# Top **URL:** https://discuss.elastic.co/top.md?page=315&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 316 --- ## [Elasticsearch.esplugin: project not building for ES Gradle build tools versions prior to 6.6.0](https://discuss.elastic.co/t/elasticsearch-esplugin-project-not-building-for-es-gradle-build-tools-versions-prior-to-6-6-0/167305)
**Author:** [@Thales\_Valias](https://discuss.elastic.co/u/Thales_Valias)\ **Replies:** 1\ **Last updated:** [February 11, 2019, 12:11am UTC](https://discuss.elastic.co/t/elasticsearch-esplugin-project-not-building-for-es-gradle-build-tools-versions-prior-to-6-6-0/167305 "2019-02-11T00:11:02Z")
I'm aiming to write an ES Ingest Processor plugin, making use of the ES Ingest Node feature released in 5.0.0v. I've created a few POCs built with Gradle (5.1), either through this great cookiecutter template: https://g… --- ## [Checking Field Length](https://discuss.elastic.co/t/checking-field-length/51335)
**Author:** [@wmikew5672](https://discuss.elastic.co/u/wmikew5672)\ **Replies:** 7\ **Last updated:** [June 26, 2017, 9:15pm UTC](https://discuss.elastic.co/t/checking-field-length/51335 "2017-06-26T21:15:34Z")
I'm still relatively new to Logstash, and I'm looking to find a way to check the length of an error message within a filter. If the message exceeds a defined number of characters, I want to output to an alternate ES inde… --- ## [Visualizing Nested Data Type in Kibana](https://discuss.elastic.co/t/visualizing-nested-data-type-in-kibana/228247)
**Author:** [@ferrari](https://discuss.elastic.co/u/ferrari)\ **Replies:** 2\ **Last updated:** [April 16, 2020, 9:19pm UTC](https://discuss.elastic.co/t/visualizing-nested-data-type-in-kibana/228247 "2020-04-16T21:19:57Z")
Hi All, I am new to Kibana. I have been trying to create dashboards to visualize nested datatype but no luck, even simple stuff like adding field from nested datatype as column in Data Table is not working. Here are my… --- ## [JSON parse error, original data now in message field - Unexpected character (',' (code 44))](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-unexpected-character-code-44/138340)
**Author:** [@jbowker](https://discuss.elastic.co/u/jbowker)\ **Replies:** 5\ **Last updated:** [July 4, 2018, 5:30am UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-unexpected-character-code-44/138340 "2018-07-04T05:30:57Z")
I am trying to deploy this pipeline on Kibana/Logstash pipelines: input { rabbitmq { host =\> "xxxxxxxxxx" vhost =\> "/" queue =\> "outrights" port =\> 5672 heartbeat =\> 30 durable =\> true password =\> "xxxx… --- ## [Using \`ctx\` to access source field](https://discuss.elastic.co/t/using-ctx-to-access-source-field/115129)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 5\ **Last updated:** [January 11, 2018, 5:05pm UTC](https://discuss.elastic.co/t/using-ctx-to-access-source-field/115129 "2018-01-11T17:05:13Z")
What does ctx stand for? I can't find it in the docs. --- ## [Can we calculate in Kibana?](https://discuss.elastic.co/t/can-we-calculate-in-kibana/36007)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 7:21am UTC](https://discuss.elastic.co/t/can-we-calculate-in-kibana/36007 "2015-12-02T07:21:11Z")
Hi Guys, I want to calculate field to get average time. Requirement is like I have request time and submitted time, two different field. I want to know how much it will take time, how can I calculate that average??? --- ## [Remove characters in grok](https://discuss.elastic.co/t/remove-characters-in-grok/72548)
