# Top **URL:** https://discuss.elastic.co/top.md?page=1670&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1671 --- ## [Cluster crashed](https://discuss.elastic.co/t/cluster-crashed/5403)
**Author:** [@Michael\_Rennecke](https://discuss.elastic.co/u/Michael_Rennecke)\ **Replies:** 8\ **Last updated:** [November 1, 2011, 5:30pm UTC](https://discuss.elastic.co/t/cluster-crashed/5403 "2011-11-01T17:30:38Z")
hello, I have a the following problem. My network crashed in the night and one node died. The Cluster has 11 nodes and 3 replicas. I can't start the Elastic Search with all shards. Many shards are unassign. I can s… --- ## [Downsampling](https://discuss.elastic.co/t/downsampling/65849)
**Author:** [@Fredrik\_Skeel\_Lokke](https://discuss.elastic.co/u/Fredrik_Skeel_Lokke)\ **Replies:** 0\ **Last updated:** [November 11, 2016, 9:45pm UTC](https://discuss.elastic.co/t/downsampling/65849 "2016-11-11T21:45:30Z")
Anyone tried implementing the algorithm called Largest-Triangle-Three-Buckets or LTTB for downsampling timeseries data? --- ## [Logstash gsub: how to replace with backslash?](https://discuss.elastic.co/t/logstash-gsub-how-to-replace-with-backslash/58364)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [August 18, 2016, 3:28pm UTC](https://discuss.elastic.co/t/logstash-gsub-how-to-replace-with-backslash/58364 "2016-08-18T15:28:06Z")
Hi, I have following stuff in a field: "field\_A" =\> "c:\\\\test\\\\test.txt" By some conversion the masking backslash became a valid character. How can I get rid of the double backslashes, so that I have only one (or two… --- ## [Unable to catch exception - org.elasticsearch.transport.ConnectTransportException](https://discuss.elastic.co/t/unable-to-catch-exception-org-elasticsearch-transport-connecttransportexception/12572)
**Author:** [@ashwini\_harshe](https://discuss.elastic.co/u/ashwini_harshe)\ **Replies:** 0\ **Last updated:** [June 28, 2013, 4:06am UTC](https://discuss.elastic.co/t/unable-to-catch-exception-org-elasticsearch-transport-connecttransportexception/12572 "2013-06-28T04:06:19Z")
Hi, I am using elasticsearc 0.91.1 and I am unable to catch exception org.elasticsearch.transport.ConnectTransportException while connecting to elasticsearch using TransportClient(). Below is my code snippet: t… --- ## [Unable to access Elasticsearch connected to company server via Python](https://discuss.elastic.co/t/unable-to-access-elasticsearch-connected-to-company-server-via-python/335288)
**Author:** [@cyl](https://discuss.elastic.co/u/cyl)\ **Replies:** 4\ **Last updated:** [June 29, 2023, 1:09pm UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-connected-to-company-server-via-python/335288 "2023-06-29T13:09:01Z")
Hi Elastic community! :smiley: I have just started using Elastic and Kibana as my company has opted for this tech stack to store much of our data. To analyse the data, I would prefer the use of Python, and hence have b… --- ## [Logstash CSV output plugin not flushing to disk](https://discuss.elastic.co/t/logstash-csv-output-plugin-not-flushing-to-disk/324413)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 4\ **Last updated:** [February 7, 2023, 11:31am UTC](https://discuss.elastic.co/t/logstash-csv-output-plugin-not-flushing-to-disk/324413 "2023-02-07T11:31:37Z")
Hey Everyone, I'm having some trouble with my Logstash config for exporting Elasticsearch data to CSV after upgrading my ELK stack from 7 to 8.6. When running my exporter.conf file it just never flushes to disk. It fil… --- ## [Adding additional weight without matching](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 10:07am UTC](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865 "2021-04-26T10:07:14Z")
I want to be able to Match a subset of the index with a query\_string query. Add additional weight to documents that match a set of post-evaluated criterias. Example: Let's say I have these two documents: \[ { … --- ## [VİSUALİZE LABELS NOT SHOWİNG](https://discuss.elastic.co/t/visualize-labels-not-showing/254983)
