# Top **URL:** https://discuss.elastic.co/top.md?page=287&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 288 --- ## [Update errors to version 8.3.1](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808)
**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 3:41pm UTC](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808 "2022-07-05T15:41:57Z")
Hello, I would like to specify that I am French and that my English is not my best. Following the security alert : I have just tried to update from 8.2.0 to 8.3.1 by following the instructions: Since then, I have t… --- ## [Table aggregation by date](https://discuss.elastic.co/t/table-aggregation-by-date/42019)
**Author:** [@arthur-y](https://discuss.elastic.co/u/arthur-y)\ **Replies:** 6\ **Last updated:** [February 19, 2016, 8:56am UTC](https://discuss.elastic.co/t/table-aggregation-by-date/42019 "2016-02-19T08:56:54Z")
Greetings all, a noob question maybe, but haven't found a solution on Github or forum. Simillar question was asked here, but related to graphs- Use case: I want to build a visualization (table) that will include websi… --- ## [Maps kibana with geo point](https://discuss.elastic.co/t/maps-kibana-with-geo-point/273862)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 7\ **Last updated:** [May 25, 2021, 11:08am UTC](https://discuss.elastic.co/t/maps-kibana-with-geo-point/273862 "2021-05-25T11:08:49Z")
Hello, what is the fastest way to insert geographic data on a Maps in Kibana (elastic cloud)? I need to show a map with very specific points, maybe even with a custom icon and a label. Thank you --- ## [Split string in scripted fields, using \_ as a delimiter](https://discuss.elastic.co/t/split-string-in-scripted-fields-using-as-a-delimiter/253803)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 6\ **Last updated:** [November 16, 2020, 4:25pm UTC](https://discuss.elastic.co/t/split-string-in-scripted-fields-using-as-a-delimiter/253803 "2020-11-16T16:25:03Z")
I have a string field "myfield.keyword", where each entry has the following format: AAA\_BBBB\_CC DDD\_EEE\_F I am trying to create a scripted field that outputs the substring before the first \_, a scripted field that out… --- ## [Help me to convert hexa in decimal value](https://discuss.elastic.co/t/help-me-to-convert-hexa-in-decimal-value/77625)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 2\ **Last updated:** [March 13, 2017, 2:31pm UTC](https://discuss.elastic.co/t/help-me-to-convert-hexa-in-decimal-value/77625 "2017-03-13T14:31:49Z")
Hello, i search to convert hexa value in decimal value for performing. I have found a ruby code in disucss but it's seems to be fail. I use it to upload logs : mutate { convert =\> { "hexa\_value" =\> "integer" } … --- ## [Kibana running on 0.0.0.0 but other computer not able to access it](https://discuss.elastic.co/t/kibana-running-on-0-0-0-0-but-other-computer-not-able-to-access-it/208600)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 7\ **Last updated:** [December 16, 2019, 7:27pm UTC](https://discuss.elastic.co/t/kibana-running-on-0-0-0-0-but-other-computer-not-able-to-access-it/208600 "2019-12-16T19:27:55Z")
Here is the kibana.yml. I can access kibana from my ip address, but when I gave my ip address to another user to access kibana, it wont let them access # Kibana is served by a back end server. This setting specifies the… --- ## [ERROR StatusLogger No log4j2 configuration file found](https://discuss.elastic.co/t/error-statuslogger-no-log4j2-configuration-file-found/73208)
**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\ **Replies:** 2\ **Last updated:** [January 30, 2017, 12:59pm UTC](https://discuss.elastic.co/t/error-statuslogger-no-log4j2-configuration-file-found/73208 "2017-01-30T12:59:26Z")
when i run a small java client to insert some data i get this error "ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. " I read questions here an… --- ## [Deleting @Version and @Timestamp fields in Logstash 2.2.2](https://discuss.elastic.co/t/deleting-version-and-timestamp-fields-in-logstash-2-2-2/169475)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 9:39pm UTC](https://discuss.elastic.co/t/deleting-version-and-timestamp-fields-in-logstash-2-2-2/169475 "2019-02-21T21:39:42Z")
