# Top **URL:** https://discuss.elastic.co/top.md?page=160&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 161 --- ## [Logstash XML](https://discuss.elastic.co/t/logstash-xml/192452)
**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\ **Replies:** 13\ **Last updated:** [August 1, 2019, 3:44pm UTC](https://discuss.elastic.co/t/logstash-xml/192452 "2019-08-01T15:44:13Z")
Hi i'am trying to parse a xml file with logstash and i having some issues this is my XML exemple : \ \ \HarryPotter\ \785\ \7\ \ \ \game of thrones\<… --- ## [Veeam Logstash Grok](https://discuss.elastic.co/t/veeam-logstash-grok/311774)
**Author:** [@rcraigncs](https://discuss.elastic.co/u/rcraigncs)\ **Replies:** 16\ **Last updated:** [August 10, 2022, 10:57pm UTC](https://discuss.elastic.co/t/veeam-logstash-grok/311774 "2022-08-10T22:57:30Z")
Hello, I'm trying to grok logs from Veeam logs \> filebeat file stream \> logstash to create a better filter on logs collected from Veeam. I'm relatively new when it comes to grok and I'm stuck on how I would go about gro… --- ## [How can i put an xml file into elasticsearch by spring data elasticseach](https://discuss.elastic.co/t/how-can-i-put-an-xml-file-into-elasticsearch-by-spring-data-elasticseach/184860)
**Author:** [@leyla1](https://discuss.elastic.co/u/leyla1)\ **Replies:** 10\ **Last updated:** [June 28, 2019, 11:32am UTC](https://discuss.elastic.co/t/how-can-i-put-an-xml-file-into-elasticsearch-by-spring-data-elasticseach/184860 "2019-06-28T11:32:39Z")
hi, i'm new in elasticsearch, i tried to load xml file into elasticsearch by logstash, but sometimes it loads and sometimes it doesnt load, that's why decide to use filebeat to load it, it loads the file but the logstas… --- ## [Failure running tests for logstash-filter-geoip plugin - logging configuration not loading](https://discuss.elastic.co/t/failure-running-tests-for-logstash-filter-geoip-plugin-logging-configuration-not-loading/103949)
**Author:** [@nzjess](https://discuss.elastic.co/u/nzjess)\ **Replies:** 10\ **Last updated:** [November 2, 2017, 9:28am UTC](https://discuss.elastic.co/t/failure-running-tests-for-logstash-filter-geoip-plugin-logging-configuration-not-loading/103949 "2017-11-02T09:28:31Z")
I cloned the geoip plugin source from github: https://github.com/logstash-plugins/logstash-filter-geoip/commit/921d1cd Followed the README to install the pre-reqs: bundle install bundle exec rake vendor Then ran the … --- ## [Timestamps precision in beats](https://discuss.elastic.co/t/timestamps-precision-in-beats/154646)
**Author:** [@George\_Sovetov](https://discuss.elastic.co/u/George_Sovetov)\ **Replies:** 10\ **Last updated:** [November 22, 2018, 1:31pm UTC](https://discuss.elastic.co/t/timestamps-precision-in-beats/154646 "2018-11-22T13:31:21Z")
What does Filebeat do about timestamps? Especially when "backpressure" feature is working. More generally, how do I get synchronized timestamps? On machines, time may misalign and, moreover, it may change while Filebea… --- ## [Just Pushed: Versioning](https://discuss.elastic.co/t/just-pushed-versioning/3735)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 12\ **Last updated:** [January 5, 2011, 10:24pm UTC](https://discuss.elastic.co/t/just-pushed-versioning/3735 "2011-01-05T22:24:04Z")
The versioning feature allows to handle conflicts when doing a get/search and then index/delete. Each document has a version number, and each index and delete (tombstone) increase the version number. A conflict is d… --- ## [GEOIP Database Update Issue: Documentation Followed, Databases Not Updating on Ingest Nodes](https://discuss.elastic.co/t/geoip-database-update-issue-documentation-followed-databases-not-updating-on-ingest-nodes/351303)