**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\ **Replies:** 4\ **Last updated:** [November 11, 2020, 9:39pm UTC](https://discuss.elastic.co/t/visualize-labels-not-showing/254983 "2020-11-11T21:39:35Z")
visualize labels do not come all As seen in the graph, 1 of them has no arrow and label. --- ## [Fatal error occuring on all nodes within the hour](https://discuss.elastic.co/t/fatal-error-occuring-on-all-nodes-within-the-hour/230933)
**Author:** [@faxm0dem](https://discuss.elastic.co/u/faxm0dem)\ **Replies:** 4\ **Last updated:** [May 4, 2020, 3:17pm UTC](https://discuss.elastic.co/t/fatal-error-occuring-on-all-nodes-within-the-hour/230933 "2020-05-04T15:17:29Z")
Using 6.8.6 from the oss rpm for redhat and jvm openjdk-1.8.0.252.b09-2.el7\_8 on Centos 7, we've been getting crashes every second day now on almost all nodes within the hour. I managed to catch the log during the cra… --- ## [Elasticsearch, terms aggs according to sibling nested fields](https://discuss.elastic.co/t/elasticsearch-terms-aggs-according-to-sibling-nested-fields/216174)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 4\ **Last updated:** [February 17, 2020, 10:17am UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggs-according-to-sibling-nested-fields/216174 "2020-02-17T10:17:05Z")
Elasticsearch v7.5 Hello and good day! We have 2 indices named socialmedia and influencers Sample contents: socialmedia : { '\_id' : 1001, 'title' : "Title 1", 'smp\_id' : 1, "latest" : \[ { … --- ## [Let CSV columns be fields](https://discuss.elastic.co/t/let-csv-columns-be-fields/188403)
**Author:** [@Adolfo\_Herrera](https://discuss.elastic.co/u/Adolfo_Herrera)\ **Replies:** 4\ **Last updated:** [July 2, 2019, 4:10pm UTC](https://discuss.elastic.co/t/let-csv-columns-be-fields/188403 "2019-07-02T16:10:28Z")
Hello I'm trying to get the names of the columns from my csv file to become field names. However, they all seem to be staying in the message field input { beats { port =\> 5044 } } filter { csv { … --- ## [Maven shaded/renamed dependencies in es](https://discuss.elastic.co/t/maven-shaded-renamed-dependencies-in-es/8053)
**Author:** [@Sisu\_Alexandru](https://discuss.elastic.co/u/Sisu_Alexandru)\ **Replies:** 4\ **Last updated:** [June 13, 2012, 12:34pm UTC](https://discuss.elastic.co/t/maven-shaded-renamed-dependencies-in-es/8053 "2012-06-13T12:34:28Z")
Hello all, I'm developing some custom facets based on the default ones present in the elasticsearch. My problems are the way I manage dependencies for my custom plugin/facet projects. Here's my question: what … --- ## [Elasticsearch multi-match query using a fuzziness criteria behaves in a strange way](https://discuss.elastic.co/t/elasticsearch-multi-match-query-using-a-fuzziness-criteria-behaves-in-a-strange-way/319498)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 2\ **Last updated:** [November 23, 2022, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-multi-match-query-using-a-fuzziness-criteria-behaves-in-a-strange-way/319498 "2022-11-23T00:40:37Z")
I'm trying to search for some files using the function fetch\_document to fetch a document by its name in the data.name subfield. This function is being used in the following way: fetch\_document( client=server, … --- ## [Enabling repository-s3 plugin to backup ES snapshots to S3](https://discuss.elastic.co/t/enabling-repository-s3-plugin-to-backup-es-snapshots-to-s3/287639)
**Author:** [@rajsuper2021](https://discuss.elastic.co/u/rajsuper2021)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 4:20pm UTC](https://discuss.elastic.co/t/enabling-repository-s3-plugin-to-backup-es-snapshots-to-s3/287639 "2021-10-26T16:20:55Z")
I am running Elasticsearch on EKS, I have enabled the repository-s3 plugin via efk Elasticsearch resource. I am seeing this in the efk logs though: {"type": "server", "timestamp": "2021-10-26T06:13:18,861Z", "level": … --- ## [Logstash multiline issue - limit of size in single event](https://discuss.elastic.co/t/logstash-multiline-issue-limit-of-size-in-single-event/283335)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 2\ **Last updated:** [September 4, 2021, 5:15pm UTC](https://discuss.elastic.co/t/logstash-multiline-issue-limit-of-size-in-single-event/283335 "2021-09-04T17:15:40Z")