Hello, I am using Logstash pipeline to re-index ES 2.1.2 index from cluster A to cluster B. New index is created, but logstash adds it's own @version and @timestamp to records. Is there a way to delete these 2 fields vi… --- ## [JSON File Input](https://discuss.elastic.co/t/json-file-input/100916)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 6\ **Last updated:** [September 29, 2017, 1:33pm UTC](https://discuss.elastic.co/t/json-file-input/100916 "2017-09-29T13:33:43Z")
Hi, I am just trying to take in a JSON file and spit it out to the stdout. The pipeline starts and nothing happens after that. There are no error messages and no other movements. I have the following in my configuration… --- ## [Es 5.1.1 \[match\_all\] query malformed, no start\_object after query name](https://discuss.elastic.co/t/es-5-1-1-match-all-query-malformed-no-start-object-after-query-name/68827)
**Author:** [@lorcom](https://discuss.elastic.co/u/lorcom)\ **Replies:** 2\ **Last updated:** [December 13, 2016, 9:32am UTC](https://discuss.elastic.co/t/es-5-1-1-match-all-query-malformed-no-start-object-after-query-name/68827 "2016-12-13T09:32:06Z")
Hi to everybody, I'm trying to convert a query, written for Elasticsearch 2, to Elasticsearch 5.1.1. Es 2 { "index": "wsx5\_answers", "type": "topics", "body": { "fields": \["title"\], "query"… --- ## [Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default/204813)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 4\ **Last updated:** [October 23, 2019, 8:58am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default/204813 "2019-10-23T08:58:41Z")
So consider the following: Fielddata is disabled on text fields by default. Set fielddata=true on \[your\_field\_name\] in order to load fielddata in memory by uninverting the inverted index. Note that this can however… --- ## [Index pattern does not contain any of the following field types: geo\_point](https://discuss.elastic.co/t/index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/85001)
**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 11:10am UTC](https://discuss.elastic.co/t/index-pattern-does-not-contain-any-of-the-following-field-types-geo-point/85001 "2017-05-09T11:10:30Z")
I've got geoip fields with filter geoip in logstash. But I can't visualize in kibana How can I fix this? Any help will be appreciated. --- ## [How can i copy or clone index from one ES server another ES server?](https://discuss.elastic.co/t/how-can-i-copy-or-clone-index-from-one-es-server-another-es-server/162766)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 2\ **Last updated:** [January 3, 2019, 10:44am UTC](https://discuss.elastic.co/t/how-can-i-copy-or-clone-index-from-one-es-server-another-es-server/162766 "2019-01-03T10:44:20Z")
I have one ES serve which has 1.5 billion data. Now i want copy all the data another ES server. is there any way to do that like export or data sending? --- ## [Logstash connection to elasticsearch](https://discuss.elastic.co/t/logstash-connection-to-elasticsearch/98768)
**Author:** [@rogerscuall](https://discuss.elastic.co/u/rogerscuall)\ **Replies:** 7\ **Last updated:** [August 31, 2017, 7:49pm UTC](https://discuss.elastic.co/t/logstash-connection-to-elasticsearch/98768 "2017-08-31T19:49:04Z")
I'm using the official docker containers for elasticsearch and logstash and following for the most part the configuration in this website, but I'm having problem with logstash connecting to elasticsearch. The output of l… --- ## [Updating a field in all documents of an Index](https://discuss.elastic.co/t/updating-a-field-in-all-documents-of-an-index/92544)
**Author:** [@g\_dev](https://discuss.elastic.co/u/g_dev)\ **Replies:** 2\ **Last updated:** [July 11, 2017, 1:59pm UTC](https://discuss.elastic.co/t/updating-a-field-in-all-documents-of-an-index/92544 "2017-07-11T13:59:29Z")
How can I update a field of all documents of an index with one CURL? --- ## [Search.max\_buckets limit error on 7.0.1](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-0-1/179989)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 8:39pm UTC](https://discuss.elastic.co/t/search-max-buckets-limit-error-on-7-0-1/179989 "2019-05-10T20:39:34Z")
