# Top **URL:** https://discuss.elastic.co/top.md?page=340&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 341 --- ## [How can I refine the query to return only number of hits](https://discuss.elastic.co/t/how-can-i-refine-the-query-to-return-only-number-of-hits/8306)
**Author:** [@Curt\_Hu](https://discuss.elastic.co/u/Curt_Hu)\ **Replies:** 5\ **Last updated:** [July 5, 2012, 12:24pm UTC](https://discuss.elastic.co/t/how-can-i-refine-the-query-to-return-only-number-of-hits/8306 "2012-07-05T12:24:45Z")
I want to write a query to return only number of hits for a specific query, seemed that \_count API doesn't work. is there any solution for this? --- ## [Filebeat on kubernetes - access denied](https://discuss.elastic.co/t/filebeat-on-kubernetes-access-denied/152678)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 6\ **Last updated:** [October 19, 2018, 9:57am UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-access-denied/152678 "2018-10-19T09:57:40Z")
Ive created a filebeat daemonset for my k8 cluster using (roughly) these params: https://github.com/elastic/beats/blob/master/deploy/kubernetes/filebeat/filebeat-daemonset.yaml. Of 5 cluster hosts 4 are working fine and… --- ## [Logstash Configuration of 5.0.1](https://discuss.elastic.co/t/logstash-configuration-of-5-0-1/68883)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 5\ **Last updated:** [December 14, 2016, 12:49pm UTC](https://discuss.elastic.co/t/logstash-configuration-of-5-0-1/68883 "2016-12-14T12:49:55Z")
After upgrading logstash to 5.0.1 , I am getting the following : WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Cont… --- ## [How to load CSV data to already created and existing Index in Kibana?](https://discuss.elastic.co/t/how-to-load-csv-data-to-already-created-and-existing-index-in-kibana/326979)
**Author:** [@hitnalli\_praveen](https://discuss.elastic.co/u/hitnalli_praveen)\ **Replies:** 8\ **Last updated:** [March 9, 2023, 11:55am UTC](https://discuss.elastic.co/t/how-to-load-csv-data-to-already-created-and-existing-index-in-kibana/326979 "2023-03-09T11:55:07Z")
I've a unique requirement and trying few new things. My main objective is to display scanned data from Tenable Nessus (showing total count of scanned vulnerabilities - Critical, High and Medium) on to Kibana Dashboard af… --- ## [Getting \`APM Server transport error (503): Unexpected APM Server response\` error](https://discuss.elastic.co/t/getting-apm-server-transport-error-503-unexpected-apm-server-response-error/257733)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 8:29am UTC](https://discuss.elastic.co/t/getting-apm-server-transport-error-503-unexpected-apm-server-response-error/257733 "2020-12-10T08:29:26Z")
Hi Team, I am seeing APM Server transport error (503): Unexpected APM Server response and \[elastic-apm-server-reporter\] ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending data to APM server… --- ## [Very slow aggregation performance for trivial aggs](https://discuss.elastic.co/t/very-slow-aggregation-performance-for-trivial-aggs/24964)
**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 4\ **Last updated:** [July 19, 2015, 3:44pm UTC](https://discuss.elastic.co/t/very-slow-aggregation-performance-for-trivial-aggs/24964 "2015-07-19T15:44:15Z")
Good day, I have ES 1.5.2, deployed over 15 nodes. Each node has 40Gb RAM, two 2.5Ghz CPU cores and a single SSD drive. I want to store some "sensor data" for each machine m and its sensors s. In each doc I capture m… --- ## [Different documents types in same index](https://discuss.elastic.co/t/different-documents-types-in-same-index/129594)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 5\ **Last updated:** [May 4, 2018, 11:13am UTC](https://discuss.elastic.co/t/different-documents-types-in-same-index/129594 "2018-05-04T11:13:00Z")
in 6.0 \_type is discontinued, but we can use custom field like "type" to index different types of objects in same index and then filter by that. Is there any downside to this approach and store different documents types… --- ## [UDP/TCP performance test, UDP drops messages](https://discuss.elastic.co/t/udp-tcp-performance-test-udp-drops-messages/2037)
