# Top **URL:** https://discuss.elastic.co/top.md?page=1664&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1665 --- ## [ダッシュボードやグラフの流用について](https://discuss.elastic.co/t/topic/147496)
**Author:** [@yamamotoh](https://discuss.elastic.co/u/yamamotoh)\ **Replies:** 2\ **Last updated:** [September 6, 2018, 7:38am UTC](https://discuss.elastic.co/t/topic/147496 "2018-09-06T07:38:58Z")
質問ばかりですみません。 こういうとき、皆さんはどうしていらっしゃいますか？という話題です。 目的： ・月次レポートを作成する。 ・毎月元ネタのファイル（CSVなど）を読み込んでインデックスを作成する。 ・Dashboard上の表示は、毎月同じテンプレートを使用する。 質問： ・現状毎月、データを読み込んでグラフを作成し、ダッシュボートを作っています。 ・インデックスの指定を変えられれば、グラフやダッシュボードのテンプレ… --- ## [Filebeat breaking up docker log lines](https://discuss.elastic.co/t/filebeat-breaking-up-docker-log-lines/146420)
**Author:** [@btieman](https://discuss.elastic.co/u/btieman)\ **Replies:** 2\ **Last updated:** [August 29, 2018, 1:09pm UTC](https://discuss.elastic.co/t/filebeat-breaking-up-docker-log-lines/146420 "2018-08-29T13:09:02Z")
I'm using filebeat 6.3 to read docker log files with the default docker json-file driver. Lines over 16kb in size are being reported by filebeat as 2 seperate log events. The symptoms look like the situation the combin… --- ## [Actualización de Xpack falla al instalarse](https://discuss.elastic.co/t/actualizacion-de-xpack-falla-al-instalarse/102587)
**Author:** [@yolena.mora](https://discuss.elastic.co/u/yolena.mora)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 7:56pm UTC](https://discuss.elastic.co/t/actualizacion-de-xpack-falla-al-instalarse/102587 "2017-10-05T19:56:53Z")
Hola buenos días a todos. Necesito su ayuda. Estoy intentado actualizar la licencia de X-Pack en un servidor con sistema operativo Windows, he descargado previamente la actualización básica que dura un año, ya que estab… --- ## [Math function in Logstash](https://discuss.elastic.co/t/math-function-in-logstash/100721)
**Author:** [@ashvita](https://discuss.elastic.co/u/ashvita)\ **Replies:** 2\ **Last updated:** [September 16, 2017, 5:10am UTC](https://discuss.elastic.co/t/math-function-in-logstash/100721 "2017-09-16T05:10:56Z")
Hi, I need to calculate 100-total. Which filter should I use? This is the message that I receive - NE\_217\_225- Cpu(s): 16.6%us, 7.4%sy, 0.0%ni, 74.9%id, 1.0%wa, 0.0%hi, 0.0%si, 0.0%st My grok filter is as follo… --- ## [Redirecting from Dashboard to another Dashboard or Visualization](https://discuss.elastic.co/t/redirecting-from-dashboard-to-another-dashboard-or-visualization/75011)
**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\ **Replies:** 2\ **Last updated:** [February 15, 2017, 4:30am UTC](https://discuss.elastic.co/t/redirecting-from-dashboard-to-another-dashboard-or-visualization/75011 "2017-02-15T04:30:21Z")
Hello, I am using kibana 5.2. I want like if user clicks on pie chart or bar chart. It should get redirect to Data table(may be in another dashboard or visualization) showing its value. So can this be achieved in … --- ## [If the numbers after the decimal is zero, it doesn't return as a double value?](https://discuss.elastic.co/t/if-the-numbers-after-the-decimal-is-zero-it-doesnt-return-as-a-double-value/64515)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 2\ **Last updated:** [November 1, 2016, 8:11am UTC](https://discuss.elastic.co/t/if-the-numbers-after-the-decimal-is-zero-it-doesnt-return-as-a-double-value/64515 "2016-11-01T08:11:34Z")
I'm having an index created in elasticsearch 5.0, where it contains data from my MySQL db. There's a field which is a string in my table, which I need it as a double in ES. So what I did was added the mapping when I c… --- ## [Logstash Filter: How To Add Tag For “If X Event Happens More Than Y Times In Z Seconds”](https://discuss.elastic.co/t/logstash-filter-how-to-add-tag-for-if-x-event-happens-more-than-y-times-in-z-seconds/57286)
