# Top

**URL:** https://discuss.elastic.co/top.md?page=1641&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1642

---

## [Logstash can't communicate with working Elasticsearch instance](https://discuss.elastic.co/t/logstash-cant-communicate-with-working-elasticsearch-instance/72588)

<div class="topic-metadata">

**Author:** [@mormori0n](https://discuss.elastic.co/u/mormori0n)\
**Replies:** 1\
**Last updated:** [January 24, 2017, 8:58am UTC](https://discuss.elastic.co/t/logstash-cant-communicate-with-working-elasticsearch-instance/72588 "2017-01-24T08:58:35Z")

</div>

I trying to start ELK stack on docker for collecting netflow data from Cisco routers and use for it blacktop/elastic, blacktop/kibana. For logstash I modified blacktop's logstash with netflow codec plugin Dockerfile: …

---

## [Logstash errors out-Couldn't find any input plugin named 'beats'](https://discuss.elastic.co/t/logstash-errors-out-couldnt-find-any-input-plugin-named-beats/70987)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 1\
**Last updated:** [January 9, 2017, 7:28pm UTC](https://discuss.elastic.co/t/logstash-errors-out-couldnt-find-any-input-plugin-named-beats/70987 "2017-01-09T19:28:09Z")

</div>

here is the logstash conf file input { beats { port =\> 5044 } } filter { csv { columns =\> \[ "date", "time", "s-sitename", "s-ip", "cs-method", "cs-uri-stem", "cs-uri-query", "s-port", "cs-username", "c-ip…

---

## [Indexing a local xml-file](https://discuss.elastic.co/t/indexing-a-local-xml-file/66710)

<div class="topic-metadata">

**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\
**Replies:** 1\
**Last updated:** [November 21, 2016, 4:55pm UTC](https://discuss.elastic.co/t/indexing-a-local-xml-file/66710 "2016-11-21T16:55:57Z")

</div>

Hi, I have experience with indexing csv-files into elasticsearch but not with local xml-files. I am following this tutorial which explains how to index xml-data from a website with Logstash. My environment does not …

---

## [Questions about scaling elasticsearch with regard to the number of documents indexed per second](https://discuss.elastic.co/t/questions-about-scaling-elasticsearch-with-regard-to-the-number-of-documents-indexed-per-second/21652)

<div class="topic-metadata">

**Author:** [@Chinch\_Pokli](https://discuss.elastic.co/u/Chinch_Pokli)\
**Replies:** 7\
**Last updated:** [January 15, 2015, 2:55pm UTC](https://discuss.elastic.co/t/questions-about-scaling-elasticsearch-with-regard-to-the-number-of-documents-indexed-per-second/21652 "2015-01-15T14:55:19Z")

</div>

Hi, I am using elasticsearch to index twitter stream. Until recently I was using the official river which was working great but realized that it throwing out much of the data (e.g. it is not storing number of foll…

---

## [Updating the fields in index](https://discuss.elastic.co/t/updating-the-fields-in-index/5232)

<div class="topic-metadata">

**Author:** [@arien](https://discuss.elastic.co/u/arien)\
**Replies:** 7\
**Last updated:** [August 29, 2011, 9:41am UTC](https://discuss.elastic.co/t/updating-the-fields-in-index/5232 "2011-08-29T09:41:59Z")

</div>

Hi all; To provide the general idea about the problem i m facing,i m giving an example of very simple form of index generation as per the tutorial. lets say i have created an index with some fields as; curl -XPUT…

---

## [How to pass specific characters password to ElasticSearch through Sulu/ArticleBundle](https://discuss.elastic.co/t/how-to-pass-specific-characters-password-to-elasticsearch-through-sulu-articlebundle/352544)

<div class="topic-metadata">

**Author:** [@Agdi](https://discuss.elastic.co/u/Agdi)\
**Replies:** 6\
**Last updated:** [February 6, 2024, 9:24am UTC](https://discuss.elastic.co/t/how-to-pass-specific-characters-password-to-elasticsearch-through-sulu-articlebundle/352544 "2024-02-06T09:24:18Z")

