# Top **URL:** https://discuss.elastic.co/top.md?page=1648&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1649 --- ## [Not able to read from elasticsearch from spark?](https://discuss.elastic.co/t/not-able-to-read-from-elasticsearch-from-spark/144851)
**Author:** [@sheryl](https://discuss.elastic.co/u/sheryl)\ **Replies:** 1\ **Last updated:** [August 17, 2018, 8:08pm UTC](https://discuss.elastic.co/t/not-able-to-read-from-elasticsearch-from-spark/144851 "2018-08-17T20:08:37Z")
using logstash i have ingested file into elastic search with index/type .. car/soldcars now for practising i want to read that csv file from spark using scala code. ;val spark= SparkSession.builder.master("local").appN… --- ## [Exception in thread "\[main\]\>worker4" java.lang.ClassCastException: org.logstash.bivalues.StringBiValue cannot be cast to java.lang.String: is this a bug in logstash?](https://discuss.elastic.co/t/exception-in-thread-main-worker4-java-lang-classcastexception-org-logstash-bivalues-stringbivalue-cannot-be-cast-to-java-lang-string-is-this-a-bug-in-logstash/88638)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 9:18am UTC](https://discuss.elastic.co/t/exception-in-thread-main-worker4-java-lang-classcastexception-org-logstash-bivalues-stringbivalue-cannot-be-cast-to-java-lang-string-is-this-a-bug-in-logstash/88638 "2017-06-21T09:18:19Z")
hello, I consistently got an exception when running logstash. the exception is copied at the end. Any pointer is appreciated! Version: logstash-5.4.1 Operating System: Redhat Enterprise R6.6(Santiago), i started a kafk… --- ## [Network bytes per second](https://discuss.elastic.co/t/network-bytes-per-second/76112)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 1:47pm UTC](https://discuss.elastic.co/t/network-bytes-per-second/76112 "2017-02-23T13:47:04Z")
Hi, I was looking at how I can report the byte/second that an interface doing on a server. When I look at metricbeat.network bytesin or bytesout , those are just ever increasing values until the counter is reset. How … --- ## [Getting Sample Documents](https://discuss.elastic.co/t/getting-sample-documents/57634)
**Author:** [@mitchswaldman](https://discuss.elastic.co/u/mitchswaldman)\ **Replies:** 1\ **Last updated:** [August 10, 2016, 9:27am UTC](https://discuss.elastic.co/t/getting-sample-documents/57634 "2016-08-10T09:27:40Z")
Hello! I've been looking at the "Example Docs" functionality in Graph and I had a few questions about it. Currently, when you click "Example Docs", it simply takes the current selection of nodes, and puts them in a boo… --- ## [JAVA API - Cosinus or similarité entre deux documents avec ES](https://discuss.elastic.co/t/java-api-cosinus-or-similarite-entre-deux-documents-avec-es/40803)
**Author:** [@Deve\_java](https://discuss.elastic.co/u/Deve_java)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 2:44pm UTC](https://discuss.elastic.co/t/java-api-cosinus-or-similarite-entre-deux-documents-avec-es/40803 "2016-04-15T14:44:16Z")
Bonjour je souhaite calculer la similarité entre les documents y a t il une fonction dans l'API java pouvant calculer ca et renvoie un score de similarité ? je vous remercie par avance --- ## [Plugin update fails](https://discuss.elastic.co/t/plugin-update-fails/35154)
**Author:** [@McStork](https://discuss.elastic.co/u/McStork)\ **Replies:** 1\ **Last updated:** [November 21, 2015, 5:42am UTC](https://discuss.elastic.co/t/plugin-update-fails/35154 "2015-11-21T05:42:12Z")
Hello, One of our Logstash 2.0.0 has an issue with the update command. Error Bundler::InstallError, retrying 10/10 An error occurred while installing nokogiri (1.6.6.4), and Bundler cannot continue. Make sure that g… --- ## [Do Not Index Nested Document](https://discuss.elastic.co/t/do-not-index-nested-document/17938)