**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Replies:** 18\ **Last updated:** [January 30, 2024, 11:19pm UTC](https://discuss.elastic.co/t/geoip-database-update-issue-documentation-followed-databases-not-updating-on-ingest-nodes/351303 "2024-01-30T23:19:48Z")
Summary: I followed the steps outlined in the section "Use a custom endpoint" of the documentation, but I encountered some unexpected behavior. The GEOIP databases are not updating on Elasticsearch ingest nodes. I'm not … --- ## [Filebeat fingerprint excessive logs](https://discuss.elastic.co/t/filebeat-fingerprint-excessive-logs/352440)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 14\ **Last updated:** [February 23, 2024, 6:14am UTC](https://discuss.elastic.co/t/filebeat-fingerprint-excessive-logs/352440 "2024-02-23T06:14:11Z")
Hi We have turned on fingerprinting in our lab. We see a lot of these logs. Is there a way to disabled those 0 bytes logs? Or make fingerprint ignore those files? {"log.level":"warn","@timestamp":"2024-02-02T18:16:22.… --- ## [ElasticSearch deployment is failing in Azure from Marketplace](https://discuss.elastic.co/t/elasticsearch-deployment-is-failing-in-azure-from-marketplace/174384)
**Author:** [@kyogesh91](https://discuss.elastic.co/u/kyogesh91)\ **Replies:** 14\ **Last updated:** [April 2, 2019, 12:13pm UTC](https://discuss.elastic.co/t/elasticsearch-deployment-is-failing-in-azure-from-marketplace/174384 "2019-04-02T12:13:04Z")
ElasticSearch deployment is failing in Microsoft Azure Marketplace. Snippet of the error. https://pastebin.com/uYpTce3T Below is the link to files shared by Microsoft Azure Support. https://support.microsoft.com/en-u… --- ## [Cron scheduler for jdbc plugin](https://discuss.elastic.co/t/cron-scheduler-for-jdbc-plugin/263878)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 10\ **Last updated:** [February 10, 2021, 3:14pm UTC](https://discuss.elastic.co/t/cron-scheduler-for-jdbc-plugin/263878 "2021-02-10T15:14:41Z")
Hi, I am using jdbc plugin and schedule for fetching data from database. Currently cron is running fine for schedule =\> "\* \* \* \* \*". My requirement is cron ingestion should start at given time (10 pm) and end at given … --- ## [Performance issue while viewing the dashboard](https://discuss.elastic.co/t/performance-issue-while-viewing-the-dashboard/278988)
**Author:** [@Noursh](https://discuss.elastic.co/u/Noursh)\ **Replies:** 9\ **Last updated:** [August 3, 2021, 2:48pm UTC](https://discuss.elastic.co/t/performance-issue-while-viewing-the-dashboard/278988 "2021-08-03T14:48:56Z")
we have a performance issue with the 7.13.2 version, some time it tooks a lot of time to load the dashboards, and even some of them wont load at all and returning me "no results found", these things didn't happened wi… --- ## [Logstash on docker](https://discuss.elastic.co/t/logstash-on-docker/121793)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 12\ **Last updated:** [March 5, 2018, 9:28am UTC](https://discuss.elastic.co/t/logstash-on-docker/121793 "2018-03-05T09:28:39Z")
Please help me out with this error I am not able to understand where I am going wrong \[gagarwal3@gaurav13\]~/tmp% docker run -h logstash --name logstash --link elasticsearch:elasticsearch -it --rm -v "$PWD":/config-dir l… --- ## [Help updating index for 6.\*](https://discuss.elastic.co/t/help-updating-index-for-6/129800)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 18\ **Last updated:** [May 5, 2018, 10:13am UTC](https://discuss.elastic.co/t/help-updating-index-for-6/129800 "2018-05-05T10:13:20Z")
A silent upgrade from 5.3 to 6.2 has killed Elasticsearch in an application due to the new structure of indices. The existing (now wrong) format has multiple types, which I'm told by the error messages is not supported.… --- ## [Custom Docker Image for custom Kibana Source](https://discuss.elastic.co/t/custom-docker-image-for-custom-kibana-source/159163)
**Author:** [@Jagadeesh\_ctm](https://discuss.elastic.co/u/Jagadeesh_ctm)\ **Replies:** 10\ **Last updated:** [January 3, 2019, 6:25am UTC](https://discuss.elastic.co/t/custom-docker-image-for-custom-kibana-source/159163 "2019-01-03T06:25:55Z")
Hii, I have a custom source code of kibana with lots of modifications and UI updates . I want to create a custom docker file to generate a build and copy my custom plugins to the build folder and make it ready for deplo… --- ## [Failed shards with top\_hits](https://discuss.elastic.co/t/failed-shards-with-top-hits/116407)
