# Top **URL:** https://discuss.elastic.co/top.md?page=162&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 163 --- ## [Uptime Alerts just not works](https://discuss.elastic.co/t/uptime-alerts-just-not-works/245139)
**Author:** [@alex-rn](https://discuss.elastic.co/u/alex-rn)\ **Replies:** 10\ **Last updated:** [August 21, 2020, 3:49pm UTC](https://discuss.elastic.co/t/uptime-alerts-just-not-works/245139 "2020-08-21T15:49:59Z")
Hello, I have successfully configured Heartbeat with Uptime and everything works well. But I have a very strange issues with Kibana Alerts. See screenshots. In Uptime Alerts I can see and use only the "MATCHING MONI… --- ## [What is the recommend way to index data from Web App using SQL Server?](https://discuss.elastic.co/t/what-is-the-recommend-way-to-index-data-from-web-app-using-sql-server/101070)
**Author:** [@Dzyann](https://discuss.elastic.co/u/Dzyann)\ **Replies:** 10\ **Last updated:** [September 26, 2017, 7:13pm UTC](https://discuss.elastic.co/t/what-is-the-recommend-way-to-index-data-from-web-app-using-sql-server/101070 "2017-09-26T19:13:58Z")
We are currently working on an application with a large database and we want to use Elasticsearch as our search engine. We are rather new working with Elasticsearch and although we have been reading the documentation, s… --- ## [APM Java Agent - manual setup](https://discuss.elastic.co/t/apm-java-agent-manual-setup/258581)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 10\ **Last updated:** [December 21, 2020, 4:47pm UTC](https://discuss.elastic.co/t/apm-java-agent-manual-setup/258581 "2020-12-21T16:47:03Z")
Kibana version : 7.10.0 Elasticsearch version : 7.10.0 APM Server version : 7.10.1 APM Agent language and version : Java - elastic-apm-agent-1.19.0.jar Browser version : Firefox 83.0 Original install method (e.g. do… --- ## [Unable to create logstash.conf for log file](https://discuss.elastic.co/t/unable-to-create-logstash-conf-for-log-file/98933)
**Author:** [@ramesh205](https://discuss.elastic.co/u/ramesh205)\ **Replies:** 14\ **Last updated:** [August 31, 2017, 10:53am UTC](https://discuss.elastic.co/t/unable-to-create-logstash-conf-for-log-file/98933 "2017-08-31T10:53:11Z")
Please correct my logstash.conf as i am getting below error message and in kibana i can see my data in dev tool (GET /\_search) but not able to view data in discover tab Q1.I need to add any index in logstash.conf? Q2.i… --- ## [New logstash server in Azure elastic 3 node cluster](https://discuss.elastic.co/t/new-logstash-server-in-azure-elastic-3-node-cluster/108297)
**Author:** [@HeadScratcher](https://discuss.elastic.co/u/HeadScratcher)\ **Replies:** 11\ **Last updated:** [November 21, 2017, 11:12am UTC](https://discuss.elastic.co/t/new-logstash-server-in-azure-elastic-3-node-cluster/108297 "2017-11-21T11:12:59Z")
this weekend i've been attempting to get my cluster running. I chose the Azure market place Elastic/Kibana/X-PACK setup and configured it like this Single Subnet 10.0.0.0/24 3 data nodes 10.0.0.6, 10.0.0.7, 10.0.0.8 … --- ## [Automating Email Whitelisting for Alerts (elasticsearch, kibana)](https://discuss.elastic.co/t/automating-email-whitelisting-for-alerts-elasticsearch-kibana/313369)
**Author:** [@Hayden\_WB](https://discuss.elastic.co/u/Hayden_WB)\ **Replies:** 10\ **Last updated:** [September 2, 2022, 8:33am UTC](https://discuss.elastic.co/t/automating-email-whitelisting-for-alerts-elasticsearch-kibana/313369 "2022-09-02T08:33:11Z")
Hi folks! We are trying to achieve observability for a large organisation, and we now have users creating alerts in various elastic deployments. We have recently learned that, in order to receive the email alerts our us… --- ## [Displaying two geoips on Kibana Coordinate Map](https://discuss.elastic.co/t/displaying-two-geoips-on-kibana-coordinate-map/139494)
