# Top **URL:** https://discuss.elastic.co/top.md?page=1583&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1584 --- ## [Restrict Kibana users to only see some APM service.environment in APM UI](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784)
**Author:** [@Agzem](https://discuss.elastic.co/u/Agzem)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 4:06pm UTC](https://discuss.elastic.co/t/restrict-kibana-users-to-only-see-some-apm-service-environment-in-apm-ui/227784 "2020-04-16T16:06:00Z")
Hi, I would like to ask if there is a way to config Kibana's APM UI to restrict users to only see some environment in ELK 6.8? for example I have 3 APM indexes which are \*-apm-\* foo-bar-apm-\* jane-doe-apm-\* these ind… --- ## [ES 7.3.2 on CentOS: JvmOptionsParser - cannot resolve ES\_TMPDIR](https://discuss.elastic.co/t/es-7-3-2-on-centos-jvmoptionsparser-cannot-resolve-es-tmpdir/201076)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 2\ **Last updated:** [September 26, 2019, 9:45am UTC](https://discuss.elastic.co/t/es-7-3-2-on-centos-jvmoptionsparser-cannot-resolve-es-tmpdir/201076 "2019-09-26T09:45:56Z")
I'm trying to spin up multiple ES instances on a server, this used to work with ES 6.x, but does not work with the recent version: ES\_LOCAL\_PORT=9100 export ES\_PATH\_CONF=${HOME}/etc/elasticsearch1 export ES\_JAVA\_OPTS="… --- ## [Zeek Module - Custom Zeek Install Location](https://discuss.elastic.co/t/zeek-module-custom-zeek-install-location/191253)
**Author:** [@MrTrav](https://discuss.elastic.co/u/MrTrav)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 4:27pm UTC](https://discuss.elastic.co/t/zeek-module-custom-zeek-install-location/191253 "2019-07-19T16:27:57Z")
I have installed Zeek at a custom location, how can I configure the Zeek module in FileBeats to collect the logs from the proper log location? --- ## [Logstashのfilterについて mutateの記載数 を減らしたい、デフォルトをintegerにする方法](https://discuss.elastic.co/t/logstash-filter-mutate-integer/181508)
**Author:** [@tomomr](https://discuss.elastic.co/u/tomomr)\ **Replies:** 2\ **Last updated:** [May 20, 2019, 4:54am UTC](https://discuss.elastic.co/t/logstash-filter-mutate-integer/181508 "2019-05-20T04:54:17Z")
はじめまして Logstashについて、ぜひコメントをお願いします。 フィルタで以下のようにすると、price\_eurの属性をintegerとすることは 理解できたのですが、 filter { csv { separator =\> "," columns =\> \[ "price\_eur" \] } mutate {convert =\> \["price\_eur", "integer"\] } } 50個ほどあるデ… --- ## [Advanced JSON Inputs Math functions](https://discuss.elastic.co/t/advanced-json-inputs-math-functions/179358)
**Author:** [@6tUBp3gwd9Zp](https://discuss.elastic.co/u/6tUBp3gwd9Zp)\ **Replies:** 2\ **Last updated:** [May 3, 2019, 8:59am UTC](https://discuss.elastic.co/t/advanced-json-inputs-math-functions/179358 "2019-05-03T08:59:37Z")
I want to calculate an angle from a x and a y value with this script: { "script": { "inline": "if (doc\['x'\].value == 0 and doc\['y'\].value \> 0{return 270;}if (doc\['x'\].value == 0 and doc\['y'\].value \< 0 {return 90;}… --- ## [Not able to install Elasticsearch 6.7 - Windows 10](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-6-7-windows-10/174181)
**Author:** [@elasticgirl](https://discuss.elastic.co/u/elasticgirl)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 12:45pm UTC](https://discuss.elastic.co/t/not-able-to-install-elasticsearch-6-7-windows-10/174181 "2019-03-28T12:45:08Z")
New to Elasticsearch, want to try it out and configure it on my workstation Windows 10. Here is the value of JAVA\_HOME : C:\\Program Files (x86)\\Java\\jre1.8.0\_191 ... and here is java -version java version "1.8.0\_191" … --- ## [Backing off for 0 seconds](https://discuss.elastic.co/t/backing-off-for-0-seconds/161412)
