# Top

**URL:** https://discuss.elastic.co/top.md?page=360&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 361

---

## [How to reduce filebeat lag time?](https://discuss.elastic.co/t/how-to-reduce-filebeat-lag-time/73429)

<div class="topic-metadata">

**Author:** [@pixelrebel](https://discuss.elastic.co/u/pixelrebel)\
**Replies:** 5\
**Last updated:** [February 2, 2017, 8:43am UTC](https://discuss.elastic.co/t/how-to-reduce-filebeat-lag-time/73429 "2017-02-02T08:43:44Z")

</div>

I'm trying to get a near-realtime logstash output from filebeat on windows. The logs are updated frequently, but with periods of no updates for 1-120 seconds at a time. The logging application never produces more than …

---

## [Format date in elasticsearch query (during retrieval)](https://discuss.elastic.co/t/format-date-in-elasticsearch-query-during-retrieval/21615)

<div class="topic-metadata">

**Author:** [@Hendrik\_Dev](https://discuss.elastic.co/u/Hendrik_Dev)\
**Replies:** 1\
**Last updated:** [January 14, 2015, 3:19pm UTC](https://discuss.elastic.co/t/format-date-in-elasticsearch-query-during-retrieval/21615 "2015-01-14T15:19:07Z")

</div>

I have a elasticsearch index with a field "aDate" (and lot of other fields) with the following mapping "aDate" : { "type" : "date", "format" : "date\_optional\_time"} When i query for a documen…

---

## [Elasticsearch index deletion and disk space reclamation](https://discuss.elastic.co/t/elasticsearch-index-deletion-and-disk-space-reclamation/130001)

<div class="topic-metadata">

**Author:** [@chaloulo](https://discuss.elastic.co/u/chaloulo)\
**Replies:** 4\
**Last updated:** [May 2, 2018, 2:43pm UTC](https://discuss.elastic.co/t/elasticsearch-index-deletion-and-disk-space-reclamation/130001 "2018-05-02T14:43:37Z")

</div>

Hello, We are running a setup where we use daily indices for our logs. Then we delete a whole daily index when the disk becomes full. When I delete an index, elasticsearch responds with a json:{"acknowledged":true} My …

---

## [What's free under the basic license exactly?](https://discuss.elastic.co/t/whats-free-under-the-basic-license-exactly/192588)

<div class="topic-metadata">

**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\
**Replies:** 5\
**Last updated:** [July 30, 2019, 2:58am UTC](https://discuss.elastic.co/t/whats-free-under-the-basic-license-exactly/192588 "2019-07-30T02:58:13Z")

</div>

Hi all, I'm relatively new to the the Elastic Stack and really only have a small use-case for it at this point. I see there's a Basic license that says it's "free", but the subscriptions page lists out a set of high le…

---

## [Grok parse failure after successful debug](https://discuss.elastic.co/t/grok-parse-failure-after-successful-debug/39407)

<div class="topic-metadata">

**Author:** [@Freddy\_Kasprzykowski](https://discuss.elastic.co/u/Freddy_Kasprzykowski)\
**Replies:** 5\
**Last updated:** [January 19, 2016, 6:41am UTC](https://discuss.elastic.co/t/grok-parse-failure-after-successful-debug/39407 "2016-01-19T06:41:38Z")

</div>

I have used http://grokdebug.herokuapp.com/ to create the grok match statements based on tcpdump of the syslog strips the ELK box is receiving. However, when checking Kibana, the logs are not parsed. i have used service …

---

## [Field names starting with \`\_\`(underscore) are not matched with \* wildcard](https://discuss.elastic.co/t/field-names-starting-with-underscore-are-not-matched-with-wildcard/221254)

<div class="topic-metadata">

**Author:** [@hexer338](https://discuss.elastic.co/u/hexer338)\
**Replies:** 6\
**Last updated:** [March 2, 2020, 9:30am UTC](https://discuss.elastic.co/t/field-names-starting-with-underscore-are-not-matched-with-wildcard/221254 "2020-03-02T09:30:49Z")

