# Top

**URL:** https://discuss.elastic.co/top.md?page=265&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 266

---

## [Bulk indexing raise read timeout error](https://discuss.elastic.co/t/bulk-indexing-raise-read-timeout-error/798)

<div class="topic-metadata">

**Author:** [@Fool\_LeoTao](https://discuss.elastic.co/u/Fool_LeoTao)\
**Replies:** 3\
**Last updated:** [January 21, 2016, 4:47am UTC](https://discuss.elastic.co/t/bulk-indexing-raise-read-timeout-error/798 "2016-01-21T04:47:49Z")

</div>

When using bulk api to index with python client,it's ok at begin.But sooner an readtime error raised like the following: bulk\_index start processing... 1 chunk bulk index spend: 20.0 2 chunk bulk index spend: 17.0 3 …

---

## [Logstash add\_field](https://discuss.elastic.co/t/logstash-add-field/50036)

<div class="topic-metadata">

**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\
**Replies:** 6\
**Last updated:** [May 14, 2016, 1:53pm UTC](https://discuss.elastic.co/t/logstash-add-field/50036 "2016-05-14T13:53:55Z")

</div>

Hi Team, I am trying to add a field but not getting expected result please assist, surely i am overlooking something. It's logstash-2.3.2-1 PFB Details: grok{ match =\> \["message", "%{WORD:appname}"\] } muta…

---

## [\[ANNOUNCEMENT\] Relevant Search from Manning published](https://discuss.elastic.co/t/announcement-relevant-search-from-manning-published/53535)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 3\
**Last updated:** [June 27, 2016, 2:31pm UTC](https://discuss.elastic.co/t/announcement-relevant-search-from-manning-published/53535 "2016-06-27T14:31:00Z")

</div>

The final ebook of Relevant Search is out (printed copies out on the 29th) Read more here! To quote the description: Users expect search to be simple: They enter a few terms and expect perfectly-organized, relevant re…

---

## [Kibana: Configure Security - missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-configure-security-missing-authentication-credentials-for-rest-request/256790)

<div class="topic-metadata">

**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\
**Replies:** 7\
**Last updated:** [November 27, 2020, 7:06pm UTC](https://discuss.elastic.co/t/kibana-configure-security-missing-authentication-credentials-for-rest-request/256790 "2020-11-27T19:06:43Z")

</div>

Good day, I'm curious about the alert-functionality in Kibana. Therefore I'm setting up the security in Kibana. I already set the elasticsearch passwords (interactive). This are my configs kibana.yml server.name: ki…

---

## [Time based search in Kibana discover or visualize](https://discuss.elastic.co/t/time-based-search-in-kibana-discover-or-visualize/35274)

<div class="topic-metadata">

**Author:** [@chinmoyd](https://discuss.elastic.co/u/chinmoyd)\
**Replies:** 7\
**Last updated:** [November 27, 2015, 5:56pm UTC](https://discuss.elastic.co/t/time-based-search-in-kibana-discover-or-visualize/35274 "2015-11-27T17:56:05Z")

</div>

I have a time stamp field ( name is timestamp ) in my list of fields in Kibana index. I need to set a filter as below: Display all the transactions between 2015-11-23 10:11:23 and 2015-11-23 10:50:33 Please suggest wha…

---

## [Unable to authenticate user \[\*\*\*\*\*\] for REST request \[/\]](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/197461)

<div class="topic-metadata">

**Author:** [@akhil](https://discuss.elastic.co/u/akhil)\
**Replies:** 1\
**Last updated:** [August 30, 2019, 8:00am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/197461 "2019-08-30T08:00:20Z")

</div>

Hi Team, \*I have created one user from kibana UI and also from elastic server using the REST API. Now when I'm trying to hit the API using my new user id and password I'm getting the error message - \*API that I'm usin…

---

## [Logstash- Unable to retrieve license information from license server](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server/264979)

<div class="topic-metadata">

**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 6:29am UTC](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server/264979 "2021-03-03T06:29:36Z")

