# Top

**URL:** https://discuss.elastic.co/top.md?page=252&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 253

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/241217)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [July 15, 2020, 1:47am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/241217 "2020-07-15T01:47:48Z")

</div>

If you run into this there are a few things you can do to try resolve the error. Check Elasticsearch connectivity From your Kibana host, run curl -XGET es-ip-or-hostname:9200/, you should see a response like; { "name…

---

## [Exclude Multiple Values in Visualization](https://discuss.elastic.co/t/exclude-multiple-values-in-visualization/125606)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [March 26, 2018, 3:49pm UTC](https://discuss.elastic.co/t/exclude-multiple-values-in-visualization/125606 "2018-03-26T15:49:18Z")

</div>

Trying to create a bar chart and would like to exclude three terms. Under advanced, there's the exclude section but I can't seem to figure out the syntax for it to treat the three terms as separate values. What's the p…

---

## [Display latest value in a „Metric“](https://discuss.elastic.co/t/display-latest-value-in-a-metric/114930)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 7:41pm UTC](https://discuss.elastic.co/t/display-latest-value-in-a-metric/114930 "2018-01-10T19:41:44Z")

</div>

Hi there, I would like to display the latest value of a given index in a dashboard with a „Metric“. This should happen in a aws instance of Kibana. Is it possible to do this? The aggregation of the metric inside „Metri…

---

## [Elastic Agent 7.10.1 : javax.net.ssl.SSLHandshakeException: Received fatal alert: bad\_certificate](https://discuss.elastic.co/t/elastic-agent-7-10-1-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/260607)

<div class="topic-metadata">

**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 3:42pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-1-javax-net-ssl-sslhandshakeexception-received-fatal-alert-bad-certificate/260607 "2021-02-03T15:42:36Z")

</div>

Hello, I was testing the latest version of Elastic Stack 7.10.1. So far, so far following the documentation I managed setup an test environment and setup a small lab. I am interested in testing (Simulating Attacks) on …

---

## [Request must contain a kbn-xsrf header](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/96736)

<div class="topic-metadata">

**Author:** [@aws.east](https://discuss.elastic.co/u/aws.east)\
**Replies:** 1\
**Last updated:** [August 11, 2017, 9:28am UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/96736 "2017-08-11T09:28:03Z")

</div>

Team, I have a REST api which creates a customer. I have set app: { noKbnVersion: true}, to the API config. I got the following error. { statusCode: 400, error: ‘Bad Request’, message: ‘Request must contain a kbn-…

---

## [Elastic/elasticsearch-docker not assigning permissions to data directory on run](https://discuss.elastic.co/t/elastic-elasticsearch-docker-not-assigning-permissions-to-data-directory-on-run/65812)

<div class="topic-metadata">

**Author:** [@skubi](https://discuss.elastic.co/u/skubi)\
**Replies:** 4\
**Last updated:** [November 14, 2016, 3:51pm UTC](https://discuss.elastic.co/t/elastic-elasticsearch-docker-not-assigning-permissions-to-data-directory-on-run/65812 "2016-11-14T15:51:30Z")

</div>

Hello, I was trying to use elasticsearch-docker image for hosting dockerized elastichsearch cluster. What I have noticed that the es-docker script: is not assigning any permissions though it is running under non…

---

## [Dec 7th: \[EN\]\[Elasticsearch\] Holiday-proof your cluster](https://discuss.elastic.co/t/dec-7th-en-elasticsearch-holiday-proof-your-cluster/110195)

<div class="topic-metadata">

**Author:** [@cwurm](https://discuss.elastic.co/u/cwurm)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 7:45pm UTC](https://discuss.elastic.co/t/dec-7th-en-elasticsearch-holiday-proof-your-cluster/110195 "2017-12-08T19:45:05Z")

</div>

Before you take off for your well-deserved holidays, here are some tips on how to avoid being rudely pulled back by a pager alert. Make sure you set minimum\_master\_nodes To prevent a split brain, check you have set dis…

