# Top

**URL:** https://discuss.elastic.co/top.md?page=1525&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1526

---

## [Setting publish\_address for logstash](https://discuss.elastic.co/t/setting-publish-address-for-logstash/23071)

<div class="topic-metadata">

**Author:** [@sijomathew](https://discuss.elastic.co/u/sijomathew)\
**Replies:** 2\
**Last updated:** [November 18, 2015, 12:58pm UTC](https://discuss.elastic.co/t/setting-publish-address-for-logstash/23071 "2015-11-18T12:58:11Z")

</div>

Hi, The machine that I run logstash process has two network interfaces (public and private) and it looks like the logstash process picks up my private IP address as the "publish\_address" by default. As I use the o…

---

## [Incorrect Aggregations returned from ES](https://discuss.elastic.co/t/incorrect-aggregations-returned-from-es/22908)

<div class="topic-metadata">

**Author:** [@MC1](https://discuss.elastic.co/u/MC1)\
**Replies:** 2\
**Last updated:** [April 14, 2015, 2:05pm UTC](https://discuss.elastic.co/t/incorrect-aggregations-returned-from-es/22908 "2015-04-14T14:05:27Z")

</div>

I am seeing some erroneous behavior in my ES cluster when performing aggregations. Originally, I thought this was specific to a histogram as that is where the error first appeared (in a K3 graph - see my post http…

---

## [Runtime error trying to run the ES sample code](https://discuss.elastic.co/t/runtime-error-trying-to-run-the-es-sample-code/4309)

<div class="topic-metadata">

**Author:** [@Jondow](https://discuss.elastic.co/u/Jondow)\
**Replies:** 2\
**Last updated:** [April 29, 2011, 8:06am UTC](https://discuss.elastic.co/t/runtime-error-trying-to-run-the-es-sample-code/4309 "2011-04-29T08:06:24Z")

</div>

Apologies if this is a silly error on my part, but I keep getting the following error when running the ES sample code: Node started Caught: groovy.lang.MissingMethodException: No signature of method: org.elasticsea…

---

## [APM RUM on flutter app](https://discuss.elastic.co/t/apm-rum-on-flutter-app/344368)

<div class="topic-metadata">

**Author:** [@Klauck](https://discuss.elastic.co/u/Klauck)\
**Replies:** 1\
**Last updated:** [October 4, 2023, 2:56pm UTC](https://discuss.elastic.co/t/apm-rum-on-flutter-app/344368 "2023-10-04T14:56:18Z")

</div>

Hi, I'm wondering if there is a possibility to use real user monitoring in an flutter app? Is there any package or howto available? Best Martin

---

## [How to add field for logs from specific file](https://discuss.elastic.co/t/how-to-add-field-for-logs-from-specific-file/224567)

<div class="topic-metadata">

**Author:** [@pedro.1234](https://discuss.elastic.co/u/pedro.1234)\
**Replies:** 1\
**Last updated:** [March 23, 2020, 5:23pm UTC](https://discuss.elastic.co/t/how-to-add-field-for-logs-from-specific-file/224567 "2020-03-23T17:23:51Z")

</div>

Hello, I'm fresh user of ELK, i would like to read logs from different files and use grok's filter only for certain log/file. My setup looks like this: firewall logs -\> rsyslog -\> file -\> filebeat -\> logstash -\> Elast…

---

## [Kibana server is not ready yet-after change in elastic](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-after-change-in-elastic/211591)

<div class="topic-metadata">

**Author:** [@Faten](https://discuss.elastic.co/u/Faten)\
**Replies:** 1\
**Last updated:** [December 12, 2019, 8:56am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-after-change-in-elastic/211591 "2019-12-12T08:56:03Z")

</div>

Hi, I added xpack.security.enabled: true to elastic and I restarted Kibana and elastic, for some reason I cannot get the Kibana up, and while checking the Kibana and elastic service status I can see that both are up an…

---

## [Watcher: The triggered\_time is 2 hours behind the current time](https://discuss.elastic.co/t/watcher-the-triggered-time-is-2-hours-behind-the-current-time/177046)