**Author:** [@hasifsulaiman](https://discuss.elastic.co/u/hasifsulaiman)\ **Replies:** 13\ **Last updated:** [August 4, 2018, 10:57am UTC](https://discuss.elastic.co/t/displaying-two-geoips-on-kibana-coordinate-map/139494 "2018-08-04T10:57:15Z")
Hi, i'm new with elk stack, and need some help with my problem. I have read the topic, basically on how to emulate something like an attack map cyber map, but I'm not sure if it is possible or not. My objective is to s… --- ## [How to add more than one paramter for filter](https://discuss.elastic.co/t/how-to-add-more-than-one-paramter-for-filter/147153)
**Author:** [@anon69830709](https://discuss.elastic.co/u/anon69830709)\ **Replies:** 16\ **Last updated:** [September 7, 2018, 7:09am UTC](https://discuss.elastic.co/t/how-to-add-more-than-one-paramter-for-filter/147153 "2018-09-07T07:09:12Z")
filter { if \[type\] == "access" { grok { match =\> { "message" =\> "%{IPV4:ip} (?(msg "\[A-Za-z \]+))" } } } } how to make it work. No matching is being done here for cause filed, --- ## [Dashboard Navigation \[Filebeat Netflow\] not working](https://discuss.elastic.co/t/dashboard-navigation-filebeat-netflow-not-working/249144)
**Author:** [@HelpComputer](https://discuss.elastic.co/u/HelpComputer)\ **Replies:** 12\ **Last updated:** [October 7, 2020, 9:05pm UTC](https://discuss.elastic.co/t/dashboard-navigation-filebeat-netflow-not-working/249144 "2020-10-07T21:05:08Z")
Hello, I recently upgraded our Elastic Stack from 6.8 to 7.9.1 and I am unable to get several Dashboards to work in Kibana. Specifically, the \[Filebeat Netflow\] Overview dashboard. Whenever I select it in Kibana I recei… --- ## [Problems with importing data for forecasting](https://discuss.elastic.co/t/problems-with-importing-data-for-forecasting/173633)
**Author:** [@dnv007](https://discuss.elastic.co/u/dnv007)\ **Replies:** 15\ **Last updated:** [March 28, 2019, 4:46pm UTC](https://discuss.elastic.co/t/problems-with-importing-data-for-forecasting/173633 "2019-03-28T16:46:10Z")
Hi All, Super new to ELK. Have set up two VM's on cloud with elasticsearch and Kibana running respectively. I am experimenting with the dashboard and imported an excel sheet which has mysql logs. Was trying to perform… --- ## [Elasticsearch getByID and put going latent](https://discuss.elastic.co/t/elasticsearch-getbyid-and-put-going-latent/170682)
**Author:** [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\ **Replies:** 14\ **Last updated:** [March 6, 2019, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-getbyid-and-put-going-latent/170682 "2019-03-06T06:39:10Z")
Hi, We have a use case where we need to create around 4000 different indices in a cluster. Every index has a different mapping. We were benchmarking elasticsearch 6.6.1 and observed the following. When first created a … --- ## [Highlight stopped working for me](https://discuss.elastic.co/t/highlight-stopped-working-for-me/8484)
**Author:** [@Brandon\_Hilkert](https://discuss.elastic.co/u/Brandon_Hilkert)\ **Replies:** 11\ **Last updated:** [July 23, 2012, 9:45pm UTC](https://discuss.elastic.co/t/highlight-stopped-working-for-me/8484 "2012-07-23T21:45:26Z")
We were previously getting perfectly good highlight results back, changed some queries and now it's not working anymore. here is the query data. Am I missing something? { "query": { "filtered": { "q… --- ## [\[Metricbeat\] Can't apply rollover when creating indexes](https://discuss.elastic.co/t/metricbeat-cant-apply-rollover-when-creating-indexes/306810)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 15\ **Last updated:** [June 16, 2022, 4:16pm UTC](https://discuss.elastic.co/t/metricbeat-cant-apply-rollover-when-creating-indexes/306810 "2022-06-16T16:16:39Z")
