# Top

**URL:** https://discuss.elastic.co/top.md?page=403&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 404

---

## [Docker kibana http://localhost:5601/ ERR\_EMPTY\_RESPONSE](https://discuss.elastic.co/t/docker-kibana-http-localhost-5601-err-empty-response/69890)

<div class="topic-metadata">

**Author:** [@whybangbang](https://discuss.elastic.co/u/whybangbang)\
**Replies:** 3\
**Last updated:** [December 26, 2016, 3:38am UTC](https://discuss.elastic.co/t/docker-kibana-http-localhost-5601-err-empty-response/69890 "2016-12-26T03:38:16Z")

</div>

my local kibana is well by my config , but when i config in docker , not work. my steps: (1) docker pull kibana:5.1.1 (2) docker run -d kibana:5.1.1, exec int to container (3) sudo to user kibana (4) chown -R kibana:k…

---

## [How we built Elasticsearch plugins for indexing ontologies](https://discuss.elastic.co/t/how-we-built-elasticsearch-plugins-for-indexing-ontologies/40217)

<div class="topic-metadata">

**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\
**Replies:** 4\
**Last updated:** [January 28, 2016, 9:48am UTC](https://discuss.elastic.co/t/how-we-built-elasticsearch-plugins-for-indexing-ontologies/40217 "2016-01-28T09:48:10Z")

</div>

Hello! My colleague Matt has just written about a recent project where he's been building ES plugins for ontology indexing. Hope you find it interesting and the plugins useful - and we welcome feedback, especially hints …

---

## [Process VMWare ESXi syslog with multiline events](https://discuss.elastic.co/t/process-vmware-esxi-syslog-with-multiline-events/132117)

<div class="topic-metadata">

**Author:** [@Kris\_Boeckx](https://discuss.elastic.co/u/Kris_Boeckx)\
**Replies:** 6\
**Last updated:** [May 17, 2018, 1:59pm UTC](https://discuss.elastic.co/t/process-vmware-esxi-syslog-with-multiline-events/132117 "2018-05-17T13:59:17Z")

</div>

Hi, I'm trying to process syslog events that are send by an vmware ESXi server with logstash. This is working fine except multiline events . Below an example of the raw data that is sent via syslog: \<166\>2018-05-16T08…

---

## [Autocomplete of single words](https://discuss.elastic.co/t/autocomplete-of-single-words/31326)

<div class="topic-metadata">

**Author:** [@cardea](https://discuss.elastic.co/u/cardea)\
**Replies:** 5\
**Last updated:** [October 15, 2015, 12:57pm UTC](https://discuss.elastic.co/t/autocomplete-of-single-words/31326 "2015-10-15T12:57:59Z")

</div>

Hi, everyone, following problem: I want to have an autocompletion of single words. This means: if I type in "bor", I want to get "boring (num: 29)" and "border (num: 10)" back. "border" and "boring" are parts of severa…

---

## [Logstash to Logstash?](https://discuss.elastic.co/t/logstash-to-logstash/84865)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 8\
**Last updated:** [May 9, 2017, 5:18am UTC](https://discuss.elastic.co/t/logstash-to-logstash/84865 "2017-05-09T05:18:47Z")

</div>

Hi, Is it possible to feed Logstash data into another Logstash instance that connects to Elastic? In my configuration I will have many remote locations hooked up to expensive satellite connections that I want to send…

---

## [The parent task was cancelled, shouldn't start any child tasks](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 6\
**Last updated:** [January 22, 2021, 10:46am UTC](https://discuss.elastic.co/t/the-parent-task-was-cancelled-shouldnt-start-any-child-tasks/261686 "2021-01-22T10:46:07Z")

</div>

Total shards 110 Data 3.7gb Indices 99 Problem in kibana monitoring section.The page was showing indices fails. In elasticsearch log file \[2021-01-20T21:27:16,584\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[elastic\] \[gc\]\[3…

---

## [Error importing Kibana dashboards](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382)

<div class="topic-metadata">

**Author:** [@KelvUK](https://discuss.elastic.co/u/KelvUK)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 8:34pm UTC](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382 "2021-01-06T20:34:27Z")

