# Top

**URL:** https://discuss.elastic.co/top.md?page=1562&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1563

---

## [Kibana v6.4.1 giving 504 gateway timeout while running machine learning](https://discuss.elastic.co/t/kibana-v6-4-1-giving-504-gateway-timeout-while-running-machine-learning/155498)

<div class="topic-metadata">

**Author:** [@Julian\_N](https://discuss.elastic.co/u/Julian_N)\
**Replies:** 2\
**Last updated:** [November 6, 2018, 9:08am UTC](https://discuss.elastic.co/t/kibana-v6-4-1-giving-504-gateway-timeout-while-running-machine-learning/155498 "2018-11-06T09:08:16Z")

</div>

Receiving a 504 gateway error when opening my Kibana insatance from elastic cloud. Started running some machine learning jobs streaming live data last night when I left. The Elastic cluster is up and running. How do I r…

---

## [Kibana - Okta integration not working](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476)

<div class="topic-metadata">

**Author:** [@ravirajaram](https://discuss.elastic.co/u/ravirajaram)\
**Replies:** 2\
**Last updated:** [June 5, 2018, 4:34pm UTC](https://discuss.elastic.co/t/kibana-okta-integration-not-working/134476 "2018-06-05T16:34:17Z")

</div>

I am getting the below error while try to integrate kibana with okta for SSO: Jun 04 18:39:20 kibana-1 docker\[31268\]: org.elasticsearch.ElasticsearchSecurityException: Cannot find any matching realm for \[SamlPrepareAuth…

---

## [How to remove fields with blank values in lucense query](https://discuss.elastic.co/t/how-to-remove-fields-with-blank-values-in-lucense-query/124804)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 2\
**Last updated:** [March 23, 2018, 8:42pm UTC](https://discuss.elastic.co/t/how-to-remove-fields-with-blank-values-in-lucense-query/124804 "2018-03-23T20:42:54Z")

</div>

Hello, I want to create search with only non blank fields. I tried with \_exists but it did not help. Can anyone please help it out.

---

## [Is there any way to embed visualization to kibana plugin pages?](https://discuss.elastic.co/t/is-there-any-way-to-embed-visualization-to-kibana-plugin-pages/117622)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 9:11am UTC](https://discuss.elastic.co/t/is-there-any-way-to-embed-visualization-to-kibana-plugin-pages/117622 "2018-01-31T09:11:41Z")

</div>

as shown in the title. is it possible in kibana 6.1? i use this document 'https://www.elastic.co/guide/en/kibana/current/development-embedding-visualizations.html' and the plugin template 'https://github.com/elastic…

---

## [Docker images not yet available?](https://discuss.elastic.co/t/docker-images-not-yet-available/111637)

<div class="topic-metadata">

**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\
**Replies:** 2\
**Last updated:** [December 14, 2017, 2:43am UTC](https://discuss.elastic.co/t/docker-images-not-yet-available/111637 "2017-12-14T02:43:27Z")

</div>

I'm trying to pull Docker image docker.elastic.co/elasticsearch/elasticsearch-oss:6.1.0 (actually it's a FROM directive in a Dockerfile) and here is the result: Step 1 : FROM docker.elastic.co/elasticsearch/elasticsearc…

---

## [Skip empty fields](https://discuss.elastic.co/t/skip-empty-fields/104694)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 2\
**Last updated:** [October 27, 2017, 6:47am UTC](https://discuss.elastic.co/t/skip-empty-fields/104694 "2017-10-27T06:47:57Z")

</div>

In the csv filter plugin there is a configuration option called skip\_empty\_columns. I would like to use the same functionality with Windows Eventlogs. That it, remove fields that are empty. Right now they only say "-…

---

## [Kibana is not working from my browser!](https://discuss.elastic.co/t/kibana-is-not-working-from-my-browser/94571)

<div class="topic-metadata">

**Author:** [@Jnan](https://discuss.elastic.co/u/Jnan)\
**Replies:** 2\
**Last updated:** [July 26, 2017, 6:50am UTC](https://discuss.elastic.co/t/kibana-is-not-working-from-my-browser/94571 "2017-07-26T06:50:22Z")

