# Top **URL:** https://discuss.elastic.co/top.md?page=303&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 304 --- ## [How to properly escape special characters?](https://discuss.elastic.co/t/how-to-properly-escape-special-characters/6793)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 3\ **Last updated:** [February 25, 2012, 2:44pm UTC](https://discuss.elastic.co/t/how-to-properly-escape-special-characters/6793 "2012-02-25T14:44:17Z")
I'm using 0.18.7. How do I properly escape and search on special characters in a query\_string query? --- ## [How to apply multiple analyzers?](https://discuss.elastic.co/t/how-to-apply-multiple-analyzers/80111)
**Author:** [@AmazoneWebService](https://discuss.elastic.co/u/AmazoneWebService)\ **Replies:** 3\ **Last updated:** [March 29, 2017, 4:26am UTC](https://discuss.elastic.co/t/how-to-apply-multiple-analyzers/80111 "2017-03-29T04:26:20Z")
hi. Recently I want to create a global site. Therefore, it is necessary to apply various languages, but now only one language is applied. How do I apply languages from different countries? I am using a mecap-ko analyz… --- ## [Nginx Ingress and APM](https://discuss.elastic.co/t/nginx-ingress-and-apm/267082)
**Author:** [@PeterVertical](https://discuss.elastic.co/u/PeterVertical)\ **Replies:** 1\ **Last updated:** [March 12, 2021, 5:58pm UTC](https://discuss.elastic.co/t/nginx-ingress-and-apm/267082 "2021-03-12T17:58:34Z")
Hi Is there some information or tutorial about using the nginx ingress opentracing support with elastic apm? I can find tutorials for other apm solutions but not for elastic. Can anybody point me in the right directio… --- ## [Uninstall Filebeat on Ubuntu](https://discuss.elastic.co/t/uninstall-filebeat-on-ubuntu/263746)
**Author:** [@Liora](https://discuss.elastic.co/u/Liora)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 4:57pm UTC](https://discuss.elastic.co/t/uninstall-filebeat-on-ubuntu/263746 "2021-02-09T16:57:57Z")
Hi Team, please how can i uninstall Filebeat from my Ubuntu Server? Thank you for the reply --- ## [Error: EROFS: read-only file system, open optimize/.babelcache.json](https://discuss.elastic.co/t/error-erofs-read-only-file-system-open-optimize-babelcache-json/110830)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 7\ **Last updated:** [January 8, 2018, 5:05pm UTC](https://discuss.elastic.co/t/error-erofs-read-only-file-system-open-optimize-babelcache-json/110830 "2018-01-08T17:05:51Z")
I have Kibana 6.0.0 installed on a shared read-only file system and looks like kibana does not like this and refuses to start up due to the below error: fs.js:642 return binding.open(pathModule.\_makeLong(path), string… --- ## [Filebeat cannot find registry file (/var/lib/filebeat/registry/filebeat)](https://discuss.elastic.co/t/filebeat-cannot-find-registry-file-var-lib-filebeat-registry-filebeat/214997)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 6:36am UTC](https://discuss.elastic.co/t/filebeat-cannot-find-registry-file-var-lib-filebeat-registry-filebeat/214997 "2020-01-16T06:36:02Z")
Hi all, I am getting this error message when I run filebeat -e: Writing of registry returned error: rename /var/lib/filebeat/registry/filebeat/data.json.new /var/lib/filebeat/registry/filebeat/data.json: no such file o… --- ## [Arithmetic operations on count result](https://discuss.elastic.co/t/arithmetic-operations-on-count-result/51958)
**Author:** [@jeremyr](https://discuss.elastic.co/u/jeremyr)\ **Replies:** 5\ **Last updated:** [June 18, 2016, 5:05pm UTC](https://discuss.elastic.co/t/arithmetic-operations-on-count-result/51958 "2016-06-18T17:05:34Z")
Hi All, I'm new to kibana ( Kibana 4.5) and I would like to know, if there a way to apply a simple math operation on count result like multiplication or division. I tried to add a script\_fields on JSON input by follow… --- ## [Grok two words as one term](https://discuss.elastic.co/t/grok-two-words-as-one-term/109305)