**Author:** [@bob-bza](https://discuss.elastic.co/u/bob-bza)\ **Replies:** 2\ **Last updated:** [January 24, 2017, 5:06pm UTC](https://discuss.elastic.co/t/remove-characters-in-grok/72548 "2017-01-24T17:06:05Z")
i have string like this \[2017-01-23 21:55:13,840\] DEBUG \[Channel manager on controller 1\]: Controller 1 trying to connect to broker 1 (kafka.controller.ControllerChannelManager) \[2017-01-23 21:55:13,852\] DEBUG \[Channe… --- ## [Can I make string field as aggregatable?](https://discuss.elastic.co/t/can-i-make-string-field-as-aggregatable/101881)
**Author:** [@ctayal1211](https://discuss.elastic.co/u/ctayal1211)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 6:41pm UTC](https://discuss.elastic.co/t/can-i-make-string-field-as-aggregatable/101881 "2017-09-26T18:41:40Z")
Hi, I want to make string field as aggregatable. \[20 AM\] I have visualization json as follows: { "\_id": "Top-Switches-by-Endpoint-Count", "\_type": "visualization", "\_source": { "description": "", "uiStateJSON": … --- ## [Check if field exists in a nested object](https://discuss.elastic.co/t/check-if-field-exists-in-a-nested-object/13845)
**Author:** [@Maximilian\_S](https://discuss.elastic.co/u/Maximilian_S)\ **Replies:** 3\ **Last updated:** [October 4, 2013, 8:27pm UTC](https://discuss.elastic.co/t/check-if-field-exists-in-a-nested-object/13845 "2013-10-04T20:27:34Z")
In my database I always have an object "foo", and I want the results where the field "bar" exists. Independendtly of its value ("baz" or something else). { "foo":{ "bar":"baz" } } Which quer… --- ## [Visualize funnels in Kibana](https://discuss.elastic.co/t/visualize-funnels-in-kibana/179729)
**Author:** [@Prashant\_Pandey](https://discuss.elastic.co/u/Prashant_Pandey)\ **Replies:** 1\ **Last updated:** [May 8, 2019, 1:14pm UTC](https://discuss.elastic.co/t/visualize-funnels-in-kibana/179729 "2019-05-08T13:14:48Z")
I have documents having following format: { Session ID, Previous URL, Current URL } I want to create visualisation for following scenario: How many users hit on URL B after hitting URL A and having same session ID? … --- ## [Scale Logstash in Distributed Real-Time Way based on Storm](https://discuss.elastic.co/t/scale-logstash-in-distributed-real-time-way-based-on-storm/26740)
**Author:** [@haoch](https://discuss.elastic.co/u/haoch)\ **Replies:** 7\ **Last updated:** [November 3, 2015, 7:37am UTC](https://discuss.elastic.co/t/scale-logstash-in-distributed-real-time-way-based-on-storm/26740 "2015-11-03T07:37:56Z")
Hi Logstash Community, This is Hao Chen from an e-commerce company supporting one of the largest hadoop cluster in the world. We are relying on logstash to monitor large amount of platform logs. As I could not find simi… --- ## [Pagination 10000 document total limit](https://discuss.elastic.co/t/pagination-10000-document-total-limit/214897)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 4\ **Last updated:** [January 20, 2020, 3:16pm UTC](https://discuss.elastic.co/t/pagination-10000-document-total-limit/214897 "2020-01-20T15:16:20Z")
I am using pagination from my .net app with nest client to just get 50 docs on each page of the grid and that works fine but the response to the search response.HitsMetadata.Total.Value is always 10000 event there are mo… --- ## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/120627)
**Author:** [@sbu](https://discuss.elastic.co/u/sbu)\ **Replies:** 2\ **Last updated:** [February 21, 2018, 2:36pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/120627 "2018-02-21T14:36:15Z")
Hi, I'm getting "failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]" and then right at the bottom of the exception I'm getting access denied ("java.io.FilePermission" "/certs/ca/ca.crt" "read") which… --- ## [Configuring Filebeat to send the logs to remote Logstash(ELK)](https://discuss.elastic.co/t/configuring-filebeat-to-send-the-logs-to-remote-logstash-elk/121355)