</div>

Hi all, I have installed Elasticsearch 5.5 on my ubuntu 16.04 machine. I also installed logstash and kibana. I can able to see elasticsearch,logstash and kibana is up and running. But when hit from by browser to http:/…

---

## [Unable to restore security index from snapshot](https://discuss.elastic.co/t/unable-to-restore-security-index-from-snapshot/89314)

<div class="topic-metadata">

**Author:** [@epe](https://discuss.elastic.co/u/epe)\
**Replies:** 2\
**Last updated:** [June 14, 2017, 1:23pm UTC](https://discuss.elastic.co/t/unable-to-restore-security-index-from-snapshot/89314 "2017-06-14T13:23:14Z")

</div>

Hi, Cluster ID: 7e8634 There are two red indices on our cluster: .security and .watches, but when I try to restore them I get this error message: cannot restore index \[.security\] because it's open If I try to clo…

---

## [Merge data feeds to one searchable index](https://discuss.elastic.co/t/merge-data-feeds-to-one-searchable-index/33983)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 2\
**Last updated:** [November 7, 2015, 1:41pm UTC](https://discuss.elastic.co/t/merge-data-feeds-to-one-searchable-index/33983 "2015-11-07T13:41:11Z")

</div>

i have ELK parsing our firewall logs - everything is working we are saving a ton of $$$ as we dont have to pay splunk to index the 6-8gb a day. Now i want more, and add the blueliv threat feed to "enrich" my log data i…

---

## [Archive and purge](https://discuss.elastic.co/t/archive-and-purge/17391)

<div class="topic-metadata">

**Author:** [@Vijay\_Dodla](https://discuss.elastic.co/u/Vijay_Dodla)\
**Replies:** 2\
**Last updated:** [May 7, 2014, 7:51pm UTC](https://discuss.elastic.co/t/archive-and-purge/17391 "2014-05-07T19:51:32Z")

</div>

Hi I have a requirement where i need to delete old records from Elasticsearch Index . Before i delete them i want to archive them to a different location . I see that there are tools for exporting data (elasticsear…

---

## [Elastic Agent SOMETIMES Opens Ports to Listen for Syslog Traffic (Buggy Behaviour)](https://discuss.elastic.co/t/elastic-agent-sometimes-opens-ports-to-listen-for-syslog-traffic-buggy-behaviour/312046)

<div class="topic-metadata">

**Author:** [@othman](https://discuss.elastic.co/u/othman)\
**Replies:** 1\
**Last updated:** [August 15, 2022, 1:51pm UTC](https://discuss.elastic.co/t/elastic-agent-sometimes-opens-ports-to-listen-for-syslog-traffic-buggy-behaviour/312046 "2022-08-15T13:51:35Z")

</div>

Greetings, I'm having this rather inconsistent behaviour where my elastic agent deployed on my Syslog server sometimes opens ports for incoming traffic and sometimes decides not to. Currently the agent has few integrat…

---

## ["Split series" in "Line" visualization super slow](https://discuss.elastic.co/t/split-series-in-line-visualization-super-slow/235858)

<div class="topic-metadata">

**Author:** [@dreamspy](https://discuss.elastic.co/u/dreamspy)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 10:53am UTC](https://discuss.elastic.co/t/split-series-in-line-visualization-super-slow/235858 "2020-06-12T10:53:04Z")

</div>

I'm splitting data in a Kibana graph (plotting multiple lines on one graph), and the splitting seems to slow everything down. Question in short: I'm mostly wondering if Kibana is just slow in general when splitting all…

---

## [CIRCLE geometry is not supported?](https://discuss.elastic.co/t/circle-geometry-is-not-supported/184505)

<div class="topic-metadata">

**Author:** [@iamazy](https://discuss.elastic.co/u/iamazy)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 4:39pm UTC](https://discuss.elastic.co/t/circle-geometry-is-not-supported/184505 "2019-06-07T16:39:28Z")

