# Top **URL:** https://discuss.elastic.co/top.md?page=359&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 360 --- ## [Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/125826)
**Author:** [@breakAwall](https://discuss.elastic.co/u/breakAwall)\ **Replies:** 7\ **Last updated:** [April 5, 2018, 11:57am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/125826 "2018-04-05T11:57:07Z")
I ran the command bin/elasticsearch command and got the error Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch As per previous threads I ensured that my java Home variable was set corr… --- ## [Stumped on TIMESTAMP\_ISO8601 in grok](https://discuss.elastic.co/t/stumped-on-timestamp-iso8601-in-grok/57733)
**Author:** [@Ron\_Pritchett](https://discuss.elastic.co/u/Ron_Pritchett)\ **Replies:** 3\ **Last updated:** [August 12, 2016, 4:17pm UTC](https://discuss.elastic.co/t/stumped-on-timestamp-iso8601-in-grok/57733 "2016-08-12T16:17:40Z")
Hello, I'm not sure why this is throwing an error. the input file: \<133\>2016-08-10T16:33:39.827713+00:00 localhost opt-log-nginx-access the configfile: input { stdin { type =\> syslog } } filter { … --- ## [Kibana Visualize - Field not showing](https://discuss.elastic.co/t/kibana-visualize-field-not-showing/86747)
**Author:** [@jim1044](https://discuss.elastic.co/u/jim1044)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 1:11am UTC](https://discuss.elastic.co/t/kibana-visualize-field-not-showing/86747 "2017-05-26T01:11:25Z")
Hi everyone, I'm still new at this so please forgive me. I am attempting to visualize some data in Kibana by using: Data Table \> Split Row \> Aggregation \> Terms. The problem here is I am unable to locate "event\_data.C… --- ## [APM agent can't connect to APM](https://discuss.elastic.co/t/apm-agent-cant-connect-to-apm/271697)
**Author:** [@komilll](https://discuss.elastic.co/u/komilll)\ **Replies:** 1\ **Last updated:** [May 7, 2021, 3:38pm UTC](https://discuss.elastic.co/t/apm-agent-cant-connect-to-apm/271697 "2021-05-07T15:38:16Z")
Kibana version: 7.7.0 Elasticsearch version: 7.7.0 APM Server version: 7.7.0 APM Agent language and version: Java - openjdk:8-jre-alpine Browser version: Firefox 88.0 Original install method (e.g. download page, yum… --- ## [Update a same document on a same time?](https://discuss.elastic.co/t/update-a-same-document-on-a-same-time/39417)
**Author:** [@YangYongZhi](https://discuss.elastic.co/u/YangYongZhi)\ **Replies:** 3\ **Last updated:** [January 20, 2016, 3:09pm UTC](https://discuss.elastic.co/t/update-a-same-document-on-a-same-time/39417 "2016-01-20T15:09:00Z")
I have a problem when i have to update a same document with tow different thread , for example : there is a document like this: {id = 1 , ware\_sku=1 ,ware \_ware= 2 , ……..}, but i know that the Partial Updates to D… --- ## [Connection error between filebeat server and elasticsearch server: EOF error](https://discuss.elastic.co/t/connection-error-between-filebeat-server-and-elasticsearch-server-eof-error/136260)
**Author:** [@A3TH3RIUS](https://discuss.elastic.co/u/A3TH3RIUS)\ **Replies:** 6\ **Last updated:** [June 18, 2018, 2:41pm UTC](https://discuss.elastic.co/t/connection-error-between-filebeat-server-and-elasticsearch-server-eof-error/136260 "2018-06-18T14:41:54Z")
hi everyone, I'm trying to set up two communicating servers, one having elasticsearch and one with Filebeat ... The problem is that I can not get the logs on my elasticsearch server and in the Filebeat log file I get t… --- ## [Where does Elastic search stores the data in windows machine](https://discuss.elastic.co/t/where-does-elastic-search-stores-the-data-in-windows-machine/102064)
**Author:** [@Thiyagarajan](https://discuss.elastic.co/u/Thiyagarajan)\ **Replies:** 8\ **Last updated:** [October 5, 2017, 5:37am UTC](https://discuss.elastic.co/t/where-does-elastic-search-stores-the-data-in-windows-machine/102064 "2017-10-05T05:37:39Z")
Hi, We have downloaded ELK and unzipped them under c:\\Softwares in windows machine. We have started the Elasticsearch, Kibana and Logstash with respective .bat files in bin directory. Filebeat is installed in our SIT s… --- ## [I want to know why the indices.id\_field\_data.enabled configuration is turned off by default](https://discuss.elastic.co/t/i-want-to-know-why-the-indices-id-field-data-enabled-configuration-is-turned-off-by-default/336834)