**Author:** [@Henry\_Han](https://discuss.elastic.co/u/Henry_Han)\ **Replies:** 1\ **Last updated:** [February 27, 2018, 3:44am UTC](https://discuss.elastic.co/t/configuring-filebeat-to-send-the-logs-to-remote-logstash-elk/121355 "2018-02-27T03:44:48Z")
Hello, This is the first time I use Filebeat, and I learned some basic knowledge of ELK from the online tutorial. Basically, I would like to pass the log information from the web-tier instance to the ELK server instanc… --- ## [ELK - pulling entire log files, not just query lines out of Kibana](https://discuss.elastic.co/t/elk-pulling-entire-log-files-not-just-query-lines-out-of-kibana/47335)
**Author:** [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\ **Replies:** 6\ **Last updated:** [August 26, 2016, 7:30pm UTC](https://discuss.elastic.co/t/elk-pulling-entire-log-files-not-just-query-lines-out-of-kibana/47335 "2016-08-26T19:30:26Z")
Hi, I brought ELK in and scaled and it is fine -- but some of my customers want the entire logfile. Is there a way from ELK to reassemble the entire logfile as it originally came in at a prior point-in-time? --- ## [\[parsing date error\]: date\_time\_parse\_exception: Failed to parse with all enclosed parsers](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [January 12, 2021, 11:13am UTC](https://discuss.elastic.co/t/parsing-date-error-date-time-parse-exception-failed-to-parse-with-all-enclosed-parsers/260804 "2021-01-12T11:13:51Z")
Hello, I am using elasticsearch, Kibana and Logstash all version 7.10.1 I would like to ingest data from URLhaus, so I have created a template like that: PUT \_template/urlhaus { "index\_patterns": \["urlhaus-\*"\], "… --- ## [Size limitations?](https://discuss.elastic.co/t/size-limitations/4065)
**Author:** [@Matt\_Paul\_2](https://discuss.elastic.co/u/Matt_Paul_2)\ **Replies:** 5\ **Last updated:** [October 21, 2011, 10:13am UTC](https://discuss.elastic.co/t/size-limitations/4065 "2011-10-21T10:13:32Z")
All, I can't seem to find this in the docs, so if it exists, I apologize, but is there a default size limit for a text field? Also, is there a size limit for an HTTP request body in the REST API? I seem to be having… --- ## [Remove docs.deleted](https://discuss.elastic.co/t/remove-docs-deleted/102469)
**Author:** [@joao](https://discuss.elastic.co/u/joao)\ **Replies:** 6\ **Last updated:** [October 3, 2017, 1:47pm UTC](https://discuss.elastic.co/t/remove-docs-deleted/102469 "2017-10-03T13:47:53Z")
Hi guys, good afternoon. So, I've been trying to remove the docs deleted for some index, but I didn't have success. Could you help me? This is my index: health status index uuid pri re… --- ## [How to calculate the average count per unique term](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213)
**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\ **Replies:** 8\ **Last updated:** [November 1, 2019, 1:06pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213 "2019-11-01T13:06:41Z")
Maybe I need more coffee, but I can't work this out... I have say 10000 documents in a time period, one of the fields in a document is 'type' and there are, say 50 different values for 'type' in this document set. I wa… --- ## [What is ELK data rotation Policy?](https://discuss.elastic.co/t/what-is-elk-data-rotation-policy/24772)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [July 2, 2015, 5:23pm UTC](https://discuss.elastic.co/t/what-is-elk-data-rotation-policy/24772 "2015-07-02T17:23:00Z")