</div>

hello I query by geo\_shape but got this error unsupported\_operation\_exception: CIRCLE geometry is not supported the dsl as followed, { "query": { "geo\_shape": { "location": { "shape": { …

---

## [Filebeat is not sending data to logstash from windows client](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-logstash-from-windows-client/111651)

<div class="topic-metadata">

**Author:** [@Surya\_Indukuri](https://discuss.elastic.co/u/Surya_Indukuri)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 10:25pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-logstash-from-windows-client/111651 "2017-12-13T22:25:57Z")

</div>

Continuing the discussion from Filebeat is not sending logs to logstash: Hi Guys , I have installed kibana elasticsearch logstash in cent os but filebeat is not sending data to logstash ###################### Filebea…

---

## [JSON en-/decoding issues starting with version 1.5.5](https://discuss.elastic.co/t/json-en-decoding-issues-starting-with-version-1-5-5/36543)

<div class="topic-metadata">

**Author:** [@USP\_rol](https://discuss.elastic.co/u/USP_rol)\
**Replies:** 1\
**Last updated:** [December 8, 2015, 2:29pm UTC](https://discuss.elastic.co/t/json-en-decoding-issues-starting-with-version-1-5-5/36543 "2015-12-08T14:29:11Z")

</div>

Hi all I'll try to summarize our issue we're having here a bit to share as much information as possible. We're running a logstash architecture Shipper -\> Redis-Queue -\> Indexer ( -\> graphite output) which runs fine wit…

---

## [Data allways stack in field.keyword than field](https://discuss.elastic.co/t/data-allways-stack-in-field-keyword-than-field/311937)

<div class="topic-metadata">

**Author:** [@Dreinale](https://discuss.elastic.co/u/Dreinale)\
**Replies:** 8\
**Last updated:** [August 12, 2022, 4:04pm UTC](https://discuss.elastic.co/t/data-allways-stack-in-field-keyword-than-field/311937 "2022-08-12T16:04:59Z")

</div>

Hi, I try to install & configure elk 8.3.3 without security on the docker "host" and filebeat on another docker. All works, i have the live logs, i imported my dashboards, but i have this: and the problem is because…

---

## [\[ANN\] JDBC river for Elasticsearch 2.0.0](https://discuss.elastic.co/t/ann-jdbc-river-for-elasticsearch-2-0-0/10402)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 8\
**Last updated:** [March 6, 2013, 11:34pm UTC](https://discuss.elastic.co/t/ann-jdbc-river-for-elasticsearch-2-0-0/10402 "2013-03-06T23:34:17Z")

</div>

Hey, JDBC river plugin for Elasticsearch 2.0.0 is out. https://github.com/jprante/elasticsearch-river-jdbc Glimpsing the features: - for Elasticsearch 0.20+ - more stable, tested against Derby, H2, HSQLDB, M…

---

## [Enrolling Fleet server](https://discuss.elastic.co/t/enrolling-fleet-server/315278)

<div class="topic-metadata">

**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\
**Replies:** 3\
**Last updated:** [September 30, 2022, 9:24am UTC](https://discuss.elastic.co/t/enrolling-fleet-server/315278 "2022-09-30T09:24:55Z")

</div>

Hello ! We are having trouble to enroll fleet server on our host. We are working with : Windows Server 2019 Standard Elasticsearch / Kibana / Elastic-Agent version 8.4.2 (same issue with 8.4.1) We try to enroll Fleet…

---

## [ERROR: Aborting enrolling to cluster. Could not communicate with the node on any of the addresses from the enrollment token. All of \[ip:9200\] were attempted](https://discuss.elastic.co/t/error-aborting-enrolling-to-cluster-could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token-all-of-ip-9200-were-attempted/314651)

<div class="topic-metadata">

**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Replies:** 0\
**Last updated:** [September 18, 2022, 9:18pm UTC](https://discuss.elastic.co/t/error-aborting-enrolling-to-cluster-could-not-communicate-with-the-node-on-any-of-the-addresses-from-the-enrollment-token-all-of-ip-9200-were-attempted/314651 "2022-09-18T21:18:05Z")

