, 2017, 11:38pm UTC](https://discuss.elastic.co/t/logstash-filter-for-django-logs-not-working/86209 "2017-05-20T23:38:53Z")

</div>

filter { if\[type\] == "django" { grok { patterns\_dir =\> \["/opt/logstash/patterns/"\] match =\> \[ "message" , "%{LOGLEVEL:loglevel} %{DJANGOTIMESTAMP:timestamp},{INT:pid} %{WORD:origin} %{INT…

---

## [Multimatch not working as expected, help needed](https://discuss.elastic.co/t/multimatch-not-working-as-expected-help-needed/82641)

<div class="topic-metadata">

**Author:** [@Laura\_Cabre](https://discuss.elastic.co/u/Laura_Cabre)\
**Replies:** 1\
**Last updated:** [April 18, 2017, 8:50am UTC](https://discuss.elastic.co/t/multimatch-not-working-as-expected-help-needed/82641 "2017-04-18T08:50:22Z")

</div>

Hi! I am wondering why I am seeing the following (Elasticsearch V 5.1) I have the following query. { "multi\_match" : { "query" : "bli", "type" : "phrase\_prefix", …

---

## [Issue with file input multiline codec](https://discuss.elastic.co/t/issue-with-file-input-multiline-codec/66269)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 1\
**Last updated:** [November 17, 2016, 12:48pm UTC](https://discuss.elastic.co/t/issue-with-file-input-multiline-codec/66269 "2016-11-17T12:48:41Z")

</div>

Hi, I have a log file that has I need to support multiline parsing and I'm in the process of migrating from multiline filter to multiline codec My input configuration is file { path =\> "c:/temp/test.log" sta…

---

## [ES Marvel searching/Indexing metrics](https://discuss.elastic.co/t/es-marvel-searching-indexing-metrics/46768)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 1\
**Last updated:** [April 8, 2016, 7:21am UTC](https://discuss.elastic.co/t/es-marvel-searching-indexing-metrics/46768 "2016-04-08T07:21:49Z")

</div>

Hi All, we have been using Marvel tool for monitoring Elasticsearch cluster and everyday marvel will create own index and it is capable of storing all the activities happened to the cluster like (searching & Indexing). …

---

## [Mapping private IP Address to geolocation with GeoIP Processor](https://discuss.elastic.co/t/mapping-private-ip-address-to-geolocation-with-geoip-processor/279981)

<div class="topic-metadata">

**Author:** [@Vannessa\_Kemeni](https://discuss.elastic.co/u/Vannessa_Kemeni)\
**Replies:** 4\
**Last updated:** [August 3, 2021, 11:54am UTC](https://discuss.elastic.co/t/mapping-private-ip-address-to-geolocation-with-geoip-processor/279981 "2021-08-03T11:54:55Z")

</div>

Hello, i am using a tool, that uses Elastic search. For retrieving the geolocaton of the IP Address a Json file was created that uses the GeoIP Processor. I updated this file in order to set the geolocation of the priva…

---

## [Ingest Attachment Plugin: How to add data to an existing array?](https://discuss.elastic.co/t/ingest-attachment-plugin-how-to-add-data-to-an-existing-array/238651)

<div class="topic-metadata">

**Author:** [@Sven.0](https://discuss.elastic.co/u/Sven.0)\
**Replies:** 4\
**Last updated:** [June 25, 2020, 1:36pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-how-to-add-data-to-an-existing-array/238651 "2020-06-25T13:36:08Z")

</div>

Hi :slightly\_smiling\_face: I'm a beginner to Elasticsearch, so maybe this is simple to solve, but I haven't found a solution to my problem: I have an object with an array containing attachment data, and I want to be ab…

---

## [java.lang.IllegalArgumentException Error using Bulk Update API](https://discuss.elastic.co/t/java-lang-illegalargumentexception-error-using-bulk-update-api/217306)

