# Top

**URL:** https://discuss.elastic.co/top.md?page=1545&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1546

---

## [Elastic cloud search service console \[trial expired for my account\]](https://discuss.elastic.co/t/elastic-cloud-search-service-console-trial-expired-for-my-account/263133)

<div class="topic-metadata">

**Author:** [@amitv-elasticsearch](https://discuss.elastic.co/u/amitv-elasticsearch)\
**Replies:** 3\
**Last updated:** [February 11, 2021, 1:41pm UTC](https://discuss.elastic.co/t/elastic-cloud-search-service-console-trial-expired-for-my-account/263133 "2021-02-11T13:41:55Z")

</div>

Hi Team, I have been enrolled/subscribed in the training session for the elastic search and my subscription is valid till 1st Oct 20221. When I try access the elastic cloud search service console with my credential…

---

## [We are not receiving the log from kafka to logstash](https://discuss.elastic.co/t/we-are-not-receiving-the-log-from-kafka-to-logstash/241472)

<div class="topic-metadata">

**Author:** [@saravananveera](https://discuss.elastic.co/u/saravananveera)\
**Replies:** 3\
**Last updated:** [July 18, 2020, 5:08am UTC](https://discuss.elastic.co/t/we-are-not-receiving-the-log-from-kafka-to-logstash/241472 "2020-07-18T05:08:28Z")

</div>

Hi I have received the logs from beat to Kafaka, but i can't able to receive logs from kafka to logstash . Kafka log: \[root@ip kafka\]# bin/kafka-console-consumer.sh --bootstrap-server localhost:9092 --topic sscplblog…

---

## [Unable to post data into ElasticSearch from Jmeter using Backend listeners](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985)

<div class="topic-metadata">

**Author:** [@sGhosh86](https://discuss.elastic.co/u/sGhosh86)\
**Replies:** 0\
**Last updated:** [January 29, 2020, 11:06am UTC](https://discuss.elastic.co/t/unable-to-post-data-into-elasticsearch-from-jmeter-using-backend-listeners/216985 "2020-01-29T11:06:40Z")

</div>

Hi, I am facing an issue while trying to post Jmeter data into ElasticSearch using Backend listener. Initially I had done PoC on local system where everything (JMeter, ElasticSearch, Kibana, Grafana etc.) were in my loc…

---

## [Grokparsefailue on haproxy logs (but grok debugger result is OK in kibana...)](https://discuss.elastic.co/t/grokparsefailue-on-haproxy-logs-but-grok-debugger-result-is-ok-in-kibana/187854)

<div class="topic-metadata">

**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\
**Replies:** 3\
**Last updated:** [June 28, 2019, 12:56pm UTC](https://discuss.elastic.co/t/grokparsefailue-on-haproxy-logs-but-grok-debugger-result-is-ok-in-kibana/187854 "2019-06-28T12:56:37Z")

</div>

Hello, I have read various similar topics about haproxy logs in logstash but I am still stuck with a grokparsefailure error on my Logstahs output. My configuration is : Logstash 7.1.1 HA-Proxy version 1.5.18 Haproxy…

---

## [Coordinate Map](https://discuss.elastic.co/t/coordinate-map/135271)

<div class="topic-metadata">

**Author:** [@JeMunos](https://discuss.elastic.co/u/JeMunos)\
**Replies:** 3\
**Last updated:** [June 22, 2018, 10:57pm UTC](https://discuss.elastic.co/t/coordinate-map/135271 "2018-06-22T22:57:55Z")

</div>

I'm trying to create a coordinate map using the GeoID data. I have the data being properly enriched by logstash and I am able to see the new GeoID fields in each new record as you can see here: \[image\] Thats great. I l…

---

## [Problem with sorting polish words(ES 2.4.6)](https://discuss.elastic.co/t/problem-with-sorting-polish-words-es-2-4-6/116673)

