# Top

**URL:** https://discuss.elastic.co/top.md?page=1609&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1610

---

## [Grok parse failures for ssl\_request\_log (but none in debugger)](https://discuss.elastic.co/t/grok-parse-failures-for-ssl-request-log-but-none-in-debugger/103248)

<div class="topic-metadata">

**Author:** [@adam.stallard](https://discuss.elastic.co/u/adam.stallard)\
**Replies:** 1\
**Last updated:** [October 9, 2017, 6:08pm UTC](https://discuss.elastic.co/t/grok-parse-failures-for-ssl-request-log-but-none-in-debugger/103248 "2017-10-09T18:08:02Z")

</div>

I have a log file from apache ssl\_request\_log which is a slightly different format from every other one in that it swaps the ordering of various fields. So I copied the macro from %{COMBINEDAPACHELOG} and made a few chan…

---

## [Kibana didn't show visualization](https://discuss.elastic.co/t/kibana-didnt-show-visualization/93843)

<div class="topic-metadata">

**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\
**Replies:** 1\
**Last updated:** [July 19, 2017, 11:14pm UTC](https://discuss.elastic.co/t/kibana-didnt-show-visualization/93843 "2017-07-19T23:14:06Z")

</div>

This error i can't solve while using kibana Visualize: rejected execution of org.elasticsearch.transport.TransportService$7@4a40b87 on EsThreadPoolExecutor\[search, queue capacity = 1000, org.elasticsearch.common.util.c…

---

## [When trying to load Configuration file this error is coming in Logstash CMD on windows](https://discuss.elastic.co/t/when-trying-to-load-configuration-file-this-error-is-coming-in-logstash-cmd-on-windows/57405)

<div class="topic-metadata">

**Author:** [@Danyal-Javeed](https://discuss.elastic.co/u/Danyal-Javeed)\
**Replies:** 1\
**Last updated:** [August 6, 2016, 11:09pm UTC](https://discuss.elastic.co/t/when-trying-to-load-configuration-file-this-error-is-coming-in-logstash-cmd-on-windows/57405 "2016-08-06T23:09:31Z")

</div>

C:\\logstash-2.3.4\>bin\\logstash agent -f logstash.conf io/console not supported; tty will not be manipulated Settings: Default pipeline workers: 4 Pipeline aborted due to error {:exception=\>#, :backtrace=\>\["C:/logstash-2.…

---

## [Set the Packetbeat config from enviornment variables](https://discuss.elastic.co/t/set-the-packetbeat-config-from-enviornment-variables/29525)

<div class="topic-metadata">

**Author:** [@manojbadam](https://discuss.elastic.co/u/manojbadam)\
**Replies:** 1\
**Last updated:** [September 22, 2015, 8:07am UTC](https://discuss.elastic.co/t/set-the-packetbeat-config-from-enviornment-variables/29525 "2015-09-22T08:07:13Z")

</div>

Hi Team, Im trying to run Packetbeat on a docker container and ship the metrics to ES. Since i have multiple docker containers running on same host, all these are logs are carrying the same shipper name (hostname). As …

---

## [Too many open files even after increasing limit](https://discuss.elastic.co/t/too-many-open-files-even-after-increasing-limit/14354)

<div class="topic-metadata">

**Author:** [@Aaron\_Troy](https://discuss.elastic.co/u/Aaron_Troy)\
**Replies:** 7\
**Last updated:** [November 12, 2013, 9:13am UTC](https://discuss.elastic.co/t/too-many-open-files-even-after-increasing-limit/14354 "2013-11-12T09:13:19Z")

</div>

Hi all, I'm running into a 'Too many open files' issue even after I've greatly increased the file limit on each node of the ES cluster. The set up is 6 storage nodes with around 630 million total indexed documents…

---

## [Scalability problems](https://discuss.elastic.co/t/scalability-problems/229592)

<div class="topic-metadata">

**Author:** [@shawmat](https://discuss.elastic.co/u/shawmat)\
**Replies:** 6\
**Last updated:** [April 25, 2020, 8:39am UTC](https://discuss.elastic.co/t/scalability-problems/229592 "2020-04-25T08:39:53Z")