</div>

Hi, \* wildcard does not match fields starting with \_ in the query\_string query. Example: Create Index with simple mapping: { "mappings": { "properties": { "\_a": { "type": "keyw…

---

## [Failed to start Machine Learning on Elasticsearch 7.0.0](https://discuss.elastic.co/t/failed-to-start-machine-learning-on-elasticsearch-7-0-0/178216)

<div class="topic-metadata">

**Author:** [@JoseLuis](https://discuss.elastic.co/u/JoseLuis)\
**Replies:** 8\
**Last updated:** [April 26, 2019, 9:36am UTC](https://discuss.elastic.co/t/failed-to-start-machine-learning-on-elasticsearch-7-0-0/178216 "2019-04-26T09:36:00Z")

</div>

Hello, today I installed the new version 7.0.0 to probe it on a new machine (with Centos 7) and see what is new respect other versions but when i turn on elasticsearch i receive the next error: \[2019-04-24T10:17:33,270\]…

---

## [Elastic Stack 6.3.0 and 5.6.10 Security Update](https://discuss.elastic.co/t/elastic-stack-6-3-0-and-5-6-10-security-update/135777)

<div class="topic-metadata">

**Author:** [@Maurits\_Fennis](https://discuss.elastic.co/u/Maurits_Fennis)\
**Replies:** 0\
**Last updated:** [June 13, 2018, 6:23pm UTC](https://discuss.elastic.co/t/elastic-stack-6-3-0-and-5-6-10-security-update/135777 "2018-06-13T18:23:18Z")

</div>

Elasticsearch Information Exposure Vulnerability (ESA-2018-10) In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the \_snapshot API. When the access\_key and security\_key parameters are set usi…

---

## [Graph time series data (Beginner)](https://discuss.elastic.co/t/graph-time-series-data-beginner/24747)

<div class="topic-metadata">

**Author:** [@avc](https://discuss.elastic.co/u/avc)\
**Replies:** 6\
**Last updated:** [August 3, 2015, 12:54pm UTC](https://discuss.elastic.co/t/graph-time-series-data-beginner/24747 "2015-08-03T12:54:34Z")

</div>

Hi I am total beginner on Elasticsearch,logstash and Kibana. I have a data format llike this 2015-03-05T16:46:10-05:00,36.23041940373926,45.53721791849107 2015-03-05T16:56:19-05:00,33.38862166196716,43.3736938132360…

---

## [ELK on AWS Fargate](https://discuss.elastic.co/t/elk-on-aws-fargate/153967)

<div class="topic-metadata">

**Author:** [@musabqamri](https://discuss.elastic.co/u/musabqamri)\
**Replies:** 8\
**Last updated:** [November 15, 2018, 8:42am UTC](https://discuss.elastic.co/t/elk-on-aws-fargate/153967 "2018-11-15T08:42:31Z")

</div>

is it possible to deploy elk on aws ecs with fargate as launch type not ec2 ? how would be the node discovery ? we have discovery plugin for ec2 .. similarly do we have something for fargate ?

---

## [Filebeat exclude\_linex regex to exclude all lines not containing error](https://discuss.elastic.co/t/filebeat-exclude-linex-regex-to-exclude-all-lines-not-containing-error/58388)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 5\
**Last updated:** [August 22, 2016, 9:54am UTC](https://discuss.elastic.co/t/filebeat-exclude-linex-regex-to-exclude-all-lines-not-containing-error/58388 "2016-08-22T09:54:20Z")

</div>

Anyone can help me with the regex to ignore all lines that doesnt contain error or Error at any position of the line?

