# Top

**URL:** https://discuss.elastic.co/top.md?page=1624&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1625

---

## [Invalid format exception using Date field in nested mapping](https://discuss.elastic.co/t/invalid-format-exception-using-date-field-in-nested-mapping/78994)

<div class="topic-metadata">

**Author:** [@Saurabh\_2](https://discuss.elastic.co/u/Saurabh_2)\
**Replies:** 3\
**Last updated:** [March 17, 2017, 10:48am UTC](https://discuss.elastic.co/t/invalid-format-exception-using-date-field-in-nested-mapping/78994 "2017-03-17T10:48:47Z")

</div>

I created a mapping for elasticsearch as below: Put testindex1 { "mappings": { "SAX\_GROUPED": { "\_all": { "enabled": false }, "properties": { "key": { "type": "string" }, …

---

## [Json input](https://discuss.elastic.co/t/json-input/77389)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 0\
**Last updated:** [March 4, 2017, 4:38pm UTC](https://discuss.elastic.co/t/json-input/77389 "2017-03-04T16:38:33Z")

</div>

Hi, I have a field from type float in my document. I want to filter in my aggregation data using json input. when running GET my\_index/ \_search, I'm getting this: "kpi": { "mappings": { "Defect": { "PlanEstimate"…

---

## [Mongo DB errors in Kibana](https://discuss.elastic.co/t/mongo-db-errors-in-kibana/49186)

<div class="topic-metadata">

**Author:** [@vadimso](https://discuss.elastic.co/u/vadimso)\
**Replies:** 3\
**Last updated:** [May 5, 2016, 7:39am UTC](https://discuss.elastic.co/t/mongo-db-errors-in-kibana/49186 "2016-05-05T07:39:11Z")

</div>

Hi, Maybe someone have syntax for visualizing Mongo DB errors in Kibana? Tnx

---

## [Restarting ES breaks nested term mapping](https://discuss.elastic.co/t/restarting-es-breaks-nested-term-mapping/24669)

<div class="topic-metadata">

**Author:** [@Grokling](https://discuss.elastic.co/u/Grokling)\
**Replies:** 3\
**Last updated:** [July 1, 2015, 11:03pm UTC](https://discuss.elastic.co/t/restarting-es-breaks-nested-term-mapping/24669 "2015-07-01T23:03:08Z")

</div>

I have Couchdb\_changes in logstash feeding ES. I've got 242 docs being indexed currently in my dev environment. I restarted my ES docker container, and my searches stopped working as they had been. Prior to restartin…

---

## [Performance problems with has parent filter](https://discuss.elastic.co/t/performance-problems-with-has-parent-filter/16698)

<div class="topic-metadata">

**Author:** [@Lauri](https://discuss.elastic.co/u/Lauri)\
**Replies:** 3\
**Last updated:** [April 1, 2014, 2:40pm UTC](https://discuss.elastic.co/t/performance-problems-with-has-parent-filter/16698 "2014-04-01T14:40:31Z")

</div>

Hi, I'm having performance problems with has parent filter. The for the child document is: { "program": { "\_parent": { "type": "series" }, ... } } And for the parent document: { "series": {…

---

## [Preserve Original](https://discuss.elastic.co/t/preserve-original/370394)

<div class="topic-metadata">

**Author:** [@aravindraja](https://discuss.elastic.co/u/aravindraja)\
**Replies:** 1\
**Last updated:** [November 13, 2024, 1:09pm UTC](https://discuss.elastic.co/t/preserve-original/370394 "2024-11-13T13:09:36Z")

</div>

Hi Team, By enabling the preserve original in my integration would actually consume large amount of disk space in my elastic server? Thanks in advance

---

## [Can't enable read only mode](https://discuss.elastic.co/t/cant-enable-read-only-mode/297476)

<div class="topic-metadata">

**Author:** [@Libor\_Chaloupek](https://discuss.elastic.co/u/Libor_Chaloupek)\
**Replies:** 4\
**Last updated:** [February 17, 2022, 3:58pm UTC](https://discuss.elastic.co/t/cant-enable-read-only-mode/297476 "2022-02-17T15:58:45Z")