Hi Experts, I have couple of questions 1) What is ELK default data rotation policy. Like how data expires , where it moves once expire,where we can define after such period or time old data will archive ? 2) What is t… --- ## [Escaping characters in search](https://discuss.elastic.co/t/escaping-characters-in-search/266955)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [March 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/escaping-characters-in-search/266955 "2021-03-11T14:05:06Z")
So this may be an issue with my mapping or something else. Im using FSCrawler to crawl a index and put the docs in Elastic, that works fine the issue comes when i try and search on it, im using default FSCrawler and Ela… --- ## [Where do Kibana stored dashboards, saved searches, visualization reports?](https://discuss.elastic.co/t/where-do-kibana-stored-dashboards-saved-searches-visualization-reports/76866)
**Author:** [@Jayanna\_Hallur](https://discuss.elastic.co/u/Jayanna_Hallur)\ **Replies:** 3\ **Last updated:** [February 28, 2017, 10:15pm UTC](https://discuss.elastic.co/t/where-do-kibana-stored-dashboards-saved-searches-visualization-reports/76866 "2017-02-28T22:15:53Z")
Hi I would like where the Kibana stored all the user saved configurations such as dashboards/saved searches/visualization reports. Can we configure Kibana to store these configurations in RDS or S3 or any shared fi… --- ## [ES 7.4 Field \[start\_time\] of type \[keyword\] does not support custom formats](https://discuss.elastic.co/t/es-7-4-field-start-time-of-type-keyword-does-not-support-custom-formats/241554)
**Author:** [@ghirsch](https://discuss.elastic.co/u/ghirsch)\ **Replies:** 5\ **Last updated:** [July 17, 2020, 1:55am UTC](https://discuss.elastic.co/t/es-7-4-field-start-time-of-type-keyword-does-not-support-custom-formats/241554 "2020-07-17T01:55:10Z")
Hi, I have an elasticsearch index with dynamic field mapping. I am inserting a log into the index with a field start\_time in the RFC3339 format (e.g. "2020-07-15T23:45:16Z") and until today this field was getting discove… --- ## [Rolling Restart an Elasticsearch Cluster with Ansible](https://discuss.elastic.co/t/rolling-restart-an-elasticsearch-cluster-with-ansible/19851)
**Author:** [@labrown](https://discuss.elastic.co/u/labrown)\ **Replies:** 1\ **Last updated:** [September 18, 2014, 5:43am UTC](https://discuss.elastic.co/t/rolling-restart-an-elasticsearch-cluster-with-ansible/19851 "2014-09-18T05:43:51Z")
I've come up with what I think is a safe way to rolling restart an Elasticsearch cluster using Ansible handlers. Why is this needed? Even if you use a serial setting to limit the number of nodes processed at on… --- ## [Detecting inactive users in Active Directory](https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650)
**Author:** [@Elnur\_Abbasov](https://discuss.elastic.co/u/Elnur_Abbasov)\ **Replies:** 5\ **Last updated:** [January 25, 2023, 12:29am UTC](https://discuss.elastic.co/t/detecting-inactive-users-in-active-directory/323650 "2023-01-25T00:29:39Z")
Hey All, I need to detect inactive users in Active Directory using Elastic SIEM. Any ideas how can I do that using EQL? I implemented the detection login in Splunk by using lookup files where I write to a lookup file al… --- ## [Harvester started for file but not reading logs](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062)
**Author:** [@Vaibhav\_Kumar\_Jain](https://discuss.elastic.co/u/Vaibhav_Kumar_Jain)\ **Replies:** 2\ **Last updated:** [June 25, 2019, 5:36am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062 "2019-06-25T05:36:47Z")
\--------------------filebeat.log----------------------- 2019-06-24T12:26:31.687+0530 INFO \[monitoring\] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":375},"t… --- ## [Limiting number of CPU usage in filebeat](https://discuss.elastic.co/t/limiting-number-of-cpu-usage-in-filebeat/161490)
