# Top **URL:** https://discuss.elastic.co/top.md?page=1530&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1531 --- ## [Need advice on ECE Hardware](https://discuss.elastic.co/t/need-advice-on-ece-hardware/166576)
**Author:** [@rockybean](https://discuss.elastic.co/u/rockybean)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 12:11am UTC](https://discuss.elastic.co/t/need-advice-on-ece-hardware/166576 "2019-02-01T00:11:27Z")
Hi, @Alex\_Piggott Our team is working on one project like logging as a service based on ece. We need to use raid arch because we have a very high data availability requirement. After some investigation, raid 50 seems … --- ## [Multi-tenancy in Elasticsearch (development environment)](https://discuss.elastic.co/t/multi-tenancy-in-elasticsearch-development-environment/134855)
**Author:** [@ashok.gadiraju](https://discuss.elastic.co/u/ashok.gadiraju)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 6:27pm UTC](https://discuss.elastic.co/t/multi-tenancy-in-elasticsearch-development-environment/134855 "2018-06-06T18:27:41Z")
My use case for multi tenancy with elastic search is to have indexes with same name and type across different development environments (dev, test, stage) Is it possible to have this set up of multi tenancy in same clust… --- ## [Kibana xpack proxy configuration for ldap integration](https://discuss.elastic.co/t/kibana-xpack-proxy-configuration-for-ldap-integration/85570)
**Author:** [@Ihsan\_Kocak](https://discuss.elastic.co/u/Ihsan_Kocak)\ **Replies:** 3\ **Last updated:** [May 15, 2017, 11:21am UTC](https://discuss.elastic.co/t/kibana-xpack-proxy-configuration-for-ldap-integration/85570 "2017-05-15T11:21:01Z")
i want users to login kibana with their ldap accounts.i tried network: proxy\_host:myproxyhost proxy\_port:myproxyport But it didn't work.Should i do this config in elasticsearch(elasticsearch.yml) or in… --- ## [Default index](https://discuss.elastic.co/t/default-index/50698)
**Author:** [@iMarkus](https://discuss.elastic.co/u/iMarkus)\ **Replies:** 3\ **Last updated:** [June 6, 2016, 4:06am UTC](https://discuss.elastic.co/t/default-index/50698 "2016-06-06T04:06:01Z")
Kibana tries to load the default index after login Questions: Is there a setting to have no default index? Can we avoid that Kibana tries to load anything directly after login? What happens if the user has no perm… --- ## [\[SOLVED\] A little question regarding Kibana search](https://discuss.elastic.co/t/solved-a-little-question-regarding-kibana-search/48661)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 3\ **Last updated:** [May 10, 2016, 12:09pm UTC](https://discuss.elastic.co/t/solved-a-little-question-regarding-kibana-search/48661 "2016-05-10T12:09:22Z")
Hi all, I'm reading "Apache Lucene - Query Parser Syntax" official documentation. I can see in Terms section: Note: The analyzer used to create the index will be used on the terms and phrases in the query string. S… --- ## [Clarification: how does floor\_segment impact merge rate?](https://discuss.elastic.co/t/clarification-how-does-floor-segment-impact-merge-rate/45453)
**Author:** [@unknownunknown](https://discuss.elastic.co/u/unknownunknown)\ **Replies:** 0\ **Last updated:** [March 25, 2016, 2:54pm UTC](https://discuss.elastic.co/t/clarification-how-does-floor-segment-impact-merge-rate/45453 "2016-03-25T14:54:29Z")
In this discussion (Slow Bulk Insert - #8 by kayngee) I found that: As for the merge policy, tuning it for more segments will trade some search performance for indexing performance. But increasing the floor\_segment siz… --- ## [How to improve Kibana initial loading time](https://discuss.elastic.co/t/how-to-improve-kibana-initial-loading-time/330619)
**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\ **Replies:** 1\ **Last updated:** [April 28, 2023, 4:47pm UTC](https://discuss.elastic.co/t/how-to-improve-kibana-initial-loading-time/330619 "2023-04-28T16:47:26Z")
I have a Kibana dashboard which contains 7 Vega-lite visualizations & 2 Kibana lens visualizations. Version used: 8.6.1 The dashboard takes around 13-14 sec to load. Most of the time is spent in initial loading of Kiban… --- ## [Filebeat: failed FilterLogEventsRequestRequestCanceled](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097)