</div>

Hi, I tried to join new node to existing Elastic cluster. I'm using Elasticsearch version 8.4.1 Tried steps for new node: sudo rpm --install elasticsearch-8.4.1-x86\_64.rpm /usr/share/elasticsearch/bin/elasticsearch-…

---

## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464)

<div class="topic-metadata">

**Author:** [@tilchl](https://discuss.elastic.co/u/tilchl)\
**Replies:** 3\
**Last updated:** [March 14, 2022, 4:24pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/299464 "2022-03-14T16:24:48Z")

</div>

Im trying to create a new index pattern in Kibana but I get Couldn't find any Elasticsearch data elasticsearch::9200 returns: { "name" : "rechenmonster-es01", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "S…

---

## [Available Fields - Kibana - Parse data for dashboard built](https://discuss.elastic.co/t/available-fields-kibana-parse-data-for-dashboard-built/274674)

<div class="topic-metadata">

**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\
**Replies:** 3\
**Last updated:** [June 2, 2021, 3:27pm UTC](https://discuss.elastic.co/t/available-fields-kibana-parse-data-for-dashboard-built/274674 "2021-06-02T15:27:34Z")

</div>

I've ingested ddos dataset from kaggle.com into kibana and it seems like not all the metadata available is useful for me to create a dashboard visualizing the ddos attacks. What am I missing? The config file as follows …

---

## [Replace the @TimeStamp with actual time during a bulk Filebeat Send](https://discuss.elastic.co/t/replace-the-timestamp-with-actual-time-during-a-bulk-filebeat-send/269882)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 3\
**Last updated:** [April 12, 2021, 11:22pm UTC](https://discuss.elastic.co/t/replace-the-timestamp-with-actual-time-during-a-bulk-filebeat-send/269882 "2021-04-12T23:22:37Z")

</div>

Hi, We are collecting a large amount of logs through out the day and then sending them at 4:30am via Filebeat in a bulk send. The problem is when they end up in Elasticsearch/Kibana all the @TimeStamp fields are 4:30am…

---

## [Elastic Ruby on Rails APM: Queue is full issue](https://discuss.elastic.co/t/elastic-ruby-on-rails-apm-queue-is-full-issue/246793)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 8:49pm UTC](https://discuss.elastic.co/t/elastic-ruby-on-rails-apm-queue-is-full-issue/246793 "2020-08-31T20:49:49Z")

</div>

Hi Team I'm using APM version: 7.8.0 for ruby on rails app. I integrated this with prod and dev. However, for some reason I'm not able to see recent requests for prod site. Here are the logs in my app. I see queue is …

---

## [How can we take import index in elasticsearch to export in new Index of elasticsearch...?](https://discuss.elastic.co/t/how-can-we-take-import-index-in-elasticsearch-to-export-in-new-index-of-elasticsearch/240687)

<div class="topic-metadata">

**Author:** [@navdeepk](https://discuss.elastic.co/u/navdeepk)\
**Replies:** 3\
**Last updated:** [July 13, 2020, 7:03am UTC](https://discuss.elastic.co/t/how-can-we-take-import-index-in-elasticsearch-to-export-in-new-index-of-elasticsearch/240687 "2020-07-13T07:03:54Z")

</div>

Actually, I have to take backup of index to export in new elasticsearch....

