# Top **URL:** https://discuss.elastic.co/top.md?page=259&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 260 --- ## [Kibana 8.14.2 / 7.17.23 Security Update (ESA-2024-22)](https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424)
**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\ **Replies:** 1\ **Last updated:** [August 12, 2024, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424 "2024-08-12T21:28:13Z")
Kibana arbitrary code execution via prototype pollution (ESA-2024-22) A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write acc… --- ## [Authenticating to iframe-embedded Kibana dashboard](https://discuss.elastic.co/t/authenticating-to-iframe-embedded-kibana-dashboard/71129)
**Author:** [@rupaln](https://discuss.elastic.co/u/rupaln)\ **Replies:** 8\ **Last updated:** [January 24, 2017, 9:57am UTC](https://discuss.elastic.co/t/authenticating-to-iframe-embedded-kibana-dashboard/71129 "2017-01-24T09:57:44Z")
Hi, We have shield protected kibana dashboard embedded as iframe in our UI. We need to be able to pass authentication headers to the dashboard so that the reports can display without the user having to put credentials ag… --- ## [Finding if a Field exist using painless inline](https://discuss.elastic.co/t/finding-if-a-field-exist-using-painless-inline/96421)
**Author:** [@v6nerd](https://discuss.elastic.co/u/v6nerd)\ **Replies:** 2\ **Last updated:** [August 11, 2017, 3:13pm UTC](https://discuss.elastic.co/t/finding-if-a-field-exist-using-painless-inline/96421 "2017-08-11T15:13:22Z")
I’m trying to run the \_update\_by\_query to create a new field that takes a value of an existing field and adds say 1 for example. POST newlogstash/\_update\_by\_query { “script”: { “lang”: “painless”, “inline”: “if (ctx… --- ## [Filtering for multiple values of a single field](https://discuss.elastic.co/t/filtering-for-multiple-values-of-a-single-field/97584)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 3\ **Last updated:** [August 21, 2017, 4:51pm UTC](https://discuss.elastic.co/t/filtering-for-multiple-values-of-a-single-field/97584 "2017-08-21T16:51:08Z")
I have a status field, which can have one of the following values, I can filter for data which have status completed. I can also see data which has ongoing. But I want to display only the data which have status compl… --- ## [Log4j security vulnerability and plugins which bundle / vendor dependencies](https://discuss.elastic.co/t/log4j-security-vulnerability-and-plugins-which-bundle-vendor-dependencies/291537)
**Author:** [@Kami](https://discuss.elastic.co/u/Kami)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 4:02pm UTC](https://discuss.elastic.co/t/log4j-security-vulnerability-and-plugins-which-bundle-vendor-dependencies/291537 "2021-12-16T16:02:59Z")
(this post has been moved from Zero-day-exploit in log4j2 which is part of elasticsearch - #25 by Kami) Dear logstash community, I would like to better understand on how log4j vulnerability affects logstash plugins whi… --- ## [ANNOUNCE: Rust API Client](https://discuss.elastic.co/t/announce-rust-api-client/52814)
**Author:** [@KodrAus](https://discuss.elastic.co/u/KodrAus)\ **Replies:** 0\ **Last updated:** [June 15, 2016, 6:27am UTC](https://discuss.elastic.co/t/announce-rust-api-client/52814 "2016-06-15T06:27:01Z")
Hi All! I've been working on an Elasticsearch REST API client in the Rust Language for a while and wanted to share my results so far. See: Client Documenation Github Repo Untyped Sample Strongly-typed Sample The… --- ## [Changing Logstash Heap Size](https://discuss.elastic.co/t/changing-logstash-heap-size/69542)
**Author:** [@wenyao](https://discuss.elastic.co/u/wenyao)\ **Replies:** 4\ **Last updated:** [December 20, 2016, 11:41am UTC](https://discuss.elastic.co/t/changing-logstash-heap-size/69542 "2016-12-20T11:41:09Z")
Is it possible to change the max and min heap size for logstash v5.0.1? If possible, how? --- ## [Logstash - Nested fields](https://discuss.elastic.co/t/logstash-nested-fields/100201)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 8\ **Last updated:** [September 14, 2017, 12:49pm UTC](https://discuss.elastic.co/t/logstash-nested-fields/100201 "2017-09-14T12:49:48Z")