**Author:** [@ourlord](https://discuss.elastic.co/u/ourlord)\ **Replies:** 4\ **Last updated:** [June 5, 2015, 8:07pm UTC](https://discuss.elastic.co/t/udp-tcp-performance-test-udp-drops-messages/2037 "2015-06-05T20:07:17Z")
I was doing perf test to Logstash's network inputs, UDP/TCP. I wrote a python script to simulate some messages generator from network. The python script and Logstash is located in different machines in LAN. So the setup … --- ## [What permissions does logstash need to run as a service?](https://discuss.elastic.co/t/what-permissions-does-logstash-need-to-run-as-a-service/52753)
**Author:** [@Edely\_Gomes](https://discuss.elastic.co/u/Edely_Gomes)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 5:51pm UTC](https://discuss.elastic.co/t/what-permissions-does-logstash-need-to-run-as-a-service/52753 "2016-07-01T17:51:41Z")
I am running Logstash as a service, but it doesn't collect the logs. But when I run the bynary (bin/logstash -f test.conf) I collect the logs. And in the two cases I am using the same .conf file. In other posts it is… --- ## [Release Notes page for v9.x is too heavy — please bring back per-version pages](https://discuss.elastic.co/t/release-notes-page-for-v9-x-is-too-heavy-please-bring-back-per-version-pages/386313)
**Author:** [@True](https://discuss.elastic.co/u/True)\ **Replies:** 3\ **Last updated:** [May 13, 2026, 9:14pm UTC](https://discuss.elastic.co/t/release-notes-page-for-v9-x-is-too-heavy-please-bring-back-per-version-pages/386313 "2026-05-13T21:14:51Z")
Hi, I wanted to share some feedback about the release notes documentation structure that changed in v9.x. What changed: In v8.x, each version had its own dedicated page (e.g., 8.15, 8.16, 8.17), which made it easy to … --- ## [Error decoding JSON: json: cannot unmarshal number into Go value of type map\[string\]interface {}](https://discuss.elastic.co/t/error-decoding-json-json-cannot-unmarshal-number-into-go-value-of-type-map-string-interface/118661)
**Author:** [@Triv1an](https://discuss.elastic.co/u/Triv1an)\ **Replies:** 6\ **Last updated:** [February 15, 2018, 9:15am UTC](https://discuss.elastic.co/t/error-decoding-json-json-cannot-unmarshal-number-into-go-value-of-type-map-string-interface/118661 "2018-02-15T09:15:28Z")
Good afternoon, We are currently using Filebeat to send pre-formatted JSON messages, saved in a logfile through to our processing tool. JSON looks as follows: { "generated\_at": "2018-02-06T13:56:04+00:00", "profile"… --- ## [Logstash scheduling for every one hour](https://discuss.elastic.co/t/logstash-scheduling-for-every-one-hour/79411)
**Author:** [@leenanarmeta](https://discuss.elastic.co/u/leenanarmeta)\ **Replies:** 5\ **Last updated:** [March 22, 2017, 5:20am UTC](https://discuss.elastic.co/t/logstash-scheduling-for-every-one-hour/79411 "2017-03-22T05:20:25Z")
Hi, EveryOne how can i schedule logstash for every hour and for every 6 hours.......? Regads N Leena --- ## [Compare fields in Logstash ruby filter](https://discuss.elastic.co/t/compare-fields-in-logstash-ruby-filter/59874)
**Author:** [@Gurveer\_Singh](https://discuss.elastic.co/u/Gurveer_Singh)\ **Replies:** 8\ **Last updated:** [September 6, 2016, 1:54pm UTC](https://discuss.elastic.co/t/compare-fields-in-logstash-ruby-filter/59874 "2016-09-06T13:54:28Z")
I trying following ruby code, but doesn't working for me. Can somebody help me where I am doing wrong ? ruby { code =\> ' require "csv" records = CSV.foreach("/path/to/file.csv") … --- ## [License error](https://discuss.elastic.co/t/license-error/220650)
**Author:** [@Francismara\_Souza](https://discuss.elastic.co/u/Francismara_Souza)\ **Replies:** 5\ **Last updated:** [February 24, 2020, 1:14pm UTC](https://discuss.elastic.co/t/license-error/220650 "2020-02-24T13:14:52Z")
Hi guys, I'm receiving this error on my ECK: Could not update cluster license: failed to revert to basic: 503 Service Unavailable: I installed it using the basic confirmations on the Quick start page. When I try to g… --- ## [Elastic search Bulk Post testing](https://discuss.elastic.co/t/elastic-search-bulk-post-testing/24065)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 5\ **Last updated:** [June 22, 2015, 10:06am UTC](https://discuss.elastic.co/t/elastic-search-bulk-post-testing/24065 "2015-06-22T10:06:51Z")
