# Top

**URL:** https://discuss.elastic.co/top.md?page=339&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 340

---

## [Unable to create Kafka consumer from given configuration](https://discuss.elastic.co/t/unable-to-create-kafka-consumer-from-given-configuration/68609)

<div class="topic-metadata">

**Author:** [@Haomeng](https://discuss.elastic.co/u/Haomeng)\
**Replies:** 4\
**Last updated:** [December 20, 2016, 11:36am UTC](https://discuss.elastic.co/t/unable-to-create-kafka-consumer-from-given-configuration/68609 "2016-12-20T11:36:31Z")

</div>

I run with logstash5.0 kafka plugin, got below message, and not sure why is it a ArgumentError, and which argument is wrong, any ideas?? \[2016-12-09T16:32:43,420\]\[DEBUG\]\[org.apache.kafka.clients.consumer.KafkaConsumer\]…

---

## [Restoring a snapshot from one machine to a different machine](https://discuss.elastic.co/t/restoring-a-snapshot-from-one-machine-to-a-different-machine/19104)

<div class="topic-metadata">

**Author:** [@Donald\_Cha](https://discuss.elastic.co/u/Donald_Cha)\
**Replies:** 4\
**Last updated:** [October 21, 2014, 11:56am UTC](https://discuss.elastic.co/t/restoring-a-snapshot-from-one-machine-to-a-different-machine/19104 "2014-10-21T11:56:22Z")

</div>

I would like to use the Snapshot functionality to move indices from an OLD server to a NEW server. My approach to do this task was to take a snapshot from OLD server, copy the snapshot over to the NEW server (I zippe…

---

## [Update plus With Script in Bulk](https://discuss.elastic.co/t/update-plus-with-script-in-bulk/157376)

<div class="topic-metadata">

**Author:** [@Loreto\_Parisi](https://discuss.elastic.co/u/Loreto_Parisi)\
**Replies:** 5\
**Last updated:** [November 21, 2018, 4:54pm UTC](https://discuss.elastic.co/t/update-plus-with-script-in-bulk/157376 "2018-11-21T16:54:10Z")

</div>

I'm using the bulk api for update actions with doc\_as\_upsert flag, in order to insert or update a document. This works ok. Now I would like to run a script as well for new or updated documents. Shall I use the script tag…

---

## [Mapping Time field without date](https://discuss.elastic.co/t/mapping-time-field-without-date/43056)

<div class="topic-metadata">

**Author:** [@vgupta](https://discuss.elastic.co/u/vgupta)\
**Replies:** 3\
**Last updated:** [March 1, 2016, 6:29am UTC](https://discuss.elastic.co/t/mapping-time-field-without-date/43056 "2016-03-01T06:29:03Z")

</div>

Hi In my logs, I have time field that only capture the time of the day. What should be mapping of this field should be in Elastic. For e.g. 07:10:20 AM 08:20:50 PM If I define the mapping as date with "forma…

---

## [Certificate for \<localhost\> doesn't match any of the subject alternative names](https://discuss.elastic.co/t/certificate-for-localhost-doesnt-match-any-of-the-subject-alternative-names/185903)

<div class="topic-metadata">

**Author:** [@ehcar](https://discuss.elastic.co/u/ehcar)\
**Replies:** 3\
**Last updated:** [June 17, 2019, 2:07pm UTC](https://discuss.elastic.co/t/certificate-for-localhost-doesnt-match-any-of-the-subject-alternative-names/185903 "2019-06-17T14:07:01Z")

</div>

I'm running Elasticsearch 7.01 on Ubuntu 18.04 LTS with SSL and security enabled. I'm having trouble configuring the input section of a new Watcher event on a cluster that uses SSL certs that were generated by the bin/e…

---

## [Inconsistent API Response "error: no handler found for uri"](https://discuss.elastic.co/t/inconsistent-api-response-error-no-handler-found-for-uri/297086)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 4\
**Last updated:** [February 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/inconsistent-api-response-error-no-handler-found-for-uri/297086 "2022-02-15T19:07:50Z")

