# Top

**URL:** https://discuss.elastic.co/top.md?page=1577&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1578

---

## [Elastic Agent 7.10 - Setup - Invalid URL - NULL](https://discuss.elastic.co/t/elastic-agent-7-10-setup-invalid-url-null/255416)

<div class="topic-metadata">

**Author:** [@casa0](https://discuss.elastic.co/u/casa0)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 4:43pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-setup-invalid-url-null/255416 "2020-11-17T16:43:17Z")

</div>

Hi, I'm seeing an error "Invalid URL: null" when trying to view any pages related to fleet. I was testing 7.9.3 in Docker and was able to add a few agents, then upgraded to 7.10.0. Now none of the fleet pages will load.…

---

## [Can't able register aws ES snapshot repository to filesystem](https://discuss.elastic.co/t/cant-able-register-aws-es-snapshot-repository-to-filesystem/164611)

<div class="topic-metadata">

**Author:** [@arun5635](https://discuss.elastic.co/u/arun5635)\
**Replies:** 1\
**Last updated:** [January 17, 2019, 12:13pm UTC](https://discuss.elastic.co/t/cant-able-register-aws-es-snapshot-repository-to-filesystem/164611 "2019-01-17T12:13:34Z")

</div>

Hi I am trying to register aws ES snapshot repository to local filesystem. Can anyone please help me in registering the repository. input curl -XPUT http://search-ecs-alblogs-@@@@@.us-west-2.es.amazonaws.com/\_snapshot/…

---

## [Delete By Query Request Run on Alias needs Security Rights to Index](https://discuss.elastic.co/t/delete-by-query-request-run-on-alias-needs-security-rights-to-index/102480)

<div class="topic-metadata">

**Author:** [@cvarberg](https://discuss.elastic.co/u/cvarberg)\
**Replies:** 1\
**Last updated:** [October 3, 2017, 4:43pm UTC](https://discuss.elastic.co/t/delete-by-query-request-run-on-alias-needs-security-rights-to-index/102480 "2017-10-03T16:43:33Z")

</div>

Elasticsearch version : 5.5.1 JVM version: 1.8.0\_131 OS version : CentOS 7.3.1611 Description: In order to run the \_delete\_by\_query on an alias the user needs "delete" privileges to the actual index. I would expect t…

---

## [Terms Aggregation on Text field, fielddata true. Wrong doc\_count](https://discuss.elastic.co/t/terms-aggregation-on-text-field-fielddata-true-wrong-doc-count/74594)

<div class="topic-metadata">

**Author:** [@anks](https://discuss.elastic.co/u/anks)\
**Replies:** 1\
**Last updated:** [February 10, 2017, 6:56am UTC](https://discuss.elastic.co/t/terms-aggregation-on-text-field-fielddata-true-wrong-doc-count/74594 "2017-02-10T06:56:49Z")

</div>

Hi I am trying to run terms aggregation on full text field with type as 'text' and fielddata enabled. I am getting doc\_count 1 per document match instead of frequency of term. Mapping - {"mappings":{"data":{"prop…

---

## [Csv output plugin prints wrong stuff](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574)

<div class="topic-metadata">

**Author:** [@molejnik](https://discuss.elastic.co/u/molejnik)\
**Replies:** 1\
**Last updated:** [November 14, 2016, 6:43am UTC](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574 "2016-11-14T06:43:23Z")

</div>

I want to extract some fields from my log file and write them to a file in csv format. Say I have a simple log file: SimpleLog.txt: Test.cpp:1234 error Test.cpp:1277 success Other.cpp:12 Error Last.java:57 Succ My lo…

---

## [Empty list vs field not present](https://discuss.elastic.co/t/empty-list-vs-field-not-present/20171)

<div class="topic-metadata">

**Author:** [@Liam\_Atkinson](https://discuss.elastic.co/u/Liam_Atkinson)\
**Replies:** 1\
**Last updated:** [October 9, 2014, 10:16pm UTC](https://discuss.elastic.co/t/empty-list-vs-field-not-present/20171 "2014-10-09T22:16:43Z")

