# Top

**URL:** https://discuss.elastic.co/top.md?page=1590&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1591

---

## [Beats not able to connect with Logstash](https://discuss.elastic.co/t/beats-not-able-to-connect-with-logstash/273093)

<div class="topic-metadata">

**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\
**Replies:** 2\
**Last updated:** [May 16, 2021, 4:29pm UTC](https://discuss.elastic.co/t/beats-not-able-to-connect-with-logstash/273093 "2021-05-16T16:29:09Z")

</div>

Hi All, I have deployed ELK Stack using OSS versions Elasticsearch and Kibana. While connecting with Beats using Logstash, I am seeing following error on the system. Please can someone help me on this. Thanks \[2021-05-…

---

## [Logstash connecting to ES instance on localhost instead of physical IP](https://discuss.elastic.co/t/logstash-connecting-to-es-instance-on-localhost-instead-of-physical-ip/229232)

<div class="topic-metadata">

**Author:** [@cnvramana](https://discuss.elastic.co/u/cnvramana)\
**Replies:** 2\
**Last updated:** [April 22, 2020, 12:44pm UTC](https://discuss.elastic.co/t/logstash-connecting-to-es-instance-on-localhost-instead-of-physical-ip/229232 "2020-04-22T12:44:19Z")

</div>

I have installed ELK stack 7.6 on a single server. This is on a trial run I set up ElasticSearch, Logstash, and Kibana to run on physical IP instead of locahost. I am able to reach all three components with the IP add…

---

## [Defining dynamic types in field.yml](https://discuss.elastic.co/t/defining-dynamic-types-in-field-yml/149173)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 2\
**Last updated:** [September 25, 2018, 3:45pm UTC](https://discuss.elastic.co/t/defining-dynamic-types-in-field-yml/149173 "2018-09-25T15:45:57Z")

</div>

I'm struggling a bit to define dynamic types in field.yml for my Statsdbeat There are some fields that are predefined. But some some fields are dynamic. My fields.yml is defined as - key: statsdbeat title: statsdbea…

---

## [Debug Filebeat](https://discuss.elastic.co/t/debug-filebeat/146817)

<div class="topic-metadata">

**Author:** [@Christian\_Wohrle](https://discuss.elastic.co/u/Christian_Wohrle)\
**Replies:** 2\
**Last updated:** [August 31, 2018, 5:16pm UTC](https://discuss.elastic.co/t/debug-filebeat/146817 "2018-08-31T17:16:15Z")

</div>

I'd like to debug filebeat in goland to understand how it is working internally but I get the error message: could not launch process: could not get .debug\_frame section: could not find .debug\_frame section This is in …

---

## [How to Use terms in Y - axis](https://discuss.elastic.co/t/how-to-use-terms-in-y-axis/129354)

<div class="topic-metadata">

**Author:** [@Humornoy](https://discuss.elastic.co/u/Humornoy)\
**Replies:** 2\
**Last updated:** [April 26, 2018, 4:11pm UTC](https://discuss.elastic.co/t/how-to-use-terms-in-y-axis/129354 "2018-04-26T16:11:51Z")

</div>

Hello and sorry for my bad english. I have this JSON \[image\] and i need line visualize where x = matchMetric.sTime and y = matchMetric.NumTicks \[image\] …

---

## [Cannot load field "CommandLine" into a "string": unsupported type](https://discuss.elastic.co/t/cannot-load-field-commandline-into-a-string-unsupported-type/115897)

<div class="topic-metadata">

**Author:** [@Tonni\_Hult](https://discuss.elastic.co/u/Tonni_Hult)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 8:02am UTC](https://discuss.elastic.co/t/cannot-load-field-commandline-into-a-string-unsupported-type/115897 "2018-01-18T08:02:02Z")

</div>

Hi I've installed the version 6.1.1 of metricbeat on Win2012R2 but we get a lot of these errors in the log 2018-01-17T15:25:21+01:00 ERR Error getting process details. pid=4672: error getting process arguments for pid…

