# Top

**URL:** https://discuss.elastic.co/top.md?page=1570&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1571

---

## [Logstash error while testing the config file](https://discuss.elastic.co/t/logstash-error-while-testing-the-config-file/147856)

<div class="topic-metadata">

**Author:** [@gopisa](https://discuss.elastic.co/u/gopisa)\
**Replies:** 3\
**Last updated:** [September 12, 2018, 8:39am UTC](https://discuss.elastic.co/t/logstash-error-while-testing-the-config-file/147856 "2018-09-12T08:39:56Z")

</div>

hI All, my All servers are in azure cloud .. All Applications are running on java 1.7.0 I have running logstash version is 2.1.2 if i ran the bin\\logstash -f conf\\some.conf --config.reload.automatic getting below m…

---

## [Logstash - Using a VIP output - hosts](https://discuss.elastic.co/t/logstash-using-a-vip-output-hosts/128888)

<div class="topic-metadata">

**Author:** [@sabharadwaj](https://discuss.elastic.co/u/sabharadwaj)\
**Replies:** 3\
**Last updated:** [April 20, 2018, 7:01pm UTC](https://discuss.elastic.co/t/logstash-using-a-vip-output-hosts/128888 "2018-04-20T19:01:10Z")

</div>

I have tried searching existing threads but couldnt find any solution to this problem We are trying to use a Elasticsearch cluster VIP in Logstash but it appends 9200 to the VIP.. It doesnt work even if use globalogs.w…

---

## [Hibernate search + elastics search are on the same boat, but this boat flow](https://discuss.elastic.co/t/hibernate-search-elastics-search-are-on-the-same-boat-but-this-boat-flow/122927)

<div class="topic-metadata">

**Author:** [@alexis-puska](https://discuss.elastic.co/u/alexis-puska)\
**Replies:** 3\
**Last updated:** [March 12, 2018, 3:52pm UTC](https://discuss.elastic.co/t/hibernate-search-elastics-search-are-on-the-same-boat-but-this-boat-flow/122927 "2018-03-12T15:52:17Z")

</div>

Hi, elastic is great but elastic HttpRestClientApi is very too dependent of Lucene ! why did you include all server in the RestApiClient (lucene include) for request an external elasticsearch node ? My probleme is that…

---

## [Bootstrap exception: error loading whitelist(s)](https://discuss.elastic.co/t/bootstrap-exception-error-loading-whitelist-s/120938)

<div class="topic-metadata">

**Author:** [@jss1clist](https://discuss.elastic.co/u/jss1clist)\
**Replies:** 3\
**Last updated:** [February 22, 2018, 1:21pm UTC](https://discuss.elastic.co/t/bootstrap-exception-error-loading-whitelist-s/120938 "2018-02-22T13:21:20Z")

</div>

I got the following exception while starting elasticsearch on a docker container. \[2018-02-21T21:35:04,941\]\[INFO \]\[o.e.p.PluginsService \] \[682c5c69a4db\] loaded module \[lang-painless\] ... \[2018-02-21T21:35:04,945\]…

---

## [A NonGeek about Elasticsearch, Logstash and Kibana](https://discuss.elastic.co/t/a-nongeek-about-elasticsearch-logstash-and-kibana/73942)

<div class="topic-metadata">

**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\
**Replies:** 3\
**Last updated:** [February 5, 2017, 4:55pm UTC](https://discuss.elastic.co/t/a-nongeek-about-elasticsearch-logstash-and-kibana/73942 "2017-02-05T16:55:05Z")

</div>

Hello. I like to collect Windows log and send it to a Linux server that use "Elasticsearch, Logstash and Kibana" for analysis but I can't find any useful guidance. I found some pages like : 1- https://www.digitalocean.c…

---

## [Rebuild Cluster - Unassigned shards](https://discuss.elastic.co/t/rebuild-cluster-unassigned-shards/66324)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 3\
**Last updated:** [November 17, 2016, 2:05pm UTC](https://discuss.elastic.co/t/rebuild-cluster-unassigned-shards/66324 "2016-11-17T14:05:39Z")