**Author:** [@Xuzheng\_Lin](https://discuss.elastic.co/u/Xuzheng_Lin)\ **Replies:** 2\ **Last updated:** [November 28, 2017, 6:58am UTC](https://discuss.elastic.co/t/grok-two-words-as-one-term/109305 "2017-11-28T06:58:59Z")
Hi, I am trying to grok below log with logstash and fetch the term "Received disconnect". (My ELK Version is still 5.1.1 at the moment) Nov 27 00:00:00 ubuntu sshd\[123456\]: Received disconnect from 111.111.111.111: 14:… --- ## [BulkIndexError: ('200 document(s) failed to index.'](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:24am UTC](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780 "2020-11-04T05:24:32Z")
Hello Team, I am trying to push approx 10000 data by converting the pandas data frame to elk. But it fails to push all, some times it showing following error failed to establish a new connection errno 111 connection r… --- ## [Kibana installed, but cannot be access through web browser](https://discuss.elastic.co/t/kibana-installed-but-cannot-be-access-through-web-browser/220064)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 8\ **Last updated:** [February 28, 2020, 6:52am UTC](https://discuss.elastic.co/t/kibana-installed-but-cannot-be-access-through-web-browser/220064 "2020-02-28T06:52:37Z")
Below is the setting from kibana.yml: server.port: 5601 server.host: namenode2 elasticsearch.url: "http://namenode2:9200" Below is the setting from elasticsearch.yml: cluster.name: es-prod node.name: master-1 path… --- ## [Changing Kibana logo on the top left hand side](https://discuss.elastic.co/t/changing-kibana-logo-on-the-top-left-hand-side/115128)
**Author:** [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\ **Replies:** 7\ **Last updated:** [January 12, 2018, 12:14am UTC](https://discuss.elastic.co/t/changing-kibana-logo-on-the-top-left-hand-side/115128 "2018-01-12T00:14:11Z")
I am currently on Kibana 6.0 and I used these steps below suggested by tatdatTat Dat Pham and still not able to see my company logo, please advise. Reena For change logo, find file "global\_nav.less" (kibana directory… --- ## [Is this possible to autorefresh kibana 4.1 dashboard](https://discuss.elastic.co/t/is-this-possible-to-autorefresh-kibana-4-1-dashboard/46666)
**Author:** [@rashmi.nagar](https://discuss.elastic.co/u/rashmi.nagar)\ **Replies:** 5\ **Last updated:** [April 11, 2016, 2:33pm UTC](https://discuss.elastic.co/t/is-this-possible-to-autorefresh-kibana-4-1-dashboard/46666 "2016-04-11T14:33:32Z")
how to use grok filter for json data in logstash file . --- ## [@timestamp field in Kibana is different from @timestamp field in index entry](https://discuss.elastic.co/t/timestamp-field-in-kibana-is-different-from-timestamp-field-in-index-entry/72757)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [January 25, 2017, 6:58pm UTC](https://discuss.elastic.co/t/timestamp-field-in-kibana-is-different-from-timestamp-field-in-index-entry/72757 "2017-01-25T18:58:27Z")
Hi, I have an elasticsearch index entry like; { "\_index": "myindex-2017-01-25", "\_type": "logs", "\_id": "AVnVKXGK2fWIWeetV6jl", "\_score": null, "\_source": { "severity": "SEVERE", "logtype": "mylog", "@time… --- ## [Tagging Kibana dashboards?](https://discuss.elastic.co/t/tagging-kibana-dashboards/58365)
**Author:** [@George\_Niculae](https://discuss.elastic.co/u/George_Niculae)\ **Replies:** 1\ **Last updated:** [August 18, 2016, 10:53pm UTC](https://discuss.elastic.co/t/tagging-kibana-dashboards/58365 "2016-08-18T22:53:24Z")
Hi All, I have to list all available dashboards in Kibana in my web app and for this I am querying the .kibana index in Elasticsearch. While this works nicely I also have to sort / show dashboards category-wise (e.g. i… --- ## [How to add Multiple analyzers to a field](https://discuss.elastic.co/t/how-to-add-multiple-analyzers-to-a-field/155938)