**Author:** [@joshuasmith](https://discuss.elastic.co/u/joshuasmith)\ **Replies:** 2\ **Last updated:** [August 5, 2016, 10:44am UTC](https://discuss.elastic.co/t/logstash-filter-how-to-add-tag-for-if-x-event-happens-more-than-y-times-in-z-seconds/57286 "2016-08-05T10:44:41Z")
I am new to Logstash and am trying to write a filter that will add a tag when event X is seen more than Y times in Z seconds. For instance, in the following example log, I want to apply a tag to traffic from the IP add… --- ## [Need help in scaling up my elasticsearch-logstash-graylog setup](https://discuss.elastic.co/t/need-help-in-scaling-up-my-elasticsearch-logstash-graylog-setup/45184)
**Author:** [@mshar039](https://discuss.elastic.co/u/mshar039)\ **Replies:** 2\ **Last updated:** [March 23, 2016, 12:08pm UTC](https://discuss.elastic.co/t/need-help-in-scaling-up-my-elasticsearch-logstash-graylog-setup/45184 "2016-03-23T12:08:14Z")
Hi All, My task is to have a centralized log analysis tool that can accommodate 500 GB of log files; and can search for anything within seconds from it. So, had a basic setup of Graylog with elasticsearch and logstash.… --- ## [Elasticsearch cannot restore existing snapshot. Blob not found](https://discuss.elastic.co/t/elasticsearch-cannot-restore-existing-snapshot-blob-not-found/155976)
**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 5:19am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-restore-existing-snapshot-blob-not-found/155976 "2018-11-09T05:19:05Z")
Elasticsearch version: 6.3.2 I was trying to restore an old snapshot (taken in January 2018) of Elasticsearch 5.2.2 from a read only S3 repository. The necessary permissions in the IAM role for the instance are setup. … --- ## [Dynamically Create Query in using asp dotnet client](https://discuss.elastic.co/t/dynamically-create-query-in-using-asp-dotnet-client/360167)
**Author:** [@tifflynn](https://discuss.elastic.co/u/tifflynn)\ **Replies:** 5\ **Last updated:** [May 29, 2024, 8:24am UTC](https://discuss.elastic.co/t/dynamically-create-query-in-using-asp-dotnet-client/360167 "2024-05-29T08:24:45Z")
The following is a query written in C#. It leverages Elastic.Clients.Elasticsearch version 8.13.7. This is NOT the NEST client. The query uses myTenants which is passed in as a parameter to the method. The type of myT… --- ## [Disable scroll instructions on map](https://discuss.elastic.co/t/disable-scroll-instructions-on-map/317625)
**Author:** [@Cory34](https://discuss.elastic.co/u/Cory34)\ **Replies:** 5\ **Last updated:** [November 1, 2022, 12:56am UTC](https://discuss.elastic.co/t/disable-scroll-instructions-on-map/317625 "2022-11-01T00:56:00Z")
How do we disable the "Use control + scroll to zoom the map..." message which appears on the map? Thanks. --- ## [MYSQL to Elasticsearch via Logstash Problem: incompatible encodings: CP850 and UTF-8](https://discuss.elastic.co/t/mysql-to-elasticsearch-via-logstash-problem-incompatible-encodings-cp850-and-utf-8/314122)
**Author:** [@engineer86](https://discuss.elastic.co/u/engineer86)\ **Replies:** 5\ **Last updated:** [October 12, 2022, 9:57am UTC](https://discuss.elastic.co/t/mysql-to-elasticsearch-via-logstash-problem-incompatible-encodings-cp850-and-utf-8/314122 "2022-10-12T09:57:45Z")
I am using an elk stack via docker-compose with ES version 8.4.0 My goal is to use Logstash to copy an entire table from my MYSQL DB to ES. The connection works and Logstash copies about 30 entries with no problems. But… --- ## [Logstash delta pull from postgres](https://discuss.elastic.co/t/logstash-delta-pull-from-postgres/238501)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 5\ **Last updated:** [June 27, 2020, 4:15am UTC](https://discuss.elastic.co/t/logstash-delta-pull-from-postgres/238501 "2020-06-27T04:15:16Z")
I have a simple logstash pipeline job that is a SQL job that pulls data from a postgres db into ES. The initial pull was 1.5 million rows, which ran last night and took about 5 minutes. but the delta daily pull is about… --- ## [Metricbeat AWS RDS Module for Aurora Serverless](https://discuss.elastic.co/t/metricbeat-aws-rds-module-for-aurora-serverless/203077)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 5\ **Last updated:** [October 18, 2019, 11:26pm UTC](https://discuss.elastic.co/t/metricbeat-aws-rds-module-for-aurora-serverless/203077 "2019-10-18T23:26:10Z")