<div class="topic-metadata">

**Author:** [@michael.spaltenstein](https://discuss.elastic.co/u/michael.spaltenstein)\
**Replies:** 1\
**Last updated:** [April 16, 2019, 10:01am UTC](https://discuss.elastic.co/t/watcher-the-triggered-time-is-2-hours-behind-the-current-time/177046 "2019-04-16T10:01:51Z")

</div>

For Example: Execution Output: { "watch\_id": "49b060ac-cf03-413d-b1d1-bc6b6d2ac2b7", "node": "Ukh-HUj2Ts28O82RcpmdiQ", "state": "execution\_not\_needed", "user": "user-1", "status": { "state": { "…

---

## [Histogram - Percentage (Y-axis) and Count (X-axis)](https://discuss.elastic.co/t/histogram-percentage-y-axis-and-count-x-axis/175926)

<div class="topic-metadata">

**Author:** [@akashlee](https://discuss.elastic.co/u/akashlee)\
**Replies:** 1\
**Last updated:** [April 9, 2019, 12:54am UTC](https://discuss.elastic.co/t/histogram-percentage-y-axis-and-count-x-axis/175926 "2019-04-09T00:54:09Z")

</div>

How do I generate a histogram for the below scenario? Traveler data contains number of nights booked. Histogram's Y-axis should say percentage of travelers, and X-axis should say number of nights booked such as 80% boo…

---

## [Extract a tag field into watcher / Watcher to Alert if a Heartbeat Host is Down](https://discuss.elastic.co/t/extract-a-tag-field-into-watcher-watcher-to-alert-if-a-heartbeat-host-is-down/132829)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 1\
**Last updated:** [May 23, 2018, 8:30am UTC](https://discuss.elastic.co/t/extract-a-tag-field-into-watcher-watcher-to-alert-if-a-heartbeat-host-is-down/132829 "2018-05-23T08:30:37Z")

</div>

I am trying to create a watcher, and I am using Heartbeat to check if any hosts are down. I have add a tag field to the IPs that I will be monitoring, this helps identify them easier. However, the tag field is not in th…

---

## [Date histogram Not working](https://discuss.elastic.co/t/date-histogram-not-working/101117)

<div class="topic-metadata">

**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 5:41pm UTC](https://discuss.elastic.co/t/date-histogram-not-working/101117 "2017-09-20T17:41:19Z")

</div>

To migrate my all MySQL data to elasticsearch I used the bulk indexing. After I migrate all my older data. I started to sync my current data flow to the elasticsearch. when I use kibana to discover the new data, it show…

---

## [How to parse dd MMM HH:mm:ss IST date format?](https://discuss.elastic.co/t/how-to-parse-dd-mmm-hh-mm-ss-ist-date-format/87172)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 1\
**Last updated:** [May 29, 2017, 6:42pm UTC](https://discuss.elastic.co/t/how-to-parse-dd-mmm-hh-mm-ss-ist-date-format/87172 "2017-05-29T18:42:10Z")

</div>

Hi Experts, I have date value like 15 May 2017 11:52:59 IST Here I am not sure how to handle IST Please suggest in Logstash what date format I can apply on this value . I used date {match =\> \["endTime","dd MMM YYYY H…

---

## [Hierarchy level access](https://discuss.elastic.co/t/hierarchy-level-access/79156)

<div class="topic-metadata">

**Author:** [@anja98](https://discuss.elastic.co/u/anja98)\
**Replies:** 1\
**Last updated:** [March 27, 2017, 6:55am UTC](https://discuss.elastic.co/t/hierarchy-level-access/79156 "2017-03-27T06:55:13Z")

</div>

Hi, I'd like to find out if Kibana support hierarchy level access. For example, if an organisation has sub organisation and each sub has departments under it. How can I create a department user login with access …

---

## [Hsbeat: how to map the fields to what their represent](https://discuss.elastic.co/t/hsbeat-how-to-map-the-fields-to-what-their-represent/77050)