**Author:** [@mihalikv](https://discuss.elastic.co/u/mihalikv)\ **Replies:** 10\ **Last updated:** [January 27, 2018, 11:47am UTC](https://discuss.elastic.co/t/failed-shards-with-top-hits/116407 "2018-01-27T11:47:44Z")
Hi, i'am using ES 5.5.0 in one index with default 5 shards. When i run query with following aggregation: "attributes":{ "global":{ }, "aggs":{ "attributes\_products":{ "filter":{ … --- ## [Json Binary Format](https://discuss.elastic.co/t/json-binary-format/3338)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 11\ **Last updated:** [October 8, 2010, 1:35pm UTC](https://discuss.elastic.co/t/json-binary-format/3338 "2010-10-08T13:35:41Z")
Hi, elasticsearch has support a binary format similar to json for some time now, named "xson". This was used internally when using the Java API when possible (for example, a search request used it automatically)… --- ## [First time query with different params is taking a lot of time](https://discuss.elastic.co/t/first-time-query-with-different-params-is-taking-a-lot-of-time/162166)
**Author:** [@arvindan\_ta](https://discuss.elastic.co/u/arvindan_ta)\ **Replies:** 17\ **Last updated:** [December 27, 2018, 6:38pm UTC](https://discuss.elastic.co/t/first-time-query-with-different-params-is-taking-a-lot-of-time/162166 "2018-12-27T18:38:59Z")
Hi , I have around 20 Lakh records . I use a single index . The total doc size comes around 6.2GB. Whenever a new search is performed , the query takes a lot of time to execute . If I run the same query again , it exec… --- ## [Error when trying to implement jqeury for siteseaerch](https://discuss.elastic.co/t/error-when-trying-to-implement-jqeury-for-siteseaerch/186684)
**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\ **Replies:** 9\ **Last updated:** [July 10, 2019, 2:05pm UTC](https://discuss.elastic.co/t/error-when-trying-to-implement-jqeury-for-siteseaerch/186684 "2019-07-10T14:05:46Z")
Hi. im am following this official guide for jQuery Plugin Guide: when loading the needed scripts i get an error: Uncaught TypeError: Cannot read property 'msie' of undefined at jquery.ba-hashchange.min.js:9 is thi… --- ## [Red status elastic](https://discuss.elastic.co/t/red-status-elastic/106687)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 9\ **Last updated:** [November 8, 2017, 4:27pm UTC](https://discuss.elastic.co/t/red-status-elastic/106687 "2017-11-08T16:27:10Z")
From 1 week I have a problem with elasticsearch. Cluster status is red and I don't know how to return to green state curl -XGET 'localhost:9200/\_cluster/health?pretty' "cluster\_name" : "clusterelastic, "status" : "red… --- ## [Logstash filter elasticsearch open connections issue](https://discuss.elastic.co/t/logstash-filter-elasticsearch-open-connections-issue/103091)
**Author:** [@MaheshP](https://discuss.elastic.co/u/MaheshP)\ **Replies:** 9\ **Last updated:** [October 7, 2017, 9:55pm UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-open-connections-issue/103091 "2017-10-07T21:55:57Z")
Hello, Currently we are trying to send data from kafka to elasticsearch and in between we used logstash filter elasticsearch plugin to query for previous documents timestamp and other fields, at that time open connectio… --- ## [ELK 5.4 - LS reverts to automatic mapping when 'type' field is removed or renamed - ultimate :-)](https://discuss.elastic.co/t/elk-5-4-ls-reverts-to-automatic-mapping-when-type-field-is-removed-or-renamed-ultimate/88534)
**Author:** [@smyttie](https://discuss.elastic.co/u/smyttie)\ **Replies:** 16\ **Last updated:** [June 13, 2017, 8:26am UTC](https://discuss.elastic.co/t/elk-5-4-ls-reverts-to-automatic-mapping-when-type-field-is-removed-or-renamed-ultimate/88534 "2017-06-13T08:26:59Z")
Hi, I'm having an issue with removing the field named "type". I have created an index template for my data and declare a type "MyType". Ingesting data with logstash works very well, but I get an extra field named "… --- ## [There is no data to display - Infrastructure tab](https://discuss.elastic.co/t/there-is-no-data-to-display-infrastructure-tab/217373)