**Author:** [@vishwas\_rajput](https://discuss.elastic.co/u/vishwas_rajput)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097 "2021-03-04T09:36:42Z")
Hi, I am using Filebeat 7.11.1 to fetch CloudWatch logs using given configuration filebeat.inputs: - type: aws-cloudwatch log\_group\_arn: arn:aws:logs:XXX:XXX:\* log\_group\_name: /aws/ … --- ## [How to track cases in a dashboard?](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:36am UTC](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259 "2021-11-01T10:36:49Z")
Hello there! Is there a way to track cases in a dashboard? Like having a panel for: open cases cases in progress pending cases new cases Tried the tutorial: but i happen not to have the option "add a les" visuali… --- ## [Creating custom Maps in Kibana](https://discuss.elastic.co/t/creating-custom-maps-in-kibana/232853)
**Author:** [@Christian\_M](https://discuss.elastic.co/u/Christian_M)\ **Replies:** 1\ **Last updated:** [May 16, 2020, 2:10am UTC](https://discuss.elastic.co/t/creating-custom-maps-in-kibana/232853 "2020-05-16T02:10:32Z")
Hi I've just went through the Elastic document on creating custom basemaps and found it very insightful. https://www.elastic.co/blog/custom-basemaps-for-region-and-coordinate-maps-in-kibana My issue is I want to have d… --- ## [Can't get Type in Custom Plugin](https://discuss.elastic.co/t/cant-get-type-in-custom-plugin/143805)
**Author:** [@trantrungtruc05](https://discuss.elastic.co/u/trantrungtruc05)\ **Replies:** 1\ **Last updated:** [August 10, 2018, 7:16am UTC](https://discuss.elastic.co/t/cant-get-type-in-custom-plugin/143805 "2018-08-10T07:16:16Z")
I have writing plugin by Java Code below: public class BasicPlugin extends Plugin implements AnalysisPlugin { private final static Logger LOGGER = LogManager.getLogger(BasicPlugin.class); public BasicPlugin() {… --- ## [Visualizing path/route of multiple geo points based on @timestamp on map](https://discuss.elastic.co/t/visualizing-path-route-of-multiple-geo-points-based-on-timestamp-on-map/87492)
**Author:** [@Ali\_Borhani](https://discuss.elastic.co/u/Ali_Borhani)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 9:40pm UTC](https://discuss.elastic.co/t/visualizing-path-route-of-multiple-geo-points-based-on-timestamp-on-map/87492 "2017-05-29T21:40:42Z")
I'm inserting locations of some moving IoT devices to Elasticsearch. My problem is, I can't visualize the route of a device on the map. In TileMap I can only visualize points of the devices statically without consider… --- ## [ES hangs while indexing(very slow indexing)](https://discuss.elastic.co/t/es-hangs-while-indexing-very-slow-indexing/42317)
**Author:** [@Mostafa\_Wattad](https://discuss.elastic.co/u/Mostafa_Wattad)\ **Replies:** 1\ **Last updated:** [February 20, 2016, 11:36pm UTC](https://discuss.elastic.co/t/es-hangs-while-indexing-very-slow-indexing/42317 "2016-02-20T23:36:38Z")
Hi I have an issue while indexing nested document(60-100MB) using python client. I have the last elastic version. The indexing is very slow and some times I got readTimeOut. After the indexing process the whole index wi… --- ## [Rename source field names](https://discuss.elastic.co/t/rename-source-field-names/31961)
**Author:** [@Eddie\_Adams](https://discuss.elastic.co/u/Eddie_Adams)\ **Replies:** 1\ **Last updated:** [October 11, 2015, 2:09am UTC](https://discuss.elastic.co/t/rename-source-field-names/31961 "2015-10-11T02:09:17Z")
I have documents with variable field names, but there are fields with the same meaning: Example: {"ipAddress":"123.123.123.123"} {"client":"111.111.111.112"} I would like to know if it is possible to rename field name … --- ## [Manual copy of indices](https://discuss.elastic.co/t/manual-copy-of-indices/17011)