<div class="topic-metadata">

**Author:** [@Parisa](https://discuss.elastic.co/u/Parisa)\
**Replies:** 1\
**Last updated:** [March 8, 2017, 3:14pm UTC](https://discuss.elastic.co/t/hsbeat-how-to-map-the-fields-to-what-their-represent/77050 "2017-03-08T15:14:27Z")

</div>

Hi, I'm using hsbeat and it is fantastic. However I have a hard time matching the field names to what they represent. For example from the visualization I can say that the "hotspot.hsperfdata.sun/gc/generation/1/space/…

---

## [How does Filebeat handle log rotation](https://discuss.elastic.co/t/how-does-filebeat-handle-log-rotation/64959)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [November 4, 2016, 7:36am UTC](https://discuss.elastic.co/t/how-does-filebeat-handle-log-rotation/64959 "2016-11-04T07:36:13Z")

</div>

How does Filebeat handle log rotation For example when app.log rolls over to app.1.log. Does it know to ignore app.1.log since it was already shipped?

---

## [Elastic Search Hosting on AS400](https://discuss.elastic.co/t/elastic-search-hosting-on-as400/59629)

<div class="topic-metadata">

**Author:** [@Arun\_singh](https://discuss.elastic.co/u/Arun_singh)\
**Replies:** 1\
**Last updated:** [September 2, 2016, 6:48am UTC](https://discuss.elastic.co/t/elastic-search-hosting-on-as400/59629 "2016-09-02T06:48:17Z")

</div>

Hi All We are planning to use elastic search in our project. Our project runs on AS400. Can we host our elastic search engine on AS400. Or are there any wrappers built around for the same. If any other challenges ar…

---

## [Elasticsearch as a data source in business intelligence & visualization softwares](https://discuss.elastic.co/t/elasticsearch-as-a-data-source-in-business-intelligence-visualization-softwares/57443)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [August 9, 2016, 12:16am UTC](https://discuss.elastic.co/t/elasticsearch-as-a-data-source-in-business-intelligence-visualization-softwares/57443 "2016-08-09T00:16:22Z")

</div>

Whether elasticsearch is supported as a data source in Power BI, Tableau, Tibco Spotfire and QlikView? Is there any native connectors from elastic are available to integrate with these BI and Visualization tools?

---

## [How to get started with Elasticsearch plugin development?](https://discuss.elastic.co/t/how-to-get-started-with-elasticsearch-plugin-development/52882)

<div class="topic-metadata">

**Author:** [@adityasinghraghav](https://discuss.elastic.co/u/adityasinghraghav)\
**Replies:** 1\
**Last updated:** [June 16, 2016, 7:40am UTC](https://discuss.elastic.co/t/how-to-get-started-with-elasticsearch-plugin-development/52882 "2016-06-16T07:40:38Z")

</div>

I am trying to write a plugin for Elasticsearch for a project of mine. I want the plugin to be able to send the results of a query to an external api which will then return a new score for each of the result. I then wan…

---

## [Packetbeat on Kubernetes](https://discuss.elastic.co/t/packetbeat-on-kubernetes/43965)

<div class="topic-metadata">

**Author:** [@cshuman](https://discuss.elastic.co/u/cshuman)\
**Replies:** 1\
**Last updated:** [March 10, 2016, 11:46am UTC](https://discuss.elastic.co/t/packetbeat-on-kubernetes/43965 "2016-03-10T11:46:58Z")

</div>

Does anyone have experience running Packetbeat on Kubernetes?

---

## [Suggest sur plusieurs mots au milieu d'une expression](https://discuss.elastic.co/t/suggest-sur-plusieurs-mots-au-milieu-dune-expression/26216)

<div class="topic-metadata">

**Author:** [@Francis](https://discuss.elastic.co/u/Francis)\
**Replies:** 1\
**Last updated:** [July 24, 2015, 11:22am UTC](https://discuss.elastic.co/t/suggest-sur-plusieurs-mots-au-milieu-dune-expression/26216 "2015-07-24T11:22:31Z")

