# Top **URL:** https://discuss.elastic.co/top.md?page=398&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 399 --- ## [Convert datetime to another timezone in logstash](https://discuss.elastic.co/t/convert-datetime-to-another-timezone-in-logstash/336214)
**Author:** [@ashokkrishna99\_Vemur](https://discuss.elastic.co/u/ashokkrishna99_Vemur)\ **Replies:** 8\ **Last updated:** [June 16, 2023, 8:06pm UTC](https://discuss.elastic.co/t/convert-datetime-to-another-timezone-in-logstash/336214 "2023-06-16T20:06:33Z")
I am getting logs from a firewall which are in GMT timezone. For example firewall sending rt=Jun 16 2023 11:24:40 GMT I want to convert that time to MYT rt=June 16 2023 19:24:40 MYT. How can I do that. filter { grok… --- ## [Is it safe to expose Elasticsearch to the Internet?](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/246862)
**Author:** [@dansei](https://discuss.elastic.co/u/dansei)\ **Replies:** 4\ **Last updated:** [August 30, 2020, 7:26am UTC](https://discuss.elastic.co/t/is-it-safe-to-expose-elasticsearch-to-the-internet/246862 "2020-08-30T07:26:55Z")
If you search the web for info on publicly-accessible Elasticsearch instances, you'll find a lot of articles about ransomware attacks in which databases were hijacked. You'll find this DZone article from 2017 that says … --- ## [How to create new field into an elasticsearch index using logstash and python](https://discuss.elastic.co/t/how-to-create-new-field-into-an-elasticsearch-index-using-logstash-and-python/121546)
**Author:** [@soukaina](https://discuss.elastic.co/u/soukaina)\ **Replies:** 7\ **Last updated:** [February 27, 2018, 10:36am UTC](https://discuss.elastic.co/t/how-to-create-new-field-into-an-elasticsearch-index-using-logstash-and-python/121546 "2018-02-27T10:36:36Z")
Hi, im trying to generate tweets sentiments with a python script, and want to create a new field into elasticsearch, that contains the sentiment (ss\["compound"\] value) for each tweet. Any idea??? Thank you \[t1\] --- ## [Date match pattern with Z versus ZZ: any difference?](https://discuss.elastic.co/t/date-match-pattern-with-z-versus-zz-any-difference/67159)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 1\ **Last updated:** [December 1, 2016, 2:34am UTC](https://discuss.elastic.co/t/date-match-pattern-with-z-versus-zz-any-difference/67159 "2016-12-01T02:34:27Z")
In brief: According to the docs, only ZZ matches +08:00. In practice, Z also matches. Why? In detail... From the Logstash 5.0 documentation for the match option of the date filter plugin: The date formats allowed are… --- ## [Kibana is not creating Index even the index is present in Elasticsearch](https://discuss.elastic.co/t/kibana-is-not-creating-index-even-the-index-is-present-in-elasticsearch/103702)
**Author:** [@vnaresh666666](https://discuss.elastic.co/u/vnaresh666666)\ **Replies:** 6\ **Last updated:** [October 24, 2017, 11:49am UTC](https://discuss.elastic.co/t/kibana-is-not-creating-index-even-the-index-is-present-in-elasticsearch/103702 "2017-10-24T11:49:04Z")
I have created an index from logstash on my linux machine which i can see at :9200/\_cat/indices?v. but when i want to create the same index in kibana, It is detecting the index but when i click on create nothing is happe… --- ## [How conditionally set color to the cell text in Data Table](https://discuss.elastic.co/t/how-conditionally-set-color-to-the-cell-text-in-data-table/203484)
**Author:** [@bkleynbok](https://discuss.elastic.co/u/bkleynbok)\ **Replies:** 5\ **Last updated:** [October 24, 2019, 2:50pm UTC](https://discuss.elastic.co/t/how-conditionally-set-color-to-the-cell-text-in-data-table/203484 "2019-10-24T14:50:59Z")
I am using ELK Stack 7.3.2 I have a Data Table in Canvas. Here is my query: SELECT "@timestamp" as time, hostname, status, vm, latency FROM "boris-topic\*" where hostname is not null order by time desc Here is my t… --- ## ["wait for refresh" command?](https://discuss.elastic.co/t/wait-for-refresh-command/4589)