**Author:** [@varun](https://discuss.elastic.co/u/varun)\ **Replies:** 1\ **Last updated:** [April 16, 2014, 4:51pm UTC](https://discuss.elastic.co/t/manual-copy-of-indices/17011 "2014-04-16T16:51:13Z")
Hi All, I want to copy indexes created by embedded elastic search and copy that data into a live elastic search and use it. So these are the steps I followed. 1) Generated indices using Node Client (like embedded el… --- ## [Not able to run Heartbeat with monitorType browser in Kubernetes](https://discuss.elastic.co/t/not-able-to-run-heartbeat-with-monitortype-browser-in-kubernetes/286824)
**Author:** [@Ben\_Stucke](https://discuss.elastic.co/u/Ben_Stucke)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 8:41am UTC](https://discuss.elastic.co/t/not-able-to-run-heartbeat-with-monitortype-browser-in-kubernetes/286824 "2021-10-21T08:41:25Z")
I want to use the Synthetic Monitoring feature from Elastic. I have deployed Heartbeat on Kubernetes (manifest: https://raw.githubusercontent.com/elastic/beats/7.15/deploy/kubernetes/heartbeat-kubernetes.yaml) and added… --- ## [org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-transport-request/271683)
**Author:** [@Sidharth\_Bhandari](https://discuss.elastic.co/u/Sidharth_Bhandari)\ **Replies:** 2\ **Last updated:** [May 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception-parent-data-too-large-data-for-transport-request/271683 "2021-05-14T13:46:20Z")
HI , i am getting this error org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\\] would be \[5331726724/4.9gb\], which is larger than the limit of \[5067151769/… --- ## [Impact on replacing Oracle JDK with openJDK](https://discuss.elastic.co/t/impact-on-replacing-oracle-jdk-with-openjdk/173883)
**Author:** [@Amol\_Gaitonde](https://discuss.elastic.co/u/Amol_Gaitonde)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 2:56am UTC](https://discuss.elastic.co/t/impact-on-replacing-oracle-jdk-with-openjdk/173883 "2019-03-29T02:56:05Z")
We have moved to openJDK 8 on version 6.2.4 and since then we are noticing issues such as below. UNASSIGNED INDEX\_CREATED Frequentlty Kibana having intermittent no living connection error messages and status becomes Re… --- ## [Cannot connect to ES remotely even with ufw firewall](https://discuss.elastic.co/t/cannot-connect-to-es-remotely-even-with-ufw-firewall/129951)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [April 30, 2018, 10:26am UTC](https://discuss.elastic.co/t/cannot-connect-to-es-remotely-even-with-ufw-firewall/129951 "2018-04-30T10:26:44Z")
I have configured Elasticsearch to bind to localhost:9200 on the DB server, then allow my app server to connect to it with ufw. However, when I try to curl the DB server from my app server, I am unable to connect to it. … --- ## [Journalbeat usage for starters](https://discuss.elastic.co/t/journalbeat-usage-for-starters/84623)
**Author:** [@anon71472145](https://discuss.elastic.co/u/anon71472145)\ **Replies:** 2\ **Last updated:** [May 8, 2017, 9:01pm UTC](https://discuss.elastic.co/t/journalbeat-usage-for-starters/84623 "2017-05-08T21:01:00Z")
Hi! As I have been working with ELK, I have felt the need to track my journalctl logs. So my quest brought me here and I see that something like journalbeat exists which does exactly the thing I wanted. Although, it is … --- ## [Guaranteeing Data Completeness](https://discuss.elastic.co/t/guaranteeing-data-completeness/82361)
**Author:** [@leom](https://discuss.elastic.co/u/leom)\ **Replies:** 2\ **Last updated:** [April 17, 2017, 1:38pm UTC](https://discuss.elastic.co/t/guaranteeing-data-completeness/82361 "2017-04-17T13:38:38Z")
This is a long explanation, so thank you in advance for anyone who reads it and thinks about it! Data generation I have N remote processes that gather some live data, format it into documents, and send off batched ind… --- ## [Not able to parse Custom Date](https://discuss.elastic.co/t/not-able-to-parse-custom-date/70892)
**Author:** [@Ajit\_Singh](https://discuss.elastic.co/u/Ajit_Singh)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 6:32am UTC](https://discuss.elastic.co/t/not-able-to-parse-custom-date/70892 "2017-01-18T06:32:25Z")
I have a date in the format 06/30/2016 00:21:49, I am trying to parse this date using date { match =\> \[ "time", "MM/dd/YYYY HH:mm:ss" \] } But the date is still a string value. So how can I parse a date if it is not… --- ## [Cant see any classes or methods used](https://discuss.elastic.co/t/cant-see-any-classes-or-methods-used/53931)
