# Top

**URL:** https://discuss.elastic.co/top.md?page=263&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 264

---

## [Kibana Timezone](https://discuss.elastic.co/t/kibana-timezone/29270)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 5\
**Last updated:** [March 17, 2017, 8:48am UTC](https://discuss.elastic.co/t/kibana-timezone/29270 "2017-03-17T08:48:28Z")

</div>

Is there a way to edit Kibana's time zone. So I am pulling logs that are EDT and when i use the date filter in logstash I use the America/New York timezone. So is there a way to change Kibana's default timezone of UTC? …

---

## [What's new in Elastic 9.0.0-beta1](https://discuss.elastic.co/t/whats-new-in-elastic-9-0-0-beta1/374874)

<div class="topic-metadata">

**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\
**Replies:** 0\
**Last updated:** [February 22, 2025, 3:57am UTC](https://discuss.elastic.co/t/whats-new-in-elastic-9-0-0-beta1/374874 "2025-02-22T03:57:37Z")

</div>

The first pre-release of Elasticsearch and the Elastic Stack 9.0.0 is available: 9.0.0-beta1 Give it a try, let us know what works and what doesn't, and please don't use it in production (yet :wink: ). And the easiest …

---

## [Kibana Unable to connect to elasticsearch at http://localhost:9200](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200/29865)

<div class="topic-metadata">

**Author:** [@Arunv](https://discuss.elastic.co/u/Arunv)\
**Replies:** 1\
**Last updated:** [September 23, 2015, 9:01pm UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch-at-http-localhost-9200/29865 "2015-09-23T21:01:10Z")

</div>

I am using kibana 4.1.1 and elasticsearch-1.4.4. When I start kibana after starting elasticsearch I getting this error: Unable to revive connection: http://localhost:9200 Unable to connect to elasticsearch at http://loc…

---

## [Output to multiple indexes straight from filebeat.yml?](https://discuss.elastic.co/t/output-to-multiple-indexes-straight-from-filebeat-yml/130165)

<div class="topic-metadata">

**Author:** [@vopsec](https://discuss.elastic.co/u/vopsec)\
**Replies:** 2\
**Last updated:** [May 2, 2018, 5:35pm UTC](https://discuss.elastic.co/t/output-to-multiple-indexes-straight-from-filebeat-yml/130165 "2018-05-02T17:35:15Z")

</div>

I'm trying to set up filebeat to ingest 2 different types of logs. They're in different locations and they should output to different indexes. This is what I have so far: filebeat.prospectors: - type: log enabled: t…

---

## [Recommended inflight events max exceeded still persists after increasing batch and heap](https://discuss.elastic.co/t/recommended-inflight-events-max-exceeded-still-persists-after-increasing-batch-and-heap/104434)

<div class="topic-metadata">

**Author:** [@mbitzos](https://discuss.elastic.co/u/mbitzos)\
**Replies:** 1\
**Last updated:** [October 18, 2017, 6:16pm UTC](https://discuss.elastic.co/t/recommended-inflight-events-max-exceeded-still-persists-after-increasing-batch-and-heap/104434 "2017-10-18T18:16:22Z")

</div>

I have a 4 node elastic search system running with an instance of logstash pointing to all four instances. I have on average about 600-700 packets of UDP/TCP info being sent through logstash a second. My problem is that…

---

## [Which web crawler works best with ES](https://discuss.elastic.co/t/which-web-crawler-works-best-with-es/53085)

<div class="topic-metadata">

**Author:** [@Yongyao\_Jiang](https://discuss.elastic.co/u/Yongyao_Jiang)\
**Replies:** 2\
**Last updated:** [April 29, 2017, 3:39am UTC](https://discuss.elastic.co/t/which-web-crawler-works-best-with-es/53085 "2017-04-29T03:39:42Z")

</div>

Hey everyone, I am evaluating which crawler to use with ES. Do you guys have any experience or suggestions? Just did some research, and I found choices include Nutch and River Web. Personally, I don't want to involve a…