**Author:** [@anveshdd](https://discuss.elastic.co/u/anveshdd)\ **Replies:** 2\ **Last updated:** [November 9, 2018, 5:32pm UTC](https://discuss.elastic.co/t/how-to-add-multiple-analyzers-to-a-field/155938 "2018-11-09T17:32:52Z")
I am working on ES 6.4.2, want to apply multiple analyzers to a field. I am looking to apply snowball and stop word. I tried thie below mapping is this the correct apporach. PUT /some-index { "settings": { … --- ## [Looking for a way to "detect json"](https://discuss.elastic.co/t/looking-for-a-way-to-detect-json/102263)
**Author:** [@Napsty](https://discuss.elastic.co/u/Napsty)\ **Replies:** 5\ **Last updated:** [October 17, 2017, 5:45am UTC](https://discuss.elastic.co/t/looking-for-a-way-to-detect-json/102263 "2017-10-17T05:45:45Z")
On my Docker servers I use the GELF log plugin to write the logs in GELF format to Logstash. On the Logstash side I prepared the following listener: input { gelf { host =\> "0.0.0.0" port =\> 5000 type =\> "… --- ## [Float number rounding in Kibana](https://discuss.elastic.co/t/float-number-rounding-in-kibana/26108)
**Author:** [@palmerabollo](https://discuss.elastic.co/u/palmerabollo)\ **Replies:** 4\ **Last updated:** [September 1, 2015, 4:46pm UTC](https://discuss.elastic.co/t/float-number-rounding-in-kibana/26108 "2015-09-01T16:46:00Z")
I have many documents with a floating field ("duration") representing the response time of a HTTP request in seconds. Its value is always smaller than one (example: 0.018). I want to visualize the average response times … --- ## [ERROR: \[1\] bootstrap checks failed in Elastic Search](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509)
**Author:** [@subhamchatterjee](https://discuss.elastic.co/u/subhamchatterjee)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 1:47pm UTC](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509 "2020-04-10T13:47:50Z")
While running elastic search via sudo systemctl start elasticsearch.service getting error Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.serv… --- ## [Painless Script: Splitting a string by '/'](https://discuss.elastic.co/t/painless-script-splitting-a-string-by/233379)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 1\ **Last updated:** [May 19, 2020, 6:13pm UTC](https://discuss.elastic.co/t/painless-script-splitting-a-string-by/233379 "2020-05-19T18:13:06Z")
Hello, Here's my scenario. I have an index full of documents. I'm trying to create a new field called parent\_folder\_path which will be based on the already existing path field. For example, if path is populated by exam… --- ## [Rollover Failing](https://discuss.elastic.co/t/rollover-failing/153676)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 6\ **Last updated:** [October 24, 2018, 4:17pm UTC](https://discuss.elastic.co/t/rollover-failing/153676 "2018-10-24T16:17:34Z")
Getting a failure - Rollover API complains that I have multiple aliases in my template but I created only one in the template. If i DONT use templates, the rollover works absolutely fine. ----- This is my current elasti… --- ## [Trying to set up ELK, get " This version of Kibana requires Elasticsearch ^2.3.0 on all nodes..."](https://discuss.elastic.co/t/trying-to-set-up-elk-get-this-version-of-kibana-requires-elasticsearch-2-3-0-on-all-nodes/47698)
**Author:** [@JoeVeilleux](https://discuss.elastic.co/u/JoeVeilleux)\ **Replies:** 4\ **Last updated:** [April 18, 2016, 9:27pm UTC](https://discuss.elastic.co/t/trying-to-set-up-elk-get-this-version-of-kibana-requires-elasticsearch-2-3-0-on-all-nodes/47698 "2016-04-18T21:27:10Z")
Hi -- Please pardon me if this is a newbie error, but I am trying to set up Elasticsearch, Logstash, and Kibana on a Red Hat Linux 6.x system. I am using the RPM repositories and I tried to follow the instructions on the… --- ## [SIgma rules for Elastic SIEM](https://discuss.elastic.co/t/sigma-rules-for-elastic-siem/268453)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 4\ **Last updated:** [April 3, 2021, 4:42am UTC](https://discuss.elastic.co/t/sigma-rules-for-elastic-siem/268453 "2021-04-03T04:42:49Z")