</div>

Is there anywhere in the API that a field being missing is not equivalent to an empty list? As an example, is it generally true that { "some\_object" : \[\] , "title" : "title" } is equivalent to { "title" :…

---

## [Not able to find logstash plain log in the var/log/logstash directory](https://discuss.elastic.co/t/not-able-to-find-logstash-plain-log-in-the-var-log-logstash-directory/347296)

<div class="topic-metadata">

**Author:** [@Domnic\_Raj\_D](https://discuss.elastic.co/u/Domnic_Raj_D)\
**Replies:** 5\
**Last updated:** [November 17, 2023, 6:44pm UTC](https://discuss.elastic.co/t/not-able-to-find-logstash-plain-log-in-the-var-log-logstash-directory/347296 "2023-11-17T18:44:50Z")

</div>

I am not able to find logstash-plain.log in the var/log/logstash directory. Configurations are set to write logs in /var/log/logstash directory. please advise.

---

## [Offline maps in kibana 8.8](https://discuss.elastic.co/t/offline-maps-in-kibana-8-8/346137)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 5\
**Last updated:** [October 31, 2023, 3:49pm UTC](https://discuss.elastic.co/t/offline-maps-in-kibana-8-8/346137 "2023-10-31T15:49:20Z")

</div>

Hello, I want to create a map in Kibana 8.8, but I am in an environment that does not have internet access. Is there a method to create maps offline in Kibana? Thank you

---

## [Elastic query for where in](https://discuss.elastic.co/t/elastic-query-for-where-in/313104)

<div class="topic-metadata">

**Author:** [@Harrowmykel](https://discuss.elastic.co/u/Harrowmykel)\
**Replies:** 5\
**Last updated:** [August 28, 2022, 8:59pm UTC](https://discuss.elastic.co/t/elastic-query-for-where-in/313104 "2022-08-28T20:59:22Z")

</div>

Hello, Can someone give me the json query equivalent of the following MySQL query Select \* from Table where col1=q or col2=q where cat in (cat1, cat2, cat3) Basically I want to find "q" in index "Table" but restricted…

---

## [elasticSearch -Search in Italian and Hebrew](https://discuss.elastic.co/t/elasticsearch-search-in-italian-and-hebrew/221205)

<div class="topic-metadata">

**Author:** [@rezekiel](https://discuss.elastic.co/u/rezekiel)\
**Replies:** 5\
**Last updated:** [February 27, 2020, 11:21am UTC](https://discuss.elastic.co/t/elasticsearch-search-in-italian-and-hebrew/221205 "2020-02-27T11:21:21Z")

</div>

With elasticSearch 7.4 installed on Windows - what do i need to do/install to search for strings in Hebrew and in Italian

---

## [Filebeat nginx module does not work with AWS ES](https://discuss.elastic.co/t/filebeat-nginx-module-does-not-work-with-aws-es/210449)

<div class="topic-metadata">

**Author:** [@john\_eapen](https://discuss.elastic.co/u/john_eapen)\
**Replies:** 5\
**Last updated:** [December 16, 2019, 5:26pm UTC](https://discuss.elastic.co/t/filebeat-nginx-module-does-not-work-with-aws-es/210449 "2019-12-16T17:26:22Z")

</div>

Filebeat nginx module does not work with AWS ES due to lack of support for ingest-geoip plugin in AWS ES. Is there any temporary workaround for this issue ? I don't need the geoip information for now. Also any update o…

---

## [Error after upgrading to Logstash 7.1.1](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147)

<div class="topic-metadata">

**Author:** [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Replies:** 5\
**Last updated:** [July 25, 2019, 9:01pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147 "2019-07-25T21:01:22Z")

</div>

\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Something is wrong with your configurati…

---

## [Load unfairly distributed during large ingest](https://discuss.elastic.co/t/load-unfairly-distributed-during-large-ingest/81730)

<div class="topic-metadata">

**Author:** [@yylex](https://discuss.elastic.co/u/yylex)\
**Replies:** 5\
**Last updated:** [April 10, 2017, 4:05pm UTC](https://discuss.elastic.co/t/load-unfairly-distributed-during-large-ingest/81730 "2017-04-10T16:05:23Z")