</div>

Trying to setup ELK stack on my on-premise K8S cluster using helm charts. Have enabled x-pack security and both Elasticsearch and kibana are working fine after enabling transport, http security I have used elasticsearch…

---

## [How to rename an index?](https://discuss.elastic.co/t/how-to-rename-an-index/80433)

<div class="topic-metadata">

**Author:** [@qin](https://discuss.elastic.co/u/qin)\
**Replies:** 1\
**Last updated:** [March 29, 2017, 8:11am UTC](https://discuss.elastic.co/t/how-to-rename-an-index/80433 "2017-03-29T08:11:39Z")

</div>

How to rename an index name, rename, old index name cannot be accessed again

---

## [Adding tags after executing ruby code filter](https://discuss.elastic.co/t/adding-tags-after-executing-ruby-code-filter/37347)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 6\
**Last updated:** [January 10, 2017, 3:45pm UTC](https://discuss.elastic.co/t/adding-tags-after-executing-ruby-code-filter/37347 "2017-01-10T15:45:54Z")

</div>

Hi, I have a filter which check all inbound fields for leading underscores and if it finds any changes the underscore to other text. I'd like to tag messages that have been modified with a tag. How do I do this? Atm, t…

---

## ["not\_x\_content\_exception" while trying to PUT simple file with column mappings into ES via cURL](https://discuss.elastic.co/t/not-x-content-exception-while-trying-to-put-simple-file-with-column-mappings-into-es-via-curl/103537)

<div class="topic-metadata">

**Author:** [@Mikhail](https://discuss.elastic.co/u/Mikhail)\
**Replies:** 7\
**Last updated:** [October 11, 2017, 2:16pm UTC](https://discuss.elastic.co/t/not-x-content-exception-while-trying-to-put-simple-file-with-column-mappings-into-es-via-curl/103537 "2017-10-11T14:16:41Z")

</div>

Good day! I'm a newbie in ELK and got stuck on the task that seemed to be a simple one on the first sight but that is not how it turned out. What am I trying to do: I have a table with test data in MS SQL Server and I…

---

## [Append to a array field](https://discuss.elastic.co/t/append-to-a-array-field/82649)

<div class="topic-metadata">

**Author:** [@dwjorgeb](https://discuss.elastic.co/u/dwjorgeb)\
**Replies:** 7\
**Last updated:** [April 18, 2017, 11:41pm UTC](https://discuss.elastic.co/t/append-to-a-array-field/82649 "2017-04-18T23:41:46Z")

</div>

Hello, I am new to ES and but I'm getting the hang of it. It's a really powerful piece of software, but I have to say that the documentation is really lacking and confusing some times. Here's my question: I have an in…

---

## [Why and how to use elastic charts?](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836)

<div class="topic-metadata">

**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\
**Replies:** 4\
**Last updated:** [March 9, 2022, 3:26am UTC](https://discuss.elastic.co/t/why-and-how-to-use-elastic-charts/298836 "2022-03-09T03:26:05Z")

</div>

I found the @elastic/charts library on official github profile of elastic. So, can I create visualizations (ones which are displayed in a kibana dashboard) by consuming Elasticsearch rest api and @elastic/charts ? If y…

---

## [Dec 24th, 2023: \[EN\] Generating the ultimate Christmas song with Elasticsearch and LLMs](https://discuss.elastic.co/t/dec-24th-2023-en-generating-the-ultimate-christmas-song-with-elasticsearch-and-llms/347313)

<div class="topic-metadata">

**Author:** [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Replies:** 0\
**Last updated:** [December 24, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-24th-2023-en-generating-the-ultimate-christmas-song-with-elasticsearch-and-llms/347313 "2023-12-24T08:00:17Z")

</div>

Introduction We've all played with those song generators out there on the internet to generate songs. More recently we've used LLMs such as ChatGPT to generate songs or poems in the style of a particular artist. But w…

---

## [Controls visualization does show incomplete items](https://discuss.elastic.co/t/controls-visualization-does-show-incomplete-items/198206)