</div>

Hello there I got stuck after updating Enterprise Search from version 7.14 to 7.17. Based on app-server.log there needs to be migrations performed which is clear. The option 'skip\_read\_only\_check' is on FALSE as per def…

---

## [APM GO Agent Capture instrumented transaction](https://discuss.elastic.co/t/apm-go-agent-capture-instrumented-transaction/293619)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 4\
**Last updated:** [January 21, 2022, 5:42am UTC](https://discuss.elastic.co/t/apm-go-agent-capture-instrumented-transaction/293619 "2022-01-21T05:42:12Z")

</div>

Elasticsearch version: 7.9.2 APM Server version: 7.15.0 APM Agent language and version: Go 1.x "go.elastic.co/apm" \_ "go.elastic.co/apm/module/apmlambda" Instrumented AWS Lambda function using above go apmlambda age…

---

## [Metricbeat prometheus module collector metricset escaping](https://discuss.elastic.co/t/metricbeat-prometheus-module-collector-metricset-escaping/261100)

<div class="topic-metadata">

**Author:** [@4orty](https://discuss.elastic.co/u/4orty)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 5:09am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-module-collector-metricset-escaping/261100 "2021-01-20T05:09:29Z")

</div>

Hi, i'm using metricbeat 7.10.1 and i want to get data with prometheus module(golang prometheus client) and send data to kafka output. Here's my yaml file. metricbeat.yml: |- metricbeat.autodiscover: provid…

---

## [How to filter a field values by 'contains' term](https://discuss.elastic.co/t/how-to-filter-a-field-values-by-contains-term/208629)

<div class="topic-metadata">

**Author:** [@nimrod](https://discuss.elastic.co/u/nimrod)\
**Replies:** 4\
**Last updated:** [November 26, 2019, 1:18pm UTC](https://discuss.elastic.co/t/how-to-filter-a-field-values-by-contains-term/208629 "2019-11-26T13:18:33Z")

</div>

I want to filter out the results by getting all results which their 'testClass' field contains the 'policymanager.ui.common.RulesPageTests' package name. Is there any way querying the results out?

---

## [Auditbeat getsockopt: connection refused](https://discuss.elastic.co/t/auditbeat-getsockopt-connection-refused/183118)

<div class="topic-metadata">

**Author:** [@Richard\_Phillips\_Roy](https://discuss.elastic.co/u/Richard_Phillips_Roy)\
**Replies:** 4\
**Last updated:** [June 5, 2019, 2:56am UTC](https://discuss.elastic.co/t/auditbeat-getsockopt-connection-refused/183118 "2019-06-05T02:56:37Z")

</div>

I'm running elasticsearch and kibana on the host machine and i want to send the auditbeat data from ubuntu running on virtual box to the host machine please help me with it.

---

## [Remove redundancy of data](https://discuss.elastic.co/t/remove-redundancy-of-data/35273)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 4\
**Last updated:** [November 25, 2015, 6:57am UTC](https://discuss.elastic.co/t/remove-redundancy-of-data/35273 "2015-11-25T06:57:15Z")

</div>

Hi, I have import data into elasticSearch and I havn't given unique ID. I want to remove redundant data. Please suggest how can I do that????

---

## [Aggregation on fields](https://discuss.elastic.co/t/aggregation-on-fields/24383)

<div class="topic-metadata">

**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\
**Replies:** 4\
**Last updated:** [June 26, 2015, 12:35pm UTC](https://discuss.elastic.co/t/aggregation-on-fields/24383 "2015-06-26T12:35:39Z")

</div>

Hi , Is it required to have field stored too run the aggregation/facets ? Regards, Nagaraju

---

## [SearchParseExceptions in Marvel monitoring cluster](https://discuss.elastic.co/t/searchparseexceptions-in-marvel-monitoring-cluster/17233)

