# Top **URL:** https://discuss.elastic.co/top.md?page=424&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 425 --- ## [Jaspersoft and kibana comparison](https://discuss.elastic.co/t/jaspersoft-and-kibana-comparison/26706)
**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\ **Replies:** 1\ **Last updated:** [February 27, 2016, 8:43pm UTC](https://discuss.elastic.co/t/jaspersoft-and-kibana-comparison/26706 "2016-02-27T20:43:00Z")
Hi ALL, I came accross jaspersoft which is also a business intelligence software. I know we can also integrate elastic with jaspersoft .I have some question regarding how jaspersoft is different from kibana ? ho… --- ## [Sort by multiple fields Kibana](https://discuss.elastic.co/t/sort-by-multiple-fields-kibana/66923)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 2\ **Last updated:** [November 23, 2016, 2:47am UTC](https://discuss.elastic.co/t/sort-by-multiple-fields-kibana/66923 "2016-11-23T02:47:55Z")
I would like to sort based on 2 fields in Kibana. First sorted by field1 then by field2. I can see that we can sort by one field in Discover tab, but when I try to sort by another field, the first sorted order is lost. … --- ## [Tcp server output, "Address already in use" after upgrade to 2.2](https://discuss.elastic.co/t/tcp-server-output-address-already-in-use-after-upgrade-to-2-2/43501)
**Author:** [@davemac30](https://discuss.elastic.co/u/davemac30)\ **Replies:** 7\ **Last updated:** [April 1, 2016, 1:46pm UTC](https://discuss.elastic.co/t/tcp-server-output-address-already-in-use-after-upgrade-to-2-2/43501 "2016-04-01T13:46:22Z")
After upgrade to 2.2 (logstash-2.2.2-1.noarch from the official yum repo), logstash fails to start with the following error. {:timestamp=\>"2016-03-04T10:45:12.833000+0000", :message=\>"The error reported is: \\n Address… --- ## [java.lang.NoSuchMethodError: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object/152553)
**Author:** [@Kstays](https://discuss.elastic.co/u/Kstays)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 4:27am UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object/152553 "2018-10-17T04:27:34Z")
Hi, I am upgrading from ES version 2.x to 6.4.2 and am getting this error while server startup. I am using spring boot version 2.0.5 and have included the 6.4.2 version of ES libraries. Settings settings = Settings.bu… --- ## [\[Solved\]Elasticsearch mapping {"dynamic" : "false"} not working?](https://discuss.elastic.co/t/solved-elasticsearch-mapping-dynamic-false-not-working/60720)
**Author:** [@abcfy2](https://discuss.elastic.co/u/abcfy2)\ **Replies:** 3\ **Last updated:** [September 16, 2016, 2:49pm UTC](https://discuss.elastic.co/t/solved-elasticsearch-mapping-dynamic-false-not-working/60720 "2016-09-16T14:49:44Z")
I don't want a field date to be indexed. So I disabled the dynamic property. Here is my mapping: curl localhost:9200/logstash-2016.09.16/rtds/\_mapping?pretty { "logstash-2016.09.16" : { "mappings" : { "rtd… --- ## [Index privileges](https://discuss.elastic.co/t/index-privileges/74101)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 4\ **Last updated:** [February 9, 2017, 10:44pm UTC](https://discuss.elastic.co/t/index-privileges/74101 "2017-02-09T22:44:25Z")
Hi there I was trying to give access to user with this query. "{ "match": { "path.raw": { "query": "/var/log/top10/customer.log", "type": "phrase" } } }" I would like log in and… --- ## ["value cannot be parsed to boolean" -- Is there some to get ES to say which property this is?](https://discuss.elastic.co/t/value-cannot-be-parsed-to-boolean-is-there-some-to-get-es-to-say-which-property-this-is/53518)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 4\ **Last updated:** [June 22, 2016, 4:42am UTC](https://discuss.elastic.co/t/value-cannot-be-parsed-to-boolean-is-there-some-to-get-es-to-say-which-property-this-is/53518 "2016-06-22T04:42:29Z")
It would be really helpful if when properties fail to parse the key and actual value are added the exception/log. Is there a log level that might add this info? (Although it should be shown at any log level.) \[2016-06-… --- ## [Garbage Collection in ES](https://discuss.elastic.co/t/garbage-collection-in-es/6736)
**Author:** [@Brad\_Lhotsky](https://discuss.elastic.co/u/Brad_Lhotsky)\ **Replies:** 7\ **Last updated:** [February 17, 2012, 6:58pm UTC](https://discuss.elastic.co/t/garbage-collection-in-es/6736 "2012-02-17T18:58:05Z")
Hello, We're seeing some issues with timeouts lasting 6 seconds in ElasticSearch during what appear to be massive Garbage Collection sessions. We have 4 nodes, and 7 shards, the index is only 4.3G loaded into memo… --- ## [Filter + if results in “can't convert Array into String” error](https://discuss.elastic.co/t/filter-if-results-in-cant-convert-array-into-string-error/38805)
