# Top

**URL:** https://discuss.elastic.co/top.md?page=342&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 343

---

## [Using part of ES as a public, frontend API?](https://discuss.elastic.co/t/using-part-of-es-as-a-public-frontend-api/4710)

<div class="topic-metadata">

**Author:** [@Bartosz\_Pietrzak](https://discuss.elastic.co/u/Bartosz_Pietrzak)\
**Replies:** 7\
**Last updated:** [July 4, 2011, 11:02am UTC](https://discuss.elastic.co/t/using-part-of-es-as-a-public-frontend-api/4710 "2011-07-04T11:02:44Z")

</div>

Quick question (as I have not seen any opinions on this topic) - using part of ES as a public application's API would be a good idea? Our app relies heavily on search (livesearch, in general) - limiting every layer …

---

## [Forwarding logs from Logstash to another external location i.e SIEM](https://discuss.elastic.co/t/forwarding-logs-from-logstash-to-another-external-location-i-e-siem/39381)

<div class="topic-metadata">

**Author:** [@Ohmygord](https://discuss.elastic.co/u/Ohmygord)\
**Replies:** 6\
**Last updated:** [January 27, 2017, 11:40pm UTC](https://discuss.elastic.co/t/forwarding-logs-from-logstash-to-another-external-location-i-e-siem/39381 "2017-01-27T23:40:41Z")

</div>

Hi, I'm currently setting up an ELK stack and will be forwarding my logs to Logstash. However I also have a requirement to send these logs top a separate SIEM. Is it possible to do this with logstash? I cant find any…

---

## [Status 403 in Kibana POST request](https://discuss.elastic.co/t/status-403-in-kibana-post-request/164267)

<div class="topic-metadata">

**Author:** [@mortueta](https://discuss.elastic.co/u/mortueta)\
**Replies:** 6\
**Last updated:** [January 16, 2019, 4:29pm UTC](https://discuss.elastic.co/t/status-403-in-kibana-post-request/164267 "2019-01-16T16:29:19Z")

</div>

Hi all, I am having some problems. To be honest since the upgrade from an older version to 6.5.3 I had some problems with kibana. But after index recreation it was solved. I started using spaces and until yesterday ever…

---

## [Convert the long datatype field to string](https://discuss.elastic.co/t/convert-the-long-datatype-field-to-string/131692)

<div class="topic-metadata">

**Author:** [@rajesnal](https://discuss.elastic.co/u/rajesnal)\
**Replies:** 4\
**Last updated:** [May 28, 2018, 1:25pm UTC](https://discuss.elastic.co/t/convert-the-long-datatype-field-to-string/131692 "2018-05-28T13:25:42Z")

</div>

I am looking for an example, to convert the data type of field in the document from long to string. could you anyone please help me on this.

---

## [JSON parse error, original data now in message field](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/93163)

<div class="topic-metadata">

**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 11:09am UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/93163 "2017-08-10T11:09:04Z")

</div>

Hello, I am getting the following error with looking at edgemax router logs: \[2017-07-14T09:52:00,502\]\[ERROR\]\[logstash.codecs.json \] JSON parse error, original data now in message field {:error=\>#\<LogStash::Json::P…

---

## [Error while clustering nodes from different host/machines (ES 7.0)](https://discuss.elastic.co/t/error-while-clustering-nodes-from-different-host-machines-es-7-0/179493)

<div class="topic-metadata">

**Author:** [@realjoonha](https://discuss.elastic.co/u/realjoonha)\
**Replies:** 4\
**Last updated:** [May 3, 2019, 10:22am UTC](https://discuss.elastic.co/t/error-while-clustering-nodes-from-different-host-machines-es-7-0/179493 "2019-05-03T10:22:19Z")

</div>

Hi, I'm trying to cluster a number of nodes from different machines (with different IP address), and having some troubles with it. Below are the basic info of the error. Please understand if it is insufficient - I'm t…

---

## [Query string length limit](https://discuss.elastic.co/t/query-string-length-limit/16972)

<div class="topic-metadata">

**Author:** [@Robbie](https://discuss.elastic.co/u/Robbie)\
**Replies:** 1\
**Last updated:** [April 12, 2014, 12:46pm UTC](https://discuss.elastic.co/t/query-string-length-limit/16972 "2014-04-12T12:46:45Z")

