# Top

**URL:** https://discuss.elastic.co/top.md?page=333&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 334

---

## [Elasticsearch plugin is red in Kibana](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-in-kibana/108389)

<div class="topic-metadata">

**Author:** [@kunalpa](https://discuss.elastic.co/u/kunalpa)\
**Replies:** 3\
**Last updated:** [November 21, 2017, 7:44pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-in-kibana/108389 "2017-11-21T19:44:07Z")

</div>

Hi Team, I'm getting "Elasticsearch plugin is red error" and "\[illegal\_argument\_exception\] Rejecting mapping update to \[.kibana\] as the final mapping would have more than 1 type: \[index-pattern, config\]", while accessin…

---

## [How to install Filebeat and Packetbeat on a Raspberry Pi 3](https://discuss.elastic.co/t/how-to-install-filebeat-and-packetbeat-on-a-raspberry-pi-3/80693)

<div class="topic-metadata">

**Author:** [@Ben\_Hoffman](https://discuss.elastic.co/u/Ben_Hoffman)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 5:53am UTC](https://discuss.elastic.co/t/how-to-install-filebeat-and-packetbeat-on-a-raspberry-pi-3/80693 "2017-03-31T05:53:07Z")

</div>

Hello everyone, so I am trying to install Filebeat and Packetbeat on my Raspberry pi 3 model b V1.2 with Kali for ARM I am really struggling with this, I have seen this post but what that person did doesn't work for me…

---

## [Grok is not parsing GREEDYDATA field](https://discuss.elastic.co/t/grok-is-not-parsing-greedydata-field/49704)

<div class="topic-metadata">

**Author:** [@eugeniocesar](https://discuss.elastic.co/u/eugeniocesar)\
**Replies:** 5\
**Last updated:** [May 12, 2016, 8:53pm UTC](https://discuss.elastic.co/t/grok-is-not-parsing-greedydata-field/49704 "2016-05-12T20:53:47Z")

</div>

Hi Everybody! I have been facing a problem using Grok with OpenLDAP log, where it ignores a GREEDYDATA value in my match rule. Here's a working rule example: Source log line: May 9 18:53:01 openldap-master slapd\[456…

---

## [How to send different logs files to different logstash ports](https://discuss.elastic.co/t/how-to-send-different-logs-files-to-different-logstash-ports/95781)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 5\
**Last updated:** [August 5, 2017, 2:14pm UTC](https://discuss.elastic.co/t/how-to-send-different-logs-files-to-different-logstash-ports/95781 "2017-08-05T14:14:05Z")

</div>

I am trying to send different log files on different logstash ports on logstash …like one on 5044 and other on 5043 Here is my filebeat config . can someone help #=========================== Filebeat prospectors ======…

---

## [Painless Script (Miscellaneous functions)](https://discuss.elastic.co/t/painless-script-miscellaneous-functions/92626)

<div class="topic-metadata">

**Author:** [@NounouGeek](https://discuss.elastic.co/u/NounouGeek)\
**Replies:** 8\
**Last updated:** [July 13, 2017, 8:43pm UTC](https://discuss.elastic.co/t/painless-script-miscellaneous-functions/92626 "2017-07-13T20:43:02Z")

</div>

Hello, I have an issue with this painless script file in (/etc/elasticsearch/scripts) to create an entity centric index : //------------------------------------------------------- --------------------------------------…

---

## [Elasticsearch-certutil error](https://discuss.elastic.co/t/elasticsearch-certutil-error/155569)

<div class="topic-metadata">

**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\
**Replies:** 8\
**Last updated:** [November 7, 2018, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-error/155569 "2018-11-07T08:53:10Z")

</div>

Hi, when I issue the command bin/elasticsearch-certutil cert -v --ca elastic-stack-ca.p12 I get following, what could be issue? Exception in thread "main" java.nio.file.NoSuchFileException: elastic-stack-ca.p12 …