**Author:** [@bbehling](https://discuss.elastic.co/u/bbehling)\ **Replies:** 1\ **Last updated:** [June 6, 2014, 4:44pm UTC](https://discuss.elastic.co/t/do-not-index-nested-document/17938 "2014-06-06T16:44:47Z")
Hello. Is it possible to not index a nested document? I know I could add each field of the nested document to the mapping file and set index = no, but it would be nice if I could specify this at the nested documen… --- ## [Best approach for upgrading from 7.15 to say 8.5](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:14pm UTC](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057 "2022-11-03T21:14:58Z")
I'm running 7.15 today (both ES & REST client). Is there a document suggesting how to upgrade to say ES 8.5? We don't do instance upgrade. We use double write. We will have both 7.15 & 8.5 clusters running during the t… --- ## [Elasticsearch OSS Docker Images](https://discuss.elastic.co/t/elasticsearch-oss-docker-images/266091)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 4\ **Last updated:** [March 6, 2021, 6:53pm UTC](https://discuss.elastic.co/t/elasticsearch-oss-docker-images/266091 "2021-03-06T18:53:34Z")
Hi All, What is primary difference between Elasticsearch OSS and OSS Snapshot docker images. Any link to document will be very helpful. Thanks. --- ## [\[metricset prometheus collector\] Multiple match query](https://discuss.elastic.co/t/metricset-prometheus-collector-multiple-match-query/230804)
**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\ **Replies:** 4\ **Last updated:** [May 5, 2020, 8:42am UTC](https://discuss.elastic.co/t/metricset-prometheus-collector-multiple-match-query/230804 "2020-05-05T08:42:17Z")
Dear Metricbeat experts, I am using metricset prometheus collector and using the following query to scrape data from prometheus. And I found only the last query ('match\[\]': '{job="jobC"}') take effect. Can I use multip… --- ## [Routing: Equal distribution on all shards](https://discuss.elastic.co/t/routing-equal-distribution-on-all-shards/183531)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 4\ **Last updated:** [May 31, 2019, 5:19am UTC](https://discuss.elastic.co/t/routing-equal-distribution-on-all-shards/183531 "2019-05-31T05:19:21Z")
Hi, I have 5 unique routing keys "a","b","c","d","e" in my application. My ES setup consists of 5 shards. When i check in current state (ver 6.6.2). My shard allocation is like this: a 4 b 2 c 0 d 3 e 4 Note that… --- ## [While query time and collector time bigger than request took time when profiling?](https://discuss.elastic.co/t/while-query-time-and-collector-time-bigger-than-request-took-time-when-profiling/164885)
**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 2:33am UTC](https://discuss.elastic.co/t/while-query-time-and-collector-time-bigger-than-request-took-time-when-profiling/164885 "2019-01-23T02:33:10Z")
the search is very simple { "profile": true, "size": 0, "query": { "bool": { "must": \[ { "match": { "appid": "300047" } } \] } } } and the resp… --- ## [Understanding Metrics ( Cumulative indexing time of primary shards )](https://discuss.elastic.co/t/understanding-metrics-cumulative-indexing-time-of-primary-shards/324986)
**Author:** [@Sriram\_Kumar](https://discuss.elastic.co/u/Sriram_Kumar)\ **Replies:** 3\ **Last updated:** [February 9, 2023, 8:29am UTC](https://discuss.elastic.co/t/understanding-metrics-cumulative-indexing-time-of-primary-shards/324986 "2023-02-09T08:29:12Z")
Hi , I have a corpus of 100k ( 1 lakh products ) in json , I am bulk indexing to one of the cluster with bulk\_size of 10k . GET product\_\_v99/\_stats { "indexing": { "index\_total": 100000, "index\_t… --- ## [Logstash wildcard](https://discuss.elastic.co/t/logstash-wildcard/246121)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 3\ **Last updated:** [August 24, 2020, 5:12pm UTC](https://discuss.elastic.co/t/logstash-wildcard/246121 "2020-08-24T17:12:49Z")
Logstash recieves many .log files such as mongod.log and mysqld.log. I deal with it in logstash by having an if statement for each file such as: if \[log\]\[file\]\[path\] =~ "mysqld.log" I've been asked to also ship data fr… --- ## [Elasticsearch as producer/consumer solution](https://discuss.elastic.co/t/elasticsearch-as-producer-consumer-solution/241645)
