# Top

**URL:** https://discuss.elastic.co/top.md?page=1656&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1657

---

## [Possible to find out what user created a Kibana object?](https://discuss.elastic.co/t/possible-to-find-out-what-user-created-a-kibana-object/58389)

<div class="topic-metadata">

**Author:** [@baxter19](https://discuss.elastic.co/u/baxter19)\
**Replies:** 1\
**Last updated:** [August 18, 2016, 10:52pm UTC](https://discuss.elastic.co/t/possible-to-find-out-what-user-created-a-kibana-object/58389 "2016-08-18T22:52:30Z")

</div>

If Sheild is enabled, is there any way to determine which user created or last modified a Kibana object (dashboard, search, visualization)? Doesn't seem to be but thought I would check.

---

## [Exclude lines starting hash not working](https://discuss.elastic.co/t/exclude-lines-starting-hash-not-working/47719)

<div class="topic-metadata">

**Author:** [@bara](https://discuss.elastic.co/u/bara)\
**Replies:** 1\
**Last updated:** [April 19, 2016, 7:56am UTC](https://discuss.elastic.co/t/exclude-lines-starting-hash-not-working/47719 "2016-04-19T07:56:58Z")

</div>

I'm running filebeat on Windows (v1.2.1) and trying to get it to exclude lines starting with hashes. I believe I have configured it correctly but it still seems to send through lines beginning with hash to LogStash. I'…

---

## [Heterogeneous Index Federation](https://discuss.elastic.co/t/heterogeneous-index-federation/42457)

<div class="topic-metadata">

**Author:** [@aventide](https://discuss.elastic.co/u/aventide)\
**Replies:** 1\
**Last updated:** [February 23, 2016, 6:54pm UTC](https://discuss.elastic.co/t/heterogeneous-index-federation/42457 "2016-02-23T18:54:15Z")

</div>

I have been investigating index federation, and I have a few questions about our options with Elasticsearch. At a high level, I understand that there are some options for federation. First, and most basically, we can…

---

## [elastciSearch2.1 Maven Build Error](https://discuss.elastic.co/t/elastcisearch2-1-maven-build-error/37327)

<div class="topic-metadata">

**Author:** [@Lxz](https://discuss.elastic.co/u/Lxz)\
**Replies:** 1\
**Last updated:** [December 16, 2015, 9:53am UTC](https://discuss.elastic.co/t/elastcisearch2-1-maven-build-error/37327 "2015-12-16T09:53:54Z")

</div>

Hi ! I want to consult a problem ： elastciSeach 2.1 JDK 1.7 Maven 3.3.3 /e/elasticSearch/elasticsearch/core (master) $ mvn -e package \[INFO\] Error stacktraces are turned on. \[INFO\] Scanning for projects... \[INFO\] \[…

---

## [ElasticSearch plugin which gets invoked after indexing a document](https://discuss.elastic.co/t/elasticsearch-plugin-which-gets-invoked-after-indexing-a-document/28677)

<div class="topic-metadata">

**Author:** [@ravindhranath](https://discuss.elastic.co/u/ravindhranath)\
**Replies:** 1\
**Last updated:** [September 5, 2015, 11:40pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-which-gets-invoked-after-indexing-a-document/28677 "2015-09-05T23:40:27Z")

</div>

I am working on developing a plugin which can emit some metrics to one of our metrics storage service. I want this plugin to have access to the document after it gets indexed and use some fields from it to emit metrics (…

---

## [Delete Index Settings](https://discuss.elastic.co/t/delete-index-settings/27067)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 1\
**Last updated:** [August 8, 2015, 2:45pm UTC](https://discuss.elastic.co/t/delete-index-settings/27067 "2015-08-08T14:45:53Z")

</div>

Hi, I was trying to update the index settings of kibana-int index with blocks.read\_only to true. { "index" : { "blocks.read\_only" : false } } Instead I mistakenly did this: { "index…