**Author:** [@Rishav\_Anand](https://discuss.elastic.co/u/Rishav_Anand)\ **Replies:** 6\ **Last updated:** [January 2, 2019, 12:53pm UTC](https://discuss.elastic.co/t/limiting-number-of-cpu-usage-in-filebeat/161490 "2019-01-02T12:53:49Z")
I want to limit the CPU usage by filebeat . I have tried using "max\_procs" but it doesn't seem to work . This high CPU usage may affect the performance of my app in production . My filebeat.yml is same as this link but … --- ## [Setting TimeZone to Elasticsearch on Docker](https://discuss.elastic.co/t/setting-timezone-to-elasticsearch-on-docker/79264)
**Author:** [@byjg](https://discuss.elastic.co/u/byjg)\ **Replies:** 0\ **Last updated:** [March 20, 2017, 1:57pm UTC](https://discuss.elastic.co/t/setting-timezone-to-elasticsearch-on-docker/79264 "2017-03-20T13:57:23Z")
HI, I am using Elasticsearch and Kibana on Docker machines provided by Elastic.co version 5.2.2. All works fine but I CANNOT set the timestamp for the docker machine where the Elasticsearch is running, but Kibana is f… --- ## [Cannot read data from Elastic 6.0: "error":"Content-Type header \[text/plain\] is not supported","status":406](https://discuss.elastic.co/t/cannot-read-data-from-elastic-6-0-error-content-type-header-text-plain-is-not-supported-status-406/116366)
**Author:** [@betty](https://discuss.elastic.co/u/betty)\ **Replies:** 3\ **Last updated:** [January 22, 2018, 1:35am UTC](https://discuss.elastic.co/t/cannot-read-data-from-elastic-6-0-error-content-type-header-text-plain-is-not-supported-status-406/116366 "2018-01-22T01:35:07Z")
Hi experts, I create a client in java and want to get the query results from index but got the 406 error: "Content-Type header \[text/plain\] is not supported","status":406. Java platform: 1.6 ES version: 6.0 Below is… --- ## [Multiple Indices - Index Documents with same ID - Treat as single document when aggregating](https://discuss.elastic.co/t/multiple-indices-index-documents-with-same-id-treat-as-single-document-when-aggregating/196754)
**Author:** [@gnukev](https://discuss.elastic.co/u/gnukev)\ **Replies:** 8\ **Last updated:** [September 18, 2019, 1:08pm UTC](https://discuss.elastic.co/t/multiple-indices-index-documents-with-same-id-treat-as-single-document-when-aggregating/196754 "2019-09-18T13:08:46Z")
Would the following be a possibility? Index A - Document A { \_id: 123456789, name: XXXX, address: XXXX } Index B - Document A { \_id: 123456789, biography: XXXXXyyyXXXXyyyyXXXXyyyyXXXX } And then I do a terms ag… --- ## ["No module named elasticsearch"](https://discuss.elastic.co/t/no-module-named-elasticsearch/16116)
**Author:** [@Eric\_Greene](https://discuss.elastic.co/u/Eric_Greene)\ **Replies:** 2\ **Last updated:** [March 3, 2014, 7:07pm UTC](https://discuss.elastic.co/t/no-module-named-elasticsearch/16116 "2014-03-03T19:07:42Z")
Hi I am getting started using elasticsearch. I want to try to use the python elasticsearch client . I ran pip install elasticsearch. Installation seems successful. But when I try to import elasticsearch, … --- ## [Deep Pagination with scroll(100 millions of docs) could be a problem?](https://discuss.elastic.co/t/deep-pagination-with-scroll-100-millions-of-docs-could-be-a-problem/71611)
**Author:** [@Felipe\_Santos](https://discuss.elastic.co/u/Felipe_Santos)\ **Replies:** 6\ **Last updated:** [January 14, 2017, 7:23pm UTC](https://discuss.elastic.co/t/deep-pagination-with-scroll-100-millions-of-docs-could-be-a-problem/71611 "2017-01-14T19:23:02Z")
I have a lot of background tasks which needs paginate arround 15 millions of documents on avarage, this tasks needs to run a lot of times, the cluster has arround 100 millions of documents. The same elasticsearch is us… --- ## [How to set size limit in GET query](https://discuss.elastic.co/t/how-to-set-size-limit-in-get-query/169338)