</div>

Elasticsearch Version 6.8.0 Installed Plugins Sulu - SuluArticle/Bundle Java Version bundled OS Version Ubuntu 20.04 Problem Description I'm working on a project using Sulu 2.4.15 - php 8.2 - Symfony 5.5 - Sulu/Artic…

---

## [I amm trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this?](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636)

<div class="topic-metadata">

**Author:** [@Gw\_Do](https://discuss.elastic.co/u/Gw_Do)\
**Replies:** 6\
**Last updated:** [February 7, 2022, 5:37pm UTC](https://discuss.elastic.co/t/i-amm-trying-to-access-the-public-dns-for-the-lab-of-the-ece-fundamentals-and-i-am-prompted-for-a-username-password-where-can-i-find-this/295636 "2022-02-07T17:37:54Z")

</div>

HI, I am trying to access the public DNS for the lab of the ECE fundamentals and I am prompted for a username/password. Where can I find this? Thank you, Gwen

---

## [12K fields in the mapping](https://discuss.elastic.co/t/12k-fields-in-the-mapping/293340)

<div class="topic-metadata">

**Author:** [@orips](https://discuss.elastic.co/u/orips)\
**Replies:** 6\
**Last updated:** [January 11, 2022, 8:35am UTC](https://discuss.elastic.co/t/12k-fields-in-the-mapping/293340 "2022-01-11T08:35:28Z")

</div>

Hi, We're approaching 12K fields in our mapping. Our cluster does not have many documents (it's about 1 billion, and it's doc one per user, so it's not growing very rapidly). I'd like to know: how much further can we g…

---

## [In RHEL OS Kibana stop results in core dump generation](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009)

<div class="topic-metadata">

**Author:** [@gora](https://discuss.elastic.co/u/gora)\
**Replies:** 6\
**Last updated:** [June 8, 2021, 6:30am UTC](https://discuss.elastic.co/t/in-rhel-os-kibana-stop-results-in-core-dump-generation/274009 "2021-06-08T06:30:46Z")

</div>

In RHEL OS, when we try to stop kibana it results in core dump generation. OS Version: RHEL 7.8 While checking the log it shows the node process which is running received SIG QUIT signal. This is happening particularl…

---

## [How to find difference in ingested logs using Kibana visualization?](https://discuss.elastic.co/t/how-to-find-difference-in-ingested-logs-using-kibana-visualization/228944)

<div class="topic-metadata">

**Author:** [@rajdevworks](https://discuss.elastic.co/u/rajdevworks)\
**Replies:** 6\
**Last updated:** [April 24, 2020, 4:03am UTC](https://discuss.elastic.co/t/how-to-find-difference-in-ingested-logs-using-kibana-visualization/228944 "2020-04-24T04:03:28Z")

</div>

I have a continuous stream of logs being ingested in ELK stack and created visualizations in Kibana view for monitoring purposes. The logs are ingested from an server application which receives HTTP requests from client. …

---

## [Help with Query (From SQL to Elastic query)](https://discuss.elastic.co/t/help-with-query-from-sql-to-elastic-query/62881)

<div class="topic-metadata">

**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 6\
**Last updated:** [October 13, 2016, 11:44am UTC](https://discuss.elastic.co/t/help-with-query-from-sql-to-elastic-query/62881 "2016-10-13T11:44:45Z")

</div>

How can I write elastic query for below SQL query Select from myindex where data \> last\_one\_dat and (property1 \>= 0 OR property2 \>=0 ) data is in milliseconds. Regards,

---

## [Elasticsearch threads behaves different from each other](https://discuss.elastic.co/t/elasticsearch-threads-behaves-different-from-each-other/19954)

<div class="topic-metadata">

**Author:** [@Umut\_Yerci](https://discuss.elastic.co/u/Umut_Yerci)\
**Replies:** 6\
**Last updated:** [September 26, 2014, 7:20am UTC](https://discuss.elastic.co/t/elasticsearch-threads-behaves-different-from-each-other/19954 "2014-09-26T07:20:55Z")

