# Top **URL:** https://discuss.elastic.co/top.md?page=312&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 313 --- ## [Kibana wont recognize my time and date filed as a time and date](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140)
**Author:** [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)\ **Replies:** 8\ **Last updated:** [November 24, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140 "2017-11-24T13:45:01Z")
Hello, I have a date and time field in my logs, see below first lines of field, I've omitted the other fields : 09/11/2017 17:06 09/11/2017 17:06 09/11/2017 17:06 09/11/2017 17:06 09/11/2017 17:07 09/11/2017 17:07 … --- ## [Elasticsearch Active: failed](https://discuss.elastic.co/t/elasticsearch-active-failed/103598)
**Author:** [@Jhondude](https://discuss.elastic.co/u/Jhondude)\ **Replies:** 8\ **Last updated:** [October 11, 2017, 8:43pm UTC](https://discuss.elastic.co/t/elasticsearch-active-failed/103598 "2017-10-11T20:43:41Z")
Hello, OS = Ubuntu 16.04, install in vm java version java version "1.8.0\_144" Java(TM) SE Runtime Environment (build 1.8.0\_144-b01) Java HotSpot(TM) 64-Bit Server VM (build 25.144-b01, mixed mode) all ELK service a… --- ## [Elastcisearch process gets killed automatically](https://discuss.elastic.co/t/elastcisearch-process-gets-killed-automatically/55679)
**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\ **Replies:** 6\ **Last updated:** [July 25, 2016, 5:46pm UTC](https://discuss.elastic.co/t/elastcisearch-process-gets-killed-automatically/55679 "2016-07-25T17:46:31Z")
Hello, I am new to ELK, recently configured AWS-Linux box with elastcisearch and kibana. Process for both kibana and elastcisearch started successfully and able to get the logs and corresponding results. But after … --- ## [Multiple Filebeat instance](https://discuss.elastic.co/t/multiple-filebeat-instance/71904)
**Author:** [@pc2856](https://discuss.elastic.co/u/pc2856)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 3:19pm UTC](https://discuss.elastic.co/t/multiple-filebeat-instance/71904 "2017-02-07T15:19:25Z")
I am using Filebeat 5.1 on Centos Linux and have following constraints =\> 1) need to run multiple Filebeat instances on same hosts. 2) Each instance shall work with its own config yml. 3) Start and stop individual Filebe… --- ## [Kibana - discover - group by exception.ClassName](https://discuss.elastic.co/t/kibana-discover-group-by-exception-classname/192617)
**Author:** [@jross](https://discuss.elastic.co/u/jross)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 3:37pm UTC](https://discuss.elastic.co/t/kibana-discover-group-by-exception-classname/192617 "2019-08-14T15:37:37Z")
Hi, I would like to visualize the logs with every 'exception.ClassName' different, I mean, if I have 30 logs with the same 'exception.ClassName', it should appear one time, because otherwise, it's very difficult to mana… --- ## [Set vizualisation filter in iframe URL of dashboard](https://discuss.elastic.co/t/set-vizualisation-filter-in-iframe-url-of-dashboard/82058)
**Author:** [@Sebastien\_ROUL](https://discuss.elastic.co/u/Sebastien_ROUL)\ **Replies:** 4\ **Last updated:** [April 13, 2017, 12:22pm UTC](https://discuss.elastic.co/t/set-vizualisation-filter-in-iframe-url-of-dashboard/82058 "2017-04-13T12:22:00Z")
Hi, Context : I have 5 visualizations. All of them got AGG like AVG, and at least one bucket to split datas : - For one user : foobar - For all the users With this visualizations we can compare AVG of one user to t… --- ## [Filebeat 6.7.0 not working with AWS Elasticsearch](https://discuss.elastic.co/t/filebeat-6-7-0-not-working-with-aws-elasticsearch/175407)
**Author:** [@MarekObu](https://discuss.elastic.co/u/MarekObu)\ **Replies:** 3\ **Last updated:** [April 4, 2019, 2:06pm UTC](https://discuss.elastic.co/t/filebeat-6-7-0-not-working-with-aws-elasticsearch/175407 "2019-04-04T14:06:51Z")
After upgrading filebeat to 6.7.0, I've noticed that it doesn't ship logs anymore. I'm using AWS managed Elasticsearch, which does not provide license information. Related to: https://github.com/elastic/beats/pull/11296 … --- ## [Allocation Error](https://discuss.elastic.co/t/allocation-error/84972)
