# Top

**URL:** https://discuss.elastic.co/top.md?page=363&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 364

---

## [Kibana - Visualize - create table from search query](https://discuss.elastic.co/t/kibana-visualize-create-table-from-search-query/77861)

<div class="topic-metadata">

**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Replies:** 4\
**Last updated:** [March 22, 2017, 8:08pm UTC](https://discuss.elastic.co/t/kibana-visualize-create-table-from-search-query/77861 "2017-03-22T20:08:41Z")

</div>

Hi, I used the Dev Tools tab in Kibana to create a search query (a bit complex using 3 aggregations) and would like to use that query with the Visualize tab to create a table, is that possible ? Thanks, E

---

## [Kibana 5601 connection refused](https://discuss.elastic.co/t/kibana-5601-connection-refused/103641)

<div class="topic-metadata">

**Author:** [@Jhondude](https://discuss.elastic.co/u/Jhondude)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 5:02am UTC](https://discuss.elastic.co/t/kibana-5601-connection-refused/103641 "2017-10-12T05:02:02Z")

</div>

Hi, i have install ELK and all service is running. but, when i tried to accesss kibana, connection refused. root@picserver:/var/log/kibana# curl http://10.3.10.100:5601 curl: (7) Failed to connect to 10.3.10.100 port …

---

## [How to get max value with document data](https://discuss.elastic.co/t/how-to-get-max-value-with-document-data/39614)

<div class="topic-metadata">

**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\
**Replies:** 3\
**Last updated:** [January 20, 2016, 8:39am UTC](https://discuss.elastic.co/t/how-to-get-max-value-with-document-data/39614 "2016-01-20T08:39:27Z")

</div>

Hi Guys, I have three document { "plant": "F130", "partno": "aa.123.abcds", "date": "20150903", "curr": "NTD", "cost": "1000", } { "plant": "F130", "partno": "aa.123.abcds", "date": "20151203", "curr": "NTD", "cost"…

---

## [Getting Elasticsearch url from kibana](https://discuss.elastic.co/t/getting-elasticsearch-url-from-kibana/179974)

<div class="topic-metadata">

**Author:** [@vishwas\_php](https://discuss.elastic.co/u/vishwas_php)\
**Replies:** 2\
**Last updated:** [May 7, 2019, 1:49pm UTC](https://discuss.elastic.co/t/getting-elasticsearch-url-from-kibana/179974 "2019-05-07T13:49:26Z")

</div>

My client have installed the elasticsearch on a server and given me the credentials for kibana for that server elasticsearch. Now, I have to add indices and data in that. But, I don't have the elasticsearch url to config…

---

## [NEST Client - how to resolve elastic search client exceptions please](https://discuss.elastic.co/t/nest-client-how-to-resolve-elastic-search-client-exceptions-please/200926)

<div class="topic-metadata">

**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\
**Replies:** 4\
**Last updated:** [September 27, 2019, 9:30am UTC](https://discuss.elastic.co/t/nest-client-how-to-resolve-elastic-search-client-exceptions-please/200926 "2019-09-27T09:30:17Z")

</div>

HI, Could someone please help me to resolve this issue. We are recently getting Two types of exceptions Elasticsearch.Net.UnexpectedElasticsearchClientException The operation was canceled. Elasticsearch.Net.Elastics…

---

## [Undefined method \`sanitized'](https://discuss.elastic.co/t/undefined-method-sanitized/100588)

<div class="topic-metadata">

**Author:** [@feijiangnan](https://discuss.elastic.co/u/feijiangnan)\
**Replies:** 7\
**Last updated:** [October 11, 2017, 7:27am UTC](https://discuss.elastic.co/t/undefined-method-sanitized/100588 "2017-10-11T07:27:38Z")

</div>

Hi there, I upgraded ELK from 5.5. to 5.6, and logstash received the log, parsed, but didn't write to elasticsearch. From log, it complains ""undefined method \`sanitized' ", logstash-output-elasticsearch version is 7.4…

---

## [Kibana 8.15.0 Security Update (ESA-2024-29, ESA-2024-30)](https://discuss.elastic.co/t/kibana-8-15-0-security-update-esa-2024-29-esa-2024-30/373521)