<div class="topic-metadata">

**Author:** [@pmalerowicz](https://discuss.elastic.co/u/pmalerowicz)\
**Replies:** 3\
**Last updated:** [January 29, 2018, 9:32am UTC](https://discuss.elastic.co/t/problem-with-sorting-polish-words-es-2-4-6/116673 "2018-01-29T09:32:43Z")

</div>

Hello. Wrong sorting result for product name with polish characters. ElasticSearch Version: 2.4.6, Build: 5376dca/2017-07-18T12:17:44Z, JVM: 1.7.0\_151 "version" : { "number" : "2.4.6", "build\_hash" : "5376dca9f70f3a…

---

## [Decay and exact match\_phrase](https://discuss.elastic.co/t/decay-and-exact-match-phrase/106717)

<div class="topic-metadata">

**Author:** [@MarkTierney](https://discuss.elastic.co/u/MarkTierney)\
**Replies:** 3\
**Last updated:** [November 8, 2017, 4:35pm UTC](https://discuss.elastic.co/t/decay-and-exact-match-phrase/106717 "2017-11-08T16:35:46Z")

</div>

Hi Folks, I have a query that uses a linear decay that operates on year. It applies the decay for each year from the origin, 2017 plus and offset of 4. For older documents decay is probably whittling the score down near…

---

## [Compare multiple nodes in one graph](https://discuss.elastic.co/t/compare-multiple-nodes-in-one-graph/87398)

<div class="topic-metadata">

**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\
**Replies:** 3\
**Last updated:** [June 6, 2017, 11:07am UTC](https://discuss.elastic.co/t/compare-multiple-nodes-in-one-graph/87398 "2017-06-06T11:07:57Z")

</div>

We recently upgraded from ES 1.4.5, running the marvel plugin for monitoring, to ES 5.3.2, now running the monitoring through Kibana 5.3.2. I am missing the option to select multiple nodes have their metrics plotted in…

---

## [Does logstash filebeat support reading from redis](https://discuss.elastic.co/t/does-logstash-filebeat-support-reading-from-redis/50975)

<div class="topic-metadata">

**Author:** [@divya\_hc](https://discuss.elastic.co/u/divya_hc)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 9:38pm UTC](https://discuss.elastic.co/t/does-logstash-filebeat-support-reading-from-redis/50975 "2016-05-25T21:38:56Z")

</div>

Hi, I am new to ELK. Have been reading the docs. But was not clear if this use case is supported and what plugin to use? We have client servers which stores events data in redis. We would like to store these centrall…

---

## [Context length is bigger than maximum allowed string](https://discuss.elastic.co/t/context-length-is-bigger-than-maximum-allowed-string/356985)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 4\
**Last updated:** [May 30, 2024, 4:14am UTC](https://discuss.elastic.co/t/context-length-is-bigger-than-maximum-allowed-string/356985 "2024-05-30T04:14:49Z")

</div>

Hi Team, We are trying to fetch log events on the discover tab and getting the following error. The log events consists of large Java stacks. We are using ELK version 8.10. I tried updating the server.maxPayload to…

---

## [APM agent to Server Communication via https](https://discuss.elastic.co/t/apm-agent-to-server-communication-via-https/321277)

<div class="topic-metadata">

**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Replies:** 4\
**Last updated:** [December 15, 2022, 3:04pm UTC](https://discuss.elastic.co/t/apm-agent-to-server-communication-via-https/321277 "2022-12-15T15:04:31Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [ILM not working correctly](https://discuss.elastic.co/t/ilm-not-working-correctly/304529)

<div class="topic-metadata">

**Author:** [@Guncixx](https://discuss.elastic.co/u/Guncixx)\
**Replies:** 4\
**Last updated:** [June 1, 2022, 10:01am UTC](https://discuss.elastic.co/t/ilm-not-working-correctly/304529 "2022-06-01T10:01:22Z")

</div>

Hello, Need some help / advice with ILM. I set up ILM policy to move data to cold tier, after exact amount of days, but for some reason it did not trigger migrate action. I then started to experiment with ILM console co…