</div>

It all started so well. My project involves loading 400 million documents, which are 80-character strings (lines of words mostly in English). I'm now battling through the third attempt to load the data, but every time …

---

## [Update mapping is throttled while update index templates?](https://discuss.elastic.co/t/update-mapping-is-throttled-while-update-index-templates/177257)

<div class="topic-metadata">

**Author:** [@Todd](https://discuss.elastic.co/u/Todd)\
**Replies:** 6\
**Last updated:** [April 22, 2019, 9:13am UTC](https://discuss.elastic.co/t/update-mapping-is-throttled-while-update-index-templates/177257 "2019-04-22T09:13:45Z")

</div>

Hi! when I update a lot of index templates, there are some data indexed into a new Index Index-a,so Index-a need to update mapping, but from the master node log, I found a lot of log like: \[2019-04-17T17:32:48,271\]\[DEB…

---

## [Databricks lakehouse delta tables as data source](https://discuss.elastic.co/t/databricks-lakehouse-delta-tables-as-data-source/328591)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [April 3, 2023, 2:44pm UTC](https://discuss.elastic.co/t/databricks-lakehouse-delta-tables-as-data-source/328591 "2023-04-03T14:44:47Z")

</div>

Is it possible to connect to the databricks lakehouse Delta tables to get the data to be indexed into elasticsearch?

---

## [Adjusting limits on elasticsearch containers](https://discuss.elastic.co/t/adjusting-limits-on-elasticsearch-containers/302528)

<div class="topic-metadata">

**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\
**Replies:** 2\
**Last updated:** [April 20, 2022, 6:29pm UTC](https://discuss.elastic.co/t/adjusting-limits-on-elasticsearch-containers/302528 "2022-04-20T18:29:26Z")

</div>

Hello, We applied a YML file that looks like this: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch namespace: elastic-stack spec: version: 7.6.1 nodeSets: - nam…

---

## [My Kibana is not being able to connect with my Elasticsearch because of Self-Signed Certificate](https://discuss.elastic.co/t/my-kibana-is-not-being-able-to-connect-with-my-elasticsearch-because-of-self-signed-certificate/292730)

<div class="topic-metadata">

**Author:** [@FernandoDurier](https://discuss.elastic.co/u/FernandoDurier)\
**Replies:** 2\
**Last updated:** [December 22, 2021, 7:15pm UTC](https://discuss.elastic.co/t/my-kibana-is-not-being-able-to-connect-with-my-elasticsearch-because-of-self-signed-certificate/292730 "2021-12-22T19:15:11Z")

</div>

Good day, everyone! Hope you are doing well. I'm trying to connect my dockerized Kibana service with my IBM Cloud Elasticsearch. In the past, I had no issue with another instance of Elasticsearch running inside a RHOS…

---

## [コンテナ上のfilebeatのログ収集について](https://discuss.elastic.co/t/filebeat/198264)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [September 6, 2019, 1:32am UTC](https://discuss.elastic.co/t/filebeat/198264 "2019-09-06T01:32:12Z")

</div>

コンテナ上のfilebeatから、ホストOSの/var/log/messageを収集して Logstashに連携したいのですが、可能でしょうか? 可能な場合、設定方法を教えて頂けないでしょうか? 公式ドキュメントを確認したのですが、見当たらなかったです。 コンテナ上のfilebeatから、ホストOSの/var/log/messageが収集できなくて 詰まっています。 よろしくお願いします。

---

## [Reindex returns "Content-Type" exception](https://discuss.elastic.co/t/reindex-returns-content-type-exception/163184)

<div class="topic-metadata">

**Author:** [@Zorobay](https://discuss.elastic.co/u/Zorobay)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 11:12am UTC](https://discuss.elastic.co/t/reindex-returns-content-type-exception/163184 "2019-01-07T11:12:13Z")

</div>

Hi! I'm trying to move my data from our old server to our new one through reindexing. This is the command I'm using in the Kibana console from the new server: POST \_reindex { "source": { "remote": { "host"…

---

## [Modification of the Legend in Region Map](https://discuss.elastic.co/t/modification-of-the-legend-in-region-map/152699)