<div class="topic-metadata">

**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\
**Replies:** 0\
**Last updated:** [January 22, 2025, 3:04pm UTC](https://discuss.elastic.co/t/kibana-8-15-0-security-update-esa-2024-29-esa-2024-30/373521 "2025-01-22T15:04:36Z")

</div>

Kibana server-side request forgery (ESA-2024-29) A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health\_check API could be used to send requests to internal endpoints. Due to the…

---

## [Allocate missing replica shards](https://discuss.elastic.co/t/allocate-missing-replica-shards/89647)

<div class="topic-metadata">

**Author:** [@Aris\_Pratama](https://discuss.elastic.co/u/Aris_Pratama)\
**Replies:** 5\
**Last updated:** [June 19, 2017, 3:00am UTC](https://discuss.elastic.co/t/allocate-missing-replica-shards/89647 "2017-06-19T03:00:13Z")

</div>

hey all, when i open tab monitoring, there is a report "Allocate missing replica shards." what is that mean? is there something wrong with my configuration at filebeat.yml ? is the error something critical or just w…

---

## [Multiple Logstash instances running](https://discuss.elastic.co/t/multiple-logstash-instances-running/137177)

<div class="topic-metadata">

**Author:** [@Preethi](https://discuss.elastic.co/u/Preethi)\
**Replies:** 7\
**Last updated:** [June 29, 2018, 6:14am UTC](https://discuss.elastic.co/t/multiple-logstash-instances-running/137177 "2018-06-29T06:14:46Z")

</div>

Hi, I am newly started using Elasticsearch in Mac OS. The version is 6.3.0. I am amble to create an index through curl commands in terminal. But wWhen I use Logstash to import data from a .cvs file, getting below error…

---

## [Can't get a field from the ctx.payload in Kibana watcher](https://discuss.elastic.co/t/cant-get-a-field-from-the-ctx-payload-in-kibana-watcher/124481)

<div class="topic-metadata">

**Author:** [@Preetiv](https://discuss.elastic.co/u/Preetiv)\
**Replies:** 4\
**Last updated:** [March 20, 2018, 1:11pm UTC](https://discuss.elastic.co/t/cant-get-a-field-from-the-ctx-payload-in-kibana-watcher/124481 "2018-03-20T13:11:28Z")

</div>

I am setting up a watcher in Kibana and the watcher needs to extract different fields from the ctx.payload. So I tried this for extracting message field from the first hit {{ctx.payload.hits.hits.0.\_source.message}} T…

---

## [AutoCorrect In Elastic Search](https://discuss.elastic.co/t/autocorrect-in-elastic-search/42858)

<div class="topic-metadata">

**Author:** [@Rajaram\_Surimenu](https://discuss.elastic.co/u/Rajaram_Surimenu)\
**Replies:** 4\
**Last updated:** [February 23, 2017, 5:28am UTC](https://discuss.elastic.co/t/autocorrect-in-elastic-search/42858 "2017-02-23T05:28:28Z")

</div>

What is the best way to use Autocorrect (not autosuggest ) in elastic search ? can someone please suggest. Thanks

---

## [Extracting a new field from the message field](https://discuss.elastic.co/t/extracting-a-new-field-from-the-message-field/222407)

<div class="topic-metadata">

**Author:** [@Hari\_Krishna](https://discuss.elastic.co/u/Hari_Krishna)\
**Replies:** 8\
**Last updated:** [March 9, 2020, 3:51am UTC](https://discuss.elastic.co/t/extracting-a-new-field-from-the-message-field/222407 "2020-03-09T03:51:33Z")

</div>

2020-03-06 09:36:52.801907464 re0:ndp:25786 lltp\_debug message = "NDP-DBG:NC\_FSM\_HANDLER:1634:: state 7, event 4, NexthopId 44001" This is my log. I need to extract state and NexthopId from the message field match =\> …

---

## [The msearch request must be terminated by a newline \[\\n\] error](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline-n-error/211846)

<div class="topic-metadata">

**Author:** [@aasoft](https://discuss.elastic.co/u/aasoft)\
**Replies:** 5\
**Last updated:** [January 8, 2020, 10:10am UTC](https://discuss.elastic.co/t/the-msearch-request-must-be-terminated-by-a-newline-n-error/211846 "2020-01-08T10:10:56Z")