<div class="topic-metadata">

**Author:** [@blackface](https://discuss.elastic.co/u/blackface)\
**Replies:** 2\
**Last updated:** [September 6, 2019, 12:34pm UTC](https://discuss.elastic.co/t/controls-visualization-does-show-incomplete-items/198206 "2019-09-06T12:34:13Z")

</div>

I installed ELK 7.3. When I use a Controls visualization, the dropdown list does not include all items I expected from the specified index pattern. A little warning rectangle shows: Terms is incomplete. Adjust autocomple…

---

## [Dec 6th, 2022: \[EN\] A completion suggester for Santa's little helpers](https://discuss.elastic.co/t/dec-6th-2022-en-a-completion-suggester-for-santas-little-helpers/319231)

<div class="topic-metadata">

**Author:** [@Alexis\_Roberson](https://discuss.elastic.co/u/Alexis_Roberson)\
**Replies:** 0\
**Last updated:** [December 6, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-6th-2022-en-a-completion-suggester-for-santas-little-helpers/319231 "2022-12-06T08:00:07Z")

</div>

A completion suggester for Santa’s little helpers Introduction What is a completion suggester? Major components of a completion suggester Walkthrough / Demo Drawbacks Conclusion Introduction The elves have spun up …

---

## [Logstash Ruby filter to subtract difference between two timestamps in single event](https://discuss.elastic.co/t/logstash-ruby-filter-to-subtract-difference-between-two-timestamps-in-single-event/32580)

<div class="topic-metadata">

**Author:** [@ottignon](https://discuss.elastic.co/u/ottignon)\
**Replies:** 4\
**Last updated:** [October 21, 2015, 4:13pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-to-subtract-difference-between-two-timestamps-in-single-event/32580 "2015-10-21T16:13:01Z")

</div>

Hi, I'm trying to demonstrate the feasability of switching from a Splunk solution to an ELK (Elasticsearch, Logstash and Kibana) stack (with Redis) solution for log analysis and triggering alerts. I have a requiremen…

---

## [Dec 23rd, 2023: \[EN\] Novice Kibana user goes metal in analytics](https://discuss.elastic.co/t/dec-23rd-2023-en-novice-kibana-user-goes-metal-in-analytics/347312)

<div class="topic-metadata">

**Author:** [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Replies:** 0\
**Last updated:** [December 23, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-23rd-2023-en-novice-kibana-user-goes-metal-in-analytics/347312 "2023-12-23T08:00:38Z")

</div>

For this year's advent calendar, I thought I will try to ingest some music data into elasticsearch and talk about few of my favourite features in Discover and Dashboard for analytics in Kibana 8.11 (our latest release)…

---

## [Dec 12th, 2022: \[EN\] Building Machine Learning models using the Elastic Stack](https://discuss.elastic.co/t/dec-12th-2022-en-building-machine-learning-models-using-the-elastic-stack/320926)

<div class="topic-metadata">

**Author:** [@Apoorva\_Joshi](https://discuss.elastic.co/u/Apoorva_Joshi)\
**Replies:** 0\
**Last updated:** [December 12, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2022-en-building-machine-learning-models-using-the-elastic-stack/320926 "2022-12-12T08:00:53Z")

</div>

When someone says Elastic, most people think of data storage, analysis, and visualization, but you don't immediately think of it as a one-stop shop for production-level machine learning (ML). While these are important…

---

## [How to delete a field completely from an index](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893)

<div class="topic-metadata">

**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\
**Replies:** 6\
**Last updated:** [June 28, 2021, 3:43am UTC](https://discuss.elastic.co/t/how-to-delete-a-field-completely-from-an-index/276893 "2021-06-28T03:43:45Z")

</div>

I created some field in the past for testing. Let's take the "STATISTIC-PROCESS-RUNTIME-HOUR" as an example. So I was able to find a way to remove that field from my index with: POST filebeat-7.13.0-2021.05.26-000001/\_…

