# Top

**URL:** https://discuss.elastic.co/top.md?page=393&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 394

---

## [How to delete all data from an index without deleting the index?](https://discuss.elastic.co/t/how-to-delete-all-data-from-an-index-without-deleting-the-index/245276)

<div class="topic-metadata">

**Author:** [@kovacsbv](https://discuss.elastic.co/u/kovacsbv)\
**Replies:** 2\
**Last updated:** [August 17, 2020, 10:30pm UTC](https://discuss.elastic.co/t/how-to-delete-all-data-from-an-index-without-deleting-the-index/245276 "2020-08-17T22:30:44Z")

</div>

Hello, I am looking for a simple and efficient way to delete all data from an index without deleting the index. This is known as a truncate in SQL parlance. The rationale is that I want to clear the data while leaving…

---

## [Logstash filter "if" condition to check if field exist or not](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-filter-if-condition-to-check-if-field-exist-or-not/268336 "2021-03-25T14:20:14Z")

</div>

Is there any way in Logstash to check if a certain field exists or not? My use-case: I want to add a field "status: missing" when the field "httpStatus" doesn't come in the log document.

---

## [How do I connect PySpark to Elasticsearch with SSL and verify certs set to False? Ask Question](https://discuss.elastic.co/t/how-do-i-connect-pyspark-to-elasticsearch-with-ssl-and-verify-certs-set-to-false-ask-question/167412)

<div class="topic-metadata">

**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\
**Replies:** 4\
**Last updated:** [February 7, 2019, 10:35am UTC](https://discuss.elastic.co/t/how-do-i-connect-pyspark-to-elasticsearch-with-ssl-and-verify-certs-set-to-false-ask-question/167412 "2019-02-07T10:35:30Z")

</div>

Previously I have successfully connected to an Elasticsearch cluster directly from Python with the following code: ssl\_context = create\_ssl\_context() ssl\_context.check\_hostname = False ssl\_context.verify\_mode = ssl.CERT…

---

## [Curl gets Kibana is not ready](https://discuss.elastic.co/t/curl-gets-kibana-is-not-ready/172808)

<div class="topic-metadata">

**Author:** [@UnitFactory](https://discuss.elastic.co/u/UnitFactory)\
**Replies:** 5\
**Last updated:** [March 18, 2019, 8:51pm UTC](https://discuss.elastic.co/t/curl-gets-kibana-is-not-ready/172808 "2019-03-18T20:51:57Z")

</div>

Hi, when i run a curl command: curl -XGET 'localhost:5601' i get the answer 'Kibana server is not ready yet' curl -XGET 'localhost:9200/\_cat/indices?v response me: health status index uuid pri…

---

## [How to change y-axis to show field value which is already an aggregate](https://discuss.elastic.co/t/how-to-change-y-axis-to-show-field-value-which-is-already-an-aggregate/105504)

<div class="topic-metadata">

**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\
**Replies:** 6\
**Last updated:** [December 2, 2017, 1:10am UTC](https://discuss.elastic.co/t/how-to-change-y-axis-to-show-field-value-which-is-already-an-aggregate/105504 "2017-12-02T01:10:59Z")

</div>

I have an array of data points objects that follow this format: {pizzasBought: 50, time:13:10} I want the x-axis to be set to time and pizzasBought which is already an aggregate to the y-axis and was wondering how to d…

---

## [Unable to set password for elastic (7.1.1)](https://discuss.elastic.co/t/unable-to-set-password-for-elastic-7-1-1/186160)

<div class="topic-metadata">

**Author:** [@ryh](https://discuss.elastic.co/u/ryh)\
**Replies:** 5\
**Last updated:** [June 20, 2019, 6:22pm UTC](https://discuss.elastic.co/t/unable-to-set-password-for-elastic-7-1-1/186160 "2019-06-20T18:22:45Z")

</div>

Hi All, I'm trying to set a default password for the elastic user through Docker. But my ELASTIC\_PASSWORD key isn't working. Here's my docker-compose file. version: '3' services: elasticsearch: hostname: elastics…