<div class="topic-metadata">

**Author:** [@Mihir\_M](https://discuss.elastic.co/u/Mihir_M)\
**Replies:** 4\
**Last updated:** [May 2, 2014, 2:56pm UTC](https://discuss.elastic.co/t/searchparseexceptions-in-marvel-monitoring-cluster/17233 "2014-05-02T14:56:21Z")

</div>

Hi, We have 2 Elasticsearch clusters in our development environment. One of them is our development cluster with 9 nodes having - 4 Data nodes (with 4 GB heap) - 3 Master eligible nodes (default heap) - …

---

## [I want tooltip results on click not on hover](https://discuss.elastic.co/t/i-want-tooltip-results-on-click-not-on-hover/311800)

<div class="topic-metadata">

**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\
**Replies:** 5\
**Last updated:** [August 10, 2022, 1:30pm UTC](https://discuss.elastic.co/t/i-want-tooltip-results-on-click-not-on-hover/311800 "2022-08-10T13:30:13Z")

</div>

I'm visualizing Maps on kibana dashboard. in which I get particular results for pointer on mouse hover. I want to get the results on click how I can do that?

---

## [S3 logstash conf grok filter](https://discuss.elastic.co/t/s3-logstash-conf-grok-filter/253357)

<div class="topic-metadata">

**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\
**Replies:** 5\
**Last updated:** [October 28, 2020, 6:43pm UTC](https://discuss.elastic.co/t/s3-logstash-conf-grok-filter/253357 "2020-10-28T18:43:03Z")

</div>

Hello. I want to collect s3 access logs from an s3 bucket and process them to logstash and elasticsearch. I have it working properly but the filter in the logstash conf is not working properly. Currently its giving me t…

---

## [How to match Elasticsearch timestamp to windows format?](https://discuss.elastic.co/t/how-to-match-elasticsearch-timestamp-to-windows-format/251515)

<div class="topic-metadata">

**Author:** [@Enigmatr](https://discuss.elastic.co/u/Enigmatr)\
**Replies:** 5\
**Last updated:** [October 13, 2020, 9:28am UTC](https://discuss.elastic.co/t/how-to-match-elasticsearch-timestamp-to-windows-format/251515 "2020-10-13T09:28:37Z")

</div>

I'm currently trying to parse some logs using Elasticsearch and displaying them on Kibana. I have tried to make sure that the timestamp of the filter in the conf.d file matches the format that is displayed in the log fil…

---

## [If the output of apmserver is not elasticsearch, will the kibana apm ui be empty?](https://discuss.elastic.co/t/if-the-output-of-apmserver-is-not-elasticsearch-will-the-kibana-apm-ui-be-empty/237735)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 5\
**Last updated:** [July 3, 2020, 9:49am UTC](https://discuss.elastic.co/t/if-the-output-of-apmserver-is-not-elasticsearch-will-the-kibana-apm-ui-be-empty/237735 "2020-07-03T09:49:45Z")

</div>

apm-error.conf apm-metric.conf apm-onboarding.conf apm-span.conf apm-transaction.conf I have 5 conf files with contents similar to the following input { kafka { topics =\> "apm-transaction" group\_id =\> "apm\_grou…

---

## [Kibana X-Pack Watcher Problem](https://discuss.elastic.co/t/kibana-x-pack-watcher-problem/158916)

<div class="topic-metadata">

**Author:** [@cemkuleyin](https://discuss.elastic.co/u/cemkuleyin)\
**Replies:** 5\
**Last updated:** [December 10, 2018, 12:02pm UTC](https://discuss.elastic.co/t/kibana-x-pack-watcher-problem/158916 "2018-12-10T12:02:33Z")

</div>

Hi everyone, We want to subscribe xpack. Before the subscribe, we are testing it. Our case, we have a field of process status, we want to fired alarm for success rate. In field, "COMPLETE\_SUCCESS" and "AUTHENTICATION\_…

