# Top **URL:** https://discuss.elastic.co/top.md?page=369&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 370 --- ## [Mark errors as resolved](https://discuss.elastic.co/t/mark-errors-as-resolved/130584)
**Author:** [@pelme](https://discuss.elastic.co/u/pelme)\ **Replies:** 7\ **Last updated:** [May 17, 2018, 1:58pm UTC](https://discuss.elastic.co/t/mark-errors-as-resolved/130584 "2018-05-17T13:58:41Z")
In Opbeat it is possible to mark an error as resolved. Our team heavily relies on that feature. How can we mark an error as resolved in APM? --- ## [Finding distinct values from a field](https://discuss.elastic.co/t/finding-distinct-values-from-a-field/132965)
**Author:** [@Suhas\_K](https://discuss.elastic.co/u/Suhas_K)\ **Replies:** 2\ **Last updated:** [May 24, 2018, 12:35pm UTC](https://discuss.elastic.co/t/finding-distinct-values-from-a-field/132965 "2018-05-24T12:35:32Z")
Hi, I have made a filter in Logstash which divides log lines into different fields. { "\_index": "XX\_DATE", "\_type": "doc", "\_id": "vBhbcghstjdJgpojNbs", "\_version": 1, "\_score": null, … --- ## [How to find quorum of the cluster in elasticsearch 7.x](https://discuss.elastic.co/t/how-to-find-quorum-of-the-cluster-in-elasticsearch-7-x/247335)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 11:15am UTC](https://discuss.elastic.co/t/how-to-find-quorum-of-the-cluster-in-elasticsearch-7-x/247335 "2020-09-03T11:15:29Z")
I am using Elasticsearch 7.9 version. I want to find the quorum value of my cluster. Before 7.x version, discovery.zen.minimum\_master\_nodes controlled the minimum number of eligible master nodes that a node should “se… --- ## [Elasticsearch: 2-node cluster with failover](https://discuss.elastic.co/t/elasticsearch-2-node-cluster-with-failover/23703)
**Author:** [@Prakhar\_Mishra](https://discuss.elastic.co/u/Prakhar_Mishra)\ **Replies:** 6\ **Last updated:** [May 28, 2015, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-2-node-cluster-with-failover/23703 "2015-05-28T22:05:54Z")
I am using Elasticsearch 1.5.2 and trying to setup a 2-node cluster. These 2 nodes are primarily for failover strategy (if any one node goes down, the other one is still there to handle requests), I don't need to divide … --- ## [Is there any way to check the relocation progress of shards?](https://discuss.elastic.co/t/is-there-any-way-to-check-the-relocation-progress-of-shards/299719)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 10:55am UTC](https://discuss.elastic.co/t/is-there-any-way-to-check-the-relocation-progress-of-shards/299719 "2022-03-15T10:55:57Z")
I plan to migrate the data in a cluster with three nodes to another cluster. After I add the exclusion parameter (cluster.routing.allocation.exclude.\_ip) to the cluster, check the status of shards through /\_cat/shards It… --- ## [Function\_score with order](https://discuss.elastic.co/t/function-score-with-order/164049)
**Author:** [@qballer](https://discuss.elastic.co/u/qballer)\ **Replies:** 7\ **Last updated:** [January 16, 2019, 9:14pm UTC](https://discuss.elastic.co/t/function-score-with-order/164049 "2019-01-16T21:14:48Z")
I have documents which I calculate a function\_score with the search query below. The scoring seems to work well yet some documents get the same score. This causes results to repeat and to some never comer back. In essenc… --- ## [java.lang.IllegalArgumentException: cannot write xcontent for unknown value of type class java.util.UUID?](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-write-xcontent-for-unknown-value-of-type-class-java-util-uuid/198638)
**Author:** [@Prasanth\_MP](https://discuss.elastic.co/u/Prasanth_MP)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 8:35am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-cannot-write-xcontent-for-unknown-value-of-type-class-java-util-uuid/198638 "2019-09-10T08:35:06Z")
Hi I am using java high level rest api client to read some documents from an elastic search index and i am getting the following error . I get this error when i do perform a request on elasticsearch client as below. el… --- ## [Re: failed to get node info...transport.NoNodeAvailableException](https://discuss.elastic.co/t/re-failed-to-get-node-info-transport-nonodeavailableexception/15952)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 3\ **Last updated:** [February 21, 2014, 2:05pm UTC](https://discuss.elastic.co/t/re-failed-to-get-node-info-transport-nonodeavailableexception/15952 "2014-02-21T14:05:08Z")