</div>

Hi, I'm new to Elastic & Kibana so this I expect is very much bad config but I can't figure out what I've gotten wrong with this. Everything is in docker, I've a single-node deployment with transport security configured…

---

## [What is the best way to store unique values of a field](https://discuss.elastic.co/t/what-is-the-best-way-to-store-unique-values-of-a-field/278548)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 6\
**Last updated:** [July 19, 2021, 7:28am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-store-unique-values-of-a-field/278548 "2021-07-19T07:28:51Z")

</div>

Hi, I have a raw data index, every document has the fields: device, country, browser, utm and many more... I need a way to extract the unique values of each field and store all of them in an index lets call it 'lookups…

---

## [Idea for Elastic Observability Blogs or Documentation](https://discuss.elastic.co/t/idea-for-elastic-observability-blogs-or-documentation/381319)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 5\
**Last updated:** [September 2, 2025, 4:12pm UTC](https://discuss.elastic.co/t/idea-for-elastic-observability-blogs-or-documentation/381319 "2025-09-02T16:12:57Z")

</div>

Hello, I wanted to share an idea about how elastic can improve their “monitoring” use cases. I am not sure where to share my ideas. So, currently Elastic Agent with integrations is one of the quickest ways to get data …

---

## [Elastic APM Java - Transactions & Spans are recorded but not reported to Elastic APM Server or Kibana](https://discuss.elastic.co/t/elastic-apm-java-transactions-spans-are-recorded-but-not-reported-to-elastic-apm-server-or-kibana/239505)

<div class="topic-metadata">

**Author:** [@Debashish\_BHARALI](https://discuss.elastic.co/u/Debashish_BHARALI)\
**Replies:** 7\
**Last updated:** [July 1, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elastic-apm-java-transactions-spans-are-recorded-but-not-reported-to-elastic-apm-server-or-kibana/239505 "2020-07-01T16:55:05Z")

</div>

I have a standalone JAVA application. And have integrated it successfully with Elastic APM (+ElasticSearch +Kibana) for capturing telemetries. Java Version: 8 - OpenJDK Elastic Agent & Library Version: 1.16 Elast…

---

## [Kafka input - Could not find a 'KafkaClient' entry in the JAAS configuration](https://discuss.elastic.co/t/kafka-input-could-not-find-a-kafkaclient-entry-in-the-jaas-configuration/170505)

<div class="topic-metadata">

**Author:** [@plundgren](https://discuss.elastic.co/u/plundgren)\
**Replies:** 1\
**Last updated:** [March 4, 2019, 3:47pm UTC](https://discuss.elastic.co/t/kafka-input-could-not-find-a-kafkaclient-entry-in-the-jaas-configuration/170505 "2019-03-04T15:47:08Z")

</div>

Version: Logstash 6.4.1 Operating System: Ubuntu 16.04 Hi, Im having issue with configuring logstash to subscribe to a kafka topic over SASL SSL. From what it looks like Kafka fails to read the kafka client configu…

---

## [Date time with millisecond](https://discuss.elastic.co/t/date-time-with-millisecond/10085)

<div class="topic-metadata">

**Author:** [@Ashutosh\_Sharma](https://discuss.elastic.co/u/Ashutosh_Sharma)\
**Replies:** 2\
**Last updated:** [December 17, 2012, 8:35pm UTC](https://discuss.elastic.co/t/date-time-with-millisecond/10085 "2012-12-17T20:35:01Z")

</div>

Hi All, I have a question regarding the index and search of the date time field which store date with millisecond. Is there any known problem or issue if I store the millisecond? I am using "yyyyMMdd’T’HHmmss.SSSZ…

---

## [Export/Import users/roles from Native User Authentication?](https://discuss.elastic.co/t/export-import-users-roles-from-native-user-authentication/91218)

<div class="topic-metadata">

**Author:** [@ngbaoan](https://discuss.elastic.co/u/ngbaoan)\
**Replies:** 2\
**Last updated:** [June 29, 2017, 7:44am UTC](https://discuss.elastic.co/t/export-import-users-roles-from-native-user-authentication/91218 "2017-06-29T07:44:12Z")