</div>

Hi Team, It's urgent, though i doubt about recovery but if you can help it will be great. My ES cluster datanodes are under autoscaling group and while updating the stack we did a mistake. The result is, we had 8 data …

---

## [Problem configuring EC2 cluster](https://discuss.elastic.co/t/problem-configuring-ec2-cluster/7211)

<div class="topic-metadata">

**Author:** [@Ranjan\_Bagchi](https://discuss.elastic.co/u/Ranjan_Bagchi)\
**Replies:** 8\
**Last updated:** [August 28, 2012, 3:10am UTC](https://discuss.elastic.co/t/problem-configuring-ec2-cluster/7211 "2012-08-28T03:10:31Z")

</div>

I have to be missing something simple, but here goes. I've two ec2 instances. Ports 9300 and 9200 (and 22) are visible to each other. Verified with nc. I've installed elasticsearch-0.19.0 and the AWS plugin. …

---

## [Mapper Parsing exception Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/73993)

<div class="topic-metadata">

**Author:** [@jaininaveen](https://discuss.elastic.co/u/jaininaveen)\
**Replies:** 0\
**Last updated:** [February 5, 2017, 7:34pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-root-mapping-definition-has-unsupported-parameters/73993 "2017-02-05T19:34:34Z")

</div>

Hi, I am trying to create an index with autocomplete support successfully but I am unable to add data into it. Please help me on this, I stuck on this error from last 48hrs. Please look at the attachment for the sett…

---

## [Geojson upload hangs on creating index](https://discuss.elastic.co/t/geojson-upload-hangs-on-creating-index/225661)

<div class="topic-metadata">

**Author:** [@Kevin\_Kraft](https://discuss.elastic.co/u/Kevin_Kraft)\
**Replies:** 4\
**Last updated:** [April 1, 2020, 12:52pm UTC](https://discuss.elastic.co/t/geojson-upload-hangs-on-creating-index/225661 "2020-04-01T12:52:07Z")

</div>

When uploading a geojson file into a map, Kibana hangs indefinitely on "Writing to index". It's the same issue as in this fixed bug: https://github.com/elastic/kibana/issues/40102 I have Kibana v7.6.1, so it should be …

---

## [Disk space almost filled](https://discuss.elastic.co/t/disk-space-almost-filled/212413)

<div class="topic-metadata">

**Author:** [@piyush0](https://discuss.elastic.co/u/piyush0)\
**Replies:** 4\
**Last updated:** [December 18, 2019, 11:00pm UTC](https://discuss.elastic.co/t/disk-space-almost-filled/212413 "2019-12-18T23:00:45Z")

</div>

Hi I have a remote elasticsearch server set up with 1 node (I cannot ssh into this) The disk space (Total 50GB) is almost filled. Only about 1.5GB are left. But when I run \_cat/indices?v&s=store.size:desc I can see that…

---

## [Monitoring a secure elasticsearch cluster with heartbeat](https://discuss.elastic.co/t/monitoring-a-secure-elasticsearch-cluster-with-heartbeat/202323)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 4\
**Last updated:** [October 8, 2019, 12:13pm UTC](https://discuss.elastic.co/t/monitoring-a-secure-elasticsearch-cluster-with-heartbeat/202323 "2019-10-08T12:13:16Z")

</div>

Hello, I have a monitor on all my cluster nodes that monitors on port 9200. But after enabling security, the heartbeat cannot of course access ES. What is the syntax for the monitor to login securely This is my curre…

---

## [Kv filter value is not always correctly extracted using value\_split\_pattern](https://discuss.elastic.co/t/kv-filter-value-is-not-always-correctly-extracted-using-value-split-pattern/154598)

<div class="topic-metadata">

**Author:** [@CaptainAye](https://discuss.elastic.co/u/CaptainAye)\
**Replies:** 4\
**Last updated:** [November 6, 2018, 5:57pm UTC](https://discuss.elastic.co/t/kv-filter-value-is-not-always-correctly-extracted-using-value-split-pattern/154598 "2018-11-06T17:57:02Z")

</div>

Hello, I have a problem extracting values using kv filter. I would like to extract the values which are seperated from key by the spaces or by the equal signs. My configuration looks like that: kv { include\_keys =\>…