</div>

I am trying to use the curl command and hit my index. I am using the following command curl -XPOST 'https://myurl/myindex/\_msearch?' -H 'Content-Type: application/x-ndjson' -d'{"preference":"ResultList01"} {"query": {"…

---

## [\[ANNOUNCEMENT\] - Elasticsearch File System Crawler 2.0.0 released](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-0-0-released/33384)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 3\
**Last updated:** [March 2, 2017, 10:05am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-file-system-crawler-2-0-0-released/33384 "2017-03-02T10:05:30Z")

</div>

The Elasticsearch File System Crawler team is pleased to announce the fscrawler-2.0.0 release! FS Crawler offers a simple way to index local files into elasticsearch. Changes in this version include: New features: …

---

## [Elastic Stack 7.12.0 and 6.8.15 Security Update](https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [March 23, 2021, 5:40pm UTC](https://discuss.elastic.co/t/elastic-stack-7-12-0-and-6-8-15-security-update/268125 "2021-03-23T17:40:24Z")

</div>

Elasticsearch Suggester & Profile API information disclosure flaw (ESA-2021-06) A document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The…

---

## [Issues when running Logstash in Docker](https://discuss.elastic.co/t/issues-when-running-logstash-in-docker/81917)

<div class="topic-metadata">

**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\
**Replies:** 7\
**Last updated:** [April 12, 2017, 7:11am UTC](https://discuss.elastic.co/t/issues-when-running-logstash-in-docker/81917 "2017-04-12T07:11:16Z")

</div>

I am trying to run ELK in Docker and I did the following pretty simple and straightforward steps: Created directory /opt/elk/logstash and moved there sample log file and logstash.conf file: input { file { path …

---

## [How to connect elasticsearch to apache spark streaming or apache storm?](https://discuss.elastic.co/t/how-to-connect-elasticsearch-to-apache-spark-streaming-or-apache-storm/55069)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 4\
**Last updated:** [July 11, 2016, 3:50pm UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-to-apache-spark-streaming-or-apache-storm/55069 "2016-07-11T15:50:50Z")

</div>

Hi folks, You can find my question in stackoverflow: http://stackoverflow.com/questions/38271713/how-to-connect-elasticsearch-to-apache-spark-streaming-or-storm PS: I had some troubles to import my pictures here that…

---

## ["Password authentication failed for elastic"](https://discuss.elastic.co/t/password-authentication-failed-for-elastic/244099)

<div class="topic-metadata">

**Author:** [@danielP1](https://discuss.elastic.co/u/danielP1)\
**Replies:** 8\
**Last updated:** [September 10, 2020, 7:42pm UTC](https://discuss.elastic.co/t/password-authentication-failed-for-elastic/244099 "2020-09-10T19:42:27Z")

</div>

Greetings, I'm trying to get a 'near' vanilla deployment of elasticsearch up and running on ECK which I've based off the quick start instructions here I initially tried a 3 member cluster and saw a lot of connection fa…

---

## [How do I combine multiple filters with OR without affecting the score?](https://discuss.elastic.co/t/how-do-i-combine-multiple-filters-with-or-without-affecting-the-score/284349)

<div class="topic-metadata">

**Author:** [@chm](https://discuss.elastic.co/u/chm)\
**Replies:** 2\
**Last updated:** [September 17, 2021, 4:22am UTC](https://discuss.elastic.co/t/how-do-i-combine-multiple-filters-with-or-without-affecting-the-score/284349 "2021-09-17T04:22:18Z")

</div>

I want to filter my results with two different clauses aggregated with OR e.g. return documents with PropertyA=true OR PropertyB=true. I've been trying to do this using a bool query. My base query is just a text search …

---

## [Java-ecs-logging](https://discuss.elastic.co/t/java-ecs-logging/201266)

<div class="topic-metadata">

**Author:** [@Rem](https://discuss.elastic.co/u/Rem)\
**Replies:** 6\
**Last updated:** [October 1, 2019, 10:21am UTC](https://discuss.elastic.co/t/java-ecs-logging/201266 "2019-10-01T10:21:39Z")

</div>

Hi, Hope there is someone that can help me. Config.xml for Log4j2 : \<Console name="LogToConsole" target="SYSTEM\_OUT"\> \<Appenders\> \<Console name="LogToConsole" target="SYSTEM\_OUT"\> \<EcsLayout\> \<KeyValuePair k…