**Author:** [@smidev11](https://discuss.elastic.co/u/smidev11)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 9:17am UTC](https://discuss.elastic.co/t/how-to-set-size-limit-in-get-query/169338 "2019-02-21T09:17:22Z")
I observed that if my index contains say 6 entry(document) and if I run the query with "size" == 25000 , I am getting following error \> Result window is too large, from + size must be less than or equal to: \[10000\] but… --- ## [Elastic/Kibana integration with TheHive](https://discuss.elastic.co/t/elastic-kibana-integration-with-thehive/312454)
**Author:** [@Kara1990](https://discuss.elastic.co/u/Kara1990)\ **Replies:** 0\ **Last updated:** [August 19, 2022, 10:08am UTC](https://discuss.elastic.co/t/elastic-kibana-integration-with-thehive/312454 "2022-08-19T10:08:26Z")
Hi. Is there a guide somewhere how to take all the information from the alarm in kibana over to TheHive via webhook? What I'm looking for is when an alarm is triggered, then all data regarding the alarm must be transfe… --- ## [Client SSL Handshake Issues](https://discuss.elastic.co/t/client-ssl-handshake-issues/115167)
**Author:** [@Senor](https://discuss.elastic.co/u/Senor)\ **Replies:** 6\ **Last updated:** [January 16, 2018, 4:43pm UTC](https://discuss.elastic.co/t/client-ssl-handshake-issues/115167 "2018-01-16T16:43:40Z")
I am running an Elasticsearch 6.1.1 cluster with 9 nodes on Ubuntu 16.04.3 running JVM 9. One node is a dedicated master, two more are master-eligible and data, and the rest are data nodes. I have setup SSL by following… --- ## [Painless scripted fields with regex](https://discuss.elastic.co/t/painless-scripted-fields-with-regex/121430)
**Author:** [@bluemalkin](https://discuss.elastic.co/u/bluemalkin)\ **Replies:** 7\ **Last updated:** [March 2, 2018, 2:32am UTC](https://discuss.elastic.co/t/painless-scripted-fields-with-regex/121430 "2018-03-02T02:32:52Z")
Hi, ES/Kibana version: 6.2.1 + fluentd I'm trying to workout why simple regex do not work I have enabled script.painless.regex.enabled in elasticsearch.yml I've followed Using Painless in Kibana scripted fields | Ela… --- ## [More than one namespace configured accessing 'output'](https://discuss.elastic.co/t/more-than-one-namespace-configured-accessing-output/146646)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 1\ **Last updated:** [August 30, 2018, 12:44pm UTC](https://discuss.elastic.co/t/more-than-one-namespace-configured-accessing-output/146646 "2018-08-30T12:44:43Z")
I am using two filebeat configuration files. One config file is sending to Elasticsearch (filebeat.yml) and the other is sending to Logstash (filebeat2.yml). I chain these two config files with the following command: co… --- ## [Capture HTTPS Certificate Expiration Dates using Heartbeat](https://discuss.elastic.co/t/capture-https-certificate-expiration-dates-using-heartbeat/77865)
**Author:** [@joedissmeyer](https://discuss.elastic.co/u/joedissmeyer)\ **Replies:** 3\ **Last updated:** [March 13, 2017, 11:18am UTC](https://discuss.elastic.co/t/capture-https-certificate-expiration-dates-using-heartbeat/77865 "2017-03-13T11:18:36Z")
I had the opportunity to ask @tudor this question at ElasticOn17 -- this might be a feature request. Q: For the heartbeat HTTP monitor type, is it possible for Heartbeat to capture the HTTPS certificate expiration date… --- ## [How can i extract data from elasticsearch](https://discuss.elastic.co/t/how-can-i-extract-data-from-elasticsearch/124347)