**Author:** [@gaorui](https://discuss.elastic.co/u/gaorui)\ **Replies:** 1\ **Last updated:** [June 28, 2023, 1:12pm UTC](https://discuss.elastic.co/t/i-want-to-know-why-the-indices-id-field-data-enabled-configuration-is-turned-off-by-default/336834 "2023-06-28T13:12:43Z")
I have a 200 million index, and I need to find out about 1 million of them based on certain conditions. I used the scroll api to query before, but I found that in the 8.x version, the scroll api is no longer recommended,… --- ## [Full list of supported document formats by ES](https://discuss.elastic.co/t/full-list-of-supported-document-formats-by-es/81149)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 4\ **Last updated:** [April 4, 2017, 2:27pm UTC](https://discuss.elastic.co/t/full-list-of-supported-document-formats-by-es/81149 "2017-04-04T14:27:33Z")
Hi, I found following list of formats supported by Tika http://tika.apache.org/1.14/formats.html#Full\_list\_of\_Supported\_Formats What all file formats are supported by Ingest attachment plugin? Does it support all for… --- ## [Logstash 5 unexpected error occurred queue must be a writable](https://discuss.elastic.co/t/logstash-5-unexpected-error-occurred-queue-must-be-a-writable/68926)
**Author:** [@namobuddhaonion](https://discuss.elastic.co/u/namobuddhaonion)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 9:17pm UTC](https://discuss.elastic.co/t/logstash-5-unexpected-error-occurred-queue-must-be-a-writable/68926 "2016-12-20T21:17:52Z")
I installed Logstash using the following guide (I also have Elasticseach and Kibana 5) on an Ubuntu 16.0x base. https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html Logstash appears to wo… --- ## [Slow Indexing Speed](https://discuss.elastic.co/t/slow-indexing-speed/13484)
**Author:** [@Robert\_Navarro](https://discuss.elastic.co/u/Robert_Navarro)\ **Replies:** 4\ **Last updated:** [September 6, 2013, 7:58pm UTC](https://discuss.elastic.co/t/slow-indexing-speed/13484 "2013-09-06T19:58:25Z")
Hello, I have a single server ES "cluster" setup right now and it's struggling to keep up with our indexing load. The server has 30GB of ram, 15GB locked for elasticsearch. Here are the ES details: { "ok… --- ## [Must match multiple fields in nested objects](https://discuss.elastic.co/t/must-match-multiple-fields-in-nested-objects/54774)
**Author:** [@maticzav](https://discuss.elastic.co/u/maticzav)\ **Replies:** 4\ **Last updated:** [July 8, 2016, 4:18pm UTC](https://discuss.elastic.co/t/must-match-multiple-fields-in-nested-objects/54774 "2016-07-08T16:18:20Z")
Hi! I have been trying to implement my application with tagging feature. Tags would consist of name field and value field and be nested objects under value tags. Code: (taken from response of match\_all search) { … --- ## [JSON Input Help w/ Kibana data table](https://discuss.elastic.co/t/json-input-help-w-kibana-data-table/26025)
**Author:** [@Mrc0113](https://discuss.elastic.co/u/Mrc0113)\ **Replies:** 7\ **Last updated:** [January 18, 2017, 11:30pm UTC](https://discuss.elastic.co/t/json-input-help-w-kibana-data-table/26025 "2017-01-18T23:30:59Z")
I'm using a data table in Kibana4 and am trying to achieve the following: We are using logstash to retrieve events and I have one field in elasticsearch that marks an event as a transaction starting, success or failure.… --- ## [Elasticsearch return match fields](https://discuss.elastic.co/t/elasticsearch-return-match-fields/59746)
**Author:** [@mozinrat](https://discuss.elastic.co/u/mozinrat)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-return-match-fields/59746 "2016-09-06T14:24:18Z")
I am trying GET \_search { "query": { "match": { "\_all":"MCRFX" } } } I need to find which field the match happened, if that can be found. I am open to use another query, the idea is to search a va… --- ## [Scoring of queries on nested documents](https://discuss.elastic.co/t/scoring-of-queries-on-nested-documents/20357)