---

## [Elasticsearch 8.18.6, 8.19.3, 9.0.6, and 9.1.3 Security Update (ESA-2025-14) (CVE-2025-54988)](https://discuss.elastic.co/t/elasticsearch-8-18-6-8-19-3-9-0-6-and-9-1-3-security-update-esa-2025-14-cve-2025-54988/381427)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [August 28, 2025, 3:38pm UTC](https://discuss.elastic.co/t/elasticsearch-8-18-6-8-19-3-9-0-6-and-9-1-3-security-update-esa-2025-14-cve-2025-54988/381427 "2025-08-28T15:38:52Z")

</div>

Elasticsearch XML external entity (XXE) injection in Apache Tika (ESA-2025-14) On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in the A…

---

## [Logstash Error: Retrying Failed Action With Response Code 403](https://discuss.elastic.co/t/logstash-error-retrying-failed-action-with-response-code-403/174864)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 1\
**Last updated:** [April 1, 2019, 8:20pm UTC](https://discuss.elastic.co/t/logstash-error-retrying-failed-action-with-response-code-403/174864 "2019-04-01T20:20:47Z")

</div>

I'm receiving the following error in Logstash: \[2019-04-01T14:43:45,454\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"blocked by: …

---

## [Conditional for empty field](https://discuss.elastic.co/t/conditional-for-empty-field/87932)

<div class="topic-metadata">

**Author:** [@Lukas\_Tilch](https://discuss.elastic.co/u/Lukas_Tilch)\
**Replies:** 2\
**Last updated:** [June 6, 2017, 9:13am UTC](https://discuss.elastic.co/t/conditional-for-empty-field/87932 "2017-06-06T09:13:25Z")

</div>

Hello I'm trying to parse a date in a field which sometimes contains no data I'm getting this error log when I try to parse it. \[2017-06-01T16:43:23,036\]\[WARN \]\[logstash.outputs.elasticsearch\] Failed action. {:status=\>4…

---

## [🎉 What’s new in Elastic 9.2](https://discuss.elastic.co/t/what-s-new-in-elastic-9-2/383071)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [October 29, 2025, 11:25am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-9-2/383071 "2025-10-29T11:25:38Z")

</div>

:tada: What’s new in Elastic 9.2 Learn about Elastic 9.2 with Agent Builder, DiskBBQ, Streams, Significant Events, and more. Note that some of those new features are in tech preview and hidden by default but there a…

---

## [Search result hit total](https://discuss.elastic.co/t/search-result-hit-total/4216)

<div class="topic-metadata">

**Author:** [@gitfy](https://discuss.elastic.co/u/gitfy)\
**Replies:** 5\
**Last updated:** [April 12, 2011, 5:25am UTC](https://discuss.elastic.co/t/search-result-hit-total/4216 "2011-04-12T05:25:17Z")

</div>

When i do a search, i get the results as { "took" : 1, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "failed" : 0 }, "hits" : { "total" : 26, "max\_score" : 1…

---

## [Grok with conditional patterns and adding a tag](https://discuss.elastic.co/t/grok-with-conditional-patterns-and-adding-a-tag/43844)

<div class="topic-metadata">

**Author:** [@pzero](https://discuss.elastic.co/u/pzero)\
**Replies:** 2\
**Last updated:** [March 9, 2016, 11:47pm UTC](https://discuss.elastic.co/t/grok-with-conditional-patterns-and-adding-a-tag/43844 "2016-03-09T23:47:45Z")

</div>

Hello, I'm trying to filter logs from auth.log on a linux server. I want to tag with "ssh\_successful\_login", "ssh\_failed\_login", "ssh\_brute\_force". Mar 3 16:56:22 test sshd\[8510\]: Failed password for user1 from 192…

---

## [Is it possible to create a Visualization with multiple indexes in Kibana](https://discuss.elastic.co/t/is-it-possible-to-create-a-visualization-with-multiple-indexes-in-kibana/158516)

<div class="topic-metadata">

**Author:** [@Sunil\_Edupuganti](https://discuss.elastic.co/u/Sunil_Edupuganti)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 3:04pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-visualization-with-multiple-indexes-in-kibana/158516 "2018-11-28T15:04:52Z")

