# Top

**URL:** https://discuss.elastic.co/top.md?page=1675&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1676

---

## [How to add automatically all the indices from elasticsearch to kibana?](https://discuss.elastic.co/t/how-to-add-automatically-all-the-indices-from-elasticsearch-to-kibana/81136)

<div class="topic-metadata">

**Author:** [@jafferwilson](https://discuss.elastic.co/u/jafferwilson)\
**Replies:** 2\
**Last updated:** [April 5, 2017, 5:17am UTC](https://discuss.elastic.co/t/how-to-add-automatically-all-the-indices-from-elasticsearch-to-kibana/81136 "2017-04-05T05:17:00Z")

</div>

I am trying to list my elasticsearch indices into kibana for a visualization, so that I can use the data in my program. Whenever I try to map the index in kibana, I manually input the name of the index. I have 20 + indi…

---

## [Provide more control over Report Generation](https://discuss.elastic.co/t/provide-more-control-over-report-generation/57880)

<div class="topic-metadata">

**Author:** [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\
**Replies:** 2\
**Last updated:** [August 13, 2016, 5:50pm UTC](https://discuss.elastic.co/t/provide-more-control-over-report-generation/57880 "2016-08-13T17:50:43Z")

</div>

There should be more controls added while generating a report. Some of the controls should be:- Stopping the report generation Pausing a report generation Clearing all the documents present in Generated reports (Or …

---

## [Kafka input problem](https://discuss.elastic.co/t/kafka-input-problem/50107)

<div class="topic-metadata">

**Author:** [@Vtamins](https://discuss.elastic.co/u/Vtamins)\
**Replies:** 2\
**Last updated:** [May 18, 2016, 2:05am UTC](https://discuss.elastic.co/t/kafka-input-problem/50107 "2016-05-18T02:05:29Z")

</div>

I use kafka as input for my logstash But it have a problem. \[2016-05-16 17:56:56,151\] INFO Got user-level KeeperException when processing sessioni d:0x154b859cdaa0018 type:create cxid:0x15 zxid:0x24b txn…

---

## [Limit query not working for me (JSON)](https://discuss.elastic.co/t/limit-query-not-working-for-me-json/42679)

<div class="topic-metadata">

**Author:** [@Mathaxx](https://discuss.elastic.co/u/Mathaxx)\
**Replies:** 2\
**Last updated:** [March 1, 2016, 10:48am UTC](https://discuss.elastic.co/t/limit-query-not-working-for-me-json/42679 "2016-03-01T10:48:54Z")

</div>

Hi, My cluster configuration : 2 nodes My index settings are : 3 primary shard 1 replica I would like get 2 documents on each shard so I use this request : { "query": { "filtered": { "query": { "match\_all": …

---

## [Replica Shards Recovery](https://discuss.elastic.co/t/replica-shards-recovery/29388)

<div class="topic-metadata">

**Author:** [@skumar](https://discuss.elastic.co/u/skumar)\
**Replies:** 2\
**Last updated:** [September 18, 2015, 5:24am UTC](https://discuss.elastic.co/t/replica-shards-recovery/29388 "2015-09-18T05:24:27Z")

</div>

Hello everyone, Suppose there are two nodes n1 and n2. n1 contains all primary shards and n2 contains all replica shards. At moment t1 , n1 contains 1000 docs and n2 contains 1000 docs . Now at t2 , n2 goes down somehow …

---

## [Scoring and "Relative-ness" based on Business Rules](https://discuss.elastic.co/t/scoring-and-relative-ness-based-on-business-rules/15128)

<div class="topic-metadata">

**Author:** [@daviddeath](https://discuss.elastic.co/u/daviddeath)\
**Replies:** 2\
**Last updated:** [January 7, 2014, 10:03pm UTC](https://discuss.elastic.co/t/scoring-and-relative-ness-based-on-business-rules/15128 "2014-01-07T22:03:24Z")

</div>

What is the best way to make products more relevant outside of the default scoring? I have an unknown number of business rules that will dictate a document's "relativity". Meaning, if one document scores higher th…