---

## [DNS lookup failure "elasticsearch":](https://discuss.elastic.co/t/dns-lookup-failure-elasticsearch/216140)

<div class="topic-metadata">

**Author:** [@Adib\_Rastegarnia](https://discuss.elastic.co/u/Adib_Rastegarnia)\
**Replies:** 3\
**Last updated:** [January 23, 2020, 4:57pm UTC](https://discuss.elastic.co/t/dns-lookup-failure-elasticsearch/216140 "2020-01-23T16:57:59Z")

</div>

I have elasticsearch and kibana running in local k8s cluster (using kind) and they are up and running. I deployed filebeat using image version 7.5.2 and it is up and running but I see some errors in its logs that it cann…

---

## [I need an elasticsearch php client query for range filter](https://discuss.elastic.co/t/i-need-an-elasticsearch-php-client-query-for-range-filter/96748)

<div class="topic-metadata">

**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\
**Replies:** 6\
**Last updated:** [August 14, 2017, 3:59am UTC](https://discuss.elastic.co/t/i-need-an-elasticsearch-php-client-query-for-range-filter/96748 "2017-08-14T03:59:07Z")

</div>

I am using this query: $params = \[‘index’ =\> ‘201706’,‘type’ =\> ‘facebook’, ‘body’ =\> \[‘query’ =\> \[‘bool’ =\> \[‘must’ =\> \[‘filter’ =\> \[‘range’ =\> \[‘created\_at’ =\> \[‘gte’ =\> ‘2017-06-25 01:00:00’,‘lte’ =\> ‘2017-09-30 08:0…

---

## [How to Query to get the jvm heap usage for each node(from \_node/stats)](https://discuss.elastic.co/t/how-to-query-to-get-the-jvm-heap-usage-for-each-node-from--node-stats/76150)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 3\
**Last updated:** [March 1, 2017, 9:10pm UTC](https://discuss.elastic.co/t/how-to-query-to-get-the-jvm-heap-usage-for-each-node-from--node-stats/76150 "2017-03-01T21:10:33Z")

</div>

Hi There, Is there a way to query the node and their jvm heap usage only from \_node/stats . So, I am looking for one of the formats below node heap\_used\_in\_bytes heap\_used\_percent …

---

## [Error connecting to node kafka-broker:9092 (id: 1 rack: null) java.net.UnknownHostException: kafka-broker](https://discuss.elastic.co/t/error-connecting-to-node-kafka-broker-9092-id-1-rack-null-java-net-unknownhostexception-kafka-broker/327434)

<div class="topic-metadata">

**Author:** [@Rajesh\_R](https://discuss.elastic.co/u/Rajesh_R)\
**Replies:** 3\
**Last updated:** [March 23, 2023, 7:31pm UTC](https://discuss.elastic.co/t/error-connecting-to-node-kafka-broker-9092-id-1-rack-null-java-net-unknownhostexception-kafka-broker/327434 "2023-03-23T19:31:43Z")

</div>

When I use kafka plugin in logstash, I am getting the below error. \[2023-03-10T15:11:46,310\]\[WARN \]\[org.apache.kafka.clients.NetworkClient\]\[main\]\[289f84d5c44d64af9505535a5352178af25a608c83252a1c520ab39a4faa4855\] \[Consum…

---

## [Rollover Index issue with Elasticsearch 6.2](https://discuss.elastic.co/t/rollover-index-issue-with-elasticsearch-6-2/123852)

<div class="topic-metadata">

**Author:** [@somnath.guthula](https://discuss.elastic.co/u/somnath.guthula)\
**Replies:** 5\
**Last updated:** [March 25, 2018, 1:26am UTC](https://discuss.elastic.co/t/rollover-index-issue-with-elasticsearch-6-2/123852 "2018-03-25T01:26:14Z")

</div>

Hi guys, I am having an issue with rolling over indices. So, We were trying a rollover indice with our newly setup cluster with Elasticsearch 6.2 When we are trying to rollover the indice, It gives the following error. …

---

## [Visual Builder Markdown - Displaying Strings](https://discuss.elastic.co/t/visual-builder-markdown-displaying-strings/129730)

<div class="topic-metadata">

**Author:** [@pepperhat](https://discuss.elastic.co/u/pepperhat)\
**Replies:** 4\
**Last updated:** [April 27, 2018, 6:27pm UTC](https://discuss.elastic.co/t/visual-builder-markdown-displaying-strings/129730 "2018-04-27T18:27:01Z")