---

## [Unexpected error while indexing monitoring document with 7.0](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-with-7-0/176463)

<div class="topic-metadata">

**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\
**Replies:** 3\
**Last updated:** [April 11, 2019, 6:28pm UTC](https://discuss.elastic.co/t/unexpected-error-while-indexing-monitoring-document-with-7-0/176463 "2019-04-11T18:28:29Z")

</div>

I'm trying to update to 7.0.0, and I'm getting lots of these: \[2019-04-11T09:05:47,285\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[elk.nwra.com\] unexpected error while indexing monitoring document org.elasticsearch.xpack.monito…

---

## [Parsing the json object in kibana](https://discuss.elastic.co/t/parsing-the-json-object-in-kibana/69170)

<div class="topic-metadata">

**Author:** [@rashmy](https://discuss.elastic.co/u/rashmy)\
**Replies:** 5\
**Last updated:** [December 15, 2016, 2:58pm UTC](https://discuss.elastic.co/t/parsing-the-json-object-in-kibana/69170 "2016-12-15T14:58:49Z")

</div>

I have installed elastic,logstash and kibana. I am able to pass log file through logstash to elasticsearch and view in kibana. But my data is in json format, how can parse the object into different parts, in kibana. Pl…

---

## [Multiple kibana instance](https://discuss.elastic.co/t/multiple-kibana-instance/141938)

<div class="topic-metadata">

**Author:** [@zekeriya\_tavlasoglu](https://discuss.elastic.co/u/zekeriya_tavlasoglu)\
**Replies:** 7\
**Last updated:** [July 30, 2018, 1:25pm UTC](https://discuss.elastic.co/t/multiple-kibana-instance/141938 "2018-07-30T13:25:58Z")

</div>

Hi , i want to run multiple kibana instances on the same elastic server but i couldn't find out the solution. There is a kibana.yml file for the configuration. i tried to change server.port parameter but it didn't work…

---

## [How to query for some key in json](https://discuss.elastic.co/t/how-to-query-for-some-key-in-json/9540)

<div class="topic-metadata">

**Author:** [@limac](https://discuss.elastic.co/u/limac)\
**Replies:** 3\
**Last updated:** [November 3, 2012, 1:44pm UTC](https://discuss.elastic.co/t/how-to-query-for-some-key-in-json/9540 "2012-11-03T13:44:37Z")

</div>

Hello all, I am thinking how to index json doc so that I can query by a key value. Any good idea? Like this: the docs look like {"foo":"bar baz", "foo":"bar"} how to query all docs have "bar" for key "foo"? …

---

## [Kibana datatable visualization not displaying all data rows](https://discuss.elastic.co/t/kibana-datatable-visualization-not-displaying-all-data-rows/98486)

<div class="topic-metadata">

**Author:** [@Sarra\_Bouhenni](https://discuss.elastic.co/u/Sarra_Bouhenni)\
**Replies:** 3\
**Last updated:** [September 4, 2017, 12:14pm UTC](https://discuss.elastic.co/t/kibana-datatable-visualization-not-displaying-all-data-rows/98486 "2017-09-04T12:14:30Z")

</div>

Hello, So I’m working with Kibana 5.5.2 and elasticsearch 5.5.2 to create visualizations and dashboards for our log data. I’ve created a new data table visualization but I can’t get all the data of last week to be show…

---

## [Logstash stops processing files after a while](https://discuss.elastic.co/t/logstash-stops-processing-files-after-a-while/944)

<div class="topic-metadata">

**Author:** [@Centopus](https://discuss.elastic.co/u/Centopus)\
**Replies:** 5\
**Last updated:** [May 22, 2015, 5:22am UTC](https://discuss.elastic.co/t/logstash-stops-processing-files-after-a-while/944 "2015-05-22T05:22:49Z")

</div>

Hello I'm having a problem while trying to parse weblogic log files, via file input plugin. After a while (took him around 20 minutes to stop reading anything with debug enabled, last time I've tried it survived 5 minu…