</div>

Hey, doing API POST Requests via Python (on MacOS) I did: elastic\_client.update(index='.internal.alerts-security.alerts-default-000001',id='a9136c19ccfd95123cb2cf5697affbbdeb5a35c785ced06071f2777881aa33f7', body={"doc":…

---

## [Watcher / Deprecation: \[types removal\] Specifying types in document index requests is deprecated, use the typeless endpoints instead (/{index}/\_doc/{id}, /{index}/\_doc, or /{index}/\_create/{id})](https://discuss.elastic.co/t/watcher-deprecation-types-removal-specifying-types-in-document-index-requests-is-deprecated-use-the-typeless-endpoints-instead-index-doc-id-index-doc-or-index-create-id/216800)

<div class="topic-metadata">

**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\
**Replies:** 8\
**Last updated:** [January 28, 2020, 9:45pm UTC](https://discuss.elastic.co/t/watcher-deprecation-types-removal-specifying-types-in-document-index-requests-is-deprecated-use-the-typeless-endpoints-instead-index-doc-id-index-doc-or-index-create-id/216800 "2020-01-28T21:45:17Z")

</div>

Hello, When trying to insert a watcher in ElasticSearch: PUT /watcher/watch/pricealert { "watch": { "trigger": { "schedule": { "interval": "1m" } }, "input": { "chain": { "inputs": \[ { "first": { "search"…

---

## [Mapping for Java HashMap](https://discuss.elastic.co/t/mapping-for-java-hashmap/15215)

<div class="topic-metadata">

**Author:** [@Peter\_Webber](https://discuss.elastic.co/u/Peter_Webber)\
**Replies:** 6\
**Last updated:** [June 20, 2014, 12:17am UTC](https://discuss.elastic.co/t/mapping-for-java-hashmap/15215 "2014-06-20T00:17:46Z")

</div>

I had a look at the mapping ES created automatically for one of my indices, and found something that's not quite right: .... "annotations" : { "properties" : { "ids" : { "…

---

## [Log4J](https://discuss.elastic.co/t/log4j/95345)

<div class="topic-metadata">

**Author:** [@whgibbo](https://discuss.elastic.co/u/whgibbo)\
**Replies:** 1\
**Last updated:** [August 1, 2017, 2:14pm UTC](https://discuss.elastic.co/t/log4j/95345 "2017-08-01T14:14:45Z")

</div>

Hi, I'm new to using Filebeats/Logstash and have a application that is using Log4J and wanted to know what was the best option to allow for searching/filters based on the information in the log file from Kibana.. Here …

---

## [Error on filebeat -ERR Failed to publish events caused by: read tcp](https://discuss.elastic.co/t/error-on-filebeat-err-failed-to-publish-events-caused-by-read-tcp/89740)

<div class="topic-metadata">

**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\
**Replies:** 5\
**Last updated:** [June 19, 2017, 2:21pm UTC](https://discuss.elastic.co/t/error-on-filebeat-err-failed-to-publish-events-caused-by-read-tcp/89740 "2017-06-19T14:21:39Z")

</div>

Hello , i am seeing following errors in logs can someone help 2017-06-16T11:39:30-04:00 INFO Error publishing events (retrying): read tcp 10.140.76.11:37670-\>10.140.223.89:5044: i/o timeout 2017-06-16T11:39:36-04:00 …

---

## [Add new storage for elasticsearch](https://discuss.elastic.co/t/add-new-storage-for-elasticsearch/164273)

<div class="topic-metadata">

**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\
**Replies:** 1\
**Last updated:** [January 15, 2019, 10:14am UTC](https://discuss.elastic.co/t/add-new-storage-for-elasticsearch/164273 "2019-01-15T10:14:06Z")

</div>

Hello! I need some help on Elasticsearch and adding another storage device in Elastic. The thing is: I have a server running Elasticsearch, Logstash and Kibana. But Elasticsearch data path is running on a disk with only…

---

## [Ruby filter raises error on event.delete](https://discuss.elastic.co/t/ruby-filter-raises-error-on-event-delete/36471)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 7\
**Last updated:** [December 8, 2015, 12:43pm UTC](https://discuss.elastic.co/t/ruby-filter-raises-error-on-event-delete/36471 "2015-12-08T12:43:55Z")