Hi, Are there plans to scrape metrics for aurora serverless databases? Best, Justin --- ## [Elasticsearch SQL in Kibana](https://discuss.elastic.co/t/elasticsearch-sql-in-kibana/193864)
**Author:** [@cbmurphy87](https://discuss.elastic.co/u/cbmurphy87)\ **Replies:** 5\ **Last updated:** [August 14, 2019, 5:28pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-in-kibana/193864 "2019-08-14T17:28:34Z")
I'm trying to do a SUM on a query, and can't seem to get anything to work. Perhaps I'm using the wrong syntax, but I keep getting the error message "Cannot use non-grouped column". I'm using metricbeat to collect metric… --- ## [Parse log file with two formats in it](https://discuss.elastic.co/t/parse-log-file-with-two-formats-in-it/166876)
**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\ **Replies:** 5\ **Last updated:** [February 5, 2019, 7:05pm UTC](https://discuss.elastic.co/t/parse-log-file-with-two-formats-in-it/166876 "2019-02-05T19:05:11Z")
I have a log file with two formats in it. The metadata is more like a key value format where the delimiter is '=', the actual data is in a csv format. Both these formats have been bundled into a single file. Can I genera… --- ## [Visualization of rolled up index](https://discuss.elastic.co/t/visualization-of-rolled-up-index/155730)
**Author:** [@cy\_lir](https://discuss.elastic.co/u/cy_lir)\ **Replies:** 5\ **Last updated:** [November 21, 2018, 4:49pm UTC](https://discuss.elastic.co/t/visualization-of-rolled-up-index/155730 "2018-11-21T16:49:18Z")
Hi ! I'd like to have some hints on how to visualize data from a rolled up index with Kibana. Let's say my index contains CPU information. I create a simple visualization with kibana to see the evolution of CPU usage o… --- ## [Timestamp - cant figure out](https://discuss.elastic.co/t/timestamp-cant-figure-out/87845)
**Author:** [@punit\_j](https://discuss.elastic.co/u/punit_j)\ **Replies:** 5\ **Last updated:** [June 1, 2017, 4:07pm UTC](https://discuss.elastic.co/t/timestamp-cant-figure-out/87845 "2017-06-01T16:07:56Z")
Hi , I have a web log entry like below: JINK|Information|0|05-17-2017 16:00:44:56|\[JNK\]|GET|/Services/portal/v1/CheckToken|End|System.Web.Http.Action|ReflectedHttpActionDescriptor.ExecuteAsync()|Action returned 'True'|… --- ## [Setup.template.name Setup template.pattern have to be set](https://discuss.elastic.co/t/setup-template-name-setup-template-pattern-have-to-be-set/330383)
**Author:** [@Joel\_Goncalves2](https://discuss.elastic.co/u/Joel_Goncalves2)\ **Replies:** 1\ **Last updated:** [April 21, 2023, 1:47am UTC](https://discuss.elastic.co/t/setup-template-name-setup-template-pattern-have-to-be-set/330383 "2023-04-21T01:47:42Z")
I am trying to send packetbeat data to another index and it is giving me this error. Error initializing beat: setup.template.name and setup.template.pattern have to be set … --- ## [Reading date format in logstash date filter](https://discuss.elastic.co/t/reading-date-format-in-logstash-date-filter/329070)
**Author:** [@UsmanNiazi](https://discuss.elastic.co/u/UsmanNiazi)\ **Replies:** 7\ **Last updated:** [March 31, 2023, 7:45pm UTC](https://discuss.elastic.co/t/reading-date-format-in-logstash-date-filter/329070 "2023-03-31T19:45:21Z")
Hi, I am unable to convert this string "03/31/2023 03:15 AM PDT" to date when using logstash date filter. Getting error dateparse failure. I am using below script date { match =\> \[ "start\_time", "mm/dd/yyyy HH:mm Z",… --- ## [Elastic Scripting caching issue](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 6:30am UTC](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511 "2021-05-28T06:30:04Z")