I have just upgraded to 7.0.1 now I get this error. how do I change this value? "Trying to create too many buckets. Must be less than or equal to: \[10000\] but was \[10001\]. This limit can be set by changing the \[search… --- ## [Logstash ERROR: EADDRINUSE: Address already in use](https://discuss.elastic.co/t/logstash-error-eaddrinuse-address-already-in-use/112251)
**Author:** [@Bruno\_Dias](https://discuss.elastic.co/u/Bruno_Dias)\ **Replies:** 8\ **Last updated:** [December 20, 2017, 10:36am UTC](https://discuss.elastic.co/t/logstash-error-eaddrinuse-address-already-in-use/112251 "2017-12-20T10:36:29Z")
Hello, I'm trying to direct the pfsense logs to elasticsearch, all the tutorials I've found use the UDP port 5140, my pfsense can send the logs to that server on that port, but the logstash at startup shows the error bel… --- ## [error":"Content-Type header \[application/x-www-form-urlencoded\] is not supported","status":406](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/164059)
**Author:** [@shrwan](https://discuss.elastic.co/u/shrwan)\ **Replies:** 2\ **Last updated:** [January 14, 2019, 6:44am UTC](https://discuss.elastic.co/t/error-content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/164059 "2019-01-14T06:44:38Z")
Hi Friends, I am new to elastic search and looking for lep! I am trying to create mapping , buy using the same JSON at URL https://www.elastic.co/blog/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana … --- ## [Grok Filter Pattern with Comma](https://discuss.elastic.co/t/grok-filter-pattern-with-comma/52642)
**Author:** [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\ **Replies:** 7\ **Last updated:** [June 13, 2016, 8:13pm UTC](https://discuss.elastic.co/t/grok-filter-pattern-with-comma/52642 "2016-06-13T20:13:12Z")
Hello All, I need %{GREEDYDATA:Text1} till first comma Here is the input file data 02/06/2016 01:01:07,Text1Data,Text2Datap1,Text2Datap2,Text2Datap3,1046,547,error Grok Expression %{DATESTAMP:Time},%{GREEDYDATA:Tex… --- ## [Initial heap size \[199229440\] not equal to maximum heap size \[3187671040\]; this can cause resize pauses and prevents mlockall from locking the entire heap](https://discuss.elastic.co/t/initial-heap-size-199229440-not-equal-to-maximum-heap-size-3187671040-this-can-cause-resize-pauses-and-prevents-mlockall-from-locking-the-entire-heap/142282)
**Author:** [@Imrankhan](https://discuss.elastic.co/u/Imrankhan)\ **Replies:** 8\ **Last updated:** [August 3, 2018, 11:22am UTC](https://discuss.elastic.co/t/initial-heap-size-199229440-not-equal-to-maximum-heap-size-3187671040-this-can-cause-resize-pauses-and-prevents-mlockall-from-locking-the-entire-heap/142282 "2018-08-03T11:22:26Z")
I have installed elasticsearch 6.1.3 and below is the log while starting the server. (i have set -Xms2g -Xmx2g in jvm.options file) but still facing "initial heap size \[199229440\] not equal to maximum heap size \[3187671… --- ## [Monitoring/Alerting a windows service by Elastic Agent and Fleet](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:26pm UTC](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275 "2022-05-11T14:26:31Z")
This topic will be regarding the post I made few days ago on monitoring a windows service, this time in the Elastic Cloud. Not really a problem but a new solution I found while exploring the things arround Elastic-Agent … --- ## [Displaying percentages in Vertical Bar chart with Group mode](https://discuss.elastic.co/t/displaying-percentages-in-vertical-bar-chart-with-group-mode/26815)
**Author:** [@inderjeet26](https://discuss.elastic.co/u/inderjeet26)\ **Replies:** 2\ **Last updated:** [August 5, 2015, 6:24am UTC](https://discuss.elastic.co/t/displaying-percentages-in-vertical-bar-chart-with-group-mode/26815 "2015-08-05T06:24:59Z")
Hello, I want to show the percentages and counts for the Vertical Bar chart with group mode. The counts are coming fine but not the percentages. The percentages can be shown if I am able to divide the individual buckets… --- ## [An unexpected authentication error occurred. Please log in again.](https://discuss.elastic.co/t/an-unexpected-authentication-error-occurred-please-log-in-again/377678)