Hello! I need to use Sigma rules repo for my SIEM. How I can translate sigma to elastic? And how I can perform auto update sigma rules? --- ## [Filtering by date range or by field value](https://discuss.elastic.co/t/filtering-by-date-range-or-by-field-value/85477)
**Author:** [@cpatdowling](https://discuss.elastic.co/u/cpatdowling)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 12:54am UTC](https://discuss.elastic.co/t/filtering-by-date-range-or-by-field-value/85477 "2017-05-12T00:54:43Z")
I'm having some difficulty constructing a query that matches a field value, and then filters that query by a date range. Conversely, I could query the date range and then filter by field value but I expect that the latte… --- ## [Getting Validation Failed: 1: mapping type is missing when making a text field aggregatable](https://discuss.elastic.co/t/getting-validation-failed-1-mapping-type-is-missing-when-making-a-text-field-aggregatable/229725)
**Author:** [@karanmig12](https://discuss.elastic.co/u/karanmig12)\ **Replies:** 6\ **Last updated:** [April 25, 2020, 7:55pm UTC](https://discuss.elastic.co/t/getting-validation-failed-1-mapping-type-is-missing-when-making-a-text-field-aggregatable/229725 "2020-04-25T19:55:57Z")
I am new to Elasticsearch and using 6.7 I am trying to make a text field aggregatabe in an existing index. type": "action\_request\_validation\_exception", "reason": "Validation Failed: 1: mapping type is missing;" PUT… --- ## [Scroll in ElasticSearch Aggregation](https://discuss.elastic.co/t/scroll-in-elasticsearch-aggregation/209885)
**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\ **Replies:** 6\ **Last updated:** [November 29, 2019, 3:53pm UTC](https://discuss.elastic.co/t/scroll-in-elasticsearch-aggregation/209885 "2019-11-29T15:53:24Z")
I have a index with around 50Million data points, where I have a ID for each document. I need unique id and its count , as it would be more than 10000, I used scrolling but unexpecteded, the scrolling gives me the same … --- ## [ILM Delete Phase not working](https://discuss.elastic.co/t/ilm-delete-phase-not-working/258559)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 4\ **Last updated:** [December 14, 2020, 10:21am UTC](https://discuss.elastic.co/t/ilm-delete-phase-not-working/258559 "2020-12-14T10:21:47Z")
Hi All, I have defined an ILM policy with hot, warm and delete phase. Hot are warm phase are working as expected, but in spite of the delete phase says "complete", the index is still there... Am I misunderstanding som… --- ## [Master not discovered exception in my cluster](https://discuss.elastic.co/t/master-not-discovered-exception-in-my-cluster/99350)
**Author:** [@bigfool1988](https://discuss.elastic.co/u/bigfool1988)\ **Replies:** 2\ **Last updated:** [September 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception-in-my-cluster/99350 "2017-09-05T13:14:58Z")
--- ## ["index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/192525)
**Author:** [@mhsh64](https://discuss.elastic.co/u/mhsh64)\ **Replies:** 5\ **Last updated:** [July 27, 2019, 5:22pm UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/192525 "2019-07-27T17:22:18Z")
Please help: logstash output: I have a index template for logstash, which i defined in logstash output: output { elasticsearch { hosts =\> \["https://elasticsearchurl.domain.com:9200"\] user =\> 'logst… --- ## [Force shards rebalance when new empty node has joined](https://discuss.elastic.co/t/force-shards-rebalance-when-new-empty-node-has-joined/63846)
**Author:** [@kay\_kay](https://discuss.elastic.co/u/kay_kay)\ **Replies:** 7\ **Last updated:** [October 25, 2016, 9:05am UTC](https://discuss.elastic.co/t/force-shards-rebalance-when-new-empty-node-has-joined/63846 "2016-10-25T09:05:56Z")
It is similar to the http://stackoverflow.com/questions/25135869/how-to-rebalance-shard-elasticsearch question. Let's assume I have 5 ES data nodes, 11 indexes with replica=2. When I add an extra data node it remains e… --- ## [No saving, it fails for vis, dashboard, etc](https://discuss.elastic.co/t/no-saving-it-fails-for-vis-dashboard-etc/176095)