</div>

Rewriting this as I've learned a couple of things: A bit of background: I'm filtering my query to only return a single result I'm using this to create a "document view" type visual I need to reference the values witho…

---

## [Concerns about ES Unable to lock JVM Memory: error=12,reason=Cannot allocate memory](https://discuss.elastic.co/t/concerns-about-es-unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/51094)

<div class="topic-metadata">

**Author:** [@David\_Montgomery](https://discuss.elastic.co/u/David_Montgomery)\
**Replies:** 2\
**Last updated:** [October 4, 2016, 2:31pm UTC](https://discuss.elastic.co/t/concerns-about-es-unable-to-lock-jvm-memory-error-12-reason-cannot-allocate-memory/51094 "2016-10-04T14:31:57Z")

</div>

Hi, What is the deal with ES and memory? I am usig using 2.1.3. I set heap\_size of half of ram I set the below echo 'elasticsearch soft memlock unlimited' | tee -a /etc/security/limits.conf echo 'elasticsearch…

---

## [Query with multiple filters - Grafana/ElasticSearch](https://discuss.elastic.co/t/query-with-multiple-filters-grafana-elasticsearch/57897)

<div class="topic-metadata">

**Author:** [@solidz](https://discuss.elastic.co/u/solidz)\
**Replies:** 1\
**Last updated:** [August 12, 2016, 11:16am UTC](https://discuss.elastic.co/t/query-with-multiple-filters-grafana-elasticsearch/57897 "2016-08-12T11:16:00Z")

</div>

Hi, I meet a problem when I try to add more filters in my grafana query for "templating". In fact, when I create a variable with a query like this : {"find": "terms", "field": "myfield", "query": "field1:$variable…

---

## [How to disable add\_host\_metadata processor?](https://discuss.elastic.co/t/how-to-disable-add-host-metadata-processor/162254)

<div class="topic-metadata">

**Author:** [@lukasg](https://discuss.elastic.co/u/lukasg)\
**Replies:** 4\
**Last updated:** [December 28, 2018, 10:59am UTC](https://discuss.elastic.co/t/how-to-disable-add-host-metadata-processor/162254 "2018-12-28T10:59:40Z")

</div>

How can I disable the built-in add\_host\_metadata processor in filebeat \>= 6.3.x? My events already contain a host field with a client IP address that now gets overwritten by the host metadata (I'm attempting to upgrade …

---

## [All ids](https://discuss.elastic.co/t/all-ids/4449)

<div class="topic-metadata">

**Author:** [@Albin\_Stigo](https://discuss.elastic.co/u/Albin_Stigo)\
**Replies:** 2\
**Last updated:** [May 20, 2011, 9:05pm UTC](https://discuss.elastic.co/t/all-ids/4449 "2011-05-20T21:05:07Z")

</div>

Hi, What is the easiest/most efficient way of getting all document ids in an index? Backstory: I have csv file where I want to index each (unique) line. I do a sha1 on each line and use that as the id when I crea…

---

## [Grok multiline parse failures](https://discuss.elastic.co/t/grok-multiline-parse-failures/104607)

<div class="topic-metadata">

**Author:** [@Jordan160](https://discuss.elastic.co/u/Jordan160)\
**Replies:** 6\
**Last updated:** [October 20, 2017, 3:58pm UTC](https://discuss.elastic.co/t/grok-multiline-parse-failures/104607 "2017-10-20T15:58:39Z")

</div>

Hello, I am fairly new to ELK stack and currently am having issues with GROK filter. My pattern matches when using http://grokconstructor.appspot.com, but it still seems to be breaking on a particular log pattern that …

---

## [Basic auth on Kibana using nginx](https://discuss.elastic.co/t/basic-auth-on-kibana-using-nginx/158871)

<div class="topic-metadata">

**Author:** [@shahid3507](https://discuss.elastic.co/u/shahid3507)\
**Replies:** 5\
**Last updated:** [December 3, 2018, 2:57pm UTC](https://discuss.elastic.co/t/basic-auth-on-kibana-using-nginx/158871 "2018-12-03T14:57:06Z")