Hello, I have a metricbeat deployed in a kubernetes cluster, I'm trying to create, for each kubernetes namespace, a metricbeat index following this pattern: metricbeat-%{\[agent.version\]}-%{\[kubernetes.namespace\]}-{now/d… --- ## [Kibana Ingress in GCP showing backend config as unhealthy eck 1.1.0](https://discuss.elastic.co/t/kibana-ingress-in-gcp-showing-backend-config-as-unhealthy-eck-1-1-0/235514)
**Author:** [@aman26ps](https://discuss.elastic.co/u/aman26ps)\ **Replies:** 9\ **Last updated:** [September 15, 2022, 7:54am UTC](https://discuss.elastic.co/t/kibana-ingress-in-gcp-showing-backend-config-as-unhealthy-eck-1-1-0/235514 "2022-09-15T07:54:27Z")
Hi Team, I had patcheck my eck from 1.0.1 to 1.1.0 and i have added readiness probe in kibana CR , everything was fine , but recently i enabled filerealm with native realm in elasticsearch-cr like this : xpack.securit… --- ## [Total threads in use increases without bound until node crashes](https://discuss.elastic.co/t/total-threads-in-use-increases-without-bound-until-node-crashes/12104)
**Author:** [@Ben\_Siemon](https://discuss.elastic.co/u/Ben_Siemon)\ **Replies:** 17\ **Last updated:** [May 29, 2013, 4:03pm UTC](https://discuss.elastic.co/t/total-threads-in-use-increases-without-bound-until-node-crashes/12104 "2013-05-29T16:03:44Z")
I have a single node setup on a development server. VM name: Java HotSpot(TM) 64-Bit Server VM VM vendor: Sun Microsystems Inc. VM version: 16.3-b01 Java version: 1.6.0\_20 ES Version 0.90.0 When I start the … --- ## [Logstash parsing and Watcher alerting](https://discuss.elastic.co/t/logstash-parsing-and-watcher-alerting/191806)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 15\ **Last updated:** [July 24, 2019, 8:45pm UTC](https://discuss.elastic.co/t/logstash-parsing-and-watcher-alerting/191806 "2019-07-24T20:45:03Z")
Hi everyone! I have kind of these log messages: Jul 23 09:24:16 mmr mmr-core\[4268\]: Processing file \[Aweg3AOMTs\_1563866656876839.mt\], passing to thread \[5147\] Jul 23 09:24:16 mmr mmr-core\[5147\]: Aweg3AOMTs\_15638666568… --- ## [Can we change the base URL of Kibana?](https://discuss.elastic.co/t/can-we-change-the-base-url-of-kibana/213881)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 11\ **Last updated:** [January 8, 2020, 2:13am UTC](https://discuss.elastic.co/t/can-we-change-the-base-url-of-kibana/213881 "2020-01-08T02:13:31Z")
Now: http://localhost:5601/lqx/app/kibana#/dashboard I change kibana ,instead "test" text http://localhost:5601/lqx/app/test#/dashboard --- ## [Auditbeat memory leak in 8.13.0](https://discuss.elastic.co/t/auditbeat-memory-leak-in-8-13-0/357512)
**Author:** [@nemo](https://discuss.elastic.co/u/nemo)\ **Replies:** 25\ **Last updated:** [May 9, 2024, 2:40am UTC](https://discuss.elastic.co/t/auditbeat-memory-leak-in-8-13-0/357512 "2024-05-09T02:40:53Z")
Hi! I use auditbeat v8.13.0, and the memory grows very large. The auditbeat running on a web server with less requests. Below there's some screen shots: --- ## [7.0 Upgrade Assistant](https://discuss.elastic.co/t/7-0-upgrade-assistant/169289)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 9\ **Last updated:** [March 20, 2019, 12:48am UTC](https://discuss.elastic.co/t/7-0-upgrade-assistant/169289 "2019-03-20T00:48:51Z")
Hello World! I'm running Elastic Stack 6.6.1 and per Kibana's 7.0 Upgrade Assistant (Management-\>7.0 Upgrade Assistant), I'm seeing following: Cluster GCS Repository settings changed (Documentation) - warning nodes … --- ## [Time mismatch @timestamp and message](https://discuss.elastic.co/t/time-mismatch-timestamp-and-message/216999)