---

## [The fliter plugin mutate-convert method only convert the first element of an array](https://discuss.elastic.co/t/the-fliter-plugin-mutate-convert-method-only-convert-the-first-element-of-an-array/47100)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 4\
**Last updated:** [September 22, 2017, 8:32pm UTC](https://discuss.elastic.co/t/the-fliter-plugin-mutate-convert-method-only-convert-the-first-element-of-an-array/47100 "2017-09-22T20:32:55Z")

</div>

I used jdbc input plugin to select a column named available\_cities from mysql. It was a string field which formatted like this "12, 13, 143, 123...." And the filter was filter { mutate { split =\> { "availa…

---

## [Best approach to create visualizations/dashboard via API calls?](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603)

<div class="topic-metadata">

**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\
**Replies:** 5\
**Last updated:** [April 21, 2021, 4:44pm UTC](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603 "2021-04-21T16:44:43Z")

</div>

Hi. I'm trying to create a visualization in Kibana via API calls. So far i'm a little bit confused on how to do this. Please try to follow me.. and correct me if i'm wrong... So far i discovered two types of API call…

---

## [Filebeat: How can I add tags to module input in filebeat?](https://discuss.elastic.co/t/filebeat-how-can-i-add-tags-to-module-input-in-filebeat/276781)

<div class="topic-metadata">

**Author:** [@connectgeeks](https://discuss.elastic.co/u/connectgeeks)\
**Replies:** 4\
**Last updated:** [July 19, 2021, 6:38am UTC](https://discuss.elastic.co/t/filebeat-how-can-i-add-tags-to-module-input-in-filebeat/276781 "2021-07-19T06:38:36Z")

</div>

I'm using filebeat module and want to use tag so that I can process different input files based on tags. How can I achieve that ? Below tags doesn't seems to work. modules.d/elasticsearch.yml - module: elasticsearch …

---

## [Curl request returns "Missing kbn-version header"](https://discuss.elastic.co/t/curl-request-returns-missing-kbn-version-header/50591)

<div class="topic-metadata">

**Author:** [@bonatakis](https://discuss.elastic.co/u/bonatakis)\
**Replies:** 3\
**Last updated:** [May 24, 2016, 1:53pm UTC](https://discuss.elastic.co/t/curl-request-returns-missing-kbn-version-header/50591 "2016-05-24T13:53:19Z")

</div>

i try to make a request to elasticsearch with curl to the kibana interface. curl -u user:password -i https://ip:5601/elasticsearch/\_search?pretty -d '{ "aggs": { "allhosts": {"terms": {"field":"host", "size":30 } } } }' …

---

## [\[SOLVED\] Redis, memory leak issue](https://discuss.elastic.co/t/solved-redis-memory-leak-issue/35870)

<div class="topic-metadata">

**Author:** [@hamelg](https://discuss.elastic.co/u/hamelg)\
**Replies:** 3\
**Last updated:** [December 4, 2015, 9:37am UTC](https://discuss.elastic.co/t/solved-redis-memory-leak-issue/35870 "2015-12-04T09:37:37Z")

</div>

Hello, Here is our setup : Packbeat(v0.5) \* 8 \>\> Redis (v3.0.5) \<\< Logstash(v1.5.5) \>\> elasticsearch(v1.7.3) We are very satisfy with this setup except we notice a memory leak on our redis server. Memory usage increas…

---

## [QUERY with Terminal](https://discuss.elastic.co/t/query-with-terminal/96864)

<div class="topic-metadata">

**Author:** [@Ehsan](https://discuss.elastic.co/u/Ehsan)\
**Replies:** 5\
**Last updated:** [August 15, 2017, 2:36pm UTC](https://discuss.elastic.co/t/query-with-terminal/96864 "2017-08-15T14:36:54Z")

</div>

Hello EveryOne,ElasticSearch is installed by vendor on my CentOS server.I want to query with terminal to my server.How Can I do that??Also Kibana is Running on my server.