---

## [Threat signatures from observers](https://discuss.elastic.co/t/threat-signatures-from-observers/218962)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 4\
**Last updated:** [February 17, 2020, 1:29pm UTC](https://discuss.elastic.co/t/threat-signatures-from-observers/218962 "2020-02-17T13:29:53Z")

</div>

External security products, such as endpoint protection etc., often send a threat signature with their alerts ("Trojan.generic.823719237", "CVE-XXX-XXX Joomla SQL Injection"). Where do we put this threat name / signature…

---

## [Kibana 6.7.2 User & Space Management](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890)

<div class="topic-metadata">

**Author:** [@biji\_padhy](https://discuss.elastic.co/u/biji_padhy)\
**Replies:** 4\
**Last updated:** [June 6, 2019, 2:19pm UTC](https://discuss.elastic.co/t/kibana-6-7-2-user-space-management/182890 "2019-06-06T14:19:37Z")

</div>

Hi All, I am looking for some help in setting up few user accounts in kibana 6.7.2. I have explained my requirement below. There are 3 spaces A, B, C & 2 users x, y. How can we assign kibana dashboard only user role…

---

## [Threshold line in Kibana 5.4 bar chart](https://discuss.elastic.co/t/threshold-line-in-kibana-5-4-bar-chart/157829)

<div class="topic-metadata">

**Author:** [@krsna](https://discuss.elastic.co/u/krsna)\
**Replies:** 4\
**Last updated:** [November 22, 2018, 2:09pm UTC](https://discuss.elastic.co/t/threshold-line-in-kibana-5-4-bar-chart/157829 "2018-11-22T14:09:20Z")

</div>

Hi, I've created a bar chart in Kibana and want to add a threshold line. But as I see that there is no option to add a threshold line in bar chart. So, I want to add a scripted field with a constant value and add it in t…

---

## [Geo distance aggregation on array location fields](https://discuss.elastic.co/t/geo-distance-aggregation-on-array-location-fields/105966)

<div class="topic-metadata">

**Author:** [@ESmonkey](https://discuss.elastic.co/u/ESmonkey)\
**Replies:** 4\
**Last updated:** [November 19, 2017, 12:08am UTC](https://discuss.elastic.co/t/geo-distance-aggregation-on-array-location-fields/105966 "2017-11-19T00:08:08Z")

</div>

Is it possible to get an exact term count on the number for location matches within one document. Eg Say I have location (geo\_point) indexed documents such as Document. 1 has location:\[latlon\_1, latlon\_2\] Document 2 h…

---

## [Jmx input: undefined method 'event'](https://discuss.elastic.co/t/jmx-input-undefined-method-event/70442)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 4\
**Last updated:** [January 9, 2017, 10:55am UTC](https://discuss.elastic.co/t/jmx-input-undefined-method-event/70442 "2017-01-09T10:55:33Z")

</div>

I'm trying to use the jmx input for Logstash (2.4.0) but get the following error: {:timestamp=\>"2017-01-03T14:28:13.344000+0000", :message=\>"undefined method 'event' for #\<LogStash::Inputs::Jmx:0x5a49b577\>", :level=\>:war…

---

## [ElasticSearch returns "index not found error" for an index that exists](https://discuss.elastic.co/t/elasticsearch-returns-index-not-found-error-for-an-index-that-exists/335658)

<div class="topic-metadata">

**Author:** [@RA31](https://discuss.elastic.co/u/RA31)\
**Replies:** 1\
**Last updated:** [June 9, 2023, 9:08pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-index-not-found-error-for-an-index-that-exists/335658 "2023-06-09T21:08:53Z")

</div>

I have an index pattern "barney", which shows on Kibana Management screen and on Discover. But when I hit the \_cat/indices API, it does not show the index pattern in the list of indices returned. When triggering barney/…

---

## [Is it possible change the log level of ECK - Operator?](https://discuss.elastic.co/t/is-it-possible-change-the-log-level-of-eck-operator/279909)

<div class="topic-metadata">

**Author:** [@weydersantos](https://discuss.elastic.co/u/weydersantos)\
**Replies:** 1\
**Last updated:** [July 29, 2021, 10:13am UTC](https://discuss.elastic.co/t/is-it-possible-change-the-log-level-of-eck-operator/279909 "2021-07-29T10:13:08Z")

</div>

Hey guys! Simple and fast, is it possible change? Because when you follow the quickstart deployment (of course adjusting to your scenario) the pod of elastic-operador output a lot of logs of the type info...