**Author:** [@faridmmv](https://discuss.elastic.co/u/faridmmv)\ **Replies:** 11\ **Last updated:** [January 31, 2020, 5:37am UTC](https://discuss.elastic.co/t/time-mismatch-timestamp-and-message/216999 "2020-01-31T05:37:45Z")
Hi. How can i configure logstash to have @timestamp and message time equal. My Config is: input { beats { port =\> 5044 } } filter { if \[type\] == "syslog" { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:… --- ## [Can't connect node to cluster on another server](https://discuss.elastic.co/t/cant-connect-node-to-cluster-on-another-server/309432)
**Author:** [@dabit\_coder](https://discuss.elastic.co/u/dabit_coder)\ **Replies:** 9\ **Last updated:** [July 14, 2022, 1:34pm UTC](https://discuss.elastic.co/t/cant-connect-node-to-cluster-on-another-server/309432 "2022-07-14T13:34:30Z")
First of all, I want to be clear that I looked at several guides and suggested similar questions before opening this post, but none of them worked for our case, so I am a bit desperate right now. Here is our situation: … --- ## [Prebuilt ML Jobs cant be activated](https://discuss.elastic.co/t/prebuilt-ml-jobs-cant-be-activated/229138)
**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\ **Replies:** 10\ **Last updated:** [April 25, 2020, 3:58pm UTC](https://discuss.elastic.co/t/prebuilt-ml-jobs-cant-be-activated/229138 "2020-04-25T15:58:50Z")
Hello all, I´m trying to activate all prebuilt Machine Learning Jobs, but cant success it. I Try to active them from the SIEM "Anomalies Detection" menu, but mostly jobs don´t get activated. More properly, I could act… --- ## [Compare 2 fields from separate doc "doc.field1 = doc2.field2"](https://discuss.elastic.co/t/compare-2-fields-from-separate-doc-doc-field1-doc2-field2/39837)
**Author:** [@Anirban\_Chaudhuri](https://discuss.elastic.co/u/Anirban_Chaudhuri)\ **Replies:** 10\ **Last updated:** [January 29, 2016, 8:43pm UTC](https://discuss.elastic.co/t/compare-2-fields-from-separate-doc-doc-field1-doc2-field2/39837 "2016-01-29T20:43:14Z")
Hi, Guess you'll can help...else please point time to the right thread. I want to get the details where I have two documents as below: "index": "mydata2ind1", "\_type": "mytype" and fields as "edt", "u… --- ## [Failed to execute pipeline for a bulk request](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/271290)
**Author:** [@lacarrillo](https://discuss.elastic.co/u/lacarrillo)\ **Replies:** 12\ **Last updated:** [May 4, 2021, 5:43pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/271290 "2021-05-04T17:43:20Z")
Hello everyone. I have a cluster with 20 data nodes with 4 CPU and 16 GB of RAM. I'm indexing in avg 300 million documents per day (500 GB avg ) into this cluster. The cluster works perfectly during most of the day but e… --- ## [I need to get store.size in GB from \_cat/indices for all indices](https://discuss.elastic.co/t/i-need-to-get-store-size-in-gb-from-cat-indices-for-all-indices/352566)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 9\ **Last updated:** [February 7, 2024, 5:30pm UTC](https://discuss.elastic.co/t/i-need-to-get-store-size-in-gb-from-cat-indices-for-all-indices/352566 "2024-02-07T17:30:55Z")
I need to get store.size in GB from \_cat/indices for all indices in order to load the command results in excel and process the results in excel. That's what I need the store.size column to be all rows in the same measur… --- ## [Tesseract-OCR only returns new lines](https://discuss.elastic.co/t/tesseract-ocr-only-returns-new-lines/233960)