</div>

Hey friends, new guy here. :baby\_bottle::innocent: I have an ES cluster running on cheap spot instances: 1 master, 5 data nodes, 10 shards, and 1 replica. I have a round robin load balancer in front of my cluster. Duri…

---

## [Amount of nodes vs. stronger machines](https://discuss.elastic.co/t/amount-of-nodes-vs-stronger-machines/17714)

<div class="topic-metadata">

**Author:** [@ran](https://discuss.elastic.co/u/ran)\
**Replies:** 5\
**Last updated:** [May 26, 2014, 5:02am UTC](https://discuss.elastic.co/t/amount-of-nodes-vs-stronger-machines/17714 "2014-05-26T05:02:16Z")

</div>

Hi all, Currently I'm using ES cluster with 8 nodes (m3.xlarge machines from Amazon) These nodes contain - Ram - 15.0 GB CPU - 13 (4 core x 3.25 unit) I wanted to know if i'll get better performance whether I'l…

---

## [Help stripping HTML tags](https://discuss.elastic.co/t/help-stripping-html-tags/4528)

<div class="topic-metadata">

**Author:** [@Greg\_Brown](https://discuss.elastic.co/u/Greg_Brown)\
**Replies:** 5\
**Last updated:** [June 2, 2011, 4:18pm UTC](https://discuss.elastic.co/t/help-stripping-html-tags/4528 "2011-06-02T16:18:30Z")

</div>

I've configured a default custom analyzer as follows: index : analysis : filter : snowball : type : snowball language : English wd\_filter : type : word\_delimiter generate\_word\_parts : true generate\_number\_parts…

---

## [Kibana dashboard multiple panels and filtering](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 10:43pm UTC](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116 "2021-07-20T22:43:44Z")

</div>

Hi, I have a dashboard containing multiple panels which use different indices. But when I use a filter on one of the panels. It is applied to other panels too which use different indices. Which means filter operation f…

---

## [Add custom field and its value needs to be derived from one of the source field](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272229)

<div class="topic-metadata">

**Author:** [@AnamikaN](https://discuss.elastic.co/u/AnamikaN)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 4:47am UTC](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272229 "2021-05-06T04:47:15Z")

</div>

I need to add one custom field 'log.level' into filebeat.yml. ITs value needs to be derived from one of source field 'message'. I need to extract log level (INFO or DEBUG or ERROR etc.) from message. Message field looks …

---

## [No suitable driver found error when using logstash-input-jdbc](https://discuss.elastic.co/t/no-suitable-driver-found-error-when-using-logstash-input-jdbc/232957)

<div class="topic-metadata">

**Author:** [@csaket](https://discuss.elastic.co/u/csaket)\
**Replies:** 2\
**Last updated:** [May 18, 2020, 2:11pm UTC](https://discuss.elastic.co/t/no-suitable-driver-found-error-when-using-logstash-input-jdbc/232957 "2020-05-18T14:11:32Z")

</div>

I am running redhat 7.8 and have done a fresh installation of logstash 7.7 When trying to use the logstash-input-jdbc plugin to read from a database I get a No suitable driver found error. I was able to set it up to wo…

---

## [Adding fields to next line using Logstash Aggregate](https://discuss.elastic.co/t/adding-fields-to-next-line-using-logstash-aggregate/208684)

<div class="topic-metadata">

**Author:** [@rwcanand](https://discuss.elastic.co/u/rwcanand)\
**Replies:** 2\
**Last updated:** [November 21, 2019, 1:38pm UTC](https://discuss.elastic.co/t/adding-fields-to-next-line-using-logstash-aggregate/208684 "2019-11-21T13:38:57Z")

</div>

Hi, I'm trying to implement a use case where I want to add an existing field on a line to the next line. I tried to implement this using aggregate with pipeline.workers set to 1. The sample Log file is as below Data1 …

---

## [Transaction name is wrong](https://discuss.elastic.co/t/transaction-name-is-wrong/186013)

<div class="topic-metadata">

**Author:** [@solax](https://discuss.elastic.co/u/solax)\
**Replies:** 2\
**Last updated:** [June 18, 2019, 1:42am UTC](https://discuss.elastic.co/t/transaction-name-is-wrong/186013 "2019-06-18T01:42:48Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.0…