---

## [SQL like GROUP BY AND HAVING](https://discuss.elastic.co/t/sql-like-group-by-and-having/104705)

<div class="topic-metadata">

**Author:** [@danishamjad30](https://discuss.elastic.co/u/danishamjad30)\
**Replies:** 1\
**Last updated:** [October 30, 2017, 9:29am UTC](https://discuss.elastic.co/t/sql-like-group-by-and-having/104705 "2017-10-30T09:29:23Z")

</div>

Hi, I want to achieve some functionality which is available in SQL data stores. I have tried a lot but having a hard time achieving that functionality with elasticsearch. I am successful in creating the queries but the …

---

## [ELK versions compatibility matrix](https://discuss.elastic.co/t/elk-versions-compatibility-matrix/48126)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 4\
**Last updated:** [October 30, 2016, 11:54am UTC](https://discuss.elastic.co/t/elk-versions-compatibility-matrix/48126 "2016-10-30T11:54:50Z")

</div>

Hello, Is there any matrix/table which tells us, say for example Logstash-1.5.5 version is compatible with ES-1.5.x or 1.x.x. Kibana-1.4 is compatibel with ES-2.x.x etc. Please provide if we have it. Currently I am u…

---

## [Debian elasticsearch.service: start operation timed out. Terminating](https://discuss.elastic.co/t/debian-elasticsearch-service-start-operation-timed-out-terminating/223262)

<div class="topic-metadata">

**Author:** [@Joel\_wangolo](https://discuss.elastic.co/u/Joel_wangolo)\
**Replies:** 5\
**Last updated:** [March 18, 2020, 3:50pm UTC](https://discuss.elastic.co/t/debian-elasticsearch-service-start-operation-timed-out-terminating/223262 "2020-03-18T15:50:30Z")

</div>

I have a development machine that I use to develop production ready web apps. At first Elasticsearch worked very fine on my local development system, when developing the search of my Site. I stopped Elasticsearch beca…

---

## [Index Lifecycle Management "does not point to index" error](https://discuss.elastic.co/t/index-lifecycle-management-does-not-point-to-index-error/211513)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 6\
**Last updated:** [December 18, 2019, 11:01pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-does-not-point-to-index-error/211513 "2019-12-18T23:01:33Z")

</div>

Long story story short, I had to set setup.ilm.enabled: false in order for my beats not 404 when pushing data to my Elasticsearch stack that is behind an Apache reverse proxy. (Apache is set up to use LDAP auth, which is…

---

## [Dec 7th, 2020: \[FR\] Utilisez Rally comme outil d'import/export de données](https://discuss.elastic.co/t/dec-7th-2020-fr-utilisez-rally-comme-outil-dimport-export-de-donnees/256863)

<div class="topic-metadata">

**Author:** [@Laurent\_Huet](https://discuss.elastic.co/u/Laurent_Huet)\
**Replies:** 0\
**Last updated:** [December 7, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2020-fr-utilisez-rally-comme-outil-dimport-export-de-donnees/256863 "2020-12-07T08:00:01Z")

</div>

English version L'objet de ce post est de montrer comment utiliser l'outil Rally pour exporter des données d'un cluster et les importer dans un autre. L'idée est de pouvoir extraire la totalité des données d'un ou plus…

---

## [Logstash 5.0.0-6.8.20 and 7.0.0-7.16.0: Log4j CVE-2021-44228, CVE-2021-45046 remediation](https://discuss.elastic.co/t/logstash-5-0-0-6-8-20-and-7-0-0-7-16-0-log4j-cve-2021-44228-cve-2021-45046-remediation/292343)

<div class="topic-metadata">

**Author:** [@RobBavey](https://discuss.elastic.co/u/RobBavey)\
**Replies:** 0\
**Last updated:** [December 17, 2021, 5:05pm UTC](https://discuss.elastic.co/t/logstash-5-0-0-6-8-20-and-7-0-0-7-16-0-log4j-cve-2021-44228-cve-2021-45046-remediation/292343 "2021-12-17T17:05:07Z")