**Author:** [@morningkaren](https://discuss.elastic.co/u/morningkaren)\ **Replies:** 9\ **Last updated:** [May 28, 2020, 5:39pm UTC](https://discuss.elastic.co/t/tesseract-ocr-only-returns-new-lines/233960 "2020-05-28T17:39:28Z")
I am using Tesseract-OCR to extract text from pdfs with fscrawler. I have tried configuring \_settings.yaml with the path and data\_path for Tesseract and also tried it without the path and data\_path. However, when I use K… --- ## [Error code when importing csv file with logstash](https://discuss.elastic.co/t/error-code-when-importing-csv-file-with-logstash/150762)
**Author:** [@drr](https://discuss.elastic.co/u/drr)\ **Replies:** 9\ **Last updated:** [October 4, 2018, 10:50am UTC](https://discuss.elastic.co/t/error-code-when-importing-csv-file-with-logstash/150762 "2018-10-04T10:50:17Z")
hi logstash team I am trying to import csv file andI cant figure out why I am getting below error, your help would be greatly appreciated ./logstash -f ../conf/logstash.yml Sending Logstash's logs to /home/d/Documents/… --- ## [Filebeat upgrade requiring multiple restarts](https://discuss.elastic.co/t/filebeat-upgrade-requiring-multiple-restarts/70414)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 9\ **Last updated:** [January 10, 2017, 8:40am UTC](https://discuss.elastic.co/t/filebeat-upgrade-requiring-multiple-restarts/70414 "2017-01-10T08:40:05Z")
I am using filebeat-1.2.3 version which stores info in .filebeat file. Now i am upgrading to 5.1.2 and when i copied .filebeat to data/registry and restarted filebeat filebeat doesnt send any old data as expected. But it… --- ## [Issue with Filebeat Zeek module](https://discuss.elastic.co/t/issue-with-filebeat-zeek-module/353458)
**Author:** [@OwenGauci](https://discuss.elastic.co/u/OwenGauci)\ **Replies:** 17\ **Last updated:** [February 16, 2024, 2:32pm UTC](https://discuss.elastic.co/t/issue-with-filebeat-zeek-module/353458 "2024-02-16T14:32:31Z")
Hi, I Installed Zeek on an Ubuntu 22 VM and would like to send logs to Elasticsearch/Kibana using Filebeat. I followed Zeek Logs Intergation Tutorial but it's not able to send the logs. These are on separate Ubuntu 22 VM… --- ## [Kibana - Region map Vs Maps](https://discuss.elastic.co/t/kibana-region-map-vs-maps/224599)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 9\ **Last updated:** [March 31, 2020, 9:03pm UTC](https://discuss.elastic.co/t/kibana-region-map-vs-maps/224599 "2020-03-31T21:03:41Z")
Hello Team, We had a Region Map which shows how many calls are from different countries in specified interval of time , we were using Destination country code and Origination Country code to represent this data in Regio… --- ## [Mysql database shows only latest record](https://discuss.elastic.co/t/mysql-database-shows-only-latest-record/132831)
**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\ **Replies:** 14\ **Last updated:** [May 23, 2018, 1:26pm UTC](https://discuss.elastic.co/t/mysql-database-shows-only-latest-record/132831 "2018-05-23T13:26:16Z")
Hi, I am using ELK 5.6.8 version. My ELK is running on RedHat machine. When I first run logstash.conf for MySQL database then I was able to see all the records of one table but now I am not able to see all records of on… --- ## [JAR Hell error coming when upgrading from ES 1.x to ES 2.3.5](https://discuss.elastic.co/t/jar-hell-error-coming-when-upgrading-from-es-1-x-to-es-2-3-5/58827)