---

## [Convert Epoch time to "yyyy/MM/dd HH:mm:ss.SSS"](https://discuss.elastic.co/t/convert-epoch-time-to-yyyy-mm-dd-hhss-sss/160912)

<div class="topic-metadata">

**Author:** [@emailshak](https://discuss.elastic.co/u/emailshak)\
**Replies:** 2\
**Last updated:** [December 20, 2018, 3:25am UTC](https://discuss.elastic.co/t/convert-epoch-time-to-yyyy-mm-dd-hhss-sss/160912 "2018-12-20T03:25:03Z")

</div>

I am receiving epoch time as input and would like to persist this in the following format "yyyy/MM/dd HH:mm:ss.SSS" in Elasticsearch. I am performing the following at present in logstash date { match =\> \["mydate", "UN…

---

## [Elastic cluster in Kubernetes using statefulsets ,data lost during cluster restart](https://discuss.elastic.co/t/elastic-cluster-in-kubernetes-using-statefulsets-data-lost-during-cluster-restart/157264)

<div class="topic-metadata">

**Author:** [@Punith](https://discuss.elastic.co/u/Punith)\
**Replies:** 2\
**Last updated:** [November 20, 2018, 4:25am UTC](https://discuss.elastic.co/t/elastic-cluster-in-kubernetes-using-statefulsets-data-lost-during-cluster-restart/157264 "2018-11-20T04:25:37Z")

</div>

Hi, We have a Kubernetes statefulset Elastic cluster with 3 master nodes and 2 data nodes.Elastic version being 6.4.2.After a cluster restart none of the old data i.e indices are present and only new data is being displ…

---

## [Elasticsearch 6.0 on ubuntu 16.04 will only start if network.host is set to 192.168.0.1 and not the actual IP address bound to the adaptor or hostname in hosts file](https://discuss.elastic.co/t/elasticsearch-6-0-on-ubuntu-16-04-will-only-start-if-network-host-is-set-to-192-168-0-1-and-not-the-actual-ip-address-bound-to-the-adaptor-or-hostname-in-hosts-file/109288)

<div class="topic-metadata">

**Author:** [@sconrod](https://discuss.elastic.co/u/sconrod)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-on-ubuntu-16-04-will-only-start-if-network-host-is-set-to-192-168-0-1-and-not-the-actual-ip-address-bound-to-the-adaptor-or-hostname-in-hosts-file/109288 "2017-12-01T20:13:50Z")

</div>

Elasticsearch 6.0 on ubuntu 16.04 will only start if network.host is set to 192.168.0.1 and not the actual IP address bound to the adaptor or hostname in hosts file. If I follow steps precisely here and and restart elas…

---

## [Support for Spark Structured Streaming](https://discuss.elastic.co/t/support-for-spark-structured-streaming/78734)

<div class="topic-metadata">

**Author:** [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\
**Replies:** 2\
**Last updated:** [March 16, 2017, 8:30am UTC](https://discuss.elastic.co/t/support-for-spark-structured-streaming/78734 "2017-03-16T08:30:06Z")

</div>

Hello, I would like if there are any plans to support the Structured Streaming Programming (doc)?

---

## [Metricbeat Dynamic Top Level Fields](https://discuss.elastic.co/t/metricbeat-dynamic-top-level-fields/55313)

<div class="topic-metadata">

**Author:** [@icozamiz](https://discuss.elastic.co/u/icozamiz)\
**Replies:** 2\
**Last updated:** [July 12, 2016, 4:15pm UTC](https://discuss.elastic.co/t/metricbeat-dynamic-top-level-fields/55313 "2016-07-12T16:15:18Z")

</div>

Hello! I am new to beats and am currently working on a module in metricbeat that polls a system through a webservice call and gets a usage summary of the system and it's subsystems in the form a nested json object. In…