---

## [Data not going from Logstash to Elasticsearch (7.1.1)](https://discuss.elastic.co/t/data-not-going-from-logstash-to-elasticsearch-7-1-1/185495)

<div class="topic-metadata">

**Author:** [@topher](https://discuss.elastic.co/u/topher)\
**Replies:** 3\
**Last updated:** [June 12, 2019, 6:54pm UTC](https://discuss.elastic.co/t/data-not-going-from-logstash-to-elasticsearch-7-1-1/185495 "2019-06-12T18:54:34Z")

</div>

Since updating to 7.1.1 I have been unable to get data to Elasticsearch consistently. I posted about 429 errors the other day which seem to have gone away, but now I have no data coming into ES through Logstash. (Filebe…

---

## [Kibana visualisation on values](https://discuss.elastic.co/t/kibana-visualisation-on-values/178807)

<div class="topic-metadata">

**Author:** [@Neeraj\_Jain](https://discuss.elastic.co/u/Neeraj_Jain)\
**Replies:** 3\
**Last updated:** [April 29, 2019, 3:32pm UTC](https://discuss.elastic.co/t/kibana-visualisation-on-values/178807 "2019-04-29T15:32:58Z")

</div>

Hi, I am pushing a lot of application counter data to elasticsearch every few minutes. These counters keep incrementing as user register to the application. I want to create visualisation to see the incrementing counter…

---

## [How to give WHERE condition in data table](https://discuss.elastic.co/t/how-to-give-where-condition-in-data-table/132286)

<div class="topic-metadata">

**Author:** [@vikas.joinme](https://discuss.elastic.co/u/vikas.joinme)\
**Replies:** 3\
**Last updated:** [May 18, 2018, 9:27am UTC](https://discuss.elastic.co/t/how-to-give-where-condition-in-data-table/132286 "2018-05-18T09:27:22Z")

</div>

I've a data table with count as one of the columns. How do i set a condition on the column to display rows of data only if count \> 50.

---

## [Link into a bar chart in Time Series Visual Builder](https://discuss.elastic.co/t/link-into-a-bar-chart-in-time-series-visual-builder/109056)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 3\
**Last updated:** [November 28, 2017, 11:02am UTC](https://discuss.elastic.co/t/link-into-a-bar-chart-in-time-series-visual-builder/109056 "2017-11-28T11:02:05Z")

</div>

HI all, please ,I would like know if is possible insert a link into a barchart to jump to an other dashboard in Time Series Visual Builder . I saw that there is the possibility in the top N "panel option section item …

---

## [ES влияние на релевантность результатов полнотекстового поиска](https://discuss.elastic.co/t/es/106426)

<div class="topic-metadata">

**Author:** [@karelianboy1](https://discuss.elastic.co/u/karelianboy1)\
**Replies:** 3\
**Last updated:** [November 6, 2017, 7:46pm UTC](https://discuss.elastic.co/t/es/106426 "2017-11-06T19:46:01Z")

</div>

ES предполагается для использования в качестве полнототекстового поиска. Одно из требований - выдача результатов поиска сначала тех, кот. относятся к городу пользователя. Город пользователя определяется через dadata. Эт…

---

## [Elasticsearch analyzer](https://discuss.elastic.co/t/elasticsearch-analyzer/76726)

<div class="topic-metadata">

**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\
**Replies:** 3\
**Last updated:** [February 28, 2017, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-analyzer/76726 "2017-02-28T09:23:25Z")

</div>

Hi! I want to know is there any method that allow one field use more than one analyzer? Here is an example, I got an index call index 1, and a type call product. under product there are different field like (product\_…

---

## [Yum install on Centos7 gives no broken service for systemd](https://discuss.elastic.co/t/yum-install-on-centos7-gives-no-broken-service-for-systemd/74361)

<div class="topic-metadata">

**Author:** [@m0n0lith](https://discuss.elastic.co/u/m0n0lith)\
**Replies:** 3\
**Last updated:** [February 14, 2017, 12:11pm UTC](https://discuss.elastic.co/t/yum-install-on-centos7-gives-no-broken-service-for-systemd/74361 "2017-02-14T12:11:07Z")

</div>

When I install Elasticsearch 5.1.2 on a Centos7 with help of Puppet/Puppet-forge is see this: ls -al /etc/systemd/system/elasticsearch.service lrwxrwxrwx 1 root root 9 Feb 3 15:09 /etc/systemd/system/elasticsearch.se…