**Author:** [@invenisso](https://discuss.elastic.co/u/invenisso)\ **Replies:** 3\ **Last updated:** [July 17, 2020, 2:53pm UTC](https://discuss.elastic.co/t/elasticsearch-as-producer-consumer-solution/241645 "2020-07-17T14:53:18Z")
Hello Community! Is it possible to use Elasticserach in a producer / consumer scenario? The producer writes documents to Elasticserach. The consumer reads documents from Eleasticserach and processes them. The order o… --- ## [Heartbeatのインデックス名を任意に指定する方法](https://discuss.elastic.co/t/heartbeat/219557)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 7:19am UTC](https://discuss.elastic.co/t/heartbeat/219557 "2020-02-18T07:19:48Z")
heartbeatからElasticsearchに送信したデータを、任意の名前でインデックス登録したいです。 以下の設定をheartbeat.ymlに設定したのですが、デフォルトのheartbeat-7.5.0-2020.02.02-000003のような名前で入ってしまいます。 考えられる原因を教えて頂けないでしょうか #==================== Elasticsearch template setting ===… --- ## [Can i get day wise data from elasticsearch?](https://discuss.elastic.co/t/can-i-get-day-wise-data-from-elasticsearch/209643)
**Author:** [@Ashish\_Saini](https://discuss.elastic.co/u/Ashish_Saini)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 11:35pm UTC](https://discuss.elastic.co/t/can-i-get-day-wise-data-from-elasticsearch/209643 "2019-12-19T23:35:51Z")
if yes, how can i get day wise data? --- ## [Circuit breaking EXception while using Reindex API](https://discuss.elastic.co/t/circuit-breaking-exception-while-using-reindex-api/200922)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 5:49am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-while-using-reindex-api/200922 "2019-09-25T05:49:58Z")
Hi, while using Reindex API we are getting circuit breaking Exception "cause" : { "type" : "circuit\_breaking\_exception", "reason" : "\[parent\] Data too large, data for \[\\] would be \[388057197… --- ## [Query scores are different when search on the same title](https://discuss.elastic.co/t/query-scores-are-different-when-search-on-the-same-title/106082)
**Author:** [@niceliubing](https://discuss.elastic.co/u/niceliubing)\ **Replies:** 3\ **Last updated:** [November 2, 2017, 7:15pm UTC](https://discuss.elastic.co/t/query-scores-are-different-when-search-on-the-same-title/106082 "2017-11-02T19:15:36Z")
I have two records with same book titles. PUT books/book/2 { "title" : "Nineteen Eighty-Four", "reader\_rating" : 4.0, "author" : "John Steinbeck" } PUT books/book/3 { "title" : "Nineteen Eighty-Four", "reader\_r… --- ## [JDBC driver classpath not mapped even i mentioned](https://discuss.elastic.co/t/jdbc-driver-classpath-not-mapped-even-i-mentioned/73250)
**Author:** [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\ **Replies:** 0\ **Last updated:** [January 30, 2017, 5:10pm UTC](https://discuss.elastic.co/t/jdbc-driver-classpath-not-mapped-even-i-mentioned/73250 "2017-01-30T17:10:52Z")
Im getting this error even thought i set my driver paths in classpath of jdk(/etc/profile.d/jdk.sh) as export CLASSPATH=$JAVA\_HOME/lib/dt.jar:$JAVA\_HOME/lib/tools.jar:$JAVA\_HOME/lib/db2jcc\_license\_cisuz.jar:$JAVA\_HOME/li… --- ## [Kibana Timelion doesn't use proxy when connecting to Quandl](https://discuss.elastic.co/t/kibana-timelion-doesnt-use-proxy-when-connecting-to-quandl/66140)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 7:56pm UTC](https://discuss.elastic.co/t/kibana-timelion-doesnt-use-proxy-when-connecting-to-quandl/66140 "2016-11-17T19:56:11Z")
We are behind a corporate proxy for all outgoing requests on 80 and 443. When using Timelion v5.0.0 and requesting data from Quandl we get a failure. Timelion: Error: in cell #3: request to \[quandl url\] failed, r… --- ## [Aggregate based on different timerange](https://discuss.elastic.co/t/aggregate-based-on-different-timerange/49065)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 3\ **Last updated:** [May 4, 2016, 8:03am UTC](https://discuss.elastic.co/t/aggregate-based-on-different-timerange/49065 "2016-05-04T08:03:29Z")
Hi, I'm having trouble figuring out how to graph a complex query in Kibana. My issue is as follow: I have 2 servers, each has a different number of clients connected to it. Lets assume server1 has 100 clients connected… --- ## [Throws java.lang.NullPointerException when getSource](https://discuss.elastic.co/t/throws-java-lang-nullpointerexception-when-getsource/11633)