---

## [Unassigned shards of replica](https://discuss.elastic.co/t/unassigned-shards-of-replica/86392)

<div class="topic-metadata">

**Author:** [@c981337wk](https://discuss.elastic.co/u/c981337wk)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 10:17am UTC](https://discuss.elastic.co/t/unassigned-shards-of-replica/86392 "2017-05-19T10:17:07Z")

</div>

I apologize to my bad English . I am a noob in Elasticsearch. I have two problems of Elasticsearch. As above, I have so many unassigned shard of replicas. How can I assign to node? All data of nodes are store…

---

## [Logstash - complex filtering](https://discuss.elastic.co/t/logstash-complex-filtering/85433)

<div class="topic-metadata">

**Author:** [@Vedran\_Maricevic](https://discuss.elastic.co/u/Vedran_Maricevic)\
**Replies:** 2\
**Last updated:** [May 12, 2017, 7:32am UTC](https://discuss.elastic.co/t/logstash-complex-filtering/85433 "2017-05-12T07:32:32Z")

</div>

I have ELK setup. I am parsing several completely different log formats. They were all one liners. Now I need to add a different one which is a multi line. Example of two log entries: error: callback invoked exception…

---

## [Elasticsearch logs](https://discuss.elastic.co/t/elasticsearch-logs/84141)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 2\
**Last updated:** [May 1, 2017, 8:40pm UTC](https://discuss.elastic.co/t/elasticsearch-logs/84141 "2017-05-01T20:40:03Z")

</div>

Hi All, I was trying to see the elasticsearch logs and I was able to find these type of logs are loading the server very fastly. \[2017-05-01T12:26:23,993\]\[DEBUG\]\[o.e.a.b.TransportBulkAction\] \[casa\_1\] failed to execut…

---

## [And vs or terms?](https://discuss.elastic.co/t/and-vs-or-terms/79793)

<div class="topic-metadata">

**Author:** [@coogle](https://discuss.elastic.co/u/coogle)\
**Replies:** 2\
**Last updated:** [March 23, 2017, 10:04pm UTC](https://discuss.elastic.co/t/and-vs-or-terms/79793 "2017-03-23T22:04:38Z")

</div>

Hello, I have a question about using a terms query while specifying an array of potential values. It seems to me the query uses a boolean or to match and I would like it to use a boolean AND... for example, consider th…

---

## [FileBeat not logging from a server but it is from other 6](https://discuss.elastic.co/t/filebeat-not-logging-from-a-server-but-it-is-from-other-6/77022)

<div class="topic-metadata">

**Author:** [@francopp](https://discuss.elastic.co/u/francopp)\
**Replies:** 2\
**Last updated:** [March 1, 2017, 5:44pm UTC](https://discuss.elastic.co/t/filebeat-not-logging-from-a-server-but-it-is-from-other-6/77022 "2017-03-01T17:44:38Z")

</div>

I have Beats installed in 7 different servers, all with same config but just a little path differences. It results that from one of those 7 they first day that i just start the service it send the logs perfectly but afte…

---

## [Logstash-translate plugin](https://discuss.elastic.co/t/logstash-translate-plugin/73853)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 2\
**Last updated:** [February 23, 2017, 5:16pm UTC](https://discuss.elastic.co/t/logstash-translate-plugin/73853 "2017-02-23T17:16:50Z")

</div>

Hi All, Please let me know how to install the translate plugin in version 5.2.0 Elasticstack,i get this message. /usr/share/logstash# ./bin/logstash-plugin install logstash-filter-translate Validating logstash-filter…

---

## [ES-hadoop connector for spark 2.0.0?](https://discuss.elastic.co/t/es-hadoop-connector-for-spark-2-0-0/56691)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 9:29am UTC](https://discuss.elastic.co/t/es-hadoop-connector-for-spark-2-0-0/56691 "2016-07-29T09:29:53Z")

</div>

Hi! Spark 2.0 was announced on Jul 26. http://spark.apache.org/releases/spark-release-2-0-0.html I would like to ask is there any release plan for es-hadoop connector to be compatible with spark 2.0.0. Thanks, Yu …

---

## [Nest Client alternative for AddSortField in 2.x](https://discuss.elastic.co/t/nest-client-alternative-for-addsortfield-in-2-x/46660)