**Author:** [@GiorgioS13](https://discuss.elastic.co/u/GiorgioS13)\ **Replies:** 8\ **Last updated:** [May 9, 2025, 6:21pm UTC](https://discuss.elastic.co/t/an-unexpected-authentication-error-occurred-please-log-in-again/377678 "2025-05-09T18:21:30Z")
Hello, Yesterday we upgraded from version 8.18 to 9.0 without any issues, and I didn’t change any configurations. However, today I’m receiving this error when trying to perform actions in Kibana. Does anyone have an i… --- ## [Filebeat redis output doesn't support redis cluster mode](https://discuss.elastic.co/t/filebeat-redis-output-doesnt-support-redis-cluster-mode/93108)
**Author:** [@cjuroz](https://discuss.elastic.co/u/cjuroz)\ **Replies:** 0\ **Last updated:** [July 14, 2017, 3:50am UTC](https://discuss.elastic.co/t/filebeat-redis-output-doesnt-support-redis-cluster-mode/93108 "2017-07-14T03:50:00Z")
I am using filebeat 5.4.0 with redis output and I noticed filebeat doesn't support access to redis cluster configuration endpoint. I am using AWS redis cluster mode on (engine 3.2.4) and filebeat is not able to handle MO… --- ## [Add geoip on existing index](https://discuss.elastic.co/t/add-geoip-on-existing-index/93949)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 2\ **Last updated:** [July 20, 2017, 3:09pm UTC](https://discuss.elastic.co/t/add-geoip-on-existing-index/93949 "2017-07-20T15:09:34Z")
Hey, I have an existing index that contains a "Request" type with namely an attribute with the IP of the user. That index holds several millions of documents. I'd like to use Kibana to get some stats about the traffic… --- ## [X509: cannot validate certificate for 192.168.129.33 because it doesn't contain any IP SANs](https://discuss.elastic.co/t/x509-cannot-validate-certificate-for-192-168-129-33-because-it-doesnt-contain-any-ip-sans/98435)
**Author:** [@igormarqs](https://discuss.elastic.co/u/igormarqs)\ **Replies:** 2\ **Last updated:** [September 1, 2017, 8:42am UTC](https://discuss.elastic.co/t/x509-cannot-validate-certificate-for-192-168-129-33-because-it-doesnt-contain-any-ip-sans/98435 "2017-09-01T08:42:53Z")
i'm try to start setup ssl btw filebeat and logstash. generate cert.pem and key.pem with: openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout logstashK.pem -out logstashC.pem && openssl req -x509 -nodes -days 3… --- ## [Node id/name](https://discuss.elastic.co/t/node-id-name/4599)
**Author:** [@Mustafa\_Sener](https://discuss.elastic.co/u/Mustafa_Sener)\ **Replies:** 6\ **Last updated:** [June 23, 2011, 10:19am UTC](https://discuss.elastic.co/t/node-id-name/4599 "2011-06-23T10:19:18Z")
Hi, Currently node id and name change at each restart. Is it possible to store them (at least id) and reuse that node id? We are planning to monitor ES cluster, nodes, indices and etc. However, since node id change ev… --- ## [Error while using Java High Level Rest Client](https://discuss.elastic.co/t/error-while-using-java-high-level-rest-client/124436)
**Author:** [@navneet35](https://discuss.elastic.co/u/navneet35)\ **Replies:** 7\ **Last updated:** [March 20, 2018, 6:15pm UTC](https://discuss.elastic.co/t/error-while-using-java-high-level-rest-client/124436 "2018-03-20T18:15:16Z")
Hi, I am trying to develop a spring boot based elasticsearch project and I am trying to use Java High Level Rest Client in the same. I am initializing the client like this: RestHighLevelClient client = new RestHighLe… --- ## [Logstash to Elasticsearch over SSL Configuration](https://discuss.elastic.co/t/logstash-to-elasticsearch-over-ssl-configuration/103950)
**Author:** [@cm47](https://discuss.elastic.co/u/cm47)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 9:49pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-over-ssl-configuration/103950 "2017-10-19T21:49:43Z")
Hi, I am trying to achieve what is described in the title. I believe I have taken all steps for proper configuration but am receiving an error that seems like a connection is not being initiated through https. Logstash … --- ## [How to downgrade ES from 6.2 to 6.1.3](https://discuss.elastic.co/t/how-to-downgrade-es-from-6-2-to-6-1-3/118904)