<div class="topic-metadata">

**Author:** [@NachLT](https://discuss.elastic.co/u/NachLT)\
**Replies:** 2\
**Last updated:** [October 16, 2018, 10:58pm UTC](https://discuss.elastic.co/t/modification-of-the-legend-in-region-map/152699 "2018-10-16T22:58:13Z")

</div>

Hi everybody. Is there any way to edit the ranges of the legend? I am trying to show some information in a region map and Kibana set the legend automatically, but I would modify its ranges: Fro example, setting a sma…

---

## [How to consume a JSON stream and keep the original stream data unchanged](https://discuss.elastic.co/t/how-to-consume-a-json-stream-and-keep-the-original-stream-data-unchanged/127451)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 2\
**Last updated:** [April 10, 2018, 11:46pm UTC](https://discuss.elastic.co/t/how-to-consume-a-json-stream-and-keep-the-original-stream-data-unchanged/127451 "2018-04-10T23:46:19Z")

</div>

I am implementing a kibana plugin to check/authorize the request payload. The format of some request payload is JSONStream, an example is as below, {"index":\["logstash1\*"\],"ignore\_unavailable":true,"preference":1523345…

---

## [Resend after SMTPSendFailedException?](https://discuss.elastic.co/t/resend-after-smtpsendfailedexception/69834)

<div class="topic-metadata">

**Author:** [@jeffedwards](https://discuss.elastic.co/u/jeffedwards)\
**Replies:** 2\
**Last updated:** [December 29, 2016, 8:50am UTC](https://discuss.elastic.co/t/resend-after-smtpsendfailedexception/69834 "2016-12-29T08:50:23Z")

</div>

Folks were complaining about a Watcher 2.4 alert which had been successfully logged, so when I went to the history I found it had triggered but the email action failed: "actions": \[ { "id": "alert\_ema…

---

## [Filebeat intermittently crashes during start up](https://discuss.elastic.co/t/filebeat-intermittently-crashes-during-start-up/69994)

<div class="topic-metadata">

**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\
**Replies:** 2\
**Last updated:** [December 27, 2016, 6:32am UTC](https://discuss.elastic.co/t/filebeat-intermittently-crashes-during-start-up/69994 "2016-12-27T06:32:27Z")

</div>

Hi, I am using filebeat-1.2.3 binary, built with go-1.7.1 in my freebsd box. When I am starting this binary in my freebsd boxes I am facing the error mentioned below. I am not facing this issue every time I start filebea…

---

## [Native realm and password policy](https://discuss.elastic.co/t/native-realm-and-password-policy/65243)

<div class="topic-metadata">

**Author:** [@Gnosis](https://discuss.elastic.co/u/Gnosis)\
**Replies:** 2\
**Last updated:** [November 8, 2016, 9:30am UTC](https://discuss.elastic.co/t/native-realm-and-password-policy/65243 "2016-11-08T09:30:36Z")

</div>

Hi all, I'd like to know if it's possible to specify the policy for password (length,...) when using a native realm plz ? Thx. Vivien

---

## [Network.host\_publish and network.bind ambiguity](https://discuss.elastic.co/t/network-host-publish-and-network-bind-ambiguity/56308)

<div class="topic-metadata">

**Author:** [@userguy](https://discuss.elastic.co/u/userguy)\
**Replies:** 2\
**Last updated:** [July 25, 2016, 6:29pm UTC](https://discuss.elastic.co/t/network-host-publish-and-network-bind-ambiguity/56308 "2016-07-25T18:29:16Z")

</div>

Hello Team , I have two network interface - Once management and One Data ip .. where i want cluster communication to be on 9300 i.e on DATA ip and management aka 9200 on management ip . both the ip are on different vl…

---

## [Can't get a Watch to operate within the proper timezone](https://discuss.elastic.co/t/cant-get-a-watch-to-operate-within-the-proper-timezone/55805)

<div class="topic-metadata">

**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\
**Replies:** 2\
**Last updated:** [July 20, 2016, 5:31pm UTC](https://discuss.elastic.co/t/cant-get-a-watch-to-operate-within-the-proper-timezone/55805 "2016-07-20T17:31:33Z")