</div>

Bonjour, Je rencontre un soucis à l'utilisation de l'API Suggest. En effet j'ai ce type de données : Centre principal Le Havre Centre secondaire Le Havre Centre principal Amiens .... Le Suggest fonctionne correct…

---

## [Elastic APM java agent ignore specific gRPC function](https://discuss.elastic.co/t/elastic-apm-java-agent-ignore-specific-grpc-function/294024)

<div class="topic-metadata">

**Author:** [@duclm2609](https://discuss.elastic.co/u/duclm2609)\
**Replies:** 4\
**Last updated:** [January 14, 2022, 4:04pm UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-ignore-specific-grpc-function/294024 "2022-01-14T16:04:30Z")

</div>

Hello guys, I'm using Elastic APM Java agent to instrument my application, which is a gRPC server. My server implement gRPC healthcheck protocol and the healthcheck function is called every 10 seconds. I don't want to r…

---

## [Sequence number for ECS Events received by TCP?](https://discuss.elastic.co/t/sequence-number-for-ecs-events-received-by-tcp/291348)

<div class="topic-metadata">

**Author:** [@Matthias\_W](https://discuss.elastic.co/u/Matthias_W)\
**Replies:** 4\
**Last updated:** [December 10, 2021, 2:27pm UTC](https://discuss.elastic.co/t/sequence-number-for-ecs-events-received-by-tcp/291348 "2021-12-10T14:27:58Z")

</div>

Hi, I have configured my application server (JBoss) to format log messages using the ECS formatter and directly send them to Filebeat via TCP. This works mostly fine - however, there is one issue: Log entries having th…

---

## [Clarification on "Collect Agent Logs" setting for Elastic Agent Policies](https://discuss.elastic.co/t/clarification-on-collect-agent-logs-setting-for-elastic-agent-policies/287021)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 4\
**Last updated:** [October 20, 2021, 3:20pm UTC](https://discuss.elastic.co/t/clarification-on-collect-agent-logs-setting-for-elastic-agent-policies/287021 "2021-10-20T15:20:29Z")

</div>

Hey, I'm wondering how the "Collect Agent Logs" setting works for Elastic Agent. In the past I made the experience that when selecting both "Collect Agent Logs" and "Collect Agent Metrics", it would cause massive amounts…

---

## [Redindex, version\_type external](https://discuss.elastic.co/t/redindex-version-type-external/271587)

<div class="topic-metadata">

**Author:** [@Kalpa](https://discuss.elastic.co/u/Kalpa)\
**Replies:** 4\
**Last updated:** [April 29, 2021, 8:42am UTC](https://discuss.elastic.co/t/redindex-version-type-external/271587 "2021-04-29T08:42:56Z")

</div>

HI All, Reindex can be done multiple times as per the documentation, during this phase, for example. reindexed at time 1. deleted some docs from the source added some docs to the source. reindex with version\_type ext…

---

## [Dropdown to select the agregation of a chart](https://discuss.elastic.co/t/dropdown-to-select-the-agregation-of-a-chart/158357)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 2:54pm UTC](https://discuss.elastic.co/t/dropdown-to-select-the-agregation-of-a-chart/158357 "2018-11-27T14:54:46Z")

</div>

Good afternoon, Is there any option to insert one dropdown in a dashboard? For example, one dropdown with this two options:sumfield1,sumfield2. This dropdown point to one line chart and this chart change de data dependi…

---

## [Multiple Shards Stuck in INIT State](https://discuss.elastic.co/t/multiple-shards-stuck-in-init-state/101557)

<div class="topic-metadata">

**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\
**Replies:** 4\
**Last updated:** [September 23, 2017, 10:14am UTC](https://discuss.elastic.co/t/multiple-shards-stuck-in-init-state/101557 "2017-09-23T10:14:45Z")

</div>

I have been battling with one of my clusters for a couple of days now. I had multiple shards stuck in INIT for several hours, and if I'd let it it would have been days. ES saw these shards as being in progress, but they …