**Author:** [@Tipra](https://discuss.elastic.co/u/Tipra)\ **Replies:** 11\ **Last updated:** [August 30, 2016, 6:08am UTC](https://discuss.elastic.co/t/jar-hell-error-coming-when-upgrading-from-es-1-x-to-es-2-3-5/58827 "2016-08-30T06:08:32Z")
I am upgrading my ElasticSearch Plugin from ES 1.x to ES 2.3.5 . I made the required changes and build it using Maven. When I tried to install the plugin with ElasticSearch , it threw following error : ERROR: java.la… --- ## [Plugins development - dynamically pupulated param file with bucket and metric lists](https://discuss.elastic.co/t/plugins-development-dynamically-pupulated-param-file-with-bucket-and-metric-lists/106163)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 14\ **Last updated:** [November 24, 2017, 7:48am UTC](https://discuss.elastic.co/t/plugins-development-dynamically-pupulated-param-file-with-bucket-and-metric-lists/106163 "2017-11-24T07:48:40Z")
Hi There, i would like to use the ng-repeat directive in the param file of a plugin i am trying to develop. How can i reference the buckets array and the metrics array in there? i would like to shape the param file (w… --- ## [ES freezes the server at startup](https://discuss.elastic.co/t/es-freezes-the-server-at-startup/3676)
**Author:** [@Godefroy\_2](https://discuss.elastic.co/u/Godefroy_2)\ **Replies:** 10\ **Last updated:** [December 28, 2010, 6:24pm UTC](https://discuss.elastic.co/t/es-freezes-the-server-at-startup/3676 "2010-12-28T18:24:38Z")
Hello, I discovered ElasticSearch few weeks ago and I use it for a new project. It's a great tool ! On my laptop (Ubuntu), I have no problem with ES. But when I try to start ES on a server (Debian), the server to… --- ## [How to create an automated solution for Instance Migration in the case of Allocator Faliures?](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369)
**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\ **Replies:** 18\ **Last updated:** [March 29, 2022, 1:34pm UTC](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369 "2022-03-29T13:34:27Z")
I've found this for the manual method: Move nodes or instances from allocators | Elastic Cloud Enterprise Reference \[3.1\] | Elastic I looked at the APIs here but couldn't find anything relevant to my situation. I'm new… --- ## [Logstash sending less data to ElasticSearch Cluster](https://discuss.elastic.co/t/logstash-sending-less-data-to-elasticsearch-cluster/192749)
**Author:** [@Jitendra\_Kumhar](https://discuss.elastic.co/u/Jitendra_Kumhar)\ **Replies:** 16\ **Last updated:** [August 2, 2019, 11:06am UTC](https://discuss.elastic.co/t/logstash-sending-less-data-to-elasticsearch-cluster/192749 "2019-08-02T11:06:31Z")
Hello, I am sending data from filebeats to a logstash machine and then to ElasticSearch cluster. I have persistent queue enabled on logstash.The queue gets filled very quickly.I can't figure out out reason why it is n… --- ## [Logstash: Index complex structure from jdbc input](https://discuss.elastic.co/t/logstash-index-complex-structure-from-jdbc-input/143447)
**Author:** [@Lucas\_Dehandschutter](https://discuss.elastic.co/u/Lucas_Dehandschutter)\ **Replies:** 12\ **Last updated:** [August 8, 2018, 2:38pm UTC](https://discuss.elastic.co/t/logstash-index-complex-structure-from-jdbc-input/143447 "2018-08-08T14:38:52Z")
Hi, I'd like to inject data from sql databases into Elasticsearch. Let say I have 3 tables: Company, Department and Employee. Each company has several department and each department has several employees. This exampl… --- ## [Kibana isn't seeing/loading indexes after upgrade](https://discuss.elastic.co/t/kibana-isnt-seeing-loading-indexes-after-upgrade/115922)
**Author:** [@Jeremy\_C](https://discuss.elastic.co/u/Jeremy_C)\ **Replies:** 16\ **Last updated:** [January 17, 2018, 9:37pm UTC](https://discuss.elastic.co/t/kibana-isnt-seeing-loading-indexes-after-upgrade/115922 "2018-01-17T21:37:42Z")
Upgraded from 5.6.2 to 6.1.2. I did the manual kibana re-indexing so now I have a ".kibana-6" index. I verified it exists with \_cat/indices. When I go to Kibana it shows no indexes. Since I know the .kibana-6 index … --- ## [Trying to update a document but keep getting validation or parse errors](https://discuss.elastic.co/t/trying-to-update-a-document-but-keep-getting-validation-or-parse-errors/330117)