**Author:** [@djobes31770](https://discuss.elastic.co/u/djobes31770)\ **Replies:** 3\ **Last updated:** [March 19, 2018, 6:56pm UTC](https://discuss.elastic.co/t/how-can-i-extract-data-from-elasticsearch/124347 "2018-03-19T18:56:30Z")
I need to extract/export all winlogbeat data from once elk instance and reload/replay it into another for testing. What is the best and easiest way to get this done. --- ## [🎉 What’s new in Elastic 8.13](https://discuss.elastic.co/t/what-s-new-in-elastic-8-13/356231)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [March 27, 2024, 8:07am UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-8-13/356231 "2024-03-27T08:07:13Z")
Learn about Elastic 8.13 which includes the GA of Amazon Bedrock support within the Elastic AI Assistant for Observability, new vector search configurations, an integration filter plugin for Logstash, and more. Elast… --- ## [Do we need jdk and jre to run logstash and elasticsearch or jre itself enough?](https://discuss.elastic.co/t/do-we-need-jdk-and-jre-to-run-logstash-and-elasticsearch-or-jre-itself-enough/28260)
**Author:** [@thiruna](https://discuss.elastic.co/u/thiruna)\ **Replies:** 4\ **Last updated:** [September 3, 2015, 10:42pm UTC](https://discuss.elastic.co/t/do-we-need-jdk-and-jre-to-run-logstash-and-elasticsearch-or-jre-itself-enough/28260 "2015-09-03T22:42:44Z")
Hi, We are using below version of Java for logstash and elasticsearch in our environment. java -version java version "1.7.0\_51" Java(TM) SE Runtime Environment (build 1.7.0\_51-b13) Java HotSpot(TM) 64-Bit Server VM (bu… --- ## [ELK 8.x Unable to create "Log threshold" Alert Rule for new Index - "There aren't any options available"](https://discuss.elastic.co/t/elk-8-x-unable-to-create-log-threshold-alert-rule-for-new-index-there-arent-any-options-available/314933)
**Author:** [@Cezary](https://discuss.elastic.co/u/Cezary)\ **Replies:** 2\ **Last updated:** [September 30, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elk-8-x-unable-to-create-log-threshold-alert-rule-for-new-index-there-arent-any-options-available/314933 "2022-09-30T15:43:11Z")
Hello Guys, Fresh install of ELK 8.x New index syslog-\* created via logstash Logstash config: input { tcp { port =\> 5000 type =\> syslog mode =\> "server" ssl\_enable =\> true ssl\_verify =\> false … --- ## [Filebeat fails to start for multiple prospectors(Exiting: error loading config file: yaml: line 16: did not find expected key)](https://discuss.elastic.co/t/filebeat-fails-to-start-for-multiple-prospectors-exiting-error-loading-config-file-yaml-line-16-did-not-find-expected-key/76652)
**Author:** [@harshavardan25000](https://discuss.elastic.co/u/harshavardan25000)\ **Replies:** 3\ **Last updated:** [February 28, 2017, 4:11pm UTC](https://discuss.elastic.co/t/filebeat-fails-to-start-for-multiple-prospectors-exiting-error-loading-config-file-yaml-line-16-did-not-find-expected-key/76652 "2017-02-28T16:11:37Z")
I configured filebeat to pull two types of log files and my config looks something like this. filebeat: prospectors: - input\_type: log paths: - C:\\softwares\\syslog fields: {log\_type: syslog} … --- ## [Canvas: how to make stacked area chart?](https://discuss.elastic.co/t/canvas-how-to-make-stacked-area-chart/180399)
**Author:** [@aspyct](https://discuss.elastic.co/u/aspyct)\ **Replies:** 4\ **Last updated:** [June 14, 2019, 8:25am UTC](https://discuss.elastic.co/t/canvas-how-to-make-stacked-area-chart/180399 "2019-06-14T08:25:50Z")
Hi, I can't figure out how to create stacked area charts within Canvas. I've noticed the stack parameter in the plot function, but I don't know how to send multiple series into it. I'm using essql to output a datatable… --- ## [How to check current size of the ealastisearch queues defined in threadpool.XXX.queue\_size?](https://discuss.elastic.co/t/how-to-check-current-size-of-the-ealastisearch-queues-defined-in-threadpool-xxx-queue-size/69254)