---

## [Kibana Dashboard question](https://discuss.elastic.co/t/kibana-dashboard-question/45369)

<div class="topic-metadata">

**Author:** [@lawndart](https://discuss.elastic.co/u/lawndart)\
**Replies:** 3\
**Last updated:** [March 24, 2016, 5:44pm UTC](https://discuss.elastic.co/t/kibana-dashboard-question/45369 "2016-03-24T17:44:20Z")

</div>

Hello All, So I'm coming from a Splunk background, and trying to replicate some of the same sorts of visualizations and dashboards I had built out over there. If I have any gross misconceptions I blame that. I have a…

---

## [File Compression in Elasticsearch](https://discuss.elastic.co/t/file-compression-in-elasticsearch/41874)

<div class="topic-metadata">

**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\
**Replies:** 3\
**Last updated:** [February 17, 2016, 11:15am UTC](https://discuss.elastic.co/t/file-compression-in-elasticsearch/41874 "2016-02-17T11:15:00Z")

</div>

Can Elasticsearch compress the original documents? Like can it compress the original documents in a .gz format after it has performed all the indexing?

---

## [\[ANNOUNCEMENT\] spring-elasticsearch 2.0.0 released](https://discuss.elastic.co/t/announcement-spring-elasticsearch-2-0-0-released/32938)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [October 25, 2015, 8:58pm UTC](https://discuss.elastic.co/t/announcement-spring-elasticsearch-2-0-0-released/32938 "2015-10-25T20:58:24Z")

</div>

The spring-elasticsearch team is pleased to announce the spring-elasticsearch-2.0.0 release! Spring factories for Elasticsearch Changes in this version include: New features: o Use maven-changes-plugin to make anno…

---

## [Accidently started second instance resulting in duplicate node folders](https://discuss.elastic.co/t/accidently-started-second-instance-resulting-in-duplicate-node-folders/14813)

<div class="topic-metadata">

**Author:** [@Luk\_Morbee](https://discuss.elastic.co/u/Luk_Morbee)\
**Replies:** 3\
**Last updated:** [December 13, 2013, 1:52pm UTC](https://discuss.elastic.co/t/accidently-started-second-instance-resulting-in-duplicate-node-folders/14813 "2013-12-13T13:52:28Z")

</div>

Hi, We have a cluster of 2 nodes each with their own volume. On one of the nodes we accidentally started a second instance which resulted in duplicate node folders (0 & 1). The instance pointing to the nodes/0 f…

---

## [Geo bounding box search across anti-meridian](https://discuss.elastic.co/t/geo-bounding-box-search-across-anti-meridian/3316)

<div class="topic-metadata">

**Author:** [@Andrei](https://discuss.elastic.co/u/Andrei)\
**Replies:** 3\
**Last updated:** [September 10, 2010, 1:05pm UTC](https://discuss.elastic.co/t/geo-bounding-box-search-across-anti-meridian/3316 "2010-09-10T13:05:04Z")

</div>

I'm testing the new geo-search in 0.10 and ran into an issue. It seems that ES does not like bounding boxes that extend across the antimeridian (180° meridian). If I specify a box with top left corner to the left of t…

---

## [How Packetbeat for MongoDB](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990)

<div class="topic-metadata">

**Author:** [@hope1234567hope](https://discuss.elastic.co/u/hope1234567hope)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 1:33am UTC](https://discuss.elastic.co/t/how-packetbeat-for-mongodb/282990 "2021-09-09T01:33:34Z")

</div>

i Packetbeat for MongoDB，but not find mongodb.query information。only have mongodb.startingFrom mongodb.numberToReturn mongodb.numberToSkip mongodb.fullCollectionName mongodb.cursorId，but not data。 why？ my version i…

---

## [Multiline Logstah file txt](https://discuss.elastic.co/t/multiline-logstah-file-txt/243613)

<div class="topic-metadata">

**Author:** [@Daniel\_Bergmann](https://discuss.elastic.co/u/Daniel_Bergmann)\
**Replies:** 6\
**Last updated:** [August 4, 2020, 11:53am UTC](https://discuss.elastic.co/t/multiline-logstah-file-txt/243613 "2020-08-04T11:53:30Z")