Hi, I wish to parse proxy logs using logstash. I have multiple IP fields in each document (log). I wish to parse the IP field as an object/array, not quite sure which is best suited for the requirement. The final output… --- ## [Elasticsearch health status is yellow. How to up Green?](https://discuss.elastic.co/t/elasticsearch-health-status-is-yellow-how-to-up-green/81765)
**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\ **Replies:** 6\ **Last updated:** [April 10, 2017, 12:08pm UTC](https://discuss.elastic.co/t/elasticsearch-health-status-is-yellow-how-to-up-green/81765 "2017-04-10T12:08:04Z")
{ "cluster\_name" : "elasticsearch", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 1, "number\_of\_data\_nodes" : 1, "active\_primary\_shards" : 6, "active\_shards" : 6, "relocating\_shards" : 0, … --- ## [How big a field can be](https://discuss.elastic.co/t/how-big-a-field-can-be/158810)
**Author:** [@onlygoodones](https://discuss.elastic.co/u/onlygoodones)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 5:36pm UTC](https://discuss.elastic.co/t/how-big-a-field-can-be/158810 "2018-11-30T17:36:27Z")
Hello Gurus, Is there a limit on how big a field can be when we ingest a document to ES ? What are the known issues or drawbacks while ingesting huge text / string data in to a single field and after ingestion, what are… --- ## [How to create a parent using the new join type with logstash](https://discuss.elastic.co/t/how-to-create-a-parent-using-the-new-join-type-with-logstash/119523)
**Author:** [@mmoxam](https://discuss.elastic.co/u/mmoxam)\ **Replies:** 1\ **Last updated:** [February 21, 2018, 3:29pm UTC](https://discuss.elastic.co/t/how-to-create-a-parent-using-the-new-join-type-with-logstash/119523 "2018-02-21T15:29:31Z")
With the introduction of the new join datatype, parent child relationships have been updated to a new format. How can I use Logstash to specify the field that will be used as the join between the parent and the child. D… --- ## [How to check ES\_HEAP\_SIZE](https://discuss.elastic.co/t/how-to-check-es-heap-size/36613)
**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\ **Replies:** 6\ **Last updated:** [December 10, 2015, 4:11am UTC](https://discuss.elastic.co/t/how-to-check-es-heap-size/36613 "2015-12-10T04:11:14Z")
Hi guys, I tried to setting ES\_HEAP\_SIZE to 1024m on my linux server. I used this setting \> export ES\_HEAP\_SIZE=1024m. Now how to check if this new setting is work?? Thanks --- ## [Import CA Cert as PrivateKeyEntry to HTTP Keystore - Solve Unable to create enrollment token Error](https://discuss.elastic.co/t/import-ca-cert-as-privatekeyentry-to-http-keystore-solve-unable-to-create-enrollment-token-error/313780)
**Author:** [@aold619](https://discuss.elastic.co/u/aold619)\ **Replies:** 3\ **Last updated:** [September 7, 2022, 2:48am UTC](https://discuss.elastic.co/t/import-ca-cert-as-privatekeyentry-to-http-keystore-solve-unable-to-create-enrollment-token-error/313780 "2022-09-07T02:48:40Z")
Problem Yesterday I installed Elasticsearch for the first time, and after I configured the security manully according to the docs: Basic Security / Basic Security plus HTTPS, I try to generate token for Kibana, and I met… --- ## [In Kibana, I have fields that contains a question mark \`?\` not showing in metric field](https://discuss.elastic.co/t/in-kibana-i-have-fields-that-contains-a-question-mark-not-showing-in-metric-field/146017)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 1\ **Last updated:** [August 25, 2018, 6:19pm UTC](https://discuss.elastic.co/t/in-kibana-i-have-fields-that-contains-a-question-mark-not-showing-in-metric-field/146017 "2018-08-25T18:19:47Z")
In Kibana, I have fields that contains a question mark ?. The goal is to create a filter that excludes all entries containing a question mark in the field. So, when i'm trying to create a metric under Aggregation with Te… --- ## [Want to Change a Field Name (Not a Field Value)](https://discuss.elastic.co/t/want-to-change-a-field-name-not-a-field-value/28563)