---

## [Where to check indices.store.throttle.max\_bytes\_per\_sec when it is statically set](https://discuss.elastic.co/t/where-to-check-indices-store-throttle-max-bytes-per-sec-when-it-is-statically-set/115790)

<div class="topic-metadata">

**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\
**Replies:** 1\
**Last updated:** [January 19, 2018, 1:22pm UTC](https://discuss.elastic.co/t/where-to-check-indices-store-throttle-max-bytes-per-sec-when-it-is-statically-set/115790 "2018-01-19T13:22:28Z")

</div>

I have updated indices.store.throttle.max\_bytes\_per\_sec value in the yml file but I am unable to see the value when I make a GET call to the path /\_cluster/settings. { "persistent" : { }, "transient" : { } } Howeve…

---

## [Adding new field to existing index in ES 5.6](https://discuss.elastic.co/t/adding-new-field-to-existing-index-in-es-5-6/114854)

<div class="topic-metadata">

**Author:** [@Sridhar](https://discuss.elastic.co/u/Sridhar)\
**Replies:** 7\
**Last updated:** [January 12, 2018, 12:24pm UTC](https://discuss.elastic.co/t/adding-new-field-to-existing-index-in-es-5-6/114854 "2018-01-12T12:24:26Z")

</div>

Hi, I have created a index with 3 field using CSV files. Now I want to add another 2 fields in to the index is this possible? current fields date, country, customer, count. new fields date, country, customer, under…

---

## [Logstash grok filter with syslog](https://discuss.elastic.co/t/logstash-grok-filter-with-syslog/64386)

<div class="topic-metadata">

**Author:** [@tolasto](https://discuss.elastic.co/u/tolasto)\
**Replies:** 8\
**Last updated:** [November 2, 2016, 8:02pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-with-syslog/64386 "2016-11-02T20:02:37Z")

</div>

Hi, I'm tryin to get a filter for this logfile with logstash: 2016-10-30T13:23:47+01:00 router.lan pppd\[12566\]: local IP address 1.2.3.4 The Grok debugger can resolve the fields nicely with this expression: %{DATE:…

---

## [Copy\_to an dynamic or customised field](https://discuss.elastic.co/t/copy-to-an-dynamic-or-customised-field/157310)

<div class="topic-metadata">

**Author:** [@snak](https://discuss.elastic.co/u/snak)\
**Replies:** 2\
**Last updated:** [November 19, 2018, 9:23am UTC](https://discuss.elastic.co/t/copy-to-an-dynamic-or-customised-field/157310 "2018-11-19T09:23:21Z")

</div>

How to configure copy\_to from one dynamic template to another dynamic template. Here is a sample Config: - "dynamic\_templates": \[{ "template\_entity\_name\_": { "match": "entity\_name\_\*", "match\_mapping\_type": "string", "…

---

## [Why is it so hard to just grab a file and upload to Elasticsearch?](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392)

<div class="topic-metadata">

**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\
**Replies:** 6\
**Last updated:** [August 18, 2019, 3:12am UTC](https://discuss.elastic.co/t/why-is-it-so-hard-to-just-grab-a-file-and-upload-to-elasticsearch/195392 "2019-08-18T03:12:13Z")

</div>

so, I was wondering this today: why is it so hard to just grab a log file and punch it into Elasticsearch? I understand when you need to setup Filebeat listeners, other beats, some Logstash pipelines and such... but what…

---

## [Ruby date parsing](https://discuss.elastic.co/t/ruby-date-parsing/70067)

<div class="topic-metadata">

**Author:** [@aydinnmu](https://discuss.elastic.co/u/aydinnmu)\
**Replies:** 6\
**Last updated:** [January 2, 2017, 6:51am UTC](https://discuss.elastic.co/t/ruby-date-parsing/70067 "2017-01-02T06:51:47Z")