I am facing caching issue while using scripts. So I am using below script in elasticsearch query. But when it runs multiple times it gives circuit breaker exception( Too many dynamic script compilations within, max: \[7… --- ## [Kibana Ports reported as vulnerability for TLS v 1.0 and 1.1](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111 "2021-03-03T14:30:31Z")
Hi All We are using Kibana Version 6.6.2. Recently our security scans for vulnerable ports reported Kibana port (5061) for using TLS 1.0 and TLS 1.1. I could not find any documentation on the blogs on how to disable ol… --- ## [Using alt key code in logstash](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 7:52am UTC](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094 "2020-08-20T07:52:00Z")
Hi all, i am using logstash to write some data into txt file so that my output configuration of logstash is as following: output { csv { fields =\> \["My\_Data"\] path =\> "D:\\app\_%{year}\_%{mounth}\_%{day}.txt" } stdout { c… --- ## [Import Statements for Tables in Elastic UI](https://discuss.elastic.co/t/import-statements-for-tables-in-elastic-ui/181364)
**Author:** [@dkelsen](https://discuss.elastic.co/u/dkelsen)\ **Replies:** 1\ **Last updated:** [May 16, 2019, 10:26am UTC](https://discuss.elastic.co/t/import-statements-for-tables-in-elastic-ui/181364 "2019-05-16T10:26:54Z")
Hi there, I'm developing a Kibana plugin and I want to use a table from Elastic UI. I want to use the EuiBasicTable. However, I need to import some things and I don't know where they are coming from. They don't exist in… --- ## [Logstash exists with unexpected error](https://discuss.elastic.co/t/logstash-exists-with-unexpected-error/178695)
**Author:** [@yangjiajun2014](https://discuss.elastic.co/u/yangjiajun2014)\ **Replies:** 1\ **Last updated:** [April 29, 2019, 5:05am UTC](https://discuss.elastic.co/t/logstash-exists-with-unexpected-error/178695 "2019-04-29T05:05:02Z")
I use version 5.6.2 and 6.2.3 in my production env.My logstash exists frequently because of fllowing error: \[2019-03-05T08:49:19,668\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\ **Author:** [@wissil](https://discuss.elastic.co/u/wissil)\ **Replies:** 7\ **Last updated:** [January 4, 2019, 3:27pm UTC](https://discuss.elastic.co/t/search-children-documents-from-parent/162961 "2019-01-04T15:27:44Z") I have a parent - child relationship in my Elastic Search mappings, and they look like follows. There is an "abstract" entity of type user and both driver and passenger inherit from it. I've created user index like this… --- ## [Filebeat to elasticsearch in Kubernetes](https://discuss.elastic.co/t/filebeat-to-elasticsearch-in-kubernetes/124155)
**Author:** [@clule404](https://discuss.elastic.co/u/clule404)\ **Replies:** 1\ **Last updated:** [March 15, 2018, 5:58pm UTC](https://discuss.elastic.co/t/filebeat-to-elasticsearch-in-kubernetes/124155 "2018-03-15T17:58:58Z")
Hi everyone, I have some problems with Filebeat -\> Elasticsearch -\> Kibana in Kubernetes. I get my logs to show up in Kibana, that's not the problem. The problem is, that every Log that shows up just has the following… --- ## [Visualization Data table not displaying complete log message](https://discuss.elastic.co/t/visualization-data-table-not-displaying-complete-log-message/105444)
**Author:** [@nani9](https://discuss.elastic.co/u/nani9)\ **Replies:** 1\ **Last updated:** [October 27, 2017, 2:52am UTC](https://discuss.elastic.co/t/visualization-data-table-not-displaying-complete-log-message/105444 "2017-10-27T02:52:45Z")
I am creating a data table to show log messages. But i can only see single line errors in data table, For example javaexception errors are not displayed. Looks like it is not displaying multiline log message in data tab… --- ## [Elasticsearch stopword](https://discuss.elastic.co/t/elasticsearch-stopword/76145)