**Author:** [@lrolsen](https://discuss.elastic.co/u/lrolsen)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 7:04am UTC](https://discuss.elastic.co/t/allocation-error/84972 "2017-05-22T07:04:33Z")
Hi, I have a 2 node cluster with 1 shard per node and no replication. The cluster is used for logging and uses daily indexes. Normally everything runs fine but the index that was created a few days ago turned red half … --- ## [Kibana error 403 forbidden](https://discuss.elastic.co/t/kibana-error-403-forbidden/200383)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 2\ **Last updated:** [September 21, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-error-403-forbidden/200383 "2019-09-21T08:55:17Z")
Hi, I just setup my xpack in elasticsearch 7.1.0 and changed all my built-in user passwords. this is the change i made in Kibana.yml xpack.security.enabled: true elasticsearch.username: "kibana" elasticsearch.password… --- ## [Getting errors related to ILM](https://discuss.elastic.co/t/getting-errors-related-to-ilm/182256)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 4\ **Last updated:** [June 13, 2019, 4:58am UTC](https://discuss.elastic.co/t/getting-errors-related-to-ilm/182256 "2019-06-13T04:58:34Z")
currently running ES 6.7.1 and we use the logstash-\* indexes I recently setup ILM through the UI, using these settings: { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_age":… --- ## [Correct Way to Execute Not Exists and Not Empty Query for Not\_Analyzed Fields in Nested Document](https://discuss.elastic.co/t/correct-way-to-execute-not-exists-and-not-empty-query-for-not-analyzed-fields-in-nested-document/143390)
**Author:** [@shalini\_hemachandran](https://discuss.elastic.co/u/shalini_hemachandran)\ **Replies:** 2\ **Last updated:** [August 14, 2018, 8:13pm UTC](https://discuss.elastic.co/t/correct-way-to-execute-not-exists-and-not-empty-query-for-not-analyzed-fields-in-nested-document/143390 "2018-08-14T20:13:56Z")
Hi, I have a "not\_analyzed" field as part of a nested document in my schema. A sample document is given below "\_source": { "identifier": 123, . . "nested\_doc\_name\_xyz":\[ { "not\_analyzed\_fi… --- ## [Joining Columns](https://discuss.elastic.co/t/joining-columns/61128)
**Author:** [@Adello](https://discuss.elastic.co/u/Adello)\ **Replies:** 4\ **Last updated:** [October 13, 2016, 11:39am UTC](https://discuss.elastic.co/t/joining-columns/61128 "2016-10-13T11:39:46Z")
Hi :), I already tried my luck on StackOverflow but unfortunately without any result. I struggle with some basics and I don't know how to solve the following problem. I have given the following data structure in Ela… --- ## [Rejected mapping because final mapping would have more than one type](https://discuss.elastic.co/t/rejected-mapping-because-final-mapping-would-have-more-than-one-type/120118)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [February 19, 2018, 8:30am UTC](https://discuss.elastic.co/t/rejected-mapping-because-final-mapping-would-have-more-than-one-type/120118 "2018-02-19T08:30:41Z")
Hi, I just migrated my ES from AWS elasticservice to a EC2 instance and despite not having changed anything to my configs or logstash (running on a separate instance) my mapping is suddenly getting rejected. \[logstash.… --- ## [Exclude pattern in data table visualization](https://discuss.elastic.co/t/exclude-pattern-in-data-table-visualization/119595)
**Author:** [@krsna](https://discuss.elastic.co/u/krsna)\ **Replies:** 1\ **Last updated:** [February 13, 2018, 7:25pm UTC](https://discuss.elastic.co/t/exclude-pattern-in-data-table-visualization/119595 "2018-02-13T19:25:14Z")
I created a data table visualization and now want to exclude some values from the table. There is a field "Exclude" in the "Advanced" section. If something is entered there, that value is excluded from the table. But I w… --- ## [Kibana can not connect to Elasticsearch cluster](https://discuss.elastic.co/t/kibana-can-not-connect-to-elasticsearch-cluster/237335)