</div>

Hi, Could you clarify if there is a length limitation on the query string in ElasticSearch? Specifically, if I have a query such as below, will there be any issues? What is the max length that can be provided and i…

---

## [What is the meaning of this log message](https://discuss.elastic.co/t/what-is-the-meaning-of-this-log-message/109565)

<div class="topic-metadata">

**Author:** [@Kasun\_Siyambalapitiy](https://discuss.elastic.co/u/Kasun_Siyambalapitiy)\
**Replies:** 7\
**Last updated:** [November 30, 2017, 6:11am UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-this-log-message/109565 "2017-11-30T06:11:21Z")

</div>

In my /var/log/logstash/logstash.log.1 has only the following and nothing is getting published from logstash. Please help me to fix this, {:timestamp=\>"2017-11-29T06:07:47.853000+0000", :message=\>"SIGTERM received. Shu…

---

## [Using wildcarded filenames in the logstash filter section](https://discuss.elastic.co/t/using-wildcarded-filenames-in-the-logstash-filter-section/129356)

<div class="topic-metadata">

**Author:** [@camerodity](https://discuss.elastic.co/u/camerodity)\
**Replies:** 7\
**Last updated:** [April 24, 2018, 7:40pm UTC](https://discuss.elastic.co/t/using-wildcarded-filenames-in-the-logstash-filter-section/129356 "2018-04-24T19:40:24Z")

</div>

Is it possible to use wildcarded filenames in the filter plugin section of logstash? For example, I want to index Apache access logs for some of our webapps and since the apache access logs have the date as part of the …

---

## [How to stop message from being sent after grok](https://discuss.elastic.co/t/how-to-stop-message-from-being-sent-after-grok/27211)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 2\
**Last updated:** [August 11, 2015, 8:00pm UTC](https://discuss.elastic.co/t/how-to-stop-message-from-being-sent-after-grok/27211 "2015-08-11T20:00:22Z")

</div>

I have a logstash agent on a box. It gets data (from redis), does a grok and parses things apart, and then sends the JSON to another box, where elastic brings it in. The message is grok'd, and then gets sent along wit…

---

## [Loading class \`com.mysql.jdbc.Driver'. This is deprecated. The new driver class is \`com.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessary](https://discuss.elastic.co/t/loading-class-com-mysql-jdbc-driver-this-is-deprecated-the-new-driver-class-is-com-mysql-cj-jdbc-driver-the-driver-is-automatically-registered-via-the-spi-and-manual-loading-of-the-driver-class-is-generally-unnecessary/157687)

<div class="topic-metadata">

**Author:** [@muyuqj](https://discuss.elastic.co/u/muyuqj)\
**Replies:** 2\
**Last updated:** [November 21, 2018, 11:18am UTC](https://discuss.elastic.co/t/loading-class-com-mysql-jdbc-driver-this-is-deprecated-the-new-driver-class-is-com-mysql-cj-jdbc-driver-the-driver-is-automatically-registered-via-the-spi-and-manual-loading-of-the-driver-class-is-generally-unnecessary/157687 "2018-11-21T11:18:29Z")

</div>

Loading class com.mysql.jdbc.Driver'. This is deprecated. The new driver class iscom.mysql.cj.jdbc.Driver'. The driver is automatically registered via the SPI and manual loading of the driver class is generally unnecessa…

---

## [Object配列内のデータ検索](https://discuss.elastic.co/t/object/104322)

<div class="topic-metadata">

**Author:** [@drumn](https://discuss.elastic.co/u/drumn)\
**Replies:** 6\
**Last updated:** [October 25, 2017, 5:54am UTC](https://discuss.elastic.co/t/object/104322 "2017-10-25T05:54:32Z")

</div>

ElasticSearchでの開発を始めたばかりの初心者です。 以下のマッピングとデータで、"class"="B"の条件で検索し、 結果として、"value"内の"string"が"two"と"three"のデータだけを抽出したいのですが、 方法がわからず、困っております。 マッピングの方法やクエリの組み方について、どのような方法が考えられるのか、 ご教示いただけないでしょうか。 よろしくお願いいたします。 ■マッピング …