---

## [Are there plans for Micrometer (Java) support?](https://discuss.elastic.co/t/are-there-plans-for-micrometer-java-support/116922)

<div class="topic-metadata">

**Author:** [@itzg](https://discuss.elastic.co/u/itzg)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 7:41pm UTC](https://discuss.elastic.co/t/are-there-plans-for-micrometer-java-support/116922 "2018-01-31T19:41:27Z")

</div>

Spring Boot 2.x will evolve their unified application metrics reporting by moving to Micrometer, so I was wondering if there were plans to integrate the APM Java agent into Micrometer: https://micrometer.io/docs

---

## [Kibana 4.5.3 and 4.1.10 released with tile map fixes](https://discuss.elastic.co/t/kibana-4-5-3-and-4-1-10-released-with-tile-map-fixes/55541)

<div class="topic-metadata">

**Author:** [@Court](https://discuss.elastic.co/u/Court)\
**Replies:** 1\
**Last updated:** [July 14, 2016, 5:20pm UTC](https://discuss.elastic.co/t/kibana-4-5-3-and-4-1-10-released-with-tile-map-fixes/55541 "2016-07-14T17:20:23Z")

</div>

Today we’re shipping Kibana versions 4.5.3 and 4.1.10, which use Elastic’s new tile service by default. The tile map settings are also now configurable, so users can use other leaflet-compatible tile services. These…

---

## [Elasticsearch utilize too many file system cache](https://discuss.elastic.co/t/elasticsearch-utilize-too-many-file-system-cache/102779)

<div class="topic-metadata">

**Author:** [@zidane28](https://discuss.elastic.co/u/zidane28)\
**Replies:** 7\
**Last updated:** [October 11, 2017, 1:42am UTC](https://discuss.elastic.co/t/elasticsearch-utilize-too-many-file-system-cache/102779 "2017-10-11T01:42:29Z")

</div>

Currently I had a cluster with 2 master nodes and 3 data nodes, with each data nodes having 32GB of RAM... At first everything went fine, but after adding many indices I found out that the RAM usage for the data nodes a…

---

## [Kafka INVALID\_FETCH\_SESSION\_EPOCH](https://discuss.elastic.co/t/kafka-invalid-fetch-session-epoch/187441)

<div class="topic-metadata">

**Author:** [@Chris\_Denneen](https://discuss.elastic.co/u/Chris_Denneen)\
**Replies:** 2\
**Last updated:** [July 11, 2019, 6:46pm UTC](https://discuss.elastic.co/t/kafka-invalid-fetch-session-epoch/187441 "2019-07-11T18:46:26Z")

</div>

It appears this has been asked more than once and never answered... anyone from @elastic @logstash able to help? {"level":"INFO","loggerName":"org.apache.kafka.clients.FetchSessionHandler","timeMillis":1561500837923…

---

## [Lucene syntax equivalent for "Today"? Does it exist?](https://discuss.elastic.co/t/lucene-syntax-equivalent-for-today-does-it-exist/204699)

<div class="topic-metadata">

**Author:** [@Jody\_McIvor](https://discuss.elastic.co/u/Jody_McIvor)\
**Replies:** 6\
**Last updated:** [October 23, 2019, 5:27pm UTC](https://discuss.elastic.co/t/lucene-syntax-equivalent-for-today-does-it-exist/204699 "2019-10-23T17:27:26Z")

</div>

I'm working on a visualization and have all the work done, I'm just having troubles making it automatically return only data from a specific time window. So if I search Kibana for: timestamp:" 04:\*" I get every log en…

---

## [Memory/cpu ratio to disk size](https://discuss.elastic.co/t/memory-cpu-ratio-to-disk-size/200752)

<div class="topic-metadata">

**Author:** [@yuecong](https://discuss.elastic.co/u/yuecong)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 4:58am UTC](https://discuss.elastic.co/t/memory-cpu-ratio-to-disk-size/200752 "2019-09-26T04:58:26Z")

</div>

Could I get some comments on concerns/ insights on the following resource( cpu/ memory and disk size) configuration for one of my Elasticsearch cluster? Data volume: throughput: 18K docs/ second ( very continous load) …