Logstash file input configured with multiline pattern as codec =\> multiline { pattern =\> '^ {' negate =\> true what =\> previous } } Input file consist of multiple json objects. This mu… --- ## [Continuously merging documents from multiple indexes](https://discuss.elastic.co/t/continuously-merging-documents-from-multiple-indexes/279953)
**Author:** [@roll](https://discuss.elastic.co/u/roll)\ **Replies:** 2\ **Last updated:** [July 30, 2021, 10:50am UTC](https://discuss.elastic.co/t/continuously-merging-documents-from-multiple-indexes/279953 "2021-07-30T10:50:38Z")
Hi all, I'm fairly new to elasticsearch and have a question regarding merging of documents and removing duplicates. I got the following data structure: topic1: { "\_id": “a12345", "userId" : "x123”, … --- ## [\[ERROR\] Ruby exception occurred: undefined method \`time' for nil:NilClass](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-time-for-nil-nilclass/256062)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 9:09pm UTC](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-time-for-nil-nilclass/256062 "2020-11-30T21:09:11Z")
Всем привет, в logstash логе возникает ошибка, в моем конфиге есть только одно упоминание про Ruby, вот оно: ruby { code =\> " event.set('duration\_call', event.get('Duration\_temp').time.strftime('%H:%M:… --- ## [Can I contribute a datasketches aggregation plugin for elasticsearch?What should I provide?](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394)
**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 6:08am UTC](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394 "2020-06-17T06:08:51Z")
hello, I wrote a datasketch aggregation plugin for elasticsearch, I have tested it in some situations, and its performance can meet my needs. I really want to share it and contribute it to the community to make elastics… --- ## [Java 11 Support in ES Rest High level client](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350)
**Author:** [@premreddy](https://discuss.elastic.co/u/premreddy)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 3:09pm UTC](https://discuss.elastic.co/t/java-11-support-in-es-rest-high-level-client/203350 "2019-10-14T15:09:56Z")
Hi, Can you please let us know if Java 11 can be used to communicate with ES (V7.2) using Rest High level client. As per documentation it's not clear if Java 8 is the only version supported by Rest High level Client. h… --- ## [Use ElasticEearch Query as Filter DSL Query in Discover Section of Kibana](https://discuss.elastic.co/t/use-elasticeearch-query-as-filter-dsl-query-in-discover-section-of-kibana/196562)
**Author:** [@Nirajan](https://discuss.elastic.co/u/Nirajan)\ **Replies:** 2\ **Last updated:** [August 27, 2019, 10:46am UTC](https://discuss.elastic.co/t/use-elasticeearch-query-as-filter-dsl-query-in-discover-section-of-kibana/196562 "2019-08-27T10:46:40Z")
Hello Everybody, if i run a elastic query in kibana console then i am able to see the results but if i use the same query as a filter in Discover Section or in any kibana visualizations then i cannot see any results. D… --- ## [Example Dashboards - Via Logstash](https://discuss.elastic.co/t/example-dashboards-via-logstash/90662)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 11:06am UTC](https://discuss.elastic.co/t/example-dashboards-via-logstash/90662 "2017-06-26T11:06:41Z")
Hello, I have been reading through various threads in regards to the example dashboards showing "no data found" when logs are being pushed via logstash instead of directly to elasticsearch which begs the question if all … --- ## [Configure kibana to default to Marvel app when launched](https://discuss.elastic.co/t/configure-kibana-to-default-to-marvel-app-when-launched/50164)