</div>

Hi, Is it possible to create a Visualization with multiple indexes in Kibana

---

## [Multi-line Filebeat templates don't work with filebeat.inputs - type: filestream](https://discuss.elastic.co/t/multi-line-filebeat-templates-dont-work-with-filebeat-inputs-type-filestream/274510)

<div class="topic-metadata">

**Author:** [@cva](https://discuss.elastic.co/u/cva)\
**Replies:** 1\
**Last updated:** [December 9, 2021, 6:06pm UTC](https://discuss.elastic.co/t/multi-line-filebeat-templates-dont-work-with-filebeat-inputs-type-filestream/274510 "2021-12-09T18:06:07Z")

</div>

I ran into a multiline processing problem in Filebeat when the filebeat.inputs: parameters specify type: filestream - the logs of the file stream are not analyzed according to the requirements of multiline. pattern: '^\[\[…

---

## [Data Table without Aggregation (No Search)](https://discuss.elastic.co/t/data-table-without-aggregation-no-search/131903)

<div class="topic-metadata">

**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\
**Replies:** 8\
**Last updated:** [May 15, 2018, 11:08am UTC](https://discuss.elastic.co/t/data-table-without-aggregation-no-search/131903 "2018-05-15T11:08:53Z")

</div>

Can we create a data table visualization without applying any aggregation in Kibana 6.2.4?

---

## [Export ingest pipeline in Beats \[7.x\]](https://discuss.elastic.co/t/export-ingest-pipeline-in-beats-7-x/256757)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 1\
**Last updated:** [November 30, 2020, 3:15am UTC](https://discuss.elastic.co/t/export-ingest-pipeline-in-beats-7-x/256757 "2020-11-30T03:15:59Z")

</div>

Hi, everyone I would like to know if there is a method like export template but for ingest pipelines, that is: filebeat export ingest module system \> system-ingest-pipeline.json The purpose of this is because sometime…

---

## [Using Wildcards in field filters](https://discuss.elastic.co/t/using-wildcards-in-field-filters/47329)

<div class="topic-metadata">

**Author:** [@Bryan\_Whitmarsh](https://discuss.elastic.co/u/Bryan_Whitmarsh)\
**Replies:** 5\
**Last updated:** [April 18, 2016, 6:40pm UTC](https://discuss.elastic.co/t/using-wildcards-in-field-filters/47329 "2016-04-18T18:40:18Z")

</div>

Ok, I'm a elastic newbie (\<8hrs and 100+ usages of "curl -XDELETE 'http://localhost:9200/\_all'"...;). I simply want to create a filter that searches the string content of a specific field (POND\_NAME) and returns all rec…

---

## [Filter mutate add\_field from nested field](https://discuss.elastic.co/t/filter-mutate-add-field-from-nested-field/170231)

<div class="topic-metadata">

**Author:** [@Welton\_Leao\_Machado](https://discuss.elastic.co/u/Welton_Leao_Machado)\
**Replies:** 3\
**Last updated:** [February 28, 2019, 2:06pm UTC](https://discuss.elastic.co/t/filter-mutate-add-field-from-nested-field/170231 "2019-02-28T14:06:19Z")

</div>

i'm trying to catch a nested field to add in a new field with mutate add\_field So, i have the follow data "beat" =\> { "name" =\> "LBR001001-172.net.mapfre.com.br", "hostname" =\> "LBR001001-172.net.mapfre.com.br", "v…

---

## [Garbage Collection blackout](https://discuss.elastic.co/t/garbage-collection-blackout/81652)

<div class="topic-metadata">

**Author:** [@gtorrance](https://discuss.elastic.co/u/gtorrance)\
**Replies:** 2\
**Last updated:** [April 10, 2017, 3:52pm UTC](https://discuss.elastic.co/t/garbage-collection-blackout/81652 "2017-04-10T15:52:12Z")