---

## [Term aggregation/facet NOT INCLUDING the faceted field](https://discuss.elastic.co/t/term-aggregation-facet-not-including-the-faceted-field/18948)

<div class="topic-metadata">

**Author:** [@adam\_porat](https://discuss.elastic.co/u/adam_porat)\
**Replies:** 4\
**Last updated:** [July 29, 2014, 10:04am UTC](https://discuss.elastic.co/t/term-aggregation-facet-not-including-the-faceted-field/18948 "2014-07-29T10:04:27Z")

</div>

Hi, Faceted Navigation, as can be seen in \*LinkedIn \*and \*Booking.com\*, include the fundamental characteristic that the value-count of each faceted field is constrained by the query (set of matched documents),…

---

## [Is it possible to add condition in elasticsearch logstash jdbc input plugin](https://discuss.elastic.co/t/is-it-possible-to-add-condition-in-elasticsearch-logstash-jdbc-input-plugin/319195)

<div class="topic-metadata">

**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\
**Replies:** 7\
**Last updated:** [November 22, 2022, 9:07am UTC](https://discuss.elastic.co/t/is-it-possible-to-add-condition-in-elasticsearch-logstash-jdbc-input-plugin/319195 "2022-11-22T09:07:50Z")

</div>

Hi Experts, Is it possible to add condition in elasticsearch logstash jdbc input plugin for the use case mentioned below - Usecase - Select data from table1 If datetime (refer elapseTime in code mentioned below) fetc…

---

## [Click errors Missing required parameter: query](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056)

<div class="topic-metadata">

**Author:** [@Sam\_S](https://discuss.elastic.co/u/Sam_S)\
**Replies:** 1\
**Last updated:** [April 28, 2022, 10:02pm UTC](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056 "2022-04-28T22:02:56Z")

</div>

When trying to register an empty search I get the following result: {"errors":\["Missing required parameter: query"\]} This is the payload executed at engines/local-test/click.json: {"query":"","document\_id":"4c1e9616-6…

---

## [LogStash::Json::ParserError: Unexpected end-of-input within/between Object entries for curly brace inside string](https://discuss.elastic.co/t/logstash-unexpected-end-of-input-within-between-object-entries-for-curly-brace-inside-string/295659)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 1\
**Last updated:** [January 28, 2022, 4:05pm UTC](https://discuss.elastic.co/t/logstash-unexpected-end-of-input-within-between-object-entries-for-curly-brace-inside-string/295659 "2022-01-28T16:05:28Z")

</div>

When String contains opening curly braces '{' logstash failed to parse that JSON. As per JSON doc, we don't need to escape curly brace. then how can I parse this type of JSON through logstash? JSON file: { "DESCRIPTIO…

---

## [How to generate a pie chart from geo\_points within a geo\_shape in ELK?](https://discuss.elastic.co/t/how-to-generate-a-pie-chart-from-geo-points-within-a-geo-shape-in-elk/258312)

<div class="topic-metadata">

**Author:** [@MichaelLevy](https://discuss.elastic.co/u/MichaelLevy)\
**Replies:** 7\
**Last updated:** [December 23, 2020, 3:33pm UTC](https://discuss.elastic.co/t/how-to-generate-a-pie-chart-from-geo-points-within-a-geo-shape-in-elk/258312 "2020-12-23T15:33:54Z")

</div>

Hello everyone! I have created a map by importing GEOJSON data in KIBANA. The data is indexed as geo\_shape and it contains the World's territorial waters area. It represents a layer in my map. I have then added another …

---

## [Need support of Elastic APM Agent for Kotlin Coroutine](https://discuss.elastic.co/t/need-support-of-elastic-apm-agent-for-kotlin-coroutine/220280)

<div class="topic-metadata">

**Author:** [@ty-edelweiss](https://discuss.elastic.co/u/ty-edelweiss)\
**Replies:** 1\
**Last updated:** [February 21, 2020, 8:07am UTC](https://discuss.elastic.co/t/need-support-of-elastic-apm-agent-for-kotlin-coroutine/220280 "2020-02-21T08:07:33Z")