</div>

Got a ruby filter: ruby { code =\> " event.delete('message') if event\['message'\].empty? $DROP\_STATS = %w\[unwantedstat1 unwantedstat2 unwantedstat3\] event.cancel if event\['stat'\] and $DROP\_STATS.include?(event\['stat'…

---

## [Portal or Plugin to create new watches](https://discuss.elastic.co/t/portal-or-plugin-to-create-new-watches/33376)

<div class="topic-metadata">

**Author:** [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)\
**Replies:** 4\
**Last updated:** [November 3, 2015, 8:14am UTC](https://discuss.elastic.co/t/portal-or-plugin-to-create-new-watches/33376 "2015-11-03T08:14:25Z")

</div>

Hi there! I've been wondering something about Watcher. It's nice we can make watches and all but as far as the tutorials go, you can only make them using your terminal. That isn't really user friendly because you have …

---

## [Elasticsearch being open source](https://discuss.elastic.co/t/elasticsearch-being-open-source/341632)

<div class="topic-metadata">

**Author:** [@JasonGoldman](https://discuss.elastic.co/u/JasonGoldman)\
**Replies:** 1\
**Last updated:** [August 25, 2023, 7:56am UTC](https://discuss.elastic.co/t/elasticsearch-being-open-source/341632 "2023-08-25T07:56:31Z")

</div>

The GitHub repository of Elasticsearch and Elastic's website should not be afraid to call Elasticsearch "open source". The upcoming release of the Open Source Definition (v1.11) will acknowledge that Server Side Public L…

---

## [Query @timestamp return epoch time](https://discuss.elastic.co/t/query-timestamp-return-epoch-time/87796)

<div class="topic-metadata">

**Author:** [@mdidomenico](https://discuss.elastic.co/u/mdidomenico)\
**Replies:** 3\
**Last updated:** [June 5, 2017, 9:31pm UTC](https://discuss.elastic.co/t/query-timestamp-return-epoch-time/87796 "2017-06-05T21:31:11Z")

</div>

When i query elasticsearch the @timestamp field comes back at iso8601 format. is there a way to get the field back as epoch time instead? the @timestamp field in my index is the regular 'date' field for elastic search. …

---

## [Load CSV File with Logstash and mutate fields in numbers](https://discuss.elastic.co/t/load-csv-file-with-logstash-and-mutate-fields-in-numbers/34427)

<div class="topic-metadata">

**Author:** [@adellarocca](https://discuss.elastic.co/u/adellarocca)\
**Replies:** 4\
**Last updated:** [September 1, 2016, 5:31am UTC](https://discuss.elastic.co/t/load-csv-file-with-logstash-and-mutate-fields-in-numbers/34427 "2016-09-01T05:31:20Z")

</div>

Hi! I'm trying to import a csv file with logstash. I've used csv filter but I need to convert some fields types in float. This is my conf file input{ file { path =\> "/home/alessandro/Scrivania/dataset/aft\_air\_data…

---

## [Searching for null value in kibana](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 4\
**Last updated:** [September 17, 2021, 5:51am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270 "2021-09-17T05:51:14Z")

</div>

Hi Team, I am trying to search a field with null value which is inside a list. my search filed data ex: doc 1: "response": {"AttrList":\[{},{"Id":"DUE\_DATE","value":"10.05.2021"}\]} doc2: "response": {"AttrList":\[{},…

---

## [BIND DNS Pattern](https://discuss.elastic.co/t/bind-dns-pattern/35951)

<div class="topic-metadata">

**Author:** [@omuhans123](https://discuss.elastic.co/u/omuhans123)\
**Replies:** 8\
**Last updated:** [January 16, 2017, 1:45am UTC](https://discuss.elastic.co/t/bind-dns-pattern/35951 "2017-01-16T01:45:38Z")

</div>

Hi All, I am very new to logstash and hope I could get some help regarding splitting a log file from BIND DNS server to be pushed to Elastic Search. The log files have the following format: 04-Nov-2015 08:28:39.261 q…