</div>

We are having difficulty getting watches to locate data in the correct timezone. We can get the watches to "execute" within the proper timezone, but the execution of the watch never seems to find the data match the crite…

---

## [Index name wIldcard Problems](https://discuss.elastic.co/t/index-name-wildcard-problems/33576)

<div class="topic-metadata">

**Author:** [@John\_Damore](https://discuss.elastic.co/u/John_Damore)\
**Replies:** 2\
**Last updated:** [November 3, 2015, 11:59pm UTC](https://discuss.elastic.co/t/index-name-wildcard-problems/33576 "2015-11-03T23:59:53Z")

</div>

I am having a problem search indexes with a wild cards in the name: roles.yml: report\_user: indices: 'reports-\*': all get reports-2015/\_search works fine but get reports-\*/\_search gives me this: { …

---

## [Query highlighting in dashboard](https://discuss.elastic.co/t/query-highlighting-in-dashboard/23760)

<div class="topic-metadata">

**Author:** [@Zmicier](https://discuss.elastic.co/u/Zmicier)\
**Replies:** 2\
**Last updated:** [June 17, 2015, 3:10pm UTC](https://discuss.elastic.co/t/query-highlighting-in-dashboard/23760 "2015-06-17T15:10:57Z")

</div>

Is there any way to get matching query terms highlighted in a dashboard. Basically, I want the same highlighting functionality of the Discover mode to be available in a dashboard. That is, when I type a query in query bo…

---

## [Synonym\_graph token filter and synonyms including comma's](https://discuss.elastic.co/t/synonym-graph-token-filter-and-synonyms-including-commas/316219)

<div class="topic-metadata">

**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\
**Replies:** 5\
**Last updated:** [November 1, 2022, 8:52am UTC](https://discuss.elastic.co/t/synonym-graph-token-filter-and-synonyms-including-commas/316219 "2022-11-01T08:52:42Z")

</div>

I am trying to create a index that uses a synonym\_graph token filter to search for synonyms of chemical compound. For instance, when I search for "benzene", I also want to find sentences containing the following: "benz…

---

## [Logstash slow in bash script launch by cronjob](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103)

<div class="topic-metadata">

**Author:** [@Henri\_L](https://discuss.elastic.co/u/Henri_L)\
**Replies:** 5\
**Last updated:** [March 8, 2022, 4:18pm UTC](https://discuss.elastic.co/t/logstash-slow-in-bash-script-launch-by-cronjob/299103 "2022-03-08T16:18:58Z")

</div>

Hi I have a bash script like that: #!/bin/bash cat /home/xxx/public\_html/datas/zz/file.csv | /usr/share/logstash/bin/logstash -f /home/xxx/public\_html/datas/myconf.conf My conf file is basic like that: input { st…

---

## [Several question about SSL/TLS](https://discuss.elastic.co/t/several-question-about-ssl-tls/207069)

<div class="topic-metadata">

**Author:** [@laijianbin](https://discuss.elastic.co/u/laijianbin)\
**Replies:** 5\
**Last updated:** [November 12, 2019, 2:51am UTC](https://discuss.elastic.co/t/several-question-about-ssl-tls/207069 "2019-11-12T02:51:49Z")

</div>

Hi, I am reference security configured SSL/TLS in elasticsearch My elasticsearch.yml: xpack.security.enabled: true network.host: MY\_IP xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verifi…

---

## [Filebeat V7.4.1 output.elasticsearch not writing to defined index "logstash"](https://discuss.elastic.co/t/filebeat-v7-4-1-output-elasticsearch-not-writing-to-defined-index-logstash/205444)

<div class="topic-metadata">

**Author:** [@Ritzo](https://discuss.elastic.co/u/Ritzo)\
**Replies:** 5\
**Last updated:** [October 29, 2019, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-v7-4-1-output-elasticsearch-not-writing-to-defined-index-logstash/205444 "2019-10-29T12:46:55Z")

</div>

Hello The goal is to write the filebeat-Logs via the output.elasticsearch into the logstash index. We have done the following entry in the filebeat.yml setup.template: name: "logstash" pattern: "logstash-\*" output.e…