**Author:** [@Ram\_Ibaset](https://discuss.elastic.co/u/Ram_Ibaset)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 10:51pm UTC](https://discuss.elastic.co/t/backing-off-for-0-seconds/161412 "2018-12-19T22:51:41Z")
I am getting the following error - My configuration is as follows: Spring Java based Application running on Tomcat Server 9. ELK stack 6.5.3 (running dockerized) Running the application from eclipse with the followin… --- ## [Switching lincese from Trial to Basic](https://discuss.elastic.co/t/switching-lincese-from-trial-to-basic/139814)
**Author:** [@Devesh\_Pandey](https://discuss.elastic.co/u/Devesh_Pandey)\ **Replies:** 2\ **Last updated:** [July 12, 2018, 7:07pm UTC](https://discuss.elastic.co/t/switching-lincese-from-trial-to-basic/139814 "2018-07-12T19:07:53Z")
Hi Team, I am working on Elasticsearch build and have used trial license to enable xpack for SSL and LDAP integration. Now after the trial is expired and am planning to switch to basic, would I still be able to use ssl/… --- ## [Does Elastic Search Spark 6.1.2 connector has Spark streaming sink?](https://discuss.elastic.co/t/does-elastic-search-spark-6-1-2-connector-has-spark-streaming-sink/116748)
**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\ **Replies:** 2\ **Last updated:** [January 24, 2018, 5:51am UTC](https://discuss.elastic.co/t/does-elastic-search-spark-6-1-2-connector-has-spark-streaming-sink/116748 "2018-01-24T05:51:23Z")
Does Elastic Search Spark 6.1.2 connector has Spark streaming sink? I am using compile group: 'org.elasticsearch', name: 'elasticsearch-hadoop', version: '6.1.2' For example I tried the following and both didn't work. … --- ## [Missing searches for example Kibana dashboards in packetbeat-6.0.0-beta1](https://discuss.elastic.co/t/missing-searches-for-example-kibana-dashboards-in-packetbeat-6-0-0-beta1/97376)
**Author:** [@zanbel](https://discuss.elastic.co/u/zanbel)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 4:35pm UTC](https://discuss.elastic.co/t/missing-searches-for-example-kibana-dashboards-in-packetbeat-6-0-0-beta1/97376 "2017-08-17T16:35:17Z")
Hi! Seems there a few missing searches to in the example Kibana Packetbeat dashboards. Steps to reproduce: Install packetbeat-6.0.0-beta1-amd64.deb. Setup the default dashboards using ./packetbeat setup --dashboards … --- ## [ElasticSearch Pipeline Issue](https://discuss.elastic.co/t/elasticsearch-pipeline-issue/85461)
**Author:** [@sudhir\_mca](https://discuss.elastic.co/u/sudhir_mca)\ **Replies:** 2\ **Last updated:** [May 12, 2017, 1:45pm UTC](https://discuss.elastic.co/t/elasticsearch-pipeline-issue/85461 "2017-05-12T13:45:33Z")
Hi All, Could someone help me with sample json parsing using elasticsearch pipeline. I am creating following pipeline in Elasticsearch 5.4. PUT \_ingest/pipeline/abc { "description" : "ABC", "processors" : \[ { … --- ## [Using amazon\_es output plugin via proxy](https://discuss.elastic.co/t/using-amazon-es-output-plugin-via-proxy/62192)
**Author:** [@kvinell](https://discuss.elastic.co/u/kvinell)\ **Replies:** 2\ **Last updated:** [March 3, 2017, 2:06pm UTC](https://discuss.elastic.co/t/using-amazon-es-output-plugin-via-proxy/62192 "2017-03-03T14:06:23Z")
Hi, I'm trying to use amazon\_es output plugin for Logstash to send data to my Elasticsearch cluster in AWS (Elasticsearch service). However, the Logstash instance is installed on a server that needs to go through a pro… --- ## [Amazon\_es output not signing?](https://discuss.elastic.co/t/amazon-es-output-not-signing/72356)