**Author:** [@ch0k](https://discuss.elastic.co/u/ch0k)\ **Replies:** 13\ **Last updated:** [February 7, 2020, 2:53pm UTC](https://discuss.elastic.co/t/there-is-no-data-to-display-infrastructure-tab/217373 "2020-02-07T14:53:16Z")
Hi, I can't display Hosts in the Infrastructure tab in Kibana. I checked the other threads on the forum but it still doesn't work. Can you please help me? Metricbeat is installed on multiple servers and they send data … --- ## [Bar chart show a single bar of a month while different year](https://discuss.elastic.co/t/bar-chart-show-a-single-bar-of-a-month-while-different-year/157849)
**Author:** [@vsingh](https://discuss.elastic.co/u/vsingh)\ **Replies:** 13\ **Last updated:** [December 3, 2018, 11:50am UTC](https://discuss.elastic.co/t/bar-chart-show-a-single-bar-of-a-month-while-different-year/157849 "2018-12-03T11:50:30Z")
Hello, I am new in kibana. i am using kibana 6.5.0. I have a table which have column month, year and expenses\_value. i have 12 month values in month column (e.g January, February, March etc). i have data from November … --- ## [Adjusting threadpool queue size to reduce number rof rejected operations](https://discuss.elastic.co/t/adjusting-threadpool-queue-size-to-reduce-number-rof-rejected-operations/180623)
**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\ **Replies:** 14\ **Last updated:** [May 12, 2019, 11:10am UTC](https://discuss.elastic.co/t/adjusting-threadpool-queue-size-to-reduce-number-rof-rejected-operations/180623 "2019-05-12T11:10:08Z")
I'm looking for suggested values of threadpools possibly based on deployments size. More specifically, is there any suggested configuration for threadpools for a deployment like this? 6 nodes Elasticsearch 5.6 deploymen… --- ## [HTTPD\_COMBINEDLOG not found with docker](https://discuss.elastic.co/t/httpd-combinedlog-not-found-with-docker/63981)
**Author:** [@lendoly](https://discuss.elastic.co/u/lendoly)\ **Replies:** 9\ **Last updated:** [September 6, 2019, 2:31pm UTC](https://discuss.elastic.co/t/httpd-combinedlog-not-found-with-docker/63981 "2019-09-06T14:31:03Z")
Hi all, I'm using the ELK stack with Docker, for Logstash I'm using Logstash:latest (that is Logstash 2.4 at the moment, https://hub.docker.com/\_/logstash/), researching a little in Github and code I see that the patt… --- ## [Facing error when trying to reindex from remote](https://discuss.elastic.co/t/facing-error-when-trying-to-reindex-from-remote/158116)
**Author:** [@pradla](https://discuss.elastic.co/u/pradla)\ **Replies:** 9\ **Last updated:** [November 26, 2018, 8:31am UTC](https://discuss.elastic.co/t/facing-error-when-trying-to-reindex-from-remote/158116 "2018-11-26T08:31:20Z")
I am trying to reindex from remote and I am facing an error. This was running fine for a few days now but suddenly I am facing this error my reindex code: curl -X POST "127.0.0.1:9201/\_reindex?pretty=true" -H 'Conten… --- ## [Logstash grok](https://discuss.elastic.co/t/logstash-grok/44795)
**Author:** [@lester015](https://discuss.elastic.co/u/lester015)\ **Replies:** 11\ **Last updated:** [April 26, 2016, 6:17pm UTC](https://discuss.elastic.co/t/logstash-grok/44795 "2016-04-26T18:17:02Z")
hi everyone, my test.log contents like bellow:"AsynExecutor.contractSyncScheduler\>\>\>\> 2016-03-17 04:00:03,247 INFO \[cn.cmri.pds.neusoft.ContractSyncService\] - \<【PageInquiryAccountBalanceContectSrv】,success\>" my … --- ## [Querying slow on kibana after re installation of docker](https://discuss.elastic.co/t/querying-slow-on-kibana-after-re-installation-of-docker/242693)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 12\ **Last updated:** [August 13, 2020, 12:24pm UTC](https://discuss.elastic.co/t/querying-slow-on-kibana-after-re-installation-of-docker/242693 "2020-08-13T12:24:15Z")
Hi All, After doing a clean reinstall of my ELK stack, querying the same reindexed data takes much longer, it now with saved queries that would be a few seconds previously now pop up with this: Your query is taking awh… --- ## [Troubles with heap, gc. Node fault](https://discuss.elastic.co/t/troubles-with-heap-gc-node-fault/259616)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 16\ **Last updated:** [January 11, 2021, 7:30am UTC](https://discuss.elastic.co/t/troubles-with-heap-gc-node-fault/259616 "2021-01-11T07:30:00Z")