</div>

hi everyone, ruby section of my config file is like below. this works fine. i set the "timeid" and i mailed to me in body section. But it sends as a UTC time value. my timezone is UTC +3. can i change it ? logstash se…

---

## [No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/75516)

<div class="topic-metadata">

**Author:** [@sayanisameer](https://discuss.elastic.co/u/sayanisameer)\
**Replies:** 4\
**Last updated:** [February 21, 2017, 4:10am UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/75516 "2017-02-21T04:10:37Z")

</div>

Hi All, I am getting error while running for ELK. Below is the error. "2017-02-18T01:49:07+11:00 ERR Connecting error publishing events (retrying): dial tcp Y.Y.Y.Y:5044: connectex: No connection could be made because th…

---

## [Display Month name in date histogram](https://discuss.elastic.co/t/display-month-name-in-date-histogram/139078)

<div class="topic-metadata">

**Author:** [@Sunil\_Khullar](https://discuss.elastic.co/u/Sunil_Khullar)\
**Replies:** 3\
**Last updated:** [July 9, 2018, 2:56pm UTC](https://discuss.elastic.co/t/display-month-name-in-date-histogram/139078 "2018-07-09T14:56:01Z")

</div>

Is there a way to display month name in date histogram when using monthly intervals, nstead of 1st date of a month as below

---

## [Elasticsearch-create-enrollment-token is not possible without a keystore ( aka with PEM certificates)](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136)

<div class="topic-metadata">

**Author:** [@DavidDPD](https://discuss.elastic.co/u/DavidDPD)\
**Replies:** 3\
**Last updated:** [June 27, 2023, 7:33am UTC](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-is-not-possible-without-a-keystore-aka-with-pem-certificates/336136 "2023-06-27T07:33:58Z")

</div>

This has been posted a few times, but threads have been auto-closed without an explicit explanation. I'm posting this as this really either needs to be changed/fixed in Elasticsearch, or DOCUMENTED. It does not seem to…

---

## [Permission denied when i'm trying to use elasticsearch command](https://discuss.elastic.co/t/permission-denied-when-im-trying-to-use-elasticsearch-command/296629)

<div class="topic-metadata">

**Author:** [@Arkoos62](https://discuss.elastic.co/u/Arkoos62)\
**Replies:** 5\
**Last updated:** [February 11, 2022, 2:52pm UTC](https://discuss.elastic.co/t/permission-denied-when-im-trying-to-use-elasticsearch-command/296629 "2022-02-11T14:52:07Z")

</div>

Hello there, I am trying to configure basic security on my Elasticsearch production but i'm getting error when i try to launch a command from the path /usr/share/Elasticsearch/bin i'm getting this error ./elasticsearch…

---

## [Search across all fields on Kibana](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499)

<div class="topic-metadata">

**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\
**Replies:** 5\
**Last updated:** [December 23, 2020, 5:25pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499 "2020-12-23T17:25:00Z")

</div>

Hi, I'm sorry to ask this question but I didn't find anything on google on on the forum concerning this. I would like to search, on kibana, on all fields with a simple value. For example, in Discover, into the KQL bar…

---

## [Filebeat : Exiting: No outputs are defined. Please define one under the output section](https://discuss.elastic.co/t/filebeat-exiting-no-outputs-are-defined-please-define-one-under-the-output-section/269478)

<div class="topic-metadata">

**Author:** [@sourabhjain104](https://discuss.elastic.co/u/sourabhjain104)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 1:58pm UTC](https://discuss.elastic.co/t/filebeat-exiting-no-outputs-are-defined-please-define-one-under-the-output-section/269478 "2021-04-07T13:58:09Z")

</div>

Hello All, I am trying to send logs data from my local drive to logstash using filebeat 7.11.0. I was able to do it successfully and also create index pattern in kibana. I wanted to do some modification so I deleted m…

---

## [No search type for \[count\]](https://discuss.elastic.co/t/no-search-type-for-count/101994)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 3\
**Last updated:** [September 27, 2017, 2:49pm UTC](https://discuss.elastic.co/t/no-search-type-for-count/101994 "2017-09-27T14:49:31Z")