---

## [Multiple SNMP Inputs or Pipelines](https://discuss.elastic.co/t/multiple-snmp-inputs-or-pipelines/233858)

<div class="topic-metadata">

**Author:** [@Offi83](https://discuss.elastic.co/u/Offi83)\
**Replies:** 1\
**Last updated:** [May 22, 2020, 12:20pm UTC](https://discuss.elastic.co/t/multiple-snmp-inputs-or-pipelines/233858 "2020-05-22T12:20:03Z")

</div>

Hi, I need to use multiple SNMP Inputs but always running into the same problem. Whether I use one pipeline with two inputs or two pipelines with one input - I always get an error for one input like: \[2020-05-22T08:12:…

---

## [Spark EsRDDWriter intermittent failure](https://discuss.elastic.co/t/spark-esrddwriter-intermittent-failure/100581)

<div class="topic-metadata">

**Author:** [@Anusha\_Dharmalingam](https://discuss.elastic.co/u/Anusha_Dharmalingam)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 3:28am UTC](https://discuss.elastic.co/t/spark-esrddwriter-intermittent-failure/100581 "2017-10-04T03:28:47Z")

</div>

Hi, Seeing intermittent errors trying to write to Elasticsearch 5.3 based cluster using Spark EsRDDWriter (which internally uses elasticsearch-hadoop project 5.2.2) Is there any way to configure client.transport.ping\_t…

---

## [Ruby filter used for reading modified time of file](https://discuss.elastic.co/t/ruby-filter-used-for-reading-modified-time-of-file/94127)

<div class="topic-metadata">

**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 10:38am UTC](https://discuss.elastic.co/t/ruby-filter-used-for-reading-modified-time-of-file/94127 "2017-07-24T10:38:10Z")

</div>

Hello community, I am currently trying to use the ruby filter to get the modified time of the file I am reading. I want to store the modified time in mtime. This is my first time using ruby so I am sort of lost. Here is…

---

## [Centos 7 virtualbox elasticsearch installation problem](https://discuss.elastic.co/t/centos-7-virtualbox-elasticsearch-installation-problem/89232)

<div class="topic-metadata">

**Author:** [@Cassandre](https://discuss.elastic.co/u/Cassandre)\
**Replies:** 1\
**Last updated:** [June 13, 2017, 4:24pm UTC](https://discuss.elastic.co/t/centos-7-virtualbox-elasticsearch-installation-problem/89232 "2017-06-13T16:24:27Z")

</div>

Hello, I'm trying to install Elasticsearch but there is a problem \[root@localhost ~\]# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticse…

---

## [DBG Try to publish 2048 events to logstash with window size 1024](https://discuss.elastic.co/t/dbg-try-to-publish-2048-events-to-logstash-with-window-size-1024/83119)

<div class="topic-metadata">

**Author:** [@messageinabottle](https://discuss.elastic.co/u/messageinabottle)\
**Replies:** 1\
**Last updated:** [April 21, 2017, 9:16am UTC](https://discuss.elastic.co/t/dbg-try-to-publish-2048-events-to-logstash-with-window-size-1024/83119 "2017-04-21T09:16:15Z")

</div>

filebeat version 1.1.1 (amd64) sending to logstash 2.2.4 - no, I cannot upgrade to newer versions at this time. When running filebeat in debug mode I'm getting a LOT of the following messages: DBG Try to publish 2048…

---

## [How to index HDFS data](https://discuss.elastic.co/t/how-to-index-hdfs-data/59129)

<div class="topic-metadata">

**Author:** [@johan313](https://discuss.elastic.co/u/johan313)\
**Replies:** 1\
**Last updated:** [August 28, 2016, 8:37pm UTC](https://discuss.elastic.co/t/how-to-index-hdfs-data/59129 "2016-08-28T20:37:14Z")