---

## [Request Body is Required](https://discuss.elastic.co/t/request-body-is-required/275691)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 3\
**Last updated:** [June 15, 2021, 2:41pm UTC](https://discuss.elastic.co/t/request-body-is-required/275691 "2021-06-15T14:41:50Z")

</div>

I am attempting to use the reindex API to combine indices for the month into one single index: POST \_reindex?pretty { "conflicts": "proceed", "source": { "index": "my-index-2021.04.\*" }, "dest": { "index…

---

## [Filebeat module for jboss logs](https://discuss.elastic.co/t/filebeat-module-for-jboss-logs/172521)

<div class="topic-metadata">

**Author:** [@Saloni\_Vithalani](https://discuss.elastic.co/u/Saloni_Vithalani)\
**Replies:** 4\
**Last updated:** [March 27, 2019, 5:17am UTC](https://discuss.elastic.co/t/filebeat-module-for-jboss-logs/172521 "2019-03-27T05:17:29Z")

</div>

We are using keycloak 5.0.0 and it gets started on JBOSS wildfly 7.0.0. What will be the recommended way of getting and parsig jboss logs in ELK. We are using filebeat, logstash, elasticsearch and kibana flow.

---

## [Increasing http.max\_content\_length](https://discuss.elastic.co/t/increasing-http-max-content-length/188022)

<div class="topic-metadata">

**Author:** [@pdimitri](https://discuss.elastic.co/u/pdimitri)\
**Replies:** 2\
**Last updated:** [July 1, 2019, 8:07am UTC](https://discuss.elastic.co/t/increasing-http-max-content-length/188022 "2019-07-01T08:07:00Z")

</div>

Hi. I have a CSV file of size 1.3GB which I would like to create a Kibana dashboard for. However, when uploading data, Kibana only allows a maximum file size of 100MB. I have gone into the elasticsearch.yml config file…

---

## [How to fix a stuck watch and another question](https://discuss.elastic.co/t/how-to-fix-a-stuck-watch-and-another-question/56844)

<div class="topic-metadata">

**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\
**Replies:** 5\
**Last updated:** [August 23, 2016, 1:56pm UTC](https://discuss.elastic.co/t/how-to-fix-a-stuck-watch-and-another-question/56844 "2016-08-23T13:56:50Z")

</div>

Hi, In an attempt to figure out why a watch wasn't executing, I tried to manually post it using this: POST watcher/watch/clusterhealth\_watch\_red/\_execute I got: "ElasticsearchTimeoutException\[failed to execute h…

---

## [List of current active scrolls](https://discuss.elastic.co/t/list-of-current-active-scrolls/205302)

<div class="topic-metadata">

**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 7:05pm UTC](https://discuss.elastic.co/t/list-of-current-active-scrolls/205302 "2019-10-29T19:05:13Z")

</div>

Is there a way to know how many scroll\_ids are currently active and how long they have been running? We want to know how many scrolls are currently running and clear long running scroll -Thanks

---

## [Elastic node reads previous cluster uuid from data folder even if it is re-configured to join another cluster](https://discuss.elastic.co/t/elastic-node-reads-previous-cluster-uuid-from-data-folder-even-if-it-is-re-configured-to-join-another-cluster/179471)

<div class="topic-metadata">

**Author:** [@shreymath9999](https://discuss.elastic.co/u/shreymath9999)\
**Replies:** 6\
**Last updated:** [May 3, 2019, 10:20am UTC](https://discuss.elastic.co/t/elastic-node-reads-previous-cluster-uuid-from-data-folder-even-if-it-is-re-configured-to-join-another-cluster/179471 "2019-05-03T10:20:03Z")

</div>

Here's the case, In brief : On bootstrapping a single node, it forms a single node cluster and stores the cluster uuid in its data folder. Now even if it is re-configured to join a multi-node cluster in its yaml file. …

---

## [Calculate Percentage for a field inside Aggregation](https://discuss.elastic.co/t/calculate-percentage-for-a-field-inside-aggregation/29419)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 1\
**Last updated:** [January 26, 2016, 6:22pm UTC](https://discuss.elastic.co/t/calculate-percentage-for-a-field-inside-aggregation/29419 "2016-01-26T18:22:47Z")

</div>

How can we calculate percentage of field inside an aggregation? Aggregation Query { "size": 0, "aggs": { "field\_1": { "terms": { "field": "field\_1" }, …