**Author:** [@nines](https://discuss.elastic.co/u/nines)\ **Replies:** 5\ **Last updated:** [February 8, 2018, 5:24pm UTC](https://discuss.elastic.co/t/how-to-downgrade-es-from-6-2-to-6-1-3/118904 "2018-02-08T17:24:23Z")
Hi there, first of all thank you very much for your great support @jasontedor. As mentioned here: https://github.com/elastic/elasticsearch/issues/28538 I'm creating an explicit thread asking how to downgrade ES on a de… --- ## [Try to build a Visualization and Dashboard for displaying LOG](https://discuss.elastic.co/t/try-to-build-a-visualization-and-dashboard-for-displaying-log/101347)
**Author:** [@Pierre31](https://discuss.elastic.co/u/Pierre31)\ **Replies:** 5\ **Last updated:** [September 22, 2017, 7:14am UTC](https://discuss.elastic.co/t/try-to-build-a-visualization-and-dashboard-for-displaying-log/101347 "2017-09-22T07:14:01Z")
Hello; I have installed Elasticsearch and kibana 5.2 (on a RH 7.3). Then I use the rsyslog plugin OMELASTICSEARCH to display log files. In the first window "DISCOVER" of KIBANA, content of log files are correctly disp… --- ## [Elasticsearch 2.3.3 released](https://discuss.elastic.co/t/elasticsearch-2-3-3-released/50362)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 0\ **Last updated:** [May 18, 2016, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-3-released/50362 "2016-05-18T16:13:14Z")
Today we are pleased to announce the bug fix release of Elasticsearch 2.3.3 based on Lucene 5.5.0. All users of 2.3.x are advised to upgrade. This release is already available on Elastic Cloud, our Elasticsearch-as-a-ser… --- ## [If/Else not working as expected in filter](https://discuss.elastic.co/t/if-else-not-working-as-expected-in-filter/128173)
**Author:** [@va1entin](https://discuss.elastic.co/u/va1entin)\ **Replies:** 2\ **Last updated:** [April 16, 2018, 11:35am UTC](https://discuss.elastic.co/t/if-else-not-working-as-expected-in-filter/128173 "2018-04-16T11:35:19Z")
Hey folks, I am a bit confused regarding use of if else constructs in logstash. I have the following config: filter { if "apache\_access" in \[tags\] { grok { match =\> { "message" =\> "%{HTTPD\_COMMONLOG}" } … --- ## [Scripted filter on nested field](https://discuss.elastic.co/t/scripted-filter-on-nested-field/27162)
**Author:** [@kresimirus](https://discuss.elastic.co/u/kresimirus)\ **Replies:** 4\ **Last updated:** [August 14, 2015, 2:48pm UTC](https://discuss.elastic.co/t/scripted-filter-on-nested-field/27162 "2015-08-14T14:48:43Z")
I have to filter documents based on scripted value of nested element. My data structure looks like this: { "product-group-name" : "group1" "products": \[ { "name" : "product1" "price" : 10 },{ "name" : … --- ## [Remove \\n and \\t from message](https://discuss.elastic.co/t/remove-n-and-t-from-message/142620)
**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\ **Replies:** 5\ **Last updated:** [August 1, 2018, 6:21pm UTC](https://discuss.elastic.co/t/remove-n-and-t-from-message/142620 "2018-08-01T18:21:47Z")
Hi, I am trying to ingest Java exceptions into Elasticsearch via logstash. In Kibana, they show up like this, \\n\\tat org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)\\n\\tat org.apache.coyote… --- ## [Multiple Filebeat inputs with logstash output](https://discuss.elastic.co/t/multiple-filebeat-inputs-with-logstash-output/146343)
**Author:** [@ramesh87](https://discuss.elastic.co/u/ramesh87)\ **Replies:** 3\ **Last updated:** [August 28, 2018, 7:35pm UTC](https://discuss.elastic.co/t/multiple-filebeat-inputs-with-logstash-output/146343 "2018-08-28T19:35:07Z")
HI , i am using filebeat 6.3 with the below configuration , however multiple inputs in the file beat configuration with one logstash output is not working. Filebeat configuration : filebeat.inputs: # Each - is an inp… --- ## [Can't send Email from Watcher in Elastic Cloud](https://discuss.elastic.co/t/cant-send-email-from-watcher-in-elastic-cloud/148361)