**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\ **Replies:** 2\ **Last updated:** [December 13, 2016, 9:18am UTC](https://discuss.elastic.co/t/configure-kibana-to-default-to-marvel-app-when-launched/50164 "2016-12-13T09:18:28Z")
We have a Marvel cluster set up to monitor 3 other ES clusters. All works well, but it would be nice if we could force the Kibana instance for the Marvel cluster to default to the "Marvel" app page as opposed to the Kiba… --- ## [How is Elasticsearch windows service implemented?](https://discuss.elastic.co/t/how-is-elasticsearch-windows-service-implemented/65743)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [November 14, 2016, 1:40am UTC](https://discuss.elastic.co/t/how-is-elasticsearch-windows-service-implemented/65743 "2016-11-14T01:40:32Z")
I am now trying to install Elasticsearch on WIndows 2016 Nano server, but failed to setup and run the ES as windows service, I think there are some changes on Nano server. But have no hint on the root cause. Where can I … --- ## [Rolling upgrade from 2.1.0 to 2.1.1 failed. please help to identify the probelm](https://discuss.elastic.co/t/rolling-upgrade-from-2-1-0-to-2-1-1-failed-please-help-to-identify-the-probelm/37963)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 2\ **Last updated:** [December 25, 2015, 10:07pm UTC](https://discuss.elastic.co/t/rolling-upgrade-from-2-1-0-to-2-1-1-failed-please-help-to-identify-the-probelm/37963 "2015-12-25T22:07:13Z")
stop one of them, upgrade it and restart it. below is discovery log and it seems the server can connected to all of other nodes. \[2015-12-25 10:57:00,313\]\[TRACE\]\[discovery.zen.ping.unicast\] \[192.168.200.190\] \[119\] receiv… --- ## [Watcher Acknowledge](https://discuss.elastic.co/t/watcher-acknowledge/120709)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 2\ **Last updated:** [February 21, 2018, 11:38am UTC](https://discuss.elastic.co/t/watcher-acknowledge/120709 "2018-02-21T11:38:50Z")
Is it possible to know who acknowledged the watch when x-pack security is enabled ? Is it possible to create a new field for that ? Thanks --- ## [Kibana warning enabling TLS and using HTTP/2 while using NGINX](https://discuss.elastic.co/t/kibana-warning-enabling-tls-and-using-http-2-while-using-nginx/379432)
**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\ **Replies:** 7\ **Last updated:** [July 25, 2025, 7:44am UTC](https://discuss.elastic.co/t/kibana-warning-enabling-tls-and-using-http-2-while-using-nginx/379432 "2025-07-25T07:44:45Z")
Hi everyone, I'm using NGINX in my ELK Stack 9.0.1 self-managed instance and the Kibana (version 9.0.1) warns me about considering of enably TLS and using HTTP/2: Following the "Learn more" link, I should insert ins… --- ## [How to set other time zone in rally's log?](https://discuss.elastic.co/t/how-to-set-other-time-zone-in-rallys-log/328683)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 7\ **Last updated:** [June 13, 2023, 6:13am UTC](https://discuss.elastic.co/t/how-to-set-other-time-zone-in-rallys-log/328683 "2023-06-13T06:13:49Z")
Is there any way to set other time zone in rally's log? I tried modify the format or datefmt in logging.json, but can't figure it out. "normal": { "format": "%(asctime)s,%(msecs)d %(actorAddress)s/PID:%(process)d… --- ## [Stats requests to data nodes timing out while ingestion is happening](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100)
**Author:** [@ethompson](https://discuss.elastic.co/u/ethompson)\ **Replies:** 7\ **Last updated:** [May 26, 2022, 5:07pm UTC](https://discuss.elastic.co/t/stats-requests-to-data-nodes-timing-out-while-ingestion-is-happening/305100 "2022-05-26T17:07:04Z")
I've got an on-prem hosted ElasticStack set up that looks like \[apps that send logs via http\]-\>Logstash Shipper-\>Kafka-\>3 Logstash Ingesters-\>6 ElasticSearches (3 master, 3 data). Everything is on 7.16.2, and has been h… --- ## [Are Elasticsearch object properties really just flat properties with a namespace?](https://discuss.elastic.co/t/are-elasticsearch-object-properties-really-just-flat-properties-with-a-namespace/299054)