</div>

hello 1) i use Xpack with native user authentication (users + roles) https://www.elastic.co/guide/en/x-pack/current/native-realm.html , i wonder if there is anyway to export then import these users/roles, no matter if …

---

## [Compare two fields in same document without using script](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955)

<div class="topic-metadata">

**Author:** [@sardar\_nale](https://discuss.elastic.co/u/sardar_nale)\
**Replies:** 1\
**Last updated:** [February 11, 2021, 7:53am UTC](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955 "2021-02-11T07:53:14Z")

</div>

Hi all, We are using elastic version 7.10.2. I want to compare two fields from a same document.Scripting is disabled in my organization. Kindly help in building below query without using script. Here my query is : nic…

---

## [Date Histogram - Day of Week aggregation](https://discuss.elastic.co/t/date-histogram-day-of-week-aggregation/81740)

<div class="topic-metadata">

**Author:** [@Paulo\_Henrique\_PH](https://discuss.elastic.co/u/Paulo_Henrique_PH)\
**Replies:** 7\
**Last updated:** [April 11, 2017, 8:09am UTC](https://discuss.elastic.co/t/date-histogram-day-of-week-aggregation/81740 "2017-04-11T08:09:05Z")

</div>

Hi all, I know the only way to achieve it in old releases was through scripting. I'm wondering if that limitation was overcome in the latest release and potentially we could you the standard command, indicating the …

---

## [How to sum two fields in Kibana?](https://discuss.elastic.co/t/how-to-sum-two-fields-in-kibana/266765)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 6\
**Last updated:** [March 10, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-to-sum-two-fields-in-kibana/266765 "2021-03-10T11:44:12Z")

</div>

I have two different fields. Let Suppose A and B and I want sum of these two fields A+B and create new field and save records in this new created field.

---

## [Strategy for keeping Elasticsearch updated with MySQL](https://discuss.elastic.co/t/strategy-for-keeping-elasticsearch-updated-with-mysql/15151)

<div class="topic-metadata">

**Author:** [@arthurx](https://discuss.elastic.co/u/arthurx)\
**Replies:** 4\
**Last updated:** [January 10, 2014, 9:30am UTC](https://discuss.elastic.co/t/strategy-for-keeping-elasticsearch-updated-with-mysql/15151 "2014-01-10T09:30:26Z")

</div>

Hello! I use MySQL as my primary datastore and use Elasticsearch to further index the documents. My problem is keeping the data in ES in sync with MySQL. Currently I have two methods in mind: 1. whenever add or up…

---

## [Difference between cpu usage in node stats](https://discuss.elastic.co/t/difference-between-cpu-usage-in-node-stats/104816)

<div class="topic-metadata">

**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\
**Replies:** 3\
**Last updated:** [October 27, 2017, 12:58pm UTC](https://discuss.elastic.co/t/difference-between-cpu-usage-in-node-stats/104816 "2017-10-27T12:58:18Z")

</div>

Node stats provides us with multiple cpu usage metrics. I'd like to know the difference between the below 2 v2.4.4 os.cpu\_percentage / os.load\_average process.cpu.percent Which is the real indicator of the cpu usage …

---

## [Security index error - everything working fine](https://discuss.elastic.co/t/security-index-error-everything-working-fine/218046)

<div class="topic-metadata">

**Author:** [@Sergio\_Peral\_Aguiler](https://discuss.elastic.co/u/Sergio_Peral_Aguiler)\
**Replies:** 2\
**Last updated:** [February 12, 2020, 7:26pm UTC](https://discuss.elastic.co/t/security-index-error-everything-working-fine/218046 "2020-02-12T19:26:07Z")

</div>

Hi all, Recently I moved the path.data to a different folder, keeping permissions and everything, changing the option in elasticsearch.yml and it worked as expected and everything working fine. However, in the Elastics…

---

## [Daily indices into monthly](https://discuss.elastic.co/t/daily-indices-into-monthly/99777)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 4\
**Last updated:** [September 8, 2017, 6:31pm UTC](https://discuss.elastic.co/t/daily-indices-into-monthly/99777 "2017-09-08T18:31:10Z")