---

## [Increase Kibana data table bucket size](https://discuss.elastic.co/t/increase-kibana-data-table-bucket-size/291284)

<div class="topic-metadata">

**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\
**Replies:** 1\
**Last updated:** [December 9, 2021, 7:40am UTC](https://discuss.elastic.co/t/increase-kibana-data-table-bucket-size/291284 "2021-12-09T07:40:21Z")

</div>

Kibana v 7.15.1 I want to show some items in the Kibana data table. And I found that the size of the bucket restricts the showing results. For example, if I set the size to 20, some log data will not be displayed on the…

---

## [Kibana Alert Action Message with Range Vaues](https://discuss.elastic.co/t/kibana-alert-action-message-with-range-vaues/205297)

<div class="topic-metadata">

**Author:** [@Michael\_Schellhouse](https://discuss.elastic.co/u/Michael_Schellhouse)\
**Replies:** 1\
**Last updated:** [November 18, 2019, 2:24pm UTC](https://discuss.elastic.co/t/kibana-alert-action-message-with-range-vaues/205297 "2019-11-18T14:24:32Z")

</div>

I am trying to output search timestamp range in alert notification message rather than the monitor start/end time. Using a 5 minute offset in search. "range": { "@timestamp": {…

---

## [How to set locale for add\_field inside a date filter?](https://discuss.elastic.co/t/how-to-set-locale-for-add-field-inside-a-date-filter/152559)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 8:20pm UTC](https://discuss.elastic.co/t/how-to-set-locale-for-add-field-inside-a-date-filter/152559 "2018-10-17T20:20:19Z")

</div>

Hi, I'm trying to create a new field with the weekday based on the @timestamp field, which I generate with a date {} filter. The date {} seems to be working just fine, putting the correct value in the @timestamp. But th…

---

## [Parse Json Array](https://discuss.elastic.co/t/parse-json-array/91704)

<div class="topic-metadata">

**Author:** [@Edufernandez2](https://discuss.elastic.co/u/Edufernandez2)\
**Replies:** 1\
**Last updated:** [July 4, 2017, 3:10am UTC](https://discuss.elastic.co/t/parse-json-array/91704 "2017-07-04T03:10:45Z")

</div>

Trying to parse a Json array like this message \[{"UserDomain":"VOFFICESECURE","UserName":"Administrator","ComputerName":"DC01.vofficesecure.com"},{"UserDomain":"VOFFICESECURE","UserName":"Administrator","ComputerName"…

---

## [When does curator run jobs?](https://discuss.elastic.co/t/when-does-curator-run-jobs/58390)

<div class="topic-metadata">

**Author:** [@Tyler\_Siemers](https://discuss.elastic.co/u/Tyler_Siemers)\
**Replies:** 1\
**Last updated:** [August 18, 2016, 7:55pm UTC](https://discuss.elastic.co/t/when-does-curator-run-jobs/58390 "2016-08-18T19:55:23Z")

</div>

I have just got Curator up and running and successfully ran a dry-run against my actions file. I didn't see anything in the curator document as to how and when it runs. Do you have to manually run these jobs from the c…

---

## [How to search deep?](https://discuss.elastic.co/t/how-to-search-deep/17632)

<div class="topic-metadata">

**Author:** [@Namespace](https://discuss.elastic.co/u/Namespace)\
**Replies:** 1\
**Last updated:** [May 21, 2014, 7:25am UTC](https://discuss.elastic.co/t/how-to-search-deep/17632 "2014-05-21T07:25:42Z")

</div>

Hi guys. Hi have a little problem. I have this Index: ▾ hits{} total: 1000 max\_score: 1 ▾ hits \_index: "defaultdata" \_type: "zdata" \_id: "ETgJeWj3QV63QvMBA72G\_w" \_score: 1 ▾ \_source{} zName: "Little2Word2" zT…