**Author:** [@habdank](https://discuss.elastic.co/u/habdank)\ **Replies:** 2\ **Last updated:** [December 19, 2016, 7:59am UTC](https://discuss.elastic.co/t/how-to-check-current-size-of-the-ealastisearch-queues-defined-in-threadpool-xxx-queue-size/69254 "2016-12-19T07:59:50Z")
Dears, The parameters named: threadpool.XXX.queue\_size may control the queue sizes. But how to read the current (in real time) size/load on those queues to avoid in runtime overloading Elasticsearch and or to see if … --- ## [Failed to connect to backoff(elasticsearch(http://10.80.1.220:5044)): read: connection reset by peer](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-10-80-1-220-5044-read-connection-reset-by-peer/186342)
**Author:** [@Ahana\_Ambshri](https://discuss.elastic.co/u/Ahana_Ambshri)\ **Replies:** 3\ **Last updated:** [June 18, 2019, 8:53pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-10-80-1-220-5044-read-connection-reset-by-peer/186342 "2019-06-18T20:53:05Z")
Hi, I am getting "Connection reset by peer" error while starting the heartbeat. I have tried almost all the solutions given online but none of them worked. Please find the details below: Elastic Search running on Secur… --- ## ["Incorrect HTTP method for uri" when PUTting \_index\_template](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299)
**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\ **Replies:** 3\ **Last updated:** [June 17, 2020, 9:46am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-when-putting-index-template/237299 "2020-06-17T09:46:36Z")
I am trying to create an index template. Following the examples in getting-started-index-lifecycle-management and indices-templates I'm trying with a PUT request that looks like: http://\:9200/\_index\_t… --- ## [Pushing flush onto pipeline in logs](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-in-logs/92341)
**Author:** [@Romain\_Pelissier](https://discuss.elastic.co/u/Romain_Pelissier)\ **Replies:** 7\ **Last updated:** [July 14, 2017, 2:10am UTC](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-in-logs/92341 "2017-07-14T02:10:28Z")
Hi all! I hope someone could help me because I dig the entire internet without finding a solution.. Here we are: I have a filebeat agent running on pfsense 2.3.x ( filebeat version 6.0.0-alpha3-git877f311 (amd64), libbea… --- ## [Logstash.outputs.elasticsearch : Failed to install template](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-failed-to-install-template/153406)
**Author:** [@Gobinda\_Nandi1](https://discuss.elastic.co/u/Gobinda_Nandi1)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 7:05am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-failed-to-install-template/153406 "2018-10-23T07:05:37Z")
this is logstash conf file input { file { path =\> "/home/skills180/Es/templetes/test2.txt" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" codec =\> "json" } } filter… --- ## [Remote transport exception](https://discuss.elastic.co/t/remote-transport-exception/70981)
**Author:** [@davidn](https://discuss.elastic.co/u/davidn)\ **Replies:** 3\ **Last updated:** [January 10, 2017, 3:37pm UTC](https://discuss.elastic.co/t/remote-transport-exception/70981 "2017-01-10T15:37:12Z")
"statusCode":400,"response":"{\\"error\\":{\\"root\_cause\\":\[{\\"type\\":\\"remote\_transport\_exception\\",\\"reason\\":\\"\[Hk2keL1\]\[127.0.0.1:9300\]\[indices:data/write/index\[p\]\]\\"}\],\\"type\\":\\"illegal\_argument\_exception\\",\\"reason\\"… [Previous page](https://discuss.elastic.co/top.md?page=314&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=316&per_page=50&period=all)