</div>

Elasticsearch runs on my low-configured system which has 4G memory and 4 cores CPUs. I get high-cpu usage problem with ES. Even after closing analyzer(s), reduce threads size and etc. While anaylzing the situatio…

---

## [Realtime search + fast indexing](https://discuss.elastic.co/t/realtime-search-fast-indexing/18349)

<div class="topic-metadata">

**Author:** [@Nico\_Krijnen](https://discuss.elastic.co/u/Nico_Krijnen)\
**Replies:** 6\
**Last updated:** [July 2, 2014, 12:26pm UTC](https://discuss.elastic.co/t/realtime-search-fast-indexing/18349 "2014-07-02T12:26:26Z")

</div>

Hi, We have recently migrated our application from 'bare Lucene + Zoie for realtime search' to Elastic Search. Elastic search is awesome and next to scalability, it gives us lots of additional features. The one th…

---

## [Logstash delay](https://discuss.elastic.co/t/logstash-delay/313991)

<div class="topic-metadata">

**Author:** [@tom.verbeek](https://discuss.elastic.co/u/tom.verbeek)\
**Replies:** 2\
**Last updated:** [September 8, 2022, 1:03pm UTC](https://discuss.elastic.co/t/logstash-delay/313991 "2022-09-08T13:03:31Z")

</div>

Hi, I have a problem with logs being ingested into elastic with a delay. This delay does not start from the beginning but it builds up. Right now the delay is 1 day and 10 hours. We checked the Source device sending th…

---

## [Agent.Tracer.CaptureException throws NullReferenceException if Agent is disabled](https://discuss.elastic.co/t/agent-tracer-captureexception-throws-nullreferenceexception-if-agent-is-disabled/288883)

<div class="topic-metadata">

**Author:** [@lken0815](https://discuss.elastic.co/u/lken0815)\
**Replies:** 2\
**Last updated:** [November 11, 2021, 8:35am UTC](https://discuss.elastic.co/t/agent-tracer-captureexception-throws-nullreferenceexception-if-agent-is-disabled/288883 "2021-11-11T08:35:46Z")

</div>

Kibana version: N/A Elasticsearch version: N/A APM Server version: 7.15.0 APM Agent language and version: c# .Net Core 3.1, v1.11.1 Browser version: N/A Original install method (e.g. download page, yum, deb, from s…

---

## [Kibana and reverse proxy nginx](https://discuss.elastic.co/t/kibana-and-reverse-proxy-nginx/248460)

<div class="topic-metadata">

**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\
**Replies:** 2\
**Last updated:** [September 14, 2020, 12:39pm UTC](https://discuss.elastic.co/t/kibana-and-reverse-proxy-nginx/248460 "2020-09-14T12:39:12Z")

</div>

Hi everybody i have a cluster elasticsearch of 3 nodes and two instance of kibana installed on two differents machines for loadbalancing with nginx reverse proxy , i access to kibana UI to login but when i enter my logi…

---

## [Different number of hits for the same time range](https://discuss.elastic.co/t/different-number-of-hits-for-the-same-time-range/244912)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 11:59am UTC](https://discuss.elastic.co/t/different-number-of-hits-for-the-same-time-range/244912 "2020-08-17T11:59:58Z")

</div>

As I am using the same time range for the same query, it is returning different numbers of hits on re-query. { "size": "0", "query": { "bool": { "must": \[ { "range": { "timest…

---

## [Logstash - Elasticsearch filter plugin with basic authentication](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-with-basic-authentication/203473)

<div class="topic-metadata">

**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\
**Replies:** 2\
**Last updated:** [July 3, 2020, 1:13pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-with-basic-authentication/203473 "2020-07-03T13:13:29Z")

</div>

Hi all, I have a problem with the Logstash elasticsearch filter plugin when using basic authentication. I have created a specific user called "logstash\_internal\_reader" which has the built-in logstash\_admin role and a …

---

## [Creating cases from signals](https://discuss.elastic.co/t/creating-cases-from-signals/238315)

<div class="topic-metadata">

**Author:** [@forkhead](https://discuss.elastic.co/u/forkhead)\
**Replies:** 2\
**Last updated:** [June 23, 2020, 9:43pm UTC](https://discuss.elastic.co/t/creating-cases-from-signals/238315 "2020-06-23T21:43:48Z")