---

## [Document boosting vs function score boosting](https://discuss.elastic.co/t/document-boosting-vs-function-score-boosting/20121)

<div class="topic-metadata">

**Author:** [@Anton\_Pirker](https://discuss.elastic.co/u/Anton_Pirker)\
**Replies:** 1\
**Last updated:** [October 7, 2014, 4:51pm UTC](https://discuss.elastic.co/t/document-boosting-vs-function-score-boosting/20121 "2014-10-07T16:51:45Z")

</div>

Hello all! I am new to ElasticSearch and I am trying to move some of my documents to the top of the search results. (I have a "is\_premium" field in my documents and also a "popularity" value that is calculated by …

---

## [How to debug aggregation problems?](https://discuss.elastic.co/t/how-to-debug-aggregation-problems/17879)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 1\
**Last updated:** [June 16, 2014, 11:50am UTC](https://discuss.elastic.co/t/how-to-debug-aggregation-problems/17879 "2014-06-16T11:50:16Z")

</div>

I have an aggregation (filter + daterange) that is giving me an incorrect result (the count for a bucket is 2 when I expect 1) - but when I search using the same\* criteria, I get only the 1 result I expect. I am wo…

---

## [LDAP Integration Not Working](https://discuss.elastic.co/t/ldap-integration-not-working/338865)

<div class="topic-metadata">

**Author:** [@forabraham1](https://discuss.elastic.co/u/forabraham1)\
**Replies:** 6\
**Last updated:** [July 25, 2023, 4:53am UTC](https://discuss.elastic.co/t/ldap-integration-not-working/338865 "2023-07-25T04:53:31Z")

</div>

We're running inhouse platinum version of ELK stack 7.16. We've tried to use AD for user authentication, but it is not working and ends throwing invalid credential error. We're 100% sure that it is valid password. This …

---

## [Removing part of message giving grokparsefailure](https://discuss.elastic.co/t/removing-part-of-message-giving-grokparsefailure/200234)

<div class="topic-metadata">

**Author:** [@jlim0930](https://discuss.elastic.co/u/jlim0930)\
**Replies:** 6\
**Last updated:** [September 19, 2019, 10:41pm UTC](https://discuss.elastic.co/t/removing-part-of-message-giving-grokparsefailure/200234 "2019-09-19T22:41:45Z")

</div>

while sending logs from a central syslog server it adds "Message forwarded from ...." in the message field. I added if "Message forwarded from" in \[message\] { mutate { gsub =\> \[ "message", "Message forwarded from ",…

---

## [Document versioning hurting search results?](https://discuss.elastic.co/t/document-versioning-hurting-search-results/2423)

<div class="topic-metadata">

**Author:** [@winston](https://discuss.elastic.co/u/winston)\
**Replies:** 6\
**Last updated:** [June 15, 2015, 8:45am UTC](https://discuss.elastic.co/t/document-versioning-hurting-search-results/2423 "2015-06-15T08:45:33Z")

</div>

Hi, We have an index with client data and search on a field containing companyName. When a client document is updated without any changes to the companyName the search results change. The explain api shows that the n…

---

## [Load multiple tables from psql to elastic search](https://discuss.elastic.co/t/load-multiple-tables-from-psql-to-elastic-search/358804)

<div class="topic-metadata">

**Author:** [@Rajesh03](https://discuss.elastic.co/u/Rajesh03)\
**Replies:** 5\
**Last updated:** [May 6, 2024, 2:56pm UTC](https://discuss.elastic.co/t/load-multiple-tables-from-psql-to-elastic-search/358804 "2024-05-06T14:56:36Z")

</div>

I have a config file like this: input { jdbc { jdbc\_connection\_string =\> "jdbc:postgresql://localhost:5432/mydb" jdbc\_user =\> "postgres" jdbc\_driver\_library =\> "/path/to/postgresql-9.4-1201.j…