**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\ **Replies:** 1\ **Last updated:** [September 2, 2015, 10:32pm UTC](https://discuss.elastic.co/t/want-to-change-a-field-name-not-a-field-value/28563 "2015-09-02T22:32:29Z")
The useragent filter can be used to parse an Apache Access Log File and create a field named "browser". After running the user agent filter, how do I rename the field name from "browser" to "browser-name"? I am thinkin… --- ## [I got issue about "Data too large"](https://discuss.elastic.co/t/i-got-issue-about-data-too-large/185087)
**Author:** [@thachnv92](https://discuss.elastic.co/u/thachnv92)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 7:03am UTC](https://discuss.elastic.co/t/i-got-issue-about-data-too-large/185087 "2019-06-11T07:03:00Z")
Hello, I installed ELK version 7.1.0. After I ran all modules, I got messages: At Logstash: \[2019-06-11T03:43:27,582\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 429 ({"type"=\>"ci… --- ## [GCP Sydney Region is live on Elasticsearch Service](https://discuss.elastic.co/t/gcp-sydney-region-is-live-on-elasticsearch-service/198980)
**Author:** [@vidamon](https://discuss.elastic.co/u/vidamon)\ **Replies:** 0\ **Last updated:** [September 10, 2019, 10:47pm UTC](https://discuss.elastic.co/t/gcp-sydney-region-is-live-on-elasticsearch-service/198980 "2019-09-10T22:47:55Z")
GCP Sydney Region is now live on Elasticsearch Service We're excited to bring the official Elasticsearch Service to the Sydney region on GCP. This will provide our growing set of customers in Australia with the immediat… --- ## [Dec 10th, 2020: \[EN\] Top 12 Maps features since going GA](https://discuss.elastic.co/t/dec-10th-2020-en-top-12-maps-features-since-going-ga/256224)
**Author:** [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Replies:** 0\ **Last updated:** [December 10, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2020-en-top-12-maps-features-since-going-ga/256224 "2020-12-10T08:00:03Z")
Also available in Spanish Maps was released as generally available (GA) in Kibana 7.3. Reaching production-ready is not the final destination, but just another stop on a long journey. Each Kibana point release include… --- ## [New blog post - Graph, Panama Papers and more](https://discuss.elastic.co/t/new-blog-post-graph-panama-papers-and-more/50926)
**Author:** [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\ **Replies:** 0\ **Last updated:** [May 25, 2016, 10:17am UTC](https://discuss.elastic.co/t/new-blog-post-graph-panama-papers-and-more/50926 "2016-05-25T10:17:18Z")
If you're looking for some examples to get started with Graph we have a new blog post to help with that: http://goo.gl/fbJy8D --- ## [How to configure FileBeat and Logstash to add XML Files in Elasticsearch?](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-to-add-xml-files-in-elasticsearch/86315)
**Author:** [@benjamin38600](https://discuss.elastic.co/u/benjamin38600)\ **Replies:** 0\ **Last updated:** [May 18, 2017, 5:51pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-and-logstash-to-add-xml-files-in-elasticsearch/86315 "2017-05-18T17:51:43Z")
Hi everybody, I'm a beginner here. My own problem is to configure FileBeat and Logstash to add XML Files in Elasticsearch on CentOS 7. I have already install the last version of filebeat, logstash, elasticsearch and Kib… --- ## [Elasticsearch Security Statement regarding CVE-2022-1471](https://discuss.elastic.co/t/elasticsearch-security-statement-regarding-cve-2022-1471/343006)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [September 14, 2023, 4:53am UTC](https://discuss.elastic.co/t/elasticsearch-security-statement-regarding-cve-2022-1471/343006 "2023-09-14T04:53:14Z")
Elasticsearch is not affected by this issue. Elasticsearch is not affected by the issue described in CVE-2022-1471 as, in general, it does not use Snakeyaml to parse YAML. Summary Elasticsearch supports YAML as a format… --- ## [Creating Multiple Line Charts(beginner)](https://discuss.elastic.co/t/creating-multiple-line-charts-beginner/24920)
**Author:** [@Tharindu\_Ranasinghe](https://discuss.elastic.co/u/Tharindu_Ranasinghe)\ **Replies:** 2\ **Last updated:** [July 7, 2015, 2:54am UTC](https://discuss.elastic.co/t/creating-multiple-line-charts-beginner/24920 "2015-07-07T02:54:32Z")
Hi, I am new to Kibana and trying to create a multiple line graph. My data set looks like this CHK\_IN\_DATE,CHK\_OUT\_DATE,ROOM\_TYPE\_C,SOURCE\_SITE\_C,BOARD\_BASIS\_C,PRICE, 2015-07-10,2015-07-13,"lejlighed 40 s",travels,"Roo… --- ## [Update by query to rename fields](https://discuss.elastic.co/t/update-by-query-to-rename-fields/120552)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 4:38am UTC](https://discuss.elastic.co/t/update-by-query-to-rename-fields/120552 "2018-02-20T04:38:09Z")