---

## [Change analyzer of specific property](https://discuss.elastic.co/t/change-analyzer-of-specific-property/99012)

<div class="topic-metadata">

**Author:** [@adinu](https://discuss.elastic.co/u/adinu)\
**Replies:** 1\
**Last updated:** [August 31, 2017, 2:48pm UTC](https://discuss.elastic.co/t/change-analyzer-of-specific-property/99012 "2017-08-31T14:48:25Z")

</div>

HI guys, I am new to elasticSearch and i am trying to do something. after i insert data and index it, can i somehow change the analyzer of specific property? for example this is the response of: GET company-node/\_map…

---

## [How to control maximum number of client connections to ES instance](https://discuss.elastic.co/t/how-to-control-maximum-number-of-client-connections-to-es-instance/21048)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 6:44pm UTC](https://discuss.elastic.co/t/how-to-control-maximum-number-of-client-connections-to-es-instance/21048 "2017-02-03T18:44:33Z")

</div>

Hi: Is there a configuration variable that I could set on an ES instance that can control the maximum number of client connections ? What is the default limit on the max. connections ? and how can I change it ? …

---

## [Thanks to the Community - I have now upgraded to 5.4.1](https://discuss.elastic.co/t/thanks-to-the-community-i-have-now-upgraded-to-5-4-1/89981)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 0\
**Last updated:** [June 19, 2017, 6:06pm UTC](https://discuss.elastic.co/t/thanks-to-the-community-i-have-now-upgraded-to-5-4-1/89981 "2017-06-19T18:06:53Z")

</div>

Hey Folks, Just wanted to say, thanks to everyone in helping me get though the upgrade from 2.4 -\> 5.4.1 It was difficult trying to figuring out all the little details and changes that 5.X introduced but you all helpe…

---

## [\[ERROR\]\[logstash.config.sourceloader\] No configuration found in the configured sources](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/244230)

<div class="topic-metadata">

**Author:** [@Umang\_Mahant](https://discuss.elastic.co/u/Umang_Mahant)\
**Replies:** 2\
**Last updated:** [August 7, 2020, 10:17pm UTC](https://discuss.elastic.co/t/error-logstash-config-sourceloader-no-configuration-found-in-the-configured-sources/244230 "2020-08-07T22:17:31Z")

</div>

Hi Masters, Please help me with this small query. Trying to load excel (Csv) to Kibana from logstash. I have not changed/ created any YML . geting the below error - Z:\\\>logstash -f logstash\_tc.conf --debug …

---

## [Logstash to Splunk HTTP Event Collector](https://discuss.elastic.co/t/logstash-to-splunk-http-event-collector/130765)

<div class="topic-metadata">

**Author:** [@sm00thindian](https://discuss.elastic.co/u/sm00thindian)\
**Replies:** 3\
**Last updated:** [May 9, 2018, 4:13pm UTC](https://discuss.elastic.co/t/logstash-to-splunk-http-event-collector/130765 "2018-05-09T16:13:13Z")

</div>

I'm trying to use logstash to send data directly to an http event collector (HEC). The HEC collector accepts the following correctly. But I'm trying to translate the to the appropriate HTTP Output config for logstash. …

---

## [Network.host: 0.0.0.0 is not working in elasticsearch 7.3.0](https://discuss.elastic.co/t/network-host-0-0-0-0-is-not-working-in-elasticsearch-7-3-0/195697)

<div class="topic-metadata">

**Author:** [@mostafa\_kamal](https://discuss.elastic.co/u/mostafa_kamal)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 9:28am UTC](https://discuss.elastic.co/t/network-host-0-0-0-0-is-not-working-in-elasticsearch-7-3-0/195697 "2019-08-19T09:28:29Z")

</div>

Hi there, I am using two elasticsearch in two separate servers. one is 6.8.0 and other is 7.3.0. I am planning to use metricbeat on several servers and visualize in elasticsearch server by kibana. The problem is: when…

---

## [Special Characters in logs - how to escape them in logstash grok pattern](https://discuss.elastic.co/t/special-characters-in-logs-how-to-escape-them-in-logstash-grok-pattern/27023)