---

## [Sorting by number of hits](https://discuss.elastic.co/t/sorting-by-number-of-hits/82784)

<div class="topic-metadata">

**Author:** [@alopez](https://discuss.elastic.co/u/alopez)\
**Replies:** 4\
**Last updated:** [April 19, 2017, 2:40pm UTC](https://discuss.elastic.co/t/sorting-by-number-of-hits/82784 "2017-04-19T14:40:15Z")

</div>

I'm fairly new to Elastic Search and am wondering if it's possible to sort the results by the number of hits each document has. Essentially, if i'm searching a string for the word "test" I need sort the results by the do…

---

## [Node APM auto span middlewares](https://discuss.elastic.co/t/node-apm-auto-span-middlewares/133774)

<div class="topic-metadata">

**Author:** [@fejalish](https://discuss.elastic.co/u/fejalish)\
**Replies:** 2\
**Last updated:** [May 31, 2018, 2:44am UTC](https://discuss.elastic.co/t/node-apm-auto-span-middlewares/133774 "2018-05-31T02:44:22Z")

</div>

Hallo, After trying out the Node APM with a Koa app and I've noticed that there's no auto-instrumentation of middlewares - i.e. no span for each middleware used. And after poking around to attempt a rough implementation…

---

## [Kibtool: manage your Kibana objects with CLI](https://discuss.elastic.co/t/kibtool-manage-your-kibana-objects-with-cli/66651)

<div class="topic-metadata">

**Author:** [@jpparis\_orange](https://discuss.elastic.co/u/jpparis_orange)\
**Replies:** 2\
**Last updated:** [December 3, 2016, 5:16pm UTC](https://discuss.elastic.co/t/kibtool-manage-your-kibana-objects-with-cli/66651 "2016-12-03T17:16:32Z")

</div>

I just published the first release of kibtool. If you are managing several Kibana instances (ie. development, preproduction and production) and if you are tired to export/import objects using the Kibana GUI, kibtool CL…

---

## [Why do my scroll operations fail?](https://discuss.elastic.co/t/why-do-my-scroll-operations-fail/864)

<div class="topic-metadata">

**Author:** [@ptrei](https://discuss.elastic.co/u/ptrei)\
**Replies:** 0\
**Last updated:** [May 18, 2015, 8:59pm UTC](https://discuss.elastic.co/t/why-do-my-scroll-operations-fail/864 "2015-05-18T20:59:03Z")

</div>

Me again - I fixed my speed problem by moving to another system - I think the one I was on had flakey HW. But I'm still having problems with my small four node cluster; reading records keeps crahsing. I'm using elastic…

---

## [FileBeat consumes Kafka, every time a FileBeat is started as a consumer, Kafka needs to spend several hours for the rebalancing, and only the first FileBeat will not have the rebalancing](https://discuss.elastic.co/t/filebeat-consumes-kafka-every-time-a-filebeat-is-started-as-a-consumer-kafka-needs-to-spend-several-hours-for-the-rebalancing-and-only-the-first-filebeat-will-not-have-the-rebalancing/277627)

<div class="topic-metadata">

**Author:** [@hadogen](https://discuss.elastic.co/u/hadogen)\
**Replies:** 0\
**Last updated:** [July 2, 2021, 8:56am UTC](https://discuss.elastic.co/t/filebeat-consumes-kafka-every-time-a-filebeat-is-started-as-a-consumer-kafka-needs-to-spend-several-hours-for-the-rebalancing-and-only-the-first-filebeat-will-not-have-the-rebalancing/277627 "2021-07-02T08:56:43Z")

</div>

ENV: kafka. 2.12-2.0.1 x 3 filebeat version 7.12.1. x N kafka config file: broker.id=111 listeners=PLAINTEXT://172.30.160.16:9091 advertised.listeners=PLAINTEXT://172.30.160.16:9091 num.network.threads=48 num.io.t…

---

## [Decreasing query time node ram vs another node](https://discuss.elastic.co/t/decreasing-query-time-node-ram-vs-another-node/180396)

<div class="topic-metadata">

**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\
**Replies:** 0\
**Last updated:** [May 9, 2019, 3:24pm UTC](https://discuss.elastic.co/t/decreasing-query-time-node-ram-vs-another-node/180396 "2019-05-09T15:24:56Z")