---

## [Changing the SSL certificate fleet server uses](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902)

<div class="topic-metadata">

**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\
**Replies:** 4\
**Last updated:** [October 20, 2022, 5:40pm UTC](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902 "2022-10-20T17:40:47Z")

</div>

Is there a way to specify a new certificate that the fleet server will use for communication over port 8220 other than re-enrolling the agent? This is the certificate that is specified in the --fleet-server-cert and --f…

---

## [Elasticsearch 2.0 warning: JNA is not available](https://discuss.elastic.co/t/elasticsearch-2-0-warning-jna-is-not-available/33320)

<div class="topic-metadata">

**Author:** [@karlr](https://discuss.elastic.co/u/karlr)\
**Replies:** 4\
**Last updated:** [August 2, 2016, 11:27pm UTC](https://discuss.elastic.co/t/elasticsearch-2-0-warning-jna-is-not-available/33320 "2016-08-02T23:27:04Z")

</div>

Hi, I'm evaluating Elasticsearch for a project and since 2.0 was released just now I thought why not upgrade my installation. I have two questions: Question 1: In my log file, I see the following on startup: \[2015-…

---

## [Index.refresh\_interval setting in elasticsearch.yml not taking effect](https://discuss.elastic.co/t/index-refresh-interval-setting-in-elasticsearch-yml-not-taking-effect/8349)

<div class="topic-metadata">

**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\
**Replies:** 5\
**Last updated:** [July 10, 2012, 4:56am UTC](https://discuss.elastic.co/t/index-refresh-interval-setting-in-elasticsearch-yml-not-taking-effect/8349 "2012-07-10T04:56:57Z")

</div>

does this look wrong? elasticsearch.yml: index.refresh\_interval: 60s after i restart ES, it doesnt look like taking effect - curl -XGET 'http://localhost:9200/\_cluster/nodes?pretty=true' ... "os" : { …

---

## [Data Retention Policy for Storing and Deleting](https://discuss.elastic.co/t/data-retention-policy-for-storing-and-deleting/44104)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 6\
**Last updated:** [June 21, 2017, 5:32am UTC](https://discuss.elastic.co/t/data-retention-policy-for-storing-and-deleting/44104 "2017-06-21T05:32:41Z")

</div>

How does ES know or FileBeat know - How much data to be loaded to store ? i.e. Data within this month only or Data within last 3 months will be loaded only. By loaded I meant stored for searching when a text is searc…

---

## [AMA: Java plugins in Logstash](https://discuss.elastic.co/t/ama-java-plugins-in-logstash/171535)

<div class="topic-metadata">

**Author:** [@danhermann](https://discuss.elastic.co/u/danhermann)\
**Replies:** 0\
**Last updated:** [March 8, 2019, 5:13pm UTC](https://discuss.elastic.co/t/ama-java-plugins-in-logstash/171535 "2019-03-08T17:13:48Z")

</div>

In case you haven't seen it, we've added experimental support for pure Java plugins in Logstash. We're promoting it to a beta feature in the upcoming Logstash 6.7 release with plans to move to GA shortly after that. I k…

---

## [Apply filters to a Kibana iframe](https://discuss.elastic.co/t/apply-filters-to-a-kibana-iframe/27314)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 4\
**Last updated:** [March 10, 2016, 5:27pm UTC](https://discuss.elastic.co/t/apply-filters-to-a-kibana-iframe/27314 "2016-03-10T17:27:14Z")

</div>

Hi! I have a html code with a Kibana embeded webpage embeded in. I would like to apply some filters from this web container and be able to visualize them in the Kibana iframe. How could I do it?