Hello again, my new topic about our problem. We have ES cluster with 3 nodes. Each 128 Gb RAM, 31 GB Heap, there our jvm.options: -Xms31g -Xmx31g ## GC configuration #-XX:+UseConcMarkSweepGC #-XX:CMSInitiatingOccupanc… --- ## [Kibana failed to start](https://discuss.elastic.co/t/kibana-failed-to-start/332212)
**Author:** [@target\_test](https://discuss.elastic.co/u/target_test)\ **Replies:** 13\ **Last updated:** [May 2, 2023, 11:17am UTC](https://discuss.elastic.co/t/kibana-failed-to-start/332212 "2023-05-02T11:17:26Z")
hi i'm new using kibana and Elasticsearch at first i don't have any problem following guide on the internet but after i restart my computer kibana won't start --- ## [Is that good practice to manually merge sort the search result per shards?](https://discuss.elastic.co/t/is-that-good-practice-to-manually-merge-sort-the-search-result-per-shards/108480)
**Author:** [@richardxin](https://discuss.elastic.co/u/richardxin)\ **Replies:** 9\ **Last updated:** [November 22, 2017, 4:58pm UTC](https://discuss.elastic.co/t/is-that-good-practice-to-manually-merge-sort-the-search-result-per-shards/108480 "2017-11-22T16:58:10Z")
We are having a debate internally on whether it's good practice to manually merge the search result per shards. main index has 135 shards with single replica on 90 data nodes. The biggest query we are running is "Top N… --- ## [Cloud UI / Proxy Certs](https://discuss.elastic.co/t/cloud-ui-proxy-certs/236956)
**Author:** [@neutronscott](https://discuss.elastic.co/u/neutronscott)\ **Replies:** 10\ **Last updated:** [June 19, 2020, 7:10am UTC](https://discuss.elastic.co/t/cloud-ui-proxy-certs/236956 "2020-06-19T07:10:15Z")
Has anyone actually gotten a cert to install? I always get "non-null policy tree required and policy tree is null" I have entered the docker container and replaced manually the 2 pems used by stunnel, but don't know whe… --- ## [Advancing alert using watcher](https://discuss.elastic.co/t/advancing-alert-using-watcher/150048)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 9\ **Last updated:** [September 27, 2018, 1:00pm UTC](https://discuss.elastic.co/t/advancing-alert-using-watcher/150048 "2018-09-27T13:00:15Z")
HI Team, I'm very new watcher part and i want to create one alert, please help me on this alert. My scenario: i want to compare one field which i stored on the index for certain time period. for example: In the 1m of… --- ## [Cabin::Channel#error(message, data={}) - second argument you gave me wasa Array, I require a Hash](https://discuss.elastic.co/t/cabin-channel-error-message-data-second-argument-you-gave-me-wasa-array-i-require-a-hash/58306)
**Author:** [@da\_Teng](https://discuss.elastic.co/u/da_Teng)\ **Replies:** 12\ **Last updated:** [March 14, 2017, 2:18pm UTC](https://discuss.elastic.co/t/cabin-channel-error-message-data-second-argument-you-gave-me-wasa-array-i-require-a-hash/58306 "2017-03-14T14:18:37Z")
{:timestamp=\>"2016-08-18T02:38:07.483000+0000", :message=\>"Encountered an unexpected error submitting a bulk request! Will retry.", :error\_message=\>"Cabin::Channel#error(message, data={}) - second argument you gave me w… --- ## [Indexing stops at low number of records due to GC overhead with proper heap settings](https://discuss.elastic.co/t/indexing-stops-at-low-number-of-records-due-to-gc-overhead-with-proper-heap-settings/123162)
**Author:** [@whicter](https://discuss.elastic.co/u/whicter)\ **Replies:** 9\ **Last updated:** [March 9, 2018, 10:28pm UTC](https://discuss.elastic.co/t/indexing-stops-at-low-number-of-records-due-to-gc-overhead-with-proper-heap-settings/123162 "2018-03-09T22:28:08Z")
Hello, My Elasticsearch stops to index when after certain number of logs are sent to elastic via logstash and I keep seeing \[2018-03-08T15:44:34,677\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[aTs5egi\] \[gc\]\[14522\] overhead,… --- ## [Newbies testing out ElasticSearch alternative to Curl](https://discuss.elastic.co/t/newbies-testing-out-elasticsearch-alternative-to-curl/10333)