</div>

Note — These instructions only apply if you are running Logstash 5.0.0 - 6.8.20, or 7.0.0 - 7.16.0. If you are running an older version of Logstash, or a version of Logstash \>= 6.8.21 in the 6.x series or \>= 7.16.1 in th…

---

## [Dec 6th, 2019 \[EN\] Understanding the \`jvm.options\` file in Elasticsearch](https://discuss.elastic.co/t/dec-6th-2019-en-understanding-the-jvm-options-file-in-elasticsearch/209949)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 0\
**Last updated:** [December 6, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2019-en-understanding-the-jvm-options-file-in-elasticsearch/209949 "2019-12-06T08:00:02Z")

</div>

When configuring Elasticsearch, you will find one page about configuring JVM options. In this post we will take a look how to configure this and how this is implemented internally. Important: With the exception of chang…

---

## [Making a part in the grok expression optional](https://discuss.elastic.co/t/making-a-part-in-the-grok-expression-optional/43961)

<div class="topic-metadata">

**Author:** [@sankallada](https://discuss.elastic.co/u/sankallada)\
**Replies:** 1\
**Last updated:** [March 10, 2016, 7:10am UTC](https://discuss.elastic.co/t/making-a-part-in-the-grok-expression-optional/43961 "2016-03-10T07:10:14Z")

</div>

Hi all, Each line in my log file does not contain a source IP adderss so the "message" =\> "%{TIMESTAMP\_ISO8601:timestamp}\\s+%{LOGLEVEL:loglevel}\\s+%{THREAD:thread}\\s+(?:%{IP:ip})" so it returns a "no mach" - fro…

---

## [Kibana unaccessible after using Migration UI](https://discuss.elastic.co/t/kibana-unaccessible-after-using-migration-ui/101763)

<div class="topic-metadata">

**Author:** [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Replies:** 0\
**Last updated:** [September 25, 2017, 10:11pm UTC](https://discuss.elastic.co/t/kibana-unaccessible-after-using-migration-ui/101763 "2017-09-25T22:11:50Z")

</div>

Who is affected? Kibana installations originating prior to v5.5 and migrating the Kibana index using the Migration UI in v5.6.0 or v5.6.1 Details Elastic v5.6 is a compatibility release, assisting users with upgrading…

---

## [Kibana error after upgrade to version 8.0 \[config validation of \[logging\].dest\]: definition for this key is missing\]](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-config-validation-of-logging-dest-definition-for-this-key-is-missing/297948)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 3\
**Last updated:** [March 11, 2022, 11:03pm UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-version-8-0-config-validation-of-logging-dest-definition-for-this-key-is-missing/297948 "2022-03-11T23:03:26Z")

</div>

Hi, I had successfully upgraded to version 8.0 on ELK , while the rest of the stack works , kibana has failed to start citing dev-elk-app01 kibana\[19018\]: FATAL Error: \[config validation of \[logging\].dest\]: definitio…

---

## [Query for an empty string?](https://discuss.elastic.co/t/query-for-an-empty-string/83070)

<div class="topic-metadata">

**Author:** [@rthompson](https://discuss.elastic.co/u/rthompson)\
**Replies:** 2\
**Last updated:** [April 20, 2017, 6:38pm UTC](https://discuss.elastic.co/t/query-for-an-empty-string/83070 "2017-04-20T18:38:40Z")

</div>

I am trying to query for an empty string and am having little luck. I have a set of logs with the field 'CharacterId', some of which have a value and others that do not. \[http://i.imgur.com/xMmxKFZ.png\]Here is an examp…

---

## [Logstash.service: Unit not found (CentOS 7)](https://discuss.elastic.co/t/logstash-service-unit-not-found-centos-7/138446)

<div class="topic-metadata">

**Author:** [@weyderfs](https://discuss.elastic.co/u/weyderfs)\
**Replies:** 2\
**Last updated:** [July 5, 2018, 12:34pm UTC](https://discuss.elastic.co/t/logstash-service-unit-not-found-centos-7/138446 "2018-07-05T12:34:36Z")