</div>

Hi, we have a question about the scalability in particular number of nodes vs amount of ram of each node. Our problem is the following: we have 8 processes that perform query on elastic and our elastic cluster (o elast…

---

## [Setup, configure Logstash for collecting peromance issues for MongoDB](https://discuss.elastic.co/t/setup-configure-logstash-for-collecting-peromance-issues-for-mongodb/80436)

<div class="topic-metadata">

**Author:** [@karunakarkotha](https://discuss.elastic.co/u/karunakarkotha)\
**Replies:** 0\
**Last updated:** [March 29, 2017, 8:23am UTC](https://discuss.elastic.co/t/setup-configure-logstash-for-collecting-peromance-issues-for-mongodb/80436 "2017-03-29T08:23:31Z")

</div>

I want to capture the MongoDB performance issue for MongoDB using Logstash, can anyone please provide me sameple config file and configuration steps

---

## [Get token OAuth from Heartbeat before monitoring a service](https://discuss.elastic.co/t/get-token-oauth-from-heartbeat-before-monitoring-a-service/317526)

<div class="topic-metadata">

**Author:** [@rbr66](https://discuss.elastic.co/u/rbr66)\
**Replies:** 1\
**Last updated:** [October 26, 2022, 2:34pm UTC](https://discuss.elastic.co/t/get-token-oauth-from-heartbeat-before-monitoring-a-service/317526 "2022-10-26T14:34:34Z")

</div>

Hi, We have a health check service that for security reasons we have secured by OAuth, then to invoke it we need to have a valid token. Our current monitor is as follows: Is it possible to get a token every so often…

---

## [Exiting: 1 error: error loading config file: invalid config: yaml: line 91: did not find expected '-' indicator](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-91-did-not-find-expected-indicator/264996)

<div class="topic-metadata">

**Author:** [@Wahyu\_Nugroho](https://discuss.elastic.co/u/Wahyu_Nugroho)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 4:30am UTC](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-91-did-not-find-expected-indicator/264996 "2021-02-22T04:30:33Z")

</div>

Please help me. This is my filebeat.yml : ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. The…

---

## [Tag Cloud to only show current value](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165)

<div class="topic-metadata">

**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\
**Replies:** 7\
**Last updated:** [December 14, 2020, 9:52am UTC](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165 "2020-12-14T09:52:53Z")

</div>

I am reading data in from a machine tool and I would like to visualize the current status. My document looks like this @timestamp Dec 9, 2020 @ 10:44:00.867 @version 1 Events.Execution.@@data INTERRUPTED Events.Execut…

---

## [ES 7.9 doesn't start](https://discuss.elastic.co/t/es-7-9-doesnt-start/246908)

<div class="topic-metadata">

**Author:** [@YURA](https://discuss.elastic.co/u/YURA)\
**Replies:** 7\
**Last updated:** [September 1, 2020, 1:34pm UTC](https://discuss.elastic.co/t/es-7-9-doesnt-start/246908 "2020-09-01T13:34:04Z")

</div>

java -version openjdk version "1.8.0\_262" OpenJDK Runtime Environment (build 1.8.0\_262-b10) OpenJDK 64-Bit Server VM (build 25.262-b10, mixed mode) cat /etc/redhat-release CentOS Linux release 7.8.2003 (Core) was i…

---

## [Perfmon metrics on Windows](https://discuss.elastic.co/t/perfmon-metrics-on-windows/230539)

<div class="topic-metadata">

**Author:** [@Volodymyr\_Shypyguzov](https://discuss.elastic.co/u/Volodymyr_Shypyguzov)\
**Replies:** 1\
**Last updated:** [April 30, 2020, 12:46pm UTC](https://discuss.elastic.co/t/perfmon-metrics-on-windows/230539 "2020-04-30T12:46:19Z")

</div>

Hi there, we started using metricbeat for monitoring our windows machines including MSMQ perfmon counters. When using metricbeat 7.6.2 it starts reading them just fine, but after an hour or so it compains that it cannot …

---

## [Alerts on Message strings](https://discuss.elastic.co/t/alerts-on-message-strings/206198)

<div class="topic-metadata">

**Author:** [@Brad\_Wadsworth](https://discuss.elastic.co/u/Brad_Wadsworth)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 5:37pm UTC](https://discuss.elastic.co/t/alerts-on-message-strings/206198 "2019-11-01T17:37:05Z")

</div>

With Watcher, is it possible to alert on a string value in a message field?