</div>

Hey, I was trying to implement nginx basic auth to Kibana OSS 6.3.1 using proxy pass. After Implementing I encountered an issue that the resources don't load on the page and show's authorization exception (403). The s…

---

## [Failed to parse mapping \[\_doc\]: unknown parameter \[properties\] on mapper \[error\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-unknown-parameter-properties-on-mapper-error-of-type-text/280322)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 6\
**Last updated:** [August 4, 2021, 3:43pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-unknown-parameter-properties-on-mapper-error-of-type-text/280322 "2021-08-04T15:43:42Z")

</div>

I am running filebeat aws module to fetch AWS cloudtrail logs, since 1st August I am getting this error and data is not getting indexed. I am using custom index name and using copied template and pipeline from Filebeat i…

---

## [How to get alerts for logstash failures of plugins / input / filters?](https://discuss.elastic.co/t/how-to-get-alerts-for-logstash-failures-of-plugins-input-filters/27087)

<div class="topic-metadata">

**Author:** [@KrishnaPG](https://discuss.elastic.co/u/KrishnaPG)\
**Replies:** 6\
**Last updated:** [March 29, 2016, 11:47am UTC](https://discuss.elastic.co/t/how-to-get-alerts-for-logstash-failures-of-plugins-input-filters/27087 "2016-03-29T11:47:28Z")

</div>

Inside logstash, what is the official mechanism to know about any critical errors that happen with plugins / inputs / filters during the production run? For example, I am using http\_poller input and elastic output. Say…

---

## [Logstash with systemctl not work](https://discuss.elastic.co/t/logstash-with-systemctl-not-work/85538)

<div class="topic-metadata">

**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\
**Replies:** 4\
**Last updated:** [May 27, 2017, 1:08am UTC](https://discuss.elastic.co/t/logstash-with-systemctl-not-work/85538 "2017-05-27T01:08:37Z")

</div>

after I installed x-pack, I could only make logstash work by /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/index\_from\_redis.conf --config.reload.automatic --log.level=debug sudo systemctl start logstash.ser…

---

## [About the error "The quota has been exceeded error" from kibana](https://discuss.elastic.co/t/about-the-error-the-quota-has-been-exceeded-error-from-kibana/293490)

<div class="topic-metadata">

**Author:** [@lhoncorty](https://discuss.elastic.co/u/lhoncorty)\
**Replies:** 1\
**Last updated:** [January 6, 2022, 2:33pm UTC](https://discuss.elastic.co/t/about-the-error-the-quota-has-been-exceeded-error-from-kibana/293490 "2022-01-06T14:33:21Z")

</div>

original discussion is closed. I just want to say it is the browser display issue. The error disappeared after I duplicate the tab on my firefox.

---

## [Error - Failed to set password for user \[apm\_system\]](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system/270252)

<div class="topic-metadata">

**Author:** [@Abhishek\_Pratap\_Sin1](https://discuss.elastic.co/u/Abhishek_Pratap_Sin1)\
**Replies:** 4\
**Last updated:** [April 20, 2021, 10:17am UTC](https://discuss.elastic.co/t/error-failed-to-set-password-for-user-apm-system/270252 "2021-04-20T10:17:34Z")

</div>

I am running Elastic-Search 7.11.1 Basic license 3 master & data nodes. While I was trying set password for build-in user, not able to set password for apm\_system. I following steps to set password. Step 1- update …

---

## [How to use "syslog\_hostname" in Kibana Visualization?](https://discuss.elastic.co/t/how-to-use-syslog-hostname-in-kibana-visualization/86182)

<div class="topic-metadata">

**Author:** [@Cdnvballer](https://discuss.elastic.co/u/Cdnvballer)\
**Replies:** 7\
**Last updated:** [May 22, 2017, 6:33pm UTC](https://discuss.elastic.co/t/how-to-use-syslog-hostname-in-kibana-visualization/86182 "2017-05-22T18:33:07Z")

</div>

Hi, I'm very new to ELK ; managed to set up an environment where syslog events are shipped via Filebeat to an ELK server for the actual reporting.... From Kibana --\> Discover, I can see the active syslog events , an…

---

## [ParsingException\[Unknown key for a START\_OBJECT in \[filter\].\]](https://discuss.elastic.co/t/parsingexception-unknown-key-for-a-start-object-in-filter/104083)