---

## [Filebeat with minimal security on ELK](https://discuss.elastic.co/t/filebeat-with-minimal-security-on-elk/290088)

<div class="topic-metadata">

**Author:** [@Lavandael](https://discuss.elastic.co/u/Lavandael)\
**Replies:** 5\
**Last updated:** [December 6, 2021, 7:39am UTC](https://discuss.elastic.co/t/filebeat-with-minimal-security-on-elk/290088 "2021-12-06T07:39:46Z")

</div>

Hello everyone, I am using one ELK stack into only one Centos server. I tried to follow this tutorial : security-minimal-setup So i added this xpack.security.enabled: true discovery.type: single-node into the Elast…

---

## [Detection result in new Index](https://discuss.elastic.co/t/detection-result-in-new-index/270347)

<div class="topic-metadata">

**Author:** [@xahmi](https://discuss.elastic.co/u/xahmi)\
**Replies:** 5\
**Last updated:** [April 23, 2021, 5:05pm UTC](https://discuss.elastic.co/t/detection-result-in-new-index/270347 "2021-04-23T17:05:43Z")

</div>

Hi, is there a way to save the custom query Job results/anomalies in a new Index? I think we can do that with ML but is there a way to do the same with other detection types like Custom query , Threshold, Event Correla…

---

## [Logstash throwing Failed to execute action java.lang.IllegalStateException: error when starting the agent](https://discuss.elastic.co/t/logstash-throwing-failed-to-execute-action-java-lang-illegalstateexception-error-when-starting-the-agent/256875)

<div class="topic-metadata">

**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\
**Replies:** 5\
**Last updated:** [November 27, 2020, 4:41pm UTC](https://discuss.elastic.co/t/logstash-throwing-failed-to-execute-action-java-lang-illegalstateexception-error-when-starting-the-agent/256875 "2020-11-27T16:41:30Z")

</div>

Hey guys Im trying to push logs from my server to Elasticsearch endpoint through logstash. My server is running a 2016 server OS and the im using a logstash version 7.9.0 This is my logstsh.conf file input { …

---

## [Поиск пересечений по нескольким параметрам](https://discuss.elastic.co/t/topic/223294)

<div class="topic-metadata">

**Author:** [@coolmac](https://discuss.elastic.co/u/coolmac)\
**Replies:** 5\
**Last updated:** [March 13, 2020, 10:36pm UTC](https://discuss.elastic.co/t/topic/223294 "2020-03-13T22:36:47Z")

</div>

Всем привет, есть такая задача по работе с Kibana и логами apache. Есть основной параметр: destination.domain Необходимо найти совпадения по трем параметрам, к примеру: source.geo.region\_name source.as.organization.n…

---

## [Why search give me strange result?](https://discuss.elastic.co/t/why-search-give-me-strange-result/133146)

<div class="topic-metadata">

**Author:** [@Vladimir\_Fomin](https://discuss.elastic.co/u/Vladimir_Fomin)\
**Replies:** 5\
**Last updated:** [May 28, 2018, 6:51am UTC](https://discuss.elastic.co/t/why-search-give-me-strange-result/133146 "2018-05-28T06:51:24Z")

</div>

Can you explain me why this search string: netflow.ipv4\_src\_addr:\[192.168.150.0 TO 192.168.255.255\] give me ip addresses from 192.168.2.0, 192.168.23.0 etc. I expected something like 192.168.150.xx, 192.168.151.xx ... …

---

## [Lost data in ElasticSearch cluster after disconnected node](https://discuss.elastic.co/t/lost-data-in-elasticsearch-cluster-after-disconnected-node/11296)

<div class="topic-metadata">

**Author:** [@iveta\_ruda](https://discuss.elastic.co/u/iveta_ruda)\
**Replies:** 5\
**Last updated:** [March 26, 2013, 12:23pm UTC](https://discuss.elastic.co/t/lost-data-in-elasticsearch-cluster-after-disconnected-node/11296 "2013-03-26T12:23:18Z")