</div>

I faced the problem to trace logs while using Kotlin. I want to use Kotlin Coroutine in our program. But apm-java-agent hasn't support it yet. Of course, Kotlin is 100% compatible with Java. That's why I can use Executo…

---

## [Cannot start elasticsearch on macOS Catalina](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-macos-catalina/197389)

<div class="topic-metadata">

**Author:** [@ChadTaljaardt](https://discuss.elastic.co/u/ChadTaljaardt)\
**Replies:** 1\
**Last updated:** [August 29, 2019, 10:43pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-on-macos-catalina/197389 "2019-08-29T22:43:09Z")

</div>

I am getting this error:

---

## [Track VPN activity](https://discuss.elastic.co/t/track-vpn-activity/171041)

<div class="topic-metadata">

**Author:** [@fedwe](https://discuss.elastic.co/u/fedwe)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 2:24pm UTC](https://discuss.elastic.co/t/track-vpn-activity/171041 "2019-03-08T14:24:14Z")

</div>

Is it possible to track someone's activity when he uses a VPN using packet beat. Like detect that he opened a VPN and see his browsing activity for example.

---

## [Error while running plugin where I included CXF and JAXRS](https://discuss.elastic.co/t/error-while-running-plugin-where-i-included-cxf-and-jaxrs/162788)

<div class="topic-metadata">

**Author:** [@Linc12](https://discuss.elastic.co/u/Linc12)\
**Replies:** 1\
**Last updated:** [January 3, 2019, 3:12pm UTC](https://discuss.elastic.co/t/error-while-running-plugin-where-i-included-cxf-and-jaxrs/162788 "2019-01-03T15:12:04Z")

</div>

Hi, I have built a plugin for Elastic and I also included CXF and JAXRS so that I could use the org.apache.cxf.jaxrs.client.WebClient like this: try { String responseString = AccessController.doPrivileged((Privileg…

---

## [Couldn't find any elasticsearch data -- logstash not show up](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-logstash-not-show-up/156093)

<div class="topic-metadata">

**Author:** [@George\_Smiley](https://discuss.elastic.co/u/George_Smiley)\
**Replies:** 1\
**Last updated:** [November 9, 2018, 7:15pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data-logstash-not-show-up/156093 "2018-11-09T19:15:04Z")

</div>

Hi Everyone, I am new to elk stack. I am trying to configure it base on https://www.itzgeek.com/how-tos/linux/centos-how-tos/updated-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7-rhel-7.html this instr…

---

## [Malformed logstash message](https://discuss.elastic.co/t/malformed-logstash-message/138205)

<div class="topic-metadata">

**Author:** [@Labibme](https://discuss.elastic.co/u/Labibme)\
**Replies:** 7\
**Last updated:** [July 2, 2018, 4:52pm UTC](https://discuss.elastic.co/t/malformed-logstash-message/138205 "2018-07-02T16:52:42Z")

</div>

Hello Everyone, I'm working in a new logstash plateform built from kafka output, archtiecture is as shown below: " filebeat -\> kafka -\> logstash ( first site SSL encryption) -\> logstash ( second site ssl decryption) -\> …

---

## [Kibana Barchart visualization term sorting](https://discuss.elastic.co/t/kibana-barchart-visualization-term-sorting/127418)

<div class="topic-metadata">

**Author:** [@Athul\_Jayson](https://discuss.elastic.co/u/Athul_Jayson)\
**Replies:** 1\
**Last updated:** [April 10, 2018, 6:21pm UTC](https://discuss.elastic.co/t/kibana-barchart-visualization-term-sorting/127418 "2018-04-10T18:21:53Z")

</div>

Hi, I have been working on creating a bar chart visualization in Kibana. I was able to plot the chart correctly, but I am having a slight problem with the labels. I want it to be in sorted order, but the sort function i…

---

## [Why does a node restart reclaim heap?](https://discuss.elastic.co/t/why-does-a-node-restart-reclaim-heap/95928)

<div class="topic-metadata">

**Author:** [@hh\_marshall](https://discuss.elastic.co/u/hh_marshall)\
**Replies:** 1\
**Last updated:** [August 7, 2017, 3:19pm UTC](https://discuss.elastic.co/t/why-does-a-node-restart-reclaim-heap/95928 "2017-08-07T15:19:46Z")