</div>

Hi everyone, I'm having trouble starting Logstash in my Centos 7. I found several articles on Web, but not found a solution. My configs: Oracle Java 8 $ echo $JAVA\_HOME $ /usr/bin/java $java -version java version …

---

## [Kibana 8.7.1 Security Updates (ESA-2023-07, ESA-2023-08)](https://discuss.elastic.co/t/kibana-8-7-1-security-updates-esa-2023-07-esa-2023-08/332330)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [May 2, 2023, 4:08pm UTC](https://discuss.elastic.co/t/kibana-8-7-1-security-updates-esa-2023-07-esa-2023-08/332330 "2023-05-02T16:08:35Z")

</div>

Kibana arbitrary code execution (ESA-2023-07) Kibana contains an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute…

---

## [How to Disable SSL Certificate Verification for Logstash-Plugin (installing plugins)](https://discuss.elastic.co/t/how-to-disable-ssl-certificate-verification-for-logstash-plugin-installing-plugins/257590)

<div class="topic-metadata">

**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\
**Replies:** 0\
**Last updated:** [December 3, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-to-disable-ssl-certificate-verification-for-logstash-plugin-installing-plugins/257590 "2020-12-03T21:44:34Z")

</div>

This is more of an information post than a question, because I noticed several unanswered questions along these lines while searching for a solution myself. The problem occurs when trying to use bin/logstash-plugin to i…

---

## [Dec 11th, 2020: \[EN\] This holiday season, learn new Elastic skills for free](https://discuss.elastic.co/t/dec-11th-2020-en-this-holiday-season-learn-new-elastic-skills-for-free/257072)

<div class="topic-metadata">

**Author:** [@pmusa](https://discuss.elastic.co/u/pmusa)\
**Replies:** 2\
**Last updated:** [December 11, 2020, 10:09pm UTC](https://discuss.elastic.co/t/dec-11th-2020-en-this-holiday-season-learn-new-elastic-skills-for-free/257072 "2020-12-11T22:09:09Z")

</div>

Elastic has a lot of different products across multiple solutions. We make it as easy as possible for our users to benefit from our solutions, but it is still hard to master so many topics. To address that, Elastic inves…

---

## [Dec 23rd, 2018: \[EN\]\[Observability\] Querying metrics from Prometheus with Elastic Stack](https://discuss.elastic.co/t/dec-23rd-2018-en-observability-querying-metrics-from-prometheus-with-elastic-stack/161609)

<div class="topic-metadata">

**Author:** [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Replies:** 0\
**Last updated:** [December 20, 2018, 1:56am UTC](https://discuss.elastic.co/t/dec-23rd-2018-en-observability-querying-metrics-from-prometheus-with-elastic-stack/161609 "2018-12-20T01:56:38Z")

</div>

UPDATE: Read latest blog on Elastic+Prometheus. Prometheus exposition format has become a popular way to export metrics from a number of systems. It provides client libraries for defining custom metrics within your appl…

---

## [Stacked and grouped columns in bar chart](https://discuss.elastic.co/t/stacked-and-grouped-columns-in-bar-chart/47907)

<div class="topic-metadata">

**Author:** [@MarcPer](https://discuss.elastic.co/u/MarcPer)\
**Replies:** 1\
**Last updated:** [April 20, 2016, 1:44pm UTC](https://discuss.elastic.co/t/stacked-and-grouped-columns-in-bar-chart/47907 "2016-04-20T13:44:23Z")

</div>

Is there a way to create a bar chart in Kibana with both column grouping and stack aggregations? Namely, I would like something like this \[image\] where different columns in a given time period separate records broadl…

---

## [Painless, if two field exists then calculate](https://discuss.elastic.co/t/painless-if-two-field-exists-then-calculate/117489)

<div class="topic-metadata">

**Author:** [@srolskyi](https://discuss.elastic.co/u/srolskyi)\
**Replies:** 7\
**Last updated:** [February 1, 2018, 4:13pm UTC](https://discuss.elastic.co/t/painless-if-two-field-exists-then-calculate/117489 "2018-02-01T16:13:49Z")