</div>

I was simulating a split-brain cluster in a 3 node cluster. I had set minimum master nodes to 2, number of replicas to 2. ( I did not change node.master nor node.data settings.) There were created some indexes with …

---

## [How to integrate APM with windows services .NET](https://discuss.elastic.co/t/how-to-integrate-apm-with-windows-services-net/304659)

<div class="topic-metadata">

**Author:** [@wajihrehman](https://discuss.elastic.co/u/wajihrehman)\
**Replies:** 4\
**Last updated:** [May 19, 2022, 9:45am UTC](https://discuss.elastic.co/t/how-to-integrate-apm-with-windows-services-net/304659 "2022-05-19T09:45:49Z")

</div>

Hi @GregKalapos any idea how to integrate APM in windows services .NET and check logs if it working fine or not.

---

## [Hability to create daily index to metricbeat](https://discuss.elastic.co/t/hability-to-create-daily-index-to-metricbeat/299302)

<div class="topic-metadata">

**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\
**Replies:** 4\
**Last updated:** [March 15, 2022, 9:31am UTC](https://discuss.elastic.co/t/hability-to-create-daily-index-to-metricbeat/299302 "2022-03-15T09:31:01Z")

</div>

Hi all, We are deploying an stack monitoring to eck: Current monitoring are working fine, to Elasticsearch and kibana resources. But we have a problem with the index creation: metricbeat create a single index with for…

---

## [Any way for an Elasticsearch plugin to override default api behavior?](https://discuss.elastic.co/t/any-way-for-an-elasticsearch-plugin-to-override-default-api-behavior/276255)

<div class="topic-metadata">

**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\
**Replies:** 1\
**Last updated:** [June 21, 2021, 9:10am UTC](https://discuss.elastic.co/t/any-way-for-an-elasticsearch-plugin-to-override-default-api-behavior/276255 "2021-06-21T09:10:30Z")

</div>

Hi, I'm playing around with Elastic, and wondered if there's anyway to dynamically override a default endpoint behavior. I tried creating a plugin which adds a BaseRestHandler, but when attempting to specify a route wh…

---

## [How to disable the new index creation mechanism whenever I ran Kibana 7.5.1?](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973)

<div class="topic-metadata">

**Author:** [@Zaga](https://discuss.elastic.co/u/Zaga)\
**Replies:** 4\
**Last updated:** [January 5, 2021, 10:51am UTC](https://discuss.elastic.co/t/how-to-disable-the-new-index-creation-mechanism-whenever-i-ran-kibana-7-5-1/259973 "2021-01-05T10:51:04Z")

</div>

Unlike in Kibana 6, I keep getting new indexes generated whenever I run my Kibana 7.5.1 instance .kibana\_1, .kibana\_2 etc. Why is it happening? can I disable it? it costs a lot of time and space to my development proce…

---

## [Custom event category in correlation rule](https://discuss.elastic.co/t/custom-event-category-in-correlation-rule/258809)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [December 17, 2020, 7:48am UTC](https://discuss.elastic.co/t/custom-event-category-in-correlation-rule/258809 "2020-12-17T07:48:54Z")

</div>

Can anyone please explain what does it means I have Symantec antimalware logs on index pattern logstash-sepm\*. In json document I don't have event.category field but I want to create a correlation rule what if the sa…

---

## [Filebeat support rotating or renaming log files of another service?](https://discuss.elastic.co/t/filebeat-support-rotating-or-renaming-log-files-of-another-service/256543)

<div class="topic-metadata">

**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\
**Replies:** 1\
**Last updated:** [November 25, 2020, 1:59am UTC](https://discuss.elastic.co/t/filebeat-support-rotating-or-renaming-log-files-of-another-service/256543 "2020-11-25T01:59:54Z")