Hi, I've looked all over for how to rename a field and everyone mentions doing a reindex. But isn't a script just as if not more effective (if you don't want to reindex). I just want to make sure I'm not missing somethin… --- ## [Want to Combine Field Values into New Field Value](https://discuss.elastic.co/t/want-to-combine-field-values-into-new-field-value/28564)
**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\ **Replies:** 3\ **Last updated:** [September 3, 2015, 2:06pm UTC](https://discuss.elastic.co/t/want-to-combine-field-values-into-new-field-value/28564 "2015-09-03T14:06:08Z")
The useragent filter creates new field names in elasticsearch like "name", "major version", "minor version". Name is the browser name. Major version is the browser major version. Minor is the browser minor version. I… --- ## [RestClient 6.1 getting Connection reset by peer error while querying ES](https://discuss.elastic.co/t/restclient-6-1-getting-connection-reset-by-peer-error-while-querying-es/122824)
**Author:** [@Arun\_Kumar1](https://discuss.elastic.co/u/Arun_Kumar1)\ **Replies:** 0\ **Last updated:** [March 7, 2018, 6:13am UTC](https://discuss.elastic.co/t/restclient-6-1-getting-connection-reset-by-peer-error-while-querying-es/122824 "2018-03-07T06:13:40Z")
I am getting " Connection reset by peer" error while querying ES. after few re-tries its working fine. private static RestHighLevelClient client; RestClientBuilder builder = RestClient.builder(new HttpHost(hostna… --- ## [Blocked by: \[TOO\_MANY\_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block\]](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 2\ **Last updated:** [February 5, 2023, 5:31am UTC](https://discuss.elastic.co/t/blocked-by-too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/324725 "2023-02-05T05:31:13Z")
Hi, I reached disk usage of 90%. I increased the disk space and now have 80% usage: /dev/root 562G 445G 118G 80% / I've tried to run the commands to remove the read only blocker: PUT \_cluster/settings { "… --- ## [\[security\_exception\] current license is non-compliant for \[security\], with { license.expired.feature="security" }](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-security-with-license-expired-feature-security/97351)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 2\ **Last updated:** [August 19, 2017, 2:15am UTC](https://discuss.elastic.co/t/security-exception-current-license-is-non-compliant-for-security-with-license-expired-feature-security/97351 "2017-08-19T02:15:07Z")
ELK version: 5.5.1 I restart one of my ES node, and the ES cluster turns red and can't be accessed. \[security\_exception\] current license is non-compliant for \[security\], with { license.expired.feature="security" } wha… --- ## [Getting a Parse Failure when trying to filter a terms aggregation](https://discuss.elastic.co/t/getting-a-parse-failure-when-trying-to-filter-a-terms-aggregation/28257)
**Author:** [@doug\_livesey](https://discuss.elastic.co/u/doug_livesey)\ **Replies:** 3\ **Last updated:** [August 29, 2015, 10:50am UTC](https://discuss.elastic.co/t/getting-a-parse-failure-when-trying-to-filter-a-terms-aggregation/28257 "2015-08-29T10:50:47Z")
Hi -- I hope this is the correct place to ask this. I have a whole bunch of items indexed, and amongst other fields, they have a section\_id and a price. I'm trying to return an aggregation on a query of a count of all se… --- ## [Community based Logstash Grok Patterns](https://discuss.elastic.co/t/community-based-logstash-grok-patterns/56785)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [July 29, 2016, 11:45pm UTC](https://discuss.elastic.co/t/community-based-logstash-grok-patterns/56785 "2016-07-29T23:45:48Z")