<div class="topic-metadata">

**Author:** [@varun\_kumar2](https://discuss.elastic.co/u/varun_kumar2)\
**Replies:** 3\
**Last updated:** [October 18, 2017, 2:15pm UTC](https://discuss.elastic.co/t/parsingexception-unknown-key-for-a-start-object-in-filter/104083 "2017-10-18T14:15:54Z")

</div>

PUT \_xpack/watcher/watch/Integrations.RepComp.Monitor.Errors/ { "trigger": { "schedule": { "interval": "15m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "logstash-"…

---

## [Observed a panic: "invalid memory address or nil pointer dereference"](https://discuss.elastic.co/t/observed-a-panic-invalid-memory-address-or-nil-pointer-dereference/206465)

<div class="topic-metadata">

**Author:** [@1robroos](https://discuss.elastic.co/u/1robroos)\
**Replies:** 4\
**Last updated:** [November 16, 2019, 4:20pm UTC](https://discuss.elastic.co/t/observed-a-panic-invalid-memory-address-or-nil-pointer-dereference/206465 "2019-11-16T16:20:00Z")

</div>

Hello Looks like I have the same issues as written in closed issue 14320: https://github.com/elastic/beats/issues/14320 So I am using: ( as directed in https://www.elastic.co/guide/en/beats/metricbeat/current/running-o…

---

## [Multiline problem with python stack trace](https://discuss.elastic.co/t/multiline-problem-with-python-stack-trace/129329)

<div class="topic-metadata">

**Author:** [@romanskz](https://discuss.elastic.co/u/romanskz)\
**Replies:** 5\
**Last updated:** [May 4, 2018, 9:47am UTC](https://discuss.elastic.co/t/multiline-problem-with-python-stack-trace/129329 "2018-05-04T09:47:23Z")

</div>

Hello, I'm using an elk stack. I have a log file from a python program. Some logs have stacktrace. I'm trying to use the multiline option in filebeat to get all stacktrace in addition to the error log. However, nothing …

---

## [Variable Custom Labels in Kibana Visualization](https://discuss.elastic.co/t/variable-custom-labels-in-kibana-visualization/183885)

<div class="topic-metadata">

**Author:** [@Suraj\_Kumar2](https://discuss.elastic.co/u/Suraj_Kumar2)\
**Replies:** 3\
**Last updated:** [June 4, 2019, 3:44pm UTC](https://discuss.elastic.co/t/variable-custom-labels-in-kibana-visualization/183885 "2019-06-04T15:44:02Z")

</div>

Hi, I am using kibana for visualization of sensor log, and I have three fields\['field\_name','field\_value','field\_time'\] in one json doc. There are many field\_names in the whole index, and I have an option filter where I…

---

## [GraphQL errors uptime heartbeat](https://discuss.elastic.co/t/graphql-errors-uptime-heartbeat/178473)

<div class="topic-metadata">

**Author:** [@amergan](https://discuss.elastic.co/u/amergan)\
**Replies:** 5\
**Last updated:** [April 30, 2019, 5:10pm UTC](https://discuss.elastic.co/t/graphql-errors-uptime-heartbeat/178473 "2019-04-30T17:10:23Z")

</div>

After configuring heartbeat, i get these errors in uptime. Error GraphQL error: \[search\_context\_exception\] unknown type for collapse field monitor.id, only keywords and numbers are acceptedError GraphQL error: \[illegal\_…

---

## [Unable to use msearch using Curl or any Rest client](https://discuss.elastic.co/t/unable-to-use-msearch-using-curl-or-any-rest-client/109320)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 5\
**Last updated:** [November 28, 2017, 8:21am UTC](https://discuss.elastic.co/t/unable-to-use-msearch-using-curl-or-any-rest-client/109320 "2017-11-28T08:21:51Z")

</div>

Hi, I got the my complex \_msearch query from chrome developer tools. I took the payload the the request URL and pasted that in the dev tools and it worked fine and gave me the same result i was looking for as kibana UI.…

---

## [Selinux with ELK on Centos 7](https://discuss.elastic.co/t/selinux-with-elk-on-centos-7/73183)

<div class="topic-metadata">

**Author:** [@ankit\_R](https://discuss.elastic.co/u/ankit_R)\
**Replies:** 0\
**Last updated:** [January 30, 2017, 10:10am UTC](https://discuss.elastic.co/t/selinux-with-elk-on-centos-7/73183 "2017-01-30T10:10:16Z")

</div>

Hi Community, I am looking for some good documentation on selinux consideration settings for ELK 5.x on centos 7.