</div>

I create painless script: if (doc.containsKey('request.timestamp') && doc.containsKey('response.timestamp')) { return (doc\['response.timestamp'\].value - doc\['request.timestamp'\].value) } return null; It's mean that if …

---

## [Embed dashboard or visualization on an external web page with specified filters](https://discuss.elastic.co/t/embed-dashboard-or-visualization-on-an-external-web-page-with-specified-filters/133961)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 3\
**Last updated:** [June 1, 2018, 4:58pm UTC](https://discuss.elastic.co/t/embed-dashboard-or-visualization-on-an-external-web-page-with-specified-filters/133961 "2018-06-01T16:58:42Z")

</div>

Hi, as title I want to embed the kibana dashboard or visualization on an external web page with specified filters. I found a way when I refer the reference: https://www.elastic.co/guide/en/kibana/6.1/development-embedd…

---

## [Kibana 7.17.8 and 8.5.0 Security Update](https://discuss.elastic.co/t/kibana-7-17-8-and-8-5-0-security-update/320920)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 7:18pm UTC](https://discuss.elastic.co/t/kibana-7-17-8-and-8-5-0-security-update/320920 "2022-12-09T19:18:11Z")

</div>

Update Log 2022-12-23: Updated impact section with additional details. 2023-01-09: Updated impact section to include RHEL 2023-01-23: Updated impact section with additional details. Updated Solutions and Mitigations s…

---

## [How to Capture a Heap Dump from a Running JVM - Logstash](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm-logstash/85)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 1, 2015, 10:04am UTC](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm-logstash/85 "2015-05-01T10:04:17Z")

</div>

This article applies to any product that runs a JVM -- Elasticsearch and Logstash 1.5 (or an earlier variant when using JRuby, which Logstash 1.5 uses). NOTE - the JVM will pause during the collection of this heap dump…

---

## [X509: certificate signed by unknown authority](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/156815)

<div class="topic-metadata">

**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Replies:** 1\
**Last updated:** [November 15, 2018, 2:30pm UTC](https://discuss.elastic.co/t/x509-certificate-signed-by-unknown-authority/156815 "2018-11-15T14:30:48Z")

</div>

Hi Team, I have installed heartbeat in one of my server and try parsing them to elastic search for some specific urls' all i could see "x509: certificate signed by unknown authority" messages in the kibana. My heartbeat…

---

## [Dec 7th, 2019 \[EN\] Looking behind the scenes of anomaly detector models](https://discuss.elastic.co/t/dec-7th-2019-en-looking-behind-the-scenes-of-anomaly-detector-models/210552)

<div class="topic-metadata">

**Author:** [@edsavage](https://discuss.elastic.co/u/edsavage)\
**Replies:** 0\
**Last updated:** [December 7, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-7th-2019-en-looking-behind-the-scenes-of-anomaly-detector-models/210552 "2019-12-07T08:00:02Z")

</div>

Ever wondered what's really going on behind the scenes with Elastic's unsupervised machine learning anomaly detection modelling? (and if not why not?!). Sure you may think you know what's going on, you've read our extens…

---

## [Dec 7th, 2020: \[EN\] Using Rally as a data import/export tool](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820)

<div class="topic-metadata">

**Author:** [@Laurent\_Huet](https://discuss.elastic.co/u/Laurent_Huet)\
**Replies:** 1\
**Last updated:** [December 19, 2020, 8:50pm UTC](https://discuss.elastic.co/t/dec-7th-2020-en-using-rally-as-a-data-import-export-tool/257820 "2020-12-19T20:50:51Z")

</div>

French version This post will show you how you can use Rally to export data from one cluster to another. The idea is to extract the whole data from one or more indices in a (big) flat file and reuse it later to easily …