**Author:** [@Robert\_Krueger](https://discuss.elastic.co/u/Robert_Krueger)\ **Replies:** 7\ **Last updated:** [March 10, 2022, 2:20pm UTC](https://discuss.elastic.co/t/are-elasticsearch-object-properties-really-just-flat-properties-with-a-namespace/299054 "2022-03-10T14:20:13Z")
In the Elasticsearch docs (Object field type | Elasticsearch Guide \[8.0\] | Elastic) it is stated that object properties internally are essentially just flat properties with a namespace. However when I do this: POST … --- ## [How to migrate all dashboard, visualization, map, template, kibana settings data?](https://discuss.elastic.co/t/how-to-migrate-all-dashboard-visualization-map-template-kibana-settings-data/295173)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 7\ **Last updated:** [January 24, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-to-migrate-all-dashboard-visualization-map-template-kibana-settings-data/295173 "2022-01-24T06:31:28Z")
I want to completely migrate the data of the 7.12 cluster to the 7.16 cluster, including all the data, which can be understood as mirroring. I suspect that the data on kibana is all on the kibana index. If it is copied … --- ## [Best way to export data do SQL database](https://discuss.elastic.co/t/best-way-to-export-data-do-sql-database/264462)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 7:16pm UTC](https://discuss.elastic.co/t/best-way-to-export-data-do-sql-database/264462 "2021-02-16T19:16:22Z")
Hi, could you help me advice What tools/techniques do you recommend to export data to SQL Database. (PostgreSQL/Oracle or any other) I need aggregations results export to SQL database (continuous query). I supposed… --- ## [Shard replication/recovery going slow](https://discuss.elastic.co/t/shard-replication-recovery-going-slow/140846)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 1\ **Last updated:** [July 20, 2018, 8:06am UTC](https://discuss.elastic.co/t/shard-replication-recovery-going-slow/140846 "2018-07-20T08:06:33Z")
I recently had a node fail completely and had to rebuild it, there are only 3 nodes in the cluster and it took 5 days for the cluster to get back to a status of green. There are some indexes which are a few MB and others… --- ## [Broken encoding of Windows EventLog messages](https://discuss.elastic.co/t/broken-encoding-of-windows-eventlog-messages/74955)
**Author:** [@polymorfiqcoder](https://discuss.elastic.co/u/polymorfiqcoder)\ **Replies:** 1\ **Last updated:** [February 14, 2017, 4:55am UTC](https://discuss.elastic.co/t/broken-encoding-of-windows-eventlog-messages/74955 "2017-02-14T04:55:01Z")
On localized windows we have eventlog messages with non-english letters which logstash unable to reproduce in right way. { "@timestamp" =\> 2017-02-14T03:42:20.105Z, "message" =\> "\\xD1\\xEB\\xF3\\xE6\\… --- ## [Timestamp mapping in CEF](https://discuss.elastic.co/t/timestamp-mapping-in-cef/56510)
**Author:** [@Cabbage](https://discuss.elastic.co/u/Cabbage)\ **Replies:** 1\ **Last updated:** [July 30, 2016, 9:27am UTC](https://discuss.elastic.co/t/timestamp-mapping-in-cef/56510 "2016-07-30T09:27:07Z")
Hi! I have a problem with mapping timestamp field. I have log with events like this CEF:0|SI|Audit|1.2|SECA0023|Report Started|3|rt=Jul 25 2016 11:20:28 msg=Report RSRZLLG0 Started duser=SYS shost= cs2=000 cs2Label=cl… --- ## [Use filter mutate gsub emoticons (emoji) in unicode values](https://discuss.elastic.co/t/use-filter-mutate-gsub-emoticons-emoji-in-unicode-values/51194)
**Author:** [@Gautam\_S\_Thakur](https://discuss.elastic.co/u/Gautam_S_Thakur)\ **Replies:** 1\ **Last updated:** [May 27, 2016, 9:08pm UTC](https://discuss.elastic.co/t/use-filter-mutate-gsub-emoticons-emoji-in-unicode-values/51194 "2016-05-27T21:08:27Z")
I would like to use mutate (gsub) on "text" fieldname to replace unicode value of emoticons to respective string values. An example - "\\ud83d\\ude27" replaced by "emoticon\_anguished" I tried to escape single backslas… --- ## [Как реализовать поиск match\_phrase\_prefix, но с поддержкой fuzziness?](https://discuss.elastic.co/t/match-phrase-prefix-fuzziness/49144)