</div>

Hi, I am trying to understand a couple of things with Detections and Cases in Elastic SIEM - Is there a way to automatically create cases for some rule detections ? Is there a way to store or create Case Templates in C…

---

## [Watcher Not Trigger for CPU utilization](https://discuss.elastic.co/t/watcher-not-trigger-for-cpu-utilization/136960)

<div class="topic-metadata">

**Author:** [@Pushpak\_Bhawsar](https://discuss.elastic.co/u/Pushpak_Bhawsar)\
**Replies:** 2\
**Last updated:** [June 22, 2018, 12:55pm UTC](https://discuss.elastic.co/t/watcher-not-trigger-for-cpu-utilization/136960 "2018-06-22T12:55:20Z")

</div>

Hello, I am trying to set a metricbeat watcher to get CPU utilization for a host, but it is not triggering. Below is the JSON and the simulate result, Kindly suggest what am I missing or doing wrong: JSON: { "trigger…

---

## [License problem foe xpack for logstash-6.2.2](https://discuss.elastic.co/t/license-problem-foe-xpack-for-logstash-6-2-2/124544)

<div class="topic-metadata">

**Author:** [@kanchan\_pingale](https://discuss.elastic.co/u/kanchan_pingale)\
**Replies:** 2\
**Last updated:** [March 20, 2018, 9:17am UTC](https://discuss.elastic.co/t/license-problem-foe-xpack-for-logstash-6-2-2/124544 "2018-03-20T09:17:23Z")

</div>

Once I start logstash, the error is as follows: Elasticsearch at URL 'http://localhost:9200/\_xpack' \[2018-03-19T04:33:00,946\]\[ERROR\]\[logstash.licensechecker.licensemanager\] Unable to retrieve license information from l…

---

## [Unified highlighter on postings or term\_vector fields?](https://discuss.elastic.co/t/unified-highlighter-on-postings-or-term-vector-fields/114614)

<div class="topic-metadata">

**Author:** [@aslamy](https://discuss.elastic.co/u/aslamy)\
**Replies:** 2\
**Last updated:** [January 16, 2018, 10:01am UTC](https://discuss.elastic.co/t/unified-highlighter-on-postings-or-term-vector-fields/114614 "2018-01-16T10:01:54Z")

</div>

Hi ! Should I use a unified highlighter on postings or term\_vector fields? Which one gives the fastest highlighter? I have documents with large text fields that will be highlighted.

---

## [Racing with multiple laps - Metrics Calculation](https://discuss.elastic.co/t/racing-with-multiple-laps-metrics-calculation/77706)

<div class="topic-metadata">

**Author:** [@Keyur\_Doshi](https://discuss.elastic.co/u/Keyur_Doshi)\
**Replies:** 2\
**Last updated:** [March 8, 2017, 3:05pm UTC](https://discuss.elastic.co/t/racing-with-multiple-laps-metrics-calculation/77706 "2017-03-08T15:05:47Z")

</div>

Hello, I've two questions on Metrics calculation. A. Would like to know more about how metrics in Final score are calculated when raced with multiple laps. I was under the assumption that the final score would be t…

---

## [Logstash Anonymize plugin](https://discuss.elastic.co/t/logstash-anonymize-plugin/63132)

<div class="topic-metadata">

**Author:** [@krlplm](https://discuss.elastic.co/u/krlplm)\
**Replies:** 2\
**Last updated:** [October 17, 2016, 6:29am UTC](https://discuss.elastic.co/t/logstash-anonymize-plugin/63132 "2016-10-17T06:29:32Z")

</div>

Hi, I am new to ELK and working on an assignment to anonymize few fields. I could successfully perform this action however is there a way if Logstash/Elasticsearch has a table having Field Value -\> Hash mapping in orde…