Getting below error when doing testing on my local environment. Please someone help me where I did the mistake. curl -XPOST 'localhost:9014/customer/external/\_bulk?pretty' -d ' {"index":{{"\_id":"15"}} {"account\_number"… --- ## [Rally 2.3.1 released](https://discuss.elastic.co/t/rally-2-3-1-released/295277)
**Author:** [@json](https://discuss.elastic.co/u/json)\ **Replies:** 0\ **Last updated:** [January 24, 2022, 7:52pm UTC](https://discuss.elastic.co/t/rally-2-3-1-released/295277 "2022-01-24T19:52:47Z")
We have just released Rally 2.3.1. Highlights: Rally now supports Python 3.10. A new timeout parameter can be used for bulk operations. Bug fixes and docs changes have been included. For the full list of changes pleas… --- ## [Logstash not using given template json file on output section](https://discuss.elastic.co/t/logstash-not-using-given-template-json-file-on-output-section/25730)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 8\ **Last updated:** [July 13, 2016, 4:37pm UTC](https://discuss.elastic.co/t/logstash-not-using-given-template-json-file-on-output-section/25730 "2016-07-13T16:37:17Z")
I have tried to create custom index pattern in Elasticsearch based on my input data. So I wrote some custom json and point it to template section of logstash output plugin. But not sure why the index are not created … --- ## [Init.d missing - CentOS 6.8 - 5.0.0rc1](https://discuss.elastic.co/t/init-d-missing-centos-6-8-5-0-0rc1/63674)
**Author:** [@jaaplaya](https://discuss.elastic.co/u/jaaplaya)\ **Replies:** 6\ **Last updated:** [November 16, 2016, 8:44pm UTC](https://discuss.elastic.co/t/init-d-missing-centos-6-8-5-0-0rc1/63674 "2016-11-16T20:44:43Z")
Running CentOS 6.8, installing 5.0.0 RC1 through yum following the instructions in the docs (https://www.elastic.co/guide/en/logstash/5.0/installing-logstash.html) and the init.d scripts are missing for starting/stopping… --- ## [Sorting on value from script field](https://discuss.elastic.co/t/sorting-on-value-from-script-field/206377)
**Author:** [@hiimcarsten](https://discuss.elastic.co/u/hiimcarsten)\ **Replies:** 4\ **Last updated:** [November 5, 2019, 1:51pm UTC](https://discuss.elastic.co/t/sorting-on-value-from-script-field/206377 "2019-11-05T13:51:55Z")
Hello everyone, The result of my executed query should be a number of documents including script fields, and optionally some sorting. The script fields rely on real-time data I am passing in the params, so the script fi… --- ## [Not in tags condition](https://discuss.elastic.co/t/not-in-tags-condition/143885)
**Author:** [@chandra0651](https://discuss.elastic.co/u/chandra0651)\ **Replies:** 3\ **Last updated:** [August 10, 2018, 4:54pm UTC](https://discuss.elastic.co/t/not-in-tags-condition/143885 "2018-08-10T16:54:41Z")
Hello I am trying to ingest into Elasticsearch if the documents dont have couple of tags, but some how still the documents are getting persisted if the tags present. below is my code .The tags with "\_split\_type\_failure" … --- ## [Logstash : Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release](https://discuss.elastic.co/t/logstash-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/216060)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 5\ **Last updated:** [January 23, 2020, 12:51pm UTC](https://discuss.elastic.co/t/logstash-java-hotspot-tm-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release/216060 "2020-01-23T12:51:53Z")
while shashing first log it show below warning: /usr/share/logstash# bin/logstash -e 'input { stdin { } } output { stdout {} }' Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in ver… --- ## [\[Kibana Feature\] Set default filters by space](https://discuss.elastic.co/t/kibana-feature-set-default-filters-by-space/192228)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 4:48pm UTC](https://discuss.elastic.co/t/kibana-feature-set-default-filters-by-space/192228 "2019-07-25T16:48:08Z")