<div class="topic-metadata">

**Author:** [@pavang6](https://discuss.elastic.co/u/pavang6)\
**Replies:** 2\
**Last updated:** [April 11, 2016, 7:08am UTC](https://discuss.elastic.co/t/nest-client-alternative-for-addsortfield-in-2-x/46660 "2016-04-11T07:08:13Z")

</div>

Currently, we use NEST client for all indexing operations where the "AddSortField" was used to sort the analyzed field (along with a sort analyzer). Looks like this option is not available anymore in 2.X. Are there any a…

---

## [Messages from different files are combined as one document](https://discuss.elastic.co/t/messages-from-different-files-are-combined-as-one-document/42095)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 2\
**Last updated:** [February 22, 2016, 9:58am UTC](https://discuss.elastic.co/t/messages-from-different-files-are-combined-as-one-document/42095 "2016-02-22T09:58:56Z")

</div>

Hi, I'm trying to ingest log files to elasticsearch through filebeat, the flow is like this: log file -\> filebeat -\> logstash (indexer) -\> elasticsearch. filebeat is setup to monitor a few files from the same folder…

---

## [Official analysis-smartcn 2.7.0 has no 'plugin-descriptor.properties'](https://discuss.elastic.co/t/official-analysis-smartcn-2-7-0-has-no-plugin-descriptor-properties/41715)

<div class="topic-metadata">

**Author:** [@dyng](https://discuss.elastic.co/u/dyng)\
**Replies:** 2\
**Last updated:** [February 17, 2016, 2:49pm UTC](https://discuss.elastic.co/t/official-analysis-smartcn-2-7-0-has-no-plugin-descriptor-properties/41715 "2016-02-17T14:49:46Z")

</div>

Hi, Currently I'm trying to install analysis-smartcn for my elasticsearch cluster. While I'm following command listed in Github repository, but I got an error of ERROR: Could not find plugin descriptor 'plugin-descript…

---

## [Cloudflare integration not working](https://discuss.elastic.co/t/cloudflare-integration-not-working/346024)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 7\
**Last updated:** [November 9, 2023, 12:28pm UTC](https://discuss.elastic.co/t/cloudflare-integration-not-working/346024 "2023-11-09T12:28:41Z")

</div>

I added this integration and entered all the required key and creds needed. still I am not getting any logs from cloudflare and the dashboard and saved search both are empty. what am I missing?

---

## [Use text field as label in data visualization](https://discuss.elastic.co/t/use-text-field-as-label-in-data-visualization/334483)

<div class="topic-metadata">

**Author:** [@marine.authorities](https://discuss.elastic.co/u/marine.authorities)\
**Replies:** 1\
**Last updated:** [May 28, 2023, 12:49pm UTC](https://discuss.elastic.co/t/use-text-field-as-label-in-data-visualization/334483 "2023-05-28T12:49:12Z")

</div>

Hi! This is my first time using kibana, so sorry if this was asked before, but the threads I could find by searching were not helpful. My use case is simple: I have an index that contains the fields movieId (integer), t…

---

## [Elasticsearch problem when update mapping](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197)

<div class="topic-metadata">

**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197 "2022-03-21T11:42:21Z")

</div>

I want add mapping to synonym analyzer by perform this operation PUT /my\_index/\_mapping/items { "items": { "properties": { "judul": { "type": "text", "analyzer": "synonym"…

---

## [Elastic Agent is Healthy, but no data streams](https://discuss.elastic.co/t/elastic-agent-is-healthy-but-no-data-streams/294224)

<div class="topic-metadata">

**Author:** [@harwinds](https://discuss.elastic.co/u/harwinds)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 10:06pm UTC](https://discuss.elastic.co/t/elastic-agent-is-healthy-but-no-data-streams/294224 "2022-01-13T22:06:34Z")

</div>

Hi, I'm running fleet managed elastic agent on Elastic 7.15.1. I've multiple agents running on Linux and Windows endpoints. All agents are showing healthy. On both Linux and Windows, custom certificate is added to system…

---

## [Metric beat unable to detect all metricset from cloudwatch](https://discuss.elastic.co/t/metric-beat-unable-to-detect-all-metricset-from-cloudwatch/227402)