---

## [Bug? "Could not communicate with the node... from the enrollment token."](https://discuss.elastic.co/t/bug-could-not-communicate-with-the-node-from-the-enrollment-token/306189)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 7\
**Last updated:** [June 23, 2022, 8:57am UTC](https://discuss.elastic.co/t/bug-could-not-communicate-with-the-node-from-the-enrollment-token/306189 "2022-06-23T08:57:01Z")

</div>

Hi there, I am making my first steps in Elasticsearch 8.x coming from 7.x. On 2 local virtual box nodes I would like to test / to understand the procedure of how I can let join a second Elasticsearch node to an already…

---

## [Elasticsearch Query with pattern and time sequence](https://discuss.elastic.co/t/elasticsearch-query-with-pattern-and-time-sequence/204017)

<div class="topic-metadata">

**Author:** [@Mudboyzh](https://discuss.elastic.co/u/Mudboyzh)\
**Replies:** 3\
**Last updated:** [October 22, 2019, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-query-with-pattern-and-time-sequence/204017 "2019-10-22T06:28:42Z")

</div>

I have some event logs in elasticsearch. Each log has timestamp, action and userId. I want to find the user whose logs have the time sequential condition. Here is some sample data. +---------------------+---------+-----…

---

## [Kibana service failed to start](https://discuss.elastic.co/t/kibana-service-failed-to-start/296334)

<div class="topic-metadata">

**Author:** [@gabal007](https://discuss.elastic.co/u/gabal007)\
**Replies:** 5\
**Last updated:** [March 18, 2022, 1:58pm UTC](https://discuss.elastic.co/t/kibana-service-failed-to-start/296334 "2022-03-18T13:58:25Z")

</div>

Hi all, I hope that message finds you well. I have installed elk version 7.17 on CentOS Linux release 7.9.2009. I've tried to install kibana as a service, and it's failing to start. Based on what I'm reading on other …

---

## [How can I set the field limit higher then 1000?](https://discuss.elastic.co/t/how-can-i-set-the-field-limit-higher-then-1000/102184)

<div class="topic-metadata">

**Author:** [@Misengo](https://discuss.elastic.co/u/Misengo)\
**Replies:** 5\
**Last updated:** [October 1, 2017, 8:49am UTC](https://discuss.elastic.co/t/how-can-i-set-the-field-limit-higher-then-1000/102184 "2017-10-01T08:49:35Z")

</div>

I am new to Elastic Search (visited the Elastic Event in Frankfurt today, thanks for the great talk and insights btw). I get this error when indexing products from shopware: \[2017-09-28T22:58:13,583\]\[DEBUG\]\[o.e.a.b.Tra…

---

## [Use more than 32GB for heap](https://discuss.elastic.co/t/use-more-than-32gb-for-heap/204422)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 9:54am UTC](https://discuss.elastic.co/t/use-more-than-32gb-for-heap/204422 "2019-10-23T09:54:58Z")

</div>

Hi I have a cluster with 30 nodes, each node has 40 cpu cores and 18TB disk (raid 1), and 128GB of Memory on each of them. I am indexing a huge number of documents (about 300 \* 10^9). Some one told me if I set heap si…

---

## [How to monitor %free disk space via metricbeat on windows server](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062)

<div class="topic-metadata">

**Author:** [@hunter\_puu](https://discuss.elastic.co/u/hunter_puu)\
**Replies:** 5\
**Last updated:** [December 7, 2020, 7:03am UTC](https://discuss.elastic.co/t/how-to-monitor-free-disk-space-via-metricbeat-on-windows-server/257062 "2020-12-07T07:03:56Z")

</div>

I am newbie on ELK. i want to monitor %free disk space on windows server via metric beat. Anybody can show parameter on windows.yml for solve this issue. Thank you.