</div>

Hi gang! es is great stuff! Happy es-ing to all! Here's a snapshot of heap usage and GC before/after a rolling restart. As time goes on, the range between the max/mins of the heap saw-tooth pattern becomes compressed un…

---

## [Logstash File input for file rotation](https://discuss.elastic.co/t/logstash-file-input-for-file-rotation/64479)

<div class="topic-metadata">

**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\
**Replies:** 1\
**Last updated:** [February 8, 2017, 3:20pm UTC](https://discuss.elastic.co/t/logstash-file-input-for-file-rotation/64479 "2017-02-08T15:20:44Z")

</div>

Hi Team, We have one use case where we need to read the server logs. We only want to read the log once at the same time don't want to loss single event. All the logging happening in X.log file and which is rolling af…

---

## [Logstash service restart : reading file from beginning](https://discuss.elastic.co/t/logstash-service-restart-reading-file-from-beginning/58974)

<div class="topic-metadata">

**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\
**Replies:** 1\
**Last updated:** [August 25, 2016, 8:23pm UTC](https://discuss.elastic.co/t/logstash-service-restart-reading-file-from-beginning/58974 "2016-08-25T20:23:34Z")

</div>

Hello, I am facing some issues with logstash service restart. Every time when restart the service , then logstash start reading logs files from beginning. Any idea how to resolve this? logstash configuration:- …

---

## [How to extract fields from the hadoop logs using logstash](https://discuss.elastic.co/t/how-to-extract-fields-from-the-hadoop-logs-using-logstash/51649)

<div class="topic-metadata">

**Author:** [@rohit\_prusty](https://discuss.elastic.co/u/rohit_prusty)\
**Replies:** 1\
**Last updated:** [June 3, 2016, 1:13am UTC](https://discuss.elastic.co/t/how-to-extract-fields-from-the-hadoop-logs-using-logstash/51649 "2016-06-03T01:13:33Z")

</div>

My requirement it to parse the hadoop hdfs-audit log file using logstash and extract the operation type and add this as an additional field along with the complete message before storing the event to the elasticsearch. …

---

## [Error using elasticsearch with OSGi](https://discuss.elastic.co/t/error-using-elasticsearch-with-osgi/18790)

<div class="topic-metadata">

**Author:** [@Vivek\_Sachdeva](https://discuss.elastic.co/u/Vivek_Sachdeva)\
**Replies:** 1\
**Last updated:** [July 22, 2014, 12:29pm UTC](https://discuss.elastic.co/t/error-using-elasticsearch-with-osgi/18790 "2014-07-22T12:29:40Z")

</div>

I am using elastic search 1.0.1 and have following dependency in POM. org.apache.servicemix.bundles org.apache.servicemix.bundles.elasticsearch 1.0.0\_1 …

---

## [Aggressive index compression](https://discuss.elastic.co/t/aggressive-index-compression/9049)

<div class="topic-metadata">

**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\
**Replies:** 7\
**Last updated:** [September 20, 2012, 6:39am UTC](https://discuss.elastic.co/t/aggressive-index-compression/9049 "2012-09-20T06:39:04Z")

</div>

Hi there, We're willing to index lots of data, however after a certain period of time it doesn't have to be as "hot" as data from the past week. What do you experts think of the following: Open index Write lots of d…

---

## [Split brain?](https://discuss.elastic.co/t/split-brain/6256)

<div class="topic-metadata">

**Author:** [@Darron\_Froese](https://discuss.elastic.co/u/Darron_Froese)\
**Replies:** 7\
**Last updated:** [January 4, 2012, 11:31am UTC](https://discuss.elastic.co/t/split-brain/6256 "2012-01-04T11:31:00Z")

</div>

I had a cluster of 2 x 2GB Rackspace cloud boxes running ES 0.18.5 for the last 3 weeks. It's been working great and we've had several million records inserted and deleted in that time. Here is the config: http:/…

---

## [Predict Full Disk Usage Date](https://discuss.elastic.co/t/predict-full-disk-usage-date/382847)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [October 20, 2025, 8:32pm UTC](https://discuss.elastic.co/t/predict-full-disk-usage-date/382847 "2025-10-20T20:32:45Z")

</div>

Hello, How can I predict the date the disk will be full like this: I tried Elastic ML and used it to forecast, but I am not sure how to produce a date that can be added to a dashboard?