**Author:** [@Curtis\_Caravone](https://discuss.elastic.co/u/Curtis_Caravone)\ **Replies:** 8\ **Last updated:** [June 25, 2011, 2:55pm UTC](https://discuss.elastic.co/t/wait-for-refresh-command/4589 "2011-06-25T14:55:42Z")
Is there a way to tell when an indexed document has become visible for searching, short of forcing an index refresh? Something like a "wait for refresh" option to the indexing commands (server will not send response… --- ## [Could not index event to Elasticsearch: Maximum shards open](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402)
**Author:** [@Don\_Withanage](https://discuss.elastic.co/u/Don_Withanage)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 1:18am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-maximum-shards-open/196402 "2019-08-23T01:18:23Z")
I am creating indexes on Elasticsearch daily from metricbeat, auditbeat, winlogbeat, and other logs. I have run into the issue of getting an error on the logstash saying "Validation Failed: this action would add \[2\] tota… --- ## [Need Help with Installing Certificates into Elasticsearch](https://discuss.elastic.co/t/need-help-with-installing-certificates-into-elasticsearch/104715)
**Author:** [@tamisalex](https://discuss.elastic.co/u/tamisalex)\ **Replies:** 7\ **Last updated:** [November 1, 2017, 2:39pm UTC](https://discuss.elastic.co/t/need-help-with-installing-certificates-into-elasticsearch/104715 "2017-11-01T14:39:54Z")
I've been trying to get some certificates created by certgen installed but I keep encountering this error. I've tried many things like, but I'm at a brick wall. Any help would be much appreciated Error: Blockquote Ca… --- ## [Kibana Groovy Scripted Field for Aggregation: Visualize: Unsupported script value](https://discuss.elastic.co/t/kibana-groovy-scripted-field-for-aggregation-visualize-unsupported-script-value/54126)
**Author:** [@benk](https://discuss.elastic.co/u/benk)\ **Replies:** 4\ **Last updated:** [July 1, 2016, 11:21am UTC](https://discuss.elastic.co/t/kibana-groovy-scripted-field-for-aggregation-visualize-unsupported-script-value/54126 "2016-07-01T11:21:31Z")
Hi, I am trying to get the number of log entries per day of week and visualize it in a bar chart. For development, I have enabled inline groovy scripted fields in elastic: script.engine.groovy.inline.aggs: on I ha… --- ## [Logstash TCP output to logstash TCP input with SSL error](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-with-ssl-error/180146)
**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\ **Replies:** 6\ **Last updated:** [May 9, 2019, 10:20am UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-with-ssl-error/180146 "2019-05-09T10:20:48Z")
Hi all. I'm trying to test Logstash TCP input plugin with SSL configuration so I run two logstash instance, one for TCP output and one for TCP input. These are my settings: input.conf : input { tcp { … --- ## [Cluster.routing.allocation.exclude.\_name not working](https://discuss.elastic.co/t/cluster-routing-allocation-exclude-name-not-working/160620)
**Author:** [@philschroeder](https://discuss.elastic.co/u/philschroeder)\ **Replies:** 5\ **Last updated:** [December 13, 2018, 8:46am UTC](https://discuss.elastic.co/t/cluster-routing-allocation-exclude-name-not-working/160620 "2018-12-13T08:46:03Z")
Hi, I am trying to decommission some nodes in an old (ES2.2) cluster. First step is moving the data off of the nodes. I'm using: curl -XPUT ES\_HOST:9200/\_cluster/settings?explain -H 'Content-Type: application/json' … --- ## ["Did you mean" query](https://discuss.elastic.co/t/did-you-mean-query/86167)
**Author:** [@stp\_ra](https://discuss.elastic.co/u/stp_ra)\ **Replies:** 7\ **Last updated:** [May 22, 2017, 6:29pm UTC](https://discuss.elastic.co/t/did-you-mean-query/86167 "2017-05-22T18:29:45Z")
I would like to implement something like Google's "Did you mean?" search. What do you recommend? --- ## [How to calculate ,count of distinct column in kibana canvas](https://discuss.elastic.co/t/how-to-calculate-count-of-distinct-column-in-kibana-canvas/184870)
**Author:** [@Malini\_Sahoo](https://discuss.elastic.co/u/Malini_Sahoo)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 7:12pm UTC](https://discuss.elastic.co/t/how-to-calculate-count-of-distinct-column-in-kibana-canvas/184870 "2019-06-12T19:12:36Z")
hi, how to calculate ,count of distinct column in kibana canvas ? --- ## [Data too large\[..\]](https://discuss.elastic.co/t/data-too-large/32141)