**Author:** [@barry](https://discuss.elastic.co/u/barry)\ **Replies:** 4\ **Last updated:** [October 22, 2014, 10:38am UTC](https://discuss.elastic.co/t/scoring-of-queries-on-nested-documents/20357 "2014-10-22T10:38:11Z")
Hello, I am having a problem understanding how scoring of nested documents works. I have found other people with similar questions which have remained unanswered: http://stackoverflow.com/questions/25619632/elast… --- ## [How to continuously pull from Cassandra into Logstash](https://discuss.elastic.co/t/how-to-continuously-pull-from-cassandra-into-logstash/44674)
**Author:** [@nkanov](https://discuss.elastic.co/u/nkanov)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 1:33pm UTC](https://discuss.elastic.co/t/how-to-continuously-pull-from-cassandra-into-logstash/44674 "2016-07-01T13:33:34Z")
Hi all, I'm trying to setup Logstash to continuously pull information from Cassandra, in the same fashion it works with file inputs. I'm using the Cassandra JDBC Driver and I can successfully pull the contents, but onc… --- ## [\[SOLVED\] Painless IDE plugin](https://discuss.elastic.co/t/solved-painless-ide-plugin/148425)
**Author:** [@cbismuth](https://discuss.elastic.co/u/cbismuth)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 10:23pm UTC](https://discuss.elastic.co/t/solved-painless-ide-plugin/148425 "2018-09-13T22:23:05Z")
Hi, Painless language looks like Java, but it's not Java. Therefore IDE generate warnings and errors when editing Painless scripts with Java (or Groovy) editors. As an ANTLR4 grammar is available, is there any plan to … --- ## [Filebeat - It is not creating index on Kibana](https://discuss.elastic.co/t/filebeat-it-is-not-creating-index-on-kibana/74402)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 5\ **Last updated:** [February 11, 2017, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-it-is-not-creating-index-on-kibana/74402 "2017-02-11T14:41:11Z")
Hello! I am using ELK stack version 5.2 latest. I'm trying to configure the FIlebeat. My configuration is Filebeat \> Elasticsearch \> Kibana. However there is something wrong and I couldn't figure it out. There are so… --- ## [Convert timestamp into date](https://discuss.elastic.co/t/convert-timestamp-into-date/187306)
**Author:** [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\ **Replies:** 3\ **Last updated:** [June 26, 2019, 12:00pm UTC](https://discuss.elastic.co/t/convert-timestamp-into-date/187306 "2019-06-26T12:00:35Z")
I tried to extract anomaly results using the following request: GET .ml-anomalies-.write-my\_job\_low\_sum/\_search?human { "size": 10000 } One of the results I got was: "\_index" : ".ml-anomalies-custom-low\_sum\_results… --- ## [SAML with Azure AD](https://discuss.elastic.co/t/saml-with-azure-ad/183388)
**Author:** [@hmayer](https://discuss.elastic.co/u/hmayer)\ **Replies:** 5\ **Last updated:** [June 4, 2019, 9:50am UTC](https://discuss.elastic.co/t/saml-with-azure-ad/183388 "2019-06-04T09:50:52Z")
I wanted to share my SAML configuration with Azure AD No documentation I found is 100% correct In a hot-warm deployment you must configure both elasticsearch instances Elasticsearch config xpack: security: authc: … --- ## [Should in filtered query](https://discuss.elastic.co/t/should-in-filtered-query/70918)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 8\ **Last updated:** [January 10, 2017, 5:09am UTC](https://discuss.elastic.co/t/should-in-filtered-query/70918 "2017-01-10T05:09:26Z")
A mentioned in the docs I replaced by GET smsc\_logs-2017.01.09/\_search { "query": { "bool": { "should": \[ { "wildcard": { "path": "/home/GEMS/ES/CDR/Delivery/SMSCDR\_DEL\_ATTEM… --- ## [Can only use prefix queries on keyword and text fields - not on \[soCode\] which is of type](https://discuss.elastic.co/t/can-only-use-prefix-queries-on-keyword-and-text-fields-not-on-socode-which-is-of-type/225358)