---

## [How to send JSON directly to elasticsearch w/o any parsing in logstash](https://discuss.elastic.co/t/how-to-send-json-directly-to-elasticsearch-w-o-any-parsing-in-logstash/123331)

<div class="topic-metadata">

**Author:** [@raychen11](https://discuss.elastic.co/u/raychen11)\
**Replies:** 2\
**Last updated:** [March 12, 2018, 5:20pm UTC](https://discuss.elastic.co/t/how-to-send-json-directly-to-elasticsearch-w-o-any-parsing-in-logstash/123331 "2018-03-12T17:20:42Z")

</div>

hey folks, My log files are already in JSON format and I have full control of how they look. When I use logstash, looks like I have to specify the input as JSON either in File plugin (use codec) or Filter (use json). I …

---

## [ELK resource requirements](https://discuss.elastic.co/t/elk-resource-requirements/207215)

<div class="topic-metadata">

**Author:** [@zgergely](https://discuss.elastic.co/u/zgergely)\
**Replies:** 3\
**Last updated:** [November 12, 2019, 6:34pm UTC](https://discuss.elastic.co/t/elk-resource-requirements/207215 "2019-11-12T18:34:00Z")

</div>

Hi everyone, We are running and ELK 7.1 deployment on IKS (IBMCloud Kubernetes Service). Our setup is the following: Infrastructure: -IKS Cluster running Kubernetes 1.14.8\_1536 -2x worker nodes of type Virtual Share…

---

## [Exiting: 1 error: error loading config file: invalid config: yaml: line 13: did not find expected key](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-13-did-not-find-expected-key/294162)

<div class="topic-metadata">

**Author:** [@awis](https://discuss.elastic.co/u/awis)\
**Replies:** 4\
**Last updated:** [January 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/exiting-1-error-error-loading-config-file-invalid-config-yaml-line-13-did-not-find-expected-key/294162 "2022-01-13T13:18:03Z")

</div>

Hi there, I'm trying to connect Filebeat Snort module with my Elasticsearch and when i run command .\\filebeat.exe setup -e on Windows 10 Pro VM, I got this error. This is my configuration for filebeat.yml filebeat.in…

---

## [Update field to null](https://discuss.elastic.co/t/update-field-to-null/92376)

<div class="topic-metadata">

**Author:** [@skodari](https://discuss.elastic.co/u/skodari)\
**Replies:** 2\
**Last updated:** [July 25, 2017, 2:29pm UTC](https://discuss.elastic.co/t/update-field-to-null/92376 "2017-07-25T14:29:21Z")

</div>

I'm java client for elastic search.. I need to update my field(type:date) date to Null. For example exp\_date : "2017-01-01T18-15-12-345Z" to exp\_date:null ???

---

## [Exiting: Index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/290684)

<div class="topic-metadata">

**Author:** [@adouren](https://discuss.elastic.co/u/adouren)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 8:41am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/290684 "2021-12-02T08:41:50Z")

</div>

Hi, I configured filebeat.yml with logstash output but I got this error: Exiting: Index management requested but the Elasticsearch output is not configured/enabled filebeat.yml filebeat.config: modules: path: ${…

---

## [Error in Databricks 7.6 and Elastic 7.1.1 \*\*java.lang.ClassNotFoundException: Failed to find data source: org.elasticsearch.spark.sql.\*\*](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272)

<div class="topic-metadata">

**Author:** [@mlo](https://discuss.elastic.co/u/mlo)\
**Replies:** 5\
**Last updated:** [June 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272 "2021-06-22T13:12:23Z")

</div>

We are running Databricks 7.6 (includes Apache Spark 3.0.1, Scala 2.12) and istalled via jip install org.elasticsearch:elasticsearch-spark-30\_2.12:7.12.1 and now I am getting this error java.lang.ClassNotFoundException:…

---

## [Fail2ban module for Filebeat](https://discuss.elastic.co/t/fail2ban-module-for-filebeat/229853)

<div class="topic-metadata">

**Author:** [@rmartinsjr](https://discuss.elastic.co/u/rmartinsjr)\
**Replies:** 1\
**Last updated:** [April 27, 2020, 2:50pm UTC](https://discuss.elastic.co/t/fail2ban-module-for-filebeat/229853 "2020-04-27T14:50:17Z")