**Author:** [@felt](https://discuss.elastic.co/u/felt)\ **Replies:** 2\ **Last updated:** [July 12, 2016, 11:31am UTC](https://discuss.elastic.co/t/cant-see-any-classes-or-methods-used/53931 "2016-07-12T11:31:48Z")
Hello everyone! Firstly I need to let you know that I'm very new in both Elasticsearch and Kibana. My main purpose is that debugging and analyse an android app and I was following that steps from https://github.com/And… --- ## [Is there any way to downgrade elasticsearch from 8.15 to 7.17?](https://discuss.elastic.co/t/is-there-any-way-to-downgrade-elasticsearch-from-8-15-to-7-17/371856)
**Author:** [@debayan1](https://discuss.elastic.co/u/debayan1)\ **Replies:** 8\ **Last updated:** [December 16, 2024, 12:15pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-downgrade-elasticsearch-from-8-15-to-7-17/371856 "2024-12-16T12:15:26Z")
Is there any way to downgrade elasticsearch from 8.15 to 7.17 ? We were using elasticsearch version 7.17. Now, we upgraded to elasticsearch version and using collectors in backward compatibility mode in order to commun… --- ## [How to include thread name in span?](https://discuss.elastic.co/t/how-to-include-thread-name-in-span/338347)
**Author:** [@johngregg](https://discuss.elastic.co/u/johngregg)\ **Replies:** 8\ **Last updated:** [July 25, 2023, 9:36am UTC](https://discuss.elastic.co/t/how-to-include-thread-name-in-span/338347 "2023-07-25T09:36:04Z")
I'm using the java agent version 1.35.0. Is there a way to include the thread name in the span? Knowing the thread name helps understand a lot about how the app is doing multi-threading. thanks --- ## [Would there be an impact / difference of Big and Small Indices?](https://discuss.elastic.co/t/would-there-be-an-impact-difference-of-big-and-small-indices/241560)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 8\ **Last updated:** [July 17, 2020, 6:05am UTC](https://discuss.elastic.co/t/would-there-be-an-impact-difference-of-big-and-small-indices/241560 "2020-07-17T06:05:55Z")
Hello and good day! Just like what the title says, I humbly request for you guys' expertise and a healthy, bountiful discussion regarding this.... My team has 2 indices called "web" and "socialmedia", both of them got … --- ## [\[ANNOUNCEMENT\] Httpbeat 1.0.0 released](https://discuss.elastic.co/t/announcement-httpbeat-1-0-0-released/38119)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [December 29, 2015, 6:48pm UTC](https://discuss.elastic.co/t/announcement-httpbeat-1-0-0-released/38119 "2015-12-29T18:48:10Z")
I'm happy to announce the availability of Httpbeat 1.0.0. Httpbeat is a Beat which polls HTTP endpoints in a regular interval and sends the HTTP request and response as an event to a configured shipper, e.g. elasticsea… --- ## [Syntax error for XPath](https://discuss.elastic.co/t/syntax-error-for-xpath/242846)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 5\ **Last updated:** [July 29, 2020, 2:07am UTC](https://discuss.elastic.co/t/syntax-error-for-xpath/242846 "2020-07-29T02:07:18Z")
Hi All, Trying to get the xml-xpath working, but logstash is crashing out at a certain part of the config file. The error points to it being a syntax problem Jul 28 17:09:30 QPS-HPI-TESTELK1 logstash\[730767\]: \[2020-0… --- ## [AWS RDS Data Not Appearing in Dashboard but it shows in metricbeat index](https://discuss.elastic.co/t/aws-rds-data-not-appearing-in-dashboard-but-it-shows-in-metricbeat-index/222707)
**Author:** [@vinayborra](https://discuss.elastic.co/u/vinayborra)\ **Replies:** 5\ **Last updated:** [March 12, 2020, 11:31am UTC](https://discuss.elastic.co/t/aws-rds-data-not-appearing-in-dashboard-but-it-shows-in-metricbeat-index/222707 "2020-03-12T11:31:28Z")
After following this tutorial as per elasticsearch documentation we are unable to get analytics on the dashboard \[Metricbeat AWS\] RDS Overview But i can find data in metricbeat index, so please suggest a solution for… --- ## [Generate Heatmap from histogram data](https://discuss.elastic.co/t/generate-heatmap-from-histogram-data/216734)