</div>

I read @warkolm post about moving daily indices into monthly and i thank him for the great example. ( Example ) I have couple hundred individual indexes which i managed to create the logstash.conf file using a ruby prog…

---

## [Grok plugin and installation steps](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369)

<div class="topic-metadata">

**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\
**Replies:** 2\
**Last updated:** [November 30, 2016, 8:25am UTC](https://discuss.elastic.co/t/grok-plugin-and-installation-steps/67369 "2016-11-30T08:25:33Z")

</div>

Hi I am trying to use grok plugin for combinedapchelogs but I think it is not parsing logs . I wanted to ask if all the plugins (assuming grok is a logstash plugin) are installed as a bundle for logstash or you need to i…

---

## [Unknown setting for elasticsearch](https://discuss.elastic.co/t/unknown-setting-for-elasticsearch/2188)

<div class="topic-metadata">

**Author:** [@calle\_eman](https://discuss.elastic.co/u/calle_eman)\
**Replies:** 2\
**Last updated:** [June 9, 2015, 12:55pm UTC](https://discuss.elastic.co/t/unknown-setting-for-elasticsearch/2188 "2015-06-09T12:55:38Z")

</div>

I'm getting this error when trying to connect logstash to my ES cluster {:timestamp=\>"2015-06-09T07:23:11.996000+0000", :message=\>"Unknown setting 'aws\_region' for elasticsearch", :level=\>:error, :file=\>"logstash/config…

---

## [Cannot start Elasticsearch service when installing Elasticsearch with Debian package on Linux Mint localhost](https://discuss.elastic.co/t/cannot-start-elasticsearch-service-when-installing-elasticsearch-with-debian-package-on-linux-mint-localhost/309604)

<div class="topic-metadata">

**Author:** [@marius03](https://discuss.elastic.co/u/marius03)\
**Replies:** 6\
**Last updated:** [July 23, 2022, 12:17am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-service-when-installing-elasticsearch-with-debian-package-on-linux-mint-localhost/309604 "2022-07-23T00:17:00Z")

</div>

I installed Eleasticsearch following the tutorial: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.3\] | Elastic Everything installs perfectly: Unpacking elasticsearch (8.3.2) ... Setting up elasticse…

---

## [Kibana server is not ready yet 8.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-8-5/319786)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 7\
**Last updated:** [November 29, 2022, 1:05am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-8-5/319786 "2022-11-29T01:05:57Z")

</div>

I was using ELK 8.4 and everything was working fine until I saw pending updates on the server which included Elastic and Kibana 8.5 updates. AND after upgrading both services are in active running status but kibana givi…

---

## [Bundled JDK with version 7.0.x](https://discuss.elastic.co/t/bundled-jdk-with-version-7-0-x/180684)

<div class="topic-metadata">

**Author:** [@e-orz](https://discuss.elastic.co/u/e-orz)\
**Replies:** 6\
**Last updated:** [May 18, 2019, 3:56pm UTC](https://discuss.elastic.co/t/bundled-jdk-with-version-7-0-x/180684 "2019-05-18T15:56:43Z")

</div>

Hi, Starting with version 7, Elasticsearch comes with bundled JDK. Oracle changed the license of the JDK and disallows commercial use with the one packaged by Oracle. (other alternatives are AdoptOpenJDK and more) Is…

---

## [Logstash's log files in Windows](https://discuss.elastic.co/t/logstashs-log-files-in-windows/51330)

<div class="topic-metadata">

**Author:** [@BanksySan](https://discuss.elastic.co/u/BanksySan)\
**Replies:** 6\
**Last updated:** [June 2, 2016, 5:35pm UTC](https://discuss.elastic.co/t/logstashs-log-files-in-windows/51330 "2016-06-02T17:35:01Z")

</div>

Where are the logstash log files in Windows?