</div>

Hi, I am making a query with the following header: "POST /test/\_search?search\_type=count" as I saw in this question, but it results with the following exception: { "error": { "root\_cause": \[ { "type": "illegal…

---

## [How do I grok this Cisco log?](https://discuss.elastic.co/t/how-do-i-grok-this-cisco-log/149049)

<div class="topic-metadata">

**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\
**Replies:** 8\
**Last updated:** [September 28, 2018, 1:09pm UTC](https://discuss.elastic.co/t/how-do-i-grok-this-cisco-log/149049 "2018-09-28T13:09:44Z")

</div>

Hi Thank you for the earlier help, iam progressing in good way. Iam going here is more granular logging and get more information for statistic purpose, at the same time i would like retain some message as it is for use…

---

## [Specifying index name from filebeat to logstash](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704)

<div class="topic-metadata">

**Author:** [@dal](https://discuss.elastic.co/u/dal)\
**Replies:** 8\
**Last updated:** [July 19, 2016, 2:06pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704 "2016-07-19T14:06:14Z")

</div>

I am trying to setup my ELK pipeline. I have filebeat monitoring on one VM and my logstash and elasticsearch instances running on another. When I make an update to the file which specified in filebeat.yml, I see that cha…

---

## [Setting the TLS ServerName to an IP address is not permitted by RFC 6066](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 4\
**Last updated:** [November 30, 2020, 4:36pm UTC](https://discuss.elastic.co/t/setting-the-tls-servername-to-an-ip-address-is-not-permitted-by-rfc-6066/257090 "2020-11-30T16:36:37Z")

</div>

Hello, I am using Elasticsearch and kibana 8.0.0, and it was working perfectly. Today I run git pull and now kibana is not working anymore, when I try to run it, I am getting these errors: (node:48280) \[DEP0123\] Depre…

---

## [Grok filter pattern for nginx](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx/147520)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 8\
**Last updated:** [September 6, 2018, 12:04pm UTC](https://discuss.elastic.co/t/grok-filter-pattern-for-nginx/147520 "2018-09-06T12:04:15Z")

</div>

Hello Team, I am using ELK6.4.0 and filebeat6.4.0. Currently i am sending only my application logs over elasticsearch using filebeat and parse via logstash. But now we want to send the nginx logs (error and access) over…

---

## [How to generate a server certificate for Kibana?](https://discuss.elastic.co/t/how-to-generate-a-server-certificate-for-kibana/167847)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 4\
**Last updated:** [February 16, 2019, 7:41am UTC](https://discuss.elastic.co/t/how-to-generate-a-server-certificate-for-kibana/167847 "2019-02-16T07:41:56Z")

</div>

In https://www.elastic.co/guide/en/kibana/6.6/configuring-tls.html, it says: Generate a server certificate for Kibana. You must either set the certificate’s subjectAltName to the hostname, fully-qualified domain name…

---

## [Query\_string is case sensitive](https://discuss.elastic.co/t/query-string-is-case-sensitive/138054)

<div class="topic-metadata">

**Author:** [@Skrudox](https://discuss.elastic.co/u/Skrudox)\
**Replies:** 7\
**Last updated:** [June 30, 2018, 10:05am UTC](https://discuss.elastic.co/t/query-string-is-case-sensitive/138054 "2018-06-30T10:05:57Z")

</div>

{ "query":{ "bool":{ "must":\[ { "query\_string":{ "query":"\*sony\*", "analyze\_wildcard":true, "default\_field":"title" …

---

## [Compare two fields in logstash](https://discuss.elastic.co/t/compare-two-fields-in-logstash/57506)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 4\
**Last updated:** [August 10, 2016, 6:33am UTC](https://discuss.elastic.co/t/compare-two-fields-in-logstash/57506 "2016-08-10T06:33:15Z")