G'Day everyone, I've recently started up a GH repo for any of those unusual Logstash Grok patterns that may not belong in Core, but would love to be shared with the rest of the community. It's only got a few at the mom… --- ## [What are differences between search\_after and range filter?](https://discuss.elastic.co/t/what-are-differences-between-search-after-and-range-filter/142224)
**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 12:16pm UTC](https://discuss.elastic.co/t/what-are-differences-between-search-after-and-range-filter/142224 "2018-08-02T12:16:06Z")
Is there any differences in performance or traversal logic when we use search\_after or range filter? For example, this query: GET twitter/\_search { "size": 10, "query": { "range" : { "my\_id… --- ## [Large size of .hprof files on data nodes](https://discuss.elastic.co/t/large-size-of-hprof-files-on-data-nodes/18004)
**Author:** [@Bharvi\_Dixit\_2](https://discuss.elastic.co/u/Bharvi_Dixit_2)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 7:01pm UTC](https://discuss.elastic.co/t/large-size-of-hprof-files-on-data-nodes/18004 "2016-07-05T19:01:25Z")
Hi, I am using elasticsearch 1.0.0 & having a cluster of 7 nodes. (3 master, 2 data & 2 client nodes) \*The problem i am facing that on data nodes .hprof files are being generated which is huge in size\* : datanode1:… --- ## [Setting default number of replicas for new indexes](https://discuss.elastic.co/t/setting-default-number-of-replicas-for-new-indexes/47782)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 4\ **Last updated:** [April 21, 2016, 7:27am UTC](https://discuss.elastic.co/t/setting-default-number-of-replicas-for-new-indexes/47782 "2016-04-21T07:27:02Z")
Hello, I'm running a small test installation and I would like to disable replicas. I was able to set the number of replicas to 0 for all existing indexes/shards, using /\_settings, but newly created indexes have the old… --- ## [Query timing: 'took' value and what I'm measuring](https://discuss.elastic.co/t/query-timing-took-value-and-what-im-measuring/9870)
**Author:** [@Daniel\_Weitzenfeld](https://discuss.elastic.co/u/Daniel_Weitzenfeld)\ **Replies:** 6\ **Last updated:** [July 23, 2013, 2:09pm UTC](https://discuss.elastic.co/t/query-timing-took-value-and-what-im-measuring/9870 "2013-07-23T14:09:33Z")
I'm running some tests on Elastic Search to see if it's performant in our particular situation. My queries average ~130ms, according to the 'took' field returned by Elastic Search. But when I time the query round t… --- ## [Elasticsearch query with @timestamp range](https://discuss.elastic.co/t/elasticsearch-query-with-timestamp-range/97469)
**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 7:28pm UTC](https://discuss.elastic.co/t/elasticsearch-query-with-timestamp-range/97469 "2017-08-17T19:28:28Z")
Hi, What am I doing wrong in my query? I’m getting response: “reason” : “failed to parse date field \[August 17th 2017, 21:59:28.000\] with format \[strict\_date\_optional\_time||epoch\_millis\]”, “caused\_by” : { “type” : “i… --- ## [Dec 25th, 2022: \[EN\] How to build a cluster for Elastic Security: Best practices for creating and generating security data in Elastic Cloud](https://discuss.elastic.co/t/dec-25th-2022-en-how-to-build-a-cluster-for-elastic-security-best-practices-for-creating-and-generating-security-data-in-elastic-cloud/321832)
**Author:** [@Tanisha\_L\_Turner](https://discuss.elastic.co/u/Tanisha_L_Turner)\ **Replies:** 0\ **Last updated:** [December 24, 2022, 11:00pm UTC](https://discuss.elastic.co/t/dec-25th-2022-en-how-to-build-a-cluster-for-elastic-security-best-practices-for-creating-and-generating-security-data-in-elastic-cloud/321832 "2022-12-24T23:00:00Z")
Introduction When building a cluster for Elastic Security in Elastic Cloud, there are different methods to add security data. The easiest method for adding and shipping security data to Elastic Cloud is with using t… --- ## [Add field to existing document by query?](https://discuss.elastic.co/t/add-field-to-existing-document-by-query/68874)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 3\ **Last updated:** [December 13, 2016, 3:32pm UTC](https://discuss.elastic.co/t/add-field-to-existing-document-by-query/68874 "2016-12-13T15:32:21Z")