---

## [APM Java Agent survey](https://discuss.elastic.co/t/apm-java-agent-survey/120502)

<div class="topic-metadata">

**Author:** [@felixbarny](https://discuss.elastic.co/u/felixbarny)\
**Replies:** 0\
**Last updated:** [February 19, 2018, 5:30pm UTC](https://discuss.elastic.co/t/apm-java-agent-survey/120502 "2018-02-19T17:30:28Z")

</div>

Hey folks, we heard you asking for an APM Java agent? We are actually already working on it! If you are interested in the Java Agent, please take a minute to fill out this survey: https://docs.google.com/forms/d/e/1FAI…

---

## [Python Elasticsearch Bulk Conditional Upsert](https://discuss.elastic.co/t/python-elasticsearch-bulk-conditional-upsert/71573)

<div class="topic-metadata">

**Author:** [@nickvido](https://discuss.elastic.co/u/nickvido)\
**Replies:** 0\
**Last updated:** [January 13, 2017, 9:26pm UTC](https://discuss.elastic.co/t/python-elasticsearch-bulk-conditional-upsert/71573 "2017-01-13T21:26:07Z")

</div>

Using elasticsearch-py python helpers library for bulk conditional scripted update: from elasticsearch import Elasticsearch from elasticsearch import helpers es = Elasticsearch(host=YOUR\_HOST) actions = \[\] document = …

---

## [How to parse multiple date fields?](https://discuss.elastic.co/t/how-to-parse-multiple-date-fields/1208)

<div class="topic-metadata">

**Author:** [@pescobar](https://discuss.elastic.co/u/pescobar)\
**Replies:** 2\
**Last updated:** [May 24, 2015, 10:00am UTC](https://discuss.elastic.co/t/how-to-parse-multiple-date-fields/1208 "2015-05-24T10:00:03Z")

</div>

Hi, I am learning logstash to insert my logfiles in elasticsearch. By now I am testing this config file: input { file { type =\> "accounting" path =\> \["/root/logstash-tests/mini-test/accounting.txt"\] sta…

---

## [Cookiecutter Template for writing ingest processors](https://discuss.elastic.co/t/cookiecutter-template-for-writing-ingest-processors/52985)

<div class="topic-metadata">

**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Replies:** 1\
**Last updated:** [April 17, 2017, 2:47pm UTC](https://discuss.elastic.co/t/cookiecutter-template-for-writing-ingest-processors/52985 "2017-04-17T14:47:58Z")

</div>

Hey, I have created a cookiecutter template to ease the writing of own processors. Cookiecutter is a templating tool written in python. Using this all you need to do is to run cookiecutter gh:spinscale/cookiecutter-…

---

## [Handshake failed. unexpected remote node](https://discuss.elastic.co/t/handshake-failed-unexpected-remote-node/117082)

<div class="topic-metadata">

**Author:** [@Ujaku\_San](https://discuss.elastic.co/u/Ujaku_San)\
**Replies:** 2\
**Last updated:** [February 14, 2018, 3:56pm UTC](https://discuss.elastic.co/t/handshake-failed-unexpected-remote-node/117082 "2018-02-14T15:56:47Z")

</div>

Hi, using the elasticsearch docker image docker.elastic.co/elasticsearch/elasticsearch:6.1.2 I can't connect two nodes on different digitalocean droplets. I've created both containers with: droplet1: docker run -d -p …

---

## [Official elasticsearch helm chart - Unable to install plugins](https://discuss.elastic.co/t/official-elasticsearch-helm-chart-unable-to-install-plugins/275593)

<div class="topic-metadata">

**Author:** [@xadamz23](https://discuss.elastic.co/u/xadamz23)\
**Replies:** 0\
**Last updated:** [June 10, 2021, 3:30pm UTC](https://discuss.elastic.co/t/official-elasticsearch-helm-chart-unable-to-install-plugins/275593 "2021-06-10T15:30:40Z")

</div>

Hello, I'm using the official elasticsearch helm chart (elasticsearch 7.13.1 · elastic/elastic) and I'm trying to use "extraInitContainers" to install the "repository-azure" plugin. I do know that the recommended way t…