Dis you set a cluster name? -- David :wink: Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 21 févr. 2014 à 11:49, "Marwa.g" marwa.ghabri@esprit.tn a écrit : Hi, I'm trying to index and search pdf documen… --- ## [Stacked Up Vertical bar graph](https://discuss.elastic.co/t/stacked-up-vertical-bar-graph/55306)
**Author:** [@indusbull](https://discuss.elastic.co/u/indusbull)\ **Replies:** 8\ **Last updated:** [July 14, 2016, 9:59pm UTC](https://discuss.elastic.co/t/stacked-up-vertical-bar-graph/55306 "2016-07-14T21:59:15Z")
I have been struggling to create simple stacked up vertical bar graph. Any help would be appreciated. My data set looks like - And I want to create chart like below: --- ## [Subsequently get only first line of multi-line grok](https://discuss.elastic.co/t/subsequently-get-only-first-line-of-multi-line-grok/33381)
**Author:** [@RobT](https://discuss.elastic.co/u/RobT)\ **Replies:** 1\ **Last updated:** [October 30, 2015, 7:11pm UTC](https://discuss.elastic.co/t/subsequently-get-only-first-line-of-multi-line-grok/33381 "2015-10-30T19:11:29Z")
So, I'm retrieving a multi-line input just fine and storing in message. However, for throttling purposes I'd like to also just consider the first line so I'm trying to break the multi-line message up. I'm trying this: g… --- ## [Kibana Dashboard import failed "this file could not be processed"](https://discuss.elastic.co/t/kibana-dashboard-import-failed-this-file-could-not-be-processed/91181)
**Author:** [@jm\_peterson](https://discuss.elastic.co/u/jm_peterson)\ **Replies:** 2\ **Last updated:** [June 29, 2017, 12:51pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-failed-this-file-could-not-be-processed/91181 "2017-06-29T12:51:10Z")
When I try to add a json file to kibana\>management\>saved objects\>import I get "this file could not be processed" I verified the permissions of the file, incase that was throwing any errors, and that shouldn't be causing … --- ## [Using curl with bulk API: ActionRequestValidationException Validation Failed: 1: no requests added](https://discuss.elastic.co/t/using-curl-with-bulk-api-actionrequestvalidationexception-validation-failed-1-no-requests-added/15832)
**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\ **Replies:** 2\ **Last updated:** [February 16, 2014, 8:31pm UTC](https://discuss.elastic.co/t/using-curl-with-bulk-api-actionrequestvalidationexception-validation-failed-1-no-requests-added/15832 "2014-02-16T20:31:37Z")
Whenever I try to perform a bulk import from CURL, I get an error stating: ActionRequestValidationException\[Validation Failed: 1: no requests added Can someone point out my mistake in this command? $ curl -u us… --- ## [Kibana 6.0.1 and 5.6.5 security update](https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [December 6, 2017, 8:06pm UTC](https://discuss.elastic.co/t/kibana-6-0-1-and-5-6-5-security-update/110571 "2017-12-06T20:06:56Z")
Kibana cross site scripting issue (ESA-2017-22) Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or… --- ## [Only String and Array types are splittable](https://discuss.elastic.co/t/only-string-and-array-types-are-splittable/95246)
**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\ **Replies:** 3\ **Last updated:** [August 4, 2017, 11:36am UTC](https://discuss.elastic.co/t/only-string-and-array-types-are-splittable/95246 "2017-08-04T11:36:06Z")
Or more specifically: logstash.filters.split \] Only String and Array types are splittable. field:event\_data.MemberName is of type = NilClass Hi, So, I’d like to extract the contents of the string field called: field:e… --- ## [Increment counter if document already exists](https://discuss.elastic.co/t/increment-counter-if-document-already-exists/138604)