---

## [Maximum Number of Indexes](https://discuss.elastic.co/t/maximum-number-of-indexes/67364)

<div class="topic-metadata">

**Author:** [@Guruprasad\_Prabhu](https://discuss.elastic.co/u/Guruprasad_Prabhu)\
**Replies:** 4\
**Last updated:** [November 29, 2016, 10:08am UTC](https://discuss.elastic.co/t/maximum-number-of-indexes/67364 "2016-11-29T10:08:21Z")

</div>

Hi, I have just started exploring Elastic Search. I have a requirement similar to below thread I want to store the data specific to brands for efficient search. I have around 4k brands and each brand has around 10k …

---

## [My Elasticsearch nodes are not joining clusters](https://discuss.elastic.co/t/my-elasticsearch-nodes-are-not-joining-clusters/137988)

<div class="topic-metadata">

**Author:** [@warrior](https://discuss.elastic.co/u/warrior)\
**Replies:** 8\
**Last updated:** [July 2, 2018, 10:22pm UTC](https://discuss.elastic.co/t/my-elasticsearch-nodes-are-not-joining-clusters/137988 "2018-07-02T22:22:30Z")

</div>

My cluster nodes has 3 master nodes with discover sets to 2 but they are not able to join. failed to send join request to master OS : redhat and default networking is mutlicast but in Elasticsearch.yml file I'm using u…

---

## [How to search special character?](https://discuss.elastic.co/t/how-to-search-special-character/26838)

<div class="topic-metadata">

**Author:** [@nathaniel](https://discuss.elastic.co/u/nathaniel)\
**Replies:** 2\
**Last updated:** [August 5, 2015, 11:29pm UTC](https://discuss.elastic.co/t/how-to-search-special-character/26838 "2015-08-05T23:29:16Z")

</div>

Hi guys, I am a newbie in Kibana. I have a bunch of logs stored in Elasticsearch which contains IP address, and I want to search them via Kibana. But I realized it is very hard to do so. For say the IP is 127.0.0.1, no m…

---

## [Kibana reporting plugin fails to launch chrome (puppeteer)](https://discuss.elastic.co/t/kibana-reporting-plugin-fails-to-launch-chrome-puppeteer/236195)

<div class="topic-metadata">

**Author:** [@chingis](https://discuss.elastic.co/u/chingis)\
**Replies:** 5\
**Last updated:** [June 10, 2020, 1:18pm UTC](https://discuss.elastic.co/t/kibana-reporting-plugin-fails-to-launch-chrome-puppeteer/236195 "2020-06-10T13:18:57Z")

</div>

Hi, I'm running Kibana 7.7.1 in docker and I get the following errors in output: {"tags":\["error","reporting"\],"pid":1,"message":"The Reporting plugin encountered issues launching Chromium in a self-test. You may have t…

---

## [Migrating Mysql data to elasticsearch using logstash](https://discuss.elastic.co/t/migrating-mysql-data-to-elasticsearch-using-logstash/149395)

<div class="topic-metadata">

**Author:** [@padmaja](https://discuss.elastic.co/u/padmaja)\
**Replies:** 7\
**Last updated:** [September 25, 2018, 7:02am UTC](https://discuss.elastic.co/t/migrating-mysql-data-to-elasticsearch-using-logstash/149395 "2018-09-25T07:02:04Z")

</div>

Hi, I'm new to kibana. i need a brief explanation of how can i convert MySQL data to Elastic Search .I have just installed all the requirements and tried to convert data using jdbc input plugin but, i'm unable to do it.…

---

## [Best Practices for Optimizing Kibana Dashboards for Faster Load Times](https://discuss.elastic.co/t/best-practices-for-optimizing-kibana-dashboards-for-faster-load-times/377109)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 4\
**Last updated:** [May 31, 2025, 4:02pm UTC](https://discuss.elastic.co/t/best-practices-for-optimizing-kibana-dashboards-for-faster-load-times/377109 "2025-05-31T16:02:23Z")

</div>

Hi all, I’ve been tasked by my organization with rebuilding and optimizing a number of Kibana dashboards that are currently experiencing long load times. The performance issues seem to be largely due to the size of the …

---

## [Painless script error adding nested items](https://discuss.elastic.co/t/painless-script-error-adding-nested-items/70896)