</div>

Hello! I've seen some people discussing here and there about shipping Fail2ban logs, but it's always using Logstash, which for my current setup, is overkill. So I was wondering if there's any on-going effort to create …

---

## [Discover does not show any data for an index](https://discuss.elastic.co/t/discover-does-not-show-any-data-for-an-index/181222)

<div class="topic-metadata">

**Author:** [@userelastic](https://discuss.elastic.co/u/userelastic)\
**Replies:** 7\
**Last updated:** [May 16, 2019, 1:35pm UTC](https://discuss.elastic.co/t/discover-does-not-show-any-data-for-an-index/181222 "2019-05-16T13:35:54Z")

</div>

Newbie here; I am am trying vulnwhisperer (https://github.com/HASecuritySolutions/VulnWhisperer) which consolidates all vulnerability data into elastic; I have gone through the install process. Data is being downloaded a…

---

## [Retrieve an index pattern's UUID](https://discuss.elastic.co/t/retrieve-an-index-patterns-uuid/162724)

<div class="topic-metadata">

**Author:** [@cbril](https://discuss.elastic.co/u/cbril)\
**Replies:** 2\
**Last updated:** [January 15, 2019, 6:20pm UTC](https://discuss.elastic.co/t/retrieve-an-index-patterns-uuid/162724 "2019-01-15T18:20:04Z")

</div>

How can I create a new index pattern with a curl request? How can I retrieve the ID of an index pattern with a curl request? I have tried creating an index pattern with this request, but Kibana freezes when I try to vi…

---

## [Filtering by Range](https://discuss.elastic.co/t/filtering-by-range/113410)

<div class="topic-metadata">

**Author:** [@Robert\_Naccache](https://discuss.elastic.co/u/Robert_Naccache)\
**Replies:** 4\
**Last updated:** [December 29, 2017, 8:49am UTC](https://discuss.elastic.co/t/filtering-by-range/113410 "2017-12-29T08:49:50Z")

</div>

Good Morning and Happy Holidays! I would like to ask a question, maybe someone can shed some light. I'm Pulling data from a database which contains a time stamp. What i'm trying to do is return all data where the time…

---

## [How to migrate lucene index into elasticsearch](https://discuss.elastic.co/t/how-to-migrate-lucene-index-into-elasticsearch/20732)

<div class="topic-metadata">

**Author:** [@Gaurav\_gupta](https://discuss.elastic.co/u/Gaurav_gupta)\
**Replies:** 6\
**Last updated:** [November 27, 2014, 2:50pm UTC](https://discuss.elastic.co/t/how-to-migrate-lucene-index-into-elasticsearch/20732 "2014-11-27T14:50:16Z")

</div>

Hi All, I have an embedded Search Engine in our product which is based on Lucene 4.8.1 and now I would like to migrate it to latest ElasticSearch 1.4 for better distributed support (sharding and replication, mainl…

---

## [\[warning\]\[migrations\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-migrations-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/215472)

<div class="topic-metadata">

**Author:** [@mparp](https://discuss.elastic.co/u/mparp)\
**Replies:** 5\
**Last updated:** [January 27, 2020, 4:50pm UTC](https://discuss.elastic.co/t/warning-migrations-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/215472 "2020-01-27T16:50:52Z")

</div>

Hi all! Can you please help me to solve the problem with Kibana. I installed latest version of Elasticsearch and Kibana on the same server with minimum configuration. Installation is standalone. Server IP address 192.…

---

## [Kibana start problem issue](https://discuss.elastic.co/t/kibana-start-problem-issue/197147)

<div class="topic-metadata">

**Author:** [@akatla](https://discuss.elastic.co/u/akatla)\
**Replies:** 6\
**Last updated:** [August 28, 2019, 9:43pm UTC](https://discuss.elastic.co/t/kibana-start-problem-issue/197147 "2019-08-28T21:43:25Z")

</div>

Getting this error when Kibana is started and it won't start - Elasticsearch -OSS and Kibana - OSS version 7.2 FATAL \[index\_not\_found\_exception\] no such index \[.kibana\], with { resource.type="index\_or\_alias" & resour…