---

## [Kibana 4 as reverse proxy](https://discuss.elastic.co/t/kibana-4-as-reverse-proxy/26751)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 4\
**Last updated:** [August 11, 2015, 3:39am UTC](https://discuss.elastic.co/t/kibana-4-as-reverse-proxy/26751 "2015-08-11T03:39:02Z")

</div>

Hi All, Does anyone know how to configure apache to use kibana 4 as reverse proxy. Kibana 3 works perfectly fine but kibana 4 gives me an error. Unable to load "text!config" modules because of an unknown error apache …

---

## [Converting a string value into a double in Elasticsearch 5.0.0](https://discuss.elastic.co/t/converting-a-string-value-into-a-double-in-elasticsearch-5-0-0/64430)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 5\
**Last updated:** [October 31, 2016, 2:03pm UTC](https://discuss.elastic.co/t/converting-a-string-value-into-a-double-in-elasticsearch-5-0-0/64430 "2016-10-31T14:03:50Z")

</div>

I've done this in the earlier versions of elasticsearch by simply converting the identical field (chargeamount) within the aggs tag which looks like this: { "query":{ "query\_string":{ "query":"a…

---

## [Kibana Auto Refresh](https://discuss.elastic.co/t/kibana-auto-refresh/220391)

<div class="topic-metadata">

**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\
**Replies:** 8\
**Last updated:** [March 4, 2020, 6:25pm UTC](https://discuss.elastic.co/t/kibana-auto-refresh/220391 "2020-03-04T18:25:29Z")

</div>

Hi All, I am using Auto-refresh functionality in the kibana dashboard but it seems not working fine as the dashboard is not updating in the auto-refresh time interval. but when I did the same for discovering page and f…

---

## [Mapping for \[kubernetes.labels.app\] tried to parse field \[app\] as object, but found a concrete value](https://discuss.elastic.co/t/mapping-for-kubernetes-labels-app-tried-to-parse-field-app-as-object-but-found-a-concrete-value/146490)

<div class="topic-metadata">

**Author:** [@Alaa.Mansour](https://discuss.elastic.co/u/Alaa.Mansour)\
**Replies:** 0\
**Last updated:** [August 29, 2018, 8:42am UTC](https://discuss.elastic.co/t/mapping-for-kubernetes-labels-app-tried-to-parse-field-app-as-object-but-found-a-concrete-value/146490 "2018-08-29T08:42:42Z")

</div>

Hello, I'm trying to run ELK stack on Cloud using kubernetes and ship logs and metrics to it with beats. Everything is installed using Kubernetes since everything is on the cloud and ELK is used to mintor kubernetes. C…

---

## [429 Too many requests](https://discuss.elastic.co/t/429-too-many-requests/167729)

<div class="topic-metadata">

**Author:** [@Hammad\_Ali\_Khan](https://discuss.elastic.co/u/Hammad_Ali_Khan)\
**Replies:** 3\
**Last updated:** [February 10, 2019, 12:37pm UTC](https://discuss.elastic.co/t/429-too-many-requests/167729 "2019-02-10T12:37:55Z")

</div>

Hi, I am using AWS Elasticsearch Cluster with 3 m4.xlarge as master nodes and 2 c4.xlarge as data nodes. we are having more write intensive task logging and some other stuff using serverless (lambda). But i thought clus…

---

## [Is it possible to use "nested if" in logstash.conf](https://discuss.elastic.co/t/is-it-possible-to-use-nested-if-in-logstash-conf/59655)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 2\
**Last updated:** [September 2, 2016, 11:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-nested-if-in-logstash-conf/59655 "2016-09-02T11:34:48Z")

</div>

Hi Team, Is it possible to use "nested if" in output section inside logstash.conf ?

---

## [Plot raw data](https://discuss.elastic.co/t/plot-raw-data/103698)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 6\
**Last updated:** [October 13, 2017, 10:59am UTC](https://discuss.elastic.co/t/plot-raw-data/103698 "2017-10-13T10:59:23Z")

</div>

Hi All, I am using the elapsed-filter plugin to obtain processing time for transactions crossing a bunch of services. I've been able to create a time-based histogram of this data in which the Y-axis shows the average pr…

---

## [Query vs. fetch times](https://discuss.elastic.co/t/query-vs-fetch-times/13710)

<div class="topic-metadata">

**Author:** [@Pierce\_Wetter](https://discuss.elastic.co/u/Pierce_Wetter)\
**Replies:** 3\
**Last updated:** [September 20, 2013, 10:34pm UTC](https://discuss.elastic.co/t/query-vs-fetch-times/13710 "2013-09-20T22:34:34Z")