<div class="topic-metadata">

**Author:** [@Toshif](https://discuss.elastic.co/u/Toshif)\
**Replies:** 4\
**Last updated:** [January 31, 2020, 9:50am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-error-using-bulk-update-api/217306 "2020-01-31T09:50:37Z")

</div>

Hello people, I am trying to bulk update in elasticSearch using java. I have a JSON list and I'm passing that list in bulk request to update, but its throwing an error as below : Exception in thread "main" java.lang.I…

---

## [Change the index name used in elasticsearch module](https://discuss.elastic.co/t/change-the-index-name-used-in-elasticsearch-module/176700)

<div class="topic-metadata">

**Author:** [@mtoumi](https://discuss.elastic.co/u/mtoumi)\
**Replies:** 4\
**Last updated:** [April 18, 2019, 3:58am UTC](https://discuss.elastic.co/t/change-the-index-name-used-in-elasticsearch-module/176700 "2019-04-18T03:58:05Z")

</div>

Hi I am trying to monitor an es cluster using metricbeat elasticsearch module for some reason I can't change the index name sent to my monitoring cluster from .monitor-es-6-mb. 2019-04-12T19:31:55.671Z DEBUG …

---

## [Cannot enable x-pack with basic-flavor elastic docker image (6.0.0)](https://discuss.elastic.co/t/cannot-enable-x-pack-with-basic-flavor-elastic-docker-image-6-0-0/108166)

<div class="topic-metadata">

**Author:** [@john\_int](https://discuss.elastic.co/u/john_int)\
**Replies:** 4\
**Last updated:** [November 21, 2017, 1:59pm UTC](https://discuss.elastic.co/t/cannot-enable-x-pack-with-basic-flavor-elastic-docker-image-6-0-0/108166 "2017-11-21T13:59:02Z")

</div>

Greetings. Following the docs https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html i'm downloading the basic-flavor image. Running it with docker run -d -p 9200:9200 -e "http.host=0.0.0.0" …

---

## [Highlighters Executed Twice](https://discuss.elastic.co/t/highlighters-executed-twice/100080)

<div class="topic-metadata">

**Author:** [@mkrauklis](https://discuss.elastic.co/u/mkrauklis)\
**Replies:** 4\
**Last updated:** [September 13, 2017, 3:16pm UTC](https://discuss.elastic.co/t/highlighters-executed-twice/100080 "2017-09-13T15:16:21Z")

</div>

We're running ES 5.1.1 and are using a custom highlighter, although we've tested and this effects the plain highlighter (and I would imagine any highlighter) as well. In short, it would appear our highlighter is being c…

---

## [Removing index settings](https://discuss.elastic.co/t/removing-index-settings/8458)

<div class="topic-metadata">

**Author:** [@Stephen\_Beeson](https://discuss.elastic.co/u/Stephen_Beeson)\
**Replies:** 4\
**Last updated:** [October 9, 2013, 11:22pm UTC](https://discuss.elastic.co/t/removing-index-settings/8458 "2013-10-09T23:22:34Z")

</div>

I have a configuration yml file that I am using to specify the analyzers that I am using to index our documents. This is working fine, however if I remove settings from the yml file, after updating elasticsearch, the…

---

## [Kibana doesn't start properly at upgrade from 7.17.1 to 8.3.2](https://discuss.elastic.co/t/kibana-doesnt-start-properly-at-upgrade-from-7-17-1-to-8-3-2/309586)

<div class="topic-metadata">

**Author:** [@gerib](https://discuss.elastic.co/u/gerib)\
**Replies:** 3\
**Last updated:** [July 19, 2022, 11:12am UTC](https://discuss.elastic.co/t/kibana-doesnt-start-properly-at-upgrade-from-7-17-1-to-8-3-2/309586 "2022-07-19T11:12:01Z")

</div>

Log message(s): ... ... \[ERROR\]\[savedobjects-service\] \[.kibana\] Action failed with 'security\_exception: \[security\_exception\] Reason: action \[indices:admin/create\] is unauthorized for user \[kibanaserver\] with roles \[…