**Author:** [@Jingang\_Wang](https://discuss.elastic.co/u/Jingang_Wang)\ **Replies:** 3\ **Last updated:** [April 18, 2013, 5:04pm UTC](https://discuss.elastic.co/t/throws-java-lang-nullpointerexception-when-getsource/11633 "2013-04-18T17:04:06Z")
Hi there, When I was running a piece of code, which means to get some doc from my index, it throws the exception java.lang.NullPointerException。 Is there anything I set wrongly? Thanks. My code is like this: G… --- ## [How to Create Login failed Rule](https://discuss.elastic.co/t/how-to-create-login-failed-rule/287862)
**Author:** [@Renz\_Aguilar](https://discuss.elastic.co/u/Renz_Aguilar)\ **Replies:** 2\ **Last updated:** [November 25, 2021, 1:46am UTC](https://discuss.elastic.co/t/how-to-create-login-failed-rule/287862 "2021-11-25T01:46:22Z")
Hi Team can i ask how to create a login failed rule on kibana? i want to monitor the users who failed logging in into their computer. --- ## [Problem with elasticsearch on single-node cluster](https://discuss.elastic.co/t/problem-with-elasticsearch-on-single-node-cluster/286068)
**Author:** [@vasilev](https://discuss.elastic.co/u/vasilev)\ **Replies:** 2\ **Last updated:** [October 7, 2021, 9:22am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-on-single-node-cluster/286068 "2021-10-07T09:22:37Z")
Hello, I have one single node Elasticsearch cluster that was working for months. yesterday I have restarted the virtual server and after that it has problems. now I have redeployed again the kubernetes configuration a… --- ## [Security\_tenant in dashboard url when sharing or embedding missing in latest version](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 2\ **Last updated:** [October 22, 2020, 11:36pm UTC](https://discuss.elastic.co/t/security-tenant-in-dashboard-url-when-sharing-or-embedding-missing-in-latest-version/252280 "2020-10-22T23:36:22Z")
In version 7.2, when I shared an embedded URL of a dashboard, it included the parameter kibana?security\_tenant=tenantName#. The users were able to be logged as another tenant and see the dashboard. In the latest versio… --- ## [Kibanaのdev toolのユーザー別権限設定について](https://discuss.elastic.co/t/kibana-dev-tool/236816)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 6:21am UTC](https://discuss.elastic.co/t/kibana-dev-tool/236816 "2020-06-16T06:21:09Z")
kibabaのdev tool画面にて、ログインユーザー別に権限を設定することは可能でしょうか。 例えば、ユーザーAはPUT、POST、GET、DELETEが可能。ユーザーBはGETのみ可能、といったように権限を分けたいです。 --- ## [Grok pattern match for multiple lines](https://discuss.elastic.co/t/grok-pattern-match-for-multiple-lines/228408)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 10:37pm UTC](https://discuss.elastic.co/t/grok-pattern-match-for-multiple-lines/228408 "2020-04-16T22:37:02Z")
I am reading a postgresql log file in and some lines are pretty big and come in on multiple lines. Any one have any idea on how to match this pattern? grok pattern: (%{TIMESTAMP\_ISO8601:timestamp}%{SPACE}%{TZ:time\_zon… --- ## [Create new document on index and update a second document](https://discuss.elastic.co/t/create-new-document-on-index-and-update-a-second-document/194174)
**Author:** [@grahams](https://discuss.elastic.co/u/grahams)\ **Replies:** 2\ **Last updated:** [August 7, 2019, 8:41am UTC](https://discuss.elastic.co/t/create-new-document-on-index-and-update-a-second-document/194174 "2019-08-07T08:41:36Z")
Hi, ES newbie here. Is it possible, say in an ingest pipeline, to store the document into one index and then take some of the fields and update a second index. For example an order document would be stored and a custome… --- ## [DR setup for elasticsearch](https://discuss.elastic.co/t/dr-setup-for-elasticsearch/153850)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 6:11am UTC](https://discuss.elastic.co/t/dr-setup-for-elasticsearch/153850 "2018-10-29T06:11:33Z")