---

## [Running Kibana 4.2 as client](https://discuss.elastic.co/t/running-kibana-4-2-as-client/48532)

<div class="topic-metadata">

**Author:** [@Dhivakar\_Asokan](https://discuss.elastic.co/u/Dhivakar_Asokan)\
**Replies:** 2\
**Last updated:** [April 28, 2016, 9:03am UTC](https://discuss.elastic.co/t/running-kibana-4-2-as-client/48532 "2016-04-28T09:03:57Z")

</div>

Till Kibana 4.1.6 I was able to run Kibana as a static version by running the src-\>public folder in my tomcat and making few changes in index.js But I am not able to do it after 4.2 Release since I am not able to find …

---

## [Query in upgrading from 1.7.1 to 2.3.1version of ElasticSearch](https://discuss.elastic.co/t/query-in-upgrading-from-1-7-1-to-2-3-1version-of-elasticsearch/47831)

<div class="topic-metadata">

**Author:** [@kannans](https://discuss.elastic.co/u/kannans)\
**Replies:** 2\
**Last updated:** [April 20, 2016, 4:14am UTC](https://discuss.elastic.co/t/query-in-upgrading-from-1-7-1-to-2-3-1version-of-elasticsearch/47831 "2016-04-20T04:14:42Z")

</div>

Currently we are using ElasticSearch 1.7.1, we have planned to upgrade to 2.3.1 and we have done all of the steps as mentioned in the ES 2.3.1 upgrading help documentations. After we initiated the upgrade, 2.3.1 cluste…

---

## [Fleet server problem](https://discuss.elastic.co/t/fleet-server-problem/289654)

<div class="topic-metadata">

**Author:** [@dzsonaszg](https://discuss.elastic.co/u/dzsonaszg)\
**Replies:** 3\
**Last updated:** [December 2, 2021, 8:19pm UTC](https://discuss.elastic.co/t/fleet-server-problem/289654 "2021-12-02T20:19:35Z")

</div>

Hello, My Feelt server is missing from the agent list, and if i try to reistall, i get this message. Now my agents are working correctly. On my endpoints the enrollment works just fine, but not the endpoint security as…

---

## [Questions on getting started with ELK](https://discuss.elastic.co/t/questions-on-getting-started-with-elk/263194)

<div class="topic-metadata">

**Author:** [@Anita2](https://discuss.elastic.co/u/Anita2)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 4:46am UTC](https://discuss.elastic.co/t/questions-on-getting-started-with-elk/263194 "2021-02-08T04:46:28Z")

</div>

For reference, I have followed this guide to get me started: Hello, I'm extremely new to ELK, as in I have just now installed everything, as I will be needing it for a research project. My current goal is to be able t…

---

## [Logstash beats input cant start with ssl enabled](https://discuss.elastic.co/t/logstash-beats-input-cant-start-with-ssl-enabled/249633)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 7:10am UTC](https://discuss.elastic.co/t/logstash-beats-input-cant-start-with-ssl-enabled/249633 "2020-09-28T07:10:50Z")

</div>

I would like to make secure connection between fielbeat and logstash. Both version 7.8.1. input { beats { port =\> 5000 ssl =\> true ssl\_certificate =\> "/ssl/instance.crt" ssl\_key =\> "/ssl/instance.key" …

---

## [How to write a Multiple input and logstash filter for hostname based on message field](https://discuss.elastic.co/t/how-to-write-a-multiple-input-and-logstash-filter-for-hostname-based-on-message-field/145843)

<div class="topic-metadata">

**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\
**Replies:** 0\
**Last updated:** [August 24, 2018, 6:13am UTC](https://discuss.elastic.co/t/how-to-write-a-multiple-input-and-logstash-filter-for-hostname-based-on-message-field/145843 "2018-08-24T06:13:00Z")

</div>

As a newbie to logstash i would like to understand as i have two types of logs one is Linux system logs and another i have CISCO switches logs , now i'm looking forward to create the diffrent input and filter's for both. …

---

## [ResourceWatcherService Exception even on changing the permissions](https://discuss.elastic.co/t/resourcewatcherservice-exception-even-on-changing-the-permissions/135868)