---

## [Mapping from JSON](https://discuss.elastic.co/t/mapping-from-json/110262)

<div class="topic-metadata">

**Author:** [@nkdev89](https://discuss.elastic.co/u/nkdev89)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 6:01am UTC](https://discuss.elastic.co/t/mapping-from-json/110262 "2017-12-06T06:01:33Z")

</div>

Hi , I have a JSON file which has the mapping details for a index, Please let me know how do i use it when creating Index from NEST Client (C#). Thanks Naveen

---

## [SearchRequestBuilder to Json](https://discuss.elastic.co/t/searchrequestbuilder-to-json/11483)

<div class="topic-metadata">

**Author:** [@Pierre\_De\_Soyres](https://discuss.elastic.co/u/Pierre_De_Soyres)\
**Replies:** 5\
**Last updated:** [April 8, 2013, 1:21pm UTC](https://discuss.elastic.co/t/searchrequestbuilder-to-json/11483 "2013-04-08T13:21:41Z")

</div>

Hello, I would like to know if there is a way to transform a SearchQueryBuilder into its corresponding Json format. When I use toString() on a SearchQueryBuilder I get a partial Json : { "from" : 0, "size"…

---

## [\[ANN\] Elasticsearch Mapper Attachment plugin 3.1.0 released](https://discuss.elastic.co/t/ann-elasticsearch-mapper-attachment-plugin-3-1-0-released/35760)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [November 27, 2015, 12:56pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-mapper-attachment-plugin-3-1-0-released/35760 "2015-11-27T12:56:15Z")

</div>

Heya, We are pleased to announce the release of the Elasticsearch Mapper Attachment plugin, version 3.1.0. The mapper attachments plugin adds the attachment type to Elasticsearch using Apache Tika.. https://github.…

---

## [Converting Date-String into Date with Ingest-pipeline not working](https://discuss.elastic.co/t/converting-date-string-into-date-with-ingest-pipeline-not-working/277613)

<div class="topic-metadata">

**Author:** [@adamio](https://discuss.elastic.co/u/adamio)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 6:54am UTC](https://discuss.elastic.co/t/converting-date-string-into-date-with-ingest-pipeline-not-working/277613 "2021-07-02T06:54:18Z")

</div>

We have this pipeline: PUT \_ingest/pipeline/j2-e2a-test { "processors": \[ { "grok": { "field": "message", "patterns": \[ "(?m)(?\<myfulldate\>%{DATE\_EU}\\\\s+%{TIME})\\\\s+(%{WORD:loglevel…

---

## [How to change the index name of beats logs in kubernetes](https://discuss.elastic.co/t/how-to-change-the-index-name-of-beats-logs-in-kubernetes/177684)

<div class="topic-metadata">

**Author:** [@Ji\_Ho\_Choi](https://discuss.elastic.co/u/Ji_Ho_Choi)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 12:29pm UTC](https://discuss.elastic.co/t/how-to-change-the-index-name-of-beats-logs-in-kubernetes/177684 "2019-04-30T12:29:41Z")

</div>

I have beats linked to elastic cloud elasticsearch 7.0.0. We have filebeats and metricbeats successfully sending logs to elasticsearch as both deployment and daemonset in kubernetes environment. However, I am unable to c…

---

## [Can't connect to AWS S3 with S3 Repository](https://discuss.elastic.co/t/cant-connect-to-aws-s3-with-s3-repository/173003)

<div class="topic-metadata">

**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\
**Replies:** 1\
**Last updated:** [March 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/cant-connect-to-aws-s3-with-s3-repository/173003 "2019-03-19T19:04:53Z")

</div>

Hello! After upgrading from ELK 6.5.4 to 6.6.2, I can't connect to my S3 Repository for a Backup. My ELK ver - 6.6.2 S3 Repository version - 6.6.2 elasticsearch.yml S3 Repository config: s3.client.default.proxy.host…