<div class="topic-metadata">

**Author:** [@shovik](https://discuss.elastic.co/u/shovik)\
**Replies:** 3\
**Last updated:** [August 7, 2015, 7:07am UTC](https://discuss.elastic.co/t/special-characters-in-logs-how-to-escape-them-in-logstash-grok-pattern/27023 "2015-08-07T07:07:46Z")

</div>

Hi, I am trying to analyse a log in logstash, here is one line from the log.. 11.111.111.111 - - \[13/Feb/2015:06:59:59 -0500\] "POST /myrequestURI HTTP/1.1" 200 780 the grok expression that i have written is: %{IP…

---

## [Tags vs Fields](https://discuss.elastic.co/t/tags-vs-fields/24014)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 3\
**Last updated:** [June 22, 2015, 2:17pm UTC](https://discuss.elastic.co/t/tags-vs-fields/24014 "2015-06-22T14:17:46Z")

</div>

Here is a simple question yet I do not know the difference: what is the difference between a tag and a field?

---

## [How can I make visualization with GROUP BY](https://discuss.elastic.co/t/how-can-i-make-visualization-with-group-by/43569)

<div class="topic-metadata">

**Author:** [@sunChoi](https://discuss.elastic.co/u/sunChoi)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 5:20am UTC](https://discuss.elastic.co/t/how-can-i-make-visualization-with-group-by/43569 "2016-03-09T05:20:23Z")

</div>

I just want to exactly this query select a ,count(a) from table group by b ; just want to show a result that a, count a but distinct duplicate b. It can be bar or anything plz let me know how can i distinct c…

---

## [Elasticserach bootstrap fail if elasticsearch.keystore.tmp already exists](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087)

<div class="topic-metadata">

**Author:** [@gab.bernasconi](https://discuss.elastic.co/u/gab.bernasconi)\
**Replies:** 3\
**Last updated:** [June 23, 2020, 3:28pm UTC](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087 "2020-06-23T15:28:23Z")

</div>

Environment Elasticsearch version: 7.4.2 (docker) Problem Summary If Elasticsearch already finds the file /usr/share/elasticsearch/config/elasticsearch.keystore.tmp during bootstrap checks, it fails to start Steps t…

---

## [Indexing throttling in Elasticsearch](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch/101602)

<div class="topic-metadata">

**Author:** [@itasyurt](https://discuss.elastic.co/u/itasyurt)\
**Replies:** 3\
**Last updated:** [September 25, 2017, 11:51am UTC](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch/101602 "2017-09-25T11:51:40Z")

</div>

Hello all, We have number of periodic indexing tasks that perform bulk indexing of a few(let's say 10) million documents daily partitioned into pages of size 5K ( we have 200 tasks each having a page of 5K documents). …

---

## [Elasticserach6.1.1 restart and i got "all shards failed"](https://discuss.elastic.co/t/elasticserach6-1-1-restart-and-i-got-all-shards-failed/117155)

<div class="topic-metadata">

**Author:** [@foolcage](https://discuss.elastic.co/u/foolcage)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 10:31am UTC](https://discuss.elastic.co/t/elasticserach6-1-1-restart-and-i-got-all-shards-failed/117155 "2018-01-26T10:31:12Z")

</div>

➜ ~ curl -XGET 'localhost:9200/\_cluster/health/balance\_sheet?pretty' { "cluster\_name" : "elasticsearch", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 1, "numb…

---

## [Kafka Connect sink - ElasticSearch interface via SSL](https://discuss.elastic.co/t/kafka-connect-sink-elasticsearch-interface-via-ssl/168839)

<div class="topic-metadata">

**Author:** [@mihai2018](https://discuss.elastic.co/u/mihai2018)\
**Replies:** 7\
**Last updated:** [February 25, 2019, 8:32am UTC](https://discuss.elastic.co/t/kafka-connect-sink-elasticsearch-interface-via-ssl/168839 "2019-02-25T08:32:49Z")