**Author:** [@yodog](https://discuss.elastic.co/u/yodog)\ **Replies:** 4\ **Last updated:** [July 11, 2018, 2:34pm UTC](https://discuss.elastic.co/t/increment-counter-if-document-already-exists/138604 "2018-07-11T14:34:59Z")
lets say i have an index iptables-%{+YYYY.MM}, which holds iptables kernel generated logs. i would like to: 1- create the doc if the log line doesn't exists or 2- increment a field called counter if it already exists … --- ## [Help to parse a timestamp string with grok filter in logstash](https://discuss.elastic.co/t/help-to-parse-a-timestamp-string-with-grok-filter-in-logstash/33386)
**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 8:12am UTC](https://discuss.elastic.co/t/help-to-parse-a-timestamp-string-with-grok-filter-in-logstash/33386 "2015-11-03T08:12:57Z")
Hi, I would like to parse this string with this timestamp for example: Fri, 30 Oct 2015 15:12:17 CET But in the pattern documentation I am not able to find any pattern that it could serve to me. Thanks in advance --- ## [Cannot escape special characters in query using Java API](https://discuss.elastic.co/t/cannot-escape-special-characters-in-query-using-java-api/25301)
**Author:** [@MaKro](https://discuss.elastic.co/u/MaKro)\ **Replies:** 4\ **Last updated:** [July 10, 2015, 11:09am UTC](https://discuss.elastic.co/t/cannot-escape-special-characters-in-query-using-java-api/25301 "2015-07-10T11:09:06Z")
Hello. I have a field which contains forward slashes (it's a usual path). I'm trying to execute this Query: QueryBuildres.termQuery("pageId", QueryParser.escape("/my/field/val")) and I cannot get any results. When I… --- ## [Creating a visualization from a script query](https://discuss.elastic.co/t/creating-a-visualization-from-a-script-query/94899)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 3\ **Last updated:** [July 28, 2017, 6:16am UTC](https://discuss.elastic.co/t/creating-a-visualization-from-a-script-query/94899 "2017-07-28T06:16:06Z")
I need to create visualizations after doing some math on the indexed data. I went through this: https://www.elastic.co/guide/en/elasticsearch/painless/5.5/painless-examples.html where it shows the usage using REST APIs… --- ## [Ship Kubernetes metadata with Filebeat](https://discuss.elastic.co/t/ship-kubernetes-metadata-with-filebeat/72231)
**Author:** [@jstangroome](https://discuss.elastic.co/u/jstangroome)\ **Replies:** 3\ **Last updated:** [January 31, 2017, 1:13pm UTC](https://discuss.elastic.co/t/ship-kubernetes-metadata-with-filebeat/72231 "2017-01-31T13:13:40Z")
Hi, We have an established Filebeat ==(lumberjack)==\> Logstash =\> Elasticsearch deployment for Docker container logs coming from a bespoke orchestration platform. We are now replacing our bespoke platform with Kubernet… --- ## [Multiple filter files for different host](https://discuss.elastic.co/t/multiple-filter-files-for-different-host/49262)
**Author:** [@Muhasin\_Cm](https://discuss.elastic.co/u/Muhasin_Cm)\ **Replies:** 3\ **Last updated:** [May 5, 2016, 7:34am UTC](https://discuss.elastic.co/t/multiple-filter-files-for-different-host/49262 "2016-05-05T07:34:06Z")
Hi , I have installed ELK stack on a linux machine and sending events using filebeat from different files.I have installed filebeat on different machines. The process is like below filebeat =\> logstash shipper =\> r… --- ## [Disabling dynamic mapping of an object's fields, while using dynamic templates to copy\_to custom fields](https://discuss.elastic.co/t/disabling-dynamic-mapping-of-an-objects-fields-while-using-dynamic-templates-to-copy-to-custom-fields/83090)
**Author:** [@rlvoyer](https://discuss.elastic.co/u/rlvoyer)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 6:09pm UTC](https://discuss.elastic.co/t/disabling-dynamic-mapping-of-an-objects-fields-while-using-dynamic-templates-to-copy-to-custom-fields/83090 "2017-04-21T18:09:11Z")
I am indexing data (using Elasticsearch 5.2.x) where I don't know in advance the set of all fields in my records. Since the number of fields is unbounded, I want to disable dynamic mapping of those fields. However, I wou… --- ## [One Kibana Instance For Multiple ES Clusters](https://discuss.elastic.co/t/one-kibana-instance-for-multiple-es-clusters/192799)