---

## [Filebeat to send data to scribe server](https://discuss.elastic.co/t/filebeat-to-send-data-to-scribe-server/50266)

<div class="topic-metadata">

**Author:** [@narenpalepu](https://discuss.elastic.co/u/narenpalepu)\
**Replies:** 2\
**Last updated:** [May 22, 2016, 1:55pm UTC](https://discuss.elastic.co/t/filebeat-to-send-data-to-scribe-server/50266 "2016-05-22T13:55:39Z")

</div>

Hi All, I am trying to replace scribe infrastructure with filebeat. Is it supported . Do you see any issues? Starting with scribe\_log and than replacing scribed. Thanks, Naren

---

## [Curator show/delete index problem](https://discuss.elastic.co/t/curator-show-delete-index-problem/38817)

<div class="topic-metadata">

**Author:** [@dre7777](https://discuss.elastic.co/u/dre7777)\
**Replies:** 2\
**Last updated:** [January 10, 2016, 8:15pm UTC](https://discuss.elastic.co/t/curator-show-delete-index-problem/38817 "2016-01-10T20:15:12Z")

</div>

Hi there, I'm trying to delete some old indexes with the curator plugin however it's always returning all my indexes. I'm on centos7 with ES v 2.0.0 I'm running this on a test server and managed to delete all my indexe…

---

## [Kibana 4.3.0 uses sometimes field\_stats and sometimes \_msearch for fetching data](https://discuss.elastic.co/t/kibana-4-3-0-uses-sometimes-field-stats-and-sometimes--msearch-for-fetching-data/38081)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 2\
**Last updated:** [December 29, 2015, 6:33am UTC](https://discuss.elastic.co/t/kibana-4-3-0-uses-sometimes-field-stats-and-sometimes--msearch-for-fetching-data/38081 "2015-12-29T06:33:03Z")

</div>

Hi Team , I am using Kibana 4.3.0 with ES 2.1 and i am using Kibana Quick view to fetch 1 year old indexed data , when i am selecting Last 1 year in Quick view then sometime msearch api is called and some…

---

## [Logstash Mongodb output plugin is not converting jdbc (Oracle) NUMBER (32,8) column to goecode latitude data](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-is-not-converting-jdbc-oracle-number-32-8-column-to-goecode-latitude-data/34068)

<div class="topic-metadata">

**Author:** [@rajivmca2004](https://discuss.elastic.co/u/rajivmca2004)\
**Replies:** 2\
**Last updated:** [November 13, 2015, 8:32am UTC](https://discuss.elastic.co/t/logstash-mongodb-output-plugin-is-not-converting-jdbc-oracle-number-32-8-column-to-goecode-latitude-data/34068 "2015-11-13T08:32:36Z")

</div>

Anyone know solution of this: Error: exception=\>#\>

---

## [Lost index after Cluster fiddling](https://discuss.elastic.co/t/lost-index-after-cluster-fiddling/29970)

<div class="topic-metadata">

**Author:** [@Marc\_Fielding](https://discuss.elastic.co/u/Marc_Fielding)\
**Replies:** 2\
**Last updated:** [September 25, 2015, 11:33pm UTC](https://discuss.elastic.co/t/lost-index-after-cluster-fiddling/29970 "2015-09-25T23:33:22Z")

</div>

Hi Everyone, I've recently started out with Elastic and had everything running absolutely perfectly on my local dev machine. Yesterday I thought I'd get an idea of how clusters work, so I installed Elastic on my Ras…

---

## [Get count by certain field based on a sub query](https://discuss.elastic.co/t/get-count-by-certain-field-based-on-a-sub-query/15369)

<div class="topic-metadata">

**Author:** [@Chen\_Wang](https://discuss.elastic.co/u/Chen_Wang)\
**Replies:** 2\
**Last updated:** [January 24, 2014, 8:38pm UTC](https://discuss.elastic.co/t/get-count-by-certain-field-based-on-a-sub-query/15369 "2014-01-24T20:38:20Z")

</div>

Guys, I just successfully imported my data to ES, e,g. It has looks like this: "activity": 'viewed', "sessionId": "000000143198107b3fe510b041138cd33fdd9252aab9808c", "campaign\_id":"" , "activity": 'campaign…