---

## [Remove extra spaces between log messages using mutate & gsub](https://discuss.elastic.co/t/remove-extra-spaces-between-log-messages-using-mutate-gsub/33031)

<div class="topic-metadata">

**Author:** [@richinkansal](https://discuss.elastic.co/u/richinkansal)\
**Replies:** 2\
**Last updated:** [October 27, 2015, 5:45pm UTC](https://discuss.elastic.co/t/remove-extra-spaces-between-log-messages-using-mutate-gsub/33031 "2015-10-27T17:45:22Z")

</div>

Log file Example: INFO | jvm 1 | 2015/10/19 16:43:35 | logs logs logs text text text INFO | jvm 1 | 2015/10/19 16:43:35 | logs logs logs text text text query to execute(in millis) : 28 INFO | jvm 1 | 20…

---

## [Canvas - How to delete element](https://discuss.elastic.co/t/canvas-how-to-delete-element/156861)

<div class="topic-metadata">

**Author:** [@Eniqmatic](https://discuss.elastic.co/u/Eniqmatic)\
**Replies:** 3\
**Last updated:** [December 5, 2018, 5:23am UTC](https://discuss.elastic.co/t/canvas-how-to-delete-element/156861 "2018-12-05T05:23:04Z")

</div>

Hello! This is going to sound really silly but its been bothering me for a while, and since Canvas has made it into 6.5 now by default I thought I would finally ask... How do you delete an element from canvas once you …

---

## [Logstash 5.2 input kafka working but no output to elasticsearch](https://discuss.elastic.co/t/logstash-5-2-input-kafka-working-but-no-output-to-elasticsearch/74720)

<div class="topic-metadata">

**Author:** [@camilosantana](https://discuss.elastic.co/u/camilosantana)\
**Replies:** 7\
**Last updated:** [February 16, 2017, 9:18pm UTC](https://discuss.elastic.co/t/logstash-5-2-input-kafka-working-but-no-output-to-elasticsearch/74720 "2017-02-16T21:18:10Z")

</div>

Issue Summary: filebeat outputs to kafka 0.10 topic logstash indexer inputs from kafka 0.10 outputs to elasticsearch Problem: document count on elasticsearch doesn't change Note: I'm able to get filebeat=\>logstash=\>…

---

## [Monitoring shards number](https://discuss.elastic.co/t/monitoring-shards-number/320621)

<div class="topic-metadata">

**Author:** [@waitangi](https://discuss.elastic.co/u/waitangi)\
**Replies:** 6\
**Last updated:** [December 19, 2022, 5:18am UTC](https://discuss.elastic.co/t/monitoring-shards-number/320621 "2022-12-19T05:18:31Z")

</div>

Hello My customer would like to monitor shards number on Elasticsearch node. He would like to recive email alerting that the limit is about to exceed max value. How to arrange that? As far as i know shards number is in…

---

## [Docker Logstash internal logging to file?](https://discuss.elastic.co/t/docker-logstash-internal-logging-to-file/206951)

<div class="topic-metadata">

**Author:** [@sam.brooks](https://discuss.elastic.co/u/sam.brooks)\
**Replies:** 2\
**Last updated:** [November 8, 2019, 3:20pm UTC](https://discuss.elastic.co/t/docker-logstash-internal-logging-to-file/206951 "2019-11-08T15:20:25Z")

</div>

I'm having a similar problem as two posters before me, whose posts did not get resolved: I am hoping that this time, we can find a solution. I am using the Logstash docker container (docker.elastic.co/logstash/logsta…

---

## [Elasticsearch plugin is red (5.2.2)](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-5-2-2/101950)

<div class="topic-metadata">

**Author:** [@thilina\_et.lk](https://discuss.elastic.co/u/thilina_et.lk)\
**Replies:** 4\
**Last updated:** [October 9, 2017, 2:21am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-5-2-2/101950 "2017-10-09T02:21:47Z")

</div>

Hi, I have ElasticSearch running on a remote server. I'm using kibana to access the elasticsearch. But recently i can not access the elastic through kibana or postman but elastic queries are working fine with web applic…