Hi, everyone In Kibana (6x - 7x) is possible to set pin filters by default (Management --\> Advanced Settings -\> filters:pinnedByDefault) In my opinion, this option is very useful in order to navigate between dashboar… --- ## [Cannot log in to Kibana with "elastic" user, after enabling minimal security](https://discuss.elastic.co/t/cannot-log-in-to-kibana-with-elastic-user-after-enabling-minimal-security/318808)
**Author:** [@usaadi](https://discuss.elastic.co/u/usaadi)\ **Replies:** 6\ **Last updated:** [November 13, 2022, 11:20pm UTC](https://discuss.elastic.co/t/cannot-log-in-to-kibana-with-elastic-user-after-enabling-minimal-security/318808 "2022-11-13T23:20:50Z")
Hello... I have an Elasticsearch cluster that has been running with security disabled. I tried to enable security by following the instructions at: I completed all the instructions, but I also overwrote the Kibana k… --- ## [Export Saved Objects via REST APi](https://discuss.elastic.co/t/export-saved-objects-via-rest-api/72028)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 3\ **Last updated:** [January 27, 2017, 6:31pm UTC](https://discuss.elastic.co/t/export-saved-objects-via-rest-api/72028 "2017-01-27T18:31:37Z")
Hi, I'm trying to figure out the best way to programatically export all of the saved objects - Saved Searches, Visualizations, and Dashboard - as individual documents. I want to be able to create an SDLC around the D… --- ## [Logstash 5.0 configuration.invalid\_plugin\_register error in logs when using date filter](https://discuss.elastic.co/t/logstash-5-0-configuration-invalid-plugin-register-error-in-logs-when-using-date-filter/68276)
**Author:** [@orl1978](https://discuss.elastic.co/u/orl1978)\ **Replies:** 7\ **Last updated:** [December 13, 2016, 1:25pm UTC](https://discuss.elastic.co/t/logstash-5-0-configuration-invalid-plugin-register-error-in-logs-when-using-date-filter/68276 "2016-12-13T13:25:46Z")
hi there, I have the following config for logstash: \`input { file { path =\> "/csvfiles/\*.csv" type =\> "agents" start\_position =\> "beginning" sincedb\_path =\> "/csvfiles/dbfile" } } filter … --- ## [Best approach for updating large amount of documents](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252)
**Author:** [@Toma\_Popov](https://discuss.elastic.co/u/Toma_Popov)\ **Replies:** 6\ **Last updated:** [January 27, 2020, 3:42pm UTC](https://discuss.elastic.co/t/best-approach-for-updating-large-amount-of-documents/216252 "2020-01-27T15:42:45Z")
Hello, I would like to ask, what would be the best approach when trying to update big amounts of documents. For our use case we have documents, that need to be enriched with additional data a few hour after they have b… --- ## [Kibana Request Timeout after 3000ms](https://discuss.elastic.co/t/kibana-request-timeout-after-3000ms/120004)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 4\ **Last updated:** [February 16, 2018, 2:12pm UTC](https://discuss.elastic.co/t/kibana-request-timeout-after-3000ms/120004 "2018-02-16T14:12:36Z")
Hi There, i am using Kibana with Elasticsearch, Filebeat and Logstash. Currently i am running verison 5.x and i want to upgrade to version 6.x Unfortunately, after installing xpack plugin in kibana and elasticsearch i… --- ## [Number of characters in field](https://discuss.elastic.co/t/number-of-characters-in-field/17667)
**Author:** [@David\_Nielsen](https://discuss.elastic.co/u/David_Nielsen)\ **Replies:** 2\ **Last updated:** [May 22, 2014, 12:47pm UTC](https://discuss.elastic.co/t/number-of-characters-in-field/17667 "2014-05-22T12:47:28Z")
Hi. I am trying to find a way to express a character count filter in a querystring, for instance: I need to find all documents with field "subject" that holds less than 20 chars. How would i do that in a querystri… --- ## [Constant high cpu usage from Filebeat](https://discuss.elastic.co/t/constant-high-cpu-usage-from-filebeat/168028)