---

## [Best way to count Child object matches?](https://discuss.elastic.co/t/best-way-to-count-child-object-matches/9706)

<div class="topic-metadata">

**Author:** [@phill](https://discuss.elastic.co/u/phill)\
**Replies:** 1\
**Last updated:** [March 3, 2014, 4:03pm UTC](https://discuss.elastic.co/t/best-way-to-count-child-object-matches/9706 "2014-03-03T16:03:23Z")

</div>

If I have a parent and child relationship I can write a query to find all parents that match criteria within the parent and other criteria within the child. I can use a has-child query to see if there are any approp…

---

## [How to use Elasticsearch to find Collocations and Statistically Improbable Phrases](https://discuss.elastic.co/t/how-to-use-elasticsearch-to-find-collocations-and-statistically-improbable-phrases/12681)

<div class="topic-metadata">

**Author:** [@Mike](https://discuss.elastic.co/u/Mike)\
**Replies:** 1\
**Last updated:** [July 6, 2013, 3:48am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-to-find-collocations-and-statistically-improbable-phrases/12681 "2013-07-06T03:48:54Z")

</div>

1. What is the best way to find collocations of terms? Is it by indexing documents using the shingles filter, and then performing a terms facet on that field? 2. How can I get a list of stati…

---

## [Empty index after restart](https://discuss.elastic.co/t/empty-index-after-restart/6013)

<div class="topic-metadata">

**Author:** [@vlagorce](https://discuss.elastic.co/u/vlagorce)\
**Replies:** 1\
**Last updated:** [November 29, 2011, 6:16pm UTC](https://discuss.elastic.co/t/empty-index-after-restart/6013 "2011-11-29T18:16:13Z")

</div>

Hello, I don't undestand how to shutdown my embeded ES node and find the indexed document after restart. .I have a single node without replication (see config at the end). I index a very small document successfu…

---

## [Get dataset into Elastic](https://discuss.elastic.co/t/get-dataset-into-elastic/353710)

<div class="topic-metadata">

**Author:** [@CD9820](https://discuss.elastic.co/u/CD9820)\
**Replies:** 4\
**Last updated:** [February 23, 2024, 11:43am UTC](https://discuss.elastic.co/t/get-dataset-into-elastic/353710 "2024-02-23T11:43:26Z")

</div>

Hello, I developed a script that gathers information from a range of physical servers (hardware health state, firmware versions, security settings, ...). The gathered dataset is written to a json file. As a test I 've …

---

## [How can create script field by using SQL or DSL instead of painless?](https://discuss.elastic.co/t/how-can-create-script-field-by-using-sql-or-dsl-instead-of-painless/320863)

<div class="topic-metadata">

**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\
**Replies:** 4\
**Last updated:** [December 12, 2022, 5:30am UTC](https://discuss.elastic.co/t/how-can-create-script-field-by-using-sql-or-dsl-instead-of-painless/320863 "2022-12-12T05:30:10Z")

</div>

hi everyone, as i know Es support create script field, running\_time filed while query by using painless. But can I create an script field like that by using SQL ? Example: select case when col1 = 1 then 2 else 0 end as …

---

## [Event Filters & Wildcards](https://discuss.elastic.co/t/event-filters-wildcards/343295)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 6\
**Last updated:** [October 10, 2023, 2:09pm UTC](https://discuss.elastic.co/t/event-filters-wildcards/343295 "2023-10-10T14:09:03Z")

</div>

According to the docs, it sounds like the only way to use wildcards is with matches and file.path.text ? So using is with an asterisk at the beginning or end going to interpret that as a literal asterisk?

---

## [Filebeat does not send data to logstash](https://discuss.elastic.co/t/filebeat-does-not-send-data-to-logstash/320292)

<div class="topic-metadata">

**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\
**Replies:** 6\
**Last updated:** [December 2, 2022, 8:23pm UTC](https://discuss.elastic.co/t/filebeat-does-not-send-data-to-logstash/320292 "2022-12-02T20:23:53Z")

</div>

Hi! here is my filebeat config filebeat.inputs: - type: syslog id: my-filestream-id enabled: true paths: - /var/log/\*.log - /var/log/nginx/access\*.log - /var/log/messages - /bar/log/secure filebea…