---

## [How to Restrict Logstash to process new records only after previous record is completely processed](https://discuss.elastic.co/t/how-to-restrict-logstash-to-process-new-records-only-after-previous-record-is-completely-processed/146320)

<div class="topic-metadata">

**Author:** [@Arjun](https://discuss.elastic.co/u/Arjun)\
**Replies:** 5\
**Last updated:** [August 30, 2018, 12:01pm UTC](https://discuss.elastic.co/t/how-to-restrict-logstash-to-process-new-records-only-after-previous-record-is-completely-processed/146320 "2018-08-30T12:01:18Z")

</div>

Hi Team, Whenever new record enters Logstash it should wait until previous record is completely processed only then new record should be processed by Logstash. Please suggest me how to configure this in Logstash. Than…

---

## [Monitoring Stats Explanation](https://discuss.elastic.co/t/monitoring-stats-explanation/124631)

<div class="topic-metadata">

**Author:** [@brandtj](https://discuss.elastic.co/u/brandtj)\
**Replies:** 5\
**Last updated:** [March 27, 2018, 9:10pm UTC](https://discuss.elastic.co/t/monitoring-stats-explanation/124631 "2018-03-27T21:10:24Z")

</div>

I'm trying to understand the monitoring stats. On a mostly unused instance of 6.2.2 I noticed that the number of requests in the last hour are over 3000 and the number of connections are over 7000. Again this is an ins…

---

## [Geoip field scope seperator is "." and not supported as mapping name](https://discuss.elastic.co/t/geoip-field-scope-seperator-is-and-not-supported-as-mapping-name/113723)

<div class="topic-metadata">

**Author:** [@pelesmk](https://discuss.elastic.co/u/pelesmk)\
**Replies:** 5\
**Last updated:** [January 3, 2018, 6:33am UTC](https://discuss.elastic.co/t/geoip-field-scope-seperator-is-and-not-supported-as-mapping-name/113723 "2018-01-03T06:33:04Z")

</div>

I'm using the geoip mapping and everything seems fine, except the geoip ends up using a . as the seperator, example geoip.location, geoip.city\_name, geoip.country\_name. The period is not supported and the error message i…

---

## [Repository creation fails?](https://discuss.elastic.co/t/repository-creation-fails/91758)

<div class="topic-metadata">

**Author:** [@chaitu0292](https://discuss.elastic.co/u/chaitu0292)\
**Replies:** 5\
**Last updated:** [July 4, 2017, 8:55pm UTC](https://discuss.elastic.co/t/repository-creation-fails/91758 "2017-07-04T20:55:03Z")

</div>

nfs is done. we have done it as a non-root user. we were able to create a file and view them on all our mount location. but why ES is throwing this? \[my\_backup\] \[\[aomH3LZ-R7ek7mVm1\_X50w, 'RemoteTransportException\[\[MAST…

---

## [Physically Moving Indices To New Drive](https://discuss.elastic.co/t/physically-moving-indices-to-new-drive/287611)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [October 25, 2021, 5:46pm UTC](https://discuss.elastic.co/t/physically-moving-indices-to-new-drive/287611 "2021-10-25T17:46:02Z")

</div>

I have a need to move where indices are stored to a new drive. How do I go about migrating to the new drive? Change Elasticsearch.yml to the new drive and then reindex all the existing data? I'd hate to do that with t…

---

## [POST Url encoding: how do I encode portions of the URL?](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 5:07pm UTC](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658 "2021-02-18T17:07:55Z")

</div>

With reference to the following documentation: In it, you can copy a POST Url. I would like to add this url to a file, and then tokenise parts of it so that it can be re-used across multiple runs of a Jenkins pipeline. …

---

## [Alert query for multiple indexes](https://discuss.elastic.co/t/alert-query-for-multiple-indexes/228911)

<div class="topic-metadata">

**Author:** [@komal\_d\_patil](https://discuss.elastic.co/u/komal_d_patil)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 10:18am UTC](https://discuss.elastic.co/t/alert-query-for-multiple-indexes/228911 "2020-04-22T10:18:27Z")