---

## [/\_cluster/reroute automatically reroute and rebalance all primary shards](https://discuss.elastic.co/t/cluster-reroute-automatically-reroute-and-rebalance-all-primary-shards/161757)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 5\
**Last updated:** [December 21, 2018, 2:47pm UTC](https://discuss.elastic.co/t/cluster-reroute-automatically-reroute-and-rebalance-all-primary-shards/161757 "2018-12-21T14:47:22Z")

</div>

Elasticsearch 6.5.4 I was wondering, if there is possibility that elasticsearch automatically rebalances shards on nodes. For example, when I have 2 or 3 or or more node cluster, and I restart single node, then after s…

---

## [Kibana Dashboards Gallery](https://discuss.elastic.co/t/kibana-dashboards-gallery/355950)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 4\
**Last updated:** [March 25, 2024, 4:27pm UTC](https://discuss.elastic.co/t/kibana-dashboards-gallery/355950 "2024-03-25T16:27:39Z")

</div>

Hello, I don't believe this exists but is there a way where we can have a repository of custom dashboards, where people can share all their own creations. It would help alot of people to use other dashboards as templat…

---

## [Enabling Slow Logging](https://discuss.elastic.co/t/enabling-slow-logging/92538)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 4\
**Last updated:** [July 21, 2017, 2:48pm UTC](https://discuss.elastic.co/t/enabling-slow-logging/92538 "2017-07-21T14:48:34Z")

</div>

ES, LS, Kibana Version 5.4.0 I'm attempting to enable slow logging, as some queries are taking \>10 minutes to return the last 24 hours of data. In order to remedy this, I'm attempting to enable slow logging, but unable…

---

## [No logs shipped from Kubernetes Filebeat](https://discuss.elastic.co/t/no-logs-shipped-from-kubernetes-filebeat/215899)

<div class="topic-metadata">

**Author:** [@jmgirven](https://discuss.elastic.co/u/jmgirven)\
**Replies:** 7\
**Last updated:** [February 11, 2020, 1:34pm UTC](https://discuss.elastic.co/t/no-logs-shipped-from-kubernetes-filebeat/215899 "2020-02-11T13:34:25Z")

</div>

I am running filebeats 7.5.1 on my kubernetes cluster as described in the section "Get started in minutes" "Hosted" "Kubernetes Logs" from here: https://www.elastic.co/what-is/kubernetes-monitoring With the exception t…

---

## [Getting "lumberjack All host unavailable, sleeping" error when Logstash-to-Logstash communication is configured](https://discuss.elastic.co/t/getting-lumberjack-all-host-unavailable-sleeping-error-when-logstash-to-logstash-communication-is-configured/179903)

<div class="topic-metadata">

**Author:** [@garima](https://discuss.elastic.co/u/garima)\
**Replies:** 0\
**Last updated:** [May 7, 2019, 6:59am UTC](https://discuss.elastic.co/t/getting-lumberjack-all-host-unavailable-sleeping-error-when-logstash-to-logstash-communication-is-configured/179903 "2019-05-07T06:59:38Z")

</div>

Logstash Version: 6.4.1 Use case: Logstash-to-Logstash Communication Upstream hostname : node-1 (IP 172.30.64.98) Downstream hostname : node-2 (IP 172.30.64.115) In /etc/hosts both hostname is already mentioned and b…

---

## [Turn off ES deprecation Logs Dynamically](https://discuss.elastic.co/t/turn-off-es-deprecation-logs-dynamically/221948)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 5\
**Last updated:** [March 4, 2020, 10:53pm UTC](https://discuss.elastic.co/t/turn-off-es-deprecation-logs-dynamically/221948 "2020-03-04T22:53:43Z")

</div>

I know there is a way to turn off deprecation logs via static config as documented here: https://www.elastic.co/guide/en/elasticsearch/reference/6.7/logging.html#deprecation-logging However, I wasn't sure if there is a …