<div class="topic-metadata">

**Author:** [@Abhishek\_Tanwar](https://discuss.elastic.co/u/Abhishek_Tanwar)\
**Replies:** 7\
**Last updated:** [April 13, 2020, 7:24pm UTC](https://discuss.elastic.co/t/metric-beat-unable-to-detect-all-metricset-from-cloudwatch/227402 "2020-04-13T19:24:53Z")

</div>

I want to detect AWS/SES metric set from cloud watch or basically monitor SES metrics via elastic. I tried to configure "\*" namespace but still, it doesn't query all of the namespaces. I am have tested with 7.5.1 and 7.…

---

## [Filebeat for both system|service logs and application logs](https://discuss.elastic.co/t/filebeat-for-both-system-service-logs-and-application-logs/189742)

<div class="topic-metadata">

**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\
**Replies:** 7\
**Last updated:** [July 17, 2019, 12:00pm UTC](https://discuss.elastic.co/t/filebeat-for-both-system-service-logs-and-application-logs/189742 "2019-07-17T12:00:13Z")

</div>

Hi, I'm having trouble to pick a solution to use filebeat for both the default system|service log files and application log files. I'm logging my application logs in json, so not much processing must be done, but I wou…

---

## [Adding headers and modifying url](https://discuss.elastic.co/t/adding-headers-and-modifying-url/136030)

<div class="topic-metadata">

**Author:** [@devika\_sudheer](https://discuss.elastic.co/u/devika_sudheer)\
**Replies:** 1\
**Last updated:** [June 15, 2018, 2:51pm UTC](https://discuss.elastic.co/t/adding-headers-and-modifying-url/136030 "2018-06-15T14:51:28Z")

</div>

Hi, We are using ELK stack as part of a troubleshooting tool. In our tool we have kibana,elasticsearch and logstash running inside a docker container in a remote server. The kibana dashboard is embedded as iframe in UI …

---

## [데이터 유실에 관하여](https://discuss.elastic.co/t/topic/74927)

<div class="topic-metadata">

**Author:** [@111149](https://discuss.elastic.co/u/111149)\
**Replies:** 1\
**Last updated:** [February 14, 2017, 3:07am UTC](https://discuss.elastic.co/t/topic/74927 "2017-02-14T03:07:00Z")

</div>

책을 읽기로는 데이터 유실이 있을 수 있기 때문에 원본데이터를 따로 저장하라고 하는데요, 우선 데이터 유실이 일어나는 이유를 알고 싶습니다.

---

## [What's the best way to use Shrink Indicies API?](https://discuss.elastic.co/t/whats-the-best-way-to-use-shrink-indicies-api/71752)

<div class="topic-metadata">

**Author:** [@ben-10](https://discuss.elastic.co/u/ben-10)\
**Replies:** 1\
**Last updated:** [January 16, 2017, 3:10pm UTC](https://discuss.elastic.co/t/whats-the-best-way-to-use-shrink-indicies-api/71752 "2017-01-16T15:10:46Z")

</div>

My cluster has the usual 5 primary shards with 1 replica of each. Disks are running low on space and I'm looking at my options. Do I: Delete the oldest indices after doing a backup to cloud storage like AWS S3 or G…

---

## [Stop "delete" key from bringing up autocomplete](https://discuss.elastic.co/t/stop-delete-key-from-bringing-up-autocomplete/61167)

<div class="topic-metadata">

**Author:** [@rcompton](https://discuss.elastic.co/u/rcompton)\
**Replies:** 1\
**Last updated:** [September 21, 2016, 6:55pm UTC](https://discuss.elastic.co/t/stop-delete-key-from-bringing-up-autocomplete/61167 "2016-09-21T18:55:15Z")

</div>

While editing a query hitting "delete" often clears the search bar and replaces it with the autocomplete suggestions. This renders kibana nearly unusable. Is it possible to disable autocomplete?