<div class="topic-metadata">

**Author:** [@PaulieMac](https://discuss.elastic.co/u/PaulieMac)\
**Replies:** 4\
**Last updated:** [January 25, 2017, 5:08pm UTC](https://discuss.elastic.co/t/painless-script-error-adding-nested-items/70896 "2017-01-25T17:08:44Z")

</div>

Hi, I'm having a bit of an issue getting a script working; basically, the script is intended to add a nested item to an existing doc. To repro, I created an index with this mapping: curl -XPUT 'http://localhost…

---

## [Kibana Uptime (built-in dashboard)](https://discuss.elastic.co/t/kibana-uptime-built-in-dashboard/177644)

<div class="topic-metadata">

**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\
**Replies:** 6\
**Last updated:** [April 26, 2019, 1:27pm UTC](https://discuss.elastic.co/t/kibana-uptime-built-in-dashboard/177644 "2019-04-26T13:27:58Z")

</div>

Setup: ELK with heartbeat v6.7.1 Heartbeat configured to ping 300+ hosts Problem: In the uptime section in Kibana, it shows me my total hosts count, up count, and down count (with accurate numbers) but in the monitor…

---

## [How to filter on unique count aggreagtion](https://discuss.elastic.co/t/how-to-filter-on-unique-count-aggreagtion/160737)

<div class="topic-metadata">

**Author:** [@Peppe\_17](https://discuss.elastic.co/u/Peppe_17)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 3:27pm UTC](https://discuss.elastic.co/t/how-to-filter-on-unique-count-aggreagtion/160737 "2019-01-29T15:27:36Z")

</div>

Hi All, I am trying to filter a unique count aggregation for values \>= 1. With normal counts, min\_doc\_count works fine. So for example I input string {"min\_doc\_count":2} in the Json input section of the bucket. But whe…

---

## [Elasticsearch Flush latency is too high - by Zabbix monitoring](https://discuss.elastic.co/t/elasticsearch-flush-latency-is-too-high-by-zabbix-monitoring/293017)

<div class="topic-metadata">

**Author:** [@KrishnaCh](https://discuss.elastic.co/u/KrishnaCh)\
**Replies:** 6\
**Last updated:** [December 28, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-flush-latency-is-too-high-by-zabbix-monitoring/293017 "2021-12-28T15:01:14Z")

</div>

Hi All, I have a 3-node all master-eligible cluster, with 8 cores vCPU and 40GB memory in each node. We have Zabbix monitoring enabled on all the nodes and its frequently triggering "Flush Latency is too high" and its …

---

## [CSV output plugin](https://discuss.elastic.co/t/csv-output-plugin/88512)

<div class="topic-metadata">

**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\
**Replies:** 7\
**Last updated:** [June 28, 2017, 5:07am UTC](https://discuss.elastic.co/t/csv-output-plugin/88512 "2017-06-28T05:07:26Z")

</div>

Hi, I am trying to take the output of parsed input file into a csv file.I am using logstash 5.1.1 version. Here is my output configuration:- output { csv { path =\> "/root/output/logstash/csvdata.csv" fields =\> \[…

---

## [Hyphen search with wildcard '\*' and normal serach](https://discuss.elastic.co/t/hyphen-search-with-wildcard-and-normal-serach/9984)

<div class="topic-metadata">

**Author:** [@aps](https://discuss.elastic.co/u/aps)\
**Replies:** 6\
**Last updated:** [December 10, 2012, 3:46pm UTC](https://discuss.elastic.co/t/hyphen-search-with-wildcard-and-normal-serach/9984 "2012-12-10T15:46:46Z")

</div>

Hi All, We are stuck in a situation where we need to search exact hyphen query and others as wildcard query. We have 3 document type in our index customer,quotation, and devices respectively. We are allowing user …

---

## [Language translation](https://discuss.elastic.co/t/language-translation/65914)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 1\
**Last updated:** [November 13, 2016, 5:54pm UTC](https://discuss.elastic.co/t/language-translation/65914 "2016-11-13T17:54:01Z")

</div>

Hi, I was at elastic training last week and learned about some of the language transforms analyzers (ICU, etc). More basically, I'm wondering if there are analyzers that will translate text from one language to anothe…