---

## [Kibana 6.5.1 - Timelion - Y (and X) axis labels](https://discuss.elastic.co/t/kibana-6-5-1-timelion-y-and-x-axis-labels/159783)

<div class="topic-metadata">

**Author:** [@TechSavvy](https://discuss.elastic.co/u/TechSavvy)\
**Replies:** 5\
**Last updated:** [December 10, 2018, 6:28pm UTC](https://discuss.elastic.co/t/kibana-6-5-1-timelion-y-and-x-axis-labels/159783 "2018-12-10T18:28:54Z")

</div>

EDIT - running version 6.5.1 of everything. I hate that I'm even having to ask such a simple question, but I can't find a straight answer anywhere. Does timelion currently have the ability to add an x or y axis label? E…

---

## [Index and query source code](https://discuss.elastic.co/t/index-and-query-source-code/38979)

<div class="topic-metadata">

**Author:** [@Joris\_Rau](https://discuss.elastic.co/u/Joris_Rau)\
**Replies:** 8\
**Last updated:** [January 14, 2016, 12:29pm UTC](https://discuss.elastic.co/t/index-and-query-source-code/38979 "2016-01-14T12:29:03Z")

</div>

Hi, I want to use Elasticsearch to use a regexp query on source code. However I could not find any information about indexing or querying source code using elasticsearch. I know that GitHub is using Elasticsearch for t…

---

## [How to send logs directly to ELK (no intermediate file storage involved)](https://discuss.elastic.co/t/how-to-send-logs-directly-to-elk-no-intermediate-file-storage-involved/94649)

<div class="topic-metadata">

**Author:** [@mla](https://discuss.elastic.co/u/mla)\
**Replies:** 4\
**Last updated:** [July 27, 2017, 8:24am UTC](https://discuss.elastic.co/t/how-to-send-logs-directly-to-elk-no-intermediate-file-storage-involved/94649 "2017-07-27T08:24:08Z")

</div>

The applications I'm running in a Docker container, managed by openshift, should not use volumes for log files. So i would like to write directly from the applications, using some module (appender) in log4j/logback/....…

---

## [Search API Limits](https://discuss.elastic.co/t/search-api-limits/152491)

<div class="topic-metadata">

**Author:** [@bakko91](https://discuss.elastic.co/u/bakko91)\
**Replies:** 5\
**Last updated:** [October 18, 2018, 2:14pm UTC](https://discuss.elastic.co/t/search-api-limits/152491 "2018-10-18T14:14:31Z")

</div>

Hi all! I'm new to elastic and also new to the forum, so please forgive me if I ask something stupid or wrong. I have a problem using Search API of Java High Level REST Client because I'm trying to make a request with …

---

## [How many fields is too many?](https://discuss.elastic.co/t/how-many-fields-is-too-many/23275)

<div class="topic-metadata">

**Author:** [@Mitch\_Kuchenberg](https://discuss.elastic.co/u/Mitch_Kuchenberg)\
**Replies:** 5\
**Last updated:** [April 16, 2015, 3:39pm UTC](https://discuss.elastic.co/t/how-many-fields-is-too-many/23275 "2015-04-16T15:39:52Z")

</div>

I'm currently working on implementing ElasticSearch on a Django-based REST API. I hope to be able to search through roughly 5 million documents, but I've struggled to find an answer to a question I've had from the b…

---

## [Elasticsearch Memory Consumption](https://discuss.elastic.co/t/elasticsearch-memory-consumption/218336)

<div class="topic-metadata">

**Author:** [@guruprasadb](https://discuss.elastic.co/u/guruprasadb)\
**Replies:** 8\
**Last updated:** [February 12, 2020, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-memory-consumption/218336 "2020-02-12T05:55:36Z")

</div>

Hello, In the current system we have 90 days of logs. However, most of the time, only 30 days of data is queried. So, I am thinking of following optimizations to manage old indices to reduce system memory utilization. …

---

## [Kibana behind apache reverse proxy Can't Access Index Patterns](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy-cant-access-index-patterns/160868)

<div class="topic-metadata">

**Author:** [@ali1](https://discuss.elastic.co/u/ali1)\
**Replies:** 8\
**Last updated:** [December 25, 2018, 3:16pm UTC](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy-cant-access-index-patterns/160868 "2018-12-25T15:16:13Z")