**Author:** [@Oh\_Chee\_Peng](https://discuss.elastic.co/u/Oh_Chee_Peng)\ **Replies:** 5\ **Last updated:** [April 22, 2020, 9:41am UTC](https://discuss.elastic.co/t/can-only-use-prefix-queries-on-keyword-and-text-fields-not-on-socode-which-is-of-type/225358 "2020-04-22T09:41:52Z")
I have this scenario, where the keyword is string, ex: customerName, which is string; as well as soCode, which is number. First, I added a record into elasticsearch: POST sales-orders/\_doc/1234 { customerName: "hel… --- ## [Caching Elasticsearch vs Redis](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289)
**Author:** [@Clayton\_D](https://discuss.elastic.co/u/Clayton_D)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 4:59pm UTC](https://discuss.elastic.co/t/caching-elasticsearch-vs-redis/284289 "2021-09-15T16:59:39Z")
Architecture to support 2D GeoQuery As a background, I’m attempting to test a database to power backend of an app that matches users with other users based on time and coordinates (with preference for geoproximity but a… --- ## [Metricbeat Kafka Module "error in connect: EOF"](https://discuss.elastic.co/t/metricbeat-kafka-module-error-in-connect-eof/193392)
**Author:** [@broccoli](https://discuss.elastic.co/u/broccoli)\ **Replies:** 4\ **Last updated:** [August 29, 2019, 2:07pm UTC](https://discuss.elastic.co/t/metricbeat-kafka-module-error-in-connect-eof/193392 "2019-08-29T14:07:31Z")
Using the Metricbeat Kafka module, I get the following errors: 2019-08-01T20:31:02.479+0200 INFO kafka/log.go:53 Connected to broker at localhost:9093 (unregistered) 2019-08-01T20:31:02.731+0200 INFO kafka/… --- ## [\[esaggs\] \> too many requests is showing on dashboard](https://discuss.elastic.co/t/esaggs-too-many-requests-is-showing-on-dashboard/260878)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 8\ **Last updated:** [January 13, 2021, 4:47am UTC](https://discuss.elastic.co/t/esaggs-too-many-requests-is-showing-on-dashboard/260878 "2021-01-13T04:47:20Z")
Hi, I am getting \[esaggs\] \> too many requests on my Dashboard. Cannot find any solution for that. Please help Thanks . Regards Rohit. --- ## [Logstash Mutate replace field with value](https://discuss.elastic.co/t/logstash-mutate-replace-field-with-value/45086)
**Author:** [@manthan\_patel](https://discuss.elastic.co/u/manthan_patel)\ **Replies:** 7\ **Last updated:** [March 23, 2016, 11:48am UTC](https://discuss.elastic.co/t/logstash-mutate-replace-field-with-value/45086 "2016-03-23T11:48:37Z")
Hi I am trying to replace field "component " but not showing in output what exactly i am doing wrong . I am new to ELK. below is my logstash config. input { tcp { 'port' =\> '9563' } } filter { json { source =\> 'messa… --- ## [Keyword extraction](https://discuss.elastic.co/t/keyword-extraction/224)
**Author:** [@emoe](https://discuss.elastic.co/u/emoe)\ **Replies:** 5\ **Last updated:** [May 11, 2015, 10:12am UTC](https://discuss.elastic.co/t/keyword-extraction/224 "2015-05-11T10:12:36Z")
I have a corpus of ~10K articles. For each article I would like to extract keywords (tags). So for every article I would like a ranking of the tokenized terms in the article based on their frequency in the article relati… --- ## [Nested issue](https://discuss.elastic.co/t/nested-issue/49407)
**Author:** [@Dominique](https://discuss.elastic.co/u/Dominique)\ **Replies:** 8\ **Last updated:** [May 20, 2016, 8:02am UTC](https://discuss.elastic.co/t/nested-issue/49407 "2016-05-20T08:02:20Z")
Hi, I have a little issue to use nested field in the mapping. I use elasticsearch 2.3.2 The mapping is the following: "@stk": { "properties": { "@children": { … --- ## [Producer/broker/16 maximum request accumulated, waiting for space kafka output](https://discuss.elastic.co/t/producer-broker-16-maximum-request-accumulated-waiting-for-space-kafka-output/169145)
**Author:** [@userguy](https://discuss.elastic.co/u/userguy)\ **Replies:** 4\ **Last updated:** [February 25, 2019, 11:21am UTC](https://discuss.elastic.co/t/producer-broker-16-maximum-request-accumulated-waiting-for-space-kafka-output/169145 "2019-02-25T11:21:32Z")
Hello I am seeing this message in my filebeat Messages , As of now i have set bulk to 3072 and will see if there is any improvement . Additional query i have is how does worker impact in kafka output .By default is one … --- ## [Insert nested JSON with XContentBuilder](https://discuss.elastic.co/t/insert-nested-json-with-xcontentbuilder/80297)