---

## [Elastic Stack 8.4.0, 7.17.6 Security Statement](https://discuss.elastic.co/t/elastic-stack-8-4-0-7-17-6-security-statement/312823)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [August 24, 2022, 3:07pm UTC](https://discuss.elastic.co/t/elastic-stack-8-4-0-7-17-6-security-statement/312823 "2022-08-24T15:07:32Z")

</div>

Elastic Statement for Oracle July Critical Patch Update CVE-2022-21540, CVE-2022-21541, CVE-2022-21549, CVE-2022-25647, CVE-2022-34169 Summary: Oracle released their July Critical Patch Update for Java SE which contains…

---

## [\[SOLVED\] Multiple Instances for Logstash](https://discuss.elastic.co/t/solved-multiple-instances-for-logstash/65539)

<div class="topic-metadata">

**Author:** [@fabian](https://discuss.elastic.co/u/fabian)\
**Replies:** 2\
**Last updated:** [November 11, 2016, 4:10pm UTC](https://discuss.elastic.co/t/solved-multiple-instances-for-logstash/65539 "2016-11-11T16:10:47Z")

</div>

Hey, I'm using two Instances of Logstash on one Debian Server and I want to upgrade to v5. I'm using the repositories 2.3 now. With version 2.3 all I had to do was copy and edit the init script files and using two diff…

---

## [None of the configured nodes are available: \[{#transport#-1}{...}{127.0.0.1}{127.0.0.1:9300}\]](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-transport-1-127-0-0-1-127-0-0-1-9300/65431)

<div class="topic-metadata">

**Author:** [@kevinZ](https://discuss.elastic.co/u/kevinZ)\
**Replies:** 1\
**Last updated:** [November 9, 2016, 9:49am UTC](https://discuss.elastic.co/t/none-of-the-configured-nodes-are-available-transport-1-127-0-0-1-127-0-0-1-9300/65431 "2016-11-09T09:49:12Z")

</div>

I use ElasticSearch v5.0 in java application and create index. But the 9300 port can't work. Exception in thread "main" NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{wT9q99-KSTObz…

---

## [CircuitBreakingException - Data too large](https://discuss.elastic.co/t/circuitbreakingexception-data-too-large/243633)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [August 4, 2020, 1:16am UTC](https://discuss.elastic.co/t/circuitbreakingexception-data-too-large/243633 "2020-08-04T01:16:19Z")

</div>

Following on from this topic, we've extracted and expanded on this excellent explanation from @HenningAndersen. Seeing an error like this means that Elasticsearch prevented a request from executing to avoid an out of me…

---

## [Logstash-input-reqsample, a plugin for randomly generating log data](https://discuss.elastic.co/t/logstash-input-reqsample-a-plugin-for-randomly-generating-log-data/102442)

<div class="topic-metadata">

**Author:** [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Replies:** 0\
**Last updated:** [October 2, 2017, 2:29pm UTC](https://discuss.elastic.co/t/logstash-input-reqsample-a-plugin-for-randomly-generating-log-data/102442 "2017-10-02T14:29:03Z")

</div>

I've been setting up some stacks lately for testing/example dashboards and couldn't easily come up with sample data, so I wrote a tiny Ruby library called reqsample and accompanying Logstash input plugin to create random…

---

## [Conflict of interest between open source Elasticsearch and closed source Swifttype?](https://discuss.elastic.co/t/conflict-of-interest-between-open-source-elasticsearch-and-closed-source-swifttype/107063)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 1\
**Last updated:** [November 9, 2017, 5:29pm UTC](https://discuss.elastic.co/t/conflict-of-interest-between-open-source-elasticsearch-and-closed-source-swifttype/107063 "2017-11-09T17:29:12Z")

</div>

First congrats on the acquisition! Second, I wonder how this will work in practice? Are there conflicts of interest? Could such conflicts of interest threaten the health of the Elasticsearch project? Imagine a search f…

---

## [Kibana 8.17.6, 8.18.1, or 9.0.1 Security Update (ESA-2025-07)](https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [May 6, 2025, 4:29pm UTC](https://discuss.elastic.co/t/kibana-8-17-6-8-18-1-or-9-0-1-security-update-esa-2025-07/377868 "2025-05-06T16:29:27Z")