</div>

I have a TXT file that I want to import into Elasticsearch via LogStash, it is a fixed type of columns, in which I used grok and if to separate the columns of this file, that's fine, but I want to use the multiline to g…

---

## [Logstasg KV](https://discuss.elastic.co/t/logstasg-kv/115537)

<div class="topic-metadata">

**Author:** [@neo\_levi](https://discuss.elastic.co/u/neo_levi)\
**Replies:** 6\
**Last updated:** [January 16, 2018, 4:24am UTC](https://discuss.elastic.co/t/logstasg-kv/115537 "2018-01-16T04:24:09Z")

</div>

Hi All, i am new to logstash kv , i am tring to parse message that look like {"HOSTNAME":"XXX","level":"INFO","logger\_name":"elkUaLog","serviceName":"services-log","profile":"localdev","eurekaInstanceId":"services-log:2…

---

## [Listen on all interfaces(wirecard) fail](https://discuss.elastic.co/t/listen-on-all-interfaces-wirecard-fail/68629)

<div class="topic-metadata">

**Author:** [@rpuserh](https://discuss.elastic.co/u/rpuserh)\
**Replies:** 6\
**Last updated:** [December 11, 2016, 5:05am UTC](https://discuss.elastic.co/t/listen-on-all-interfaces-wirecard-fail/68629 "2016-12-11T05:05:11Z")

</div>

Hi, I want to run elastic to listen on all interfaces. I changed one config network.host: 0.0.0.0 And get this error \[2016-12-10T18:38:47,511\]\[INFO \]\[o.e.n.Node \] \[1cpgZVE\] starting ... \[2016-12-10T18:38:47,684\]…

---

## [Elasticsearch GUI](https://discuss.elastic.co/t/elasticsearch-gui/7755)

<div class="topic-metadata">

**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\
**Replies:** 6\
**Last updated:** [May 18, 2012, 7:44pm UTC](https://discuss.elastic.co/t/elasticsearch-gui/7755 "2012-05-18T19:44:32Z")

</div>

Is there a service that provides GUI on top of elasticsearch? Something like google "search box"?

---

## [Is there a time limit for Filebeat or Logstash to attempt to retransmit?](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 5\
**Last updated:** [September 6, 2022, 12:19pm UTC](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721 "2022-09-06T12:19:30Z")

</div>

I am using Filebeat, Logstash, and Elasticsearch to collect logs. I have received a query that some logs are not being captured by Elasticsearch. Is it possible to lose logs in this ELK server configuration? For examp…

---

## [Update a field if it does not contain any value](https://discuss.elastic.co/t/update-a-field-if-it-does-not-contain-any-value/281565)

<div class="topic-metadata">

**Author:** [@Derya\_Sayar](https://discuss.elastic.co/u/Derya_Sayar)\
**Replies:** 5\
**Last updated:** [August 16, 2021, 7:34pm UTC](https://discuss.elastic.co/t/update-a-field-if-it-does-not-contain-any-value/281565 "2021-08-16T19:34:02Z")

</div>

I have log files generated from some applications. Some of applications produces messages in following format. So there is "logContent" in message field. {"instant":{"epochSecond":1628692763,"nanoOfSecond":792000000},"t…

---

## [How to replace "No results found" with other words or emoji](https://discuss.elastic.co/t/how-to-replace-no-results-found-with-other-words-or-emoji/228050)

<div class="topic-metadata">

**Author:** [@janefeng](https://discuss.elastic.co/u/janefeng)\
**Replies:** 5\
**Last updated:** [April 15, 2020, 2:28pm UTC](https://discuss.elastic.co/t/how-to-replace-no-results-found-with-other-words-or-emoji/228050 "2020-04-15T14:28:16Z")

</div>

Is it possible to replace "No results found" in dashboard with other words or emoji? Even if a picture is better.