---

## [How to calculate indexing rate?](https://discuss.elastic.co/t/how-to-calculate-indexing-rate/60033)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 1\
**Last updated:** [September 9, 2016, 3:48am UTC](https://discuss.elastic.co/t/how-to-calculate-indexing-rate/60033 "2016-09-09T03:48:45Z")

</div>

I want to calculate es's indexing rate myself. In stats api,there is a index\_time\_in\_millis field,what's the meaning of the field?

---

## [Unable to update license](https://discuss.elastic.co/t/unable-to-update-license/42953)

<div class="topic-metadata">

**Author:** [@drs](https://discuss.elastic.co/u/drs)\
**Replies:** 1\
**Last updated:** [February 28, 2016, 10:51pm UTC](https://discuss.elastic.co/t/unable-to-update-license/42953 "2016-02-28T22:51:28Z")

</div>

Marvel is telling me that my license expired. I followed the instructions to register for a basic license and was provided a .json file. However, when I PUT it, I get a transport serialization exception: curl -XPUT \<…

---

## [Very weird ES Cluster state problem!](https://discuss.elastic.co/t/very-weird-es-cluster-state-problem/10594)

<div class="topic-metadata">

**Author:** [@Amit](https://discuss.elastic.co/u/Amit)\
**Replies:** 7\
**Last updated:** [February 13, 2013, 2:12pm UTC](https://discuss.elastic.co/t/very-weird-es-cluster-state-problem/10594 "2013-02-13T14:12:43Z")

</div>

Hi All, I am having an ES cluster with 2 nodes. I am not as to what caused this issue; Node 2- \[2\] received shard failed for \[TestDocTestDoc\]\[2\], node\[J368dRSdRxOUkTOEqIOsHg\], \[P\], s\[INITIALIZING\], reason \[F…

---

## [Max\_snapshot\_bytes\_per\_sec - Implications of setting this value](https://discuss.elastic.co/t/max-snapshot-bytes-per-sec-implications-of-setting-this-value/300643)

<div class="topic-metadata">

**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\
**Replies:** 0\
**Last updated:** [March 24, 2022, 9:37pm UTC](https://discuss.elastic.co/t/max-snapshot-bytes-per-sec-implications-of-setting-this-value/300643 "2022-03-24T21:37:37Z")

</div>

I am after a more in depth explanation of the implications of adjusting the max\_snapshot\_bytes\_per\_sec for an S3 repository. Reading the documentation, it is simply described as max\_snapshot\_bytes\_per\_sec (Optional, byt…

---

## [Aggregate Jenkins build logs stored in ElasticSearch/view in Kibana](https://discuss.elastic.co/t/aggregate-jenkins-build-logs-stored-in-elasticsearch-view-in-kibana/156359)

<div class="topic-metadata">

**Author:** [@DarrienG](https://discuss.elastic.co/u/DarrienG)\
**Replies:** 0\
**Last updated:** [November 12, 2018, 10:15pm UTC](https://discuss.elastic.co/t/aggregate-jenkins-build-logs-stored-in-elasticsearch-view-in-kibana/156359 "2018-11-12T22:15:06Z")

</div>

I believe this question is more relevant for ES, but may be answerable with just Kibana as well. I'm storing my Jenkins build logs in ElasticSearch with the Jenkins Logstash plugin. My configuration looks sort of like …

---

## [No implicit conversion of nil into string](https://discuss.elastic.co/t/no-implicit-conversion-of-nil-into-string/119040)

<div class="topic-metadata">

**Author:** [@yosi\_ela](https://discuss.elastic.co/u/yosi_ela)\
**Replies:** 0\
**Last updated:** [February 8, 2018, 12:37pm UTC](https://discuss.elastic.co/t/no-implicit-conversion-of-nil-into-string/119040 "2018-02-08T12:37:47Z")

</div>

when i am runing the logstash conf i am getting this exception someone know why? ATAL\] 2018-02-08 14:14:59.163 \[main\] runner - An unexpected error occurred! {:error=\>#\<TypeError: no implicit conversion of nil into Str…

---

## [Install logstash 2.0 in windows server 2008 R2](https://discuss.elastic.co/t/install-logstash-2-0-in-windows-server-2008-r2/35433)