**Author:** [@Joe\_J](https://discuss.elastic.co/u/Joe_J)\ **Replies:** 2\ **Last updated:** [April 9, 2019, 9:13pm UTC](https://discuss.elastic.co/t/no-saving-it-fails-for-vis-dashboard-etc/176095 "2019-04-09T21:13:36Z")
Anyone else seeing this? In Kibana, trying to save anything (vis, dashboard, etc.) has the button doing the spinning "wait" icon ... forever. The button on the save dialog works. Inspecting the browser -- it appears… --- ## [Is there any way to kill / shut down logstash in graceful manner?](https://discuss.elastic.co/t/is-there-any-way-to-kill-shut-down-logstash-in-graceful-manner/28628)
**Author:** [@thiruna](https://discuss.elastic.co/u/thiruna)\ **Replies:** 5\ **Last updated:** [December 13, 2016, 4:45pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-kill-shut-down-logstash-in-graceful-manner/28628 "2016-12-13T16:45:50Z")
Hi, We used to kill logstash process using kill -9 in our linux server. It looks we are forcefully shutting down the logstash. Is there anyway to shut down logstash in graceful manner. is kill -2 will be used for grace… --- ## [Definition of node roles](https://discuss.elastic.co/t/definition-of-node-roles/271859)
**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\ **Replies:** 4\ **Last updated:** [May 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/definition-of-node-roles/271859 "2021-05-01T14:33:41Z")
Hello, What is the meaning this node role? cdfhilmrstw --- ## [SOLVED: Keep getting "Unable to fetch mapping. Do you have indices matching the pattern?"](https://discuss.elastic.co/t/solved-keep-getting-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/85406)
**Author:** [@RensHouben](https://discuss.elastic.co/u/RensHouben)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 1:34pm UTC](https://discuss.elastic.co/t/solved-keep-getting-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/85406 "2017-05-11T13:34:21Z")
To begin, yes, I've checked this thread. And this one. And this one. None of them helped. I'm using debian Jessie, with the deb https://artifacts.elastic.co/packages/5.x/apt stable main source for the ELK stack packag… --- ## [How to DELETE logs from elasticsearch index which are older then 90 days?](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-index-which-are-older-then-90-days/166125)
**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\ **Replies:** 3\ **Last updated:** [January 29, 2019, 10:21am UTC](https://discuss.elastic.co/t/how-to-delete-logs-from-elasticsearch-index-which-are-older-then-90-days/166125 "2019-01-29T10:21:50Z")
Is it possible to delete logs from elasticsearch index which are older than 3 months? NOTE: I don't want to create daily based or monthly based index and but want only one index and want to delete 3-month-old data insid… --- ## [Settings from keystore doesnot load](https://discuss.elastic.co/t/settings-from-keystore-doesnot-load/182321)
**Author:** [@Thanura\_Kannangara](https://discuss.elastic.co/u/Thanura_Kannangara)\ **Replies:** 4\ **Last updated:** [May 23, 2019, 5:19pm UTC](https://discuss.elastic.co/t/settings-from-keystore-doesnot-load/182321 "2019-05-23T17:19:47Z")
I'm running OSS version of winlogbeat winlogbeat-oss-6.7.1-windows-x86\_64 I created winlogbeat keystore and stored ES\_PWD using instructions available here and I'm using refering to the key as mentioned in the above m… --- ## [Extract data with Logstash and Xpath](https://discuss.elastic.co/t/extract-data-with-logstash-and-xpath/134617)
**Author:** [@neo](https://discuss.elastic.co/u/neo)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 3:05pm UTC](https://discuss.elastic.co/t/extract-data-with-logstash-and-xpath/134617 "2018-06-05T15:05:44Z")
Hi , I want to extract data (timestamp and message) via Xpath plugin in Logstash from XML files to display only them in fields in kibana. here is my LOGSTASH conf : input { beats { port =\> 5044 } } filter{ xml{ … --- ## [Change the default time range?](https://discuss.elastic.co/t/change-the-default-time-range/107516)