**Author:** [@PhracturedBlue](https://discuss.elastic.co/u/PhracturedBlue)\ **Replies:** 5\ **Last updated:** [January 28, 2020, 4:45pm UTC](https://discuss.elastic.co/t/generate-heatmap-from-histogram-data/216734 "2020-01-28T16:45:18Z")
I have data in elasticsearch in the form: { @timestamp: Jan 27, 2020 @ 05:57:44.837, aggregate: { values: \[5, 10, 20, 50, 100\], counts: \[0, 5, 3, 8, 16\]}, { @timestamp: Jan 27, 2020 @ 05:47:44.829, aggregate: { values:… --- ## [部署使用logstash he filebeat. logstash 在启动后使用-f参数 验证配置文件会报ERROR\] 2019-01-18 15:56:15.414 \[\[main\]\ **Author:** [@tian](https://discuss.elastic.co/u/tian)\ **Replies:** 5\ **Last updated:** [January 28, 2019, 3:02am UTC](https://discuss.elastic.co/t/logstash-he-filebeat-logstash-f-error-2019-01-18-1515-414-main-beats-pipeline-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin-ps-axf-grep-logstash/164751 "2019-01-28T03:02:33Z") C\[root@ conf.d\]# /usr/share/logstash/bin/logstash -f nginx.conf WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Coefau… --- ## [Logstash to redirect output to icingaweb2 and elasticsearch simultaneously](https://discuss.elastic.co/t/logstash-to-redirect-output-to-icingaweb2-and-elasticsearch-simultaneously/163348)
**Author:** [@baidurjya](https://discuss.elastic.co/u/baidurjya)\ **Replies:** 5\ **Last updated:** [January 8, 2019, 12:55pm UTC](https://discuss.elastic.co/t/logstash-to-redirect-output-to-icingaweb2-and-elasticsearch-simultaneously/163348 "2019-01-08T12:55:34Z")
Hello Team, I want to create single logstash.conf file that must redirect nginx log to elasticsearch and in case of any http error (e.g. 500) , it must redirect nginx error to icingaweb2 as well as elasticsearch simulta… --- ## [Custom ordering of results in elasticsearch](https://discuss.elastic.co/t/custom-ordering-of-results-in-elasticsearch/81142)
**Author:** [@Divya\_Bhardwaj](https://discuss.elastic.co/u/Divya_Bhardwaj)\ **Replies:** 5\ **Last updated:** [April 7, 2017, 6:19am UTC](https://discuss.elastic.co/t/custom-ordering-of-results-in-elasticsearch/81142 "2017-04-07T06:19:15Z")
Hi All, I have a weird usecase, I have a .csv with "Name", "EmployeeId" and "Address" as the columns. When using any query (say match\_all), I need the data results to be displayed such that field "Name", "EmployeeId" an… --- ## [Timestamp filter logstash](https://discuss.elastic.co/t/timestamp-filter-logstash/287199)
**Author:** [@Paveltest](https://discuss.elastic.co/u/Paveltest)\ **Replies:** 4\ **Last updated:** [October 21, 2021, 6:07am UTC](https://discuss.elastic.co/t/timestamp-filter-logstash/287199 "2021-10-21T06:07:10Z")
I am trying to display the time from the message log, but the load time from logstash is coming out. The message looks like this: 9.17.20.121 - - \[11/Oct/2021:00:00:24 +0300\] 0.474 0.072 "POST /api/?AppType=1&AppVersi… --- ## [FIPS enabled but can not it show warning](https://discuss.elastic.co/t/fips-enabled-but-can-not-it-show-warning/233830)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 9:44am UTC](https://discuss.elastic.co/t/fips-enabled-but-can-not-it-show-warning/233830 "2020-05-26T09:44:00Z")
Hi Here I configured FIPS in elasticsearch-7.6.2 but it shows below error please anyone help here--------------- \[2020-05-21T20:17:58,238\]\[INFO \]\[o.e.c.s.MasterService \] \[node01\] elected-as-master (\[1\] nodes joined)… --- ## [Windows ELK 7.1 2-node cluster](https://discuss.elastic.co/t/windows-elk-7-1-2-node-cluster/183692)
**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\ **Replies:** 4\ **Last updated:** [June 3, 2019, 10:01am UTC](https://discuss.elastic.co/t/windows-elk-7-1-2-node-cluster/183692 "2019-06-03T10:01:19Z")
Hello, I try to create 2-node cluster with ELK 7.1 on Windows in my lab but I have troubles and it doesn't work. Configuration of node-01 is: cluster.name: elasticsearch node.name: node-01 node.master: true node.data… --- ## [Event-data-track from github does not work](https://discuss.elastic.co/t/event-data-track-from-github-does-not-work/174298)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [April 4, 2019, 3:23pm UTC](https://discuss.elastic.co/t/event-data-track-from-github-does-not-work/174298 "2019-04-04T15:23:50Z")