---

## [How to show local picture in the markdown?](https://discuss.elastic.co/t/how-to-show-local-picture-in-the-markdown/34662)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 4\
**Last updated:** [November 17, 2015, 8:05am UTC](https://discuss.elastic.co/t/how-to-show-local-picture-in-the-markdown/34662 "2015-11-17T08:05:59Z")

</div>

Hi Experts, I want to show a picture in my markdown from my local machine . I tried doing the following but it did not work. !\[example image\](E\\vg.jpg "An exemplary image") Path of the image is in E:\\vg.jpg . Plea…

---

## [Snapshot and restore in a cluster with both Windows and Linux](https://discuss.elastic.co/t/snapshot-and-restore-in-a-cluster-with-both-windows-and-linux/25923)

<div class="topic-metadata">

**Author:** [@foresightyj](https://discuss.elastic.co/u/foresightyj)\
**Replies:** 4\
**Last updated:** [July 23, 2015, 1:11am UTC](https://discuss.elastic.co/t/snapshot-and-restore-in-a-cluster-with-both-windows-and-linux/25923 "2015-07-23T01:11:59Z")

</div>

I am stuck in setting up a shared file system for my cluster which has both windows and linux systems. The official guide seems to assume a linux environment as it mentions that "it is necessary to mount the same share…

---

## [Elastic didn't load properly. Check the server output for more information](https://discuss.elastic.co/t/elastic-didnt-load-properly-check-the-server-output-for-more-information/339530)

<div class="topic-metadata">

**Author:** [@MahithaSarala](https://discuss.elastic.co/u/MahithaSarala)\
**Replies:** 6\
**Last updated:** [August 24, 2023, 7:38am UTC](https://discuss.elastic.co/t/elastic-didnt-load-properly-check-the-server-output-for-more-information/339530 "2023-08-24T07:38:44Z")

</div>

Hi Team, We have installed the Elasticsearch (8.5.1) and Kibana through helm following git hub link GitHub - elastic/helm-charts: You know, for Kubernetes. We are facing intermittent issue on Kibana Ui as " Elastic did …

---

## [How to Execute Query to fetch Intersection of Two DataSets](https://discuss.elastic.co/t/how-to-execute-query-to-fetch-intersection-of-two-datasets/37308)

<div class="topic-metadata">

**Author:** [@kpcool](https://discuss.elastic.co/u/kpcool)\
**Replies:** 2\
**Last updated:** [April 17, 2017, 7:15am UTC](https://discuss.elastic.co/t/how-to-execute-query-to-fetch-intersection-of-two-datasets/37308 "2017-04-17T07:15:13Z")

</div>

I have an index 'analytics', which contains a list of events ( for eg: CRUD) that occured over a period of time. I am looking to find a set of records that were added and deleted by primary key. document structure: id…

---

## [Failed to find Premain-Class manifest attribute](https://discuss.elastic.co/t/failed-to-find-premain-class-manifest-attribute/183887)

<div class="topic-metadata">

**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\
**Replies:** 7\
**Last updated:** [June 4, 2019, 10:57am UTC](https://discuss.elastic.co/t/failed-to-find-premain-class-manifest-attribute/183887 "2019-06-04T10:57:04Z")

</div>

Hi, I am setting up with elastic java apm And here are my configurations. ELK version 6.5.4 APM Server version 6.5.4 apm-agent-attach-1.5.0.jar When I try to run a java code I get the follow…

---

## [Checking if an nested field which is an array contains a value](https://discuss.elastic.co/t/checking-if-an-nested-field-which-is-an-array-contains-a-value/55561)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 1\
**Last updated:** [July 15, 2016, 5:49am UTC](https://discuss.elastic.co/t/checking-if-an-nested-field-which-is-an-array-contains-a-value/55561 "2016-07-15T05:49:10Z")

</div>

Hi: I am trying to check if a nested field in the input can be used for conditional checks and how to do it: here is an example logstash config : input { generator { message =\> '{"metadata": { "origins": \[…

---

## [Filebeat 6.2 throughput and general performance](https://discuss.elastic.co/t/filebeat-6-2-throughput-and-general-performance/122422)