**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 12:31pm UTC](https://discuss.elastic.co/t/elasticsearch-stopword/76145 "2017-03-20T12:31:58Z")
你好！ 我打算建立中文的stopword txt. 我在用 "stopwords\_path": "stopword/chinese.txt" 但我在kibana中发现好像不支援中字的stopword，有人有方法解决吗？ --- ## [Mainframe logs Plugin](https://discuss.elastic.co/t/mainframe-logs-plugin/71450)
**Author:** [@welcome2017](https://discuss.elastic.co/u/welcome2017)\ **Replies:** 1\ **Last updated:** [January 13, 2017, 10:12am UTC](https://discuss.elastic.co/t/mainframe-logs-plugin/71450 "2017-01-13T10:12:31Z")
Hello Guys - I am trying to understand if there are any mainframe plugins available yet for Logstash just like Splunk - Ironstream ? I am trying to evaluate options for logging a distributed eco system. Or is there any… --- ## [jSON query in NEST 5.0](https://discuss.elastic.co/t/json-query-in-nest-5-0/70164)
**Author:** [@iluvcode](https://discuss.elastic.co/u/iluvcode)\ **Replies:** 1\ **Last updated:** [December 30, 2016, 11:54pm UTC](https://discuss.elastic.co/t/json-query-in-nest-5-0/70164 "2016-12-30T23:54:57Z")
In debugger i was able to look at the jSON query that is being sent to Elasticsearch in version 1.7. After upgrading to v5.0, i cannot find the jSON query that is being sent to Elasticsearch. --- ## [Watcher install error on elasticsearch 2.4](https://discuss.elastic.co/t/watcher-install-error-on-elasticsearch-2-4/65343)
**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\ **Replies:** 1\ **Last updated:** [November 8, 2016, 12:47pm UTC](https://discuss.elastic.co/t/watcher-install-error-on-elasticsearch-2-4/65343 "2016-11-08T12:47:21Z")
Hi, I tried to install watcher plug in for elasticsearch 2.4 but getting the below error Could not find plugin descriptor 'plugin-descriptor.properties' in plugin zip \[root@ip-10-34-70-115 elasticsearch\]# bin/plugin… --- ## [Increased Kafka Lag due to load balancing](https://discuss.elastic.co/t/increased-kafka-lag-due-to-load-balancing/56041)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [August 3, 2016, 6:11pm UTC](https://discuss.elastic.co/t/increased-kafka-lag-due-to-load-balancing/56041 "2016-08-03T18:11:54Z")
Hello, I am running logstash 2.2.2 and I recently upgraded kafka input/output 3.x plugin to support consumer offset storage to Kafka 0.9 As a result, I am connecting to brokers as oppose to Zookeepers. But what I have … --- ## [Kibana histogram with a value to zero](https://discuss.elastic.co/t/kibana-histogram-with-a-value-to-zero/20012)
**Author:** [@samuel\_merlet1](https://discuss.elastic.co/u/samuel_merlet1)\ **Replies:** 1\ **Last updated:** [October 2, 2014, 10:04am UTC](https://discuss.elastic.co/t/kibana-histogram-with-a-value-to-zero/20012 "2014-10-02T10:04:14Z")
Hi, I can't figure out how to display a value that is 0 ( zero ) in an histogram . When i do my request i have this : { "took" : 5, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "… --- ## [Failed to recover shard (after insertion full disk error)](https://discuss.elastic.co/t/failed-to-recover-shard-after-insertion-full-disk-error/16141)
**Author:** [@Andres1](https://discuss.elastic.co/u/Andres1)\ **Replies:** 1\ **Last updated:** [March 4, 2014, 8:15pm UTC](https://discuss.elastic.co/t/failed-to-recover-shard-after-insertion-full-disk-error/16141 "2014-03-04T20:15:11Z")
Hello, I'm having problems starting elasticsearch after an error. I was bulk indexing a new type when the disk got full and server returned this error: PHP Fatal error: Uncaught exception 'Elastica\\Exception\\B… --- ## [Keeping datastore and index in sync \[Push Vs Pull\] - best approach](https://discuss.elastic.co/t/keeping-datastore-and-index-in-sync-push-vs-pull-best-approach/11372)
**Author:** [@Amarthya\_Master](https://discuss.elastic.co/u/Amarthya_Master)\ **Replies:** 1\ **Last updated:** [March 29, 2013, 10:29am UTC](https://discuss.elastic.co/t/keeping-datastore-and-index-in-sync-push-vs-pull-best-approach/11372 "2013-03-29T10:29:39Z")
From what I read, you can have a push model or a pull mdoel for updating indexes incrementally to keep the datastore and the index in sync. Bypull, using the river, say JDBC if it is a sql DB or writing your own r… --- ## [Getting exception: No node available?](https://discuss.elastic.co/t/getting-exception-no-node-available/5556)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 1\ **Last updated:** [October 11, 2011, 1:06pm UTC](https://discuss.elastic.co/t/getting-exception-no-node-available/5556 "2011-10-11T13:06:22Z")