</div>

Hello, I'm prototyping the use of ES and Hadoop for a project but I cannot figure out the most obvious. I have a hadoop cluster that contains some log data on HDFS. I installed ES Yarn according to this guide: https:…

---

## [Uploading data from Sql Server](https://discuss.elastic.co/t/uploading-data-from-sql-server/50293)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 1\
**Last updated:** [May 18, 2016, 5:47am UTC](https://discuss.elastic.co/t/uploading-data-from-sql-server/50293 "2016-05-18T05:47:27Z")

</div>

Hi All, Please suggest how to index data from SQL server. Regards, Prateek Divya

---

## [Question on stemming + synonyms and tokenizerFactory](https://discuss.elastic.co/t/question-on-stemming-synonyms-and-tokenizerfactory/20762)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 1\
**Last updated:** [November 15, 2014, 6:28am UTC](https://discuss.elastic.co/t/question-on-stemming-synonyms-and-tokenizerfactory/20762 "2014-11-15T06:28:38Z")

</div>

I have an analysis chain like this for some Spanish text: standard asciifolding lowercase es\_stop\_filter es\_stem\_filter es\_synonyms With synonyms at the end, after all the other filters, I have to define my synonym…

---

## [Adding elasticsearch-keystore with docker/kubernetes](https://discuss.elastic.co/t/adding-elasticsearch-keystore-with-docker-kubernetes/237884)

<div class="topic-metadata">

**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\
**Replies:** 0\
**Last updated:** [June 19, 2020, 10:37pm UTC](https://discuss.elastic.co/t/adding-elasticsearch-keystore-with-docker-kubernetes/237884 "2020-06-19T22:37:53Z")

</div>

Hi, I'm following below documents to make a test ELK cluster integrate with key cloak and I'm at the step to add client secret in the elasticsearch keystore. https://www.elastic.co/guide/en/elastic-stack-get-started/cu…

---

## [Fields are merge grok output](https://discuss.elastic.co/t/fields-are-merge-grok-output/233988)

<div class="topic-metadata">

**Author:** [@himalc](https://discuss.elastic.co/u/himalc)\
**Replies:** 8\
**Last updated:** [May 24, 2020, 8:18am UTC](https://discuss.elastic.co/t/fields-are-merge-grok-output/233988 "2020-05-24T08:18:20Z")

</div>

I have a log like this: 2020-05-22T11:45:21.297418 H 20 mytest.cpp:175 stdlog sql\_execute 38533 73 testdb admin 100-xxy {"query\_str","client","execution\_time\_ms","total\_time\_ms"} {"select \* from mydatabase;","tcp:l…

---

## [Trying to use json codec on stdin - switching to json\_lines?](https://discuss.elastic.co/t/trying-to-use-json-codec-on-stdin-switching-to-json-lines/170910)

<div class="topic-metadata">

**Author:** [@djmcgreal-cc](https://discuss.elastic.co/u/djmcgreal-cc)\
**Replies:** 0\
**Last updated:** [March 5, 2019, 1:18pm UTC](https://discuss.elastic.co/t/trying-to-use-json-codec-on-stdin-switching-to-json-lines/170910 "2019-03-05T13:18:10Z")

</div>

My interpretation of https://www.elastic.co/guide/en/logstash/6.6/plugins-codecs-json.html is that if I have input { stdin { codec =\> json } } I should be able to pipe in e.g. \[ {"event": 1}, {"event": 2} \] An…

---

## [Completion Suggester on nested property returns nested object only](https://discuss.elastic.co/t/completion-suggester-on-nested-property-returns-nested-object-only/127706)

<div class="topic-metadata">

**Author:** [@dankellett](https://discuss.elastic.co/u/dankellett)\
**Replies:** 0\
**Last updated:** [April 11, 2018, 11:33pm UTC](https://discuss.elastic.co/t/completion-suggester-on-nested-property-returns-nested-object-only/127706 "2018-04-11T23:33:22Z")