---

## [Does anyone know if Filebeat keystore is as secure as the Linux Shadow file?](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611)

<div class="topic-metadata">

**Author:** [@danielc](https://discuss.elastic.co/u/danielc)\
**Replies:** 3\
**Last updated:** [May 9, 2023, 2:44pm UTC](https://discuss.elastic.co/t/does-anyone-know-if-filebeat-keystore-is-as-secure-as-the-linux-shadow-file/332611 "2023-05-09T14:44:10Z")

</div>

Does anyone know if Filebeat keystore is reversible? is it as secure as the Linux Shadow file?

---

## [Elastic Update Script avoid dynamic script compilations](https://discuss.elastic.co/t/elastic-update-script-avoid-dynamic-script-compilations/295236)

<div class="topic-metadata">

**Author:** [@Siegi](https://discuss.elastic.co/u/Siegi)\
**Replies:** 5\
**Last updated:** [February 17, 2022, 8:51am UTC](https://discuss.elastic.co/t/elastic-update-script-avoid-dynamic-script-compilations/295236 "2022-02-17T08:51:42Z")

</div>

Hey there, after my elastic usage is growing, I ran into the script.max\_compilations\_rate( TransportError(500, 'general\_script\_exception', '\[script\] Too many dynamic script compilations ) in my updates. I use update…

---

## [Problem compiling filebeat from source](https://discuss.elastic.co/t/problem-compiling-filebeat-from-source/203704)

<div class="topic-metadata">

**Author:** [@thurston](https://discuss.elastic.co/u/thurston)\
**Replies:** 5\
**Last updated:** [October 15, 2019, 7:48pm UTC](https://discuss.elastic.co/t/problem-compiling-filebeat-from-source/203704 "2019-10-15T19:48:30Z")

</div>

Working on compiling Filebeat from source to run on arm architecture. This worked for 7.3 without any issues. A new message came up with 7.4 here is a snip of my script that i am using. go get github.com/elastic/beat…

---

## [How to increase elastic search disk space](https://discuss.elastic.co/t/how-to-increase-elastic-search-disk-space/211062)

<div class="topic-metadata">

**Author:** [@arrchana](https://discuss.elastic.co/u/arrchana)\
**Replies:** 0\
**Last updated:** [December 9, 2019, 7:29am UTC](https://discuss.elastic.co/t/how-to-increase-elastic-search-disk-space/211062 "2019-12-09T07:29:40Z")

</div>

I just executed the below command which returned the elastic search disk space GET \_cat/nodes?v&h=id,diskTotal,diskUsed,diskAvail,diskUsedPercent Output: id diskTotal diskUsed diskAvail diskUsedPercent qzxs 9.6…

---

## [Create visualizations based on Kibana saved objects, including tags?](https://discuss.elastic.co/t/create-visualizations-based-on-kibana-saved-objects-including-tags/270073)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [April 14, 2021, 10:14am UTC](https://discuss.elastic.co/t/create-visualizations-based-on-kibana-saved-objects-including-tags/270073 "2021-04-14T10:14:13Z")

</div>

I'm creating dashboards in Kibana 7.11.2 for multiple types of event from a single application. In the data I'm working with, the event types are characterized by different values of a field named tableName. While there …

---

## [Link a Kibana field to a URL](https://discuss.elastic.co/t/link-a-kibana-field-to-a-url/247392)

<div class="topic-metadata">

**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\
**Replies:** 2\
**Last updated:** [September 8, 2020, 3:17pm UTC](https://discuss.elastic.co/t/link-a-kibana-field-to-a-url/247392 "2020-09-08T15:17:37Z")

</div>

I have a data table and, for the sake of making this understandable, it has several fields, but the first field is the "name". The "name" in this situation is the name of an application. I want to create the data table…