Hi, I have issues running the event-data-track from github by @Christian\_Dahlqvist. I modified my rally.ini in tracks area to this here: \[tracks\] default.url = https://github.com/elastic/rally-tracks eventdata.url = … --- ## [No records return when using transport client, 100 records return when using restful api?](https://discuss.elastic.co/t/no-records-return-when-using-transport-client-100-records-return-when-using-restful-api/69507)
**Author:** [@Cherry\_Zhang](https://discuss.elastic.co/u/Cherry_Zhang)\ **Replies:** 4\ **Last updated:** [January 3, 2017, 9:22am UTC](https://discuss.elastic.co/t/no-records-return-when-using-transport-client-100-records-return-when-using-restful-api/69507 "2017-01-03T09:22:15Z")
while I debug my code, the transport client always return 0 records, but when I copy the request builder's query string to my restful client, and run the query, 100 records return, can't figure out why? here is all my… --- ## [Logstash manages to send data to elasticsearch only in debugging mode](https://discuss.elastic.co/t/logstash-manages-to-send-data-to-elasticsearch-only-in-debugging-mode/330196)
**Author:** [@Skairik](https://discuss.elastic.co/u/Skairik)\ **Replies:** 3\ **Last updated:** [April 18, 2023, 11:53am UTC](https://discuss.elastic.co/t/logstash-manages-to-send-data-to-elasticsearch-only-in-debugging-mode/330196 "2023-04-18T11:53:06Z")
Hello everyone, I am currently trying a basic test setup with apache logs on logstash, but I have a problem, my data is received on kibana/elasticsearch only when I run the following command: /usr/share/logstash/bin/lo… --- ## [Kibana SIEM and custom indexes](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186)
**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 12:39pm UTC](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186 "2022-01-04T12:39:12Z")
Hello All, We have used Kibana SIEM essentially for network metadata retention, So historically, all network related metadata from various network filebeat modules (suricata, sonicwall, iptables, etc ...) ends up into s… --- ## [Calculate time difference between two timestamps and filter on a field](https://discuss.elastic.co/t/calculate-time-difference-between-two-timestamps-and-filter-on-a-field/285003)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 0\ **Last updated:** [September 23, 2021, 12:25pm UTC](https://discuss.elastic.co/t/calculate-time-difference-between-two-timestamps-and-filter-on-a-field/285003 "2021-09-23T12:25:29Z")
Hey I am trying to implement a query to calculate a difference between two timestamps but filter on a field. The solution Getting duration by using bucket script works well but my use case is the following: I have, let'… --- ## [Issue while adding Elastic.apm to .net project](https://discuss.elastic.co/t/issue-while-adding-elastic-apm-to-net-project/196125)
**Author:** [@sonammarda](https://discuss.elastic.co/u/sonammarda)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 2:57pm UTC](https://discuss.elastic.co/t/issue-while-adding-elastic-apm-to-net-project/196125 "2019-08-26T14:57:22Z")
Giving below error: Could not install package 'Elastic.Apm 1.0.0'. You are trying to install this package into a project that targets '.NETFramework,Version=v4.6.1', but the package does not contain any assembly referen… --- ## [How to Hide some options in the sidebar in some spaces](https://discuss.elastic.co/t/how-to-hide-some-options-in-the-sidebar-in-some-spaces/179084)
**Author:** [@Rafael\_Simonelli](https://discuss.elastic.co/u/Rafael_Simonelli)\ **Replies:** 3\ **Last updated:** [April 30, 2019, 9:56pm UTC](https://discuss.elastic.co/t/how-to-hide-some-options-in-the-sidebar-in-some-spaces/179084 "2019-04-30T21:56:16Z")
I've created some Spaces according to departments and I wanted to hide items in the left sidebar that doesn't make sense in those contexts (like APM, Timelion, Machine Learning and so on). I tried using Roles and Spaces… --- ## [使用javaAPI查询的Aggregations结果怎么解析](https://discuss.elastic.co/t/javaapi-aggregations/150317)