</div>

Hi all, I have set up a ELK server (mostly using defaults) on a VM with 2GB of memory and 200GB of disk. It has been been loading about 250 log files from another server using Filebeat. (The files are only about 300KB e…

---

## [Typescript elasticsearch 7.X - not compiling](https://discuss.elastic.co/t/typescript-elasticsearch-7-x-not-compiling/186348)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar2](https://discuss.elastic.co/u/Raj_Kumar2)\
**Replies:** 0\
**Last updated:** [June 18, 2019, 9:18pm UTC](https://discuss.elastic.co/t/typescript-elasticsearch-7-x-not-compiling/186348 "2019-06-18T21:18:38Z")

</div>

I am using "@elastic/elasticsearch": "^7.1.0", when I access the Client form the this library, I get compile errors when I compile and launch in Angular 7 ERROR in ./node\_modules/@elastic/elasticsearch/lib/Connectio…

---

## [Grok with multiple matches - can i assign type based on match?](https://discuss.elastic.co/t/grok-with-multiple-matches-can-i-assign-type-based-on-match/60397)

<div class="topic-metadata">

**Author:** [@jamesmanning](https://discuss.elastic.co/u/jamesmanning)\
**Replies:** 6\
**Last updated:** [November 22, 2018, 7:53am UTC](https://discuss.elastic.co/t/grok-with-multiple-matches-can-i-assign-type-based-on-match/60397 "2018-11-22T07:53:05Z")

</div>

I'm parsing an IRC log and trying to assign different types based on which type of log entry a given line is. Currently I'm using N different matches in a single grok filter, since a given line should match at most one…

---

## [While indexing a document into elasticsearch, I am getting " "message": "Payload content length greater than maximum allowed: 1048576"](https://discuss.elastic.co/t/while-indexing-a-document-into-elasticsearch-i-am-getting-message-payload-content-length-greater-than-maximum-allowed-1048576/122758)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 1\
**Last updated:** [March 7, 2018, 4:03pm UTC](https://discuss.elastic.co/t/while-indexing-a-document-into-elasticsearch-i-am-getting-message-payload-content-length-greater-than-maximum-allowed-1048576/122758 "2018-03-07T16:03:24Z")

</div>

Hello folks, Newbie to ELK. I have downloaded shakespeare.json file from elastic.co site to practice Queries from Kibana console. when I try to index the JSON document using the following request, I get the following e…

---

## [Version check](https://discuss.elastic.co/t/version-check/162811)

<div class="topic-metadata">

**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Replies:** 6\
**Last updated:** [January 4, 2019, 11:48am UTC](https://discuss.elastic.co/t/version-check/162811 "2019-01-04T11:48:44Z")

</div>

Is there any way to check the versions of installed logstash, kibana, filebeat and winlogbeat ? Like to check elasticsearch version you execute: curl -XGET 'localhost:9200'

---

## [Installing plugin through shell script without prompt](https://discuss.elastic.co/t/installing-plugin-through-shell-script-without-prompt/84456)

<div class="topic-metadata">

**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\
**Replies:** 4\
**Last updated:** [May 4, 2017, 2:38pm UTC](https://discuss.elastic.co/t/installing-plugin-through-shell-script-without-prompt/84456 "2017-05-04T14:38:39Z")

</div>

Hi I want to include the plugin installation as part of automation scripts which will install the elastic nodes & install the plugins. In the ES documentation, I dont see any option for forcing to accept "y" or dont…

---

## [Logstash failed to create queue](https://discuss.elastic.co/t/logstash-failed-to-create-queue/146852)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 0\
**Last updated:** [August 31, 2018, 11:05am UTC](https://discuss.elastic.co/t/logstash-failed-to-create-queue/146852 "2018-08-31T11:05:36Z")

</div>

Today, I find out, my queue is full, and my logstash suddenly generate this error: \[2018-08-31T12:56:13,494\]\[ERROR\]\[logstash.pipeline \] Logstash failed to create queue {:pipeline\_id=\>"default-pipeline", "exceptio…

---

## [Kibana asking for Enrollment Token when xpack.security.enabled: false in Elasticsearch](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118)