**Author:** [@skeleton](https://discuss.elastic.co/u/skeleton)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/kibana-can-not-connect-to-elasticsearch-cluster/237335 "2020-07-03T13:46:00Z")
First and foremost: Apologies, if this post is poorly formatted, i am unfamiliar with this editor. I will try to fix it once i see it, because i can not find the preview function. Background: I am trying to get a Wazuh … --- ## [Excluding punctuation from fields](https://discuss.elastic.co/t/excluding-punctuation-from-fields/7772)
**Author:** [@Michael\_Sick](https://discuss.elastic.co/u/Michael_Sick)\ **Replies:** 5\ **Last updated:** [June 1, 2012, 4:44pm UTC](https://discuss.elastic.co/t/excluding-punctuation-from-fields/7772 "2012-06-01T16:44:15Z")
Hi All, What's the best way (or tradeoffs) to exclude punctuation (or specific characters) from certain fields during analysis and searching? i.e. In document, "P.F. Changs" would match a search for "P.F. Changs"… --- ## [Nginx access log using grok filter](https://discuss.elastic.co/t/nginx-access-log-using-grok-filter/324877)
**Author:** [@yc99](https://discuss.elastic.co/u/yc99)\ **Replies:** 1\ **Last updated:** [February 21, 2023, 12:36am UTC](https://discuss.elastic.co/t/nginx-access-log-using-grok-filter/324877 "2023-02-21T00:36:14Z")
My nginx access log format as below, there certain access log without the "$request\_time" "$http\_x\_forwarded\_for" $http\_host ' field, therefore, for certain access log, the grok filter not working, is there anyway to a… --- ## [Custom GROK Patterns not work](https://discuss.elastic.co/t/custom-grok-patterns-not-work/82727)
**Author:** [@davidS](https://discuss.elastic.co/u/davidS)\ **Replies:** 4\ **Last updated:** [April 24, 2017, 6:45am UTC](https://discuss.elastic.co/t/custom-grok-patterns-not-work/82727 "2017-04-24T06:45:28Z")
Hi all, we tried to implement some custom grok patterns into a seperate file and load it into logstash conf by using patterns\_dir. Each time running logstash with the following conf output a pattern not defined error m… --- ## [Error: path is not accessible on master node](https://discuss.elastic.co/t/error-path-is-not-accessible-on-master-node/138085)
**Author:** [@ohadbp](https://discuss.elastic.co/u/ohadbp)\ **Replies:** 0\ **Last updated:** [July 1, 2018, 3:46pm UTC](https://discuss.elastic.co/t/error-path-is-not-accessible-on-master-node/138085 "2018-07-01T15:46:15Z")
Hey, I am trying to add snapshots using S3 but something ain't right. This are the steps I have made: Installing ElasticSearch, version 6.3.0 Installing repository-s3 plugin, version 6.3.0 Adding access/secret key to … --- ## [Dec 2nd: \[EN\] How to cURL Elasticsearch: Go forth to Shell](https://discuss.elastic.co/t/dec-2nd-en-how-to-curl-elasticsearch-go-forth-to-shell/371173)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 2, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-en-how-to-curl-elasticsearch-go-forth-to-shell/371173 "2024-12-02T08:00:06Z")
Kibana's Console is the easiest way to get started with Elasticsearch's REST API — syntax highlighting, autocompletion, formating, export of cURL, JavaScript, or Python. And you don't have to worry about the right endpoi… --- ## [Fielddata is disabled on text fields by default. Set fielddata=true on \[host.name\] in order to load fielddata in memory by uninverting the inverted index](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-host-name-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/212111)
**Author:** [@skdasari](https://discuss.elastic.co/u/skdasari)\ **Replies:** 4\ **Last updated:** [December 20, 2019, 8:57am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-host-name-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/212111 "2019-12-20T08:57:26Z")
Hello, Something weird happend lately in my elasticsearch setup letely. Metricbeat index got replaced with a new name like the old one is like metricbeat.x.date, But now the index is showing as metricbeat .version and w… --- ## [Logstash Invalid Character for UTF-16/Unicode encoding](https://discuss.elastic.co/t/logstash-invalid-character-for-utf-16-unicode-encoding/56702)