**Author:** [@nick.fisher](https://discuss.elastic.co/u/nick.fisher)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 2:30pm UTC](https://discuss.elastic.co/t/cant-send-email-from-watcher-in-elastic-cloud/148361 "2018-09-14T14:30:45Z")
I have a simple watcher setup in Elastic Cloud, with a deployment using version 5.6.10. I've tested it with other notification actions (logging and Slack) and they work fine, however I keep getting an error from the Ema… --- ## [How to change the field type of data loaded in Kibana](https://discuss.elastic.co/t/how-to-change-the-field-type-of-data-loaded-in-kibana/136909)
**Author:** [@kibana\_novice](https://discuss.elastic.co/u/kibana_novice)\ **Replies:** 2\ **Last updated:** [June 22, 2018, 6:22pm UTC](https://discuss.elastic.co/t/how-to-change-the-field-type-of-data-loaded-in-kibana/136909 "2018-06-22T18:22:22Z")
Hello everyone! I am working on creating a real-time timeline for my company, I am using kibana for this purpose. Process so far Installed kibana and elastic search Exported log data from AWS and stored it in json fo… --- ## [Sending JSON file to Elasticsearch via Logstash HTTP input plugin and Docker](https://discuss.elastic.co/t/sending-json-file-to-elasticsearch-via-logstash-http-input-plugin-and-docker/97967)
**Author:** [@patchong](https://discuss.elastic.co/u/patchong)\ **Replies:** 4\ **Last updated:** [August 25, 2017, 8:52pm UTC](https://discuss.elastic.co/t/sending-json-file-to-elasticsearch-via-logstash-http-input-plugin-and-docker/97967 "2017-08-25T20:52:16Z")
I have a JSON file I want to send to Elasticseaerch via Logstash’s Http input plugin. I also have Docker installed. I'm just confused as to why I can't see the data I see the data I've sent in Kibana/Elasticsearch This… --- ## [\[Solved\] Logstash high CPU and unresponsive](https://discuss.elastic.co/t/solved-logstash-high-cpu-and-unresponsive/51254)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 8\ **Last updated:** [August 19, 2016, 11:47am UTC](https://discuss.elastic.co/t/solved-logstash-high-cpu-and-unresponsive/51254 "2016-08-19T11:47:47Z")
Hi, My platform looks like this: Varnishlog -\> filebeat -\> redis -\> logstash -\> ES logstash (2.3.2) are running on 3 different hw nodes, and ES (cluster) as well. After running for a few minutes (with a clean … --- ## [Is elasticsearch Querying on a field value case sensitive?](https://discuss.elastic.co/t/is-elasticsearch-querying-on-a-field-value-case-sensitive/74005)
**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\ **Replies:** 3\ **Last updated:** [February 17, 2017, 4:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-querying-on-a-field-value-case-sensitive/74005 "2017-02-17T04:20:40Z")
Hi, I could see some surprising behavior from elastic search , please see below. For one index, its returning different count with different casing. For one index, it is same. Is there some setting at index level fo… --- ## [Kibana still showing indices which have been deleted](https://discuss.elastic.co/t/kibana-still-showing-indices-which-have-been-deleted/72101)
**Author:** [@zacesa](https://discuss.elastic.co/u/zacesa)\ **Replies:** 2\ **Last updated:** [January 19, 2017, 5:46am UTC](https://discuss.elastic.co/t/kibana-still-showing-indices-which-have-been-deleted/72101 "2017-01-19T05:46:21Z")
I deleted some indices and when I do curl 'localhost:9200/\_cat/indices?v', the indices are not showing but, in the Kibana Management Dashboard, it's still showing the indexes. See below for screenshots. I have alrea… --- ## [\*\*\* SOLVED \*\*\* Forbidden to create Index Pattern in Kibana 7.2](https://discuss.elastic.co/t/solved-forbidden-to-create-index-pattern-in-kibana-7-2/190947)