</div>

I have an elastic search cluster with multiple indexes for example Index A: { temperature: value, hysteresis: value, } ... Index B: { door: value, level:value } i am using kibana alert plugin for generatin…

---

## [How to export dashboards including visualization, query, index pattern?](https://discuss.elastic.co/t/how-to-export-dashboards-including-visualization-query-index-pattern/167638)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [February 8, 2019, 9:58pm UTC](https://discuss.elastic.co/t/how-to-export-dashboards-including-visualization-query-index-pattern/167638 "2019-02-08T21:58:44Z")

</div>

Hi, I am on 6.5.4. Trying to deal with the new spaces. I imported all metricbeat dashboards into a space called template\_metricbeat. For me are currently only 3 dashboards relevant: So I wanted to export these dash…

---

## [Help with embedded JSON flatten - Ruby Filter](https://discuss.elastic.co/t/help-with-embedded-json-flatten-ruby-filter/166442)

<div class="topic-metadata">

**Author:** [@Frrrrrunkis](https://discuss.elastic.co/u/Frrrrrunkis)\
**Replies:** 1\
**Last updated:** [February 1, 2019, 8:53pm UTC](https://discuss.elastic.co/t/help-with-embedded-json-flatten-ruby-filter/166442 "2019-02-01T20:53:51Z")

</div>

HI All I have been struggling with this json structure for some time now. Im looking for assistance in flattening this json message. I assume that ruby iteration would be needed here but all the examples I try dont …

---

## [Numeral JS custom formatter in TSVB](https://discuss.elastic.co/t/numeral-js-custom-formatter-in-tsvb/112576)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 1\
**Last updated:** [December 20, 2017, 5:23pm UTC](https://discuss.elastic.co/t/numeral-js-custom-formatter-in-tsvb/112576 "2017-12-20T17:23:50Z")

</div>

Hi guys, Here in metric tab of Visual Builder (TSVB), i want to return String on the basis of the returned metric using numeral js in custom formatter. Please help!!! This is what I'm trying to do -\> When passed metric…

---

## [Logstash jdbc - Exception Access Violation jvm.dll](https://discuss.elastic.co/t/logstash-jdbc-exception-access-violation-jvm-dll/86224)

<div class="topic-metadata">

**Author:** [@Alexis\_HONORAT](https://discuss.elastic.co/u/Alexis_HONORAT)\
**Replies:** 1\
**Last updated:** [May 19, 2017, 3:11pm UTC](https://discuss.elastic.co/t/logstash-jdbc-exception-access-violation-jvm-dll/86224 "2017-05-19T15:11:06Z")

</div>

Hello, I'm very new to all this Elasticsearch and logstash stuff. I'm trying to import my SQLServer Database to Elastic Search, and i don't understand well how Logstash work. I found that's i need to use the jdbc plug…

---

## [Kibana plugin:elasticsearch](https://discuss.elastic.co/t/kibana-plugin-elasticsearch/51699)

<div class="topic-metadata">

**Author:** [@Tom-Kun](https://discuss.elastic.co/u/Tom-Kun)\
**Replies:** 1\
**Last updated:** [March 31, 2017, 6:31pm UTC](https://discuss.elastic.co/t/kibana-plugin-elasticsearch/51699 "2017-03-31T18:31:13Z")

</div>

I encountered a problem on Kibana interface where i have a "Statut : Red" with a red warning icon. "This version of Kibana requires Elasticsearch 2.3.0 on all nodes. I found the following incompatible nodes in your clust…

---

## [엘라스틱 쿼리](https://discuss.elastic.co/t/topic/74274)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 1\
**Last updated:** [February 10, 2017, 10:23pm UTC](https://discuss.elastic.co/t/topic/74274 "2017-02-10T22:23:09Z")

</div>

elasticsearch mtermvectors 쿼리

---

## [Logstash s3 plugin poll interval?](https://discuss.elastic.co/t/logstash-s3-plugin-poll-interval/57960)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 1\
**Last updated:** [August 14, 2016, 10:18pm UTC](https://discuss.elastic.co/t/logstash-s3-plugin-poll-interval/57960 "2016-08-14T22:18:58Z")