Looking for the different options for DR setup for elasticsearch. Any blogs/videos on this topic will be helpful. --- ## [How to open a new console window in Kibana dev tools](https://discuss.elastic.co/t/how-to-open-a-new-console-window-in-kibana-dev-tools/122760)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 2\ **Last updated:** [March 7, 2018, 5:36pm UTC](https://discuss.elastic.co/t/how-to-open-a-new-console-window-in-kibana-dev-tools/122760 "2018-03-07T17:36:48Z")
Attached is the picture.\[2018-03-06\_9-46-36\] Thank You --- ## [Kibana visualization are down since x-pack installed](https://discuss.elastic.co/t/kibana-visualization-are-down-since-x-pack-installed/110885)
**Author:** [@Arnaud\_Jaspart](https://discuss.elastic.co/u/Arnaud_Jaspart)\ **Replies:** 2\ **Last updated:** [January 2, 2018, 5:45pm UTC](https://discuss.elastic.co/t/kibana-visualization-are-down-since-x-pack-installed/110885 "2018-01-02T17:45:48Z")
Hello, Problem: I installed elastic+kibana+logstash 6.0.0, it was working using data imported with LS from mysqldb, I could visualize the data on kibana. I added x-pack on this installation, and then I could not see th… --- ## [Is packetbeat parsing pcap data per packets or per flow/stream?](https://discuss.elastic.co/t/is-packetbeat-parsing-pcap-data-per-packets-or-per-flow-stream/81234)
**Author:** [@Niveah\_Tefillah](https://discuss.elastic.co/u/Niveah_Tefillah)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 2:21pm UTC](https://discuss.elastic.co/t/is-packetbeat-parsing-pcap-data-per-packets-or-per-flow-stream/81234 "2017-04-05T14:21:32Z")
Hi! This might be a dumb question! But iam unable to figure out if the pcap data is being parsed per packet or per flow/stream! Please help me understand this. Thank you! Niveah --- ## [Auto authenticate with Ealsticsearch shield using PKI](https://discuss.elastic.co/t/auto-authenticate-with-ealsticsearch-shield-using-pki/57725)
**Author:** [@kqpr0](https://discuss.elastic.co/u/kqpr0)\ **Replies:** 2\ **Last updated:** [August 10, 2016, 8:37pm UTC](https://discuss.elastic.co/t/auto-authenticate-with-ealsticsearch-shield-using-pki/57725 "2016-08-10T20:37:18Z")
I am using the shield addon for my elasticsearch. I want to configure Shield to auto authenticate when a user hit the rest endpoint in the browser, looking at the browser's cert. How can i achieve this? In my elasticsea… --- ## [Can not install elasticsearch-analysis-phonetic on elasticsearch 2.0 on windows server 2012](https://discuss.elastic.co/t/can-not-install-elasticsearch-analysis-phonetic-on-elasticsearch-2-0-on-windows-server-2012/35586)
**Author:** [@Svetlin\_Stefanov](https://discuss.elastic.co/u/Svetlin_Stefanov)\ **Replies:** 2\ **Last updated:** [March 13, 2016, 10:27am UTC](https://discuss.elastic.co/t/can-not-install-elasticsearch-analysis-phonetic-on-elasticsearch-2-0-on-windows-server-2012/35586 "2016-03-13T10:27:46Z")
ERROR: Could not find plugin descriptor 'plugin-descriptor.properties' in plugin zip when running .\\plugin install elasticsearch/elasticsearch-analysis-phonetic/2.7.0 on elsticsearch 2.0. on windows server 2012 Does… --- ## [Include AND OR operators in search text](https://discuss.elastic.co/t/include-and-or-operators-in-search-text/37708)
**Author:** [@davteje](https://discuss.elastic.co/u/davteje)\ **Replies:** 2\ **Last updated:** [December 21, 2015, 7:31pm UTC](https://discuss.elastic.co/t/include-and-or-operators-in-search-text/37708 "2015-12-21T19:31:35Z")
I wonder if it is possible to include operators in the search text, so client can make a boolean query manually. An example would be: "(first OR second) AND (third OR fourth)" The following example works with query\_… --- ## [Performing an exact match on a field in a document](https://discuss.elastic.co/t/performing-an-exact-match-on-a-field-in-a-document/11540)
**Author:** [@Saikat\_Kanjilal](https://discuss.elastic.co/u/Saikat_Kanjilal)\ **Replies:** 2\ **Last updated:** [April 11, 2013, 2:25am UTC](https://discuss.elastic.co/t/performing-an-exact-match-on-a-field-in-a-document/11540 "2013-04-11T02:25:20Z")
Hello Folks, So I've seen bits and pieces on the mailing list around this topic but have not seen a satisfactory solution. I have the following document: { "documents": \[ { "id": "8… --- ## [Is there a way to monitor changes to roles and username / passwords for builtin or created users](https://discuss.elastic.co/t/is-there-a-way-to-monitor-changes-to-roles-and-username-passwords-for-builtin-or-created-users/341129)