**Author:** [@mathiasrichter](https://discuss.elastic.co/u/mathiasrichter)\ **Replies:** 3\ **Last updated:** [November 14, 2017, 9:37am UTC](https://discuss.elastic.co/t/change-the-default-time-range/107516 "2017-11-14T09:37:48Z")
The default the time range in Kibana is set to the last 15 minutes in any dashboard. Is there any way to change this default? --- ## [\[ES 7.3.2\] SSLHandshakeException: No available authentication scheme](https://discuss.elastic.co/t/es-7-3-2-sslhandshakeexception-no-available-authentication-scheme/200463)
**Author:** [@egallistw](https://discuss.elastic.co/u/egallistw)\ **Replies:** 5\ **Last updated:** [September 24, 2019, 2:59pm UTC](https://discuss.elastic.co/t/es-7-3-2-sslhandshakeexception-no-available-authentication-scheme/200463 "2019-09-24T14:59:53Z")
Both elasticsearch hosts are running 7.3.2. The scenario is that I am using the transport profile settings to connect the nodes using a certificate, created by following the setting up elastic security blog post. I can v… --- ## [Elastic aggregation scrolling](https://discuss.elastic.co/t/elastic-aggregation-scrolling/27894)
**Author:** [@Giladovich](https://discuss.elastic.co/u/Giladovich)\ **Replies:** 3\ **Last updated:** [August 24, 2015, 7:49am UTC](https://discuss.elastic.co/t/elastic-aggregation-scrolling/27894 "2015-08-24T07:49:42Z")
Is there an architectural reason elastic doesn't provide aggregation scrolling? Is it just not yet implemented, or is there a profound reason that it is not provided? --- ## [Installing kibana on a windows server](https://discuss.elastic.co/t/installing-kibana-on-a-windows-server/34342)
**Author:** [@inlikefletch](https://discuss.elastic.co/u/inlikefletch)\ **Replies:** 7\ **Last updated:** [January 11, 2016, 9:26am UTC](https://discuss.elastic.co/t/installing-kibana-on-a-windows-server/34342 "2016-01-11T09:26:25Z")
Attempting to install kibana on my elasticsearch node and get the following error: PS C:\\Users\\user\> C:\\kibana-4.2.0-windows\\bin\\kibana.bat module.js:338 throw err; ^ Error: Cannot find module 'C:\\kibana-… --- ## [Correct way to use TransportClient connection object](https://discuss.elastic.co/t/correct-way-to-use-transportclient-connection-object/17947)
**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\ **Replies:** 8\ **Last updated:** [January 18, 2016, 7:47am UTC](https://discuss.elastic.co/t/correct-way-to-use-transportclient-connection-object/17947 "2016-01-18T07:47:34Z")
Hi, I'm using the below code to get a singleton object for TransportClient object. I'm using the getInstance() to get the client object which is already alive in webapplication. public static Client getInstan… --- ## [Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/71044)
**Author:** [@xy\_xin](https://discuss.elastic.co/u/xy_xin)\ **Replies:** 5\ **Last updated:** [January 13, 2017, 7:58am UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/71044 "2017-01-13T07:58:39Z")
Hi guys, i'm a newbee on elasticsearch. When i start to "Discover" my new created index, i encountered the problem which shows, Saved "field" parameter is now invalid. Please select a new field. Discover: "field" is a … --- ## [Issues with Elastic Agent and Defender?](https://discuss.elastic.co/t/issues-with-elastic-agent-and-defender/269818)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 5:27pm UTC](https://discuss.elastic.co/t/issues-with-elastic-agent-and-defender/269818 "2021-04-13T17:27:09Z")
After an upgrade to 7.12, a few machines experience high CPU load from Elastic endpoint security. The load seems to be periodic: The three processes/services that seem to cause this load are Elastic Endpoint, MS D… --- ## [Logstash Certificate Error "Looks like you either have an invalid key..."](https://discuss.elastic.co/t/logstash-certificate-error-looks-like-you-either-have-an-invalid-key/92325)