**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\ **Replies:** 6\ **Last updated:** [January 11, 2018, 4:35pm UTC](https://discuss.elastic.co/t/logstash-invalid-character-for-utf-16-unicode-encoding/56702 "2018-01-11T16:35:35Z")
Hi, Below is the logstash Input plugin configured to read logs generated by my Windows Application, input { file { path =\> \["D:/ELK/LoggerTestApp/Server/Logger/GetAssetPointerById/\*\*/\*.txt"\] codec =\> plain { charset… --- ## [Parse json data with logstash](https://discuss.elastic.co/t/parse-json-data-with-logstash/297792)
**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\ **Replies:** 7\ **Last updated:** [February 23, 2022, 2:54pm UTC](https://discuss.elastic.co/t/parse-json-data-with-logstash/297792 "2022-02-23T14:54:12Z")
Hi all, I'm a newbie to logstash and I'm trying to parse a JSON data file like the following { "A001": { "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.954286956913572, … --- ## [How could I build jdbc input plugin?](https://discuss.elastic.co/t/how-could-i-build-jdbc-input-plugin/1099)
**Author:** [@Ducheol\_Kim](https://discuss.elastic.co/u/Ducheol_Kim)\ **Replies:** 3\ **Last updated:** [July 14, 2015, 8:23am UTC](https://discuss.elastic.co/t/how-could-i-build-jdbc-input-plugin/1099 "2015-07-14T08:23:06Z")
Hi All. I try to build jdbc plugin which is mentioned below. I follow the instruction in the https://www.elastic.co/guide/en/logstash/current/\_how\_to\_write\_a\_logstash\_input\_plugin.html and I got below error. $ bundl… --- ## [Hostname verification turn off for curl requests](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 5\ **Last updated:** [November 28, 2019, 10:39am UTC](https://discuss.elastic.co/t/hostname-verification-turn-off-for-curl-requests/209800 "2019-11-28T10:39:51Z")
Hello Elastic, I'm setting up new elastic cluster with security with certificates. However when doing curl requests its not working out, any help on this will be much appreciated. elasticsearch.yml : node.name=${HOSTN… --- ## [Does Elasticsearch automatically compress data?](https://discuss.elastic.co/t/does-elasticsearch-automatically-compress-data/93161)
**Author:** [@Adam\_Szabo](https://discuss.elastic.co/u/Adam_Szabo)\ **Replies:** 1\ **Last updated:** [July 14, 2017, 3:25pm UTC](https://discuss.elastic.co/t/does-elasticsearch-automatically-compress-data/93161 "2017-07-14T15:25:04Z")
2 days ago I imported 144 MB of log to see how much space is needed for them in Elasticsearch. The result was: /var/lib/elasticsearch# du -ch nodes/ ... 974M nodes/0 974M nodes/ 974M total Today I checked th… --- ## [Kibana Discover: Request Timeout after 30000ms when searching large documents](https://discuss.elastic.co/t/kibana-discover-request-timeout-after-30000ms-when-searching-large-documents/98069)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 4\ **Last updated:** [August 24, 2017, 1:05pm UTC](https://discuss.elastic.co/t/kibana-discover-request-timeout-after-30000ms-when-searching-large-documents/98069 "2017-08-24T13:05:05Z")
On kibana when i try to search or filter on a index that contains documents that has field very large ( it stores large text file of 5000 lines or more) I got these error but i dont see any error in logs file kibana or e… --- ## [Kibana default netflow dashboards](https://discuss.elastic.co/t/kibana-default-netflow-dashboards/133258)
**Author:** [@venki522](https://discuss.elastic.co/u/venki522)\ **Replies:** 8\ **Last updated:** [May 25, 2018, 9:36am UTC](https://discuss.elastic.co/t/kibana-default-netflow-dashboards/133258 "2018-05-25T09:36:35Z")
iam using netflow module for elk stack.iam not able to see the default dashboard in kibana for netflow .Any idea,can some one help on this. \[image\] --- ## [What can I do with Kibana Alerts with BASIC - FREE AND OPEN 2 subscription?](https://discuss.elastic.co/t/what-can-i-do-with-kibana-alerts-with-basic-free-and-open-2-subscription/278785)