**Author:** [@mressler](https://discuss.elastic.co/u/mressler)\ **Replies:** 2\ **Last updated:** [January 21, 2017, 2:12pm UTC](https://discuss.elastic.co/t/amazon-es-output-not-signing/72356 "2017-01-21T14:12:28Z")
Hi Logstash experts, I've configured my logstash to use the amazon\_es output plugin and everything seems to be fine on configtest. I have region, aws\_access\_key\_id, and aws\_secret\_access\_key set correctly - I even star… --- ## [Architecture decision confusion](https://discuss.elastic.co/t/architecture-decision-confusion/66702)
**Author:** [@Hakan\_Gurel](https://discuss.elastic.co/u/Hakan_Gurel)\ **Replies:** 2\ **Last updated:** [November 29, 2016, 12:21pm UTC](https://discuss.elastic.co/t/architecture-decision-confusion/66702 "2016-11-29T12:21:50Z")
Hi all, We are currently trying to decide which architecture we should use for a new system&application logs analyzing ITOA application. Firstly we decided to use pure ELK stack, however as we researched further, we … --- ## [How to reposite the elasticsearch 2.3.4 to elasticsearch 2.3.1](https://discuss.elastic.co/t/how-to-reposite-the-elasticsearch-2-3-4-to-elasticsearch-2-3-1/60871)
**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\ **Replies:** 2\ **Last updated:** [September 19, 2016, 1:31pm UTC](https://discuss.elastic.co/t/how-to-reposite-the-elasticsearch-2-3-4-to-elasticsearch-2-3-1/60871 "2016-09-19T13:31:14Z")
HI guys , i have come up with a new problem , i have created an index in elasticsearch 2.3.4 but now i need to use the index in the elasticsearch 2.3.1! i tried with snapshot repository way but it is throwing error lik… --- ## [Logstash 2.0 change configuration without restart?](https://discuss.elastic.co/t/logstash-2-0-change-configuration-without-restart/35191)
**Author:** [@Deseao](https://discuss.elastic.co/u/Deseao)\ **Replies:** 2\ **Last updated:** [November 23, 2015, 5:15pm UTC](https://discuss.elastic.co/t/logstash-2-0-change-configuration-without-restart/35191 "2015-11-23T17:15:01Z")
I was under the impression in the webinar about Elasticsearch 2.0, Kibana 4.2.1, and Logstash 2.0 that it would now be possible to change the configuration without bringing down the logstash instance. Is this not the cas… --- ## [Recovering from a crash](https://discuss.elastic.co/t/recovering-from-a-crash/312649)
**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 10:09pm UTC](https://discuss.elastic.co/t/recovering-from-a-crash/312649 "2022-08-22T22:09:55Z")
Hi Not sure if this is more of an ES or Kibana topic but I will start with the ES part. I am running a single node cluster for development projects (official docker containers on Podman). After consecutive power failure… --- ## [ElasticSearch: L2 norm script\_score returns false distances](https://discuss.elastic.co/t/elasticsearch-l2-norm-script-score-returns-false-distances/257384)
**Author:** [@christiana](https://discuss.elastic.co/u/christiana)\ **Replies:** 1\ **Last updated:** [February 5, 2021, 9:57pm UTC](https://discuss.elastic.co/t/elasticsearch-l2-norm-script-score-returns-false-distances/257384 "2021-02-05T21:57:44Z")
i'm trying to calculate the L2-Norm between the fields of my database. To validate the correctness I setup a testing database with two documents, which are having equal vectors. My db look like this: Documents \_index:… --- ## [Logstash elasticsearch input using https error](https://discuss.elastic.co/t/logstash-elasticsearch-input-using-https-error/251041)