<div class="topic-metadata">

**Author:** [@AdmiralGT](https://discuss.elastic.co/u/AdmiralGT)\
**Replies:** 1\
**Last updated:** [April 15, 2022, 4:12am UTC](https://discuss.elastic.co/t/kibana-asking-for-enrollment-token-when-xpack-security-enabled-false-in-elasticsearch/302118 "2022-04-15T04:12:13Z")

</div>

I have Kibana and Elasticsearch running in a kubernetes cluster, both v8.1.2 In my Elasticsearch.yml I have xpack.security.enabled: false This is confirmed by trying to create the enrollment token in Elasticsearch …

---

## [Export and import via curl kibana's dashboards and visualizations](https://discuss.elastic.co/t/export-and-import-via-curl-kibanas-dashboards-and-visualizations/41842)

<div class="topic-metadata">

**Author:** [@LiorK](https://discuss.elastic.co/u/LiorK)\
**Replies:** 7\
**Last updated:** [June 28, 2017, 1:09pm UTC](https://discuss.elastic.co/t/export-and-import-via-curl-kibanas-dashboards-and-visualizations/41842 "2017-06-28T13:09:07Z")

</div>

hi there, I'm trying to get all the dashboards into json without the UI of the kibana itself (using curl). at the moment , I succeed getting the dashboards but to open them on another instance I need to have the visu…

---

## [Sinker: a new tool to synchronize Postgres to Elasticsearch](https://discuss.elastic.co/t/sinker-a-new-tool-to-synchronize-postgres-to-elasticsearch/327691)

<div class="topic-metadata">

**Author:** [@loren](https://discuss.elastic.co/u/loren)\
**Replies:** 0\
**Last updated:** [March 14, 2023, 4:53pm UTC](https://discuss.elastic.co/t/sinker-a-new-tool-to-synchronize-postgres-to-elasticsearch/327691 "2023-03-14T16:53:41Z")

</div>

I built a change data capture tool to synchronize normalized Postgres data into denormalized Elasticsearch documents, and my employer let me open-source it yesterday. We tried some existing solutions but they weren't a…

---

## [ERROR Unable to locate appender "${sys:ls.log.format}\_rolling" for logger config "root"](https://discuss.elastic.co/t/error-unable-to-locate-appender-sys-ls-log-format-rolling-for-logger-config-root/107942)

<div class="topic-metadata">

**Author:** [@Juliette](https://discuss.elastic.co/u/Juliette)\
**Replies:** 7\
**Last updated:** [January 3, 2018, 11:18am UTC](https://discuss.elastic.co/t/error-unable-to-locate-appender-sys-ls-log-format-rolling-for-logger-config-root/107942 "2018-01-03T11:18:41Z")

</div>

Hi, I need your help ! I'm working on Elasticsearch ELK since 2 weeks and I have some issues when a try to create my first pipeline. I saw many blog, article and documentation before coming here and disturb you. Versio…

---

## [Kibana Log file](https://discuss.elastic.co/t/kibana-log-file/138760)

<div class="topic-metadata">

**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\
**Replies:** 4\
**Last updated:** [July 5, 2018, 6:27pm UTC](https://discuss.elastic.co/t/kibana-log-file/138760 "2018-07-05T18:27:43Z")

</div>

Very basic question here. I am working on a DEB install of Kibana and I cannot seem to find where the applications log files are kept. I assumed they would be in /var/log/kibana but that does not seem to exist. Any h…

---

## [Groovy to Painless; get current date time](https://discuss.elastic.co/t/groovy-to-painless-get-current-date-time/95471)

<div class="topic-metadata">

**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 4:00pm UTC](https://discuss.elastic.co/t/groovy-to-painless-get-current-date-time/95471 "2017-08-03T16:00:53Z")

</div>

I am trying to convert this Groovy script to Painless: (0.08 / ((3.16\*pow(10,-11.5)) \* abs(DateTime.now().getMillis() - doc\['created'\].date.getMillis()) + 0.05)) + 1.0 So far this is what I have, but I keep getting the…