**Author:** [@cbille0](https://discuss.elastic.co/u/cbille0)\ **Replies:** 6\ **Last updated:** [July 31, 2019, 2:19pm UTC](https://discuss.elastic.co/t/one-kibana-instance-for-multiple-es-clusters/192799 "2019-07-31T14:19:35Z")
Hello, I wanted to know if it would be possible to connect a single kibana 7.2.0 service to two different Elasticsearch clusters. The Elasticsearch clusters would not be replicated or connected to each other in any way… --- ## [Managing queries in Elasticsearch Logstash filter plugin](https://discuss.elastic.co/t/managing-queries-in-elasticsearch-logstash-filter-plugin/141888)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 4\ **Last updated:** [July 27, 2018, 11:44am UTC](https://discuss.elastic.co/t/managing-queries-in-elasticsearch-logstash-filter-plugin/141888 "2018-07-27T11:44:33Z")
Hi, I'm opening this topic as a follow-up to this one: Elasticsearch query sort order index My main documentation reference for using Elasticsearch queries in Logstash is https://www.elastic.co/guide/en/logstash/curren… --- ## [Elasticserach 7.2 Unable to create cluster with error "Unable to lock JVM Memory: error=12, reason=Cannot allocate memory"](https://discuss.elastic.co/t/elasticserach-7-2-unable-to-create-cluster-with-error-unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/252050)
**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\ **Replies:** 6\ **Last updated:** [October 14, 2020, 2:58pm UTC](https://discuss.elastic.co/t/elasticserach-7-2-unable-to-create-cluster-with-error-unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/252050 "2020-10-14T14:58:36Z")
Hello! Standalone (single-node) Elasticsearch is work fine. I tried creating one node cluster, but it results into error: elasticsearch\_1 | {"type": "server", "timestamp": "2020-10-14T11:38:41,989+0000", "level": "WA… --- ## [Sorting and filterting top hits docs](https://discuss.elastic.co/t/sorting-and-filterting-top-hits-docs/172547)
**Author:** [@bambula](https://discuss.elastic.co/u/bambula)\ **Replies:** 6\ **Last updated:** [March 16, 2019, 10:17pm UTC](https://discuss.elastic.co/t/sorting-and-filterting-top-hits-docs/172547 "2019-03-16T22:17:45Z")
HI, is it possible to filter and sort the docs returned from top hits aggregation? lets say I have a simple product index for docs like this: { "product\_name": "some\_product", "category": "some\_cotegory", "pri… --- ## [Elasticsearch deployment on JBoss](https://discuss.elastic.co/t/elasticsearch-deployment-on-jboss/304)
**Author:** [@Stefan\_Nagele](https://discuss.elastic.co/u/Stefan_Nagele)\ **Replies:** 5\ **Last updated:** [May 7, 2015, 7:56am UTC](https://discuss.elastic.co/t/elasticsearch-deployment-on-jboss/304 "2015-05-07T07:56:53Z")
I would like to deploy elasticsearch as a .war library on my JBoss 6.4. First of all, I packaged elasticsearch as a .war by the following guidelines: https://github.com/javanna/elasticsearch-war-example Worked! Depl… --- ## [Beginner issue - testing output to stdout](https://discuss.elastic.co/t/beginner-issue-testing-output-to-stdout/58376)
**Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\ **Replies:** 8\ **Last updated:** [August 19, 2016, 12:32pm UTC](https://discuss.elastic.co/t/beginner-issue-testing-output-to-stdout/58376 "2016-08-19T12:32:36Z")
All im basically trying to parse a json file to pick out 2 fields field 1 is name feild 2 is product my ls.conf input { file { type =\> "mefile" path =\> "/export/home/me/me.json" sincedb\_path =\> "… --- ## [CSV filter - Create Index per log timestamp](https://discuss.elastic.co/t/csv-filter-create-index-per-log-timestamp/44234)
**Author:** [@thunderbirdgit](https://discuss.elastic.co/u/thunderbirdgit)\ **Replies:** 8\ **Last updated:** [March 14, 2016, 6:31pm UTC](https://discuss.elastic.co/t/csv-filter-create-index-per-log-timestamp/44234 "2016-03-14T18:31:26Z")
Hi I want to create ES index based on the dates matching from the logfile. I am using logstash CSV filter to process the logs. For instance, the log data appears like below 2016-02-21 00:02:32.238,123.abc.com,data 20… --- ## [How to install Marvel with free basic license and without Shield](https://discuss.elastic.co/t/how-to-install-marvel-with-free-basic-license-and-without-shield/37077)