**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\ **Replies:** 1\ **Last updated:** [October 5, 2020, 7:18pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-using-https-error/251041 "2020-10-05T19:18:42Z")
I am able to curl the elasticsearch https but input errors out: \[ffoti@siem-logstash-01 ~\]$ curl -XGET -u elastic:\*\*\*\*\*\*\*\*\* --cacert /etc/logstash/ca.crt --cert /etc/logstash/siem-logstash-01.crt --key /etc/logstash/sie… --- ## [Public key protected PKCS12 not supported](https://discuss.elastic.co/t/public-key-protected-pkcs12-not-supported/238845)
**Author:** [@Yuy\_Heero](https://discuss.elastic.co/u/Yuy_Heero)\ **Replies:** 1\ **Last updated:** [June 27, 2020, 1:37am UTC](https://discuss.elastic.co/t/public-key-protected-pkcs12-not-supported/238845 "2020-06-27T01:37:51Z")
I want to use winbeat with siem, so I config elasticsearch 7.8 with TLS/SSL. I create cert files with this instruction. https://www.elastic.co/guide/en/elasticsearch/reference/7.7/configuring-tls.html#configuring-tls … --- ## [Watcher Use Source Fields](https://discuss.elastic.co/t/watcher-use-source-fields/178732)
**Author:** [@Ericrs22](https://discuss.elastic.co/u/Ericrs22)\ **Replies:** 1\ **Last updated:** [April 30, 2019, 12:05pm UTC](https://discuss.elastic.co/t/watcher-use-source-fields/178732 "2019-04-30T12:05:15Z")
I'm hoping to get source fields to notify for bruteforce attempts. Any recommendations? My results beyond attempts are blank. { "trigger": { "schedule": { "interval": "10s" } }, "input": { "searc… --- ## [Finding difference between 2 rows in Kibana Visualtisation](https://discuss.elastic.co/t/finding-difference-between-2-rows-in-kibana-visualtisation/170691)
**Author:** [@Pranav](https://discuss.elastic.co/u/Pranav)\ **Replies:** 1\ **Last updated:** [March 5, 2019, 5:44pm UTC](https://discuss.elastic.co/t/finding-difference-between-2-rows-in-kibana-visualtisation/170691 "2019-03-05T17:44:08Z")
I was trying to find the difference between 2 timestamps in Kibana table see in the I want to create a field calculating the time difference between 1st timestamp ie February 20th 2019, 14:06:11.868 and 2nd ie Februar… --- ## [Sending context variable values as a parameter to a stored script](https://discuss.elastic.co/t/sending-context-variable-values-as-a-parameter-to-a-stored-script/147977)
**Author:** [@kungfu](https://discuss.elastic.co/u/kungfu)\ **Replies:** 1\ **Last updated:** [September 11, 2018, 11:46pm UTC](https://discuss.elastic.co/t/sending-context-variable-values-as-a-parameter-to-a-stored-script/147977 "2018-09-11T23:46:07Z")
I'm copying this message here since I sended it to ElasticSearch support on 9/4 but I have still no answers. Thanks. Hello. I'm creating watchers on ES. Since they will post a standard structure to a webhook I've cre… --- ## [Which Free JRE we can use? Oracle JavaSE or OpenJDK](https://discuss.elastic.co/t/which-free-jre-we-can-use-oracle-javase-or-openjdk/141158)
**Author:** [@Bruce\_Wong](https://discuss.elastic.co/u/Bruce_Wong)\ **Replies:** 1\ **Last updated:** [July 27, 2018, 9:51am UTC](https://discuss.elastic.co/t/which-free-jre-we-can-use-oracle-javase-or-openjdk/141158 "2018-07-27T09:51:05Z")
Hello, I am going to use Elasticsearch 6.3.x for a commercial software, but I am confused on the license issue of JRE, from this link http://www.oracle.com/technetwork/articles/javase/faqs-jsp-136696.html , it looks li… --- ## [Elasticsearch 6.2.3 and JDBC SQL driver for MySQL](https://discuss.elastic.co/t/elasticsearch-6-2-3-and-jdbc-sql-driver-for-mysql/125043)