**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\ **Replies:** 2\ **Last updated:** [October 14, 2015, 8:48pm UTC](https://discuss.elastic.co/t/data-too-large/32141 "2015-10-14T20:48:49Z")
Hi guys. Yesterday I did a rather heavy search query from Kibana - and then I got the below error, but just on a different field. So I read that I could add this to my conf: indices.fielddata.cache.size: 5g - did that … --- ## [Mutate not converting string to number](https://discuss.elastic.co/t/mutate-not-converting-string-to-number/49309)
**Author:** [@dlastIDBS](https://discuss.elastic.co/u/dlastIDBS)\ **Replies:** 8\ **Last updated:** [May 10, 2016, 7:04am UTC](https://discuss.elastic.co/t/mutate-not-converting-string-to-number/49309 "2016-05-10T07:04:53Z")
Hi, I'm trying to put the .csv output of a JMeter test run into ELK for dashboarding etc. However, when the file is pushed through logstash it sets all the fields to be strings when I want things like 'elapsed' or 'sam… --- ## [Delete a log file after indexing via logstash](https://discuss.elastic.co/t/delete-a-log-file-after-indexing-via-logstash/41239)
**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\ **Replies:** 4\ **Last updated:** [October 14, 2016, 9:09am UTC](https://discuss.elastic.co/t/delete-a-log-file-after-indexing-via-logstash/41239 "2016-10-14T09:09:55Z")
Due to spacing constraint, i may have to delete the physical file once the indexing in done. is it possible to handle this with in the .conf file in logstash? Please help. thanks --- ## [Reparse logs in elastic search](https://discuss.elastic.co/t/reparse-logs-in-elastic-search/31770)
**Author:** [@dlb1001](https://discuss.elastic.co/u/dlb1001)\ **Replies:** 8\ **Last updated:** [October 8, 2015, 12:34pm UTC](https://discuss.elastic.co/t/reparse-logs-in-elastic-search/31770 "2015-10-08T12:34:59Z")
Hello, Is there a way to re parse log entries in elastic search? The reason I ask is I've been inputing all of our old logs into elasticsearch. I thought my groks parsing handled the majority of entries, however out … --- ## [Which RAID config for ES?](https://discuss.elastic.co/t/which-raid-config-for-es/19964)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 8\ **Last updated:** [September 25, 2014, 10:01pm UTC](https://discuss.elastic.co/t/which-raid-config-for-es/19964 "2014-09-25T22:01:11Z")
So given the built in fault tolerance of Elasticsearch across the cluster are people adventurous enough to use RAID0? I'm thinking of middle ground like RAID5... -- You received this message because you are sub… --- ## [Display Top 'N' results in Kibana search](https://discuss.elastic.co/t/display-top-n-results-in-kibana-search/51530)
**Author:** [@ramkchirra](https://discuss.elastic.co/u/ramkchirra)\ **Replies:** 2\ **Last updated:** [June 13, 2016, 10:43am UTC](https://discuss.elastic.co/t/display-top-n-results-in-kibana-search/51530 "2016-06-13T10:43:09Z")
Hi, Is there any way to display Top 'N' (where N is integer) search results in Kibana Discover (Search). Like how we specify "size": 20 while querying Elastic Search. Currently if we specify "size" in the filter, the fo… --- ## [Es remote monitoring through jmx](https://discuss.elastic.co/t/es-remote-monitoring-through-jmx/8608)
**Author:** [@Sisu\_Alexandru](https://discuss.elastic.co/u/Sisu_Alexandru)\ **Replies:** 1\ **Last updated:** [August 2, 2012, 2:31pm UTC](https://discuss.elastic.co/t/es-remote-monitoring-through-jmx/8608 "2012-08-02T14:31:15Z")
Hello, Whats the way of connecting JConsole or VisualVM to a remote ES (assuming no firewall is active)? I've read the docs from here: http://www.elasticsearch.org/guide/reference/modules/jmx.html, but they didn… --- ## [Case Insensitive](https://discuss.elastic.co/t/case-insensitive/97798)