<div class="topic-metadata">

**Author:** [@emanzaman](https://discuss.elastic.co/u/emanzaman)\
**Replies:** 3\
**Last updated:** [June 18, 2018, 12:18pm UTC](https://discuss.elastic.co/t/resourcewatcherservice-exception-even-on-changing-the-permissions/135868 "2018-06-18T12:18:00Z")

</div>

I have changed permission for the scripts directory to "drwxrwxr-x". But still getting the following exception: failed to run scheduled task \[org.elasticsearch.watcher.ResourceWatcherService$ResourceMonitor@3f813572\] on…

---

## [Arithmetical operations on fields?](https://discuss.elastic.co/t/arithmetical-operations-on-fields/87446)

<div class="topic-metadata">

**Author:** [@fbonningues](https://discuss.elastic.co/u/fbonningues)\
**Replies:** 3\
**Last updated:** [May 29, 2017, 4:29pm UTC](https://discuss.elastic.co/t/arithmetical-operations-on-fields/87446 "2017-05-29T16:29:21Z")

</div>

Hi, I currently using metricbeat-5.4. I monitor some metrics and I add some fields on documents but can I make some arithmetical operations on fields ? Thanks

---

## [Help about the Filter aggregation in Kibana](https://discuss.elastic.co/t/help-about-the-filter-aggregation-in-kibana/35221)

<div class="topic-metadata">

**Author:** [@sepide\_sinaei](https://discuss.elastic.co/u/sepide_sinaei)\
**Replies:** 3\
**Last updated:** [November 25, 2015, 6:52am UTC](https://discuss.elastic.co/t/help-about-the-filter-aggregation-in-kibana/35221 "2015-11-25T06:52:51Z")

</div>

Hello, I have a problem to know how to insert the Filters aggregation in Kibana My data has a field that name is "Text" that is string and contains some words I want to apply a filter in this way: 1) Text fields…

---

## [Upgrading (Critical Deprecations...)](https://discuss.elastic.co/t/upgrading-critical-deprecations/383424)

<div class="topic-metadata">

**Author:** [@Hannah\_J\_Swystun](https://discuss.elastic.co/u/Hannah_J_Swystun)\
**Replies:** 6\
**Last updated:** [November 14, 2025, 1:27pm UTC](https://discuss.elastic.co/t/upgrading-critical-deprecations/383424 "2025-11-14T13:27:13Z")

</div>

Hello everybody, I would like to upgrade from v.8.17.0 to 8.19.4 do this criticals deprecation issues will block my upgrade please ?

---

## [Dealing with False Positives](https://discuss.elastic.co/t/dealing-with-false-positives/292941)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 1\
**Last updated:** [December 29, 2021, 1:50pm UTC](https://discuss.elastic.co/t/dealing-with-false-positives/292941 "2021-12-29T13:50:59Z")

</div>

Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently…

---

## [Runtime: out of memory Multiline filebeats](https://discuss.elastic.co/t/runtime-out-of-memory-multiline-filebeats/232848)

<div class="topic-metadata">

**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\
**Replies:** 1\
**Last updated:** [May 15, 2020, 7:45pm UTC](https://discuss.elastic.co/t/runtime-out-of-memory-multiline-filebeats/232848 "2020-05-15T19:45:02Z")

</div>

Hi folks, I need help to solve an Out of memory filebeat multiline trouble, following my info about configuration and error. Thanks you for your availability. Version: 7.4.0 Server: Windows Server 2008 Memory: 64 GB …

---

## [Clone an Index Elasticsearch 6.7](https://discuss.elastic.co/t/clone-an-index-elasticsearch-6-7/229729)

<div class="topic-metadata">

**Author:** [@karanmig12](https://discuss.elastic.co/u/karanmig12)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 10:15pm UTC](https://discuss.elastic.co/t/clone-an-index-elasticsearch-6-7/229729 "2020-04-24T22:15:29Z")

</div>

What's the best way to clone index in Elasticsearch 6.7

---

## [Wazuh-Kibana API is too slow and wrong protocol being used to connect to the Wazuh API (after few days)](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 9:07am UTC](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497 "2019-09-14T09:07:50Z")