</div>

I'm having some trouble getting the completion suggester to return the parent object when using a nested suggestion field. The following query will return a set of nestedField1 objects, which is a nested field. I would …

---

## [Kibana does not recognize elasticsearch when the node joins a cluster](https://discuss.elastic.co/t/kibana-does-not-recognize-elasticsearch-when-the-node-joins-a-cluster/50023)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 0\
**Last updated:** [May 13, 2016, 6:03pm UTC](https://discuss.elastic.co/t/kibana-does-not-recognize-elasticsearch-when-the-node-joins-a-cluster/50023 "2016-05-13T18:03:50Z")

</div>

The elasticsearch version I am using is 2.3. I have a 2 nodes elasticsearch cluster (with no kibana installed), and an individual elasticsearch data node( with kibana installed). The data node with kibana works perfectl…

---

## [Xpack.security.enabled: true Enable Kibana Security Features (Elasticsearch 7.10)](https://discuss.elastic.co/t/xpack-security-enabled-true-enable-kibana-security-features-elasticsearch-7-10/258202)

<div class="topic-metadata">

**Author:** [@danker00](https://discuss.elastic.co/u/danker00)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 2:34am UTC](https://discuss.elastic.co/t/xpack-security-enabled-true-enable-kibana-security-features-elasticsearch-7-10/258202 "2020-12-10T02:34:04Z")

</div>

Hi Everyone! I am making my way through the install of Elasticsearch/Kibana/Auditbeat and I am running into an issue. When I open up the Security/Detections I have an error "Detection Engine permissions required" I also…

---

## [Alerting based on change of field values](https://discuss.elastic.co/t/alerting-based-on-change-of-field-values/252264)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 2\
**Last updated:** [October 21, 2020, 5:16am UTC](https://discuss.elastic.co/t/alerting-based-on-change-of-field-values/252264 "2020-10-21T05:16:23Z")

</div>

Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your …

---

## [Can not create a document has mutlipolygon having hole](https://discuss.elastic.co/t/can-not-create-a-document-has-mutlipolygon-having-hole/212160)

<div class="topic-metadata">

**Author:** [@whiteonyx\_go](https://discuss.elastic.co/u/whiteonyx_go)\
**Replies:** 2\
**Last updated:** [December 18, 2019, 1:19pm UTC](https://discuss.elastic.co/t/can-not-create-a-document-has-mutlipolygon-having-hole/212160 "2019-12-18T13:19:37Z")

</div>

Hi, can anyone help me I am facing a following. Summary Can not create a document has mutlipolygon having hole. I do not know why responses reason is correct or this is bug? I have visualize the multipolygon, using …

---

## [java.lang.OutOfMemoryError: Java heap space --------- with bad net work](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-with-bad-net-work/181355)

<div class="topic-metadata">

**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\
**Replies:** 2\
**Last updated:** [May 17, 2019, 6:51am UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-with-bad-net-work/181355 "2019-05-17T06:51:21Z")

</div>

Elasticsearch version bin/elasticsearch --version 6.3.2 Plugins installed bin/elasticsearch-plugin list analysis-ik JVM version java -version java version "1.8.0\_91" Java(TM) SE Runtime Environment (build 1.8.0\_91-…

---

## [Parse mixed type of data inside json {\[array\],keys:values}](https://discuss.elastic.co/t/parse-mixed-type-of-data-inside-json-array-keys-values/166590)

<div class="topic-metadata">

**Author:** [@wonderg](https://discuss.elastic.co/u/wonderg)\
**Replies:** 2\
**Last updated:** [February 4, 2019, 12:26pm UTC](https://discuss.elastic.co/t/parse-mixed-type-of-data-inside-json-array-keys-values/166590 "2019-02-04T12:26:19Z")

</div>

How to parse mixed type of data inside json {\[array\],keys:values} ? { "body": { "date": "1548930893906", "id": "3987741004", "origin": "web", "parties": \[{ "direction": "in", "from": { "name": "Name", "number":…