---

## [AccessDeniedException Failed to created node environment error](https://discuss.elastic.co/t/accessdeniedexception-failed-to-created-node-environment-error/1108)

<div class="topic-metadata">

**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\
**Replies:** 1\
**Last updated:** [May 21, 2015, 4:39pm UTC](https://discuss.elastic.co/t/accessdeniedexception-failed-to-created-node-environment-error/1108 "2015-05-21T16:39:04Z")

</div>

I am starting a fresh brand new install of elasticsearch. The init process is failing. If I manually start it with all the options, it works just fine. What I don't get is there is a mysterious back slash showing up. …

---

## [Embed Kibana Visualization in Angular 2+](https://discuss.elastic.co/t/embed-kibana-visualization-in-angular-2/131958)

<div class="topic-metadata">

**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\
**Replies:** 5\
**Last updated:** [May 16, 2018, 9:41am UTC](https://discuss.elastic.co/t/embed-kibana-visualization-in-angular-2/131958 "2018-05-16T09:41:59Z")

</div>

Hi everyone! As title says, i want to embed Kibana Visualizations into my own Angular 2+ app. I know that it's possible to do embedding via iFrame, but i want something different. Navigating through the web and Google, …

---

## [WinlogBeat DNS analytical log capture](https://discuss.elastic.co/t/winlogbeat-dns-analytical-log-capture/167644)

<div class="topic-metadata">

**Author:** [@Jeremya5](https://discuss.elastic.co/u/Jeremya5)\
**Replies:** 1\
**Last updated:** [February 9, 2019, 2:05am UTC](https://discuss.elastic.co/t/winlogbeat-dns-analytical-log-capture/167644 "2019-02-09T02:05:43Z")

</div>

hi all, So the latest version of WinlogBeat now support all windows event logs. Currently i'm collecting (example below) across the my company. I would also like to collect the DNS analytical log, however i'm not sure h…

---

## [Cannot reach kibana in docker](https://discuss.elastic.co/t/cannot-reach-kibana-in-docker/126732)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [April 9, 2018, 11:06am UTC](https://discuss.elastic.co/t/cannot-reach-kibana-in-docker/126732 "2018-04-09T11:06:25Z")

</div>

Hi, I assume it is some stupid little error, but I cannot reach my kibana running in a docker container. (i am quite new to docker, but I like it so far :wink: ) I took following image: docker.elastic.co/kibana/kibana:…

---

## [Input file (json format) through logstash to elasticsearch](https://discuss.elastic.co/t/input-file-json-format-through-logstash-to-elasticsearch/157109)

<div class="topic-metadata">

**Author:** [@shiv94](https://discuss.elastic.co/u/shiv94)\
**Replies:** 5\
**Last updated:** [November 19, 2018, 7:34pm UTC](https://discuss.elastic.co/t/input-file-json-format-through-logstash-to-elasticsearch/157109 "2018-11-19T19:34:04Z")

</div>

Hey, logstash.conf input { file { path =\> "/root/file.json" start\_position =\> "beginning" codec =\> json type =\> "state" } } output { if \[type\] == "state" { elasticsearch { hosts =\> \["localhost:9200"\] index …

---

## [Trouble Starting up Kibana](https://discuss.elastic.co/t/trouble-starting-up-kibana/90316)

<div class="topic-metadata">

**Author:** [@tman](https://discuss.elastic.co/u/tman)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 9:55pm UTC](https://discuss.elastic.co/t/trouble-starting-up-kibana/90316 "2017-06-21T21:55:30Z")

</div>

I am setting up an ELK stack in AWS. I have the kibana server ready. When I started it up initially, it ran fine. I then made a few changes to the /etc/kibana/kibana.yml config file, to allow remote connections instea…

---

## [X-pack monitoring using Kibana error at start up =\> self signed certificate in certificate chain](https://discuss.elastic.co/t/x-pack-monitoring-using-kibana-error-at-start-up-self-signed-certificate-in-certificate-chain/76863)

<div class="topic-metadata">

**Author:** [@Tamilselvan](https://discuss.elastic.co/u/Tamilselvan)\
**Replies:** 7\
**Last updated:** [March 6, 2017, 6:10pm UTC](https://discuss.elastic.co/t/x-pack-monitoring-using-kibana-error-at-start-up-self-signed-certificate-in-certificate-chain/76863 "2017-03-06T18:10:05Z")