---

## [SocketTimeoutException within Java High Level Client](https://discuss.elastic.co/t/sockettimeoutexception-within-java-high-level-client/259871)

<div class="topic-metadata">

**Author:** [@David-Lor](https://discuss.elastic.co/u/David-Lor)\
**Replies:** 4\
**Last updated:** [January 4, 2021, 4:13pm UTC](https://discuss.elastic.co/t/sockettimeoutexception-within-java-high-level-client/259871 "2021-01-04T16:13:11Z")

</div>

I'm building an application involving SpringBoot and the official Elastic REST High Level Client, and it seems that the connection with the Elastic server eventually dies if not used after some time. On the application …

---

## [Decompounder in query\_string analyzer](https://discuss.elastic.co/t/decompounder-in-query-string-analyzer/11749)

<div class="topic-metadata">

**Author:** [@singer](https://discuss.elastic.co/u/singer)\
**Replies:** 0\
**Last updated:** [April 30, 2013, 2:53pm UTC](https://discuss.elastic.co/t/decompounder-in-query-string-analyzer/11749 "2013-04-30T14:53:19Z")

</div>

Hi everyone, I'm building a search engine for a German website and therefore have to deal with compound word filters... The main problem currently are compound nouns that are sometimes written as one word and …

---

## [Issue with elastic search 5.0.0 - NoClassDefFoundError: org/apache/logging/log4j/Logger](https://discuss.elastic.co/t/issue-with-elastic-search-5-0-0-noclassdeffounderror-org-apache-logging-log4j-logger/64262)

<div class="topic-metadata">

**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\
**Replies:** 7\
**Last updated:** [March 16, 2017, 9:33pm UTC](https://discuss.elastic.co/t/issue-with-elastic-search-5-0-0-noclassdeffounderror-org-apache-logging-log4j-logger/64262 "2017-03-16T21:33:40Z")

</div>

Hi, i am in the process of converting the elastic search version from 2.x to 5.0.0. i am seeing the below error when i try to initialize the client. client = new PreBuiltTransportClient(settings); Exception in threa…

---

## [Way to change the version of JARs used in Elasticsearch](https://discuss.elastic.co/t/way-to-change-the-version-of-jars-used-in-elasticsearch/275999)

<div class="topic-metadata">

**Author:** [@Ripu\_Sudan](https://discuss.elastic.co/u/Ripu_Sudan)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 4:05pm UTC](https://discuss.elastic.co/t/way-to-change-the-version-of-jars-used-in-elasticsearch/275999 "2021-06-15T16:05:30Z")

</div>

I've used the latest version of Elasticsearch docker image, As in image you can see the listing of JARs used, On running vulnerabilities test on image, some modules gives vulnerabilities, like jackson-dataformat-cbor-…

---

## [Elastic Community Conference 2022 - 11 and 12th February 2022](https://discuss.elastic.co/t/elastic-community-conference-2022-11-and-12th-february-2022/295166)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [January 23, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elastic-community-conference-2022-11-and-12th-february-2022/295166 "2022-01-23T21:25:48Z")

</div>

The second annual Elastic Community Conference (ElasticCC) is taking place February 11–12, 2022. Join us and hear success stories, lessons learned, tips, tricks, best practices, or funny anecdotes. ElasticCC is a free t…

---

## [How to backup all my visualization and dashboard using version control like GIT?](https://discuss.elastic.co/t/how-to-backup-all-my-visualization-and-dashboard-using-version-control-like-git/94914)

<div class="topic-metadata">

**Author:** [@sadiesh](https://discuss.elastic.co/u/sadiesh)\
**Replies:** 3\
**Last updated:** [July 28, 2017, 6:12pm UTC](https://discuss.elastic.co/t/how-to-backup-all-my-visualization-and-dashboard-using-version-control-like-git/94914 "2017-07-28T18:12:40Z")

</div>

How to backup all my visualization and dashboard using version control like GIT?