**Author:** [@nachoenjuto](https://discuss.elastic.co/u/nachoenjuto)\ **Replies:** 8\ **Last updated:** [July 16, 2021, 10:38am UTC](https://discuss.elastic.co/t/what-can-i-do-with-kibana-alerts-with-basic-free-and-open-2-subscription/278785 "2021-07-16T10:38:54Z")
Hi all, I am designing a solution for a customer and one of the requirements is to have alerts, but I am no sure how far I can go with the BASIC - FREE AND OPEN 2 subscription. Does anyone has experience with this? or … --- ## [Filebeat -\> Logstash "write: broken pipe"](https://discuss.elastic.co/t/filebeat-logstash-write-broken-pipe/45077)
**Author:** [@gregoryo](https://discuss.elastic.co/u/gregoryo)\ **Replies:** 8\ **Last updated:** [March 23, 2016, 2:43am UTC](https://discuss.elastic.co/t/filebeat-logstash-write-broken-pipe/45077 "2016-03-23T02:43:14Z")
I'm having trouble getting TLS communication working between Filebeat and Logstash. I have followed @andrewkroh 's advice and got this far: $ curl -v --cacert ca.crt https://logs.andrewkroh.com:5044 $ curl: (52) Empty … --- ## [Getting " ERR Failed to publish events caused by: lumberjack protocol error" in Filebeat](https://discuss.elastic.co/t/getting-err-failed-to-publish-events-caused-by-lumberjack-protocol-error-in-filebeat/106509)
**Author:** [@Telstra\_Aus](https://discuss.elastic.co/u/Telstra_Aus)\ **Replies:** 4\ **Last updated:** [November 7, 2017, 4:43am UTC](https://discuss.elastic.co/t/getting-err-failed-to-publish-events-caused-by-lumberjack-protocol-error-in-filebeat/106509 "2017-11-07T04:43:19Z")
Hi, I am trying to implement ELK with filebeat in some of my servers, As of now i am trying it locally. When ever i am trying to start the filebeat to send the logs to my logstash its throwing " ERR Failed to publish e… --- ## [Kibana visualize network bandwidth from metribeat](https://discuss.elastic.co/t/kibana-visualize-network-bandwidth-from-metribeat/84698)
**Author:** [@revolucio](https://discuss.elastic.co/u/revolucio)\ **Replies:** 6\ **Last updated:** [May 24, 2017, 5:56am UTC](https://discuss.elastic.co/t/kibana-visualize-network-bandwidth-from-metribeat/84698 "2017-05-24T05:56:37Z")
Hi all, I'm trying to generate a network bandwidth visualization using Kibana 5.4.0 Now thanks to the derivative metric seems really easy so I did : It works pretty well but from time to time I have a negative peak … --- ## [Kibana 502 Bad gateway error](https://discuss.elastic.co/t/kibana-502-bad-gateway-error/250192)
**Author:** [@Krunal\_Patel1](https://discuss.elastic.co/u/Krunal_Patel1)\ **Replies:** 6\ **Last updated:** [September 28, 2020, 4:01pm UTC](https://discuss.elastic.co/t/kibana-502-bad-gateway-error/250192 "2020-09-28T16:01:14Z")
Hi, I'm taking the "Data Analysis with Kibana (On-Demand)", and I cannot access kibana. When I click the kibana link shown on the page "http://ec2-X-XXX-XXX-XX.eu-central-1.compute.amazonaws.com/", I get a 502 bad gatewa… --- ## [Kibana, getting todays date](https://discuss.elastic.co/t/kibana-getting-todays-date/85766)
**Author:** [@hfakar](https://discuss.elastic.co/u/hfakar)\ **Replies:** 8\ **Last updated:** [May 15, 2017, 8:26pm UTC](https://discuss.elastic.co/t/kibana-getting-todays-date/85766 "2017-05-15T20:26:18Z")
Hello there, I want to calculate how many days past with my 'duedate' timestamp. I guess I need a scripted field but I cannot get it right. Is there a way to this like doc\['today'\].value - doc\['duedate'\].value ? And … --- ## [Want FIleBeat client IP not hostname](https://discuss.elastic.co/t/want-filebeat-client-ip-not-hostname/93957)
**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\ **Replies:** 7\ **Last updated:** [July 24, 2017, 1:28pm UTC](https://discuss.elastic.co/t/want-filebeat-client-ip-not-hostname/93957 "2017-07-24T13:28:01Z")
I am reading logs from FIleBeat \> Logstash \> ElasticSearch I am only able to capture FileBeat client systems hostname, but I want IP address not hostname. Unable to find working solution in this forum and internet. P… --- ## [How to change TSVB from an areal chart to a line chart](https://discuss.elastic.co/t/how-to-change-tsvb-from-an-areal-chart-to-a-line-chart/247893)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [September 8, 2020, 7:52pm UTC](https://discuss.elastic.co/t/how-to-change-tsvb-from-an-areal-chart-to-a-line-chart/247893 "2020-09-08T19:52:02Z")