---

## [Using painless to alter field contents during a reindex...null pointer exception](https://discuss.elastic.co/t/using-painless-to-alter-field-contents-during-a-reindex-null-pointer-exception/140368)

<div class="topic-metadata">

**Author:** [@Adam.Reynolds](https://discuss.elastic.co/u/Adam.Reynolds)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 10:42am UTC](https://discuss.elastic.co/t/using-painless-to-alter-field-contents-during-a-reindex-null-pointer-exception/140368 "2018-07-18T10:42:34Z")

</div>

I'm updating the mappings in a colleagues index and they're trying to change a field from a string to an int. That much is fine but the field currently has data in such as "89%" so obviously the data won't go in. I'm tr…

---

## [Unable to create index pattern in Kibana from Index with Template Applied](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-from-index-with-template-applied/132243)

<div class="topic-metadata">

**Author:** [@MaktonC6](https://discuss.elastic.co/u/MaktonC6)\
**Replies:** 2\
**Last updated:** [May 17, 2018, 3:11pm UTC](https://discuss.elastic.co/t/unable-to-create-index-pattern-in-kibana-from-index-with-template-applied/132243 "2018-05-17T15:11:47Z")

</div>

I have a really strange issue that I have not seen within Kibana before. I created index templates for my apache log files, which I have parsing with FileBeat/Logstash. When the templates are in Elastic and I dump in t…

---

## [Error Visualize](https://discuss.elastic.co/t/error-visualize/120875)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 2\
**Last updated:** [February 22, 2018, 8:00am UTC](https://discuss.elastic.co/t/error-visualize/120875 "2018-02-22T08:00:28Z")

</div>

I connect me to Kibana with the role "kibana\_dashbord\_only\_user" and in the dashboard I have this error: Error: undefined is not an object (evaluating 'aggs\[aggId\]') walkBucketTree@https://kibana.local/bundles/commons.b…

---

## [Override OnClick on Visualizations](https://discuss.elastic.co/t/override-onclick-on-visualizations/110317)

<div class="topic-metadata">

**Author:** [@jlafuenteribera](https://discuss.elastic.co/u/jlafuenteribera)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 5:59pm UTC](https://discuss.elastic.co/t/override-onclick-on-visualizations/110317 "2017-12-05T17:59:46Z")

</div>

Hi is there a way to override or disable the default mouse click event for all visualizations?? Where are this kind of events added to the visualization? Im using Kibana 6.0.0

---

## [Set metrics:max\_buckets with curl](https://discuss.elastic.co/t/set-metrics-max-buckets-with-curl/105941)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 8:29pm UTC](https://discuss.elastic.co/t/set-metrics-max-buckets-with-curl/105941 "2017-10-31T20:29:29Z")

</div>

Hi, I want to change the default value of "metrics:max\_buckets" at startup of Kibana. The end user should not have to go into advanced settings and change this for each kibana instance. I have tried curl command to se…

---

## [How to plot two different fields in one bar chart?](https://discuss.elastic.co/t/how-to-plot-two-different-fields-in-one-bar-chart/99376)

<div class="topic-metadata">

**Author:** [@Melvyn\_Peignon](https://discuss.elastic.co/u/Melvyn_Peignon)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 3:34pm UTC](https://discuss.elastic.co/t/how-to-plot-two-different-fields-in-one-bar-chart/99376 "2017-09-05T15:34:22Z")

</div>

I want to do a chart like this: \[56\] So I have two fields “rest\_of\_the\_world” and “china” that I want to display on the same bar chart. The Y axis is supposed to be the number of document that contain a X value (a coun…

---

## [Http\_Polling and App-Keys](https://discuss.elastic.co/t/http-polling-and-app-keys/67362)

<div class="topic-metadata">

**Author:** [@AdamOlsson](https://discuss.elastic.co/u/AdamOlsson)\
**Replies:** 2\
**Last updated:** [November 28, 2016, 6:55pm UTC](https://discuss.elastic.co/t/http-polling-and-app-keys/67362 "2016-11-28T18:55:46Z")