**Author:** [@ltwarner](https://discuss.elastic.co/u/ltwarner)\ **Replies:** 1\ **Last updated:** [August 22, 2017, 10:42am UTC](https://discuss.elastic.co/t/case-insensitive/97798 "2017-08-22T10:42:22Z")
Need to be able to look for a source using any type of case I am a bit unsure of the syntax, this command works as long as the source is exactly as this, but ideally I want it to search for any type of case as path can … --- ## [Kibana JSON Input Question](https://discuss.elastic.co/t/kibana-json-input-question/232895)
**Author:** [@Gundam\_Airline](https://discuss.elastic.co/u/Gundam_Airline)\ **Replies:** 3\ **Last updated:** [May 19, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-json-input-question/232895 "2020-05-19T17:43:20Z")
Can someone please explain to me how I can create an JSON input that would retrieve the latest version of the document based on a timestamp. For example, I have the following: {Name: "Joe, "Age": 24, "Job":"Tester", "Ti… --- ## [Elasticsearch gives Read timed out. (read timeout=10)) on sql queries](https://discuss.elastic.co/t/elasticsearch-gives-read-timed-out-read-timeout-10-on-sql-queries/270351)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 5\ **Last updated:** [April 23, 2021, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-gives-read-timed-out-read-timeout-10-on-sql-queries/270351 "2021-04-23T11:34:19Z")
Hello, We have some queries that are executed using SQL and they sometimes produce a read timeout reach. Is there a way to globally increase the timeout value? We are running elasticsearch version 7.7.1. --- ## [Kibana: What's Next?](https://discuss.elastic.co/t/kibana-whats-next/81926)
**Author:** [@safasalwan](https://discuss.elastic.co/u/safasalwan)\ **Replies:** 4\ **Last updated:** [April 14, 2017, 5:41am UTC](https://discuss.elastic.co/t/kibana-whats-next/81926 "2017-04-14T05:41:12Z")
Hey guys, Thanks a lot for the great support you've given in the past couple of days, I truly appreciate it. I was finally able to get a sample filebeat dashboard visible in Kibana. Now, what are the steps I should do… --- ## [Json import error on elasticsearch with curl command](https://discuss.elastic.co/t/json-import-error-on-elasticsearch-with-curl-command/129668)
**Author:** [@Enonimous8](https://discuss.elastic.co/u/Enonimous8)\ **Replies:** 7\ **Last updated:** [April 26, 2018, 3:42pm UTC](https://discuss.elastic.co/t/json-import-error-on-elasticsearch-with-curl-command/129668 "2018-04-26T15:42:49Z")
Hi, I have a problem when load a json file on elasticsearch with curl command. The json file is this: https://drive.google.com/file/d/13nCXdIY1n096SSWcL36TEtqkGTVhn28o/view?usp=sharing When I launch this command: cur… --- ## [Is Kibana right for visualising data in MongoDB?](https://discuss.elastic.co/t/is-kibana-right-for-visualising-data-in-mongodb/87818)
**Author:** [@kevinstembridge](https://discuss.elastic.co/u/kevinstembridge)\ **Replies:** 1\ **Last updated:** [May 31, 2017, 10:56pm UTC](https://discuss.elastic.co/t/is-kibana-right-for-visualising-data-in-mongodb/87818 "2017-05-31T22:56:55Z")
I'm looking for something that will allow me to visualise some data I have stored in Mongo and Kibana looks like a good front end. But if I understand correctly, it cannot query and display data from Mongo directly. That… --- ## [Getting Repository verification exception while creating Snapshot](https://discuss.elastic.co/t/getting-repository-verification-exception-while-creating-snapshot/81945)
**Author:** [@manjukdvg](https://discuss.elastic.co/u/manjukdvg)\ **Replies:** 2\ **Last updated:** [April 12, 2017, 3:11pm UTC](https://discuss.elastic.co/t/getting-repository-verification-exception-while-creating-snapshot/81945 "2017-04-12T15:11:36Z")
I am trying to create snapshot for S3 repository . But it's throwing exception . Elasticsearch version : 2.3.5 using plugin cloud-aws . Plugin is installed across all the nodes. I have created AWS user with permission… --- ## [Kibana with ingress getting ERR\_TOO\_MANY\_REDIRECTS 302](https://discuss.elastic.co/t/kibana-with-ingress-getting-err-too-many-redirects-302/264448)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 7\ **Last updated:** [February 18, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-with-ingress-getting-err-too-many-redirects-302/264448 "2021-02-18T14:30:37Z")