**Author:** [@bizmate](https://discuss.elastic.co/u/bizmate)\ **Replies:** 9\ **Last updated:** [April 17, 2023, 2:25pm UTC](https://discuss.elastic.co/t/trying-to-update-a-document-but-keep-getting-validation-or-parse-errors/330117 "2023-04-17T14:25:57Z")
I have a set of documents created by filebeat -\> logstash pushed to Elasticsearch and they look like this... { "\_index": "sub\_myapp\_prod-filebeat-7.17.7-2023.04", "\_type": "\_doc", "\_id": "IPLahocBBfkGcvN800\_A", … --- ## [Aggregation retuns null buckets](https://discuss.elastic.co/t/aggregation-retuns-null-buckets/236520)
**Author:** [@Harikrishna\_Sarvaiya](https://discuss.elastic.co/u/Harikrishna_Sarvaiya)\ **Replies:** 9\ **Last updated:** [June 11, 2020, 1:32pm UTC](https://discuss.elastic.co/t/aggregation-retuns-null-buckets/236520 "2020-06-11T13:32:52Z")
I have one query which does aggregation on day interval for specified date range (like last month). Data is sorted based on 'MyUsage' field to return top 5 'FldNameWise'. Problem is it retuns null aggregations for some … --- ## [Logtash is not accepting/recieving syslog sent by linux server](https://discuss.elastic.co/t/logtash-is-not-accepting-recieving-syslog-sent-by-linux-server/66333)
**Author:** [@vivekcts](https://discuss.elastic.co/u/vivekcts)\ **Replies:** 9\ **Last updated:** [November 17, 2016, 5:30pm UTC](https://discuss.elastic.co/t/logtash-is-not-accepting-recieving-syslog-sent-by-linux-server/66333 "2016-11-17T17:30:08Z")
I have configure syslogng to sent syslog to server1 and port 514. but the logtash installed on server1 is not recieving the syslogs on port 514. i have defined input also for the port 514. Pls assist --- ## [APM server tuning for heavy workload](https://discuss.elastic.co/t/apm-server-tuning-for-heavy-workload/324455)
**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\ **Replies:** 11\ **Last updated:** [March 2, 2023, 5:07am UTC](https://discuss.elastic.co/t/apm-server-tuning-for-heavy-workload/324455 "2023-03-02T05:07:14Z")
After deploying elastic cluster for tracing, we see following errors due to heavy workload in APM server/Agents co.elastic.apm.agent.report.ApmServerReporter - dropped events because of full queue: 305 \[elastic-apm-ser… --- ## [Any way to force only primary shards on 1 site/zone?](https://discuss.elastic.co/t/any-way-to-force-only-primary-shards-on-1-site-zone/131098)
**Author:** [@Edmund\_Cheng](https://discuss.elastic.co/u/Edmund_Cheng)\ **Replies:** 11\ **Last updated:** [May 10, 2018, 6:24am UTC](https://discuss.elastic.co/t/any-way-to-force-only-primary-shards-on-1-site-zone/131098 "2018-05-10T06:24:08Z")
Hi, Lets say we have 2 logical sites in a ES cluster. Can we allocate only primary shards on 1 site and only replicas on another ? With the combination of shard awareness I mean.. Thanks.. --- ## [Canvas SQL: Unexpected result of an SQL query](https://discuss.elastic.co/t/canvas-sql-unexpected-result-of-an-sql-query/259386)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 14\ **Last updated:** [January 24, 2021, 2:49pm UTC](https://discuss.elastic.co/t/canvas-sql-unexpected-result-of-an-sql-query/259386 "2021-01-24T14:49:31Z")
Hello everybody, I am trying to display in canvas the users that have more than 10 authentication failed, so I am using this SQL query: SELECT COUNT(\*) as result\_count FROM ( SELECT user.name, COUNT(\*) as result FROM… --- ## [\[ERROR\]\[bootstrap\] {1.2.2}: Initialization Failed ... - NullPointerException\[null\]](https://discuss.elastic.co/t/error-bootstrap-1-2-2-initialization-failed-nullpointerexception-null/18714)