</div>

Hello, Does Filebeat support rotating / renaming log files of an other service? Meaning can Filebeat be used as a replacement for logrotate or other similar tools? Thanks, FREDDIE

---

## [Elasticsearch 7.4.2 Snapshot and restore](https://discuss.elastic.co/t/elasticsearch-7-4-2-snapshot-and-restore/243928)

<div class="topic-metadata">

**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-2-snapshot-and-restore/243928 "2020-08-13T13:42:14Z")

</div>

I am using Elasticsearch 7.4.2 and some clarification and help on snapshot and restore. There is nothing like full snapshot or partial snapshot. Each snapshot is a complete snapshot. As I know each snapshot is incremen…

---

## [Metricbeat no data](https://discuss.elastic.co/t/metricbeat-no-data/230134)

<div class="topic-metadata">

**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\
**Replies:** 4\
**Last updated:** [May 4, 2020, 8:23am UTC](https://discuss.elastic.co/t/metricbeat-no-data/230134 "2020-05-04T08:23:28Z")

</div>

Hi everyone, Currently I have set-up metricbeat. I changed the index name to a custom one and after that change I can't see data anymore in the Host overview. I can still see the other dashboards, but if I go to System …

---

## [Create dynamic labels from a part of es request](https://discuss.elastic.co/t/create-dynamic-labels-from-a-part-of-es-request/212332)

<div class="topic-metadata">

**Author:** [@tofmonaute](https://discuss.elastic.co/u/tofmonaute)\
**Replies:** 4\
**Last updated:** [January 8, 2020, 11:38am UTC](https://discuss.elastic.co/t/create-dynamic-labels-from-a-part-of-es-request/212332 "2020-01-08T11:38:38Z")

</div>

Hi, I try to create a vizualisation with Timelion with dynamic labels ( extracted from request response ) For example: the following search in Discover tools :slight\_smile: message: "SQL ERROR" results in f…

---

## [Which network.host IP will be used to communicate?](https://discuss.elastic.co/t/which-network-host-ip-will-be-used-to-communicate/184588)

<div class="topic-metadata">

**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 4:00am UTC](https://discuss.elastic.co/t/which-network-host-ip-will-be-used-to-communicate/184588 "2019-06-07T04:00:20Z")

</div>

Hi all, We have a cluster with some nodes having 2 network.host declared: network.host: \["1.2.3.4", 10.11.12.13"\] Our question is quite simple: which one will be used by nodes and masters to communicate between them…

---

## [APM showing Excessive negative average reponse time](https://discuss.elastic.co/t/apm-showing-excessive-negative-average-reponse-time/180517)

<div class="topic-metadata">

**Author:** [@gaurav9620](https://discuss.elastic.co/u/gaurav9620)\
**Replies:** 4\
**Last updated:** [May 14, 2019, 6:26am UTC](https://discuss.elastic.co/t/apm-showing-excessive-negative-average-reponse-time/180517 "2019-05-14T06:26:08Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.2.…

---

## [Logstash not able to connect to presto using logstash](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-presto-using-logstash/176368)

<div class="topic-metadata">

**Author:** [@yasin\_mohammed](https://discuss.elastic.co/u/yasin_mohammed)\
**Replies:** 4\
**Last updated:** [April 12, 2019, 8:31am UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-presto-using-logstash/176368 "2019-04-12T08:31:57Z")

</div>

Hi... We have a cassandra database from where we were fetching data and it used to work properly. Now we are asked to connect to presto sitting on top of cassandra. After changing the driver class and path to presto I k…

---

## [Help for writing a query](https://discuss.elastic.co/t/help-for-writing-a-query/119658)

<div class="topic-metadata">

**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 3:39pm UTC](https://discuss.elastic.co/t/help-for-writing-a-query/119658 "2018-02-13T15:39:04Z")

</div>

Hello, I have this message for example: \<189\>date=2018-02-13 time=15:05:47 devname=FG-ORDITECH-1 devid=FG100D3G16817009 logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" logtime=1518530747 sr…

---

## [Basic regex failing in ad hoc query](https://discuss.elastic.co/t/basic-regex-failing-in-ad-hoc-query/111451)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 4\
**Last updated:** [December 14, 2017, 7:41pm UTC](https://discuss.elastic.co/t/basic-regex-failing-in-ad-hoc-query/111451 "2017-12-14T19:41:01Z")

</div>

Works: +"meetingId" Does not work: +/meetingId/ I don't understand?