---

## [Authentication to realm active\_directory failed](https://discuss.elastic.co/t/authentication-to-realm-active-directory-failed/150130)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 6\
**Last updated:** [September 28, 2018, 9:33pm UTC](https://discuss.elastic.co/t/authentication-to-realm-active-directory-failed/150130 "2018-09-28T21:33:19Z")

</div>

Hello there: I'm trying to set up X-pack to talk to our LDAP, but ran into issues. I have not set up SSL yet. Here is the elasticsearch.yml: xpack.monitoring.enabled: true xpack.monitoring.collection.enabled: true …

---

## [Beats vs logstash](https://discuss.elastic.co/t/beats-vs-logstash/42246)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 5\
**Last updated:** [April 26, 2017, 10:10pm UTC](https://discuss.elastic.co/t/beats-vs-logstash/42246 "2017-04-26T22:10:33Z")

</div>

Whats the difference between beats and logstash please?

---

## [Using Gsub to replace field values](https://discuss.elastic.co/t/using-gsub-to-replace-field-values/96613)

<div class="topic-metadata">

**Author:** [@sentinel](https://discuss.elastic.co/u/sentinel)\
**Replies:** 8\
**Last updated:** [August 16, 2017, 9:33am UTC](https://discuss.elastic.co/t/using-gsub-to-replace-field-values/96613 "2017-08-16T09:33:15Z")

</div>

Hi I’m trying to transform field values in order to get rid of some characters however I do not know the values. I tried this: gsub =\> \[“fwdPtPrecision”, “.,”,"."\] but the fwdPtPrecision=0.001 was changed to 0.00. W…

---

## [Keyword analyzer / lowercase filter](https://discuss.elastic.co/t/keyword-analyzer-lowercase-filter/5095)

<div class="topic-metadata">

**Author:** [@Jan\_Kriesten](https://discuss.elastic.co/u/Jan_Kriesten)\
**Replies:** 8\
**Last updated:** [August 10, 2011, 8:43pm UTC](https://discuss.elastic.co/t/keyword-analyzer-lowercase-filter/5095 "2011-08-10T20:43:51Z")

</div>

Hi, I have configured ES (0.17.4) using index : analysis: analyzer: default: type: keyword max\_token\_length: 512 tokenizer : lowercase filter : lowercase I wou…

---

## [Kibana 6.3 fatal error (upgrade from 6.2)](https://discuss.elastic.co/t/kibana-6-3-fatal-error-upgrade-from-6-2/135804)

<div class="topic-metadata">

**Author:** [@ocabj](https://discuss.elastic.co/u/ocabj)\
**Replies:** 7\
**Last updated:** [June 15, 2018, 2:02pm UTC](https://discuss.elastic.co/t/kibana-6-3-fatal-error-upgrade-from-6-2/135804 "2018-06-15T14:02:25Z")

</div>

I RPM upgraded kibana to 6.3 from 6.2 and am getting a fatal error preventing kibana from starting up: {"type":"error","@timestamp":"2018-06-13T22:43:49Z","tags":\["fatal"\],"pid":10211,"level":"fatal","error":{"message":…

---

## [Multi-value multi-field tag search](https://discuss.elastic.co/t/multi-value-multi-field-tag-search/153627)

<div class="topic-metadata">

**Author:** [@Katja\_Abramova](https://discuss.elastic.co/u/Katja_Abramova)\
**Replies:** 0\
**Last updated:** [October 23, 2018, 2:34pm UTC](https://discuss.elastic.co/t/multi-value-multi-field-tag-search/153627 "2018-10-23T14:34:23Z")

</div>

Hi, I've just started with ES and studied master and reference guides but still can't figure out how to solve my particular use case. I have a set of FAQ type of documents with a number of fields that boil down to: { …

---

## [\[Resolved\]ES7.0.1 - Error in elasticsearch 'Failed to parse mapping \[\_doc\]'](https://discuss.elastic.co/t/resolved-es7-0-1-error-in-elasticsearch-failed-to-parse-mapping-doc/200998)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 2\
**Last updated:** [September 26, 2019, 5:39am UTC](https://discuss.elastic.co/t/resolved-es7-0-1-error-in-elasticsearch-failed-to-parse-mapping-doc/200998 "2019-09-26T05:39:07Z")