</div>

How often the s3 input plugin polls for data from s3? Is it real time or there is an interval for the same. -- Niraj

---

## [Can't add a number type for a field](https://discuss.elastic.co/t/cant-add-a-number-type-for-a-field/40105)

<div class="topic-metadata">

**Author:** [@\_Alexwii](https://discuss.elastic.co/u/_Alexwii)\
**Replies:** 1\
**Last updated:** [January 26, 2016, 10:46am UTC](https://discuss.elastic.co/t/cant-add-a-number-type-for-a-field/40105 "2016-01-26T10:46:52Z")

</div>

Hello everyone ! After a update of Kibana, the new feature where we can add a color for number is very important for me and my network team. But where i want a add a field type number Kibana think it's a string... …

---

## [Connection error while Using the Curator Command](https://discuss.elastic.co/t/connection-error-while-using-the-curator-command/39181)

<div class="topic-metadata">

**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\
**Replies:** 1\
**Last updated:** [January 14, 2016, 5:15am UTC](https://discuss.elastic.co/t/connection-error-while-using-the-curator-command/39181 "2016-01-14T05:15:45Z")

</div>

Hi I have installed the curator and PIP. after that i have used curator,curator show command ..They are working fine. But when i try to user other commans like curator show --all-indices iam getting: "I…

---

## [\[Performance\] Which is better update via script or storing the complete object?](https://discuss.elastic.co/t/performance-which-is-better-update-via-script-or-storing-the-complete-object/25936)

<div class="topic-metadata">

**Author:** [@Abhishek\_Gupta](https://discuss.elastic.co/u/Abhishek_Gupta)\
**Replies:** 1\
**Last updated:** [July 20, 2015, 6:31pm UTC](https://discuss.elastic.co/t/performance-which-is-better-update-via-script-or-storing-the-complete-object/25936 "2015-07-20T18:31:38Z")

</div>

There are two options to update an object in ES: 1. using update APIs (via script) 2. storing the complete object again with the id set There are many scenarios when choosing among these two options is easy like: 1. Wh…

---

## [Will logstash duplicate already indexed data in elasticsearch?](https://discuss.elastic.co/t/will-logstash-duplicate-already-indexed-data-in-elasticsearch/25394)

<div class="topic-metadata">

**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\
**Replies:** 1\
**Last updated:** [July 12, 2015, 7:31pm UTC](https://discuss.elastic.co/t/will-logstash-duplicate-already-indexed-data-in-elasticsearch/25394 "2015-07-12T19:31:47Z")

</div>

Versions Windows 7 elasticsearch v1.6.0 logstash v1.5.2 kibana v4.1.0 Background Right now I am just working on a proof of concept locally and am not using a Logstash Forwarder. I am manually running logstash from the…

---

## [Invalid character 'x' in string escape code; pipeline/output.go:92 Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/invalid-character-x-in-string-escape-code-pipeline-output-go-92-failed-to-publish-events-temporary-bulk-send-failure/217608)

<div class="topic-metadata">

**Author:** [@adeel109](https://discuss.elastic.co/u/adeel109)\
**Replies:** 0\
**Last updated:** [February 3, 2020, 10:54am UTC](https://discuss.elastic.co/t/invalid-character-x-in-string-escape-code-pipeline-output-go-92-failed-to-publish-events-temporary-bulk-send-failure/217608 "2020-02-03T10:54:59Z")

</div>

Hi All, I am getting below error when starting filebeat: 2020-02-03T10:31:21.416Z ERROR reader/json.go:32 Error decoding JSON: invalid character 'x' in string escape code 2020-02-03T10:31:22.467Z INFO elasticsearch/c…

---

## [How to exclude certain fields from APM logs](https://discuss.elastic.co/t/how-to-exclude-certain-fields-from-apm-logs/253068)