---

## [Date histograms -- fixed intervals possible?](https://discuss.elastic.co/t/date-histograms-fixed-intervals-possible/243106)

<div class="topic-metadata">

**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\
**Replies:** 2\
**Last updated:** [July 29, 2020, 7:41pm UTC](https://discuss.elastic.co/t/date-histograms-fixed-intervals-possible/243106 "2020-07-29T19:41:40Z")

</div>

I'm really struggling with the Date Histogram (in Kibana). We're sending custom metric data to ES (no, none of the Elastic tools are capable of doing this). The data and visualizations are "fine..." with one caveat: we c…

---

## [/home is not instrumented since component property is not provided](https://discuss.elastic.co/t/home-is-not-instrumented-since-component-property-is-not-provided/234768)

<div class="topic-metadata">

**Author:** [@alexandreservian](https://discuss.elastic.co/u/alexandreservian)\
**Replies:** 2\
**Last updated:** [June 9, 2020, 1:42pm UTC](https://discuss.elastic.co/t/home-is-not-instrumented-since-component-property-is-not-provided/234768 "2020-06-09T13:42:33Z")

</div>

Kibana version: 7.6.2 Elasticsearch version: APM Server version: APM Agent language and version: elastic/apm-rum@5.2.0 Browser version: google chrome 83.0.4103.61 Original install method (e.g. download page, yum, de…

---

## [Correct analyzer for a field with backslash](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 2\
**Last updated:** [March 30, 2020, 7:56pm UTC](https://discuss.elastic.co/t/correct-analyzer-for-a-field-with-backslash/225614 "2020-03-30T19:56:12Z")

</div>

So, I'm trying to setup a new index mapping with the correct analyzer for a Windows credential field, which has the format domain\\username. I want to be able to search for domain, username AND domain\\username. But the d…

---

## [Snapshot name patterns](https://discuss.elastic.co/t/snapshot-name-patterns/204314)

<div class="topic-metadata">

**Author:** [@wyllys66](https://discuss.elastic.co/u/wyllys66)\
**Replies:** 2\
**Last updated:** [October 20, 2019, 1:30pm UTC](https://discuss.elastic.co/t/snapshot-name-patterns/204314 "2019-10-20T13:30:49Z")

</div>

In elasticsearch 7.4.0, I have a snapshot policy that has the snapshot name pattern set to ""\<snapshot-{now/d}\>", however when the snapshots are taken, they have extra characters appended to the name, for example: snap…

---

## [Csv export in discovery of very long fields is failing](https://discuss.elastic.co/t/csv-export-in-discovery-of-very-long-fields-is-failing/171348)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [March 15, 2019, 5:19pm UTC](https://discuss.elastic.co/t/csv-export-in-discovery-of-very-long-fields-is-failing/171348 "2019-03-15T17:19:39Z")

</div>

Hi, We are using kibana to consolidate log files and to merge them into a stream from multiple application nodes. In this usecase we don't need any aggregation, but we want to search for error messages and we would like…

---

## [Index template에 대해서 궁금한 점이 있습니다](https://discuss.elastic.co/t/index-template/163534)

<div class="topic-metadata">

**Author:** [@sksky93](https://discuss.elastic.co/u/sksky93)\
**Replies:** 2\
**Last updated:** [January 16, 2019, 8:03am UTC](https://discuss.elastic.co/t/index-template/163534 "2019-01-16T08:03:29Z")

</div>

엘라스틱을 공부하던 중, Filebeat는 파일에서 읽은 내용을 message에 넣는다고 알고 있습니다. 그러면 혹시 message에 들어가 있는 자료를 필드로 나누려고 합니다. 아래는 제 template 입니다. { "filebeat-6.5.3" : { "order" : 0, "index\_patterns" : \[ "filebeat-6.5.3-\*" \], "settings" …

---

## [Output jdbc](https://discuss.elastic.co/t/output-jdbc/142564)

<div class="topic-metadata">

**Author:** [@hamza90](https://discuss.elastic.co/u/hamza90)\
**Replies:** 2\
**Last updated:** [August 1, 2018, 1:36pm UTC](https://discuss.elastic.co/t/output-jdbc/142564 "2018-08-01T13:36:06Z")