**Author:** [@tebeka](https://discuss.elastic.co/u/tebeka)\ **Replies:** 6\ **Last updated:** [January 13, 2016, 6:19am UTC](https://discuss.elastic.co/t/filter-if-results-in-cant-convert-array-into-string-error/38805 "2016-01-13T06:19:54Z")
We have beaver shipping logs to logstash. Two log sources are nginx error logs and haproxy logs. beaver is adding a tag for the log type and we'd like to parse the log according to type. We wrote the following configurat… --- ## [How to defrag an index?](https://discuss.elastic.co/t/how-to-defrag-an-index/36732)
**Author:** [@igor\_k](https://discuss.elastic.co/u/igor_k)\ **Replies:** 6\ **Last updated:** [December 10, 2015, 10:05am UTC](https://discuss.elastic.co/t/how-to-defrag-an-index/36732 "2015-12-10T10:05:09Z")
Hi, Our use case: - pretty big cluster - billions of docs - we update documents in place - data are not time-sliced as we often do retrieve and modify old documents - Issue: over time we accumulated a lot of deleted do… --- ## [Elastic UTC time](https://discuss.elastic.co/t/elastic-utc-time/191877)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 5\ **Last updated:** [August 4, 2019, 1:46pm UTC](https://discuss.elastic.co/t/elastic-utc-time/191877 "2019-08-04T13:46:23Z")
I have a small issue with date time stamps. We currently pass date of birth to Elastic as YYYY-MM-DDT00:00:00 for example 2019-08-08T00:00:00 However, when in Kibana this is interpreted as UTC (looks like) because the … --- ## [What to do about a .watches dangling index](https://discuss.elastic.co/t/what-to-do-about-a-watches-dangling-index/103046)
**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\ **Replies:** 1\ **Last updated:** [October 11, 2017, 9:54am UTC](https://discuss.elastic.co/t/what-to-do-about-a-watches-dangling-index/103046 "2017-10-11T09:54:15Z")
In the process of doing a rolling restart of my cluster, I am now seeing a dangling index error on one of my nodes. \[2017-10-06T16:23:00,190\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[ES149\] \[\[.watches/i1GOvi3HRuiKaP3v6-D7OQ\]… --- ## [Adding Fuzziness to Bool Query](https://discuss.elastic.co/t/adding-fuzziness-to-bool-query/144843)
**Author:** [@Duncan\_Mein](https://discuss.elastic.co/u/Duncan_Mein)\ **Replies:** 3\ **Last updated:** [August 17, 2018, 8:59am UTC](https://discuss.elastic.co/t/adding-fuzziness-to-bool-query/144843 "2018-08-17T08:59:37Z")
Hi. I am very new to ElasticSearch so please be gentle :slight\_smile: I have the following bool query which is working well for me: "query":{ "bool": { "should": \[ {"match": {"surname" : "JONES"} }, {"match": { … --- ## [ElasticSearch won't start when path.logs and path.data is changed](https://discuss.elastic.co/t/elasticsearch-wont-start-when-path-logs-and-path-data-is-changed/40070)
**Author:** [@reynold](https://discuss.elastic.co/u/reynold)\ **Replies:** 1\ **Last updated:** [January 26, 2016, 12:21pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-when-path-logs-and-path-data-is-changed/40070 "2016-01-26T12:21:54Z")
I have followed the guide here to install ELK in CentOS 7, and it worked. The next day, I tried to change the path of the data and logs on another volume, but failed, so I changed it to local directory. ( /etc/elastic… --- ## [ERROR: Failed to determine the health of the cluster. , with exit code 69](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150)
**Author:** [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\ **Replies:** 5\ **Last updated:** [December 31, 2023, 3:18pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150 "2023-12-31T15:18:35Z")
In /usr/share/elasticsearch/bin file i run "sudo ./elasticsearch-create-enrollment-token --scope kibana" command and i get this output: 03:26:10.736 \[main\] WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - fai… --- ## [Kibana 403 'Unable to update UI setting' Error while searching on multi-match index pattern](https://discuss.elastic.co/t/kibana-403-unable-to-update-ui-setting-error-while-searching-on-multi-match-index-pattern/235158)
**Author:** [@devops\_guy1](https://discuss.elastic.co/u/devops_guy1)\ **Replies:** 2\ **Last updated:** [June 7, 2020, 2:03pm UTC](https://discuss.elastic.co/t/kibana-403-unable-to-update-ui-setting-error-while-searching-on-multi-match-index-pattern/235158 "2020-06-07T14:03:49Z")
Hi, I am trying to simulate a multi-tenancy Kibana setup with multiple roles and role mappings, and running into issues with Kibana making strange HTTP calls to itself (just like in this page https://discuss.elastic.co… --- ## [Provided Grok expressions do not match field value: Fortinet 7.12.1](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-fortinet-7-12-1/271523)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 8\ **Last updated:** [April 29, 2021, 1:24pm UTC](https://discuss.elastic.co/t/provided-grok-expressions-do-not-match-field-value-fortinet-7-12-1/271523 "2021-04-29T13:24:23Z")