---

## [Template "inheritance"](https://discuss.elastic.co/t/template-inheritance/166583)

<div class="topic-metadata">

**Author:** [@RhysEvans](https://discuss.elastic.co/u/RhysEvans)\
**Replies:** 1\
**Last updated:** [February 1, 2019, 7:45am UTC](https://discuss.elastic.co/t/template-inheritance/166583 "2019-02-01T07:45:57Z")

</div>

Hi I want to setup a default template for some specific fields, that I want added to every other template. So template 1 has fields x,y,z and template 2 has fields a,b,c The index should know the "types" (don't know…

---

## [Clone dashboard programatically](https://discuss.elastic.co/t/clone-dashboard-programatically/159387)

<div class="topic-metadata">

**Author:** [@Artur\_Friedrich](https://discuss.elastic.co/u/Artur_Friedrich)\
**Replies:** 1\
**Last updated:** [December 4, 2018, 3:03pm UTC](https://discuss.elastic.co/t/clone-dashboard-programatically/159387 "2018-12-04T15:03:39Z")

</div>

Hello, I have create a dashboard with visualisations in it. I will clone the dashboard and assign to another index and this must go programatically (other index: same structure but other data in it) How can I do this …

---

## [Unable to view cluster status with curl command](https://discuss.elastic.co/t/unable-to-view-cluster-status-with-curl-command/139257)

<div class="topic-metadata">

**Author:** [@john\_99](https://discuss.elastic.co/u/john_99)\
**Replies:** 1\
**Last updated:** [July 10, 2018, 3:02am UTC](https://discuss.elastic.co/t/unable-to-view-cluster-status-with-curl-command/139257 "2018-07-10T03:02:29Z")

</div>

Hi, I am trying to check my cluster status with curl command curl http://localhost:9200 or curl -XGET 'http://localhost:9200/\_cluster/state?pretty' getting below //DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN…

---

## [Completion Suggester incorrect sorting by weight](https://discuss.elastic.co/t/completion-suggester-incorrect-sorting-by-weight/125871)

<div class="topic-metadata">

**Author:** [@sefik.sahin](https://discuss.elastic.co/u/sefik.sahin)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 1:51pm UTC](https://discuss.elastic.co/t/completion-suggester-incorrect-sorting-by-weight/125871 "2018-03-30T13:51:22Z")

</div>

Hi there, I have been used to completion type suggester which implementet nest in . Net. So I added 60M datas in elasticclient. So Completin suggester field model like this .net : public Dictionary\<string, List\<Complet…

---

## [Cannot read property 'message' of null](https://discuss.elastic.co/t/cannot-read-property-message-of-null/104317)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 1\
**Last updated:** [October 20, 2017, 6:15am UTC](https://discuss.elastic.co/t/cannot-read-property-message-of-null/104317 "2017-10-20T06:15:54Z")

</div>

Cannot read property 'message' of null This is what i am seeing when i navigate to add new index pattern. Kibana Version:- 5.5.3 OS:- Ubuntu I am not sure what other details i should provide but i am ready to provide…

---

## [Index pattern Export CSV](https://discuss.elastic.co/t/index-pattern-export-csv/97102)

<div class="topic-metadata">

**Author:** [@dmil](https://discuss.elastic.co/u/dmil)\
**Replies:** 1\
**Last updated:** [August 16, 2017, 5:04pm UTC](https://discuss.elastic.co/t/index-pattern-export-csv/97102 "2017-08-16T17:04:20Z")

</div>

Hi, I am using Kibana v5.4.0. I can not find feature so I was wondering is it possible to export all fields and data from index pattern to .csv? Thanks.

---

## [Meaning of regexp query complement operator](https://discuss.elastic.co/t/meaning-of-regexp-query-complement-operator/79224)

<div class="topic-metadata">

**Author:** [@Igor\_Berman](https://discuss.elastic.co/u/Igor_Berman)\
**Replies:** 1\
**Last updated:** [March 24, 2017, 8:21am UTC](https://discuss.elastic.co/t/meaning-of-regexp-query-complement-operator/79224 "2017-03-24T08:21:33Z")

</div>

Hi All, if you can help me with understanding what is complement in regexp queries really is by example I've read documentation, however it's still not clear for me e.g. I have following regexp query that tries to sele…