**Author:** [@vjbangis](https://discuss.elastic.co/u/vjbangis)\ **Replies:** 14\ **Last updated:** [July 24, 2014, 4:02am UTC](https://discuss.elastic.co/t/error-bootstrap-1-2-2-initialization-failed-nullpointerexception-null/18714 "2014-07-24T04:02:47Z")
Does anyone experience below elasticsearch\]$ tail -f /var/log/elasticsearch/lastikman.log \[2014-07-17 05:37:01,470\]\[INFO \]\[node \] \[Karma\] version\[ 1.2.2\], pid\[12325\], build\[9902f08/2014-07-09T12:… --- ## [Vega: Collecting data from a visualization data table](https://discuss.elastic.co/t/vega-collecting-data-from-a-visualization-data-table/260724)
**Author:** [@nikita\_zaliven](https://discuss.elastic.co/u/nikita_zaliven)\ **Replies:** 18\ **Last updated:** [January 11, 2021, 3:37pm UTC](https://discuss.elastic.co/t/vega-collecting-data-from-a-visualization-data-table/260724 "2021-01-11T15:37:05Z")
Hello, Using a dashboard, I have one visualization which is a data table. I am trying to figure out if and how it is possible with Vega to load a specific column from the data table in order to use it with another data… --- ## [Converting React JS website to Kibana plugin](https://discuss.elastic.co/t/converting-react-js-website-to-kibana-plugin/311793)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 10\ **Last updated:** [August 18, 2022, 11:30am UTC](https://discuss.elastic.co/t/converting-react-js-website-to-kibana-plugin/311793 "2022-08-18T11:30:21Z")
I have developed a small dashboard and website in React JS. I want to insert it as a plugin into Kibana. I have some queries regarding the same. They are: Can I convert a website to a plugin? Or should I start coding … --- ## [Uax\_url\_email tokenizer](https://discuss.elastic.co/t/uax-url-email-tokenizer/9581)
**Author:** [@smhdiu](https://discuss.elastic.co/u/smhdiu)\ **Replies:** 12\ **Last updated:** [November 14, 2012, 12:31pm UTC](https://discuss.elastic.co/t/uax-url-email-tokenizer/9581 "2012-11-14T12:31:06Z")
Hello can we do uax\_url\_email tokenizer in java api ? if so then how to perform. please suggest. Thanks in advanced Mohsin H -- --- ## [Elasticsearch-hadoop for spark, index documents from a RDD in different index by day: myindex-2014-01-01 for example](https://discuss.elastic.co/t/elasticsearch-hadoop-for-spark-index-documents-from-a-rdd-in-different-index-by-day-myindex-2014-01-01-for-example/21663)
**Author:** [@Julien\_Naour](https://discuss.elastic.co/u/Julien_Naour)\ **Replies:** 9\ **Last updated:** [February 3, 2015, 6:11am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-for-spark-index-documents-from-a-rdd-in-different-index-by-day-myindex-2014-01-01-for-example/21663 "2015-02-03T06:11:35Z")
Hi, I work on a complex workflow using Spark (Parsing, Cleaning, Machine Learning....). At the end of the workflow I want to send aggregated results to elasticsearch so my portal could query data. There will be … --- ## [Unknown target specified: setup](https://discuss.elastic.co/t/unknown-target-specified-setup/160713)
**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\ **Replies:** 9\ **Last updated:** [January 5, 2019, 2:00am UTC](https://discuss.elastic.co/t/unknown-target-specified-setup/160713 "2019-01-05T02:00:40Z")
Hi There, I am trying to create a custom beat and getting below mentioned error while running "make setup" command. ref: https://www.elastic.co/guide/en/beats/devguide/current/setting-up-beat.html "Unknown target speci… [Previous page](https://discuss.elastic.co/top.md?page=161&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=163&per_page=50&period=all)