**Author:** [@bfrd](https://discuss.elastic.co/u/bfrd)\ **Replies:** 3\ **Last updated:** [July 8, 2017, 2:02am UTC](https://discuss.elastic.co/t/logstash-certificate-error-looks-like-you-either-have-an-invalid-key/92325 "2017-07-08T02:02:41Z")
Hello there, I am installing the ELK stack on a new server, everything seems to be going well except for logstash. From the ELK server's /var/log/logstash/logstash-plain.log am getting: \[ERROR\]\[logstash.inputs.beats … --- ## [Storing Dates in Elastic Best Practices](https://discuss.elastic.co/t/storing-dates-in-elastic-best-practices/57496)
**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\ **Replies:** 6\ **Last updated:** [August 8, 2016, 11:59pm UTC](https://discuss.elastic.co/t/storing-dates-in-elastic-best-practices/57496 "2016-08-08T23:59:43Z")
It would be great if someone shared their best practices on storing dates in ES in general but I have a specific question too. We mostly use dates without time and map them as type "date" and format "date" in ES. and … --- ## [Connection Refused to ElasticSearch](https://discuss.elastic.co/t/connection-refused-to-elasticsearch/106601)
**Author:** [@ayayalar](https://discuss.elastic.co/u/ayayalar)\ **Replies:** 7\ **Last updated:** [November 8, 2017, 6:48pm UTC](https://discuss.elastic.co/t/connection-refused-to-elasticsearch/106601 "2017-11-08T18:48:31Z")
I am running Elk stack on docker. All services starts perfectly fine. However I am getting connection refused in logstash logs. Here is my conf file for logstash: input { file { path =\> "/tmp/\*\_log" start\_pos… --- ## [Prevent Logstash logging to /var/log/messages](https://discuss.elastic.co/t/prevent-logstash-logging-to-var-log-messages/105372)
**Author:** [@pavuk](https://discuss.elastic.co/u/pavuk)\ **Replies:** 8\ **Last updated:** [October 26, 2017, 9:32am UTC](https://discuss.elastic.co/t/prevent-logstash-logging-to-var-log-messages/105372 "2017-10-26T09:32:27Z")
Hi, Could you please guide me how to prevent Logstash logging to /var/log/messages? Thanks. --- ## [JSON input for kibana dashboards](https://discuss.elastic.co/t/json-input-for-kibana-dashboards/115946)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 8\ **Last updated:** [January 18, 2018, 11:07pm UTC](https://discuss.elastic.co/t/json-input-for-kibana-dashboards/115946 "2018-01-18T23:07:51Z")
Hi all, I want to create a customised dashboards for monitoring kuberenetes in cloud. Right now we are using the default dashboards, but wish I can customise more to suit my needs. For an instance, the current dashboard… --- ## [Kibana : Unable to connect to Elasticsearch](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch/247687)
**Author:** [@infected](https://discuss.elastic.co/u/infected)\ **Replies:** 8\ **Last updated:** [September 9, 2020, 12:43am UTC](https://discuss.elastic.co/t/kibana-unable-to-connect-to-elasticsearch/247687 "2020-09-09T00:43:38Z")
Kibana cant connect Elasticsearch Kibana's error log log \[23:55:34.484\] \[info\]\[plugins-service\] Plugin "case" is disabled. log \[23:55:46.109\] \[info\]\[plugins-system\] Setting up \[37\] plugins: \[siem,taskManager,li… --- ## [Winlogbeat deploy via GPO](https://discuss.elastic.co/t/winlogbeat-deploy-via-gpo/121063)
**Author:** [@mforg85](https://discuss.elastic.co/u/mforg85)\ **Replies:** 4\ **Last updated:** [March 16, 2018, 2:15pm UTC](https://discuss.elastic.co/t/winlogbeat-deploy-via-gpo/121063 "2018-03-16T14:15:08Z")
Has anybody deployed winlogbeat through GPO? I have a general plan I have worked out to try to get this to work however I want to see if I am missing anything or not thinking about this correctly. [Previous page](https://discuss.elastic.co/top.md?page=302&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=304&per_page=50&period=all)