**Author:** [@ian1](https://discuss.elastic.co/u/ian1)\ **Replies:** 6\ **Last updated:** [October 13, 2016, 12:55pm UTC](https://discuss.elastic.co/t/how-to-install-marvel-with-free-basic-license-and-without-shield/37077 "2016-10-13T12:55:12Z")
Hi folks, I read through the information at https://www.elastic.co/guide/en/marvel/current/license-management.html, but I couldn't find a way to install my free basic license. I have a 2 node elasticsearch cluster r… --- ## [Provide custom Kafka message decoder to Logstash](https://discuss.elastic.co/t/provide-custom-kafka-message-decoder-to-logstash/1780)
**Author:** [@technichle](https://discuss.elastic.co/u/technichle)\ **Replies:** 8\ **Last updated:** [January 6, 2017, 5:26am UTC](https://discuss.elastic.co/t/provide-custom-kafka-message-decoder-to-logstash/1780 "2017-01-06T05:26:38Z")
In my Logstash configuration I'm defining a custom Kafka message decoder but when I startup Logstash I get an error that Logstash cannot find my class. Is there a relatively easy way to point Logstash to my jar where the… --- ## [Latest value of a metric within a time range filter](https://discuss.elastic.co/t/latest-value-of-a-metric-within-a-time-range-filter/68574)
**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\ **Replies:** 5\ **Last updated:** [December 15, 2016, 1:09pm UTC](https://discuss.elastic.co/t/latest-value-of-a-metric-within-a-time-range-filter/68574 "2016-12-15T13:09:51Z")
Hi, Consider a usecase where I have daily stock price data and would like to have a dashboard display the average price of the stock over the kibana filter range, as well as the current stock price (price at the end date… --- ## [Max size of scroll window?](https://discuss.elastic.co/t/max-size-of-scroll-window/104645)
**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\ **Replies:** 4\ **Last updated:** [October 20, 2017, 7:19am UTC](https://discuss.elastic.co/t/max-size-of-scroll-window/104645 "2017-10-20T07:19:49Z")
I need to get all documents from index, so for that I using scroll to get all documents in bulks. Since my goal is to perform as less round-trips to elastic as possible, I want bulk size as big as possible. What is the… --- ## [Index Pattern Not Refreshing](https://discuss.elastic.co/t/index-pattern-not-refreshing/265070)
**Author:** [@misterek](https://discuss.elastic.co/u/misterek)\ **Replies:** 7\ **Last updated:** [March 2, 2021, 7:38pm UTC](https://discuss.elastic.co/t/index-pattern-not-refreshing/265070 "2021-03-02T19:38:15Z")
I have an index pattern that won't refresh. I have quite a few fields that aren't recognized. When I look at the index pattern, it recognizes 3630 fields. Clicking refresh sometimes recognizes the new fields (the t… --- ## [Does Logstash has a limit size for each event-message?](https://discuss.elastic.co/t/does-logstash-has-a-limit-size-for-each-event-message/26268)
**Author:** [@Akudva](https://discuss.elastic.co/u/Akudva)\ **Replies:** 6\ **Last updated:** [May 8, 2017, 11:14am UTC](https://discuss.elastic.co/t/does-logstash-has-a-limit-size-for-each-event-message/26268 "2017-05-08T11:14:15Z")
Hello, I am using file input plugin and wanted to know if Logstash has a size limit for each message/event? If yes, is it configurable? I am not able to find it in any documentation. Thanks, Ashish --- ## [Elasticsearch.Net.ElasticsearchClientException: The remote server returned an error: (413) Request Entity Too Large](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-the-remote-server-returned-an-error-413-request-entity-too-large/163786)
**Author:** [@franckepeixoto](https://discuss.elastic.co/u/franckepeixoto)\ **Replies:** 3\ **Last updated:** [January 10, 2019, 6:03pm UTC](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-the-remote-server-returned-an-error-413-request-entity-too-large/163786 "2019-01-10T18:03:22Z")
dear, i do trying sent a bulk size 1GB, but ... (i need help) Elasticsearch.Net.ElasticsearchClientException: The remote server returned an error: (413) Request Entity Too Large.. Call: Status code 413 from: POST /\_b… --- ## [Parsing xml document using xpath](https://discuss.elastic.co/t/parsing-xml-document-using-xpath/29320)