<div class="topic-metadata">

**Author:** [@vabnix](https://discuss.elastic.co/u/vabnix)\
**Replies:** 2\
**Last updated:** [November 5, 2020, 6:14pm UTC](https://discuss.elastic.co/t/how-to-exclude-certain-fields-from-apm-logs/253068 "2020-11-05T18:14:28Z")

</div>

my company recently started using Elastic Cloud APM. I am looking for some guidance on how to exclude certain fields to be available when seeing the logs from APM like http.request.body.original

---

## [Filebeat 7.5.1 Missing a step for custom index names config?](https://discuss.elastic.co/t/filebeat-7-5-1-missing-a-step-for-custom-index-names-config/215044)

<div class="topic-metadata">

**Author:** [@cgutshall](https://discuss.elastic.co/u/cgutshall)\
**Replies:** 2\
**Last updated:** [January 15, 2020, 3:51pm UTC](https://discuss.elastic.co/t/filebeat-7-5-1-missing-a-step-for-custom-index-names-config/215044 "2020-01-15T15:51:32Z")

</div>

I have the following set it my filebeat.yml config file, which should allow me to see dev-\* index in kibana. However these are still showing as filebeat-\*. Is there something Im missing based on the docs and the referenc…

---

## [Custom Elastic and kibana plugin support](https://discuss.elastic.co/t/custom-elastic-and-kibana-plugin-support/190304)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 2\
**Last updated:** [July 15, 2019, 11:52am UTC](https://discuss.elastic.co/t/custom-elastic-and-kibana-plugin-support/190304 "2019-07-15T11:52:09Z")

</div>

Hello Just wondering on the status of adding custom kibana and elastic plugins are to a cluster in ece. There some documentation https://www.elastic.co/guide/en/cloud/current/ec-custom-bundles.html but that looks like …

---

## [Jdbc input plugin for influxdb](https://discuss.elastic.co/t/jdbc-input-plugin-for-influxdb/172454)

<div class="topic-metadata">

**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\
**Replies:** 2\
**Last updated:** [March 15, 2019, 2:08pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-for-influxdb/172454 "2019-03-15T14:08:07Z")

</div>

hello, i am currently looking for way to transfer data from influxdb to elasticsearch. it should be performed every couple seconds likely realtime. i found below link but there is no explain about if it supports influx…

---

## [Not getting a listening port for Beats Input with Logstash](https://discuss.elastic.co/t/not-getting-a-listening-port-for-beats-input-with-logstash/161759)

<div class="topic-metadata">

**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\
**Replies:** 2\
**Last updated:** [January 2, 2019, 6:19pm UTC](https://discuss.elastic.co/t/not-getting-a-listening-port-for-beats-input-with-logstash/161759 "2019-01-02T18:19:16Z")

</div>

Hello, I have logstash installed in my enviornment and it currently only has 1 pipeline setup for syslog messages, this one pipeline is sucessfully opening a listening port for the logs to be received. I setup a second…

---

## [Azure Kubernetes Service - Elasticsearch](https://discuss.elastic.co/t/azure-kubernetes-service-elasticsearch/162530)

<div class="topic-metadata">

**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\
**Replies:** 2\
**Last updated:** [January 1, 2019, 4:52am UTC](https://discuss.elastic.co/t/azure-kubernetes-service-elasticsearch/162530 "2019-01-01T04:52:59Z")

</div>

Hi, Anyone tried setting up Elasticsearch cluster on Azure Kubernetes Service with the docker images available from Elasticsearch. How doe the overall manageability experience looks like? Thanks Imran

---

## [Elastic Search 6.4.2 Primary shards on same node](https://discuss.elastic.co/t/elastic-search-6-4-2-primary-shards-on-same-node/152391)

<div class="topic-metadata">

**Author:** [@Neha\_Sharma1](https://discuss.elastic.co/u/Neha_Sharma1)\
**Replies:** 2\
**Last updated:** [October 15, 2018, 5:30am UTC](https://discuss.elastic.co/t/elastic-search-6-4-2-primary-shards-on-same-node/152391 "2018-10-15T05:30:46Z")