---

## [How to add privileges to elastic/fleet-server](https://discuss.elastic.co/t/how-to-add-privileges-to-elastic-fleet-server/306153)

<div class="topic-metadata">

**Author:** [@rupam1](https://discuss.elastic.co/u/rupam1)\
**Replies:** 4\
**Last updated:** [June 2, 2022, 11:08am UTC](https://discuss.elastic.co/t/how-to-add-privileges-to-elastic-fleet-server/306153 "2022-06-02T11:08:44Z")

</div>

I have generated token with elastic fleet-server, while creating new index with that token I am getting security exception saying unauthorised user elastic/fleet-server

---

## [Cannot see data on Kiabana](https://discuss.elastic.co/t/cannot-see-data-on-kiabana/201274)

<div class="topic-metadata">

**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\
**Replies:** 4\
**Last updated:** [October 5, 2019, 5:42pm UTC](https://discuss.elastic.co/t/cannot-see-data-on-kiabana/201274 "2019-10-05T17:42:12Z")

</div>

Hello there Server info: CentOS Linux release 7.7.1908 (Core) packetbeat-6.8.3-1.x86\_64 kibana-6.8.3-1.x86\_64 elasticsearch-6.8.3-1.noarch I cannot see the data on kibana when performing searches like this: beat.ho…

---

## [Multiline logs with a unique identifier](https://discuss.elastic.co/t/multiline-logs-with-a-unique-identifier/145845)

<div class="topic-metadata">

**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Replies:** 4\
**Last updated:** [August 28, 2018, 5:21pm UTC](https://discuss.elastic.co/t/multiline-logs-with-a-unique-identifier/145845 "2018-08-28T17:21:31Z")

</div>

Hi All, I am reading messages from a syslog file in the following format: \<161\>notify-1089122.1.alert: abcd \<161\>notify-1089122.2.alert: xyz \<161\>notify-1089133.1.alert: abc \<161\>notify-1089122.3.alert: qwer These are…

---

## [Contacto en español](https://discuss.elastic.co/t/contacto-en-espanol/103739)

<div class="topic-metadata">

**Author:** [@kikarodaima](https://discuss.elastic.co/u/kikarodaima)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 2:51pm UTC](https://discuss.elastic.co/t/contacto-en-espanol/103739 "2017-10-12T14:51:38Z")

</div>

Hola. Estoy interesado en analizar si puedo implementar Elastic en la organización para la que trabajo. Tenemos 1 millón de usuarios en 15 países de América. Fui contactado por alguien de Elastic, pero esta persona no …

---

## [Logstash crashes when receiving a bad message](https://discuss.elastic.co/t/logstash-crashes-when-receiving-a-bad-message/68050)

<div class="topic-metadata">

**Author:** [@graham.dalessandro](https://discuss.elastic.co/u/graham.dalessandro)\
**Replies:** 4\
**Last updated:** [December 6, 2016, 6:37am UTC](https://discuss.elastic.co/t/logstash-crashes-when-receiving-a-bad-message/68050 "2016-12-06T06:37:12Z")

</div>

Hello Fellow Logstashians, I am working on exporting Dynatrace data to SPLUNK via logstash. I am using the Dynatrace Real Time Business Transaction Feed and 2 instances of logstash with a redis queue in between. Every…

---

## [ES 5.0-rc1 resolving should/minimum\_should\_match speed problem](https://discuss.elastic.co/t/es-5-0-rc1-resolving-should-minimum-should-match-speed-problem/63512)

<div class="topic-metadata">

**Author:** [@Alex\_Alexandre](https://discuss.elastic.co/u/Alex_Alexandre)\
**Replies:** 4\
**Last updated:** [October 20, 2016, 4:02pm UTC](https://discuss.elastic.co/t/es-5-0-rc1-resolving-should-minimum-should-match-speed-problem/63512 "2016-10-20T16:02:33Z")

</div>

Hi, I am not sure this is intended but when i play with bool-\>should queries it seems that the query gets really slow. For my tests, i've made an index composed by 4 170 000 documents stored in 6 different types. The …

---

## [Mapper-attachments-helloworld not working](https://discuss.elastic.co/t/mapper-attachments-helloworld-not-working/60359)