**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\ **Replies:** 1\ **Last updated:** [March 21, 2018, 5:53pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-3-and-jdbc-sql-driver-for-mysql/125043 "2018-03-21T17:53:33Z")
Hi All, quick question: I'm having troubles working with JDBC Input plugin (https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html). I tried to install the elasticsearch-rive, but apparently it has be… --- ## [Latency spike after big merge](https://discuss.elastic.co/t/latency-spike-after-big-merge/124290)
**Author:** [@hermes](https://discuss.elastic.co/u/hermes)\ **Replies:** 1\ **Last updated:** [March 17, 2018, 4:50pm UTC](https://discuss.elastic.co/t/latency-spike-after-big-merge/124290 "2018-03-17T16:50:37Z")
I'm trying to figure out why in the below use case there is a latency spike after a big merge - one that creates an 8M docs segment. What I'm observing is that immediately after the merge, queries that used to take 4ms i… --- ## [Retry a specific batch of results when scrolling a search](https://discuss.elastic.co/t/retry-a-specific-batch-of-results-when-scrolling-a-search/94813)
**Author:** [@alesola](https://discuss.elastic.co/u/alesola)\ **Replies:** 1\ **Last updated:** [July 27, 2017, 2:54pm UTC](https://discuss.elastic.co/t/retry-a-specific-batch-of-results-when-scrolling-a-search/94813 "2017-07-27T14:54:14Z")
Hello, is there a way to ask twice ElasticSearch for the same batch of results when scrolling a search? In this scenario, Elastic has properly returned the batch of results but something has failed into the client and … --- ## [Trying to add prefix to key in logstash config, but without period](https://discuss.elastic.co/t/trying-to-add-prefix-to-key-in-logstash-config-but-without-period/74350)
**Author:** [@LoriG](https://discuss.elastic.co/u/LoriG)\ **Replies:** 1\ **Last updated:** [February 8, 2017, 10:40am UTC](https://discuss.elastic.co/t/trying-to-add-prefix-to-key-in-logstash-config-but-without-period/74350 "2017-02-08T10:40:34Z")
From a component I am working on, I get certain information in the log that is report information. This information comes as "ReportBody". However, I want to add a prefix to some of the information (i.e. NumberOfDevices}… --- ## [Unable to create index in ElastAlert due to max\_result\_window error](https://discuss.elastic.co/t/unable-to-create-index-in-elastalert-due-to-max-result-window-error/48710)
**Author:** [@Sadik\_s](https://discuss.elastic.co/u/Sadik_s)\ **Replies:** 1\ **Last updated:** [April 28, 2016, 6:37pm UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elastalert-due-to-max-result-window-error/48710 "2016-04-28T18:37:23Z")
Hi All, We are trying to create alert mechanism using ElastAlert and we followed all the steps of installation and also tried our best to create index in ElastAlert. But while running create-elast-alert command , w… --- ## [Self Signed SSL Key and cert between log-forwarder and logstash](https://discuss.elastic.co/t/self-signed-ssl-key-and-cert-between-log-forwarder-and-logstash/28456)
**Author:** [@vgupta](https://discuss.elastic.co/u/vgupta)\ **Replies:** 1\ **Last updated:** [September 2, 2015, 1:15am UTC](https://discuss.elastic.co/t/self-signed-ssl-key-and-cert-between-log-forwarder-and-logstash/28456 "2015-09-02T01:15:27Z")
Hi How to setup SSL Key and Cert between log-forwarder running on multiple hosts shipping logs to logstash running on multiple hosts as well? Can we use wild card certificate? We are able to set 1to1 log-forwarder/lo… --- ## [Elasticsearch high cpu usage every hourly](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-every-hourly/22970)