---

## [Non realtime aspects of ES](https://discuss.elastic.co/t/non-realtime-aspects-of-es/106387)

<div class="topic-metadata">

**Author:** [@iitgrad](https://discuss.elastic.co/u/iitgrad)\
**Replies:** 4\
**Last updated:** [November 4, 2017, 10:58pm UTC](https://discuss.elastic.co/t/non-realtime-aspects-of-es/106387 "2017-11-04T22:58:47Z")

</div>

I notice that if I update a document in ES and then immediately query, the change is not reflected. If I query a 2nd time, say 500ms later, the change is reflected. Is this expected behavior? If so, is there a way I can…

---

## [Installing shield in kibana - getting error for plugin command](https://discuss.elastic.co/t/installing-shield-in-kibana-getting-error-for-plugin-command/69201)

<div class="topic-metadata">

**Author:** [@rashmy](https://discuss.elastic.co/u/rashmy)\
**Replies:** 4\
**Last updated:** [December 20, 2016, 12:48am UTC](https://discuss.elastic.co/t/installing-shield-in-kibana-getting-error-for-plugin-command/69201 "2016-12-20T00:48:40Z")

</div>

I want to implement shield and watcher in my project. When I run the command to install plugin, I am getting error message that plugin command is not supported. What could be the reason. Mine is windows OS.

---

## [Connect Logstash to ingest node?](https://discuss.elastic.co/t/connect-logstash-to-ingest-node/54275)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 4\
**Last updated:** [June 29, 2016, 1:06pm UTC](https://discuss.elastic.co/t/connect-logstash-to-ingest-node/54275 "2016-06-29T13:06:57Z")

</div>

Hi, Do I have to leave node.ingest to the default true when I want to use Logstash to send events to this node? Or do I need it only if I want to send data directly to Elasticsearch and have it processed with pipelines…

---

## [Deduce filters from search string](https://discuss.elastic.co/t/deduce-filters-from-search-string/265353)

<div class="topic-metadata">

**Author:** [@Christian87](https://discuss.elastic.co/u/Christian87)\
**Replies:** 4\
**Last updated:** [February 24, 2021, 3:15pm UTC](https://discuss.elastic.co/t/deduce-filters-from-search-string/265353 "2021-02-24T15:15:40Z")

</div>

Hi, let's say I store a catalogue of household appliances in Elasticsearch. Documents in my index can represent dish washers, washing machines, freezers and similar devices. Dish washers have a text field "type" which …

---

## [Problem with filebeat](https://discuss.elastic.co/t/problem-with-filebeat/296317)

<div class="topic-metadata">

**Author:** [@San9](https://discuss.elastic.co/u/San9)\
**Replies:** 3\
**Last updated:** [February 16, 2022, 3:59pm UTC](https://discuss.elastic.co/t/problem-with-filebeat/296317 "2022-02-16T15:59:11Z")

</div>

Hello, I have a problem c filebeat 7.12. The filebeat agent is not working correctly. Initially, 2 sources of logs were configured, data is received from one source, but the second one worked for a month and the data was…

---

## [Elasticsearch 7.16 failed install on Unbuntu 20.04 - cannot execute binary file](https://discuss.elastic.co/t/elasticsearch-7-16-failed-install-on-unbuntu-20-04-cannot-execute-binary-file/293777)