</div>

We have 15 Tb data for approx. 100 indexes (with multiple shards and 1 replica). We have 6 data nodes. The problem we are facing is that sometimes a single node has all primary shards which increase the IOPS load on the …

---

## [Hiding some top navbar links like share,clone and edit from a plugin in kibana 6.2](https://discuss.elastic.co/t/hiding-some-top-navbar-links-like-share-clone-and-edit-from-a-plugin-in-kibana-6-2/122756)

<div class="topic-metadata">

**Author:** [@Sunny\_Sachan](https://discuss.elastic.co/u/Sunny_Sachan)\
**Replies:** 2\
**Last updated:** [March 23, 2018, 6:31am UTC](https://discuss.elastic.co/t/hiding-some-top-navbar-links-like-share-clone-and-edit-from-a-plugin-in-kibana-6-2/122756 "2018-03-23T06:31:37Z")

</div>

Hi Team, I am using the below mentioned way for registering my new links to top-nav bar which is successfully working for adding new links from my plugin but now I want to figure out if I can use the below code for disa…

---

## [Logstash-5.6.2 jruby error](https://discuss.elastic.co/t/logstash-5-6-2-jruby-error/102786)

<div class="topic-metadata">

**Author:** [@sidra\_89](https://discuss.elastic.co/u/sidra_89)\
**Replies:** 2\
**Last updated:** [October 5, 2017, 9:53am UTC](https://discuss.elastic.co/t/logstash-5-6-2-jruby-error/102786 "2017-10-05T09:53:27Z")

</div>

not able to run logstash keep on getting jrudy error the below image show the details using windows 10 and java 9 \[image\]

---

## [Please distribute libjffi-1.2.so for s390x](https://discuss.elastic.co/t/please-distribute-libjffi-1-2-so-for-s390x/102304)

<div class="topic-metadata">

**Author:** [@benjsmi](https://discuss.elastic.co/u/benjsmi)\
**Replies:** 2\
**Last updated:** [October 2, 2017, 1:51pm UTC](https://discuss.elastic.co/t/please-distribute-libjffi-1-2-so-for-s390x/102304 "2017-10-02T13:51:53Z")

</div>

When I download the latest stable Logstash from here, which at the time of writing is v5.6.2, I see a structure of folders that has me perplexed. There is a compiled shared object binary called libjffi that is required …

---

## [Starting filebeat documentation is really confusing](https://discuss.elastic.co/t/starting-filebeat-documentation-is-really-confusing/69067)

<div class="topic-metadata">

**Author:** [@Elhanan\_Maayan](https://discuss.elastic.co/u/Elhanan_Maayan)\
**Replies:** 2\
**Last updated:** [December 17, 2016, 4:01pm UTC](https://discuss.elastic.co/t/starting-filebeat-documentation-is-really-confusing/69067 "2016-12-17T16:01:26Z")

</div>

hi.. the docs in filebeat can be really confusing for example: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-command-line.html "To start Filebeat, you must use the -c config/path option to specify th…

---

## [Dashes in hostname splits Vertical bar chart?](https://discuss.elastic.co/t/dashes-in-hostname-splits-vertical-bar-chart/63056)

<div class="topic-metadata">

**Author:** [@Nadir](https://discuss.elastic.co/u/Nadir)\
**Replies:** 2\
**Last updated:** [October 14, 2016, 4:17pm UTC](https://discuss.elastic.co/t/dashes-in-hostname-splits-vertical-bar-chart/63056 "2016-10-14T16:17:30Z")

</div>

Hi ! My hostnames follow the format COUNTRYCODE-CITYCODE-NAME ( e.g: GE-HAM-SWSUS ) . When I create a vertical bar chart and use the hostname for the split chart option to get more servers monitored on the dashboard…

[Previous page](https://discuss.elastic.co/top.md?page=1623&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1625&per_page=50&period=all)