**Author:** [@vincent\_park](https://discuss.elastic.co/u/vincent_park)\ **Replies:** 1\ **Last updated:** [March 31, 2015, 4:43pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-every-hourly/22970 "2015-03-31T16:43:39Z")
we have 8 clustered nodes and each nodes have 1 replica. total document size is about 4GB and 1,984,173 docs. I was suffering from very high CPU usage 80%~90% every hourly. It is held for 5 min. there is n… --- ## [Elasticsearch Mapper Attachment plugin 2.7.0 released](https://discuss.elastic.co/t/elasticsearch-mapper-attachment-plugin-2-7-0-released/25815)
**Author:** [@tanguy](https://discuss.elastic.co/u/tanguy)\ **Replies:** 0\ **Last updated:** [July 17, 2015, 3:44pm UTC](https://discuss.elastic.co/t/elasticsearch-mapper-attachment-plugin-2-7-0-released/25815 "2015-07-17T15:44:08Z")
Hi, We are pleased to announce the release of the Elasticsearch Mapper Attachment plugin, version 2.7.0. The mapper attachments plugin adds the attachment type to Elasticsearch using Apache Tika.. https://github.co… --- ## [SIEM Rules Bulk duplicate](https://discuss.elastic.co/t/siem-rules-bulk-duplicate/283290)
**Author:** [@pcosic](https://discuss.elastic.co/u/pcosic)\ **Replies:** 0\ **Last updated:** [September 3, 2021, 2:36pm UTC](https://discuss.elastic.co/t/siem-rules-bulk-duplicate/283290 "2021-09-03T14:36:32Z")
Hey Community, I want to apply the SIEM Rules on a custom Index. How can I do this with many Rules? So manually I have to duplicate the original Rule and then I can edit the duplicated Rule. I tried to do this with Ki… --- ## [Ideas to avoid double indexing when using rollover indice](https://discuss.elastic.co/t/ideas-to-avoid-double-indexing-when-using-rollover-indice/176663)
**Author:** [@Bao\_Tran1](https://discuss.elastic.co/u/Bao_Tran1)\ **Replies:** 0\ **Last updated:** [April 12, 2019, 3:38pm UTC](https://discuss.elastic.co/t/ideas-to-avoid-double-indexing-when-using-rollover-indice/176663 "2019-04-12T15:38:37Z")
Hi there, I am testing the rollover feature to address our big indice issue. I can see the issue of double indexing. Basically, our app sends bulk request to cluster. The app would retry the bulk request if any errors … --- ## [Migrating data from Elastic Search 2.X to 8.X using logstash](https://discuss.elastic.co/t/migrating-data-from-elastic-search-2-x-to-8-x-using-logstash/344760)
**Author:** [@gslp456](https://discuss.elastic.co/u/gslp456)\ **Replies:** 3\ **Last updated:** [October 11, 2023, 3:48pm UTC](https://discuss.elastic.co/t/migrating-data-from-elastic-search-2-x-to-8-x-using-logstash/344760 "2023-10-11T15:48:38Z")
I have an on-premise elastic cluster running on version 2.3.3. (aka old) I have another on-premise elastic cluster running on version 8.9.0 (aka new) I want to migrate data from one index of old to new using logstash … --- ## [Executing bash script in logstash's filter and geting data back to field](https://discuss.elastic.co/t/executing-bash-script-in-logstashs-filter-and-geting-data-back-to-field/313297)
**Author:** [@rayg00n](https://discuss.elastic.co/u/rayg00n)\ **Replies:** 3\ **Last updated:** [August 30, 2022, 10:17pm UTC](https://discuss.elastic.co/t/executing-bash-script-in-logstashs-filter-and-geting-data-back-to-field/313297 "2022-08-30T22:17:47Z")
Hello friends! I need some help with my logstash config. I want to get event field "winlog.event\_data.ObjectName" and take it to a bash script. Then I want to get the result back and put it in the "winlog.event\_data.O… --- ## [Custom kibana plugins will not update due to client side resource caching](https://discuss.elastic.co/t/custom-kibana-plugins-will-not-update-due-to-client-side-resource-caching/267207)