---

## [Dec 11th, 2022: \[EN\] Running Elasticsearch and Kibana v8+ locally (macOS/Linux and Windows)](https://discuss.elastic.co/t/dec-11th-2022-en-running-elasticsearch-and-kibana-v8-locally-macos-linux-and-windows/320174)

<div class="topic-metadata">

**Author:** [@Lisa\_Jung](https://discuss.elastic.co/u/Lisa_Jung)\
**Replies:** 0\
**Last updated:** [December 11, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2022-en-running-elasticsearch-and-kibana-v8-locally-macos-linux-and-windows/320174 "2022-12-11T08:00:19Z")

</div>

As of 8.0, Elastic Stack security is on by default for self-managed clusters! When you download and run Elasticsearch and Kibana v8+ for the first time, you will notice that credentials for the elastic superuser and …

---

## [Elasticsearch for Microsoft SQL Server Data](https://discuss.elastic.co/t/elasticsearch-for-microsoft-sql-server-data/85806)

<div class="topic-metadata">

**Author:** [@Delly](https://discuss.elastic.co/u/Delly)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-for-microsoft-sql-server-data/85806 "2017-05-15T20:05:32Z")

</div>

Hi, We have a Microsoft SQL Server Database running in Production. Can someone please illustrate on how to access Ms SQL Server Data to Elasticsearch? I found the River technique on Web but also saw that it was already …

---

## [🎉 Elastic Stack 8.9 released](https://discuss.elastic.co/t/elastic-stack-8-9-released/339298)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 0\
**Last updated:** [July 26, 2023, 11:23am UTC](https://discuss.elastic.co/t/elastic-stack-8-9-released/339298 "2023-07-26T11:23:42Z")

</div>

:tada: What’s new in Elastic 8.9 This release provides faster search performance and increased SIEM capabilities along with a tech preview of Reciprocal Rank Fusion for hybrid search. Importantly, the beta release of the…

---

## [Exclude Multiple Patterns in Kibana Visualisation using wildcards](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 3\
**Last updated:** [June 15, 2017, 11:44pm UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-kibana-visualisation-using-wildcards/89513 "2017-06-15T23:44:27Z")

</div>

Hi, How do I exclude multiple terms from Kibana 5.3.2 visualisation? I am trying to get the top 10 email recipients by message count and I need to exclude certain system accounts. If I use a single exclude Exclaimer…

---

## [Exact match with case insensitivity](https://discuss.elastic.co/t/exact-match-with-case-insensitivity/89582)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 8\
**Last updated:** [July 25, 2017, 3:48pm UTC](https://discuss.elastic.co/t/exact-match-with-case-insensitivity/89582 "2017-07-25T15:48:20Z")

</div>

I have seen tons of articles on these, most of them for version 2.4. Since ES introduced keyword and text starting version 5.0, I wanted to check if there is a way to search on a keyword with case insensitivity. Let's …

---

## [Query based on date field](https://discuss.elastic.co/t/query-based-on-date-field/27126)

<div class="topic-metadata">

**Author:** [@141984](https://discuss.elastic.co/u/141984)\
**Replies:** 6\
**Last updated:** [August 12, 2015, 4:29pm UTC](https://discuss.elastic.co/t/query-based-on-date-field/27126 "2015-08-12T16:29:25Z")

</div>

Hi, I have a filed called "date" of map "date": { "type": "date", "format": "dateOptionalTime" }, Examples values of this field are July 31st 2015, 12:39:50.569 July 31st 2015, 1…

---

## [\[ Creating new rule \]: ERROR Authentication using apikey failed - api key has been invalidated](https://discuss.elastic.co/t/creating-new-rule-error-authentication-using-apikey-failed-api-key-has-been-invalidated/261407)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 4\
**Last updated:** [January 19, 2021, 4:53pm UTC](https://discuss.elastic.co/t/creating-new-rule-error-authentication-using-apikey-failed-api-key-has-been-invalidated/261407 "2021-01-19T16:53:45Z")

</div>

Hello, I am using elasticsearch, kibana and beats version 7.10.1 with a Trial license, I am trying to create a new Match rule and in my elasticsearch node I am getting this error: \[2021-01-18T11:33:18,032\]\[WARN \]\[o.e…