**Author:** [@Colonel](https://discuss.elastic.co/u/Colonel)\ **Replies:** 1\ **Last updated:** [May 16, 2016, 3:45pm UTC](https://discuss.elastic.co/t/match-phrase-prefix-fuzziness/49144 "2016-05-16T15:45:25Z")
Здравствуйте, мне нужен поиск фразы с ошибками. match\_phrase\_prefix работает отлично, но не поддерживает fuzziness . Как это можно реализовать с помощью ngram или другим каким то способом? --- ## [Cant send sysmon logs via logstash output to apache nifi](https://discuss.elastic.co/t/cant-send-sysmon-logs-via-logstash-output-to-apache-nifi/321487)
**Author:** [@roie](https://discuss.elastic.co/u/roie)\ **Replies:** 6\ **Last updated:** [December 19, 2022, 12:00pm UTC](https://discuss.elastic.co/t/cant-send-sysmon-logs-via-logstash-output-to-apache-nifi/321487 "2022-12-19T12:00:42Z")
hi . im trying to send sysmon logs via logstash and there is no data getin , these are my logs error: {"log.level":"error","@timestamp":"2022-12-18T08:15:16.318Z","log.logger":"publisher\_pipeline\_output","log.origin":{… --- ## [Unable to connet to localhost:9200](https://discuss.elastic.co/t/unable-to-connet-to-localhost-9200/299945)
**Author:** [@shamir](https://discuss.elastic.co/u/shamir)\ **Replies:** 6\ **Last updated:** [March 17, 2022, 7:13pm UTC](https://discuss.elastic.co/t/unable-to-connet-to-localhost-9200/299945 "2022-03-17T19:13:33Z")
in terminal it shows Elasticsearch status as active and running when i try to run this command it returning empty --- ## [How to use if condition to filter spider event gracefully in logstash](https://discuss.elastic.co/t/how-to-use-if-condition-to-filter-spider-event-gracefully-in-logstash/273606)
**Author:** [@stille](https://discuss.elastic.co/u/stille)\ **Replies:** 6\ **Last updated:** [May 22, 2021, 11:39pm UTC](https://discuss.elastic.co/t/how-to-use-if-condition-to-filter-spider-event-gracefully-in-logstash/273606 "2021-05-22T23:39:29Z")
I can use drop event in filebeat to filter spider logs , just like following: - drop\_event: when: or: - contains: message: FacebookBot - contains: message… --- ## [Recommendation for custom authentication](https://discuss.elastic.co/t/recommendation-for-custom-authentication/224265)
**Author:** [@Rhonda\_Gregory](https://discuss.elastic.co/u/Rhonda_Gregory)\ **Replies:** 6\ **Last updated:** [April 21, 2020, 3:45pm UTC](https://discuss.elastic.co/t/recommendation-for-custom-authentication/224265 "2020-04-21T15:45:49Z")
We are using zuul api gateway to authenticate our users. We terminate SSL at that point. We'd like to avoid creating users in the native realm. We'd like to identify our users by their DN and assign them roles based o… --- ## [Hi team, is it possible to change "kibana" in "http://myurl:5601/app/kibana" when entering to the kibana?](https://discuss.elastic.co/t/hi-team-is-it-possible-to-change-kibana-in-http-myurl-5601-app-kibana-when-entering-to-the-kibana/224715)
**Author:** [@MOHIT2710](https://discuss.elastic.co/u/MOHIT2710)\ **Replies:** 6\ **Last updated:** [March 25, 2020, 3:21pm UTC](https://discuss.elastic.co/t/hi-team-is-it-possible-to-change-kibana-in-http-myurl-5601-app-kibana-when-entering-to-the-kibana/224715 "2020-03-25T15:21:47Z")
hi team, is it possible to change "kibana" in "http://myurl:5601/app/ kibana " when entering to the kibana? --- ## [Error while testing pipeline](https://discuss.elastic.co/t/error-while-testing-pipeline/121431)
**Author:** [@amiyadutta](https://discuss.elastic.co/u/amiyadutta)\ **Replies:** 6\ **Last updated:** [February 26, 2018, 4:01pm UTC](https://discuss.elastic.co/t/error-while-testing-pipeline/121431 "2018-02-26T16:01:08Z")
Hi, When we run the following command to test the pipeline - curl -XGET 'localhost:9200/logstash-$DATE/\_search?pretty&q=response=200' output is - { "error" : { "root\_cause" : \[ { "type" : "index\_not\_found\_excepti… --- ## [How do a connect as a second client-only Node to remote cluster?](https://discuss.elastic.co/t/how-do-a-connect-as-a-second-client-only-node-to-remote-cluster/18284)
**Author:** [@Koen\_Smets](https://discuss.elastic.co/u/Koen_Smets)\ **Replies:** 6\ **Last updated:** [June 24, 2014, 1:57pm UTC](https://discuss.elastic.co/t/how-do-a-connect-as-a-second-client-only-node-to-remote-cluster/18284 "2014-06-24T13:57:11Z")
Hi, I've troubles to connect a second client-only Node via the Java API to a remote cluster. The first client (configured as client-only hence no master and no data) runs fine on localhost:9300. However, when t… --- ## [Red Cluster Health - Unsure How to Fix](https://discuss.elastic.co/t/red-cluster-health-unsure-how-to-fix/326464)