**Author:** [@Tobias\_H](https://discuss.elastic.co/u/Tobias_H)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 5:02pm UTC](https://discuss.elastic.co/t/custom-kibana-plugins-will-not-update-due-to-client-side-resource-caching/267207 "2021-03-18T17:02:01Z")
I'm using kibana 7.10.2, which includes the latest improvements to the packaging scripts @kbn/plugin-helpers: to build production 3rd kibana plugins using the new architecture: We noticed that when launching the plug… --- ## [Grok + Dissect - how to work properly?](https://discuss.elastic.co/t/grok-dissect-how-to-work-properly/226121)
**Author:** [@dmitryB](https://discuss.elastic.co/u/dmitryB)\ **Replies:** 3\ **Last updated:** [April 6, 2020, 8:18am UTC](https://discuss.elastic.co/t/grok-dissect-how-to-work-properly/226121 "2020-04-06T08:18:18Z")
Hello, everyone. I have a problem with running grok and dissect filtering at once. My config: grok { match =\> { 'message' =\> '\\\[%{TIMESTAMP\_ISO8601:time\_stamp}\\\] \\\[%{DATA:correlation\_id}\\\] \\\[%{LOGLEVEL:log\_le… --- ## [Reduce the amount of data for spans and transactions](https://discuss.elastic.co/t/reduce-the-amount-of-data-for-spans-and-transactions/204287)
**Author:** [@dnorth98](https://discuss.elastic.co/u/dnorth98)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 12:16pm UTC](https://discuss.elastic.co/t/reduce-the-amount-of-data-for-spans-and-transactions/204287 "2019-10-21T12:16:19Z")
Hi folks, ES APM on Ruby v3.0.0. Wondering if it's possible to set the ELASTIC\_APM\_TRANSACTION\_SAMPLE\_RATE parameter to a lower value than 0.1 (say 0.05)? Reason is, our services generate a LOT of transactions (looks … --- ## [Intelligent Tiering & Snapshots](https://discuss.elastic.co/t/intelligent-tiering-snapshots/167510)
**Author:** [@ogg](https://discuss.elastic.co/u/ogg)\ **Replies:** 3\ **Last updated:** [February 13, 2019, 8:45am UTC](https://discuss.elastic.co/t/intelligent-tiering-snapshots/167510 "2019-02-13T08:45:57Z")
I have some questions regarding snapshots to s3 and Intelligent Tiering, we are seeking to save some $$ on our snapshot storage, however, If the snapshot process needs to access past snapshots to create the new snapshots… --- ## [Tens of minutes ingestion delay](https://discuss.elastic.co/t/tens-of-minutes-ingestion-delay/129322)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 3\ **Last updated:** [April 25, 2018, 11:04am UTC](https://discuss.elastic.co/t/tens-of-minutes-ingestion-delay/129322 "2018-04-25T11:04:36Z")
I've got data coming from Metricbeat which is showing up in Elasticsearch some tens of minutes later rather than the second or so I might expect (I'm generating an "ingested" timestamp in Elasticsearch and comparing that… --- ## [Отмена автомаппинга](https://discuss.elastic.co/t/topic/106466)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 3\ **Last updated:** [November 6, 2017, 6:50pm UTC](https://discuss.elastic.co/t/topic/106466 "2017-11-06T18:50:37Z")
Добрый день! Есть ли какая-нибудь возможность откатить изменения произведенные автомаппингом? У меня по ошибке сработал автомаппинг и применились не те типы данных. --- ## [ELK cluster with x-pack kibana is not working with https](https://discuss.elastic.co/t/elk-cluster-with-x-pack-kibana-is-not-working-with-https/85755)
**Author:** [@thiru7](https://discuss.elastic.co/u/thiru7)\ **Replies:** 3\ **Last updated:** [May 15, 2017, 5:43pm UTC](https://discuss.elastic.co/t/elk-cluster-with-x-pack-kibana-is-not-working-with-https/85755 "2017-05-15T17:43:56Z")
Hi I'm new to ELK cluster with x-pack, my requirement is need to login into kibana with https for this I have used ELK (all 5.4 versions) and also x-pack 5.4 version, im able to get login page for kibana and able to lo… --- ## [Filebeat, Logback can not create new file](https://discuss.elastic.co/t/filebeat-logback-can-not-create-new-file/83181)