</div>

Hi guys. One of our UCs asks for outputting data out of Kafka Connector sink to Elastic Search (Logstash is bypassed). Now Elastic 6.6 needs SSL to be enabled (which is ok as it should be there for other security consi…

---

## [New Kibana Installation Lacking 'default index pattern'](https://discuss.elastic.co/t/new-kibana-installation-lacking-default-index-pattern/78003)

<div class="topic-metadata">

**Author:** [@marcjbaker](https://discuss.elastic.co/u/marcjbaker)\
**Replies:** 8\
**Last updated:** [March 22, 2017, 12:14pm UTC](https://discuss.elastic.co/t/new-kibana-installation-lacking-default-index-pattern/78003 "2017-03-22T12:14:44Z")

</div>

We have just finished installing Kibana using instructions provided on Wazuh HIDS. Kibana is generating an error that "No default index pattern" exists. I have searched the documents and found numerous scripts but no ins…

---

## [Custom Index Name - Logstash](https://discuss.elastic.co/t/custom-index-name-logstash/44222)

<div class="topic-metadata">

**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\
**Replies:** 7\
**Last updated:** [December 18, 2016, 1:48pm UTC](https://discuss.elastic.co/t/custom-index-name-logstash/44222 "2016-12-18T13:48:47Z")

</div>

Hello! I see that logstash is creating a new index on the Elasticsearch server everyday with the name 'logstash-yyyy.mm.dd' However, I don't want a new file like this everyday and just want to give a custom name for…

---

## [Why is there a default boost of 2.2?](https://discuss.elastic.co/t/why-is-there-a-default-boost-of-2-2/183174)

<div class="topic-metadata">

**Author:** [@slumx](https://discuss.elastic.co/u/slumx)\
**Replies:** 1\
**Last updated:** [May 29, 2019, 9:27am UTC](https://discuss.elastic.co/t/why-is-there-a-default-boost-of-2-2/183174 "2019-05-29T09:27:57Z")

</div>

In Elasticsearch 7.1 when no boost is added (index or query) the explanation still says there is a boost of 2.2. Steps to reproduce: follow the steps described here https://www.elastic.co/guide/en/elasticsearch/refer…

---

## [Response for preflight is invalid (redirect) with AngularJS and ElasticSearch](https://discuss.elastic.co/t/response-for-preflight-is-invalid-redirect-with-angularjs-and-elasticsearch/88092)

<div class="topic-metadata">

**Author:** [@cailin](https://discuss.elastic.co/u/cailin)\
**Replies:** 1\
**Last updated:** [June 7, 2017, 3:34pm UTC](https://discuss.elastic.co/t/response-for-preflight-is-invalid-redirect-with-angularjs-and-elasticsearch/88092 "2017-06-07T15:34:22Z")

</div>

I'm working on an Angular 1.6.3 app which uses the elasticsearch.js library to query an ElasticSearch 5.4 instance running on a remote server. Recently, our app started having problems where it receives several Response …

---

## [Search\_after vs deep pagination](https://discuss.elastic.co/t/search-after-vs-deep-pagination/86738)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 4\
**Last updated:** [May 23, 2017, 3:00pm UTC](https://discuss.elastic.co/t/search-after-vs-deep-pagination/86738 "2017-05-23T15:00:40Z")

</div>

Documentation suggests that search\_after is suggested compared to deep pagination, but doesn't seem to explain why. Or at least I didn't understand the details. Could someone explain why we should use search\_after vs …

---

## [Failed to parse date field yyyy/MM/dd HH:mm:ss \[SOLVED\]](https://discuss.elastic.co/t/failed-to-parse-date-field-yyyy-mm-dd-hh-mm-ss-solved/64836)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 8\
**Last updated:** [May 4, 2017, 2:06pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field-yyyy-mm-dd-hh-mm-ss-solved/64836 "2017-05-04T14:06:53Z")