</div>

Hi, Here's what I am trying to do (setting up the xpack monitoring feature), I am using elastic search 5.2.1 protected with x-pack 5.2.1. My test set up has 2 data node, 1 master and 1 client nodes. I am running my k…

---

## [X-Pack Pricing](https://discuss.elastic.co/t/x-pack-pricing/87612)

<div class="topic-metadata">

**Author:** [@tejprakash\_sharma](https://discuss.elastic.co/u/tejprakash_sharma)\
**Replies:** 4\
**Last updated:** [June 1, 2017, 5:51am UTC](https://discuss.elastic.co/t/x-pack-pricing/87612 "2017-06-01T05:51:15Z")

</div>

I want to try X-Pack security feature, do I need to purchase a license for the same or It is available in 30 days trail period and what's the pricing model of X-Pack. I have already submitted the request form for pricing…

---

## [Systemd version conflict / bug on journalbeat](https://discuss.elastic.co/t/systemd-version-conflict-bug-on-journalbeat/259569)

<div class="topic-metadata">

**Author:** [@DenizParlak](https://discuss.elastic.co/u/DenizParlak)\
**Replies:** 0\
**Last updated:** [December 24, 2020, 9:06am UTC](https://discuss.elastic.co/t/systemd-version-conflict-bug-on-journalbeat/259569 "2020-12-24T09:06:16Z")

</div>

Hi all, Our journalbeat deployed on the Kubernetes cluster and stopped shipping logs to the elasticsearch via logstash suddenly. We got this error message first: /var/log/journal/ec28d502b342fad1a4d44d3a101845cf/system…

---

## [Elasticsearch crashes after update to 2.0](https://discuss.elastic.co/t/elasticsearch-crashes-after-update-to-2-0/33437)

<div class="topic-metadata">

**Author:** [@monotek](https://discuss.elastic.co/u/monotek)\
**Replies:** 8\
**Last updated:** [October 31, 2015, 7:29pm UTC](https://discuss.elastic.co/t/elasticsearch-crashes-after-update-to-2-0/33437 "2015-10-31T19:29:55Z")

</div>

I have 3 data nodes on Ubuntu 14.04 (KVM), Oracle Java 8, 2 Cores and 8 GB of RAM. 2 Replicas. About 20 million documents. Heap size 4 GB. After updating from 1.7.3 to 2.0 my load increases from around 0.5 to 3 - 4. …

---

## [Parsing Array Object in Logstash](https://discuss.elastic.co/t/parsing-array-object-in-logstash/116637)

<div class="topic-metadata">

**Author:** [@Lorenzo\_Gargiullo](https://discuss.elastic.co/u/Lorenzo_Gargiullo)\
**Replies:** 7\
**Last updated:** [January 23, 2018, 11:41am UTC](https://discuss.elastic.co/t/parsing-array-object-in-logstash/116637 "2018-01-23T11:41:24Z")

</div>

Hi, i want to pars an array of object in Logstash. This is mi conf: input { stdin { } } filter { grok { match =\> { "message" =\> "%{DATESTAMP:timestamp}%{SPACE}%{NOTSPACE:num\_column}%{SPACE}%{NOTSPACE:sensor001}%{…

---

## [Multiple if else problem in output in Logstash](https://discuss.elastic.co/t/multiple-if-else-problem-in-output-in-logstash/170473)

<div class="topic-metadata">

**Author:** [@Varun\_Mahajan](https://discuss.elastic.co/u/Varun_Mahajan)\
**Replies:** 6\
**Last updated:** [March 7, 2019, 8:56am UTC](https://discuss.elastic.co/t/multiple-if-else-problem-in-output-in-logstash/170473 "2019-03-07T08:56:11Z")

</div>

Hi Team, I am new to elastic search and logstash so i have one basic small query, Hope i will get quick reply here I am trying to apply multiple if else in my logstash but i am failed to do it , Here's the example out…

---

## ["No field found for \["..."\] in mapping" error with correct mapping](https://discuss.elastic.co/t/no-field-found-for-in-mapping-error-with-correct-mapping/270499)