**Author:** [@samdev](https://discuss.elastic.co/u/samdev)\ **Replies:** 3\ **Last updated:** [March 28, 2017, 2:10pm UTC](https://discuss.elastic.co/t/insert-nested-json-with-xcontentbuilder/80297 "2017-03-28T14:10:12Z")
I have data flowing into a document from two sources. One is text which needs to be converted to JSON. Simple to add it using: jsonBuilder.field(name, value); The other source has data that is already formatted as JSO… --- ## [License on premise price](https://discuss.elastic.co/t/license-on-premise-price/236854)
**Author:** [@Felix\_Valembois](https://discuss.elastic.co/u/Felix_Valembois)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 2:43pm UTC](https://discuss.elastic.co/t/license-on-premise-price/236854 "2020-06-12T14:43:26Z")
hello, I was wondering if the license Gold and Platinum could not be on cloud and what would be the price for those solution. On other forums i do have found an approximate price for the gold and platinum (depending on… --- ## [Groovy script compile error and not sure why](https://discuss.elastic.co/t/groovy-script-compile-error-and-not-sure-why/62171)
**Author:** [@sgt\_b2002](https://discuss.elastic.co/u/sgt_b2002)\ **Replies:** 6\ **Last updated:** [January 29, 2017, 9:58am UTC](https://discuss.elastic.co/t/groovy-script-compile-error-and-not-sure-why/62171 "2017-01-29T09:58:52Z")
Hi everyone, Based on some guidance in IRC I came across an article to perform a script aggregation based on converting a date field to put results into buckets based on day of week and hour. https://qbox.io/blog/elast… --- ## [Filebeat: duplicate events](https://discuss.elastic.co/t/filebeat-duplicate-events/73693)
**Author:** [@N31LR](https://discuss.elastic.co/u/N31LR)\ **Replies:** 7\ **Last updated:** [February 9, 2017, 3:10pm UTC](https://discuss.elastic.co/t/filebeat-duplicate-events/73693 "2017-02-09T15:10:33Z")
I have a very simple elkstack POC environment using Filebeat \> logstash \> elasticsearch \> kibana All have been updated to 5.2 previously used 5.0 None of the elk stack components are clustered If I remove filebeat and … --- ## [Kibana Scripted Fields (add fields)](https://discuss.elastic.co/t/kibana-scripted-fields-add-fields/219752)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 5\ **Last updated:** [February 26, 2020, 8:40am UTC](https://discuss.elastic.co/t/kibana-scripted-fields-add-fields/219752 "2020-02-26T08:40:49Z")
I'm looking for some pointers on whether what I am trying to do is possible or if I'm wasting time looking. :slight\_smile: I have multiple winlogbeat sources injecting directly into a winlogbeat index, bypassing my Logs… --- ## [\[logstash.pipeline\] Error registering plugin](https://discuss.elastic.co/t/logstash-pipeline-error-registering-plugin/91674)
**Author:** [@nir](https://discuss.elastic.co/u/nir)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 12:09pm UTC](https://discuss.elastic.co/t/logstash-pipeline-error-registering-plugin/91674 "2017-07-05T12:09:53Z")
Installed logstash 5.4.3 and elasticsearch 5.4.3 on Centos 7.3.1611 The configuration file in /etc/logstash/conf.d has the following lines input { tcp { port =\> 5000 type =\> syslog } udp { port =\> 5000 … --- ## [Max spans has been reached](https://discuss.elastic.co/t/max-spans-has-been-reached/297357)
**Author:** [@scroodj](https://discuss.elastic.co/u/scroodj)\ **Replies:** 6\ **Last updated:** [February 18, 2022, 9:23am UTC](https://discuss.elastic.co/t/max-spans-has-been-reached/297357 "2022-02-18T09:23:17Z")
Kibana version: 7.17.0 Elasticsearch version: 7.17.0 APM Server version: 7.17.0 APM Agent language and version: Java 8, agent version 1.28.4 Description of the problem: Nomatter that value (up to 2147483647) i put i… --- ## [Aggregation on fields within nested objects in elasticsearch](https://discuss.elastic.co/t/aggregation-on-fields-within-nested-objects-in-elasticsearch/135404)