---

## [Error calling pipeline when setting the document ID in beats](https://discuss.elastic.co/t/error-calling-pipeline-when-setting-the-document-id-in-beats/272560)

<div class="topic-metadata">

**Author:** [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Replies:** 6\
**Last updated:** [May 10, 2021, 1:30pm UTC](https://discuss.elastic.co/t/error-calling-pipeline-when-setting-the-document-id-in-beats/272560 "2021-05-10T13:30:29Z")

</div>

Hi. I'm facing issues when I try to set the document id in filebeat to avoid duplicates: I have a filebeat configuration as following: filebeat.inputs: - type: log paths: - /dumps-json/wsdumps/\*\* …

---

## [How is a template used while creating an index with Java API](https://discuss.elastic.co/t/how-is-a-template-used-while-creating-an-index-with-java-api/229339)

<div class="topic-metadata">

**Author:** [@angryninja](https://discuss.elastic.co/u/angryninja)\
**Replies:** 6\
**Last updated:** [April 24, 2020, 4:25pm UTC](https://discuss.elastic.co/t/how-is-a-template-used-while-creating-an-index-with-java-api/229339 "2020-04-24T16:25:34Z")

</div>

Hi, I'm trying to create an index which is going to have a common structure every time it'll be recreated. I've created a template on ES and want to use it while creating and populating the index via Java program. How…

---

## [Running 7.15 yarn kbn bootstrap got error: The Cypress App could not be downloaded](https://discuss.elastic.co/t/running-7-15-yarn-kbn-bootstrap-got-error-the-cypress-app-could-not-be-downloaded/287553)

<div class="topic-metadata">

**Author:** [@qinzehua](https://discuss.elastic.co/u/qinzehua)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 1:47am UTC](https://discuss.elastic.co/t/running-7-15-yarn-kbn-bootstrap-got-error-the-cypress-app-could-not-be-downloaded/287553 "2021-10-26T01:47:51Z")

</div>

my branch is at 7.15, when i run yarn kbn bootstrap got error: Does your workplace require a proxy to be used to access the Internet? If so, you must configure the HTTP\_PROXY environment variable before downloading Cypr…

---

## [ELK security 401](https://discuss.elastic.co/t/elk-security-401/285424)

<div class="topic-metadata">

**Author:** [@gmhafiz](https://discuss.elastic.co/u/gmhafiz)\
**Replies:** 2\
**Last updated:** [September 29, 2021, 6:04am UTC](https://discuss.elastic.co/t/elk-security-401/285424 "2021-09-29T06:04:36Z")

</div>

I wanted to try out Alerting in Kibana so security needs to be enabled. However, both logstash and kibana isn't able to log into Elasticsearch ELK version: 7.10.1 docker-compose.log.yml version: '3.4' services: el…

---

## [Exporting snapshot for security and hot backup](https://discuss.elastic.co/t/exporting-snapshot-for-security-and-hot-backup/276767)

<div class="topic-metadata">

**Author:** [@Bibas](https://discuss.elastic.co/u/Bibas)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 10:14am UTC](https://discuss.elastic.co/t/exporting-snapshot-for-security-and-hot-backup/276767 "2021-06-23T10:14:49Z")

</div>

Hello ! I have 2 question : I know that snapshot and restore is the best way to backup an elasticsearch cluster, but since my ES is running inside a docker container which have a named volume, is it possible to back…

---

## [Source map line numbers mismatch (Angular)](https://discuss.elastic.co/t/source-map-line-numbers-mismatch-angular/251795)

<div class="topic-metadata">

**Author:** [@chan-n](https://discuss.elastic.co/u/chan-n)\
**Replies:** 2\
**Last updated:** [October 15, 2020, 11:59pm UTC](https://discuss.elastic.co/t/source-map-line-numbers-mismatch-angular/251795 "2020-10-15T23:59:40Z")

</div>

I am using Angular 9 and elastic/apm-rum-angular version 1.1.6. I uploaded the source maps generated by running "ng build --source-map". There is a mismatch between what is displayed in the "Exception stack trace" and …