Hi I am getting following error: org.elasticsearch.client.transport.NoNodeAvailableException: No node available at org.elasticsearch.client.transport.TransportClientNodesService.execute(TransportClientNodesServ… --- ## [Show the \_slm/status somewhere in Kibana Managment](https://discuss.elastic.co/t/show-the-slm-status-somewhere-in-kibana-managment/322216)
**Author:** [@stouch](https://discuss.elastic.co/u/stouch)\ **Replies:** 4\ **Last updated:** [December 30, 2022, 2:21pm UTC](https://discuss.elastic.co/t/show-the-slm-status-somewhere-in-kibana-managment/322216 "2022-12-30T14:21:13Z")
Like some other users, I encountered this issue : \[slm\] Snapshots are just ignored when scheduled, but manual \_execute works - #5 by stouch Even if it can look like a dummy issue, I think it would be nice to get the \_sl… --- ## [Tail -f /var/log/kibana](https://discuss.elastic.co/t/tail-f-var-log-kibana/272830)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:27pm UTC](https://discuss.elastic.co/t/tail-f-var-log-kibana/272830 "2021-05-12T21:27:07Z")
root@elk-1:~# root@elk-1:~# root@elk-1:~# tail -f /var/log/kibana tail: error reading '/var/log/kibana': Is a directory tail: /var/log/kibana: cannot follow end of this type of file; giving up on this name tail: no … --- ## [Span.End() method seems to lock the application in certain cases](https://discuss.elastic.co/t/span-end-method-seems-to-lock-the-application-in-certain-cases/271960)
**Author:** [@javiersotodev](https://discuss.elastic.co/u/javiersotodev)\ **Replies:** 3\ **Last updated:** [May 4, 2021, 1:42am UTC](https://discuss.elastic.co/t/span-end-method-seems-to-lock-the-application-in-certain-cases/271960 "2021-05-04T01:42:52Z")
We recently implemented our apm Custom spans in our code (that processes kafka messages in a high speed) and thanks to one of our processes timeouts and further debug logging we catch that a custom Span End method was ca… --- ## [APM-Server ILM policy is not applied](https://discuss.elastic.co/t/apm-server-ilm-policy-is-not-applied/268960)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 3\ **Last updated:** [April 1, 2021, 3:58pm UTC](https://discuss.elastic.co/t/apm-server-ilm-policy-is-not-applied/268960 "2021-04-01T15:58:17Z")
I have APM Server running with following error apm-server.yml# Source : https://github.com/elastic/apm-server/blob/master/apm-server.docker.yml ################################ APM Server ###############################… --- ## [How to avoid "Phantom Read" problem of nested field](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:06pm UTC](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878 "2019-11-07T15:06:47Z")
Hi, I have a rdbms table design which are one to many relation. Under some consideration,we decide put the relation into elasticsearch index. I create a index(for parent table) and a nested field for the child table. … --- ## [Filebeat 7.1.0 Elasticsearch module audit pipeline incorrectly references @timestamp instead of timestamp](https://discuss.elastic.co/t/filebeat-7-1-0-elasticsearch-module-audit-pipeline-incorrectly-references-timestamp-instead-of-timestamp/182721)
**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\ **Replies:** 3\ **Last updated:** [May 29, 2019, 11:01am UTC](https://discuss.elastic.co/t/filebeat-7-1-0-elasticsearch-module-audit-pipeline-incorrectly-references-timestamp-instead-of-timestamp/182721 "2019-05-29T11:01:16Z")
I'm using Filebeat and Elasticsearch 7.1.0 to capture logs through the Docker input and parsing with the elasticsearch module with config such as: filebeat.autodiscover: providers: # elasticsearch - type: dock… --- ## [Help with mutate gsub filter in logstash](https://discuss.elastic.co/t/help-with-mutate-gsub-filter-in-logstash/150047)