</div>

Hello Community, we have recently upgraded the ELK stack from 6.5.2 to 6.8.1 (Wazuh version 3.9.3) and everything seems working fine except Kibana-Wazuh API, it is extremely slow and some times getting wazuh not ready y…

---

## [Kibana timouts after 120 sec](https://discuss.elastic.co/t/kibana-timouts-after-120-sec/183150)

<div class="topic-metadata">

**Author:** [@mustdiee](https://discuss.elastic.co/u/mustdiee)\
**Replies:** 1\
**Last updated:** [May 28, 2019, 5:30pm UTC](https://discuss.elastic.co/t/kibana-timouts-after-120-sec/183150 "2019-05-28T17:30:29Z")

</div>

Hello to all, I am working in Kibana 6.8.0 and ES 6.8.0 with huge amount of data (about 2.5 billion docs) and when I try to request data with large time pool I stuck with following error: SearchError: unknown error …

---

## [Kibana particular dashboard timezone](https://discuss.elastic.co/t/kibana-particular-dashboard-timezone/178392)

<div class="topic-metadata">

**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\
**Replies:** 1\
**Last updated:** [April 25, 2019, 11:49am UTC](https://discuss.elastic.co/t/kibana-particular-dashboard-timezone/178392 "2019-04-25T11:49:42Z")

</div>

We have a global setting for Kibana timezone (UTC). Could we set the timezone for a particular dashboard?

---

## [Type: mapper\_parsing\_exception Reason: "object mapping for \[data.tags\] tried to parse field \[tags\] as object, but found a concrete value](https://discuss.elastic.co/t/type-mapper-parsing-exception-reason-object-mapping-for-data-tags-tried-to-parse-field-tags-as-object-but-found-a-concrete-value/159269)

<div class="topic-metadata">

**Author:** [@Thomas\_Doman](https://discuss.elastic.co/u/Thomas_Doman)\
**Replies:** 1\
**Last updated:** [December 5, 2018, 9:34pm UTC](https://discuss.elastic.co/t/type-mapper-parsing-exception-reason-object-mapping-for-data-tags-tried-to-parse-field-tags-as-object-but-found-a-concrete-value/159269 "2018-12-05T21:34:46Z")

</div>

ES: 6.1.1 .Net NEST: 6.1.0 I have several environments in which I have the exact same "dynamic": "false" mapping. In one, I'm unable to index new documents into this index due to the titular exception I receive: mappe…

---

## [Not enough master nodes discovered during pingin on ES6.0.1 with docker](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pingin-on-es6-0-1-with-docker/118478)

<div class="topic-metadata">

**Author:** [@cloud\_sora](https://discuss.elastic.co/u/cloud_sora)\
**Replies:** 1\
**Last updated:** [February 6, 2018, 4:53pm UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pingin-on-es6-0-1-with-docker/118478 "2018-02-06T16:53:41Z")

</div>

Hello all, im trying to setup elasticsearch cluster (elasticsearch-6.0.1-1.noarch) using docker and ec2-discovery plugin on ec2 instances(not one instance). my use case is creating the dockerfile with the needed packag…

---

## [How to specify proxy\_url on Logstash with x-pack](https://discuss.elastic.co/t/how-to-specify-proxy-url-on-logstash-with-x-pack/103887)

<div class="topic-metadata">

**Author:** [@Giancarlo\_Rubio](https://discuss.elastic.co/u/Giancarlo_Rubio)\
**Replies:** 1\
**Last updated:** [October 13, 2017, 11:59am UTC](https://discuss.elastic.co/t/how-to-specify-proxy-url-on-logstash-with-x-pack/103887 "2017-10-13T11:59:38Z")

</div>

My Logstash is running behind a proxy server with all the logs successfully delivered to Elasticsearch Cloud. Now I'm trying to enable x-pack on logstash and looks like xpack is not following my proxy. Besides that I ca…

---

## [Existing data nodes unable to connect to new master](https://discuss.elastic.co/t/existing-data-nodes-unable-to-connect-to-new-master/98291)

<div class="topic-metadata">

**Author:** [@bmwmaestoso](https://discuss.elastic.co/u/bmwmaestoso)\
**Replies:** 1\
**Last updated:** [August 25, 2017, 2:38pm UTC](https://discuss.elastic.co/t/existing-data-nodes-unable-to-connect-to-new-master/98291 "2017-08-25T14:38:35Z")