---

## [Number\_format\_exception: Elasticsearch Query Template - check if value of int field present inside array\[int\] field](https://discuss.elastic.co/t/number-format-exception-elasticsearch-query-template-check-if-value-of-int-field-present-inside-array-int-field/244220)

<div class="topic-metadata">

**Author:** [@tinhn](https://discuss.elastic.co/u/tinhn)\
**Replies:** 2\
**Last updated:** [August 10, 2020, 6:07pm UTC](https://discuss.elastic.co/t/number-format-exception-elasticsearch-query-template-check-if-value-of-int-field-present-inside-array-int-field/244220 "2020-08-10T18:07:44Z")

</div>

Hello, I'm trying to write a logstash filter that reads from an elasticsearch index using a template. I want to check if an integer matches a value stored in an array of ints. // incoming record { "id": 2 } // query…

---

## [Kibana visualization with "filter by condition" doesn't work on dashboard](https://discuss.elastic.co/t/kibana-visualization-with-filter-by-condition-doesnt-work-on-dashboard/212911)

<div class="topic-metadata">

**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\
**Replies:** 2\
**Last updated:** [December 24, 2019, 5:50pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-filter-by-condition-doesnt-work-on-dashboard/212911 "2019-12-24T17:50:16Z")

</div>

Kibana visualization with “filter by condition” doesn't work on dashboard. :frowning\_face: Visualization works fine without dashboard. On dashboard it shows “No results found”. Same condition works in discover properl…

---

## [Your distribution is broken](https://discuss.elastic.co/t/your-distribution-is-broken/206638)

<div class="topic-metadata">

**Author:** [@pditommaso](https://discuss.elastic.co/u/pditommaso)\
**Replies:** 2\
**Last updated:** [November 5, 2019, 7:55pm UTC](https://discuss.elastic.co/t/your-distribution-is-broken/206638 "2019-11-05T19:55:50Z")

</div>

Running Elasticsearch with the following command docker run -d --name elasticsearch --rm --name es -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:6.8.4 I'm getting the following error on a basi…

---

## [Limit Saved Object Permissions](https://discuss.elastic.co/t/limit-saved-object-permissions/204667)

<div class="topic-metadata">

**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 2:11pm UTC](https://discuss.elastic.co/t/limit-saved-object-permissions/204667 "2019-10-23T14:11:24Z")

</div>

I would like to allow users the ability to delete saved searches. From what I see this needs to be done via the Saved Object Management Screen, is there a way to limit them to be able to just delete search saved objects …

---

## [コピーしたフィールドから〇文字抜き出す方法](https://discuss.elastic.co/t/topic/185143)

<div class="topic-metadata">

**Author:** [@Yuichi\_Takagi](https://discuss.elastic.co/u/Yuichi_Takagi)\
**Replies:** 2\
**Last updated:** [June 12, 2019, 1:50am UTC](https://discuss.elastic.co/t/topic/185143 "2019-06-12T01:50:39Z")

</div>

logstashでパースしたデータのうち、特定フィールドの値をコピーし指定した文字数だけを抜き出す方法を探しています。 ご存知の方がいればご教示いただけますでしょうか。 以下は取得したい結果の例です。 user-nameの値から5文字分抜き出したuser-name5フィールドを作成。 // "user-name":"hogehoge","user-name5":"hogeh" 以下の様にmutateのadd\_fieldで単純…

---

## [Is it ok to run Logstash in Docker for Production?](https://discuss.elastic.co/t/is-it-ok-to-run-logstash-in-docker-for-production/135998)

<div class="topic-metadata">

**Author:** [@jbrack](https://discuss.elastic.co/u/jbrack)\
**Replies:** 2\
**Last updated:** [June 18, 2018, 4:03pm UTC](https://discuss.elastic.co/t/is-it-ok-to-run-logstash-in-docker-for-production/135998 "2018-06-18T16:03:15Z")

</div>

I don't see much writing about this out on the web. Is it recommended to run Logstash in Docker for a production environment? What are some things to look out for? I am looking to run multiple logstash services in Kubern…