</div>

Hi, I'm trying to make a date filter for my servers. And i have an error. Here is the configuration of the shipper : input { file { path =\> \["/var/log/squid/cache.log"\] type =\> …

---

## [Output IF ELSE configuration error](https://discuss.elastic.co/t/output-if-else-configuration-error/39869)

<div class="topic-metadata">

**Author:** [@logstaszek](https://discuss.elastic.co/u/logstaszek)\
**Replies:** 7\
**Last updated:** [January 25, 2016, 9:37am UTC](https://discuss.elastic.co/t/output-if-else-configuration-error/39869 "2016-01-25T09:37:55Z")

</div>

So, this is my output configuration: output { if \[field\] == "ABC" and \[OK\] == "Yes" { elasticsearch { hosts =\> "localhost:9200" user =\> "xxx" password =\> "xxx" index =\> "abc" } } else if \[field\] == "DEF" a…

---

## [Line chart with a filter per y-axis metric?](https://discuss.elastic.co/t/line-chart-with-a-filter-per-y-axis-metric/123169)

<div class="topic-metadata">

**Author:** [@daviderickson](https://discuss.elastic.co/u/daviderickson)\
**Replies:** 1\
**Last updated:** [March 9, 2018, 9:15pm UTC](https://discuss.elastic.co/t/line-chart-with-a-filter-per-y-axis-metric/123169 "2018-03-09T21:15:40Z")

</div>

Hi I want to have multiple y-axis lines on a line chart, and am using the unique count aggregation for the same field on each line, but want to differentiate them by a filter on a different field. Is this possible? The…

---

## [ERROR: Elasticsearch exited unexpectedly, with exit code 137](https://discuss.elastic.co/t/error-elasticsearch-exited-unexpectedly-with-exit-code-137/361047)

<div class="topic-metadata">

**Author:** [@optimuspur3](https://discuss.elastic.co/u/optimuspur3)\
**Replies:** 2\
**Last updated:** [June 10, 2024, 9:27pm UTC](https://discuss.elastic.co/t/error-elasticsearch-exited-unexpectedly-with-exit-code-137/361047 "2024-06-10T21:27:25Z")

</div>

I have been using this guide to setup an ELK. Current version of Ubuntu: 20.04 Elasticsearch version: 8.1 Hiding my IP address but when I start up Logstash after finishing configuring Logstash configuration, Elastics…

---

## [Conditional, check multiple values for a field](https://discuss.elastic.co/t/conditional-check-multiple-values-for-a-field/108131)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 3\
**Last updated:** [November 17, 2017, 4:35pm UTC](https://discuss.elastic.co/t/conditional-check-multiple-values-for-a-field/108131 "2017-11-17T16:35:06Z")

</div>

Hello, I have a pipeline on logstash where I receive messages from network devices (firewalls), parse the message using grok patterns and store them in elasticsearch. I have three different models which I parse some ki…

---

## [Nginx reverse proxy setup for Kibana](https://discuss.elastic.co/t/nginx-reverse-proxy-setup-for-kibana/167327)

<div class="topic-metadata">

**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\
**Replies:** 8\
**Last updated:** [January 28, 2020, 3:35pm UTC](https://discuss.elastic.co/t/nginx-reverse-proxy-setup-for-kibana/167327 "2020-01-28T15:35:28Z")

</div>

Hi, I'm very new to nginx and have a hard time setting up nginx with kibana. I want to setup two groups, "viewer" and "admin". They will be authenticated using Gmail through oauth2\_proxy and then access Kibana. I want t…

---

## [Found encoding issue with Filebeat MS SQL module](https://discuss.elastic.co/t/found-encoding-issue-with-filebeat-ms-sql-module/242336)

<div class="topic-metadata">

**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\
**Replies:** 0\
**Last updated:** [July 23, 2020, 11:39am UTC](https://discuss.elastic.co/t/found-encoding-issue-with-filebeat-ms-sql-module/242336 "2020-07-23T11:39:25Z")