Hi, I want to use TSVB for line charts with multiple scales. I got the multiple scales working but it lookes like it is only an areal chart. On the internet I found a picture showing a TSVB line chart: Mine looks li… --- ## [Logstash issue with json input from beats \[Solved\]](https://discuss.elastic.co/t/logstash-issue-with-json-input-from-beats-solved/100039)
**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\ **Replies:** 5\ **Last updated:** [September 11, 2017, 1:54pm UTC](https://discuss.elastic.co/t/logstash-issue-with-json-input-from-beats-solved/100039 "2017-09-11T13:54:06Z")
In short I am getting the following error when I view the console terminal on logstash JSON parse error, original data now in message field {:error=\>#\ **Author:** [@aksadvance](https://discuss.elastic.co/u/aksadvance)\ **Replies:** 7\ **Last updated:** [April 24, 2019, 2:51pm UTC](https://discuss.elastic.co/t/document-size-in-elastic-7-0/178239 "2019-04-24T14:51:07Z") I have done below steps but still not getting the document size in result. Installed mapper-size plugin. Enabled \_size also and its reflecting in index mapping curl -X PUT "localhost:9200//\_mapping" -H 'Content-Type: … --- ## [Kibana Discovery Regex](https://discuss.elastic.co/t/kibana-discovery-regex/199785)
**Author:** [@GaffaOverflow](https://discuss.elastic.co/u/GaffaOverflow)\ **Replies:** 3\ **Last updated:** [September 27, 2019, 7:12pm UTC](https://discuss.elastic.co/t/kibana-discovery-regex/199785 "2019-09-27T19:12:11Z")
Hi Elastic Community, Im trying to use regex in Kibana Discovery search bar but i think im to stupid :smiley: I Found some Threads and Blog Post but it doesnt work for me. Example: Event 1: Some Message: C:\\ProgramD… --- ## [Invalid SSL cert error when connecting to elasticsearch using DBeaver](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510)
**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510 "2021-07-14T13:46:43Z")
I have trouble using SSL keystore or truststore to connect to Elasticsearch client using DBeaver. This is an elastic stack on k8s installation on my local machine. I followed the official tutorial to set up a connection … --- ## [Logstash -Could not find any executable java binary. Please install java](https://discuss.elastic.co/t/logstash-could-not-find-any-executable-java-binary-please-install-java/79774)
**Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\ **Replies:** 4\ **Last updated:** [March 23, 2017, 9:45pm UTC](https://discuss.elastic.co/t/logstash-could-not-find-any-executable-java-binary-please-install-java/79774 "2017-03-23T21:45:23Z")
Folks - somehow the 5.2 logstash cant find JAVA 5.2 ES & kibana run fine nn775 ~ :( # rpm -q logstash logstash-5.2.2-1.noarch nn775 ~ # /usr/share/logstash/bin/logstash Could not find any executable java binary. Pleas… --- ## [Help understanding "UnavailableShardsException" error](https://discuss.elastic.co/t/help-understanding-unavailableshardsexception-error/16327)
**Author:** [@Nikhil\_Singh](https://discuss.elastic.co/u/Nikhil_Singh)\ **Replies:** 3\ **Last updated:** [March 19, 2014, 12:09pm UTC](https://discuss.elastic.co/t/help-understanding-unavailableshardsexception-error/16327 "2014-03-19T12:09:40Z")
Hi all, We have a 5 node elasticsearch setup as follows: 3 nodes running in data mode 2 nodes running in master only mode Each of the nodes have the following configuration options set in elasticsearch.yml file in… --- ## [Transient setting \[threadpool.search.queue\_size\], not dynamically updateable](https://discuss.elastic.co/t/transient-setting-threadpool-search-queue-size-not-dynamically-updateable/72576)