---

## [Es-spark do not work with spark](https://discuss.elastic.co/t/es-spark-do-not-work-with-spark/64652)

<div class="topic-metadata">

**Author:** [@mover](https://discuss.elastic.co/u/mover)\
**Replies:** 1\
**Last updated:** [November 2, 2016, 5:21am UTC](https://discuss.elastic.co/t/es-spark-do-not-work-with-spark/64652 "2016-11-02T05:21:21Z")

</div>

Hi, all I use the code snippet from https://www.elastic.co/guide/en/elasticsearch/hadoop/2.4/spark.html to write some data to elasticsearch. the content of pom.xml is as follow: org.elastics…

---

## [How to reset password?](https://discuss.elastic.co/t/how-to-reset-password/365906)

<div class="topic-metadata">

**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\
**Replies:** 3\
**Last updated:** [September 3, 2024, 2:29pm UTC](https://discuss.elastic.co/t/how-to-reset-password/365906 "2024-09-03T14:29:13Z")

</div>

Hi , I forgot my password for my elasticsearch I configured my elasticsearch.yml with: network.host: 0.0.0.0 discovery.seed\_hosts: \[“127.0.0.1”, “\[::1\]”\] discovery.type: single-node xpack.security.enabled: true I ra…

---

## [Increase row count in search table in kibana dashboard](https://discuss.elastic.co/t/increase-row-count-in-search-table-in-kibana-dashboard/307864)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 3\
**Last updated:** [June 22, 2022, 12:02pm UTC](https://discuss.elastic.co/t/increase-row-count-in-search-table-in-kibana-dashboard/307864 "2022-06-22T12:02:16Z")

</div>

I have added discover search results in dashboard and changed row count limit to 500 default but it is not reflecting to search table. Row count in search table is limited to 50. How to increase that.

---

## [Kibana 6.1.1 : Add include\_type\_name=true in calls to elasticsearch](https://discuss.elastic.co/t/kibana-6-1-1-add-include-type-name-true-in-calls-to-elasticsearch/290277)

<div class="topic-metadata">

**Author:** [@Ranjan\_prabhu](https://discuss.elastic.co/u/Ranjan_prabhu)\
**Replies:** 3\
**Last updated:** [November 29, 2021, 6:13pm UTC](https://discuss.elastic.co/t/kibana-6-1-1-add-include-type-name-true-in-calls-to-elasticsearch/290277 "2021-11-29T18:13:25Z")

</div>

I started with Elasticsearch 6.1.x with kibana 6.1.x. I am planning to use kibana 6.1.x with Elasticsearch 7.x. I have gone through this to understand what has changed in es 7.x: Breaking changes in 7.0 | Elasticsearch G…

---

## [Simple variation of counts - Serial differencing](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118)

<div class="topic-metadata">

**Author:** [@efftee](https://discuss.elastic.co/u/efftee)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 10:48am UTC](https://discuss.elastic.co/t/simple-variation-of-counts-serial-differencing/277118 "2021-06-28T10:48:14Z")

</div>

Hi Community, The most apparently simplest of things, that you can do in seconds with a pen and paper, but spent hours trying in Kibana and failed so far. It's driving me completely crazy !! Try it and tell me …

---

## [NodeJS APM Agent HTTP 400 (Error) Not Showing on Error Graph](https://discuss.elastic.co/t/nodejs-apm-agent-http-400-error-not-showing-on-error-graph/268061)

<div class="topic-metadata">

**Author:** [@rodentskie](https://discuss.elastic.co/u/rodentskie)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 12:10am UTC](https://discuss.elastic.co/t/nodejs-apm-agent-http-400-error-not-showing-on-error-graph/268061 "2021-03-25T00:10:57Z")

</div>

Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: 7.11.1 APM Agent language and version: NodeJS 10 Fresh install or upgraded from other version? Using docker In the image above, I purposely…

---

## [Fixing Multiline Logs in Filebeat](https://discuss.elastic.co/t/fixing-multiline-logs-in-filebeat/224299)

<div class="topic-metadata">

**Author:** [@kevin5617](https://discuss.elastic.co/u/kevin5617)\
**Replies:** 3\
**Last updated:** [March 31, 2020, 9:09pm UTC](https://discuss.elastic.co/t/fixing-multiline-logs-in-filebeat/224299 "2020-03-31T21:09:45Z")