<div class="topic-metadata">

**Author:** [@Dror\_Musahy](https://discuss.elastic.co/u/Dror_Musahy)\
**Replies:** 4\
**Last updated:** [September 13, 2016, 12:25pm UTC](https://discuss.elastic.co/t/mapper-attachments-helloworld-not-working/60359 "2016-09-13T12:25:17Z")

</div>

really new in elastic world, and install 2.4 + mapper-attachments plugin. try index documnts with sample: https://www.elastic.co/guide/en/elasticsearch/plugins/master/mapper-attachments-helloworld.html but search fou…

---

## [How to get text field size](https://discuss.elastic.co/t/how-to-get-text-field-size/290350)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 1\
**Last updated:** [November 29, 2021, 11:50am UTC](https://discuss.elastic.co/t/how-to-get-text-field-size/290350 "2021-11-29T11:50:17Z")

</div>

when i run this script : GET shopee\_smart\_sorting\_my\_db\_\_address\_match\_result\_tab\*/\_search { "script\_fields": { "full\_name": { "script": { "lang": "painless", "source": """ if (par…

---

## [Grok expression with if for Elasticseach](https://discuss.elastic.co/t/grok-expression-with-if-for-elasticseach/219623)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 7\
**Last updated:** [February 17, 2020, 3:38pm UTC](https://discuss.elastic.co/t/grok-expression-with-if-for-elasticseach/219623 "2020-02-17T15:38:44Z")

</div>

Hello, I would like to know if there is a possibility to make the if condition within a grok for Logstash, but for Elasticsearch ? I don't use Logstash but Filebeat Regards.

---

## [Interest in contributing to elastic as part of GSoC 2020](https://discuss.elastic.co/t/interest-in-contributing-to-elastic-as-part-of-gsoc-2020/215250)

<div class="topic-metadata">

**Author:** [@Syn3rman](https://discuss.elastic.co/u/Syn3rman)\
**Replies:** 1\
**Last updated:** [January 16, 2020, 11:58pm UTC](https://discuss.elastic.co/t/interest-in-contributing-to-elastic-as-part-of-gsoc-2020/215250 "2020-01-16T23:58:13Z")

</div>

Hey, I am a junior year undergrad student interested in contributing to kibana and beats. I'm familiarizing myself with the projects and was hoping if there are any project ideas available to work on for a beginner. Th…

---

## [I'm new to ELK, I have a doubt on APM](https://discuss.elastic.co/t/im-new-to-elk-i-have-a-doubt-on-apm/206898)

<div class="topic-metadata">

**Author:** [@praveenkumar\_nr](https://discuss.elastic.co/u/praveenkumar_nr)\
**Replies:** 7\
**Last updated:** [November 11, 2019, 9:35am UTC](https://discuss.elastic.co/t/im-new-to-elk-i-have-a-doubt-on-apm/206898 "2019-11-11T09:35:56Z")

</div>

Guys, I'm supposed to work on an existing product which is using ELK. The product has APM support for web services. Now my task is to develop a Batch framework for to be used by that product. Is it possible to configure…

---

## [Could not start KIBANA: "not sending \[kibana\_settings\] monitoring document because \[undefined\] is null or invalid."](https://discuss.elastic.co/t/could-not-start-kibana-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/192183)

<div class="topic-metadata">

**Author:** [@gnh1201](https://discuss.elastic.co/u/gnh1201)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 7:58pm UTC](https://discuss.elastic.co/t/could-not-start-kibana-not-sending-kibana-settings-monitoring-document-because-undefined-is-null-or-invalid/192183 "2019-07-29T19:58:13Z")

</div>

Could not start KIBANA: "not sending \[kibana\_settings\] monitoring document because \[undefined\] is null or invalid." environment: elasticsearch: 7.2, kibana 7.2, centos 7 full log file: kibana.log · GitHub summary log: …

---

## [UpdateByQuery script version conflict](https://discuss.elastic.co/t/updatebyquery-script-version-conflict/175411)

<div class="topic-metadata">

**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\
**Replies:** 1\
**Last updated:** [April 8, 2019, 8:37am UTC](https://discuss.elastic.co/t/updatebyquery-script-version-conflict/175411 "2019-04-08T08:37:57Z")