**Author:** [@ushadatt](https://discuss.elastic.co/u/ushadatt)\ **Replies:** 5\ **Last updated:** [September 16, 2015, 11:23am UTC](https://discuss.elastic.co/t/parsing-xml-document-using-xpath/29320 "2015-09-16T11:23:30Z")
I am trying to parse the following xml data using logstash.. I am able to do it for a single document..But when I am increasing number of documents, its not working.. \ \ \Book:… --- ## [This version of the JDBC driver is only compatible with Elasticsearch version 7.13 or newer; attempting to connect to a server version 7.4.2](https://discuss.elastic.co/t/this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-7-13-or-newer-attempting-to-connect-to-a-server-version-7-4-2/278135)
**Author:** [@MinwooKim](https://discuss.elastic.co/u/MinwooKim)\ **Replies:** 4\ **Last updated:** [July 8, 2021, 11:31am UTC](https://discuss.elastic.co/t/this-version-of-the-jdbc-driver-is-only-compatible-with-elasticsearch-version-7-13-or-newer-attempting-to-connect-to-a-server-version-7-4-2/278135 "2021-07-08T11:31:43Z")
Hello, I am trying to put my elasticsearch in database views, using intellij's Datagrip. this is where I got the jdbc driver source. meanwhile, my elastic search server has 7.4.2 version. Isn't 7.4.2 newer than 7.1… --- ## [How can I restore an index pattern and dashboards?](https://discuss.elastic.co/t/how-can-i-restore-an-index-pattern-and-dashboards/261709)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 2:33am UTC](https://discuss.elastic.co/t/how-can-i-restore-an-index-pattern-and-dashboards/261709 "2021-01-21T02:33:14Z")
Hi all, I made a mistake and deleted an index pattern that broke 3 dashboards I have. I don't know exactly how to reconstruct the visualizations inside the dashboard, as it was not named correctly, and when I click in t… --- ## [Unexpected error in ruby code in logstash](https://discuss.elastic.co/t/unexpected-error-in-ruby-code-in-logstash/70264)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 3\ **Last updated:** [January 2, 2017, 8:13am UTC](https://discuss.elastic.co/t/unexpected-error-in-ruby-code-in-logstash/70264 "2017-01-02T08:13:19Z")
Hi, An unexpected error in occuring for the following ruby code in logstash filter. SyntaxError: (ruby filter code):5: syntax error, unexpected tRCURLY \*\* }\*\* Following is the ruby code: ruby { … --- ## [\[SOLVED\] Kibana search on IP part](https://discuss.elastic.co/t/solved-kibana-search-on-ip-part/48969)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 2\ **Last updated:** [May 3, 2016, 10:02am UTC](https://discuss.elastic.co/t/solved-kibana-search-on-ip-part/48969 "2016-05-03T10:02:40Z")
Hello, When I make a curl request against elasticsearch with "\_analyze" option I get tokens that I want (example with ip address 192.168.100.1): "detail" : { "custom\_analyzer" : true, "tokenizer" : { "na… --- ## [Org.elasticsearch.transport.ConnectTransportException](https://discuss.elastic.co/t/org-elasticsearch-transport-connecttransportexception/7751)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 6\ **Last updated:** [May 25, 2012, 10:36pm UTC](https://discuss.elastic.co/t/org-elasticsearch-transport-connecttransportexception/7751 "2012-05-25T22:36:37Z")
In the hadoop job I used embedded client. For some reason the job failed. But even though job failed and the "embedded client" died, log is still spooling this message. I think it's trying to reconnect to the client. S… --- ## [Hide legends in vertical bar chart in Kibana 7.4.2](https://discuss.elastic.co/t/hide-legends-in-vertical-bar-chart-in-kibana-7-4-2/227843)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 7:54am UTC](https://discuss.elastic.co/t/hide-legends-in-vertical-bar-chart-in-kibana-7-4-2/227843 "2020-04-16T07:54:26Z")
I wish to hide the legend in vertical bar chart. It looks odd if number of entries goes beyond 10/15 in x axis Can someone please help --- ## [Can you use copy\_fields processor for @timestamp in winlogbeat](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 2:12pm UTC](https://discuss.elastic.co/t/can-you-use-copy-fields-processor-for-timestamp-in-winlogbeat/239501 "2020-07-01T14:12:49Z")