</div>

Hello, im using kibana behind apache reverse proxy and i can' use "Dev Tools" to request all of my Elasticsearch indexs , but when i come to the "Maanagment -\> index Patterns" Section , Kibana can't find my Elasticsear…

---

## [How to calculate the percentage in data table in kibana](https://discuss.elastic.co/t/how-to-calculate-the-percentage-in-data-table-in-kibana/284380)

<div class="topic-metadata">

**Author:** [@Nijanthan](https://discuss.elastic.co/u/Nijanthan)\
**Replies:** 6\
**Last updated:** [September 17, 2021, 7:23am UTC](https://discuss.elastic.co/t/how-to-calculate-the-percentage-in-data-table-in-kibana/284380 "2021-09-17T07:23:29Z")

</div>

How do I calculate the failure percentage in data table in kibana ? I have 3 columns like total ,success , failure nd I need to calculate the failure percentage which is ( failure / total ) ×100 . Is there any possible …

---

## [What is Query-time and index-time?](https://discuss.elastic.co/t/what-is-query-time-and-index-time/136503)

<div class="topic-metadata">

**Author:** [@Eswar\_123](https://discuss.elastic.co/u/Eswar_123)\
**Replies:** 3\
**Last updated:** [June 19, 2018, 4:23pm UTC](https://discuss.elastic.co/t/what-is-query-time-and-index-time/136503 "2018-06-19T16:23:33Z")

</div>

I was going through the Elastic search definitive guide where I came across query-time and index-time search-as-you-type topics. What do they actually mean? How do they differ from each other?

---

## [Unknown key for a START\_OBJECT in \[facets\]?](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-facets/69319)

<div class="topic-metadata">

**Author:** [@west415](https://discuss.elastic.co/u/west415)\
**Replies:** 2\
**Last updated:** [December 16, 2016, 8:49pm UTC](https://discuss.elastic.co/t/unknown-key-for-a-start-object-in-facets/69319 "2016-12-16T20:49:25Z")

</div>

Hi, I'm new to elasticsearch and using 5.1.1. I'm really enjoying what I'm learning and now I want to be able to build a set of facets to allow users to filter on the indexed data. I have 150 or so documents indexed.…

---

## [Kibana Map Visualization with Lat Long fields](https://discuss.elastic.co/t/kibana-map-visualization-with-lat-long-fields/106762)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 3\
**Last updated:** [November 7, 2017, 11:47pm UTC](https://discuss.elastic.co/t/kibana-map-visualization-with-lat-long-fields/106762 "2017-11-07T23:47:40Z")

</div>

Hi, I have some csv files which contains the Latitude and Longitude column. I am trying to put these coordinates on Kibana map but not able to do so. Following is my logstash conf: input { file { path …

---

## [ELK Stack Community version](https://discuss.elastic.co/t/elk-stack-community-version/178223)

<div class="topic-metadata">

**Author:** [@nagr](https://discuss.elastic.co/u/nagr)\
**Replies:** 4\
**Last updated:** [April 26, 2019, 10:54am UTC](https://discuss.elastic.co/t/elk-stack-community-version/178223 "2019-04-26T10:54:47Z")

</div>

Hi All, Is this ELK stack community version available anywhere? We are working some AIops activities, so need to check the communities package version, Please help me with your input, Thanks, Nagaraj,

---

## [Best implementation of a multi-field, multi-term prefix query](https://discuss.elastic.co/t/best-implementation-of-a-multi-field-multi-term-prefix-query/12725)

<div class="topic-metadata">

**Author:** [@Paul\_Bellora](https://discuss.elastic.co/u/Paul_Bellora)\
**Replies:** 3\
**Last updated:** [July 17, 2013, 7:39pm UTC](https://discuss.elastic.co/t/best-implementation-of-a-multi-field-multi-term-prefix-query/12725 "2013-07-17T19:39:06Z")

</div>

I'm just getting started with ES and its Java API. As a proof-of-concept I implemented a generic search method that takes user-inputted text and does prefix matching against various fields: List searchFoos(@Nullab…

[Previous page](https://discuss.elastic.co/top.md?page=392&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=394&per_page=50&period=all)