**Author:** [@Tosh](https://discuss.elastic.co/u/Tosh)\ **Replies:** 5\ **Last updated:** [June 13, 2018, 9:53am UTC](https://discuss.elastic.co/t/aggregation-on-fields-within-nested-objects-in-elasticsearch/135404 "2018-06-13T09:53:25Z")
hi , I have two entries in nested object mapping as below : "itemslist": { "type": "nested", "properties": { "type": "object", "properties": { "itemname": { "type": "text" … --- ## [Elasticsearch best\_compression](https://discuss.elastic.co/t/elasticsearch-best-compression/320397)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 4\ **Last updated:** [December 4, 2022, 3:05am UTC](https://discuss.elastic.co/t/elasticsearch-best-compression/320397 "2022-12-04T03:05:55Z")
Hello, I have a bunch of indices that I've remotely re-indexed into a single node as a sort of a backup, these won't need to be written to anymore so I'd like to make them smaller, if possible. What would be the correc… --- ## [How to dynamically turn off slowlog](https://discuss.elastic.co/t/how-to-dynamically-turn-off-slowlog/36244)
**Author:** [@Jeremy\_Loss](https://discuss.elastic.co/u/Jeremy_Loss)\ **Replies:** 3\ **Last updated:** [December 4, 2015, 2:03am UTC](https://discuss.elastic.co/t/how-to-dynamically-turn-off-slowlog/36244 "2015-12-04T02:03:01Z")
I might be a bit daft on this one, but how would i turn off slow logging through an HTTP call? I used the command in the logging docs, https://www.elastic.co/guide/en/elasticsearch/guide/current/logging.html, to turn on… --- ## [Kibana not connecting to elasticservice in windows](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticservice-in-windows/227334)
**Author:** [@Carlos\_Bodini](https://discuss.elastic.co/u/Carlos_Bodini)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 5:51pm UTC](https://discuss.elastic.co/t/kibana-not-connecting-to-elasticservice-in-windows/227334 "2020-04-09T17:51:22Z")
hello team! I'm building a elastic cluster and i'm having a trouble to bring kibana online, it looks like it cannot connect to the elasticsearch service, follow the logs Kibana: {"type":"log","@timestamp":"2020-04-09T… --- ## [How to set a new time filter field?](https://discuss.elastic.co/t/how-to-set-a-new-time-filter-field/212298)
**Author:** [@florent1](https://discuss.elastic.co/u/florent1)\ **Replies:** 4\ **Last updated:** [December 20, 2019, 2:29pm UTC](https://discuss.elastic.co/t/how-to-set-a-new-time-filter-field/212298 "2019-12-20T14:29:09Z")
Hello everyone, I'm new to ES and Kibana so my question might be stupid, but I can't find how to set the filter time by default for my index. I've downloaded the kibana sample data eCommerce and it does have a time fie… --- ## [Filebeat - Decoding Json logs with Linebreaks](https://discuss.elastic.co/t/filebeat-decoding-json-logs-with-linebreaks/136394)
**Author:** [@motamedi791](https://discuss.elastic.co/u/motamedi791)\ **Replies:** 5\ **Last updated:** [June 21, 2018, 9:50pm UTC](https://discuss.elastic.co/t/filebeat-decoding-json-logs-with-linebreaks/136394 "2018-06-21T21:50:04Z")
I was able to make FileBeat work with json log files. However, when a log message contains line breaks, the json parser can not decode the json. For example, the following log line can not be decoded correctly: {"times… --- ## [Filebeat is harvesting the same log over and over](https://discuss.elastic.co/t/filebeat-is-harvesting-the-same-log-over-and-over/109746)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 7\ **Last updated:** [December 13, 2017, 8:56pm UTC](https://discuss.elastic.co/t/filebeat-is-harvesting-the-same-log-over-and-over/109746 "2017-12-13T20:56:19Z")
Hi everyone, 2 days ago i did an upgrade from Logstash and Filebeat from 5.6.x to 6.0, then i got some fun time with index\_templates and document\_type, but after that, i found the strange behavior of Filebeat. i only c… --- ## [Need help with regular expression filtering](https://discuss.elastic.co/t/need-help-with-regular-expression-filtering/97801)