**Author:** [@Justin\_Treher](https://discuss.elastic.co/u/Justin_Treher)\ **Replies:** 9\ **Last updated:** [January 30, 2013, 1:45am UTC](https://discuss.elastic.co/t/newbies-testing-out-elasticsearch-alternative-to-curl/10333 "2013-01-30T01:45:12Z")
Hi! I have ElasticSearch running in my linux VM to test drive this alternative to SOLR. I'd really prefer just to use a REST "tester" client such as Poster for FireFox rather than retyping examples into curl or t… --- ## [Kibana 5.4.1 - Xpack reporting fail](https://discuss.elastic.co/t/kibana-5-4-1-xpack-reporting-fail/115302)
**Author:** [@Slop](https://discuss.elastic.co/u/Slop)\ **Replies:** 13\ **Last updated:** [January 15, 2018, 3:19pm UTC](https://discuss.elastic.co/t/kibana-5-4-1-xpack-reporting-fail/115302 "2018-01-15T15:19:28Z")
Hello, I've installed xpack and I'm trying to use "reporting" plugin to generate pdf of my dashboard. But I'm facing an issue with it, PDF aren't generated and I've the error "Max attempts reached (3)" Here's the kiba… --- ## [Date histogram aggregation over duration from startDate to endDate](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 12\ **Last updated:** [March 10, 2022, 10:29am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944 "2022-03-10T10:29:34Z")
Hi, I m trying to create an elastic query that should return all fields in each bucket using date histogram builder. I have an index that has thresholdValue with a start date and end date of 2/3 months period. Now I wan… --- ## [Cannot install X-Pack offline in docker](https://discuss.elastic.co/t/cannot-install-x-pack-offline-in-docker/142120)
**Author:** [@MrFrost](https://discuss.elastic.co/u/MrFrost)\ **Replies:** 12\ **Last updated:** [July 31, 2018, 7:16am UTC](https://discuss.elastic.co/t/cannot-install-x-pack-offline-in-docker/142120 "2018-07-31T07:16:33Z")
What gives? I did download the zip file from elastic.co yet it does not work, logs below: ELK 6.3.0 without X-Pack X-Pack: 6.2.4 When trying to install it offline i get this: Step 8/8 : RUN elasticsearch-plugin inst… --- ## [Filebeat does not send the message due to inode reused](https://discuss.elastic.co/t/filebeat-does-not-send-the-message-due-to-inode-reused/156217)
**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\ **Replies:** 14\ **Last updated:** [November 13, 2018, 11:56am UTC](https://discuss.elastic.co/t/filebeat-does-not-send-the-message-due-to-inode-reused/156217 "2018-11-13T11:56:52Z")
hi expert, I use the filebeat to import the data files to e.s, and there's a script keeping running in the background to scan the filog lebeat log, the data file(XXX) will be removed once it found a harvester eof event … --- ## [Boosting a document value](https://discuss.elastic.co/t/boosting-a-document-value/10770)
**Author:** [@Noam\_Guy](https://discuss.elastic.co/u/Noam_Guy)\ **Replies:** 14\ **Last updated:** [February 21, 2013, 3:01pm UTC](https://discuss.elastic.co/t/boosting-a-document-value/10770 "2013-02-21T15:01:09Z")
Hi, I know something like this was already answered but it's not what I need :-) I have two documents that look like this: { "image" : { "lists" : \[ { "value" : "dior"… --- ## [Problems getting logs in with winlogbeat](https://discuss.elastic.co/t/problems-getting-logs-in-with-winlogbeat/302169)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 10\ **Last updated:** [April 13, 2022, 8:56pm UTC](https://discuss.elastic.co/t/problems-getting-logs-in-with-winlogbeat/302169 "2022-04-13T20:56:38Z")
ES version 7.16.2 trying to upload sysmon data using winlogbeat. Cluster has "security" enabled and the winlogbeat clients are now connecting an there are no errors in the ES logs. We are using API keys -- this took so… --- ## [Logstash giving problem](https://discuss.elastic.co/t/logstash-giving-problem/71034)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 13\ **Last updated:** [January 12, 2017, 1:04pm UTC](https://discuss.elastic.co/t/logstash-giving-problem/71034 "2017-01-12T13:04:16Z")