</div>

Hi, I'm having a lot of version conflict when trying to updatebyquery with a painless script, even though the documents are not updated by anything else at the same time (my script is the only write on the cluster at th…

---

## [Repository on kerberized HDFS](https://discuss.elastic.co/t/repository-on-kerberized-hdfs/133697)

<div class="topic-metadata">

**Author:** [@sgtz](https://discuss.elastic.co/u/sgtz)\
**Replies:** 1\
**Last updated:** [May 30, 2018, 7:53pm UTC](https://discuss.elastic.co/t/repository-on-kerberized-hdfs/133697 "2018-05-30T19:53:08Z")

</div>

Hi! I'm trying to use the HDFS reposity plugin (in version 5.6.5) to write snapshots to HDFS. For testing, the HDFS was not kerberized and everything worked. The curl and the payload looked like this: cat elastic-hdfs…

---

## [Connection refused logstash](https://discuss.elastic.co/t/connection-refused-logstash/131897)

<div class="topic-metadata">

**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 9:54am UTC](https://discuss.elastic.co/t/connection-refused-logstash/131897 "2018-05-15T09:54:59Z")

</div>

Hi, Please, I have a problem with my logstash, he can't start. I have this error : 2018-05-15T11:43:38.172+0200 ERROR pipeline/output.go:74 Failed to connect: dial tcp \[::1\]:5044: getsockopt: connection refused …

---

## [License Issue](https://discuss.elastic.co/t/license-issue/66652)

<div class="topic-metadata">

**Author:** [@DimitrisFilippou](https://discuss.elastic.co/u/DimitrisFilippou)\
**Replies:** 1\
**Last updated:** [November 22, 2016, 11:15pm UTC](https://discuss.elastic.co/t/license-issue/66652 "2016-11-22T23:15:38Z")

</div>

i have a basic license and it is correct and working. Once i loaded it with curl XPUT it worked as expected. But later that day i got this: \[warning\]\[license\] license information could not be obtained from elasticsearc…

---

## [Where configure custom ElasticSearch host](https://discuss.elastic.co/t/where-configure-custom-elasticsearch-host/62685)

<div class="topic-metadata">

**Author:** [@Premislauer](https://discuss.elastic.co/u/Premislauer)\
**Replies:** 1\
**Last updated:** [October 11, 2016, 11:00am UTC](https://discuss.elastic.co/t/where-configure-custom-elasticsearch-host/62685 "2016-10-11T11:00:58Z")

</div>

Hi, I'm new to libbeat and i'm trying to prepare some example to working with my elasticsearch host. But i don't know where is the right place to configure host. I thought that it should be etc/beat.yml but when i do "m…

---

## [Number of Segments](https://discuss.elastic.co/t/number-of-segments/60393)

<div class="topic-metadata">

**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\
**Replies:** 1\
**Last updated:** [September 13, 2016, 3:18pm UTC](https://discuss.elastic.co/t/number-of-segments/60393 "2016-09-13T15:18:51Z")

</div>

I have daily indices. The ES guide talks about forcemerging any index without new activity down to 1 segment. Some places talk about forcemerging as being an overoptimization. The curator optimize action has "max\_num\_…

---

## [Kibana Dashboard locking](https://discuss.elastic.co/t/kibana-dashboard-locking/33199)

<div class="topic-metadata">

**Author:** [@Manabu\_Higuchi](https://discuss.elastic.co/u/Manabu_Higuchi)\
**Replies:** 1\
**Last updated:** [October 29, 2015, 2:51am UTC](https://discuss.elastic.co/t/kibana-dashboard-locking/33199 "2015-10-29T02:51:12Z")

</div>

Hi, I'm using Kibana visualizing system logs for my client. And I want to lock some dashboard, I mean get dashboard unchangeable, because they will possibly mess up the figure place or delete some figure from dashboard b…

[Previous page](https://discuss.elastic.co/top.md?page=1576&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1578&per_page=50&period=all)