Hi guys, Does anyone know if there is a way to copy the @timestamp value from winlogbeat json to a separate field (for troubleshooting purposes) using winlogbeat.yml file? I'm trying to use the copy fields processor: … --- ## [Save Kibana Dashboard as Image or PDF file](https://discuss.elastic.co/t/save-kibana-dashboard-as-image-or-pdf-file/109092)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 3\ **Last updated:** [November 25, 2017, 11:40pm UTC](https://discuss.elastic.co/t/save-kibana-dashboard-as-image-or-pdf-file/109092 "2017-11-25T23:40:41Z")
Hi, I have integrated the Kibana dashboard in my application. I am trying to implement some solution to download the integrated report. Is it possible to do that? Or is there any feature in Kibana itself where we can d… --- ## [Running logstash and elasticsearch on two machine](https://discuss.elastic.co/t/running-logstash-and-elasticsearch-on-two-machine/26270)
**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\ **Replies:** 6\ **Last updated:** [February 19, 2016, 1:47pm UTC](https://discuss.elastic.co/t/running-logstash-and-elasticsearch-on-two-machine/26270 "2016-02-19T13:47:40Z")
I have worked out everything on my local machine, parsed my logs in logstash, stored them in kibana, and built dashboards for my data on Kibana. Now I trying to mock a production scenario where logstash is installed on … --- ## [xpack.encryptedSavedObjects.encryptionKey value not working in Kibana](https://discuss.elastic.co/t/xpack-encryptedsavedobjects-encryptionkey-value-not-working-in-kibana/361079)
**Author:** [@fruitbat](https://discuss.elastic.co/u/fruitbat)\ **Replies:** 4\ **Last updated:** [June 10, 2024, 9:17pm UTC](https://discuss.elastic.co/t/xpack-encryptedsavedobjects-encryptionkey-value-not-working-in-kibana/361079 "2024-06-10T21:17:01Z")
Hello, I recently upgraded from 7.17 to 8.14 with both Elasticsearch and Kibana. One problem I'm experiencing is I am no longer able to access any of my rules and connectors which were previously notifying me of changes… --- ## [Unique/Distinct values from elasticsearch query](https://discuss.elastic.co/t/unique-distinct-values-from-elasticsearch-query/15890)
**Author:** [@soumya\_sengupta](https://discuss.elastic.co/u/soumya_sengupta)\ **Replies:** 5\ **Last updated:** [July 17, 2014, 12:10pm UTC](https://discuss.elastic.co/t/unique-distinct-values-from-elasticsearch-query/15890 "2014-07-17T12:10:21Z")
How to get unique or distinct values from elastic search query ? I want to get all the unique vales and not their total count. -- You received this message because you are subscribed to the Google Groups "elasticse… --- ## [Kibana 4 Visualize value over time](https://discuss.elastic.co/t/kibana-4-visualize-value-over-time/2647)
**Author:** [@frederikbosch](https://discuss.elastic.co/u/frederikbosch)\ **Replies:** 7\ **Last updated:** [June 17, 2015, 1:10pm UTC](https://discuss.elastic.co/t/kibana-4-visualize-value-over-time/2647 "2015-06-17T13:10:57Z")
Hello, We are collecting some values of our servers, e.g. read and write to disk, using collectd + elk stack. The collecting part was no problem at all. Discovery is also fine, but now I want visualize the data. The … --- ## [文字コードの変換について](https://discuss.elastic.co/t/topic/148320)
**Author:** [@hogehuga](https://discuss.elastic.co/u/hogehuga)\ **Replies:** 4\ **Last updated:** [September 14, 2018, 1:21am UTC](https://discuss.elastic.co/t/topic/148320 "2018-09-14T01:21:40Z")
Javaが吐いている「Shift\_JIS + \\r改行」のファイルをElasticsearchに取り込むと文字化けしてしまいます。 環境としては以下のとおりです。 Windowsサーバ上で 対象のファイルが出力されている Filebeatを導入して、Logstashサーバに送っている Logstashで inputで charset =\> "Shift\_JIS" 及び charset =\> "CP932" としても、文字化… --- ## [Filebeat debug logging are not written](https://discuss.elastic.co/t/filebeat-debug-logging-are-not-written/222734)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 7\ **Last updated:** [March 10, 2020, 10:44am UTC](https://discuss.elastic.co/t/filebeat-debug-logging-are-not-written/222734 "2020-03-10T10:44:23Z")
Hi, I configured filebeat to write debug logs to /var/log/filebeat directory, but I haven't got anything in there... This is my configuration file: logging.level: debug logging.to\_files: true logging.files: path: /… [Previous page](https://discuss.elastic.co/top.md?page=368&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=370&per_page=50&period=all)