</div>

I know that filebeat has a multiline tool to handle multiline logs. However, the way my log structure is setup I do not think those solutions work exactly the same way. I am using the ELK stack with docker, and for fileb…

---

## [How to replace field with another field value for entire index?](https://discuss.elastic.co/t/how-to-replace-field-with-another-field-value-for-entire-index/159810)

<div class="topic-metadata">

**Author:** [@BHAVIK\_CHITRODA](https://discuss.elastic.co/u/BHAVIK_CHITRODA)\
**Replies:** 0\
**Last updated:** [December 6, 2018, 9:45pm UTC](https://discuss.elastic.co/t/how-to-replace-field-with-another-field-value-for-entire-index/159810 "2018-12-06T21:45:55Z")

</div>

Hi, I am new to Elasticsearch and still trying to figure the APIs for update and modifying documents/data on elasticsearch indexes. I forwarded certain logs from Logstash to ES indexes. My logstash file is pretty comple…

---

## [Metricbeat Kubernetes metadata processor](https://discuss.elastic.co/t/metricbeat-kubernetes-metadata-processor/130138)

<div class="topic-metadata">

**Author:** [@huskerdhf](https://discuss.elastic.co/u/huskerdhf)\
**Replies:** 3\
**Last updated:** [May 22, 2018, 3:35am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-metadata-processor/130138 "2018-05-22T03:35:18Z")

</div>

I'm wondering if anyone has come up with a working configuration for the add\_kubernetes\_metadata processor for Metricbeat. The documentation of this feature is quite sparse and so I've been struggling to find a working c…

---

## [Return unique result by field values](https://discuss.elastic.co/t/return-unique-result-by-field-values/124441)

<div class="topic-metadata">

**Author:** [@woshitom](https://discuss.elastic.co/u/woshitom)\
**Replies:** 3\
**Last updated:** [March 18, 2018, 1:47pm UTC](https://discuss.elastic.co/t/return-unique-result-by-field-values/124441 "2018-03-18T13:47:10Z")

</div>

I have 3 "places" having each a type and a location: PUT places/1 { "type" : "A", "location": { "lat": 1.378446, "lon": 103.763427 } } PUT places/2 { "type" : "B", "location": { "lat": …

---

## [Index status as red with 1 unassigned shard](https://discuss.elastic.co/t/index-status-as-red-with-1-unassigned-shard/118750)

<div class="topic-metadata">

**Author:** [@Alp1](https://discuss.elastic.co/u/Alp1)\
**Replies:** 3\
**Last updated:** [February 8, 2018, 7:47am UTC](https://discuss.elastic.co/t/index-status-as-red-with-1-unassigned-shard/118750 "2018-02-08T07:47:53Z")

</div>

Hi , I am running few rally tracks on our dev environment and i observed whenever i run pmc / nyc\_taxis tracks the index goes into red state after some 5GB of data with 1 unassigned shard error. These tracks have data s…

---

## [Topbeat/metricbeat is not showing correct value for proc.cpu.user\_p](https://discuss.elastic.co/t/topbeat-metricbeat-is-not-showing-correct-value-for-proc-cpu-user-p/60812)

<div class="topic-metadata">

**Author:** [@Huy\_Hoang](https://discuss.elastic.co/u/Huy_Hoang)\
**Replies:** 3\
**Last updated:** [September 20, 2016, 6:28am UTC](https://discuss.elastic.co/t/topbeat-metricbeat-is-not-showing-correct-value-for-proc-cpu-user-p/60812 "2016-09-20T06:28:03Z")

</div>

Hi, I am using elk stack version 5.0 and 1.3/5.0 for topbeat on centos 7. The problem is that the proc.cpu.user\_p is always \< 0.9. Normally, the values are showed as 0.0xx (0.001, 0,003 .v..v), I tried to run a heavy ta…

[Previous page](https://discuss.elastic.co/top.md?page=1608&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1610&per_page=50&period=all)