---

## [Update request not updating documents in index](https://discuss.elastic.co/t/update-request-not-updating-documents-in-index/185861)

<div class="topic-metadata">

**Author:** [@vyas.radhakrishnan](https://discuss.elastic.co/u/vyas.radhakrishnan)\
**Replies:** 1\
**Last updated:** [June 14, 2019, 11:36pm UTC](https://discuss.elastic.co/t/update-request-not-updating-documents-in-index/185861 "2019-06-14T23:36:15Z")

</div>

in Elastic 6.5.4 update request for a field does not update the field correctly. The existing content is (partial content from doc) "PrimaryEmail": { "ContactPointId": 100000016065020, "\_secured": "Y", "EmailAddress…

---

## [How to install filebeat in RHEL 5?](https://discuss.elastic.co/t/how-to-install-filebeat-in-rhel-5/125894)

<div class="topic-metadata">

**Author:** [@muthu\_kumar1](https://discuss.elastic.co/u/muthu_kumar1)\
**Replies:** 1\
**Last updated:** [March 28, 2018, 12:33pm UTC](https://discuss.elastic.co/t/how-to-install-filebeat-in-rhel-5/125894 "2018-03-28T12:33:20Z")

</div>

We have one centralised log monitoring server which is RHEL 7. But we have some RHEL 5 server from there we need to pull logs.How to install filebeat in RHEL 5 server?

---

## [Parsing Azure json multiline logs by filebeat](https://discuss.elastic.co/t/parsing-azure-json-multiline-logs-by-filebeat/76812)

<div class="topic-metadata">

**Author:** [@111148](https://discuss.elastic.co/u/111148)\
**Replies:** 1\
**Last updated:** [March 3, 2017, 11:55am UTC](https://discuss.elastic.co/t/parsing-azure-json-multiline-logs-by-filebeat/76812 "2017-03-03T11:55:28Z")

</div>

Hello, Please advise is it possible to parse by filebeat json multiline logs with comma delimiters and send it to Elasticsearch? Json files sctucture are the next: { "time": "2017-02-28T12:04:25.7263914Z", "r…

---

## [Rescoring - Best Practice?](https://discuss.elastic.co/t/rescoring-best-practice/55227)

<div class="topic-metadata">

**Author:** [@chambo](https://discuss.elastic.co/u/chambo)\
**Replies:** 1\
**Last updated:** [July 11, 2016, 7:53pm UTC](https://discuss.elastic.co/t/rescoring-best-practice/55227 "2016-07-11T19:53:16Z")

</div>

I'm new to Elasticsearch. What is the best practice regarding rescoring? We need to do some complex searches including edit distances. From a performance perspective is rescoring the best practice or does it come with…

---

## [Get list of IPs/hosts querying elasticsearch](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 9:15pm UTC](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539 "2015-08-17T21:15:27Z")

</div>

I would just like to get a list of all IPs/hosts currently querying elasticsearch. What would be the best way of getting this information? Would this be possible? Thanks!

---

## [How to Output Display the Document Scoring](https://discuss.elastic.co/t/how-to-output-display-the-document-scoring/347074)

<div class="topic-metadata">

**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\
**Replies:** 5\
**Last updated:** [November 16, 2023, 4:30pm UTC](https://discuss.elastic.co/t/how-to-output-display-the-document-scoring/347074 "2023-11-16T16:30:23Z")

</div>

Hello Elastic, I need help on how do we display the document scoring based on the search results? For example like the Score on top of the Captain Marvel. I've tried to explore the code but couldn't find on the spe…

---

## [Discover tab shows data but table vizualization shows empty](https://discuss.elastic.co/t/discover-tab-shows-data-but-table-vizualization-shows-empty/238788)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 5\
**Last updated:** [July 6, 2020, 6:46am UTC](https://discuss.elastic.co/t/discover-tab-shows-data-but-table-vizualization-shows-empty/238788 "2020-07-06T06:46:42Z")

</div>

Hi, Heres the data in Discover tab And when the same is included in the Data table vizualization, the message is blank. I tried using top hit as well, all shows blank. Please help me fix this. Thanks!