</div>

Noob Question: So my query times in Elastic HQ are about 7x the fetch times. Is that expected or is it possible we're not giving the shard hint correctly so it has to ask all the shards? -- You received thi…

---

## [Rsyslog and ELK](https://discuss.elastic.co/t/rsyslog-and-elk/548)

<div class="topic-metadata">

**Author:** [@Sdclmb](https://discuss.elastic.co/u/Sdclmb)\
**Replies:** 5\
**Last updated:** [May 12, 2015, 7:39pm UTC](https://discuss.elastic.co/t/rsyslog-and-elk/548 "2015-05-12T19:39:22Z")

</div>

hello, I was aked to install a Log server with rsyslog or syslog-ng(don't know which one is better) and to analysis this data with ELK. My question is : is it possible to tell stack ELK to get the log on the first serv…

---

## [Will legacy index template work after version 8 upgrade?](https://discuss.elastic.co/t/will-legacy-index-template-work-after-version-8-upgrade/327908)

<div class="topic-metadata">

**Author:** [@Umang\_Pachaury](https://discuss.elastic.co/u/Umang_Pachaury)\
**Replies:** 8\
**Last updated:** [March 31, 2023, 3:26am UTC](https://discuss.elastic.co/t/will-legacy-index-template-work-after-version-8-upgrade/327908 "2023-03-31T03:26:29Z")

</div>

Hello team, I currently working on cluster with version 7.17.7 and now I am thinking of upgrading it to version 8.x. I received an API deprecation log that Legacy index templates are deprecated in favor of composable te…

---

## [Unable to login to Kibana](https://discuss.elastic.co/t/unable-to-login-to-kibana/215410)

<div class="topic-metadata">

**Author:** [@noble](https://discuss.elastic.co/u/noble)\
**Replies:** 7\
**Last updated:** [January 30, 2020, 12:18am UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana/215410 "2020-01-30T00:18:41Z")

</div>

Trying to setup ES with LDAP. Getting the follow error while logging in Kibana. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authenticate user \[\*\*\*\*\*\] for REST request \[/\_security/\_…

---

## [How to stop filebeat running under non-root account - other than kill](https://discuss.elastic.co/t/how-to-stop-filebeat-running-under-non-root-account-other-than-kill/54471)

<div class="topic-metadata">

**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\
**Replies:** 7\
**Last updated:** [July 5, 2016, 4:40pm UTC](https://discuss.elastic.co/t/how-to-stop-filebeat-running-under-non-root-account-other-than-kill/54471 "2016-07-05T16:40:58Z")

</div>

Is there a way to send shutdown/reboot signal to filebeat running under non-root account? From root account service filebeat restart/stop/start works great - but from non-root account? Thanks, Zoran

---

## [Replace string in a string field (Ingest Pipeline)](https://discuss.elastic.co/t/replace-string-in-a-string-field-ingest-pipeline/248553)

<div class="topic-metadata">

**Author:** [@BkQc](https://discuss.elastic.co/u/BkQc)\
**Replies:** 3\
**Last updated:** [September 21, 2020, 9:47am UTC](https://discuss.elastic.co/t/replace-string-in-a-string-field-ingest-pipeline/248553 "2020-09-21T09:47:32Z")

</div>

I have a field for which I would need to replace &#xD;&#xA; values by CrLf. I tried the following but \\r\\n is not recognized (unexpected character \[\\"\\\\r\]. The only valid escape sequences in strings starting with \[\\"\] a…

---

## [How to use scripted fields in vega/vega-lite visualizations?](https://discuss.elastic.co/t/how-to-use-scripted-fields-in-vega-vega-lite-visualizations/150677)

<div class="topic-metadata">

**Author:** [@tonyskulk](https://discuss.elastic.co/u/tonyskulk)\
**Replies:** 2\
**Last updated:** [October 2, 2018, 5:09pm UTC](https://discuss.elastic.co/t/how-to-use-scripted-fields-in-vega-vega-lite-visualizations/150677 "2018-10-02T17:09:49Z")