---

## [Filtering by Bit Array element](https://discuss.elastic.co/t/filtering-by-bit-array-element/58747)

<div class="topic-metadata">

**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\
**Replies:** 2\
**Last updated:** [August 24, 2016, 8:05pm UTC](https://discuss.elastic.co/t/filtering-by-bit-array-element/58747 "2016-08-24T20:05:18Z")

</div>

Hello, I have a bit array. And I want to filter based on if certain bits are ON or OFF. Looking at the Elasticsearch 2.3 docs, I don't see anything about bitarrays. But it seems I can use an Array of Booleans or a Bi…

---

## [How to add the multiple users to shield from csv file?](https://discuss.elastic.co/t/how-to-add-the-multiple-users-to-shield-from-csv-file/39507)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 2\
**Last updated:** [January 19, 2016, 7:41am UTC](https://discuss.elastic.co/t/how-to-add-the-multiple-users-to-shield-from-csv-file/39507 "2016-01-19T07:41:59Z")

</div>

Hi, I can manually add the user in shield, but i do this for all the time and so i'll add my all the user in csv file with username,role and password. How can i make it any idea about it.

---

## [Is it possible to have my own scripted dashboard](https://discuss.elastic.co/t/is-it-possible-to-have-my-own-scripted-dashboard/25041)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 2\
**Last updated:** [July 8, 2015, 12:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-my-own-scripted-dashboard/25041 "2015-07-08T12:13:07Z")

</div>

Hi Experts, May I create my own scripted dashboard if yes , please do let me know from where I can start , as I am new to Json and JS. I have seen some blogs while googling "http://blog.trifork.com/2014/05/20/advanced…

---

## [Deleted index directories still can data logs through kibana](https://discuss.elastic.co/t/deleted-index-directories-still-can-data-logs-through-kibana/23269)

<div class="topic-metadata">

**Author:** [@Ch\_Ravikishore](https://discuss.elastic.co/u/Ch_Ravikishore)\
**Replies:** 2\
**Last updated:** [April 16, 2015, 8:42am UTC](https://discuss.elastic.co/t/deleted-index-directories-still-can-data-logs-through-kibana/23269 "2015-04-16T08:42:33Z")

</div>

Hi, I deleted the index directories from \*/data/Cluster/nodes/0/indices But still I am able to access logs from kibana dashboard. I don't know where I went wrong.Please suggest me to delete 7 day old indices. inde…

---

## [7.2 Rollover Command Fails](https://discuss.elastic.co/t/7-2-rollover-command-fails/347981)

<div class="topic-metadata">

**Author:** [@Matt\_Clairmont](https://discuss.elastic.co/u/Matt_Clairmont)\
**Replies:** 3\
**Last updated:** [November 26, 2023, 12:31pm UTC](https://discuss.elastic.co/t/7-2-rollover-command-fails/347981 "2023-11-26T12:31:47Z")

</div>

Course: Certified Elasticsearch Engineer Version: 8.1 Hi, in module 7.2, at the rollover step to refrewsh component template, the rollover solution fails due to missing items in the payload. POST my\_metrics-service.st…

---

## [Troubleshooting Netflow Logs Display Issue in Kibana with Elasticsearch](https://discuss.elastic.co/t/troubleshooting-netflow-logs-display-issue-in-kibana-with-elasticsearch/341146)

<div class="topic-metadata">

**Author:** [@abntkpi](https://discuss.elastic.co/u/abntkpi)\
**Replies:** 8\
**Last updated:** [August 21, 2023, 11:21am UTC](https://discuss.elastic.co/t/troubleshooting-netflow-logs-display-issue-in-kibana-with-elasticsearch/341146 "2023-08-21T11:21:42Z")

</div>

Hello and good time to you, I have installed Elasticsearch along with Kibana, and I installed the Netflow record on Kibana to receive Netflow from Cisco Switch 2960. However, the Cisco Netflow logs are not being display…