---

## [Kibana: can I store "Time" as a variable and run a consecutive search?](https://discuss.elastic.co/t/kibana-can-i-store-time-as-a-variable-and-run-a-consecutive-search/206421)

<div class="topic-metadata">

**Author:** [@Francesco\_Mantovani](https://discuss.elastic.co/u/Francesco_Mantovani)\
**Replies:** 5\
**Last updated:** [November 13, 2019, 5:44pm UTC](https://discuss.elastic.co/t/kibana-can-i-store-time-as-a-variable-and-run-a-consecutive-search/206421 "2019-11-13T17:44:01Z")

</div>

I'm new to Kibana and I'm trying to automate the research we do every day. I already asked a question on StackOverflow but I'm not satisfied with the reply. I work in a company that produce a software for autonomous ve…

---

## [ES Input plugin gives invalid json data](https://discuss.elastic.co/t/es-input-plugin-gives-invalid-json-data/194500)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 5\
**Last updated:** [August 8, 2019, 8:23pm UTC](https://discuss.elastic.co/t/es-input-plugin-gives-invalid-json-data/194500 "2019-08-08T20:23:41Z")

</div>

Hi All I am using ES input and output as file, i get json data but this is multiline and not a valid json here is my conf file input { elasticsearch { hosts =\> "" index =\> "abcd" size =\> 10 scroll =\> "5m" …

---

## [Filebeat can not get enviroment variable in docker](https://discuss.elastic.co/t/filebeat-can-not-get-enviroment-variable-in-docker/177829)

<div class="topic-metadata">

**Author:** [@ducminhle](https://discuss.elastic.co/u/ducminhle)\
**Replies:** 5\
**Last updated:** [April 25, 2019, 10:32am UTC](https://discuss.elastic.co/t/filebeat-can-not-get-enviroment-variable-in-docker/177829 "2019-04-25T10:32:35Z")

</div>

Hi All, Here is my config in filebeat.yml: fields: env: '${SPRING\_PROFILES\_ACTIVE}' Result in the container is: root@07acb280f9e5:/# echo ${SPRING\_PROFILES\_ACTIVE} perf15 But I got issue went container start fil…

---

## [Фильтрация входного файла с использованием информации из другого входного файла](https://discuss.elastic.co/t/topic/163724)

<div class="topic-metadata">

**Author:** [@slapp](https://discuss.elastic.co/u/slapp)\
**Replies:** 5\
**Last updated:** [January 16, 2019, 10:21pm UTC](https://discuss.elastic.co/t/topic/163724 "2019-01-16T22:21:58Z")

</div>

Добрый день! Развернул на ELK мониторинг DNS. Заметил, что накапливается большое количество записей рекламных доменов и доменов метрики яндекс и гугл. Решил отфильтровать все записи с помощью списка таких доменов из тек…

---

## [Getting GC error from elasticsearch](https://discuss.elastic.co/t/getting-gc-error-from-elasticsearch/151186)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 5\
**Last updated:** [October 11, 2018, 7:54am UTC](https://discuss.elastic.co/t/getting-gc-error-from-elasticsearch/151186 "2018-10-11T07:54:20Z")

</div>

Hi Team, Kindly suggest any solutions for below errors. Our cluster is in Red state due to this: 2018-10-05T01:30:58,403\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[Node\_ELK\] \[gc\]\[young\]\[1301721\]\[238872\] duration \[2.2s\], col…

---

## [Automatic Range Filter. Possible?](https://discuss.elastic.co/t/automatic-range-filter-possible/15802)

<div class="topic-metadata">

**Author:** [@Tchinkatchuk](https://discuss.elastic.co/u/Tchinkatchuk)\
**Replies:** 5\
**Last updated:** [February 14, 2014, 8:04pm UTC](https://discuss.elastic.co/t/automatic-range-filter-possible/15802 "2014-02-14T20:04:40Z")

</div>

Hi everyone, I have multiple facets on text, integer, date. I use range filter on some integer facets but I have to "manually" set the range (from x to y, from y to z, ...) Is there a way to ask ES to do those s…

[Previous page](https://discuss.elastic.co/top.md?page=1561&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1563&per_page=50&period=all)