**Author:** [@bugggbear](https://discuss.elastic.co/u/bugggbear)\ **Replies:** 7\ **Last updated:** [February 14, 2019, 9:39pm UTC](https://discuss.elastic.co/t/constant-high-cpu-usage-from-filebeat/168028 "2019-02-14T21:39:58Z")
Hello, I'm using filebeat (6.4.3) to ship Apache logs (and some system ones) directly to ES. Currently Filebeat is configured by using apache2 module and wildcard path setting, pointing to a directory with near 16 000 … --- ## [Unable to authenticate with provided credentials and anonymous access is not allowed for this request](https://discuss.elastic.co/t/unable-to-authenticate-with-provided-credentials-and-anonymous-access-is-not-allowed-for-this-request/333518)
**Author:** [@vanhaiit90](https://discuss.elastic.co/u/vanhaiit90)\ **Replies:** 3\ **Last updated:** [May 19, 2023, 1:26am UTC](https://discuss.elastic.co/t/unable-to-authenticate-with-provided-credentials-and-anonymous-access-is-not-allowed-for-this-request/333518 "2023-05-19T01:26:48Z")
I getting case errror when I configure Fleetserver with run file script ./elastic-agents install. . And now show detail log error "message":"Fleet Server - Error - info fail \[401 Unauthorized\] {"error":{"root\_cause":\[{… --- ## [Elasticsearch connection idle timeout](https://discuss.elastic.co/t/elasticsearch-connection-idle-timeout/252283)
**Author:** [@lnitin](https://discuss.elastic.co/u/lnitin)\ **Replies:** 7\ **Last updated:** [October 16, 2020, 6:44pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-idle-timeout/252283 "2020-10-16T18:44:58Z")
Hello, Elasticsearch server is rejecting any communication after certain amount of time interval if there is no activity from source server and connection is getting lost.? Can connection be open at all times, Is there … --- ## [Encoding is longer than the max length 32766](https://discuss.elastic.co/t/encoding-is-longer-than-the-max-length-32766/17819)
**Author:** [@Jeff\_Dupont](https://discuss.elastic.co/u/Jeff_Dupont)\ **Replies:** 5\ **Last updated:** [January 3, 2015, 5:00am UTC](https://discuss.elastic.co/t/encoding-is-longer-than-the-max-length-32766/17819 "2015-01-03T05:00:45Z")
We’re running into a peculiar issue when updating indexes with content for the document. "document contains at least one immense term in (whose utf8 encoding is longer than the max length 32766), all of which… --- ## [Dashboard: Could not locate that index-pattern-field (id: system.syslog.hostname) and other errors](https://discuss.elastic.co/t/dashboard-could-not-locate-that-index-pattern-field-id-system-syslog-hostname-and-other-errors/153119)
**Author:** [@09958a6c84c61fe52414](https://discuss.elastic.co/u/09958a6c84c61fe52414)\ **Replies:** 5\ **Last updated:** [October 23, 2018, 8:42am UTC](https://discuss.elastic.co/t/dashboard-could-not-locate-that-index-pattern-field-id-system-syslog-hostname-and-other-errors/153119 "2018-10-23T08:42:17Z")
Hi all. In my Dasbords I have lot of messages like Could not locate that index-pattern-field (id: system.syslog.hostname) I'am using Kibana 6.4.2 Logstash 6.4.2 Elasticsearch 6.4.2. While setting up Filebeat 6.4.2… --- ## [Cannot login to Kibana after installing shield? Unable to restart the kibana service?](https://discuss.elastic.co/t/cannot-login-to-kibana-after-installing-shield-unable-to-restart-the-kibana-service/53843)
**Author:** [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Replies:** 6\ **Last updated:** [July 14, 2016, 6:05am UTC](https://discuss.elastic.co/t/cannot-login-to-kibana-after-installing-shield-unable-to-restart-the-kibana-service/53843 "2016-07-14T06:05:41Z")
I have exactly followed steps as per link below and was successfully logged in to Kibana. (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04) B… --- ## [Index : no VS Index: not\_analyzed](https://discuss.elastic.co/t/index-no-vs-index-not-analyzed/58287)
**Author:** [@sombilat](https://discuss.elastic.co/u/sombilat)\ **Replies:** 1\ **Last updated:** [August 17, 2016, 7:33pm UTC](https://discuss.elastic.co/t/index-no-vs-index-not-analyzed/58287 "2016-08-17T19:33:50Z")
Hello, I have encountered an issue in Logstash. Currently I am using LS, 2.0.0. Now, in my mapping. Previously I have a field: "content" : { "type" : "string", "index" : "not\_anal… --- ## [\[solved\] - BulkIndexError - Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes](https://discuss.elastic.co/t/solved-bulkindexerror-compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/181725)