Hi folks, I want to add a new field to multiple existing documents. e.g. All documents that have the value "93.22.14.132" in the field "ip" should get the field "status" with the value "okay". Is there a built-i… --- ## [Dec 1st, 2022: \[EN\] Elastic Agent 101](https://discuss.elastic.co/t/dec-1st-2022-en-elastic-agent-101/316879)
**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\ **Replies:** 0\ **Last updated:** [December 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2022-en-elastic-agent-101/316879 "2022-12-01T08:00:30Z")
This article is also available in portuguese. First things first, what is the Elastic Agent? Elastic Agent is a single, unified way to add monitoring for logs, metrics, and other types of data to a host. It can als… --- ## [Closing because close\_inactive of 5m0s reached](https://discuss.elastic.co/t/closing-because-close-inactive-of-5m0s-reached/114136)
**Author:** [@Pavan\_Kumar1](https://discuss.elastic.co/u/Pavan_Kumar1)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 11:27am UTC](https://discuss.elastic.co/t/closing-because-close-inactive-of-5m0s-reached/114136 "2018-01-05T11:27:51Z")
Hi, I do see a lot of posts on this, I tried everything but I am not able to get this working. Can you please help? This is my filebeat log: 2018-01-04T12:29:54-05:00 INFO Harvester started for file: /logs/staff\_secur… --- ## [Lowercase all fields and sub fields](https://discuss.elastic.co/t/lowercase-all-fields-and-sub-fields/174438)
**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\ **Replies:** 1\ **Last updated:** [March 30, 2019, 9:26pm UTC](https://discuss.elastic.co/t/lowercase-all-fields-and-sub-fields/174438 "2019-03-30T21:26:10Z")
I'm trying to convert all fields name to lowercase. This example converts the first fields name but need to convert all sub fields aswell. ruby { code =\> " event.to\_hash.keys.each do |y| event.s… --- ## [Dec 6th, 2021: \[en\] Using OSQuery in Elastic Stack](https://discuss.elastic.co/t/dec-6th-2021-en-using-osquery-in-elastic-stack/290456)
**Author:** [@aravindputrevu](https://discuss.elastic.co/u/aravindputrevu)\ **Replies:** 0\ **Last updated:** [December 6, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2021-en-using-osquery-in-elastic-stack/290456 "2021-12-06T08:00:42Z")
What is Osquery? Osquery is a Opensource project developed from Facebook. As the name suggests, Osquery helps in querying the Operating System resources using SQL. It exposes the underlying Operating system concepts like… --- ## [Dec 19, 2022: \[EN\] Transform Your SLO Dashboards](https://discuss.elastic.co/t/dec-19-2022-en-transform-your-slo-dashboards/320953)
**Author:** [@json](https://discuss.elastic.co/u/json)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 10:36am UTC](https://discuss.elastic.co/t/dec-19-2022-en-transform-your-slo-dashboards/320953 "2022-12-19T10:36:30Z")
Kibana is a useful tool for monitoring applications and services to ensure they are operating within specified service level objectives. Service level indicators (SLIs) are measurable aspects of a service, such as err… --- ## [Elasticsearch problem, search thread pool rejected](https://discuss.elastic.co/t/elasticsearch-problem-search-thread-pool-rejected/114446)
**Author:** [@chayapon1219](https://discuss.elastic.co/u/chayapon1219)\ **Replies:** 3\ **Last updated:** [January 11, 2018, 4:21am UTC](https://discuss.elastic.co/t/elasticsearch-problem-search-thread-pool-rejected/114446 "2018-01-11T04:21:56Z")
Hello everyone, I have 1 node of elasticsearch 6.0 that it has about 100 indices. When I query Visual builder dashboard, sometime I got "The request for this panel failed. The aggregations key is missing from the respons… --- ## [Role 'reporting\_user' is deprecated. Please use Kibana feature privileges instead](https://discuss.elastic.co/t/role-reporting-user-is-deprecated-please-use-kibana-feature-privileges-instead/294593)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 8\ **Last updated:** [March 22, 2022, 8:38pm UTC](https://discuss.elastic.co/t/role-reporting-user-is-deprecated-please-use-kibana-feature-privileges-instead/294593 "2022-03-22T20:38:19Z")
latest version 7.16.3 (forever free edition) management \> users How do I grant users reporting permissions without using the deprecated reporting\_user in the forever free edition that does not support sub-featu… --- ## [X-www-urlencoded not supported(?)](https://discuss.elastic.co/t/x-www-urlencoded-not-supported/108128)