When I try and expose the Kibana UI externally using ingress, getting ERR\_TOO\_MANY\_REDIRECTS 302 using https. Kibana v 7.8.1 Seems to get into an infinite loop. Works without any issues with port-forward on http://loc… --- ## [Remote IIS logs into ELK Stack?](https://discuss.elastic.co/t/remote-iis-logs-into-elk-stack/47157)
**Author:** [@Phil\_Austin](https://discuss.elastic.co/u/Phil_Austin)\ **Replies:** 4\ **Last updated:** [October 19, 2016, 11:06am UTC](https://discuss.elastic.co/t/remote-iis-logs-into-elk-stack/47157 "2016-10-19T11:06:08Z")
Hi, I have to first apologize for my ignorance as i JUST configured my ELK setup and am getting familiar with the technology, Here is my issue... I would like to ship logs from a dozen or so IIS servers to my Log serve… --- ## [Restart individual Logstash pipeline](https://discuss.elastic.co/t/restart-individual-logstash-pipeline/168100)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 2\ **Last updated:** [February 13, 2019, 6:18pm UTC](https://discuss.elastic.co/t/restart-individual-logstash-pipeline/168100 "2019-02-13T18:18:45Z")
I know this question has been asked before here but with no answer. Is there a way to pass a parameter to logstash to restart only a specific pipeline without impacting the others? The reason is updated configuration o… --- ## [Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties](https://discuss.elastic.co/t/could-not-find-log4j2-configuration-at-path-usr-share-logstash-config-log4j2-properties/111857)
**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\ **Replies:** 1\ **Last updated:** [December 18, 2017, 7:11pm UTC](https://discuss.elastic.co/t/could-not-find-log4j2-configuration-at-path-usr-share-logstash-config-log4j2-properties/111857 "2017-12-18T19:11:37Z")
Hi everyone. I decided to sign up for this site after troubleshooting my issue and nothing seemed to help. I installed ELK Stack and Logstash from this website: http://www.itzgeek.com/how-tos/linux/ubuntu-how-tos/setup… --- ## [Elastic license](https://discuss.elastic.co/t/elastic-license/68859)
**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\ **Replies:** 7\ **Last updated:** [December 13, 2016, 3:00pm UTC](https://discuss.elastic.co/t/elastic-license/68859 "2016-12-13T15:00:46Z")
Tried to update my license with a: curl -XPUT -u elastic 'http://localhost:9200\>/\_xpack/license' -d @license.json But this results in a: curl: (1) Protocol "'http" not supported or disabled in libcurl When using " in… --- ## [How to Remove the header of CSV files with Logstash?](https://discuss.elastic.co/t/how-to-remove-the-header-of-csv-files-with-logstash/148059)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 3\ **Last updated:** [September 11, 2018, 12:23pm UTC](https://discuss.elastic.co/t/how-to-remove-the-header-of-csv-files-with-logstash/148059 "2018-09-11T12:23:19Z")
Hello, I am asking if is there an option to remove the header row of the CSV files with logstash or any other undesired rows ? --- ## [Is it possible to restore a single backing index for a data stream](https://discuss.elastic.co/t/is-it-possible-to-restore-a-single-backing-index-for-a-data-stream/341761)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [August 31, 2023, 10:05pm UTC](https://discuss.elastic.co/t/is-it-possible-to-restore-a-single-backing-index-for-a-data-stream/341761 "2023-08-31T22:05:41Z")
we somehow lost both the a shard and its replica for the head of our datastream . I forced a rollover to get the datastream to accepting data again and removed the empty index (using api). I now want to restore that b… --- ## [How do I add a Custom Field to FileBeat with a Module?](https://discuss.elastic.co/t/how-do-i-add-a-custom-field-to-filebeat-with-a-module/257909)
**Author:** [@mstacy](https://discuss.elastic.co/u/mstacy)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 6:34pm UTC](https://discuss.elastic.co/t/how-do-i-add-a-custom-field-to-filebeat-with-a-module/257909 "2020-12-08T18:34:23Z")
Below is the top portion of my filebeat yaml. This configuration works adequately. However I would like to append additional data to the events in order to better distinguish the source of the logs. I have gone throug… --- ## [Start request repeated too quickly for filebeat.service](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005)