</div>

Guys, Is it possible to compare two fields in logstash and create a new field out of it. I have a AWS S3 logs where the bytes downloaded is sometimes not equal to the actual file downloaded. So what i am trying to find…

---

## [Kv filter plugin when there are spaces in key and value](https://discuss.elastic.co/t/kv-filter-plugin-when-there-are-spaces-in-key-and-value/41120)

<div class="topic-metadata">

**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\
**Replies:** 4\
**Last updated:** [February 6, 2016, 4:23pm UTC](https://discuss.elastic.co/t/kv-filter-plugin-when-there-are-spaces-in-key-and-value/41120 "2016-02-06T16:23:02Z")

</div>

I am facing challenges in using kv filter plugin. I wanted to split data based on colon : . I have spaces in the key and also value. I wanted to have the data filtered with the key (entire key) with the spaces removed …

---

## [Java api for Filterbuilders in elasticsearch 2](https://discuss.elastic.co/t/java-api-for-filterbuilders-in-elasticsearch-2/34835)

<div class="topic-metadata">

**Author:** [@mramaprasad](https://discuss.elastic.co/u/mramaprasad)\
**Replies:** 4\
**Last updated:** [November 18, 2015, 7:07pm UTC](https://discuss.elastic.co/t/java-api-for-filterbuilders-in-elasticsearch-2/34835 "2015-11-18T19:07:00Z")

</div>

I am using QueryBuilder qb = null; FilterBuilder fb = null; fb = FilterBuilders.andFilter( FilterBuilders.termsFilter("dbname", searchDBs)) qb = (QueryBuilder) QueryBuilders.queryString("\\""+ searchText+ "\\"").fiel…

---

## [Logstash error : elasticsearch host unreachable](https://discuss.elastic.co/t/logstash-error-elasticsearch-host-unreachable/173080)

<div class="topic-metadata">

**Author:** [@HaranKumar](https://discuss.elastic.co/u/HaranKumar)\
**Replies:** 8\
**Last updated:** [March 21, 2019, 2:38pm UTC](https://discuss.elastic.co/t/logstash-error-elasticsearch-host-unreachable/173080 "2019-03-21T14:38:04Z")

</div>

Hello Community, I have a logstash running in a virtual box Centos system and purpose is for collecting a log file and parsing and sending it to elasticsearch in my other machine in a virtual box. I get \<\> not reachabl…

---

## [How to create multiple index logstash](https://discuss.elastic.co/t/how-to-create-multiple-index-logstash/203691)

<div class="topic-metadata">

**Author:** [@TheSun](https://discuss.elastic.co/u/TheSun)\
**Replies:** 5\
**Last updated:** [October 16, 2019, 4:49am UTC](https://discuss.elastic.co/t/how-to-create-multiple-index-logstash/203691 "2019-10-16T04:49:09Z")

</div>

Hi! I am handling pfsense data with logstash but having problems with indexing. This is my configuration. I have 2 pfsense. 01-inputpf1.conf input { tcp { type =\> "syslog1" port =\> 5140 } } input { udp …

---

## [Kibana visualizations over nested objects](https://discuss.elastic.co/t/kibana-visualizations-over-nested-objects/21996)

<div class="topic-metadata">

**Author:** [@Hayden\_Marchant](https://discuss.elastic.co/u/Hayden_Marchant)\
**Replies:** 4\
**Last updated:** [March 3, 2016, 4:26pm UTC](https://discuss.elastic.co/t/kibana-visualizations-over-nested-objects/21996 "2016-03-03T16:26:54Z")

</div>

We are experimenting with Kibana for creating dashboards over our index, and for some use cases, we need to do aggregations over fields in nested objects of our document. We are having problems with getting visual…

---

## [Combine Log Lines That Share A Unique ID](https://discuss.elastic.co/t/combine-log-lines-that-share-a-unique-id/26502)