</div>

Hi! I'm trying to setup Logstash to retrieve data from Pingdom. I have managed to connect to the Pingdom server but i need to add the application key that Pingdom provided me to the header. I can't figure out how or w…

---

## [Why can't I set master.node?](https://discuss.elastic.co/t/why-cant-i-set-master-node/62273)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 2\
**Last updated:** [October 6, 2016, 8:40am UTC](https://discuss.elastic.co/t/why-cant-i-set-master-node/62273 "2016-10-06T08:40:31Z")

</div>

I just downloaded the latest ES version off thewebsite and I can't set a node to master/data. If I add the line required, it crashes. Whats going on here?

---

## [Multiple version numbers in Marvel dashboard cluster summary](https://discuss.elastic.co/t/multiple-version-numbers-in-marvel-dashboard-cluster-summary/46718)

<div class="topic-metadata">

**Author:** [@rspangle1](https://discuss.elastic.co/u/rspangle1)\
**Replies:** 2\
**Last updated:** [April 8, 2016, 10:47am UTC](https://discuss.elastic.co/t/multiple-version-numbers-in-marvel-dashboard-cluster-summary/46718 "2016-04-08T10:47:19Z")

</div>

In the Marvel dashboard (1.3), I see two version numbers 1.7.0,1.7.1. There is a cooma between the 1.7.0 and the 1.7.1. We have Elasticsearch 1.7.1 installed on the three nodes, Any idea what the 1.7.0 is?

---

## [Help Parsing Websphere log entry](https://discuss.elastic.co/t/help-parsing-websphere-log-entry/44470)

<div class="topic-metadata">

**Author:** [@rameeelastic](https://discuss.elastic.co/u/rameeelastic)\
**Replies:** 2\
**Last updated:** [March 17, 2016, 8:22am UTC](https://discuss.elastic.co/t/help-parsing-websphere-log-entry/44470 "2016-03-17T08:22:20Z")

</div>

I have a websphere log entry as follows \[3/15/16 20:47:40:923 CEST\] 0000005f MediationFlow E CWSXM1017E: Request flow runtime instance is unavailable due to a flow build error: 'null'. I am able to parse the entire d…

---

## [Follow the bouncing color](https://discuss.elastic.co/t/follow-the-bouncing-color/37874)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 2\
**Last updated:** [December 23, 2015, 5:42pm UTC](https://discuss.elastic.co/t/follow-the-bouncing-color/37874 "2015-12-23T17:42:54Z")

</div>

Colors change via reloads of of the saved dashboard: And the next reload: The only change is the timeframe.

---

## [Compatibility matrix?](https://discuss.elastic.co/t/compatibility-matrix/21045)

<div class="topic-metadata">

**Author:** [@Sitkawoof](https://discuss.elastic.co/u/Sitkawoof)\
**Replies:** 2\
**Last updated:** [December 3, 2014, 9:17pm UTC](https://discuss.elastic.co/t/compatibility-matrix/21045 "2014-12-03T21:17:02Z")

</div>

I've been looking thru the docs for a compatibility matrix for ELK and also Java and Lucene. Does one exist that I have missed? If not, it would be a good addition to the docs. colleen -- You received this …

---

## [How to identify the errors reported by logstash?](https://discuss.elastic.co/t/how-to-identify-the-errors-reported-by-logstash/288283)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 5\
**Last updated:** [November 4, 2021, 3:05am UTC](https://discuss.elastic.co/t/how-to-identify-the-errors-reported-by-logstash/288283 "2021-11-04T03:05:33Z")

</div>

I can't understand where is the error? Who can share how to quickly identify the specific location of the error? input { elasticsearch { hosts =\> \["192.168.10.141:9200"\] index =\> "apm-\*-error-\*" query =\> '{ "query…

[Previous page](https://discuss.elastic.co/top.md?page=1544&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1546&per_page=50&period=all)