</div>

Simple question, but I could not find any documentation about that. On Discover view I can see scripted field values but on my vega visualizations I can not. This is my current spec: { $schema: "https://vega.github.i…

---

## [Metricbeat on AWS ECS using Fargate](https://discuss.elastic.co/t/metricbeat-on-aws-ecs-using-fargate/175277)

<div class="topic-metadata">

**Author:** [@monster](https://discuss.elastic.co/u/monster)\
**Replies:** 7\
**Last updated:** [May 17, 2019, 9:27am UTC](https://discuss.elastic.co/t/metricbeat-on-aws-ecs-using-fargate/175277 "2019-05-17T09:27:31Z")

</div>

I am trying to run Metricbeat using docker as a "sidecar" container in an ECS Fargate Task. Unfortunately when running inside Fargate containers cannot mount volumes on the host such as the /var/run/docker.sock required …

---

## [Elastic Search 7 unable to bootstrap the cluster due to master not discovered yet](https://discuss.elastic.co/t/elastic-search-7-unable-to-bootstrap-the-cluster-due-to-master-not-discovered-yet/182073)

<div class="topic-metadata">

**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Replies:** 4\
**Last updated:** [May 22, 2019, 8:59am UTC](https://discuss.elastic.co/t/elastic-search-7-unable-to-bootstrap-the-cluster-due-to-master-not-discovered-yet/182073 "2019-05-22T08:59:52Z")

</div>

Hi, I downloaded ES 7 zip package on Windows 10. I am running elasticsearch.bat simply by just double clicking it to start my first node (master) of the cluster. I am getting following error on warning (not able to boot…

---

## [ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/103990)

<div class="topic-metadata">

**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\
**Replies:** 1\
**Last updated:** [October 16, 2017, 2:55am UTC](https://discuss.elastic.co/t/error-null-object-returned-for-rollingfile-in-appenders/103990 "2017-10-16T02:55:23Z")

</div>

hi, i need help logstash-5.6.2 \[root@bogon ~\]# java -version java version "1.8.0\_121" Java(TM) SE Runtime Environment (build 1.8.0\_121-b13) Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode) \[root@b…

---

## [I am trying to retrieve the "message" field from my logs for level "ERROR"](https://discuss.elastic.co/t/i-am-trying-to-retrieve-the-message-field-from-my-logs-for-level-error/105179)

<div class="topic-metadata">

**Author:** [@Indiresh\_Ds](https://discuss.elastic.co/u/Indiresh_Ds)\
**Replies:** 6\
**Last updated:** [November 7, 2017, 11:29am UTC](https://discuss.elastic.co/t/i-am-trying-to-retrieve-the-message-field-from-my-logs-for-level-error/105179 "2017-11-07T11:29:34Z")

</div>

Hi there, I am very new to ELK. My apologies if my doubt seems blunt. I have several different errors in my logs. I am trying to get the "message" alone of each of these errors as an alert to my mailbox. I tried using…

---

## [Kibana - Embedding dashboard in website with dynamic filter param](https://discuss.elastic.co/t/kibana-embedding-dashboard-in-website-with-dynamic-filter-param/241518)

<div class="topic-metadata">

**Author:** [@chezhian](https://discuss.elastic.co/u/chezhian)\
**Replies:** 1\
**Last updated:** [July 17, 2020, 11:13am UTC](https://discuss.elastic.co/t/kibana-embedding-dashboard-in-website-with-dynamic-filter-param/241518 "2020-07-17T11:13:54Z")

</div>

Hi I have the same needs as this blog some years back . I want to embbed dashboard on my website: i need to know how to pass URL filters dynamically so i can show each customer only their dashboard data based in cust…

---

## ["Looks like you don't have any logging indices"](https://discuss.elastic.co/t/looks-like-you-dont-have-any-logging-indices/156915)

<div class="topic-metadata">

**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\
**Replies:** 7\
**Last updated:** [November 16, 2018, 10:18am UTC](https://discuss.elastic.co/t/looks-like-you-dont-have-any-logging-indices/156915 "2018-11-16T10:18:30Z")