---

## [Data does not change after changing timestamp for kibana dashboard](https://discuss.elastic.co/t/data-does-not-change-after-changing-timestamp-for-kibana-dashboard/320641)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 8\
**Last updated:** [December 7, 2022, 5:42am UTC](https://discuss.elastic.co/t/data-does-not-change-after-changing-timestamp-for-kibana-dashboard/320641 "2022-12-07T05:42:19Z")

</div>

Hi I've imported a kibana dashboard to another using ansible playbook. After importing I've changed the index for the dashboard, since the index for the imported dashboard does not exist. Ev erything works fine after cha…

---

## [How to make an interval of minutes in a timestamp on Lens \[Dashboards\]](https://discuss.elastic.co/t/how-to-make-an-interval-of-minutes-in-a-timestamp-on-lens-dashboards/312123)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 3\
**Last updated:** [August 16, 2022, 1:48am UTC](https://discuss.elastic.co/t/how-to-make-an-interval-of-minutes-in-a-timestamp-on-lens-dashboards/312123 "2022-08-16T01:48:06Z")

</div>

Hello everyone, I'm new to the making of dashboards and now I'm having a bit of problem dealing with a specific field on Lens. First here is the image in question: On the left is a random ID given to a device and on…

---

## [Convert elasticsearch query output of float fields( latitude & longtitude) to String](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001)

<div class="topic-metadata">

**Author:** [@Sagar\_kadu](https://discuss.elastic.co/u/Sagar_kadu)\
**Replies:** 3\
**Last updated:** [August 19, 2021, 8:59pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001 "2021-08-19T20:59:18Z")

</div>

I'm using elasticsearch input plugin to fetch data from elasticsearch using scroll api and it returns JSON document which consists of \[customerAddresses\] array containing latitude & logitude fields of float type...I woul…

---

## [Set up - load the Kibana templates](https://discuss.elastic.co/t/set-up-load-the-kibana-templates/275731)

<div class="topic-metadata">

**Author:** [@sk88](https://discuss.elastic.co/u/sk88)\
**Replies:** 3\
**Last updated:** [June 13, 2021, 12:48am UTC](https://discuss.elastic.co/t/set-up-load-the-kibana-templates/275731 "2021-06-13T00:48:21Z")

</div>

i have the fllowing error root@stathis:/home/stathis# /usr/share/filebeat/bin/filebeat setup Exiting: error loading config file: stat filebeat.yml: no such file or directory filebeat test config: Config OK also file…

---

## [Dissect processor issue](https://discuss.elastic.co/t/dissect-processor-issue/237278)

<div class="topic-metadata">

**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\
**Replies:** 3\
**Last updated:** [June 18, 2020, 5:31pm UTC](https://discuss.elastic.co/t/dissect-processor-issue/237278 "2020-06-18T17:31:48Z")

</div>

v7.2 When setting target\_prefix to "" (empty string) the output from the dissector does not appear in console. When I set it to anything else, including a single whitespace, it does appear. Any suggestions ?

---

## [Securing Elastic AMP server, client\_authentication and RUM](https://discuss.elastic.co/t/securing-elastic-amp-server-client-authentication-and-rum/235559)

<div class="topic-metadata">

**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\
**Replies:** 3\
**Last updated:** [June 10, 2020, 12:15pm UTC](https://discuss.elastic.co/t/securing-elastic-amp-server-client-authentication-and-rum/235559 "2020-06-10T12:15:13Z")

</div>

Hello all, I am trying to secure the Elastic APM server I use for Real User Monitoring. Some snippets from different documentation Elastic APM Server - SSL config - client\_authentication This option only needs to be…

---

## [Date\_time format change in elasticsearch from version 6.5 to 7.2](https://discuss.elastic.co/t/date-time-format-change-in-elasticsearch-from-version-6-5-to-7-2/188546)

<div class="topic-metadata">

**Author:** [@tomassino](https://discuss.elastic.co/u/tomassino)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 9:51am UTC](https://discuss.elastic.co/t/date-time-format-change-in-elasticsearch-from-version-6-5-to-7-2/188546 "2019-07-04T09:51:13Z")