**Author:** [@bcantrell](https://discuss.elastic.co/u/bcantrell)\ **Replies:** 3\ **Last updated:** [February 27, 2023, 10:08pm UTC](https://discuss.elastic.co/t/red-cluster-health-unsure-how-to-fix/326464 "2023-02-27T22:08:28Z")
Hi all, I have been trying to figure out a problem where my Kibana is not able to keep connections alive with the Elasticsearch instance, and I think it is because of red cluster/index health. When Kibana is running, I … --- ## [Error for scripted\_metric aggregation on auto\_date\_histogram aggregation](https://discuss.elastic.co/t/error-for-scripted-metric-aggregation-on-auto-date-histogram-aggregation/296741)
**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\ **Replies:** 3\ **Last updated:** [February 10, 2022, 11:18am UTC](https://discuss.elastic.co/t/error-for-scripted-metric-aggregation-on-auto-date-histogram-aggregation/296741 "2022-02-10T11:18:03Z")
I am working with the sample log dataset. Here is what it looks like: "hits" : \[ { "\_index" : "kibana\_sample\_data\_logs", "\_type" : "\_doc", "\_id" : "nfvc3X4BKbUZuD5M4wWJ", "\_score" :… --- ## [How can we read data from Qualys to any of E L K?](https://discuss.elastic.co/t/how-can-we-read-data-from-qualys-to-any-of-e-l-k/249754)
**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 1:45pm UTC](https://discuss.elastic.co/t/how-can-we-read-data-from-qualys-to-any-of-e-l-k/249754 "2020-09-25T13:45:06Z")
Continuing the discussion from Qualys API integration into Elasticsearch: --- ## [Kibana Custom Visualization By Vega](https://discuss.elastic.co/t/kibana-custom-visualization-by-vega/230353)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 3:21am UTC](https://discuss.elastic.co/t/kibana-custom-visualization-by-vega/230353 "2020-05-05T03:21:18Z")
I want create a data table by using Vega , But I don’t know much about its syntax . i copy a json from blog and edit it , i just want a data table looks like { "$schema":"https://vega.github.io/schema/vega/v3.jso… --- ## [Index-setting is not work](https://discuss.elastic.co/t/index-setting-is-not-work/213660)
**Author:** [@Leopold-EI](https://discuss.elastic.co/u/Leopold-EI)\ **Replies:** 3\ **Last updated:** [January 7, 2020, 10:00am UTC](https://discuss.elastic.co/t/index-setting-is-not-work/213660 "2020-01-07T10:00:02Z")
Hi, I'm useing the rally to test my es-cluster. I need to set number\_of\_replicas is 0, but the index still be created with number\_of\_replicas=1. I don't understand why, the indices config should be OK. the indices bo… --- ## [Grouping documents in kibana based on a column without losing the rest columns](https://discuss.elastic.co/t/grouping-documents-in-kibana-based-on-a-column-without-losing-the-rest-columns/206976)
**Author:** [@kakavoul](https://discuss.elastic.co/u/kakavoul)\ **Replies:** 3\ **Last updated:** [November 8, 2019, 10:41am UTC](https://discuss.elastic.co/t/grouping-documents-in-kibana-based-on-a-column-without-losing-the-rest-columns/206976 "2019-11-08T10:41:44Z")
Hello, Let's assume that i have something like that in elastic search alarm\_id sequence date alarm\_text 1 1 2019-11-7 text of alarm1 2 1 2019-11-7 text of alarm2 2 2 … --- ## [Import Visu et Dashboard, filtres invisibles](https://discuss.elastic.co/t/import-visu-et-dashboard-filtres-invisibles/149685)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 3\ **Last updated:** [September 25, 2018, 9:14am UTC](https://discuss.elastic.co/t/import-visu-et-dashboard-filtres-invisibles/149685 "2018-09-25T09:14:43Z")
Bonjour, Sur Kibana Version: 5.6.10, j'ai un souci. Quand j'exporte des visu et des dashboard sur lesquel des filtres ont été appliqué à l'aide des + ou des - sur la droite, et que je les réimporte, sur un autre Kibana… [Previous page](https://discuss.elastic.co/top.md?page=1669&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1671&per_page=50&period=all)