**Author:** [@sancroth](https://discuss.elastic.co/u/sancroth)\ **Replies:** 2\ **Last updated:** [November 17, 2017, 12:46pm UTC](https://discuss.elastic.co/t/x-www-urlencoded-not-supported/108128 "2017-11-17T12:46:39Z")
I am using an extension from a testing framework that is supposed to build up some indices and fill them with data on my elastic server. The extension works perfectly well with a demo server that the company behind the … --- ## [Log4j vulnerability and Elasticsearch 6.8.21](https://discuss.elastic.co/t/log4j-vulnerability-and-elasticsearch-6-8-21/292088)
**Author:** [@srikanth.puli](https://discuss.elastic.co/u/srikanth.puli)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 6:59am UTC](https://discuss.elastic.co/t/log4j-vulnerability-and-elasticsearch-6-8-21/292088 "2021-12-16T06:59:21Z")
Hi, As per the release notes of Elasticserch 6.8.21, the vulnerability CVE-2021-44228 is addressed by removing the class file JndiLookup.class from the log4j jar. We have upgraded our application with Elasticsearch 6.8.… --- ## [Dec 21st, 2021: \[en\] Top 3 recommendations to keep your Elasticsearch cluster healthy](https://discuss.elastic.co/t/dec-21st-2021-en-top-3-recommendations-to-keep-your-elasticsearch-cluster-healthy/289326)
**Author:** [@Imma](https://discuss.elastic.co/u/Imma)\ **Replies:** 0\ **Last updated:** [December 21, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2021-en-top-3-recommendations-to-keep-your-elasticsearch-cluster-healthy/289326 "2021-12-21T08:00:53Z")
This article is also available in Spanish. Working as an Elastic support engineer, we see a few tools that are very useful to have already in place when we need to help our customers troubleshoot their Elasticsearch c… --- ## [Version Conflict while using delete\_by\_query](https://discuss.elastic.co/t/version-conflict-while-using-delete-by-query/104831)
**Author:** [@Ayra\_Faceless](https://discuss.elastic.co/u/Ayra_Faceless)\ **Replies:** 5\ **Last updated:** [October 25, 2017, 1:11am UTC](https://discuss.elastic.co/t/version-conflict-while-using-delete-by-query/104831 "2017-10-25T01:11:26Z")
I'm using logstash to insert huge data to my elasticsearch,but sometimes the grok plugin fails and insert a message with tags =\_grokparsefailure. Now i'm going to remove all data contains this tag with the request below… --- ## [Logstash bulk request to ElasticSearch error - may be due to old indexes](https://discuss.elastic.co/t/logstash-bulk-request-to-elasticsearch-error-may-be-due-to-old-indexes/304943)
**Author:** [@DenSeb](https://discuss.elastic.co/u/DenSeb)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 12:26pm UTC](https://discuss.elastic.co/t/logstash-bulk-request-to-elasticsearch-error-may-be-due-to-old-indexes/304943 "2022-05-17T12:26:23Z")
If you get these errors in LogStash : Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: \[http://localhost:9200/\]\[Mantico… --- ## [Dec 8th, 2020 \[EN\] Rank features for e-commerce search](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525)
**Author:** [@mayya](https://discuss.elastic.co/u/mayya)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-8th-2020-en-rank-features-for-e-commerce-search/256525 "2020-12-08T08:00:01Z")
Русская версия Introduction Modern e-commerce search is expected to be fast, relevant and provide an opportunity for promoting certain results. This article demonstrates how rank\_feature and rank\_features field types of… --- ## [Normalizing Scores](https://discuss.elastic.co/t/normalizing-scores/17749)
**Author:** [@lypido](https://discuss.elastic.co/u/lypido)\ **Replies:** 4\ **Last updated:** [August 2, 2016, 2:55am UTC](https://discuss.elastic.co/t/normalizing-scores/17749 "2016-08-02T02:55:33Z")
Hello, is it possible to normalize the scores of a query so that the highest scoring document gets a score of 1 and the others a scaled score Thanks -- You received this message because you are subscribed to … [Previous page](https://discuss.elastic.co/top.md?page=258&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=260&per_page=50&period=all)