</div>

Hi Team, I observed an error in elasticsearch. how to resolve it? \[2019-09-25T14:32:07,690\]\[INFO \]\[o.e.l.LicenseService \] \[node-1\] license \[e57e4a0d-4f0a-4e25-8beb-2e6192495d41\] mode \[trial\] - valid \[2019-09-25T14…

---

## [Delete all the snapshots in a repository](https://discuss.elastic.co/t/delete-all-the-snapshots-in-a-repository/21397)

<div class="topic-metadata">

**Author:** [@bplsilva](https://discuss.elastic.co/u/bplsilva)\
**Replies:** 2\
**Last updated:** [December 26, 2014, 3:15pm UTC](https://discuss.elastic.co/t/delete-all-the-snapshots-in-a-repository/21397 "2014-12-26T15:15:53Z")

</div>

Hello, I know the \*delete all\* kind of operations are the ones to avoid, but in this case, I'm really needing it. I'd like to delete all the snapshots in a repository before creating a new snapshot. Is there any …

---

## [How delete old index mapping or old template on Kibana's dev tool](https://discuss.elastic.co/t/how-delete-old-index-mapping-or-old-template-on-kibanas-dev-tool/106383)

<div class="topic-metadata">

**Author:** [@citanionarrei](https://discuss.elastic.co/u/citanionarrei)\
**Replies:** 3\
**Last updated:** [November 4, 2017, 9:55pm UTC](https://discuss.elastic.co/t/how-delete-old-index-mapping-or-old-template-on-kibanas-dev-tool/106383 "2017-11-04T21:55:04Z")

</div>

hi friends I would like to know if there is a code to clean up the kibana dev tool... In these days I created many templates, many mapping and indexes I know there are commands DELETE / my\_index DELETE / all DELET…

---

## [Version Conflicts in Bulk Upsert](https://discuss.elastic.co/t/version-conflicts-in-bulk-upsert/90734)

<div class="topic-metadata">

**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\
**Replies:** 2\
**Last updated:** [June 25, 2017, 4:18pm UTC](https://discuss.elastic.co/t/version-conflicts-in-bulk-upsert/90734 "2017-06-25T16:18:23Z")

</div>

Hello everyone, ####Background: We're using bulk API with upsert, without using version nor retry\_on\_conflict parameters. The architecture is as follows: 2 servers, each with different event types, constantly get dat…

---

## [How to Ship/Parse JSON logs (from Kibana) to Elasticsearch?](https://discuss.elastic.co/t/how-to-ship-parse-json-logs-from-kibana-to-elasticsearch/136345)

<div class="topic-metadata">

**Author:** [@brolo](https://discuss.elastic.co/u/brolo)\
**Replies:** 6\
**Last updated:** [June 22, 2018, 3:51pm UTC](https://discuss.elastic.co/t/how-to-ship-parse-json-logs-from-kibana-to-elasticsearch/136345 "2018-06-22T15:51:54Z")

</div>

I am trying to ship logs from a Kibana instance running in a docker container. I noticed that there is a module for Kibana in development (posted Github link below) and I pulled the pipeline code from Github and attempte…

---

## [Fail to get kibana version: HTTP GET request to http:/localhost:5600/api](https://discuss.elastic.co/t/fail-to-get-kibana-version-http-get-request-to-http-localhost-5600-api/182887)

<div class="topic-metadata">

**Author:** [@faad021](https://discuss.elastic.co/u/faad021)\
**Replies:** 2\
**Last updated:** [June 1, 2019, 8:49am UTC](https://discuss.elastic.co/t/fail-to-get-kibana-version-http-get-request-to-http-localhost-5600-api/182887 "2019-06-01T08:49:25Z")

</div>

Hi all, I am running elasticsearch and kibana in a container and i am trying to link filebeat to kibana but I am having an error. I am still a noob in this.However, I succesfully had results when i installed them locall…

---

## [Logstash: convert date string to timestamp in millisecond](https://discuss.elastic.co/t/logstash-convert-date-string-to-timestamp-in-millisecond/52845)

<div class="topic-metadata">

**Author:** [@sen](https://discuss.elastic.co/u/sen)\
**Replies:** 6\
**Last updated:** [June 16, 2016, 7:50am UTC](https://discuss.elastic.co/t/logstash-convert-date-string-to-timestamp-in-millisecond/52845 "2016-06-16T07:50:40Z")