**Author:** [@Akshaykapoor](https://discuss.elastic.co/u/Akshaykapoor)\ **Replies:** 3\ **Last updated:** [January 24, 2017, 8:33am UTC](https://discuss.elastic.co/t/transient-setting-threadpool-search-queue-size-not-dynamically-updateable/72576 "2017-01-24T08:33:03Z")
I'm trying to change this cluster setting on v5.1.1 but unable to do so because of the following error. I'm doing the following, /\_cluster/settings { "transient" : { "threadpool.search.queue\_size" : 1000 }… --- ## [방화벽 환경에서 클러스터 구성](https://discuss.elastic.co/t/topic/24328)
**Author:** [@11184](https://discuss.elastic.co/u/11184)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 2:29am UTC](https://discuss.elastic.co/t/topic/24328 "2015-07-02T02:29:20Z")
두곳 서로다른 네트웍 대역을 가진 10대의 서버로 클러스터를 구성할경우 대역사이 방화벽이 있습니다. 양방향으로 9200-9400을 열어야 하는지 또한 저는 마스터 한대 나머지 9대는 데이터 저장만 하게 하게하려 합니다. 클라이언트 노드 설정파일에 마스터 주소만 적어주면 되나요? 예들들어 1.1.1.1~9 까지 9대의 서버가 있고 2.2.2.2.1 서버를 elasticsearch ma… --- ## [Elasticsearch 8.14.0 Security Update (ESA-2024-13)](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 6, 2024, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898 "2024-06-06T03:32:51Z")
Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions (ESA-2024-13) It was identified that if a cross-cluster API key restricts search for a given index using the query or the field\_security … --- ## [Including a filter with a query string](https://discuss.elastic.co/t/including-a-filter-with-a-query-string/172859)
**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\ **Replies:** 2\ **Last updated:** [March 18, 2019, 11:02pm UTC](https://discuss.elastic.co/t/including-a-filter-with-a-query-string/172859 "2019-03-18T23:02:52Z")
What does the JSON query look like that includes a filter with the query string? If I am querying an index and want to filter results that come back with my query string, I tried the following: GET animals/\_search { "… --- ## [Unable to Connect Filebeat to Elasticsearch](https://discuss.elastic.co/t/unable-to-connect-filebeat-to-elasticsearch/308061)
**Author:** [@Nightshade](https://discuss.elastic.co/u/Nightshade)\ **Replies:** 5\ **Last updated:** [June 26, 2022, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-connect-filebeat-to-elasticsearch/308061 "2022-06-26T12:09:58Z")
This is the error I am getting: Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at http://10.0.0.132:9200: Get "http://10.0.0.132:9200": EOF\] Full log w… --- ## [Nested query with multiple conditions](https://discuss.elastic.co/t/nested-query-with-multiple-conditions/199981)
**Author:** [@Mudboyzh](https://discuss.elastic.co/u/Mudboyzh)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 11:33pm UTC](https://discuss.elastic.co/t/nested-query-with-multiple-conditions/199981 "2019-09-18T23:33:31Z")
Hi, I look the document and it works when a pair of match and range query. The problem is I try to make multi pair of match and range query, it won't return any document. Here is my index mapping PUT master { "mapp… --- ## [When should you split your indexes?](https://discuss.elastic.co/t/when-should-you-split-your-indexes/579)
**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\ **Replies:** 8\ **Last updated:** [May 20, 2015, 9:24pm UTC](https://discuss.elastic.co/t/when-should-you-split-your-indexes/579 "2015-05-20T21:24:11Z")
I have logstash pulling logs from web servers and database servers and is displayed in kibana for the IT department. The 3 sources of logs: web-searches web-errors database-errors All data is being pushed to da… --- ## [Visualization Exclude Pattern](https://discuss.elastic.co/t/visualization-exclude-pattern/35257)
**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\ **Replies:** 3\ **Last updated:** [June 6, 2016, 3:10pm UTC](https://discuss.elastic.co/t/visualization-exclude-pattern/35257 "2016-06-06T15:10:38Z")
I'm looking to exclude on a field value, in this case an email address. Exact matches work fine, but I'm looking to exclude an email beginning with a certain keyword. For example, exchanger523418115@example.com. So in th… [Previous page](https://discuss.elastic.co/top.md?page=311&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=313&per_page=50&period=all)