---

## [Kibana - Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/230778)

<div class="topic-metadata">

**Author:** [@santosh1607kumar](https://discuss.elastic.co/u/santosh1607kumar)\
**Replies:** 2\
**Last updated:** [May 21, 2020, 9:45am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes/230778 "2020-05-21T09:45:54Z")

</div>

I am trying to run kibana on an ubuntu instance. I have set up elasticsearch and kibana. However when I run kibana using /usr/share/kibana/bin/kibana I get and error which says "Unable to retrieve version information fro…

---

## [TimeLion cardinality with filter](https://discuss.elastic.co/t/timelion-cardinality-with-filter/47774)

<div class="topic-metadata">

**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\
**Replies:** 2\
**Last updated:** [April 26, 2016, 3:52pm UTC](https://discuss.elastic.co/t/timelion-cardinality-with-filter/47774 "2016-04-26T15:52:35Z")

</div>

Hi, I need to provide a unqiue count of userId for a given referer domain. I tried: .es('refererDomain:instyle.com AND metric:cardinality=userId.raw') But it returns zero results. How do I do this? Many thanks.

---

## [Dec 14th, 2017: \[JP\]\[Elasticsearch\] Analyze APIを使って、転置インデックスとテキスト解析を理解する](https://discuss.elastic.co/t/dec-14th-2017-jp-elasticsearch-analyze-api/110528)

<div class="topic-metadata">

**Author:** [@johtani](https://discuss.elastic.co/u/johtani)\
**Replies:** 0\
**Last updated:** [December 14, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-14th-2017-jp-elasticsearch-analyze-api/110528 "2017-12-14T00:00:12Z")

</div>

Elasticsearchを利用して、検索しているときに、想定していない単語にヒットすることがありませんか？ 望んだ形で検索できる仕組みを作るためには、転置インデックスと入力された文章を解析する仕組みを理解するのが一番の近道です。 転置インデックスとは？ 全文検索のインデックスとして用いられるデータ形式の1つです。 書籍の後ろにある「索引」（Index）を想像していただくのが一番わかりやすいのですが、 調べたい「単語」を見つける…

---

## [Hide "Secure your data for free with Elastic" message programatically](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917)

<div class="topic-metadata">

**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\
**Replies:** 3\
**Last updated:** [December 17, 2020, 2:31pm UTC](https://discuss.elastic.co/t/hide-secure-your-data-for-free-with-elastic-message-programatically/258917 "2020-12-17T14:31:06Z")

</div>

When logging onto Kibana for the first time, I get a message "Your data is not secure. Don't lose one bit. Secure your data for free with Elastic." See PR 80344 and issue 80161. I'm maintaining a project that uses elas…

---

## [Show date with correct timezone in Kibana alert emails](https://discuss.elastic.co/t/show-date-with-correct-timezone-in-kibana-alert-emails/267159)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [March 16, 2021, 10:58am UTC](https://discuss.elastic.co/t/show-date-with-correct-timezone-in-kibana-alert-emails/267159 "2021-03-16T10:58:10Z")

</div>

Hello, In Elastic SIEM alert emails, we can use {{date}} as date in email alerts. But the problem is that date is in GMT and my timezone is GMT+1. Is there a way to be able to show the correct date in Kibana alert email…

---

## [KIBANA:This field is present in your elasticsearch mapping but not in any documents in the search results. You may still be able to visualize or search on it](https://discuss.elastic.co/t/kibana-this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/25903)

<div class="topic-metadata">

**Author:** [@poonam](https://discuss.elastic.co/u/poonam)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 3:52pm UTC](https://discuss.elastic.co/t/kibana-this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/25903 "2016-04-21T15:52:48Z")

</div>

I assed indexin seeting and it shows list of field.But in discover it shows as inactive filed and it gives message: This field is present in your elasticsearch mapping but not in any documents in the search results. You …

[Previous page](https://discuss.elastic.co/top.md?page=262&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=264&per_page=50&period=all)