<div class="topic-metadata">

**Author:** [@Winston\_Ferguson](https://discuss.elastic.co/u/Winston_Ferguson)\
**Replies:** 3\
**Last updated:** [January 11, 2022, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-failed-install-on-unbuntu-20-04-cannot-execute-binary-file/293777 "2022-01-11T13:54:49Z")

</div>

Hi, I'm unable to solve my issue installing Elasticsearch on my new Windows 11 machine running Ubuntu 20.04 (via Windows Subsystem for Linux). The log received is: Reading package lists... Done Building dependency tree…

---

## [Ubuntu 20.04 tar/zip installed - systemd timeout](https://discuss.elastic.co/t/ubuntu-20-04-tar-zip-installed-systemd-timeout/287000)

<div class="topic-metadata">

**Author:** [@imper86](https://discuss.elastic.co/u/imper86)\
**Replies:** 3\
**Last updated:** [October 19, 2021, 9:04am UTC](https://discuss.elastic.co/t/ubuntu-20-04-tar-zip-installed-systemd-timeout/287000 "2021-10-19T09:04:09Z")

</div>

Hello, I have a strange issue with a fresh tar/zip installation of Elasticsearch. When I use Elasticsearch v6 this way - there is no problem. Also apt installation works fine. But when I want to use systemd with Elastic…

---

## [Ability to remove blank range of dates from Kibana visualization](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864)

<div class="topic-metadata">

**Author:** [@BMGR](https://discuss.elastic.co/u/BMGR)\
**Replies:** 3\
**Last updated:** [August 19, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864 "2021-08-19T22:38:48Z")

</div>

Hey all, I'm trying to build a dashboard that hones in on two primary time frames - monthly and yearly. In order to view yearly values, it appears that my date range needs to be set to that year. For the monthly range…

---

## [Do I need a Gold license if I am using the Elastic Cloud Gold Subscription?](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998)

<div class="topic-metadata">

**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\
**Replies:** 3\
**Last updated:** [December 8, 2020, 1:47pm UTC](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998 "2020-12-08T13:47:38Z")

</div>

Is it possible to run an ELK deployment on Elastic Cloud with the Gold subscription without having the Gold license? I have seen that for self-managed ELK we need to get the Gold license. Is that the same case with Ela…

---

## [Anomaly Result Interpretation for Seasonal Data](https://discuss.elastic.co/t/anomaly-result-interpretation-for-seasonal-data/239216)

<div class="topic-metadata">

**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\
**Replies:** 3\
**Last updated:** [July 3, 2020, 1:08pm UTC](https://discuss.elastic.co/t/anomaly-result-interpretation-for-seasonal-data/239216 "2020-07-03T13:08:34Z")

</div>

Hi, I have one job running in elastic ML with following config: "bucket\_span": "10m", "detectors": \[ { "detector\_description": "high\_non\_zero\_count by \\"client.user\_name\\" partitionfield=\\"client.ip\\"…

---

## [Role based access control](https://discuss.elastic.co/t/role-based-access-control/214300)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 3\
**Last updated:** [January 8, 2020, 9:54pm UTC](https://discuss.elastic.co/t/role-based-access-control/214300 "2020-01-08T21:54:40Z")

</div>

I'm trying to setup role based access control. I define a security\_engineer role and a security\_engineer space for the security engineers that needs read only access. I'm on elasticsearch version 7.5.0 with security ena…

---

## [Cluster Health assistance](https://discuss.elastic.co/t/cluster-health-assistance/170533)

<div class="topic-metadata">

**Author:** [@ec2](https://discuss.elastic.co/u/ec2)\
**Replies:** 3\
**Last updated:** [March 4, 2019, 11:25am UTC](https://discuss.elastic.co/t/cluster-health-assistance/170533 "2019-03-04T11:25:06Z")

</div>

Hi, I was hoping to get some assistance with the health of a cluster I am running in a prod environment. I am relatively new to the Elastic Stack but have done quite a lot of reading on the various aspects of the Elast…

---

## [Import picture.png into kibana](https://discuss.elastic.co/t/import-picture-png-into-kibana/135244)

<div class="topic-metadata">

**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\
**Replies:** 3\
**Last updated:** [June 11, 2018, 4:38pm UTC](https://discuss.elastic.co/t/import-picture-png-into-kibana/135244 "2018-06-11T16:38:59Z")

</div>

Hello everyone, Could I import picture.png into kibana platform ? Please Help.