</div>

Kibana arbitrary code execution via prototype pollution (ESA-2025-07) A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints…

---

## [Continuously streaming documents out of ElasticSearch using Spark Streaming](https://discuss.elastic.co/t/continuously-streaming-documents-out-of-elasticsearch-using-spark-streaming/147)

<div class="topic-metadata">

**Author:** [@mans4singh](https://discuss.elastic.co/u/mans4singh)\
**Replies:** 1\
**Last updated:** [August 2, 2016, 11:15am UTC](https://discuss.elastic.co/t/continuously-streaming-documents-out-of-elasticsearch-using-spark-streaming/147 "2016-08-02T11:15:14Z")

</div>

Hi: Is there a way to continuously stream data out of elastic search using spark streaming ? I've taken a look at the documentation (http://www.elastic.co/guide/en/elasticsearch/hadoop/master/spark.html) which has an …

---

## [\[Solved\] Weekly indexes instead of daily](https://discuss.elastic.co/t/solved-weekly-indexes-instead-of-daily/56871)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 2\
**Last updated:** [January 8, 2017, 1:43pm UTC](https://discuss.elastic.co/t/solved-weekly-indexes-instead-of-daily/56871 "2017-01-08T13:43:19Z")

</div>

Right now I am working with indexes that are created daily using the following output in my config file: output { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "logstash-events-%{+YYYY.MM.dd}" } } T…

---

## [New PHP APM Agent - PHP devs please give me some feedback](https://discuss.elastic.co/t/new-php-apm-agent-php-devs-please-give-me-some-feedback/132577)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 4\
**Last updated:** [June 7, 2018, 4:38pm UTC](https://discuss.elastic.co/t/new-php-apm-agent-php-devs-please-give-me-some-feedback/132577 "2018-06-07T16:38:09Z")

</div>

Hi there! In the last few weeks I've created a PHP Agent for the Elastic APM product and it would be great to get some feedback from the Elastic (APM) community on the interface and the developer experience. If you're a…

---

## [Dec 25th, 2017: \[EN\]\[Elastic Stack\] Stocking Stuffers - AKA Protips from the Source!](https://discuss.elastic.co/t/dec-25th-2017-en-elastic-stack-stocking-stuffers-aka-protips-from-the-source/113091)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [December 25, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-25th-2017-en-elastic-stack-stocking-stuffers-aka-protips-from-the-source/113091 "2017-12-25T00:00:12Z")

</div>

These Elastic Discuss forums are a fantastic source of help if you get stuck, but they also a treasure trove of hints that sometimes get lost in the volume. These are a few awesome posts we've been collecting for a time …

---

## [How change default number of shards](https://discuss.elastic.co/t/how-change-default-number-of-shards/117985)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 2\
**Last updated:** [February 1, 2018, 10:18am UTC](https://discuss.elastic.co/t/how-change-default-number-of-shards/117985 "2018-02-01T10:18:11Z")

</div>

Hello, I am using ES 6.1. and I am trying to change default number of shards from 5 to , for example, 6. Is it possible in some way? When I add lines bellow to the elasticsearch.yaml file, the ES will not start. index.n…

---

## [Non-zero metrics in the last 30s: meaning](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s-meaning/173970)

<div class="topic-metadata">

**Author:** [@ptemmer](https://discuss.elastic.co/u/ptemmer)\
**Replies:** 2\
**Last updated:** [March 27, 2019, 3:53pm UTC](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s-meaning/173970 "2019-03-27T15:53:16Z")

</div>

Hi, Apparently logs are transferred from Filebeat to Elasticsearch, however the filebeat logs continiously show this message: 2019-03-26T16:16:02.557Z INFO \[monitoring\] log/log.go:144 Non-zero metrics in the last 30s {…

[Previous page](https://discuss.elastic.co/top.md?page=251&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=253&per_page=50&period=all)