---

## [Elasticsearch 8.9.0, 7.17.13 Security Update](https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [September 22, 2023, 11:52am UTC](https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616 "2023-09-22T11:52:47Z")

</div>

Elasticsearch uncontrolled resource consumption (ESA-2023-13) An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to …

---

## [JSON codec plugin - target option (http input)](https://discuss.elastic.co/t/json-codec-plugin-target-option-http-input/304217)

<div class="topic-metadata">

**Author:** [@sectex](https://discuss.elastic.co/u/sectex)\
**Replies:** 4\
**Last updated:** [May 9, 2022, 3:12pm UTC](https://discuss.elastic.co/t/json-codec-plugin-target-option-http-input/304217 "2022-05-09T15:12:02Z")

</div>

I am having some issues using the JSON codec plugin in my Logstash (v8.1.2) pipeline. pipeline.conf: input { http { codec =\> json port =\> 5046 } } output { stdout { codec =\> rubydebu…

---

## [How to disable DELETE API](https://discuss.elastic.co/t/how-to-disable-delete-api/18867)

<div class="topic-metadata">

**Author:** [@Vijay\_Dodla](https://discuss.elastic.co/u/Vijay_Dodla)\
**Replies:** 4\
**Last updated:** [August 6, 2014, 6:41am UTC](https://discuss.elastic.co/t/how-to-disable-delete-api/18867 "2014-08-06T06:41:23Z")

</div>

Hi I'm trying to disable DELETE API option from sense or via HTTP and was not able to do it . My requirement is make DELETE API not available so that user will not accidentally delete any index . I tried the follow…

---

## [Collect Windows Performance counters with \*Beats?](https://discuss.elastic.co/t/collect-windows-performance-counters-with-beats/43699)

<div class="topic-metadata">

**Author:** [@sylbae](https://discuss.elastic.co/u/sylbae)\
**Replies:** 8\
**Last updated:** [March 3, 2017, 12:04pm UTC](https://discuss.elastic.co/t/collect-windows-performance-counters-with-beats/43699 "2017-03-03T12:04:30Z")

</div>

Hello, I am looking forward a way to collect Windows performance counters locally on a server and forward collected data to central Logstash servers. Remote WMI collection is not an option (too many servers, physical…

---

## [Throttle merges](https://discuss.elastic.co/t/throttle-merges/31780)

<div class="topic-metadata">

**Author:** [@Sergey\_Novikov](https://discuss.elastic.co/u/Sergey_Novikov)\
**Replies:** 4\
**Last updated:** [October 26, 2015, 11:07am UTC](https://discuss.elastic.co/t/throttle-merges/31780 "2015-10-26T11:07:54Z")

</div>

I'm having issues with heavy CPU usage and I/O after indexing. Long after indexing has finished, load average is still high and CPU is loaded (50-100%), this makes search operations slow. I've set index.merge.scheduler…

---

## [OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release 7.4.0](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release-7-4-0/202099)

<div class="topic-metadata">

**Author:** [@lwin](https://discuss.elastic.co/u/lwin)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 8:33am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-option-useconcmarksweepgc-was-deprecated-in-version-9-0-and-will-likely-be-removed-in-a-future-release-7-4-0/202099 "2019-10-04T08:33:45Z")

</div>

D:\\elasticsearch-7.4.0-windows-x86\_64\\elasticsearch-7.4.0\\bin\>elasticsearch.bat OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. …

---

## [Kibana 7.17.3 and 8.1.3 Security Update](https://discuss.elastic.co/t/kibana-7-17-3-and-8-1-3-security-update/302826)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [April 20, 2022, 2:20pm UTC](https://discuss.elastic.co/t/kibana-7-17-3-and-8-1-3-security-update/302826 "2022-04-20T14:20:34Z")

</div>

Kibana Exposure of Sensitive Information (ESA-2022-05) A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide…

[Previous page](https://discuss.elastic.co/top.md?page=359&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=361&per_page=50&period=all)