---

## [How to wrap nested query with filter by \_index field in ElasticSearch?](https://discuss.elastic.co/t/how-to-wrap-nested-query-with-filter-by-index-field-in-elasticsearch/113095)

<div class="topic-metadata">

**Author:** [@SimpleCode](https://discuss.elastic.co/u/SimpleCode)\
**Replies:** 3\
**Last updated:** [January 22, 2018, 7:40am UTC](https://discuss.elastic.co/t/how-to-wrap-nested-query-with-filter-by-index-field-in-elasticsearch/113095 "2018-01-22T07:40:21Z")

</div>

I have the following query GET product,account/producttype,accounttype/\_search { "query": { "bool": { "should": \[ { "bool": { "must": \[ { "nested": { "query": { "bool": { "should": \[ { "match": { "keyword…

---

## [Odd behavior when logstash finished pipeline](https://discuss.elastic.co/t/odd-behavior-when-logstash-finished-pipeline/114612)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 2:32pm UTC](https://discuss.elastic.co/t/odd-behavior-when-logstash-finished-pipeline/114612 "2018-01-11T14:32:04Z")

</div>

I have two pipelines defined in pipelines.yml: one for my main pipeline which imports data from jdbc input, and another for the dead\_letter\_queue input. When I run Logstash when it gets to the end of the database, it se…

---

## [Is that possible add a common top nav for every app?](https://discuss.elastic.co/t/is-that-possible-add-a-common-top-nav-for-every-app/96481)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 1:43am UTC](https://discuss.elastic.co/t/is-that-possible-add-a-common-top-nav-for-every-app/96481 "2017-08-10T01:43:47Z")

</div>

Hi experts: AFAIK, Like menu ‘new’, ‘share’, ‘Open’ is a top\_nav element, is that possible I can add a my\_top\_nav on top of top\_nav element? I try to modify the chrome.jade as bellow. but failed, could you give some …

---

## [@timestamp doesn't match with my computer times](https://discuss.elastic.co/t/timestamp-doesnt-match-with-my-computer-times/92797)

<div class="topic-metadata">

**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\
**Replies:** 3\
**Last updated:** [July 15, 2017, 7:10pm UTC](https://discuss.elastic.co/t/timestamp-doesnt-match-with-my-computer-times/92797 "2017-07-15T19:10:40Z")

</div>

Hi, I having a problem with times. because this output doesn't match with my computer times. I used ctx.trigger.scheduled\_time to print times. this output 2017-07-12T11:11:38.878Z and time at my computer 2017-07-…

---

## [Logstash - How to format xml tags to show in Kibana](https://discuss.elastic.co/t/logstash-how-to-format-xml-tags-to-show-in-kibana/48708)

<div class="topic-metadata">

**Author:** [@Robert1](https://discuss.elastic.co/u/Robert1)\
**Replies:** 0\
**Last updated:** [April 28, 2016, 4:33pm UTC](https://discuss.elastic.co/t/logstash-how-to-format-xml-tags-to-show-in-kibana/48708 "2016-04-28T16:33:25Z")

</div>

I have the follow xml logs : \<?xml version="1.0" encoding="UTF-8"?\> \<trail xmlns="http://xmlns.teste.com/testeas/schema/teste\_trailtrail-20.7.xsd" xmlns:xsi="http://www.w3.org/2001/XML-teste" xsi:Location="http://xmlns.…

[Previous page](https://discuss.elastic.co/top.md?page=1655&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1657&per_page=50&period=all)