<div class="topic-metadata">

**Author:** [@Marco\_R](https://discuss.elastic.co/u/Marco_R)\
**Replies:** 2\
**Last updated:** [April 18, 2021, 4:31pm UTC](https://discuss.elastic.co/t/no-field-found-for-in-mapping-error-with-correct-mapping/270499 "2021-04-18T16:31:49Z")

</div>

Hello, new to elastic here. I am trying to run this: GET /test/\_search { "query": { "match": { "doc\_type": "test" } }, "sort": { "\_script" : { "type" : "number", "script" : { …

---

## [Dashboard / Visualization to import](https://discuss.elastic.co/t/dashboard-visualization-to-import/26034)

<div class="topic-metadata">

**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\
**Replies:** 7\
**Last updated:** [July 22, 2015, 7:47pm UTC](https://discuss.elastic.co/t/dashboard-visualization-to-import/26034 "2015-07-22T19:47:41Z")

</div>

I'm feeding log data from eight apache hosts into Elasticsearch, then using Kibana 4 to show the end users graphs, totals, and so on. I see examples on the net where others have designed some very nifty visualizations …

---

## [Configurable font size](https://discuss.elastic.co/t/configurable-font-size/93137)

<div class="topic-metadata">

**Author:** [@Helix](https://discuss.elastic.co/u/Helix)\
**Replies:** 6\
**Last updated:** [July 17, 2017, 7:46am UTC](https://discuss.elastic.co/t/configurable-font-size/93137 "2017-07-17T07:46:00Z")

</div>

Hello, I've been looking for the option to change the font size on my dashboard. I found an open issue on GitHub concerning this problem: https://github.com/elastic/kibana/issues/2207 Is it entirely impossible to cha…

---

## [Deleting old versions](https://discuss.elastic.co/t/deleting-old-versions/4689)

<div class="topic-metadata">

**Author:** [@Hari\_Shankar](https://discuss.elastic.co/u/Hari_Shankar)\
**Replies:** 6\
**Last updated:** [June 23, 2011, 12:02pm UTC](https://discuss.elastic.co/t/deleting-old-versions/4689 "2011-06-23T12:02:51Z")

</div>

Hi, How do you delete older versions of documents? Suppose I always need only the latest version, I wouldn't want to waste space storing the earlier versions as well. Hari

---

## [Failed to start elasticsearch.service](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/206895)

<div class="topic-metadata">

**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\
**Replies:** 1\
**Last updated:** [November 7, 2019, 9:01am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-service/206895 "2019-11-07T09:01:09Z")

</div>

Hi, I am trying to start elasticsearch service using these commands, sudo /bin/systemctl daemon-reload sudo /bin/systemctl enable elasticsearch.service sudo systemctl start elasticsearch.service but i get this, Fail…

---

## [Multi\_search: "Unknown key for a START\_OBJECT in \[multi\_match\]."](https://discuss.elastic.co/t/multi-search-unknown-key-for-a-start-object-in-multi-match/105856)

<div class="topic-metadata">

**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\
**Replies:** 2\
**Last updated:** [October 31, 2017, 10:55am UTC](https://discuss.elastic.co/t/multi-search-unknown-key-for-a-start-object-in-multi-match/105856 "2017-10-31T10:55:28Z")

</div>

Data: PUT /my\_index/my\_type/1 { "title": "Quick brown rabbits", "body": "Brown rabbits are commonly seen." } PUT /my\_index/my\_type/2 { "title": "Keeping pets healthy", "body": "My quick brown fox eats…

---

## [Systemd logstash service](https://discuss.elastic.co/t/systemd-logstash-service/125083)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 4\
**Last updated:** [March 22, 2018, 12:57pm UTC](https://discuss.elastic.co/t/systemd-logstash-service/125083 "2018-03-22T12:57:48Z")

</div>

Hello, I am surprised that the deb package of logstash does not come with a systemd service. Elasticsearch and kibana does. Did I miss something? if it is not in the package, can you provide an official way to start, r…

[Previous page](https://discuss.elastic.co/top.md?page=338&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=340&per_page=50&period=all)