---

## [Can i change password for elastic user \[default user\] using kibana dev-tool](https://discuss.elastic.co/t/can-i-change-password-for-elastic-user-default-user-using-kibana-dev-tool/229952)

<div class="topic-metadata">

**Author:** [@Dragon9](https://discuss.elastic.co/u/Dragon9)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 2:10pm UTC](https://discuss.elastic.co/t/can-i-change-password-for-elastic-user-default-user-using-kibana-dev-tool/229952 "2020-04-27T14:10:31Z")

</div>

please provide api for this currently i do this POST /\_security/user { "password" : "s3cr3t" } but error comes { "error": { "root\_cause": \[ { "type": "invalid\_index\_name\_exception", "re…

---

## [18MB of data enough to destory ES performance?](https://discuss.elastic.co/t/18mb-of-data-enough-to-destory-es-performance/119928)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 5\
**Last updated:** [February 16, 2018, 8:17am UTC](https://discuss.elastic.co/t/18mb-of-data-enough-to-destory-es-performance/119928 "2018-02-16T08:17:27Z")

</div>

Hi, I'm having some performance issues. I got a index with some netflow data in it and even though the total size is only 18MB, once I try to visualize more than a week of data in Kibana (couple of aggegrations) perform…

---

## [Bad response time when using date ranges](https://discuss.elastic.co/t/bad-response-time-when-using-date-ranges/13366)

<div class="topic-metadata">

**Author:** [@Matias\_Waisgold](https://discuss.elastic.co/u/Matias_Waisgold)\
**Replies:** 5\
**Last updated:** [August 29, 2013, 5:26am UTC](https://discuss.elastic.co/t/bad-response-time-when-using-date-ranges/13366 "2013-08-29T05:26:08Z")

</div>

I'm having a collection with 8M documents. I want to retrieve last 20 days of a "seller\_id", i'm doing this query: { "query": { "term": { "seller\_id": 83013710 } }, "filter": { "range"…

---

## [Re: about Scrutmydocs, Do you know?](https://discuss.elastic.co/t/re-about-scrutmydocs-do-you-know/12339)

<div class="topic-metadata">

**Author:** [@nyamka110\_2](https://discuss.elastic.co/u/nyamka110_2)\
**Replies:** 5\
**Last updated:** [June 13, 2013, 4:06pm UTC](https://discuss.elastic.co/t/re-about-scrutmydocs-do-you-know/12339 "2013-06-13T16:06:36Z")

</div>

and how do i connect scrutmydocs to my sql database? Or has it own data container in itself? I didn't run my own elasticsearch cluster, but there is already elasticsearch that running with a cluster named "scrutmydocs…

---

## [Indexing problems with GDAL/ogr2ogr for GEO\_POINT of geojson files](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856)

<div class="topic-metadata">

**Author:** [@Jordi\_Piqueras\_Bauti](https://discuss.elastic.co/u/Jordi_Piqueras_Bauti)\
**Replies:** 3\
**Last updated:** [March 8, 2022, 3:44pm UTC](https://discuss.elastic.co/t/indexing-problems-with-gdal-ogr2ogr-for-geo-point-of-geojson-files/298856 "2022-03-08T15:44:09Z")

</div>

I am having problem indexing Geojson files that have Point geometries using GDAL/ogr2ogr library. Points are not being indexed in the same way as if I am doing uploading geojson file with Kibana. With ogr2ogr I am havi…

[Previous page](https://discuss.elastic.co/top.md?page=1524&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1526&per_page=50&period=all)