</div>

Hello everyone, I have a filed date where my date is in the following format: 2016-03-30T12:37:27.424709000Z and I would like to convert it in millisecond. Do you how to do ? I didn't find a solution Thank you for…

---

## [Unsupported http.type \[netty3\] when trying to start embedded elasticsearch node](https://discuss.elastic.co/t/unsupported-http-type-netty3-when-trying-to-start-embedded-elasticsearch-node/69669)

<div class="topic-metadata">

**Author:** [@Rajind\_Ruparathna](https://discuss.elastic.co/u/Rajind_Ruparathna)\
**Replies:** 7\
**Last updated:** [January 9, 2017, 6:24am UTC](https://discuss.elastic.co/t/unsupported-http-type-netty3-when-trying-to-start-embedded-elasticsearch-node/69669 "2017-01-09T06:24:31Z")

</div>

I know that embedded Elasticsearch is not recommended. I'm just trying it for testing purposes. I'm trying to start an embedded Elasticsearch node giving the configuration from the following elasticsearch.yml # Name …

---

## [Extracting contents of the filename (from the source) and creating fields](https://discuss.elastic.co/t/extracting-contents-of-the-filename-from-the-source-and-creating-fields/57199)

<div class="topic-metadata">

**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\
**Replies:** 6\
**Last updated:** [September 28, 2016, 8:54am UTC](https://discuss.elastic.co/t/extracting-contents-of-the-filename-from-the-source-and-creating-fields/57199 "2016-09-28T08:54:39Z")

</div>

Hello I am trying to extract contents of the filename (made available by the sourcefield) and would like to add tags/create new fields based on the criterie. For example if this was the data in the source field: /app…

---

## [AccessDeniedException starting elasticsearch after installing X-Pack](https://discuss.elastic.co/t/accessdeniedexception-starting-elasticsearch-after-installing-x-pack/134480)

<div class="topic-metadata">

**Author:** [@Justin\_Wells](https://discuss.elastic.co/u/Justin_Wells)\
**Replies:** 3\
**Last updated:** [June 5, 2018, 3:27pm UTC](https://discuss.elastic.co/t/accessdeniedexception-starting-elasticsearch-after-installing-x-pack/134480 "2018-06-05T15:27:33Z")

</div>

Steps to get to problem on ubuntu 16.04, single node: Installed Elasticsearch 6.2.1 via .deb package Installed X-Pack, ec2-discovery and s3-repository modules Set bootstrap password using: printf {{ bootstrap\_passwor…

---

## [In a painless script how do I iterate through document keys based on a pattern?](https://discuss.elastic.co/t/in-a-painless-script-how-do-i-iterate-through-document-keys-based-on-a-pattern/238552)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 2\
**Last updated:** [June 25, 2020, 11:46pm UTC](https://discuss.elastic.co/t/in-a-painless-script-how-do-i-iterate-through-document-keys-based-on-a-pattern/238552 "2020-06-25T23:46:00Z")

</div>

Hello, I would like to come up with a scripted field of sum of all values based on document keys. So for example I have the following k=v pairs. doc\['totalA'\] = 1 doc\['totalB'\] = 3 doc\['totalC'\] = 3 I would like to…

---

## [How to install filebeat as a service and start it everytime windows start?](https://discuss.elastic.co/t/how-to-install-filebeat-as-a-service-and-start-it-everytime-windows-start/93777)

<div class="topic-metadata">

**Author:** [@patrickian](https://discuss.elastic.co/u/patrickian)\
**Replies:** 4\
**Last updated:** [July 20, 2017, 1:16am UTC](https://discuss.elastic.co/t/how-to-install-filebeat-as-a-service-and-start-it-everytime-windows-start/93777 "2017-07-20T01:16:26Z")

</div>

I'm installing filebeat in client PCs and basically, I don't want them seeing what filebeat does. I want to install it as a service in windows, run it everytime their machine starts and read from a defined directory (not…

---

## [Matching two different patterns in one config](https://discuss.elastic.co/t/matching-two-different-patterns-in-one-config/27976)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 4\
**Last updated:** [September 4, 2015, 1:23pm UTC](https://discuss.elastic.co/t/matching-two-different-patterns-in-one-config/27976 "2015-09-04T13:23:03Z")