</div>

Filebeat MS SQL module has a encoding issue ERRORLOG files in SQL folder is a utf-16le-bom encoded files but that is not specified in the config.yml file of the filebeat mssql module folder please add encoding: utf…

---

## [Trying to understand 'timed out when collecting data'](https://discuss.elastic.co/t/trying-to-understand-timed-out-when-collecting-data/113979)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 8\
**Last updated:** [April 4, 2018, 9:19pm UTC](https://discuss.elastic.co/t/trying-to-understand-timed-out-when-collecting-data/113979 "2018-04-04T21:19:08Z")

</div>

Hello, I'm trying to understand a strange behaviour that started recently. I'm getting messages like the following: \[2018-01-03T17:26:35,615\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[node-name\] collector \[cluster\_st…

---

## [\[SOLVED\]How to remove agent.\* and ecs.version?](https://discuss.elastic.co/t/solved-how-to-remove-agent-and-ecs-version/183643)

<div class="topic-metadata">

**Author:** [@Duked](https://discuss.elastic.co/u/Duked)\
**Replies:** 7\
**Last updated:** [June 5, 2019, 12:51am UTC](https://discuss.elastic.co/t/solved-how-to-remove-agent-and-ecs-version/183643 "2019-06-05T00:51:05Z")

</div>

Hi, I've tried disabling all the processor metadata and somehow narrowed it down but I still can't get rid of agent.ephemeral\_id, agent.hostname, agent.id, agent.type, agent.version and ecs.version and log.offset. Is …

---

## [Invalid format: "2014-05-27T00:00:00.000Z" is malformed at "T00:00:00.000Z"](https://discuss.elastic.co/t/invalid-format-2014-05-27t00-00-00-000z-is-malformed-at-t00-00-00-000z/43070)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 3\
**Last updated:** [March 2, 2016, 2:04pm UTC](https://discuss.elastic.co/t/invalid-format-2014-05-27t00-00-00-000z-is-malformed-at-t00-00-00-000z/43070 "2016-03-02T14:04:30Z")

</div>

The following exception i am gettting with the below code snippet.The time which i have based is date object.but the milliseconds added default in the query.how can i overridden by java API.I am using 2.1 elasticsearch …

---

## [Garbage collection log messages, \[monitor.jvm ... duration \[2.2m\]](https://discuss.elastic.co/t/garbage-collection-log-messages-monitor-jvm-duration-2-2m/15673)

<div class="topic-metadata">

**Author:** [@Wouter\_van\_Atteveldt](https://discuss.elastic.co/u/Wouter_van_Atteveldt)\
**Replies:** 7\
**Last updated:** [April 15, 2014, 8:11pm UTC](https://discuss.elastic.co/t/garbage-collection-log-messages-monitor-jvm-duration-2-2m/15673 "2014-04-15T20:11:22Z")

</div>

I am using elasticsearch to index and query a fairly large document collection. Most of the data is in a single property "text" of a doctype "article". The index is sometimes slow, and my log has many messages about …

---

## [Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update](https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [June 30, 2022, 8:32pm UTC](https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613 "2022-06-30T20:32:13Z")

</div>

Kibana cross-site-scripting (XSS) issue (ESA-2022-08) A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s br…

---

## [Bulk insert file having many json entries into Elasticsearch](https://discuss.elastic.co/t/bulk-insert-file-having-many-json-entries-into-elasticsearch/46470)

<div class="topic-metadata">

**Author:** [@Astro-es](https://discuss.elastic.co/u/Astro-es)\
**Replies:** 3\
**Last updated:** [April 6, 2016, 6:49am UTC](https://discuss.elastic.co/t/bulk-insert-file-having-many-json-entries-into-elasticsearch/46470 "2016-04-06T06:49:31Z")

</div>

Hi, I just wanted to bulk insert into Elasticsearch. I have a file that has many json entries and looks like: {"level":"debug","message":"POST : /info","timestamp":"2016-03-31T08:54:52.236Z"} {"level":"debug","messag…

[Previous page](https://discuss.elastic.co/top.md?page=264&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=266&per_page=50&period=all)