**Author:** [@bd67](https://discuss.elastic.co/u/bd67)\ **Replies:** 4\ **Last updated:** [June 10, 2022, 1:43am UTC](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005 "2022-06-10T01:43:35Z")
Hello All, I have several servers set up with Filebeat since few months , nothing changed in terms of config for any. Over the past few days I am observing 2 of these servers consistently failing to keep Filebeat servi… --- ## [Displaying additional columns in data table visualization](https://discuss.elastic.co/t/displaying-additional-columns-in-data-table-visualization/104848)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 2\ **Last updated:** [October 24, 2017, 8:13am UTC](https://discuss.elastic.co/t/displaying-additional-columns-in-data-table-visualization/104848 "2017-10-24T08:13:00Z")
Hi, Let's say I have a bunch of log messages containing severity, application name along with the actual message. Now I want to display the count of these messages with an ability to filter using other columns. For e.… --- ## [Error:control characters are not allowed](https://discuss.elastic.co/t/error-control-characters-are-not-allowed/50677)
**Author:** [@preehana](https://discuss.elastic.co/u/preehana)\ **Replies:** 2\ **Last updated:** [May 23, 2016, 2:19pm UTC](https://discuss.elastic.co/t/error-control-characters-are-not-allowed/50677 "2016-05-23T14:19:24Z")
Hello, I am using winlogbeat-1.1.2 in windows.I got the following error in the yml file of winlogbeat 2016/05/23 06:57:02.522652 beat.go:157: CRIT Setup returned an error: yaml: control characters are not allowed My … --- ## [Missing Values on Table Visualizations](https://discuss.elastic.co/t/missing-values-on-table-visualizations/192412)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 1\ **Last updated:** [July 26, 2019, 11:17am UTC](https://discuss.elastic.co/t/missing-values-on-table-visualizations/192412 "2019-07-26T11:17:43Z")
Hi, I'm doing a simple table, with a Terms aggregations over a field that do not exists in all documents. I wanted to use the "Show missing values" and assign a default value but the opcion appears disabled Is this … --- ## [Problems configuring Kibana 3 +NGINX](https://discuss.elastic.co/t/problems-configuring-kibana-3-nginx/25890)
**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\ **Replies:** 6\ **Last updated:** [July 30, 2015, 9:18am UTC](https://discuss.elastic.co/t/problems-configuring-kibana-3-nginx/25890 "2015-07-30T09:18:41Z")
Hello, I'm very noob in all of this. I have been seeing some tutorials online but it doesn't work for me. I want to configure a Logstash+Elasticsearch+Kibana In order to see the logings from any browser typing "http:… --- ## [How to dynamic parse log via grok regex?](https://discuss.elastic.co/t/how-to-dynamic-parse-log-via-grok-regex/23910)
**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\ **Replies:** 6\ **Last updated:** [June 19, 2015, 3:16pm UTC](https://discuss.elastic.co/t/how-to-dynamic-parse-log-via-grok-regex/23910 "2015-06-19T15:16:44Z")
I have some logs like this: 2015-06-18 20:37:25,359 \[metrics-logger-reporter-1-thread-1\] INFO hawkeyes.rtds.monitor.MetricsVerticle - type=GAUGE, name=jvm.memory.pools.PS-Survivor-Space.usage, value=0.375 2015-06-18… --- ## [Import xml file in to Elasticsearch through logstash](https://discuss.elastic.co/t/import-xml-file-in-to-elasticsearch-through-logstash/67827)
**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\ **Replies:** 4\ **Last updated:** [December 6, 2016, 8:40am UTC](https://discuss.elastic.co/t/import-xml-file-in-to-elasticsearch-through-logstash/67827 "2016-12-06T08:40:58Z")
I want to import xml file in to Elasticsearch through logstash. I created config file as follows: input { file { path =\> "D:/logstash-5.0.0/logstash-5.0.0/bin/data.xml" start\_position =\> "begin… --- ## [Auditbeat vs Filebeat with auditd module](https://discuss.elastic.co/t/auditbeat-vs-filebeat-with-auditd-module/183633)