**Author:** [@JH82](https://discuss.elastic.co/u/JH82)\ **Replies:** 2\ **Last updated:** [May 24, 2019, 7:15pm UTC](https://discuss.elastic.co/t/solved-bulkindexerror-compressor-detection-can-only-be-called-on-some-xcontent-bytes-or-compressed-xcontent-bytes/181725 "2019-05-24T19:15:05Z")
Hello ! I've problem with bulkinsert. I don't understand this error ('Unexpected error:', (\, BulkIndexError('7 document(s) failed to index.', \[{u'index': {u'status':… --- ## [Elasticsearch 7.17.21 and 8.13.3 Security Update (ESA-2024-25)](https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442 "2025-01-21T10:49:35Z")
Elasticsearch allocation of resources without limits or throttling leads to crash (ESA-2024-25) An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resultin… --- ## [Filebeat appears to be running but not displayed on Kibana](https://discuss.elastic.co/t/filebeat-appears-to-be-running-but-not-displayed-on-kibana/73402)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 7\ **Last updated:** [February 16, 2017, 9:50pm UTC](https://discuss.elastic.co/t/filebeat-appears-to-be-running-but-not-displayed-on-kibana/73402 "2017-02-16T21:50:36Z")
Hello everyone, i have my filebeat running and queries the data but on Kibana, i am unable to get kibana to move reading from logstash to filebeat. any suggestions? --- ## [How to add detail raw data view to dashboard with kibana 4?](https://discuss.elastic.co/t/how-to-add-detail-raw-data-view-to-dashboard-with-kibana-4/29461)
**Author:** [@colormegood](https://discuss.elastic.co/u/colormegood)\ **Replies:** 2\ **Last updated:** [September 17, 2015, 8:47am UTC](https://discuss.elastic.co/t/how-to-add-detail-raw-data-view-to-dashboard-with-kibana-4/29461 "2015-09-17T08:47:44Z")
Kibana 4. I created a bar chart and a dashboard. I wanna add a detail raw data table below a bar chart. Although i create a data table chart,it only show a little terms. It cannot show all message. When i click a bar c… --- ## [How to pronounce Kibana?](https://discuss.elastic.co/t/how-to-pronounce-kibana/54099)
**Author:** [@aqingsir](https://discuss.elastic.co/u/aqingsir)\ **Replies:** 4\ **Last updated:** [June 29, 2016, 6:49pm UTC](https://discuss.elastic.co/t/how-to-pronounce-kibana/54099 "2016-06-29T18:49:30Z")
This has confused me for a while, could anyone tell me how to pronouce it? Thanks. --- ## [Elasticsearch using SSD vs HDD comparison](https://discuss.elastic.co/t/elasticsearch-using-ssd-vs-hdd-comparison/174242)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 4\ **Last updated:** [March 28, 2019, 7:09am UTC](https://discuss.elastic.co/t/elasticsearch-using-ssd-vs-hdd-comparison/174242 "2019-03-28T07:09:30Z")
Hello, I wonder if there are good blog or page describes Elasticsearch performance comparison with SSD vs HDD. I know Elasticsearch recommends SSD for better performance, but if there are comparison information in deta… --- ## [ElasticSearch 7.3 basic authentication giving 403 Forbidden](https://discuss.elastic.co/t/elasticsearch-7-3-basic-authentication-giving-403-forbidden/203367)
**Author:** [@vinodres](https://discuss.elastic.co/u/vinodres)\ **Replies:** 3\ **Last updated:** [October 14, 2019, 9:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-3-basic-authentication-giving-403-forbidden/203367 "2019-10-14T21:20:36Z")
I have recently installed ElasticSearch 7.3 basic on single instance of CentOS 7. Before enabling basic security I verified that I was able to access both ElasticSearch and Kibana UI. Later I followed the exact steps sp… --- ## [Limit results in query](https://discuss.elastic.co/t/limit-results-in-query/6202)
**Author:** [@Brian\_S](https://discuss.elastic.co/u/Brian_S)\ **Replies:** 3\ **Last updated:** [December 21, 2011, 7:53am UTC](https://discuss.elastic.co/t/limit-results-in-query/6202 "2011-12-21T07:53:40Z")
In MySQL I can do something like: SELECT id FROM table WHERE field = 'foo' LIMIT 5 If the table has 10,000 rows, then this query is way way faster than if I left out the LIMIT part. In ElasticSearch, I've got t… --- ## [Security\_exception - action \[cluster:monitor/main\] is unauthorized for user \[p595200\]](https://discuss.elastic.co/t/security-exception-action-cluster-monitor-main-is-unauthorized-for-user-p595200/107756)