**Author:** [@txmrlevine](https://discuss.elastic.co/u/txmrlevine)\ **Replies:** 6\ **Last updated:** [August 20, 2023, 12:25am UTC](https://discuss.elastic.co/t/is-there-a-way-to-monitor-changes-to-roles-and-username-passwords-for-builtin-or-created-users/341129 "2023-08-20T00:25:21Z")
Our Security team is looking for a way for them to use Carbon Black to monitor changes to users (add/ delete) , password changes for these adhoc users or built in users. we were looking for a file on disk. The only inf… --- ## [Intentionally delaying log harvesting at startup](https://discuss.elastic.co/t/intentionally-delaying-log-harvesting-at-startup/149855)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [October 2, 2018, 8:39am UTC](https://discuss.elastic.co/t/intentionally-delaying-log-harvesting-at-startup/149855 "2018-10-02T08:39:52Z")
I have a use case where I need to delay the log harvesting. As I read my best option would be scan\_frequency but I'm not sure if that applies for the first start and how it keeps track of this information (I suspect that… --- ## [Tutorial for creating watcher scripts in Painless lab](https://discuss.elastic.co/t/tutorial-for-creating-watcher-scripts-in-painless-lab/248815)
**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 11:16am UTC](https://discuss.elastic.co/t/tutorial-for-creating-watcher-scripts-in-painless-lab/248815 "2020-09-21T11:16:54Z")
Not sure where this question really belongs, but anyway. Creating complex alerts in watcher, using multi level aggregations and painless scripts for the condition is a little unwieldy. The Painless Lab could be used to… --- ## [Setup logstash module netflow](https://discuss.elastic.co/t/setup-logstash-module-netflow/279528)
**Author:** [@Muhammed\_Ibrahim](https://discuss.elastic.co/u/Muhammed_Ibrahim)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 8:16am UTC](https://discuss.elastic.co/t/setup-logstash-module-netflow/279528 "2021-08-09T08:16:46Z")
Dears, I need to install netflow dashboard as it's shown in elastic guide by this command : sudo bin/logstash --modules netflow --setup --path.settings /etc/logstash/ but appears this error below : Using bundled JDK… --- ## [Kibana Canvas - Markdown date format](https://discuss.elastic.co/t/kibana-canvas-markdown-date-format/256807)
**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\ **Replies:** 1\ **Last updated:** [November 27, 2020, 7:50pm UTC](https://discuss.elastic.co/t/kibana-canvas-markdown-date-format/256807 "2020-11-27T19:50:08Z")
Is there a way to use the markdown content to write the previous month? Just now, I use {date | formatdate "MMMM YYYY"} which produces November 2020 however I'm wondering if there's a way to write the last months date. … --- ## [\[Filebeat\] K8s OOM kill causes file corruption](https://discuss.elastic.co/t/filebeat-k8s-oom-kill-causes-file-corruption/252734)
**Author:** [@boernd](https://discuss.elastic.co/u/boernd)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 3:06am UTC](https://discuss.elastic.co/t/filebeat-k8s-oom-kill-causes-file-corruption/252734 "2020-10-21T03:06:49Z")
Hi, I have the following issue and think it's a bug but wanted to post here before filing a Github issue: A filebeat container gets killed/restarted because of memory limits within K8s. After the container restart the … --- ## [ES5 -\> ES6 -\> ES7, Snapshot Restore, Reindex, Index Size increase](https://discuss.elastic.co/t/es5-es6-es7-snapshot-restore-reindex-index-size-increase/227263)
**Author:** [@thoro\_cf](https://discuss.elastic.co/u/thoro_cf)\ **Replies:** 1\ **Last updated:** [April 9, 2020, 8:28am UTC](https://discuss.elastic.co/t/es5-es6-es7-snapshot-restore-reindex-index-size-increase/227263 "2020-04-09T08:28:07Z")
Hi, so I'm migrating ES5 to ES7 by loading indices in ES6, then reindexing them, doing a snapshot, and then loading the snapshot in ES7 and doing another reindex. I have noticed that the index size varies dramatically. … --- ## [Stuck in "Kibana server is not ready yet" for last 24 hr kibana not loading](https://discuss.elastic.co/t/stuck-in-kibana-server-is-not-ready-yet-for-last-24-hr-kibana-not-loading/194702)