<div class="topic-metadata">

**Author:** [@cheeseandpepper](https://discuss.elastic.co/u/cheeseandpepper)\
**Replies:** 3\
**Last updated:** [July 30, 2015, 9:37pm UTC](https://discuss.elastic.co/t/combine-log-lines-that-share-a-unique-id/26502 "2015-07-30T21:37:04Z")

</div>

I've appended a unique id to the very end of every log line that tags a log message as being part of a single http request. Generally an http request has 5 log lines in my application and if there are multiple users, the…

---

## ["type": "parsing\_exception", "reason": "no \[query\] registered for \[filtered\]"](https://discuss.elastic.co/t/type-parsing-exception-reason-no-query-registered-for-filtered/100749)

<div class="topic-metadata">

**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 12:56am UTC](https://discuss.elastic.co/t/type-parsing-exception-reason-no-query-registered-for-filtered/100749 "2017-09-19T00:56:43Z")

</div>

Elasticsearch version: 5.5.1 Kibana version: 5.5.1 OS: Suse linux When I use the command as follow with Kibana, GET /my\_store/products/\_search { "query" : { "filtered" : { "filter" : { "bool" : { "should" : \[ …

---

## [I would like to access nested data from an array](https://discuss.elastic.co/t/i-would-like-to-access-nested-data-from-an-array/71432)

<div class="topic-metadata">

**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\
**Replies:** 6\
**Last updated:** [January 18, 2017, 7:21am UTC](https://discuss.elastic.co/t/i-would-like-to-access-nested-data-from-an-array/71432 "2017-01-18T07:21:57Z")

</div>

I have a data structure looking like this: printed as codec =\> rubydebug { "sequence\_number" =\> 557, "event\_tags" =\> \[ \[0\] { "value" =\> "nacl-st-qkrrfq-ppu-server-6y35vxntjont", …

---

## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/194349)

<div class="topic-metadata">

**Author:** [@CSt](https://discuss.elastic.co/u/CSt)\
**Replies:** 1\
**Last updated:** [August 9, 2019, 6:01am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/194349 "2019-08-09T06:01:57Z")

</div>

I can't start elasticsearch with warning OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. I don't know how can I start it

---

## [Client node and Coordinating nodes](https://discuss.elastic.co/t/client-node-and-coordinating-nodes/82384)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [April 21, 2017, 8:51am UTC](https://discuss.elastic.co/t/client-node-and-coordinating-nodes/82384 "2017-04-21T08:51:54Z")

</div>

Whether the terminology for the Node type Client Node has been changed to Coordinating node starting from the 5.X version of the elasticsearch? I believe functionality-wise there is no change.

---

## [Show url as image in Kibana](https://discuss.elastic.co/t/show-url-as-image-in-kibana/177057)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 5\
**Last updated:** [April 16, 2019, 1:25pm UTC](https://discuss.elastic.co/t/show-url-as-image-in-kibana/177057 "2019-04-16T13:25:14Z")

</div>

Hi, I am working with Kibana 6.x I am trying to use the fields formatter feature in Kibana to show a field as a URL. The field name is thumbnail\_path and it contains a full path to a jpg file I have changed the field…

---

## [Kibana 5.1 possible to calculate time difference and place it in a field in kibana at runtime?](https://discuss.elastic.co/t/kibana-5-1-possible-to-calculate-time-difference-and-place-it-in-a-field-in-kibana-at-runtime/73387)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [January 31, 2017, 4:35pm UTC](https://discuss.elastic.co/t/kibana-5-1-possible-to-calculate-time-difference-and-place-it-in-a-field-in-kibana-at-runtime/73387 "2017-01-31T16:35:46Z")

</div>

Hi there, I know I can do many cool stuff in logstash, for example calculating time differences and store it in a field. Now my question, is it possible to do such stuff in kibana in realtime too? Say, I have followi…

---

## [How to do a scatter plot? (Released in Kibana 4.1?)](https://discuss.elastic.co/t/how-to-do-a-scatter-plot-released-in-kibana-4-1/27738)