<div class="topic-metadata">

**Author:** [@supermario](https://discuss.elastic.co/u/supermario)\
**Replies:** 0\
**Last updated:** [November 24, 2015, 10:20am UTC](https://discuss.elastic.co/t/install-logstash-2-0-in-windows-server-2008-r2/35433 "2015-11-24T10:20:01Z")

</div>

when i install logstash 2.0 in windows server 2008 R2 , i get a error . i already install jdk 1.8 and add environment path. when i run logstash -f logstash.conf(contains input and out setting). i get error unable to…

---

## [Why percentiles are based on iterations instead of number of requests](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181)

<div class="topic-metadata">

**Author:** [@Thanin\_Srithai](https://discuss.elastic.co/u/Thanin_Srithai)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 9:09am UTC](https://discuss.elastic.co/t/why-percentiles-are-based-on-iterations-instead-of-number-of-requests/298181 "2022-03-02T09:09:23Z")

</div>

I noticed that the document says it need 1000 iterations or more in order to calculate 99.9th percentile. here I wonder that why it has to base on number of iterations but not the actual amount of requests. In many tra…

---

## [Elasticsearch partial update based on Aggregation result](https://discuss.elastic.co/t/elasticsearch-partial-update-based-on-aggregation-result/290198)

<div class="topic-metadata">

**Author:** [@orivard](https://discuss.elastic.co/u/orivard)\
**Replies:** 4\
**Last updated:** [November 26, 2021, 5:03pm UTC](https://discuss.elastic.co/t/elasticsearch-partial-update-based-on-aggregation-result/290198 "2021-11-26T17:03:09Z")

</div>

I want to update partially all objects that are based on aggregation result. Here is my object: { "name": "name", "identificationHash": "aslkdakldjka", "isDupe": false, ... } My goal is to set isDupe to "true" for…

---

## [Syslogging Struggle - newbie alert](https://discuss.elastic.co/t/syslogging-struggle-newbie-alert/289861)

<div class="topic-metadata">

**Author:** [@Orpheus](https://discuss.elastic.co/u/Orpheus)\
**Replies:** 4\
**Last updated:** [November 23, 2021, 2:07pm UTC](https://discuss.elastic.co/t/syslogging-struggle-newbie-alert/289861 "2021-11-23T14:07:45Z")

</div>

Hi, I'm just getting familiar with Elastic Stack, and implementing ELK with Filebeat to a syslog server that receives the syslogs from various routers on a network. The routers are running RouterOS on mikrotik routers, …

---

## [Rightsizing elastic batch size and number of workers](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803)

<div class="topic-metadata">

**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\
**Replies:** 4\
**Last updated:** [November 23, 2021, 9:33am UTC](https://discuss.elastic.co/t/rightsizing-elastic-batch-size-and-number-of-workers/289803 "2021-11-23T09:33:47Z")

</div>

I am trying to right size my configs for the logstashes that I have feeding my elastic stack. They are pushing filebeat and winlogbeat data. Right now they seem to be fairly underutilized and I am seeing a little bit of …

---

## [Prevent pop up with the error "To create custom links, you must be subscribed to an Elastic Gold license or above. With it, you'll have the ability to create custom links to improve your workflow when analyzing your services" appears in kibana apm service](https://discuss.elastic.co/t/prevent-pop-up-with-the-error-to-create-custom-links-you-must-be-subscribed-to-an-elastic-gold-license-or-above-with-it-youll-have-the-ability-to-create-custom-links-to-improve-your-workflow-when-analyzing-your-services-appears-in-kibana-apm-service/256044)

<div class="topic-metadata">

**Author:** [@zbioe](https://discuss.elastic.co/u/zbioe)\
**Replies:** 4\
**Last updated:** [November 22, 2020, 9:18am UTC](https://discuss.elastic.co/t/prevent-pop-up-with-the-error-to-create-custom-links-you-must-be-subscribed-to-an-elastic-gold-license-or-above-with-it-youll-have-the-ability-to-create-custom-links-to-improve-your-workflow-when-analyzing-your-services-appears-in-kibana-apm-service/256044 "2020-11-22T09:18:50Z")