<div class="topic-metadata">

**Author:** [@elena](https://discuss.elastic.co/u/elena)\
**Replies:** 6\
**Last updated:** [March 6, 2018, 12:55pm UTC](https://discuss.elastic.co/t/filebeat-6-2-throughput-and-general-performance/122422 "2018-03-06T12:55:10Z")

</div>

Hello! I'm having some difficulties to maximize performances and I'd like to receive some advices. I'm using Filebeat (v. 6.2.2) to send output directly to Elasticsearch (v. 6.2.2), on a Linux Ubuntu machine with 16 co…

---

## [Multiline and Ingest Node](https://discuss.elastic.co/t/multiline-and-ingest-node/58529)

<div class="topic-metadata">

**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\
**Replies:** 6\
**Last updated:** [August 29, 2016, 4:16pm UTC](https://discuss.elastic.co/t/multiline-and-ingest-node/58529 "2016-08-29T16:16:14Z")

</div>

Hi, I am having Filebeat 5 sending multiline events to an Elastic Ingest node, which in turn, runs the grok processor. However the grok processor, takes only the first line of the data. The end of each line is a stack …

---

## [Filebeat multiline not working](https://discuss.elastic.co/t/filebeat-multiline-not-working/103870)

<div class="topic-metadata">

**Author:** [@VidyVideni](https://discuss.elastic.co/u/VidyVideni)\
**Replies:** 5\
**Last updated:** [October 18, 2017, 9:31am UTC](https://discuss.elastic.co/t/filebeat-multiline-not-working/103870 "2017-10-18T09:31:22Z")

</div>

Nginx test error log \[2017/10/13 16:17:49\] \[error\] 21169#21169: \*113356 FastCGI sent in stderr: "PHP message: PHP Fatal error: Class 'Elasticsearch\\ClientBuilder' not found in /home/work/website/cdt0-webapp.example.co…

---

## [Reindex to remote server](https://discuss.elastic.co/t/reindex-to-remote-server/97243)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 6\
**Last updated:** [August 17, 2017, 1:54am UTC](https://discuss.elastic.co/t/reindex-to-remote-server/97243 "2017-08-17T01:54:04Z")

</div>

Is there any chance to reindex to remote server? The destination will be the remote. supposedly like this… POST 192.168.200.250:9200/\_reindex { "source": { "index": "es\_xfer", "query": { …

---

## [\[Kibana\]Y-AxisのJSON inputについて](https://discuss.elastic.co/t/kibana-y-axis-json-input/161434)

<div class="topic-metadata">

**Author:** [@tom1989](https://discuss.elastic.co/u/tom1989)\
**Replies:** 4\
**Last updated:** [December 25, 2018, 6:07am UTC](https://discuss.elastic.co/t/kibana-y-axis-json-input/161434 "2018-12-25T06:07:27Z")

</div>

Lineグラフのmetrics(Y軸)にMax Bucketを使用し、以下を実現したいのですが、JSON inputでcountした結果を60で割るという計算はできないでしょうか。 ・ログから分単位で件数をcountした値を60で割り、各時刻(分)における1秒間の平均値を算出 \[max bucketの設定\] :black\_medium\_square:︎bucket ・aggregation: data histogram ・f…

---

## [ダッシュボードで頻繁に使用する検索条件について](https://discuss.elastic.co/t/topic/80271)

<div class="topic-metadata">

**Author:** [@abu001](https://discuss.elastic.co/u/abu001)\
**Replies:** 4\
**Last updated:** [March 29, 2017, 7:49am UTC](https://discuss.elastic.co/t/topic/80271 "2017-03-29T07:49:58Z")

</div>

ダッシュボード上である検索条件を適用したり、適用をはずしたりといった操作が 頻繁に発生する場合に、毎回検索ボックスに条件を入力したり、削除したりするのに手間が掛かります。 また、操作に慣れていないユーザーには検索ボックスの利用は困難です。 そこで、例えば、チェックボックスなどで検索条件をON/OFFできるような仕組みはないでしょうか？ または類似のことをできる方法などないでしょうか？