**Author:** [@silb78](https://discuss.elastic.co/u/silb78)\ **Replies:** 3\ **Last updated:** [April 24, 2017, 6:55pm UTC](https://discuss.elastic.co/t/filebeat-logback-can-not-create-new-file/83181 "2017-04-24T18:55:07Z")
I have a logback logger who writes in 10 MB files: \tmp/logs/test.log\ \ \tmp/logs/testlogger.%i.log.zip\ **Author:** [@Izek](https://discuss.elastic.co/u/Izek)\ **Replies:** 0\ **Last updated:** [March 27, 2018, 9:56am UTC](https://discuss.elastic.co/t/logstash-yml-with-keystore-not-working/125726 "2018-03-27T09:56:25Z") When I try to setup logstash x-pack with keystore , but I cannot make it I have already generate logstash.keystore file and add few records. but still not working error as below: logstash: ERROR: Failed to load sett… --- ## [SSL authentification with Jest Client](https://discuss.elastic.co/t/ssl-authentification-with-jest-client/56895)
**Author:** [@Meriem\_Rezgui](https://discuss.elastic.co/u/Meriem_Rezgui)\ **Replies:** 0\ **Last updated:** [August 1, 2016, 1:43pm UTC](https://discuss.elastic.co/t/ssl-authentification-with-jest-client/56895 "2016-08-01T13:43:54Z")
hello i connect to elasticsearch cluster using jest client and i want to ensure ssl authentification on 9205 port i found this: SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrate… --- ## [Dependant nodes in dockerized Elasticsearch 3-node cluster](https://discuss.elastic.co/t/dependant-nodes-in-dockerized-elasticsearch-3-node-cluster/345713)
**Author:** [@thibaut\_a](https://discuss.elastic.co/u/thibaut_a)\ **Replies:** 2\ **Last updated:** [October 25, 2023, 2:15pm UTC](https://discuss.elastic.co/t/dependant-nodes-in-dockerized-elasticsearch-3-node-cluster/345713 "2023-10-25T14:15:31Z")
Hi, I try to install an Elasticsearch (v8.10.2) cluster (with one Kibana and one Logstash container) on Docker for a production environment. My 3 nodes are running correctly on the same server (it will be different in pr… --- ## [How to configure Filebeat and Logstash 8.1 with TLS](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-8-1-with-tls/301534)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 2\ **Last updated:** [April 10, 2022, 1:15pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-8-1-with-tls/301534 "2022-04-10T13:15:01Z")
We are trying to secure the connectivity between Filebeat 8.1.1 \>\> Logstash 8.1.1 \>\> Elasticsearch 8.1.1 The documentation says we have to add a .p12 certificate in the output section of filebeat.yml and logstash pipeli… --- ## [How convert update\_by\_query with params as array to Java Rest client SDK](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870 "2022-04-07T17:02:45Z")
Hi, Working with version 7.15 Trying to do "update all by query " using script. The main idea to iterate the params in array and update as in the query below to all matched documents. The script: POST : http://11.1… --- ## [Node memory](https://discuss.elastic.co/t/node-memory/275634)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 2\ **Last updated:** [June 12, 2021, 4:50pm UTC](https://discuss.elastic.co/t/node-memory/275634 "2021-06-12T16:50:14Z")
Hi All, Currently on our nodes we have 64GB RAM, with 30GB allocated to the heap, and the other 34GB for OS. I understand that I shouldn't allocate more then 30GB to the heap, but will ES/OS benefit from 128GB or 256GB… [Previous page](https://discuss.elastic.co/top.md?page=1582&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1584&per_page=50&period=all)