</div>

Hi all, I noticed that some dates that were correctly handled by elasticsearch version 6.5 are rejected by elasticsearch 7.2. Here is an example: Elasticseach 7.2.0 PUT localhost:9200/my\_index { "mappings": { "pr…

---

## [Indices keep appearing after deleting /data directory](https://discuss.elastic.co/t/indices-keep-appearing-after-deleting-data-directory/183559)

<div class="topic-metadata">

**Author:** [@javiroberts](https://discuss.elastic.co/u/javiroberts)\
**Replies:** 3\
**Last updated:** [May 31, 2019, 3:26pm UTC](https://discuss.elastic.co/t/indices-keep-appearing-after-deleting-data-directory/183559 "2019-05-31T15:26:02Z")

</div>

Hi everyone! I'm new here and relatively new in ES usage (I've been using it since v5.x). The last days I've come along the following issue: I want to make a fresh install of ES on the three VMs of my cluster, and for …

---

## [Statsdbeat available](https://discuss.elastic.co/t/statsdbeat-available/149524)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 3\
**Last updated:** [September 27, 2018, 8:12am UTC](https://discuss.elastic.co/t/statsdbeat-available/149524 "2018-09-27T08:12:13Z")

</div>

Listening for UDP statsd packages and sending them to ElasticSearch Source code here: We use it for storing application counters (submitted via a statsdclient) into Elastic Search e.g. https://github.com/alexcesaro…

---

## [Date format not working in logstash 6.3](https://discuss.elastic.co/t/date-format-not-working-in-logstash-6-3/147111)

<div class="topic-metadata">

**Author:** [@sachinvy](https://discuss.elastic.co/u/sachinvy)\
**Replies:** 3\
**Last updated:** [September 3, 2018, 10:02pm UTC](https://discuss.elastic.co/t/date-format-not-working-in-logstash-6-3/147111 "2018-09-03T22:02:27Z")

</div>

I am using logstash 6.3 and following is my input and message. For some reason it is not converting String to Date. input { stdin { codec =\> json } } output { stdout { codec =\> rubydebug } } filter { date { ma…

---

## [Find exact data when the type is text](https://discuss.elastic.co/t/find-exact-data-when-the-type-is-text/136559)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 8\
**Last updated:** [June 21, 2018, 2:27pm UTC](https://discuss.elastic.co/t/find-exact-data-when-the-type-is-text/136559 "2018-06-21T14:27:47Z")

</div>

I have a mapping using the type: text to store emails, can I search for documents that have a value exactly the same as what was written in the field of type text?

---

## [Kibana not showing new data](https://discuss.elastic.co/t/kibana-not-showing-new-data/121804)

<div class="topic-metadata">

**Author:** [@Chiang\_Poh\_Lin](https://discuss.elastic.co/u/Chiang_Poh_Lin)\
**Replies:** 3\
**Last updated:** [March 1, 2018, 7:37am UTC](https://discuss.elastic.co/t/kibana-not-showing-new-data/121804 "2018-03-01T07:37:33Z")

</div>

i installed elasticseach, metricbeats, kibana on ubuntu 14.04lts following this website: https://www.linux.com/blog/monitoring-your-machine-elk-stack#comments Kibana is not showing new data, I changed the time range on …

---

## [Issue while starting Logstash 6.0 on windows 10](https://discuss.elastic.co/t/issue-while-starting-logstash-6-0-on-windows-10/120362)

<div class="topic-metadata">

**Author:** [@Amol\_Vishwarupe](https://discuss.elastic.co/u/Amol_Vishwarupe)\
**Replies:** 3\
**Last updated:** [February 19, 2018, 11:46pm UTC](https://discuss.elastic.co/t/issue-while-starting-logstash-6-0-on-windows-10/120362 "2018-02-19T23:46:42Z")

</div>

I am getting below error which starting logstash agent on window 10 , can someone please help here . C:\\HomeWare\\ES6\\logstash-6.0.0\\logstash-6.0.0\\bin\>logstash.bat agent -f test.config LoadError: Could not load FFI Pro…

[Previous page](https://discuss.elastic.co/top.md?page=1674&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1676&per_page=50&period=all)