</div>

After configure APM in some agents, when i go to page APM -\> Services -\> foo -\> Transactions -\> PUT Media/UpdateMedia {mediaID/sourceID/version} to see my headers in request, i got the error 403 with on get in this ur…

---

## [Custom vector maps with accents](https://discuss.elastic.co/t/custom-vector-maps-with-accents/194075)

<div class="topic-metadata">

**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\
**Replies:** 4\
**Last updated:** [August 8, 2019, 2:05pm UTC](https://discuss.elastic.co/t/custom-vector-maps-with-accents/194075 "2019-08-08T14:05:26Z")

</div>

Hello everyone, I was able to configure my custom vector map with Brazilian cities. I have an index that one of the fields is the city and I was able to make a join between the index field and the custom vector map. B…

---

## [Dashboard по событиям удаления файлов](https://discuss.elastic.co/t/dashboard/172476)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 4\
**Last updated:** [April 2, 2019, 9:32am UTC](https://discuss.elastic.co/t/dashboard/172476 "2019-04-02T09:32:37Z")

</div>

Добрый день. Хочу настроить вывод логов удаления файлов с файлового сервера. В интернете нашел пример того, что хотелось бы реализовать у себя Только вместо file\_action сделать delete. Но столкнулся с тем, что у меня…

---

## [Autodiscover and metadata](https://discuss.elastic.co/t/autodiscover-and-metadata/162980)

<div class="topic-metadata">

**Author:** [@Eric\_Duquesnoy](https://discuss.elastic.co/u/Eric_Duquesnoy)\
**Replies:** 4\
**Last updated:** [January 22, 2019, 6:42pm UTC](https://discuss.elastic.co/t/autodiscover-and-metadata/162980 "2019-01-22T18:42:13Z")

</div>

Hi , I've just tried the new version of Heartbeat (6.5.4) and specifically the autodiscover feature with Docker. For the POC , I launched a Redis and Nginx container along with heartbeat (installed like a linux service…

---

## [Setting a mapping for mapper-attachments](https://discuss.elastic.co/t/setting-a-mapping-for-mapper-attachments/40620)

<div class="topic-metadata">

**Author:** [@Francois\_GUERIN](https://discuss.elastic.co/u/Francois_GUERIN)\
**Replies:** 4\
**Last updated:** [February 1, 2016, 12:56pm UTC](https://discuss.elastic.co/t/setting-a-mapping-for-mapper-attachments/40620 "2016-02-01T12:56:55Z")

</div>

Hi, I'm using elasticsearch through django haystack, and I'm trying to set a mapping for an attachment. This mapping is PUT to the es engine when creating the new index. This operation is done when rebuilding index. …

---

## [Synonym filter behavior for single word / multi words](https://discuss.elastic.co/t/synonym-filter-behavior-for-single-word-multi-words/17858)

<div class="topic-metadata">

**Author:** [@Bernhardt\_Scherer](https://discuss.elastic.co/u/Bernhardt_Scherer)\
**Replies:** 4\
**Last updated:** [June 3, 2014, 12:20pm UTC](https://discuss.elastic.co/t/synonym-filter-behavior-for-single-word-multi-words/17858 "2014-06-03T12:20:23Z")

</div>

Hello there, I am currently trying out the synonym filter. Here are my settings: "settings": { "analysis": { "filter": { "nGram\_filter": { "type": "nGram", "min\_gram": 2, "max\_gram": 15 }, "synonym": { "ty…

---

## [Any way to see json representation of request constructed with SearchRequestBuilder?](https://discuss.elastic.co/t/any-way-to-see-json-representation-of-request-constructed-with-searchrequestbuilder/4402)

<div class="topic-metadata">

**Author:** [@Ellery\_Crane\_2](https://discuss.elastic.co/u/Ellery_Crane_2)\
**Replies:** 4\
**Last updated:** [May 16, 2011, 7:49pm UTC](https://discuss.elastic.co/t/any-way-to-see-json-representation-of-request-constructed-with-searchrequestbuilder/4402 "2011-05-16T19:49:41Z")

</div>

I'm trying to use the java api to construct a search request, and I'm encountering problems. Unfortunately, I have no idea what's causing them, because I can't find a way to see what query is actually getting construc…