<div class="topic-metadata">

**Author:** [@bw99](https://discuss.elastic.co/u/bw99)\
**Replies:** 2\
**Last updated:** [August 20, 2015, 10:16am UTC](https://discuss.elastic.co/t/how-to-do-a-scatter-plot-released-in-kibana-4-1/27738 "2015-08-20T10:16:48Z")

</div>

How do I do a scatter plot in Kibana? The product description says I can: "To better understand large volumes of data, easily create bar charts, line and scatter plots, histograms, pie charts, and maps." https://www.el…

---

## [Get dashboard list](https://discuss.elastic.co/t/get-dashboard-list/46100)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 6\
**Last updated:** [April 3, 2016, 1:34pm UTC](https://discuss.elastic.co/t/get-dashboard-list/46100 "2016-04-03T13:34:40Z")

</div>

Hi, is it possible with a url like xx.xx.xx.xx:9200/??? to show the list of dashboards ? or with a curl command, or directly with bash command ... ? Thanks

---

## [How to create Grok Filter Pattern for Tomcat logs](https://discuss.elastic.co/t/how-to-create-grok-filter-pattern-for-tomcat-logs/107143)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 4\
**Last updated:** [November 15, 2017, 6:57am UTC](https://discuss.elastic.co/t/how-to-create-grok-filter-pattern-for-tomcat-logs/107143 "2017-11-15T06:57:12Z")

</div>

Jun 29, 2008 11:16:20 AM org.apache.catalina.core.ApplicationContext log INFO: ContextListener: contextInitialized() Jun 29, 2008 11:16:20 AM org.apache.catalina.core.ApplicationContext log INFO: SessionListener: cont…

---

## [\[http.publish\_host\] was printed as \[ip:port\] instead of \[hostname/ip:port\]](https://discuss.elastic.co/t/http-publish-host-was-printed-as-ip-port-instead-of-hostname-ip-port/170820)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 7\
**Last updated:** [April 3, 2019, 1:22am UTC](https://discuss.elastic.co/t/http-publish-host-was-printed-as-ip-port-instead-of-hostname-ip-port/170820 "2019-04-03T01:22:04Z")

</div>

Hello, ES, periodically, emitting the following log: \[2019-03-05T04:17:38,592\]\[WARN \]\[o.e.d.h.HttpInfo \] \[es-node-01\] \[http.publish\_host\] was printed as \[ip:port\] instead of \[hostname/ip:port\]. This format is d…

---

## [Rally 2.5.0](https://discuss.elastic.co/t/rally-2-5-0/307970)

<div class="topic-metadata">

**Author:** [@Quentin\_Pradet](https://discuss.elastic.co/u/Quentin_Pradet)\
**Replies:** 0\
**Last updated:** [June 23, 2022, 9:05am UTC](https://discuss.elastic.co/t/rally-2-5-0/307970 "2022-06-23T09:05:42Z")

</div>

We have just released Rally 2.5.0. Highlights: We introduced the field-caps operation type We fully support the ZGC garbage collector We fixed an issue for Python 3.10 with use\_ssl: True that many users were hitting F…

---

## [Interactive Quick Start guides for Elastic](https://discuss.elastic.co/t/interactive-quick-start-guides-for-elastic/246957)

<div class="topic-metadata">

**Author:** [@brian.reitz](https://discuss.elastic.co/u/brian.reitz)\
**Replies:** 0\
**Last updated:** [August 31, 2020, 1:40pm UTC](https://discuss.elastic.co/t/interactive-quick-start-guides-for-elastic/246957 "2020-08-31T13:40:23Z")

</div>

Elastic Quick Start guides are here. These free, 15-minute tutorials give you a quick and flexible way to build your skills in Elastic Workplace Search, APM, logging, and more. Start today at elastic.co/training/free.

[Previous page](https://discuss.elastic.co/top.md?page=332&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=334&per_page=50&period=all)