**Author:** [@UnitedMarsupials](https://discuss.elastic.co/u/UnitedMarsupials)\ **Replies:** 5\ **Last updated:** [August 23, 2017, 1:59am UTC](https://discuss.elastic.co/t/need-help-with-regular-expression-filtering/97801 "2017-08-23T01:59:04Z")
I’m trying to filter by HTTP “Referer” header. The values are too “hairy” for a simple matching, requiring regular expressions. I start with a simple query: { "query": { "regexp": { "http\_referer": { … --- ## [Resolving deprecation warnings to allow us to upgrade](https://discuss.elastic.co/t/resolving-deprecation-warnings-to-allow-us-to-upgrade/178038)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 6\ **Last updated:** [May 1, 2019, 7:58pm UTC](https://discuss.elastic.co/t/resolving-deprecation-warnings-to-allow-us-to-upgrade/178038 "2019-05-01T19:58:38Z")
I am currently going through the Elasticsearch deprecation logs to check what we may need to resolve prior to upgrading our ELK Stack from v6.0.0 where I have found the following but have no clue how to resolve. \[o.e.d.… --- ## [Filebeats auto-mapping of kubernetes labels causing big issues](https://discuss.elastic.co/t/filebeats-auto-mapping-of-kubernetes-labels-causing-big-issues/154718)
**Author:** [@rocketraman](https://discuss.elastic.co/u/rocketraman)\ **Replies:** 7\ **Last updated:** [November 1, 2018, 7:59pm UTC](https://discuss.elastic.co/t/filebeats-auto-mapping-of-kubernetes-labels-causing-big-issues/154718 "2018-11-01T19:59:32Z")
Filebeats 6.4.2, with Kubernetes auto-discovery, is failing to index most of my Kubernetes logs, due to errors like this: (status=400): {"type":"mapper\_parsing\_exception","reason":"object mapping for \[kubernetes.labels.… --- ## [How to create daily Indices in elastic search 7.1.0?](https://discuss.elastic.co/t/how-to-create-daily-indices-in-elastic-search-7-1-0/193338)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 4\ **Last updated:** [August 14, 2019, 7:48pm UTC](https://discuss.elastic.co/t/how-to-create-daily-indices-in-elastic-search-7-1-0/193338 "2019-08-14T19:48:58Z")
Hi, I am using ELK stack version 7.1.0 and i send my logs using logstash. Now, All my logs are getting into one index. I want create index daily basis and store those logs of that particular day in that particular ind… --- ## [Install from source and run as non-root](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430)
**Author:** [@JanJ](https://discuss.elastic.co/u/JanJ)\ **Replies:** 2\ **Last updated:** [July 30, 2015, 7:59pm UTC](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430 "2015-07-30T19:59:07Z")
Hi there, can Packetbeat be meaningfully run using a non root user? I've got the following limitations on my servers (provided by another department in our company): Only standard RedHat packages can be installed… --- ## [Kibana - markdown image and link new dashboard](https://discuss.elastic.co/t/kibana-markdown-image-and-link-new-dashboard/138165)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 5\ **Last updated:** [July 3, 2018, 10:17am UTC](https://discuss.elastic.co/t/kibana-markdown-image-and-link-new-dashboard/138165 "2018-07-03T10:17:00Z")
hi, i have a simple question : is it possible to generate link on an image.png in markdown ? in the example bellow, i have a markdown view, "MyBox", containing 3 images "Try1" (file.png), "Try2" and "Try3". i would t… --- ## [Phrase suggester not capable of removing whitespace ("marktp latz" =\> "marktplatz")](https://discuss.elastic.co/t/phrase-suggester-not-capable-of-removing-whitespace-marktp-latz-marktplatz/184823)
**Author:** [@mrkamel](https://discuss.elastic.co/u/mrkamel)\ **Replies:** 0\ **Last updated:** [June 8, 2019, 5:15am UTC](https://discuss.elastic.co/t/phrase-suggester-not-capable-of-removing-whitespace-marktp-latz-marktplatz/184823 "2019-06-08T05:15:28Z")
Hi, the phrase suggester does not seem to be capable of removing erroneously introduced whitespace. E.g. marktp latz =\> gives no suggestions, while for marktp\_latz =\> marktplatz actually is suggested. The same for all… [Previous page](https://discuss.elastic.co/top.md?page=358&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=360&per_page=50&period=all)