</div>

im collecting csv data with logstash and i want to store with mysql .what is Logstash output plugins available for mysql? thanks

---

## [Error when moving data from hive using elasticsearch-hadoop plugin to elasticsearch](https://discuss.elastic.co/t/error-when-moving-data-from-hive-using-elasticsearch-hadoop-plugin-to-elasticsearch/131124)

<div class="topic-metadata">

**Author:** [@Harbeer\_Kadian](https://discuss.elastic.co/u/Harbeer_Kadian)\
**Replies:** 2\
**Last updated:** [May 30, 2018, 7:33pm UTC](https://discuss.elastic.co/t/error-when-moving-data-from-hive-using-elasticsearch-hadoop-plugin-to-elasticsearch/131124 "2018-05-30T19:33:30Z")

</div>

Hi all, I raised following issue in the past. Here the advised solution was to generate unique id for each record to prevent duplicates from getting inserted. I am creating my primary key using md5 function. I take a…

---

## [Pipeline aborted due to "Grok::PatternError"](https://discuss.elastic.co/t/pipeline-aborted-due-to-grok-patternerror/123343)

<div class="topic-metadata">

**Author:** [@bo9354](https://discuss.elastic.co/u/bo9354)\
**Replies:** 2\
**Last updated:** [March 9, 2018, 9:58pm UTC](https://discuss.elastic.co/t/pipeline-aborted-due-to-grok-patternerror/123343 "2018-03-09T21:58:22Z")

</div>

Configuration OK Blockquote Adding pattern {"SYSLOG5424LINE"=\>"%{SYSLOG5424BASE} +%{GREEDYDATA:syslog5424\_msg}", :level=\>:info, :file=\>"grok-pure.rb", :line=\>"62", :method=\>"add\_pattern"} Adding pattern {"MCOLLECTIVE…

---

## [Elasticsearch process is killed on Centos 7 - Newbie](https://discuss.elastic.co/t/elasticsearch-process-is-killed-on-centos-7-newbie/117635)

<div class="topic-metadata">

**Author:** [@Dwijadas](https://discuss.elastic.co/u/Dwijadas)\
**Replies:** 2\
**Last updated:** [January 30, 2018, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-process-is-killed-on-centos-7-newbie/117635 "2018-01-30T17:36:31Z")

</div>

Continuing the discussion from Elasticsearch process is killed on Centos 7: Since existing topic was closed I open a new one. I cant even see any logs at /var/log/elasticsearch/ any idea ?

---

## [ElasticSearch Spark](https://discuss.elastic.co/t/elasticsearch-spark/61610)

<div class="topic-metadata">

**Author:** [@nayan\_sharma](https://discuss.elastic.co/u/nayan_sharma)\
**Replies:** 2\
**Last updated:** [October 25, 2016, 7:13am UTC](https://discuss.elastic.co/t/elasticsearch-spark/61610 "2016-10-25T07:13:03Z")

</div>

I have a dataframe and writing it to the ES Before writing to ES,I am converting the EVTExit column to Date, which is in EPOCH. \*\*workset = workset.withColumn("EVTExit", to\_date(from\_unixtime($"EVTExit".divide(1000))…

---

## [Compatibility issues in Watcher?](https://discuss.elastic.co/t/compatibility-issues-in-watcher/57154)

<div class="topic-metadata">

**Author:** [@kartikvelastic](https://discuss.elastic.co/u/kartikvelastic)\
**Replies:** 2\
**Last updated:** [August 4, 2016, 8:01am UTC](https://discuss.elastic.co/t/compatibility-issues-in-watcher/57154 "2016-08-04T08:01:20Z")

</div>

PUT \_watcher/watch/my-watch { "trigger" : { "schedule" : { "cron" : "0 0/1 \* \* \* ?" } }, "input" : { "search" : { "request" : { "indices" : \[ "httpd\*" \], "body" : { …

[Previous page](https://discuss.elastic.co/top.md?page=1569&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1571&per_page=50&period=all)