---

## [The docker module seems missing](https://discuss.elastic.co/t/the-docker-module-seems-missing/240393)

<div class="topic-metadata">

**Author:** [@lyrixx](https://discuss.elastic.co/u/lyrixx)\
**Replies:** 1\
**Last updated:** [July 8, 2020, 8:23pm UTC](https://discuss.elastic.co/t/the-docker-module-seems-missing/240393 "2020-07-08T20:23:33Z")

</div>

Hello, I saw this announcement https://www.elastic.co/fr/blog/brewing-in-beats-new-sample-dashboards-for-docker-and-redis so I wanted to try But I can not find the docker dashboard in kibana So I look at the code, and …

---

## [Are schedules fixed or based on last run](https://discuss.elastic.co/t/are-schedules-fixed-or-based-on-last-run/1003)

<div class="topic-metadata">

**Author:** [@jbaranick](https://discuss.elastic.co/u/jbaranick)\
**Replies:** 1\
**Last updated:** [May 20, 2015, 8:42pm UTC](https://discuss.elastic.co/t/are-schedules-fixed-or-based-on-last-run/1003 "2015-05-20T20:42:43Z")

</div>

Are watcher schedules guaranteed to run on the time boundary or do they shift based on the duration of the last watcher run? If I configure the watch to run every 5 seconds and the watch takes 2 seconds to run does i…

---

## [Logstash 7.16.2(fixed Log4j2 Vulnerability) connected to ElasticSearch 7.6.2 failed](https://discuss.elastic.co/t/logstash-7-16-2-fixed-log4j2-vulnerability-connected-to-elasticsearch-7-6-2-failed/292945)

<div class="topic-metadata">

**Author:** [@swxEmily](https://discuss.elastic.co/u/swxEmily)\
**Replies:** 3\
**Last updated:** [December 27, 2021, 4:24am UTC](https://discuss.elastic.co/t/logstash-7-16-2-fixed-log4j2-vulnerability-connected-to-elasticsearch-7-6-2-failed/292945 "2021-12-27T04:24:16Z")

</div>

Third party Elasticsearch: 7.6.2 Logstash: updated from 7.10.1 to 7.16.2(fixed Log4j2 Vulnerability) logstash.conf: output { Elasticsearch{ hosts =\> \["https://10.33.27.xxx:9200","https://10.33.27.xxy:9200","https://…

---

## [Records not indexed with Logstash](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124)

<div class="topic-metadata">

**Author:** [@deadloss](https://discuss.elastic.co/u/deadloss)\
**Replies:** 8\
**Last updated:** [August 4, 2021, 4:41am UTC](https://discuss.elastic.co/t/records-not-indexed-with-logstash/280124 "2021-08-04T04:41:36Z")

</div>

I am facing this issue, the number of events out by elasticsearch output plugin(using logstash monitoring api) is equal to records in csv this means all records in csv are sent to ES but unfortunately the records are alw…

---

## [API Console Auditing](https://discuss.elastic.co/t/api-console-auditing/207313)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 3\
**Last updated:** [November 12, 2019, 2:19pm UTC](https://discuss.elastic.co/t/api-console-auditing/207313 "2019-11-12T14:19:41Z")

</div>

Hi there all deployments have a api console that uses the default elastic user to execute commands to the clusters. Is there any where that this is audited. IE something like user bob has executed command Post \_search o…

---

## [Extend Dashboard Listing functionality](https://discuss.elastic.co/t/extend-dashboard-listing-functionality/170975)

<div class="topic-metadata">

**Author:** [@ENG618](https://discuss.elastic.co/u/ENG618)\
**Replies:** 8\
**Last updated:** [April 3, 2019, 2:30pm UTC](https://discuss.elastic.co/t/extend-dashboard-listing-functionality/170975 "2019-04-03T14:30:42Z")

</div>

I have a plugin that I'm trying to extend a bit of functionality to the dashboardListing directive. Essentially what I'm trying to do is add a header above the dashboard list. to the dashboard listing by modifying the r…

[Previous page](https://discuss.elastic.co/top.md?page=1589&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1591&per_page=50&period=all)