**Author:** [@bobes](https://discuss.elastic.co/u/bobes)\ **Replies:** 2\ **Last updated:** [June 3, 2019, 1:57pm UTC](https://discuss.elastic.co/t/auditbeat-vs-filebeat-with-auditd-module/183633 "2019-06-03T13:57:29Z")
Hi - I'm trying to understand the different uses of the Beats agents and have hit a bit of a wall with this one. Functionally what is the difference between the Auditbeat agent watching Linux audit logs and a Filebeat ag… --- ## [How to make alerts with telegram bot?](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794)
**Author:** [@sevenout](https://discuss.elastic.co/u/sevenout)\ **Replies:** 1\ **Last updated:** [August 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794 "2021-08-31T22:48:10Z")
hi guys, i'm learning Elasticsearch but i stumble in this problem. i want to send an alert from elastic to telegram. In short this is the result that i expect: i use webhook connector and this is the config b… --- ## [Random exceptions on transport layer and subsequent node disconnections](https://discuss.elastic.co/t/random-exceptions-on-transport-layer-and-subsequent-node-disconnections/68704)
**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\ **Replies:** 8\ **Last updated:** [December 23, 2016, 3:57pm UTC](https://discuss.elastic.co/t/random-exceptions-on-transport-layer-and-subsequent-node-disconnections/68704 "2016-12-23T15:57:29Z")
Hi, everyone. After a recent upgrade to Elastic Stack 5 my team has been encountering this strange issue with random node disconnections after a java.io.EOFException on the master node. Our cluster consists of three … --- ## [Remove message on filter before inserting in ES](https://discuss.elastic.co/t/remove-message-on-filter-before-inserting-in-es/31776)
**Author:** [@ashwin2011](https://discuss.elastic.co/u/ashwin2011)\ **Replies:** 3\ **Last updated:** [October 9, 2015, 7:26am UTC](https://discuss.elastic.co/t/remove-message-on-filter-before-inserting-in-es/31776 "2015-10-09T07:26:25Z")
Hi, Here is my actual config and output : filter { if \[type\] == "ufdb" { grok { match =\> \[ "message", "%{TIMESTAMP\_ISO8601:logdate}%{SPACE}%{DATA}%{SPACE}%{WORD:status}%{SPACE}… --- ## [Ccs\_minimize\_roundtrips error when using 7.X high level REST API to access 6.x index](https://discuss.elastic.co/t/ccs-minimize-roundtrips-error-when-using-7-x-high-level-rest-api-to-access-6-x-index/194095)
**Author:** [@iti](https://discuss.elastic.co/u/iti)\ **Replies:** 2\ **Last updated:** [August 9, 2019, 6:18pm UTC](https://discuss.elastic.co/t/ccs-minimize-roundtrips-error-when-using-7-x-high-level-rest-api-to-access-6-x-index/194095 "2019-08-09T18:18:50Z")
I am using Elastic Search High Level REST API 7.x and try to access ES 6.7 index and go the following error: ElasticsearchStatusException\[Elasticsearch exception \[type=illegal\_argument\_exception, reason=request \[xxxxxxx… --- ## [Index.mapping.total\_fields.limit](https://discuss.elastic.co/t/index-mapping-total-fields-limit/275193)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 6\ **Last updated:** [June 25, 2021, 7:01pm UTC](https://discuss.elastic.co/t/index-mapping-total-fields-limit/275193 "2021-06-25T19:01:43Z")
... We're running elasticsearch 6.8.15 For various reasons we are unable to run Lifecycle Management on our indexes - so I have set up a cron job which uses curator that when an index reaches a certain size or age it w… --- ## [Kibana is extremely slow (Loading graphs, new pages, etc.)](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs-new-pages-etc/282955)
**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\ **Replies:** 6\ **Last updated:** [September 1, 2021, 5:32pm UTC](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs-new-pages-etc/282955 "2021-09-01T17:32:40Z")
System: Ubuntu 18.04 16 Cores 16Gb RAM ELK system ELK 7.14 Single node (Kibana, Elastic, Logstash) All was deployed with Ubuntu apt (Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.14\] | Elastic)… [Previous page](https://discuss.elastic.co/top.md?page=397&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=399&per_page=50&period=all)