**Author:** [@fengyuning](https://discuss.elastic.co/u/fengyuning)\ **Replies:** 0\ **Last updated:** [September 28, 2018, 10:03am UTC](https://discuss.elastic.co/t/javaapi-aggregations/150317 "2018-09-28T10:03:40Z")
如上图所示，我在java API里使用了2个addAggregation，但是发现该结果不能转成json格式的数据，不知道怎么取值。有大神帮帮忙吗？ --- ## [Parsing xml multiline file](https://discuss.elastic.co/t/parsing-xml-multiline-file/115810)
**Author:** [@davidcsi](https://discuss.elastic.co/u/davidcsi)\ **Replies:** 3\ **Last updated:** [January 24, 2018, 2:21pm UTC](https://discuss.elastic.co/t/parsing-xml-multiline-file/115810 "2018-01-24T14:21:20Z")
Hello guys, I'm trying to parse xml files from S3. I get the file just fine, but i want the xml file to be processed completely like: \ \ **Author:** [@raisinpit](https://discuss.elastic.co/u/raisinpit)\ **Replies:** 3\ **Last updated:** [August 3, 2017, 2:19pm UTC](https://discuss.elastic.co/t/logarithmic-date-histogram/95475 "2017-08-03T14:19:31Z") Hi, I’ve been working with the date histogram visualization, I want to display only the days that have a value of 1 or higher because that will allow me to use the logarithmic I believe. I worked out this query in the … --- ## [How big is your cluster state? How much is too much?](https://discuss.elastic.co/t/how-big-is-your-cluster-state-how-much-is-too-much/59407)
**Author:** [@hgfxng](https://discuss.elastic.co/u/hgfxng)\ **Replies:** 3\ **Last updated:** [September 1, 2016, 1:50am UTC](https://discuss.elastic.co/t/how-big-is-your-cluster-state-how-much-is-too-much/59407 "2016-09-01T01:50:09Z")
Everyone knows that a big cluster state might be a problem, bug how big it can safely go? How much is "too big" and how much is "ok"? I guess this depends a lot in the network bandwidth between the nodes, but I would l… --- ## [Query\_string on nested object](https://discuss.elastic.co/t/query-string-on-nested-object/58567)
**Author:** [@Fabien\_Sarlat](https://discuss.elastic.co/u/Fabien_Sarlat)\ **Replies:** 3\ **Last updated:** [August 23, 2016, 9:12pm UTC](https://discuss.elastic.co/t/query-string-on-nested-object/58567 "2016-08-23T21:12:27Z")
Bonjour ! J' ai un soucis dans ma recherche sur des nested objects :smiley: Field : "listSecteurs": { "type" : "nested", "include\_in\_parent": true, "properties" : { "secteurName" : {"ty… --- ## [Elasticsearch loses performance changing path.data running on SparkSQL](https://discuss.elastic.co/t/elasticsearch-loses-performance-changing-path-data-running-on-sparksql/54318)
**Author:** [@jackProm](https://discuss.elastic.co/u/jackProm)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 2:18pm UTC](https://discuss.elastic.co/t/elasticsearch-loses-performance-changing-path-data-running-on-sparksql/54318 "2016-07-01T14:18:01Z")
Hi everyone, I'm using Elastisearch on a cluster with 4 nodes using SparkSQL. I'm trying to copy tables from the Hive-metastore to Elasticseach using saveToEs. Everything works good if I work with tables with size around… --- ## [How to check whether user authorized or not when onChange of route event in kibana 7.8 OSS version](https://discuss.elastic.co/t/how-to-check-whether-user-authorized-or-not-when-onchange-of-route-event-in-kibana-7-8-oss-version/247265)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 6\ **Last updated:** [September 8, 2020, 11:45am UTC](https://discuss.elastic.co/t/how-to-check-whether-user-authorized-or-not-when-onchange-of-route-event-in-kibana-7-8-oss-version/247265 "2020-09-08T11:45:23Z")
Right now, I am using elastic/kibana 7.8 OSS version code I am trying to implement authentication using Google auth by developing a plugin. Now for protecting routes, how to listen to route changes in kibana from a plu… [Previous page](https://discuss.elastic.co/top.md?page=1529&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1531&per_page=50&period=all)