**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\ **Replies:** 1\ **Last updated:** [November 15, 2017, 8:41pm UTC](https://discuss.elastic.co/t/security-exception-action-cluster-monitor-main-is-unauthorized-for-user-p595200/107756 "2017-11-15T20:41:29Z")
When we try to hit ES directly with a header, we are getting the below 403 response. Can someone please let me know what could be the issue. {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[cluste… --- ## [Failed to process cluster event (put-mapping) within 30s](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s/253987)
**Author:** [@Yasiru\_Kanchana](https://discuss.elastic.co/u/Yasiru_Kanchana)\ **Replies:** 3\ **Last updated:** [November 2, 2020, 8:15am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-put-mapping-within-30s/253987 "2020-11-02T08:15:28Z")
Currently, I am running Elasticsearch in cluster mode and there are 6 nodes. My logs are flooded with below error message. Also we are creating daily basis indexes and each having 10 shards (according to the template). I… --- ## [Strings in integer fields?](https://discuss.elastic.co/t/strings-in-integer-fields/58301)
**Author:** [@spazm](https://discuss.elastic.co/u/spazm)\ **Replies:** 3\ **Last updated:** [August 31, 2016, 9:41am UTC](https://discuss.elastic.co/t/strings-in-integer-fields/58301 "2016-08-31T09:41:59Z")
I've noticed that if I define a field as type integer I'm allowed to insert values as either strings-of-integers or integers. And when I pull these values back out, they come back in the same form. I'd like my integer… --- ## [Csv and date filter](https://discuss.elastic.co/t/csv-and-date-filter/26033)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 6\ **Last updated:** [September 28, 2016, 7:00am UTC](https://discuss.elastic.co/t/csv-and-date-filter/26033 "2016-09-28T07:00:56Z")
Hi, i have a logstash agent setup on a window box with below configuration. input { file { type =\> "autolog" path =\> "E:/elkcluster/log/\*.log" } file { type =\> "testscv" path =\> "e:/elkcluster/test/\*.\*" … --- ## [Adding Dollar Sign In Metrics Visualization](https://discuss.elastic.co/t/adding-dollar-sign-in-metrics-visualization/95547)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 5:29pm UTC](https://discuss.elastic.co/t/adding-dollar-sign-in-metrics-visualization/95547 "2017-08-02T17:29:15Z")
I am using Kibana 5.1. I have a Metrics Visualization which shows Revenue in Dollars, now it only shows the number. I want to change the format to put a Dollar sign in the front of the number. I know using painless scrip… --- ## [Failed to connect to backoff, Filebeat on Server B and ELK on local machine](https://discuss.elastic.co/t/failed-to-connect-to-backoff-filebeat-on-server-b-and-elk-on-local-machine/215970)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 2\ **Last updated:** [January 25, 2020, 1:35am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-filebeat-on-server-b-and-elk-on-local-machine/215970 "2020-01-25T01:35:50Z")
Filebeat is running on server B which read logs and pushes to ELK logstash on local Machine A. I want to use filebeat to send real time log files from the server, and point it to my local machine where Elasticsearch, lo… --- ## [Provided Grok expressions do not match field value](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value/103502)
**Author:** [@316014408](https://discuss.elastic.co/u/316014408)\ **Replies:** 5\ **Last updated:** [October 13, 2017, 12:47pm UTC](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value/103502 "2017-10-13T12:47:11Z")
Hi, MySQL module does not support 5.6? The MySQL module was tested with logs from versions 5.5 and 5.7. I modified pipeline.json,but... filebeat versions 5.6.2 elasticsearch versions 5.6.2 MySQL versions 5.6.33… [Previous page](https://discuss.elastic.co/top.md?page=339&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=341&per_page=50&period=all)