</div>

I'm trying to figure out what constitutes a "logging index" - I'm getting the message " Looks like you don't have any logging indices" when testing the new "Logs" app in Kibana, but I can't find any documentation around …

---

## [Master not discovered exception for two node cluster](https://discuss.elastic.co/t/master-not-discovered-exception-for-two-node-cluster/243452)

<div class="topic-metadata">

**Author:** [@abi.mc](https://discuss.elastic.co/u/abi.mc)\
**Replies:** 4\
**Last updated:** [August 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-for-two-node-cluster/243452 "2020-08-03T09:56:01Z")

</div>

I have setup a two node production ELK cluster using 7.8.0 using docker on two hosts VMs. Transport and HTTP encryption has been enabled. Current master node \[elastic@pelk01 ~\]$ curl -k https://127.0.0.1:9200/\_cat/mast…

---

## [Multiple Grok pattern filters arent filtering multiple logs in one logstash file](https://discuss.elastic.co/t/multiple-grok-pattern-filters-arent-filtering-multiple-logs-in-one-logstash-file/214654)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 7\
**Last updated:** [January 16, 2020, 11:33pm UTC](https://discuss.elastic.co/t/multiple-grok-pattern-filters-arent-filtering-multiple-logs-in-one-logstash-file/214654 "2020-01-16T23:33:57Z")

</div>

Below is my pipeline.conf where I want the filter block to apply three separate grok patterns on three different log files. But currently, it isnt working. Should I add multiple pipelines to it? or create three different…

---

## [\[SOLVED\] SNMP trap input plugin](https://discuss.elastic.co/t/solved-snmp-trap-input-plugin/53742)

<div class="topic-metadata">

**Author:** [@def](https://discuss.elastic.co/u/def)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 11:32am UTC](https://discuss.elastic.co/t/solved-snmp-trap-input-plugin/53742 "2016-07-05T11:32:33Z")

</div>

Hello, I have a question : Is it possible to limit the fields value for the output in logstash? I'm using SNMP trap and I have a lot of different type of MIB, so I have a lot of indexed fields in Kibana and after few …

---

## [Query Results Limit](https://discuss.elastic.co/t/query-results-limit/99060)

<div class="topic-metadata">

**Author:** [@vahmed](https://discuss.elastic.co/u/vahmed)\
**Replies:** 2\
**Last updated:** [September 1, 2017, 6:36pm UTC](https://discuss.elastic.co/t/query-results-limit/99060 "2017-09-01T18:36:32Z")

</div>

I am new to Kibana and I’ve tried googling for this issue I am facing where the result of watcher reports that there were \>10 hits however it only returns only 10 and from my research so far it looks like 10 is the defau…

---

## [CSV Export in Kibana not showing all the records](https://discuss.elastic.co/t/csv-export-in-kibana-not-showing-all-the-records/233291)

<div class="topic-metadata">

**Author:** [@MaheshKumar](https://discuss.elastic.co/u/MaheshKumar)\
**Replies:** 7\
**Last updated:** [May 20, 2020, 9:23am UTC](https://discuss.elastic.co/t/csv-export-in-kibana-not-showing-all-the-records/233291 "2020-05-20T09:23:46Z")

</div>

Facing an issue while downloading csv file in Kibana. Followed below steps : Clicked on Discover Set date range of 15 days from from. It returned some ~57K records. Clicked on save. Saved the report and clicked on shar…

---

## [Elasticsearch inserting date type documents as UTC timezone datetime while indexing](https://discuss.elastic.co/t/elasticsearch-inserting-date-type-documents-as-utc-timezone-datetime-while-indexing/19197)

<div class="topic-metadata">

**Author:** [@bagui](https://discuss.elastic.co/u/bagui)\
**Replies:** 8\
**Last updated:** [January 8, 2015, 6:21am UTC](https://discuss.elastic.co/t/elasticsearch-inserting-date-type-documents-as-utc-timezone-datetime-while-indexing/19197 "2015-01-08T06:21:49Z")

</div>

Hi, I'm using below code to insert some documents in elasticsearch index. But when inserting in the es the time is coming as UTC format rather than original GMT+5:30Z format. Where as the Sysout before indexing is…