**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Replies:** 8\ **Last updated:** [July 28, 2019, 3:36pm UTC](https://discuss.elastic.co/t/solved-forbidden-to-create-index-pattern-in-kibana-7-2/190947 "2019-07-28T15:36:28Z")
Hi guys, is there any simple solution how to fix Forbidden Error while creating index pattern in Kibana? I am still getting this error when trying to create a new index pattern. Error: Forbidden \_construct@https:… --- ## [How to add time of ingestion to the document?](https://discuss.elastic.co/t/how-to-add-time-of-ingestion-to-the-document/243042)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 2\ **Last updated:** [July 30, 2020, 10:02am UTC](https://discuss.elastic.co/t/how-to-add-time-of-ingestion-to-the-document/243042 "2020-07-30T10:02:30Z")
Hi Elasticians, I've created pipeline pipeline\_add\_ingest\_timestamp. I would like to achieve add time of ingesting by elasticsearch to the document using this pipeline. What am I doing wrong? The field is not populate t… --- ## [\[ANNOUCEMENT\] Forest, an Elasticsearch GUI for text search released](https://discuss.elastic.co/t/annoucement-forest-an-elasticsearch-gui-for-text-search-released/289664)
**Author:** [@pnmougel](https://discuss.elastic.co/u/pnmougel)\ **Replies:** 0\ **Last updated:** [November 19, 2021, 7:59am UTC](https://discuss.elastic.co/t/annoucement-forest-an-elasticsearch-gui-for-text-search-released/289664 "2021-11-19T07:59:16Z")
Hello, I've just released a new GUI for Elasticsearch called Forest. It has similar functionalities compared to other Elasticsearch GUI (e.g., Cerebro, ElasticVue) except that it provides a powerful REST query editor wit… --- ## [Palo Alto \[SIEM\]](https://discuss.elastic.co/t/palo-alto-siem/237667)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 2:27pm UTC](https://discuss.elastic.co/t/palo-alto-siem/237667 "2020-06-19T14:27:47Z")
Hi, everyone I have tested with Palo Alto module (Filebeat 7.5.2). I have used this module with Syslog and File inputs. Syslog - module: panw panos: enabled: true var.syslog\_host: 0.0.0.0 var.syslog\_port… --- ## [Monitor Elasticsearch HTTP in Golang \[APM\]](https://discuss.elastic.co/t/monitor-elasticsearch-http-in-golang-apm/270716)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 4\ **Last updated:** [April 22, 2021, 6:55am UTC](https://discuss.elastic.co/t/monitor-elasticsearch-http-in-golang-apm/270716 "2021-04-22T06:55:04Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Golang 1.11.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Docker… --- ## [How to output Filebeat logs to multiple hosts without load balancing?](https://discuss.elastic.co/t/how-to-output-filebeat-logs-to-multiple-hosts-without-load-balancing/43444)
**Author:** [@acarrasquillo](https://discuss.elastic.co/u/acarrasquillo)\ **Replies:** 6\ **Last updated:** [March 4, 2016, 12:08am UTC](https://discuss.elastic.co/t/how-to-output-filebeat-logs-to-multiple-hosts-without-load-balancing/43444 "2016-03-04T00:08:08Z")
Hello. I'm trying to send all the logs to multiple hosts, each host should receive all the logs being read by Filebeat. Is there a way to do this without having one Filebeat Service per host with a specific configuration… --- ## [The shard cannot be allocated to the same node on which a copy of the shard already exists](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exists/233133)
**Author:** [@johnny12311](https://discuss.elastic.co/u/johnny12311)\ **Replies:** 2\ **Last updated:** [May 20, 2020, 11:12pm UTC](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exists/233133 "2020-05-20T23:12:32Z")
Suddenly the count operation on an index returned a few million less results than usual. Looking at application logs I see stacktraces when trying to add a new document. File "/myapp/MetaControl/MetaController.py"… --- ## [Grok date parsing trouble](https://discuss.elastic.co/t/grok-date-parsing-trouble/44385)
**Author:** [@RobertC](https://discuss.elastic.co/u/RobertC)\ **Replies:** 2\ **Last updated:** [March 15, 2016, 8:18pm UTC](https://discuss.elastic.co/t/grok-date-parsing-trouble/44385 "2016-03-15T20:18:44Z")
Hi Everyone, I'm trying to parse a tab separated access log and having some trouble with updating the @timestamp field in order to store the actual event time, using logstash 2.2. Here is a log sample: 2016-03-14 … [Previous page](https://discuss.elastic.co/top.md?page=286&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=288&per_page=50&period=all)