---

## [Are there memory leaks in ElasticSearch's TransportClient 5.4.3 or is my code flawed?](https://discuss.elastic.co/t/are-there-memory-leaks-in-elasticsearchs-transportclient-5-4-3-or-is-my-code-flawed/91989)

<div class="topic-metadata">

**Author:** [@Dan-K](https://discuss.elastic.co/u/Dan-K)\
**Replies:** 7\
**Last updated:** [August 4, 2017, 1:43pm UTC](https://discuss.elastic.co/t/are-there-memory-leaks-in-elasticsearchs-transportclient-5-4-3-or-is-my-code-flawed/91989 "2017-08-04T13:43:10Z")

</div>

Are there memory leaks in ElasticSearch's TransportClient 5.4.3? Or am I not using and closing the objects correctly? I'm using the client in a Jenkins (2.68) which is on JRE 1.8.0\_66 and writing my code in Groovy. Bul…

---

## [Cross data center replication](https://discuss.elastic.co/t/cross-data-center-replication/11670)

<div class="topic-metadata">

**Author:** [@Saikat\_Kanjilal](https://discuss.elastic.co/u/Saikat_Kanjilal)\
**Replies:** 8\
**Last updated:** [June 27, 2014, 6:23pm UTC](https://discuss.elastic.co/t/cross-data-center-replication/11670 "2014-06-27T18:23:17Z")

</div>

Hello Folks, I digged through the documentation and found a few wiki posts in places but nothing that seems to answer this question directly, as of the latest release of does ES out of the box currently support cros…

---

## [Invalid\_index\_name\_exception when version up to 7.x](https://discuss.elastic.co/t/invalid-index-name-exception-when-version-up-to-7-x/235919)

<div class="topic-metadata">

**Author:** [@carlostevez](https://discuss.elastic.co/u/carlostevez)\
**Replies:** 0\
**Last updated:** [June 5, 2020, 8:55am UTC](https://discuss.elastic.co/t/invalid-index-name-exception-when-version-up-to-7-x/235919 "2020-06-05T08:55:06Z")

</div>

I've upgrade ELK 6.x to 7.X But I got error I haven't got when I use 6.x. I used with below index name pattern when 6.x If I modify the index name , it suffer to change whole system. Q1. Is it added index naming rule…

---

## [Filter in Kibana Visualization on values with spaces in it](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288)

<div class="topic-metadata">

**Author:** [@Philbert](https://discuss.elastic.co/u/Philbert)\
**Replies:** 2\
**Last updated:** [March 16, 2021, 10:36am UTC](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288 "2021-03-16T10:36:59Z")

</div>

We use Kibana to analyse the HTTP logs of on our CDN. One important field is the user agent. From the user agent I can see which device was requesting an HTTP request from the CDN. I would like to gather statistics on …

---

## [How to write ES query: field exists AND has value](https://discuss.elastic.co/t/how-to-write-es-query-field-exists-and-has-value/86864)

<div class="topic-metadata">

**Author:** [@bricheet](https://discuss.elastic.co/u/bricheet)\
**Replies:** 6\
**Last updated:** [May 26, 2017, 2:17pm UTC](https://discuss.elastic.co/t/how-to-write-es-query-field-exists-and-has-value/86864 "2017-05-26T14:17:15Z")

</div>

I need to write an ElasticSearch query that finds documents where a certain field exists AND has a particular value. I've tried doing the following: query = { 'query': { 'bool': { 'must': \[ …

---

## [Backup Elasticsearch without shared folder](https://discuss.elastic.co/t/backup-elasticsearch-without-shared-folder/1840)

<div class="topic-metadata">

**Author:** [@datval](https://discuss.elastic.co/u/datval)\
**Replies:** 3\
**Last updated:** [July 20, 2015, 9:59am UTC](https://discuss.elastic.co/t/backup-elasticsearch-without-shared-folder/1840 "2015-07-20T09:59:47Z")

</div>

Hello, At the moment, to create repository, it needs shared folder which is accessible from every node. There are some plugins which allow to backup into cloud. Why ES needs centralized place to create backup(In centrali…

[Previous page](https://discuss.elastic.co/top.md?page=402&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=404&per_page=50&period=all)