</div>

I have been trying several things to no avail - need some help. My log file contains both successful and unsuccessful transactions - trouble is that I have to use a different match pattern to recognize Success and Fail…

---

## [Docs incorrect! - Pipeline-to-Pipeline Communication not working - ConfigurationError](https://discuss.elastic.co/t/docs-incorrect-pipeline-to-pipeline-communication-not-working-configurationerror/144302)

<div class="topic-metadata">

**Author:** [@nniikkoollaaii](https://discuss.elastic.co/u/nniikkoollaaii)\
**Replies:** 3\
**Last updated:** [August 16, 2018, 7:16am UTC](https://discuss.elastic.co/t/docs-incorrect-pipeline-to-pipeline-communication-not-working-configurationerror/144302 "2018-08-16T07:16:46Z")

</div>

Hello, I'm trying to get Pipeline-to-Pipeline Communication working according to the distributor pattern in https://www.elastic.co/guide/en/logstash/current/pipeline-to-pipeline.html#distributor-pattern (I'm working on…

---

## [Cookies issue while embedding kibana dashboard with iFrame](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 8\
**Last updated:** [December 28, 2020, 6:29am UTC](https://discuss.elastic.co/t/cookies-issue-while-embedding-kibana-dashboard-with-iframe/256777 "2020-12-28T06:29:14Z")

</div>

recently i read this in github. Currently, Kibana does not set the SameSite attribute on its session cookie. Up until recently, this was tolerable, but Chrome recently (version 80 ) updated its default configuration to …

---

## [PHP Connection issue with elasticsearch-PHP client, CURL working fine](https://discuss.elastic.co/t/php-connection-issue-with-elasticsearch-php-client-curl-working-fine/52174)

<div class="topic-metadata">

**Author:** [@airper](https://discuss.elastic.co/u/airper)\
**Replies:** 3\
**Last updated:** [February 9, 2017, 4:30pm UTC](https://discuss.elastic.co/t/php-connection-issue-with-elasticsearch-php-client-curl-working-fine/52174 "2017-02-09T16:30:12Z")

</div>

I've been struggling with this for a few days. I initially posted this question on the Elastic Cloud, but they advised to post here. I have a PHP app running in a Slim2 framework, with Elastic as a local installation …

---

## [Exception in thread "main" java.nio.file.NoSuchFileException: /usr/share/elasticsearch/plugins/.installing-2424676764641674618/plugin-descriptor.properties](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-nosuchfileexception-usr-share-elasticsearch-plugins-installing-2424676764641674618-plugin-descriptor-properties/165588)

<div class="topic-metadata">

**Author:** [@admindbypf](https://discuss.elastic.co/u/admindbypf)\
**Replies:** 5\
**Last updated:** [January 30, 2019, 8:46pm UTC](https://discuss.elastic.co/t/exception-in-thread-main-java-nio-file-nosuchfileexception-usr-share-elasticsearch-plugins-installing-2424676764641674618-plugin-descriptor-properties/165588 "2019-01-30T20:46:54Z")

</div>

When I install license-2.4.6.zip on RHEL 7, I get this error: \[root@sldbuetmora01 ~\]# /usr/share/elasticsearch/bin/elasticsearch-plugin install file:/root/license-2.4.6.zip -\> Downloading file:/root/license-2.4.6.zip …

---

## [Java.lang.IllegalStateExceptionのエラーがでます](https://discuss.elastic.co/t/java-lang-illegalstateexception/39138)

<div class="topic-metadata">

**Author:** [@hase\_gawa](https://discuss.elastic.co/u/hase_gawa)\
**Replies:** 2\
**Last updated:** [February 21, 2016, 11:53pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception/39138 "2016-02-21T23:53:28Z")

</div>

mac 10.10.5 yosemite java version "1.8.0\_66" にてコンソール上から elasticsearchを起動したところ、以下のようなログが大量に出力されます。 エラー内容でググッてみたりしたのですが解決しなかったため、質問させて頂きます。 また、これが原因かどうかわかりませんが以下のサイトを参照し、インストールしたMarvelのローカルサーバーにアクセスできませんでした。 http…

[Previous page](https://discuss.elastic.co/top.md?page=362&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=364&per_page=50&period=all)