---

## [Килицица в поиске Wildcard](https://discuss.elastic.co/t/wildcard/285755)

<div class="topic-metadata">

**Author:** [@VMExpert](https://discuss.elastic.co/u/VMExpert)\
**Replies:** 3\
**Last updated:** [October 5, 2021, 1:58pm UTC](https://discuss.elastic.co/t/wildcard/285755 "2021-10-05T13:58:10Z")

</div>

Здравствуйте. Мне помогли с фильтром: { "settings": { "analysis": { "analyzer": { "default": { "tokenizer": "standard", "filter": \[ "my\_phonetic\_english", …

---

## [No security menus: users, RBAC](https://discuss.elastic.co/t/no-security-menus-users-rbac/227665)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 3\
**Last updated:** [April 13, 2020, 2:02pm UTC](https://discuss.elastic.co/t/no-security-menus-users-rbac/227665 "2020-04-13T14:02:35Z")

</div>

Hi, I have basic license and I don't see security section in settings, why? I have default installation of ELK stack v7.6.2. How can I enable all options to which I have access/icense, to just see them?

---

## [IIS Filebeat module exclude\_lines not working](https://discuss.elastic.co/t/iis-filebeat-module-exclude-lines-not-working/174961)

<div class="topic-metadata">

**Author:** [@Darren\_Mansell](https://discuss.elastic.co/u/Darren_Mansell)\
**Replies:** 3\
**Last updated:** [April 2, 2019, 12:16pm UTC](https://discuss.elastic.co/t/iis-filebeat-module-exclude-lines-not-working/174961 "2019-04-02T12:16:49Z")

</div>

Hi. This is a simple install of filebeat 6.6.1 on windows. I've enabled the IIS module and set the location so it doesn't pick up the FTP logs and have grok failures. I also need it to ignore certain lines which contain…

---

## [How to set input filter logstash?](https://discuss.elastic.co/t/how-to-set-input-filter-logstash/154433)

<div class="topic-metadata">

**Author:** [@rohith3e](https://discuss.elastic.co/u/rohith3e)\
**Replies:** 3\
**Last updated:** [October 31, 2018, 7:08am UTC](https://discuss.elastic.co/t/how-to-set-input-filter-logstash/154433 "2018-10-31T07:08:53Z")

</div>

Im bit new to ELK, I need to monitor my application logs(Java tomcat) using ELK, how do I setup a filter in logstash? Should I need to add any this think extra in filebeat.yml other than input path and output hostname an…

---

## [Scripted fields for regex match](https://discuss.elastic.co/t/scripted-fields-for-regex-match/151753)

<div class="topic-metadata">

**Author:** [@ramji](https://discuss.elastic.co/u/ramji)\
**Replies:** 3\
**Last updated:** [October 17, 2018, 4:22pm UTC](https://discuss.elastic.co/t/scripted-fields-for-regex-match/151753 "2018-10-17T16:22:05Z")

</div>

doc1: message: Reconciliation for plan 141 - Line 3 is completed This is my case in a index doc2: message: Reconciliation for plan 141 - Line 3 is started doc3: message: Reconciliation for plan 141 - Line 3 is Fail…

---

## [Can not login on kibana after upgrade to 6.3](https://discuss.elastic.co/t/can-not-login-on-kibana-after-upgrade-to-6-3/136718)

<div class="topic-metadata">

**Author:** [@lsy](https://discuss.elastic.co/u/lsy)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 11:49pm UTC](https://discuss.elastic.co/t/can-not-login-on-kibana-after-upgrade-to-6-3/136718 "2018-06-21T23:49:19Z")

</div>

The previous version I used was 6.24. After I upgraded the elasticsearch and kibana to 6.3, the login is disable( can not input the username and password). When I removed xpack.security.enabled: true in the elasticsear…

[Previous page](https://discuss.elastic.co/top.md?page=1507&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1509&per_page=50&period=all)