</div>

Elasticsearch/X-Pack 5.5.2 I created a prototype cluster with 4 data nodes and 1 master. X-pack was installed on every node and everything was working correctly. The cluster had been running for several weeks and about…

---

## [How to calculate the filesize in logstash](https://discuss.elastic.co/t/how-to-calculate-the-filesize-in-logstash/95379)

<div class="topic-metadata">

**Author:** [@sudi\_2611](https://discuss.elastic.co/u/sudi_2611)\
**Replies:** 1\
**Last updated:** [August 22, 2017, 1:23pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-filesize-in-logstash/95379 "2017-08-22T13:23:59Z")

</div>

Hi, i am new to elasticsearch, am i trying to calculate the HDFS space conumption via kibana… i have a fsimage which contains the csv file from cluster…the file size is in byes and my code in logstash is as follows: f…

---

## [ELK download for Windows 64 bit](https://discuss.elastic.co/t/elk-download-for-windows-64-bit/86779)

<div class="topic-metadata">

**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\
**Replies:** 1\
**Last updated:** [May 23, 2017, 9:54am UTC](https://discuss.elastic.co/t/elk-download-for-windows-64-bit/86779 "2017-05-23T09:54:18Z")

</div>

Is Elasticsearch, Kibana, Logstash download available for windows 64 bit? I only found it for windows 32-bit in the download section of elastic.co

---

## [How to create a index template for all type](https://discuss.elastic.co/t/how-to-create-a-index-template-for-all-type/76950)

<div class="topic-metadata">

**Author:** [@Super\_L](https://discuss.elastic.co/u/Super_L)\
**Replies:** 1\
**Last updated:** [March 5, 2017, 11:35pm UTC](https://discuss.elastic.co/t/how-to-create-a-index-template-for-all-type/76950 "2017-03-05T23:35:14Z")

</div>

Hi all I created a index template as following: { "template" : "logstash-bmwrtti-\*", "settings" : { "index.refresh\_interval" : "5s", "analysis" : { "tokenizer" : { "…

---

## [New Reindex API also for Java?](https://discuss.elastic.co/t/new-reindex-api-also-for-java/50052)

<div class="topic-metadata">

**Author:** [@knob1](https://discuss.elastic.co/u/knob1)\
**Replies:** 1\
**Last updated:** [May 15, 2016, 3:10am UTC](https://discuss.elastic.co/t/new-reindex-api-also-for-java/50052 "2016-05-15T03:10:42Z")

</div>

Hi, I googled & searched the documentation, but I didn't find any example code where the new reindex API is used from Java. Is there a way? Is anyone using it in Java and could post some example code? Thanks!

---

## [Plotting calculated field in Kibana 4](https://discuss.elastic.co/t/plotting-calculated-field-in-kibana-4/34646)

<div class="topic-metadata">

**Author:** [@shinesamuel1989](https://discuss.elastic.co/u/shinesamuel1989)\
**Replies:** 1\
**Last updated:** [November 17, 2015, 9:09am UTC](https://discuss.elastic.co/t/plotting-calculated-field-in-kibana-4/34646 "2015-11-17T09:09:24Z")

</div>

Hi I need to plot average order value over time which is sum(gross\_order\_value)/count(order.id) for that selected time. How do I do this in Kibana 4? Regards

---

## [Logstash 1.5.4 service stopping - RHEL 6.7](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014)

<div class="topic-metadata">

**Author:** [@mbspence1969](https://discuss.elastic.co/u/mbspence1969)\
**Replies:** 1\
**Last updated:** [August 25, 2015, 2:19pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014 "2015-08-25T14:19:01Z")

</div>

I have installed logstash on a RHEL 6.7 server from RPM. When I start the service it runs for a short time and then stops. Would anyone be able to provide some advice? The error below is logged in the err file: Java Ho…

[Previous page](https://discuss.elastic.co/top.md?page=1640&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1642&per_page=50&period=all)