**Author:** [@jason27](https://discuss.elastic.co/u/jason27)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 2:22pm UTC](https://discuss.elastic.co/t/help-with-mutate-gsub-filter-in-logstash/150047 "2018-09-27T14:22:41Z")
Hello, I will like to strip off the last character for a field and I donot know why this is not working in logstash. I have a field named "app\_name" which ends with something like "dashboard\_webapp:" and I will like to… --- ## [Logstash conf not loading new version](https://discuss.elastic.co/t/logstash-conf-not-loading-new-version/143591)
**Author:** [@Rock-HOG](https://discuss.elastic.co/u/Rock-HOG)\ **Replies:** 3\ **Last updated:** [August 29, 2018, 7:07pm UTC](https://discuss.elastic.co/t/logstash-conf-not-loading-new-version/143591 "2018-08-29T19:07:46Z")
Hello, I have this issue with a conf file. I create the file and start laying out a filter. I then save and test it, everything is going well. Then ill add something like another grok filter, add a tag, or overwrite a f… --- ## [JSONPath query on Elasticsearch?](https://discuss.elastic.co/t/jsonpath-query-on-elasticsearch/145297)
**Author:** [@Siddharth\_Trikha](https://discuss.elastic.co/u/Siddharth_Trikha)\ **Replies:** 0\ **Last updated:** [August 21, 2018, 6:39am UTC](https://discuss.elastic.co/t/jsonpath-query-on-elasticsearch/145297 "2018-08-21T06:39:03Z")
I have a resource in my JAVA data model such as: { "user" : { "name" : "elastic", "creator" : "name", "content": { key1: vall1, key2: vall2, key3: vall3, … --- ## [Dynamic template for parent child mapping](https://discuss.elastic.co/t/dynamic-template-for-parent-child-mapping/128181)
**Author:** [@manik](https://discuss.elastic.co/u/manik)\ **Replies:** 3\ **Last updated:** [April 17, 2018, 1:06pm UTC](https://discuss.elastic.co/t/dynamic-template-for-parent-child-mapping/128181 "2018-04-17T13:06:49Z")
I'm using Elastic search 2.4.6 version. I want to have parent child relationship in my document. Parent is product related attributes and child is parent-city related attributes. We've around 100 cities now. Our idea is… --- ## [Kibana user limit](https://discuss.elastic.co/t/kibana-user-limit/118550)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 3\ **Last updated:** [February 6, 2018, 6:24am UTC](https://discuss.elastic.co/t/kibana-user-limit/118550 "2018-02-06T06:24:18Z")
hi there! may i know how many users can use kibana? what is recommended user limit for kibana? i am using kibana v5.5.2 and free one. --- ## [Grokking Voip logs - grokdebug to logstash.conf](https://discuss.elastic.co/t/grokking-voip-logs-grokdebug-to-logstash-conf/109817)
**Author:** [@Winfield\_Henry](https://discuss.elastic.co/u/Winfield_Henry)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 2:51pm UTC](https://discuss.elastic.co/t/grokking-voip-logs-grokdebug-to-logstash-conf/109817 "2017-12-01T14:51:40Z")
Hello, We are trying to make some sense of our voip logs using ELK. We are currently running ELK 6.0, feeding logstash via filebeat running on syslog server. Voip logs are being deposited in separate .log file in /var/l… --- ## [Global locking with ES 5.x](https://discuss.elastic.co/t/global-locking-with-es-5-x/102674)
**Author:** [@jiggly](https://discuss.elastic.co/u/jiggly)\ **Replies:** 3\ **Last updated:** [October 9, 2017, 7:19pm UTC](https://discuss.elastic.co/t/global-locking-with-es-5-x/102674 "2017-10-09T19:19:21Z")
Hi, This page from ES 2.x documentation suggests that it is possible to use ElasticSearch as a global locking source of truth. Is it still reliable in 5.x? As I understand it, it shouldn't be a problem, but I wonder why… [Previous page](https://discuss.elastic.co/top.md?page=1663&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1665&per_page=50&period=all)