---

## [Client requested protocol tlsv1 is not enabled or supported in server context](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/256610)

<div class="topic-metadata">

**Author:** [@adnanahmed](https://discuss.elastic.co/u/adnanahmed)\
**Replies:** 4\
**Last updated:** [November 25, 2020, 1:54pm UTC](https://discuss.elastic.co/t/client-requested-protocol-tlsv1-is-not-enabled-or-supported-in-server-context/256610 "2020-11-25T13:54:42Z")

</div>

Hi, we are using ELK stack version 7.9.0 , when we try to connect logstash with elastic it give us error . 'client requested protocol tlsv1 is not enabled or supported in server context' when we specify following …

---

## [Logstash-salesforce-input plugin interval refresh](https://discuss.elastic.co/t/logstash-salesforce-input-plugin-interval-refresh/109830)

<div class="topic-metadata">

**Author:** [@mPanasiewicz](https://discuss.elastic.co/u/mPanasiewicz)\
**Replies:** 0\
**Last updated:** [November 30, 2017, 8:20pm UTC](https://discuss.elastic.co/t/logstash-salesforce-input-plugin-interval-refresh/109830 "2017-11-30T20:20:56Z")

</div>

Hello, When logstash starts it fetches only once data. I'd like to refresh my data in cycles/intervals/schedule. What is the best option for this. For now i would like to try cron tasks. In my opinion it is not good sol…

---

## [Sorting for date field](https://discuss.elastic.co/t/sorting-for-date-field/226205)

<div class="topic-metadata">

**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\
**Replies:** 8\
**Last updated:** [April 3, 2020, 3:14pm UTC](https://discuss.elastic.co/t/sorting-for-date-field/226205 "2020-04-03T15:14:37Z")

</div>

Hello, I am using last\_modified\_date field from my index. I am sorting my results using this same field. field data is enabled on this column. but i am not getting correct results for sorting. I want to convert this …

---

## [Realtime dashboard update using Kibana from Elasticsearch Service using push notification](https://discuss.elastic.co/t/realtime-dashboard-update-using-kibana-from-elasticsearch-service-using-push-notification/196424)

<div class="topic-metadata">

**Author:** [@sxsarkar](https://discuss.elastic.co/u/sxsarkar)\
**Replies:** 7\
**Last updated:** [August 23, 2019, 10:42pm UTC](https://discuss.elastic.co/t/realtime-dashboard-update-using-kibana-from-elasticsearch-service-using-push-notification/196424 "2019-08-23T22:42:17Z")

</div>

Hi I have seen multiple discussions on sending push notification on Kibana Dashboard from Elasticsearch services so Kibana dashboard can get updated in realtime. Is it part of Kinaba 7.3 feature now, I know earlier it wa…

---

## [Translation missing: en.logstash.agent.configuration.invalid\_plugin\_register](https://discuss.elastic.co/t/translation-missing-en-logstash-agent-configuration-invalid-plugin-register/62834)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 3\
**Last updated:** [January 2, 2017, 6:56pm UTC](https://discuss.elastic.co/t/translation-missing-en-logstash-agent-configuration-invalid-plugin-register/62834 "2017-01-02T18:56:11Z")

</div>

Using latest logstash beta, here's what I get: \[10:06:43 @tester:/var/log/logstash$\] sudo -u logstash /usr/share/logstash/bin/logstash --path.settings=/etc/logstash -f /etc/logstash/conf.d -t Configuration OK but star…

---

## [Kibana: how to calculate a delta metric in table visualization?](https://discuss.elastic.co/t/kibana-how-to-calculate-a-delta-metric-in-table-visualization/73646)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [February 16, 2017, 7:46pm UTC](https://discuss.elastic.co/t/kibana-how-to-calculate-a-delta-metric-in-table-visualization/73646 "2017-02-16T19:46:22Z")

</div>

Hi, I have logs, which contain statistical absolute values. Each minute I get the statistics, how many transactions a service has processed since start of the service. So it is a steadily growing number until the next …

[Previous page](https://discuss.elastic.co/top.md?page=341&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=343&per_page=50&period=all)