**Author:** [@asad\_ali](https://discuss.elastic.co/u/asad_ali)\ **Replies:** 1\ **Last updated:** [August 10, 2019, 11:04am UTC](https://discuss.elastic.co/t/stuck-in-kibana-server-is-not-ready-yet-for-last-24-hr-kibana-not-loading/194702 "2019-08-10T11:04:15Z")
I'm running ELK ver 7.1 with kibana.yml that looks like server.port: 5601 server.host: 0.0.0.0 elasticsearch.hosts: \["https://illumin8.inboxbiz.com:9200"\] elasticsearch.username: "elastic" elasticsearch.password: "… --- ## [Dropdown filter "\[dropdownControl\] \> context.rows\[0\] is undefined" in Kibana Canvas](https://discuss.elastic.co/t/dropdown-filter-dropdowncontrol-context-rows-0-is-undefined-in-kibana-canvas/179667)
**Author:** [@Moxyze](https://discuss.elastic.co/u/Moxyze)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 10:42pm UTC](https://discuss.elastic.co/t/dropdown-filter-dropdowncontrol-context-rows-0-is-undefined-in-kibana-canvas/179667 "2019-05-06T22:42:18Z")
I have a datatable with several fields used to describe different objects: Now I'm trying to create a Canvas to view those objects using dropdown filters for more user-friendliness. Seems pretty simple! I add a line … --- ## [What span types are automatically visualized for Java services?](https://discuss.elastic.co/t/what-span-types-are-automatically-visualized-for-java-services/160727)
**Author:** [@mwessman](https://discuss.elastic.co/u/mwessman)\ **Replies:** 7\ **Last updated:** [December 13, 2018, 3:15pm UTC](https://discuss.elastic.co/t/what-span-types-are-automatically-visualized-for-java-services/160727 "2018-12-13T15:15:23Z")
Hi! Evaluating Elastic APM for instrumentation of our Java web services. Viewing a transaction sample only displays spans of type DB. What other types should be displayed without manual instrumentation via e.g. Span API… --- ## [Hide the dashboards of other users in my Kibana view](https://discuss.elastic.co/t/hide-the-dashboards-of-other-users-in-my-kibana-view/156695)
**Author:** [@karam](https://discuss.elastic.co/u/karam)\ **Replies:** 1\ **Last updated:** [November 14, 2018, 3:42pm UTC](https://discuss.elastic.co/t/hide-the-dashboards-of-other-users-in-my-kibana-view/156695 "2018-11-14T15:42:34Z")
Hi, I want to hide the dashboards of other users in my Kibana view. I only want to keep my dashboards visible in my view. Thank you --- ## [Access XPack user's username from a plugin](https://discuss.elastic.co/t/access-xpack-users-username-from-a-plugin/114969)
**Author:** [@mostdispleased](https://discuss.elastic.co/u/mostdispleased)\ **Replies:** 1\ **Last updated:** [January 11, 2018, 5:22pm UTC](https://discuss.elastic.co/t/access-xpack-users-username-from-a-plugin/114969 "2018-01-11T17:22:00Z")
We have XPack installed on ES / Kibana 5.5.1. Is it possible from within a plugin to access the current Kibana user's username, and optionally if the user is viewing a dashboard to retrieve the dashboard name (not the ha… --- ## [Metricbeat apache - ERR Error on field 'children\_system': Key \`CPUChildrenSystem\` not found](https://discuss.elastic.co/t/metricbeat-apache-err-error-on-field-children-system-key-cpuchildrensystem-not-found/89631)
**Author:** [@egulik](https://discuss.elastic.co/u/egulik)\ **Replies:** 1\ **Last updated:** [June 16, 2017, 9:44am UTC](https://discuss.elastic.co/t/metricbeat-apache-err-error-on-field-children-system-key-cpuchildrensystem-not-found/89631 "2017-06-16T09:44:54Z")
Hello everyone, I've setup AWS elasticsearch (5.3), installed metricbeats on 2 amzlinux instances with apache 2.2.31 but I get a lot of errors: \> ERR Error on field 'user': Key \`CPUUser\` not found \> ERR Error on field … [Previous page](https://discuss.elastic.co/top.md?page=1647&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1649&per_page=50&period=all)