Hii ,i m new in elasticsearch. my logstash is giving some problem while installing.how i can recover that? pls help me --- ## [Scheduled query service](https://discuss.elastic.co/t/scheduled-query-service/170075)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 14\ **Last updated:** [March 1, 2019, 4:55pm UTC](https://discuss.elastic.co/t/scheduled-query-service/170075 "2019-03-01T16:55:04Z")
Hi, I'm looking for an existing service/application which would execute scheduled queries defined by me and insert the result to an ES index. My goal is to aggregate data to be able to extend key metrics retention time… --- ## [3 grok filter in same file](https://discuss.elastic.co/t/3-grok-filter-in-same-file/145228)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 15\ **Last updated:** [August 27, 2018, 9:31am UTC](https://discuss.elastic.co/t/3-grok-filter-in-same-file/145228 "2018-08-27T09:31:26Z")
Hi, I have installed filebeat on a windows server to send logs of filezilla server to logstash. At this moment, it works, I see my logs. But it seems, only one filter works. Here my configuration grok { matc… --- ## [Endpoint Offline forced uninstall, can't uninstall completely](https://discuss.elastic.co/t/endpoint-offline-forced-uninstall-cant-uninstall-completely/334244)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 9\ **Last updated:** [May 31, 2023, 9:49am UTC](https://discuss.elastic.co/t/endpoint-offline-forced-uninstall-cant-uninstall-completely/334244 "2023-05-31T09:49:32Z")
What is the solution to forcibly uninstalling the agent via fleet while offline, but the uninstallation is not clean and the logs are kept and the host cannot be contacted? Thanks --- ## [Unable to drop fields in filebeat using drop\_field](https://discuss.elastic.co/t/unable-to-drop-fields-in-filebeat-using-drop-field/352978)
**Author:** [@vyjayanth](https://discuss.elastic.co/u/vyjayanth)\ **Replies:** 11\ **Last updated:** [February 11, 2024, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-drop-fields-in-filebeat-using-drop-field/352978 "2024-02-11T13:56:22Z")
Looking to drop a field called: Event.Original using drop\_field. As Message Field produces same information as Event.Original. I worked with remove\_field of logstash filter, but it isn’t reflecting by dropping the field… --- ## [Error: \`fsevents\` module is not installed](https://discuss.elastic.co/t/error-fsevents-module-is-not-installed/237139)
**Author:** [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Replies:** 11\ **Last updated:** [June 15, 2020, 8:32pm UTC](https://discuss.elastic.co/t/error-fsevents-module-is-not-installed/237139 "2020-06-15T20:32:55Z")
Setting up my development area on MacOS Catalina 10.15.5 (19F101) following kibana/CONTRIBUTING.md at main · elastic/kibana · GitHub When running YARN START I get the below error. New platform optimizer error Error: … --- ## [No logs in Kibana logs app](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005)
**Author:** [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\ **Replies:** 14\ **Last updated:** [April 3, 2020, 4:56pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005 "2020-04-03T16:56:58Z")
I have configured the EFK stack and logs are visible in kibana under the discover button when i create index pattern fluentd\*. But same logs are not visible in logs app when I make custom settings. PFA the configuratio… --- ## [Problem with useRelayStateDeepLink in Kibana's SAML configuration](https://discuss.elastic.co/t/problem-with-userelaystatedeeplink-in-kibanas-saml-configuration/286273)
**Author:** [@medina](https://discuss.elastic.co/u/medina)\ **Replies:** 13\ **Last updated:** [October 20, 2021, 6:45am UTC](https://discuss.elastic.co/t/problem-with-userelaystatedeeplink-in-kibanas-saml-configuration/286273 "2021-10-20T06:45:44Z")
Hello, I managed to make the SAML SSO work with a custom IdP (a Laravel app with this package, with both IdP and SP initiated flows. However, I want to redirect the user to specific dashboards on Kibana, from my Laravel… [Previous page](https://discuss.elastic.co/top.md?page=159&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=161&per_page=50&period=all)