Hello, recently I started a module for logs from fortigate firewalls. - module: fortinet firewall: enabled: true # Set which input to use between tcp, udp (default) or file. #var.input: udp # The in… --- ## [ERROR: bootstrap checks failed](https://discuss.elastic.co/t/error-bootstrap-checks-failed/74139)
**Author:** [@Pintoo\_Raj](https://discuss.elastic.co/u/Pintoo_Raj)\ **Replies:** 8\ **Last updated:** [March 1, 2017, 9:02pm UTC](https://discuss.elastic.co/t/error-bootstrap-checks-failed/74139 "2017-03-01T21:02:41Z")
Hi, I have installed latest version of Elasticsearch on Linux machine. With default settings (localhost) service is starting fine but when I change network.host to hostname or IPV4 or IPV6 service is failing. Configu… --- ## [Index Mapping Issue - Getting Error: "reason" : "object mapping \[locations\] can't be changed from nested to non-nested"](https://discuss.elastic.co/t/index-mapping-issue-getting-error-reason-object-mapping-locations-cant-be-changed-from-nested-to-non-nested/227938)
**Author:** [@austin-harris](https://discuss.elastic.co/u/austin-harris)\ **Replies:** 7\ **Last updated:** [April 15, 2020, 4:56am UTC](https://discuss.elastic.co/t/index-mapping-issue-getting-error-reason-object-mapping-locations-cant-be-changed-from-nested-to-non-nested/227938 "2020-04-15T04:56:45Z")
I have found many instances of others resolving this error, but I have not been successful. I have ElasticSearch 7.6 deployed. I create the index and mapping. Then, as a test have a sample JSON I am pushing and I receive… --- ## [Getting error for sincedb\_path in window 7](https://discuss.elastic.co/t/getting-error-for-sincedb-path-in-window-7/168905)
**Author:** [@anujjai](https://discuss.elastic.co/u/anujjai)\ **Replies:** 4\ **Last updated:** [February 19, 2019, 12:27am UTC](https://discuss.elastic.co/t/getting-error-for-sincedb-path-in-window-7/168905 "2019-02-19T00:27:32Z")
HI , My config is below input { file { path =\> "C:/Anuj/ElasticSearch/DMS\_GTX-Process\_Archive.log" start\_position =\> "beginning" sincedb\_path =\> "C:/dev/null/logdbpath.txt" sincedb\_write\_interval =\> 10 } } filt… --- ## [\[Solved\] Using the Kafka output the Development Build of Filebeat](https://discuss.elastic.co/t/solved-using-the-kafka-output-the-development-build-of-filebeat/42742)
**Author:** [@Bibeleuh](https://discuss.elastic.co/u/Bibeleuh)\ **Replies:** 5\ **Last updated:** [June 24, 2016, 3:47am UTC](https://discuss.elastic.co/t/solved-using-the-kafka-output-the-development-build-of-filebeat/42742 "2016-06-24T03:47:35Z")
Hello, I have problems to communicate with my broker as output. My actually working configuration is : Filebeat -\> Logstash 1 -\> RabbitMQ -\> Logstash 2 -\> Elasticsearch Logstash1 is only an intermediate between FB an… --- ## ["query\_string" dosen't analyze wildcard queries](https://discuss.elastic.co/t/query-string-dosent-analyze-wildcard-queries/109533)
**Author:** [@Alexander\_Ott](https://discuss.elastic.co/u/Alexander_Ott)\ **Replies:** 4\ **Last updated:** [November 30, 2017, 9:50am UTC](https://discuss.elastic.co/t/query-string-dosent-analyze-wildcard-queries/109533 "2017-11-30T09:50:52Z")
Hi, after upgrade from ES 2.4.4 to ES 5.6.1 the following query dosen't get analyzed by our analyzer { "analyzer": { "default": { "type": "custom", "tokenizer": "fesadTokenizer", "char\_filter": … --- ## [\`refresh=wait\_for\` taking unexpectedly long](https://discuss.elastic.co/t/refresh-wait-for-taking-unexpectedly-long/83691)
**Author:** [@\_markus](https://discuss.elastic.co/u/_markus)\ **Replies:** 4\ **Last updated:** [April 27, 2017, 8:11pm UTC](https://discuss.elastic.co/t/refresh-wait-for-taking-unexpectedly-long/83691 "2017-04-27T20:11:43Z")
I've started to use wait\_for after we upgraded to 5.3 (from 1.5) for user-facing parts of the application which require that the next search returns the modified results. The index refresh\_interval is set to 100ms . Wh… --- ## [Getting the following warning from elastic search restarts](https://discuss.elastic.co/t/getting-the-following-warning-from-elastic-search-restarts/810)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 6\ **Last updated:** [May 18, 2015, 8:45pm UTC](https://discuss.elastic.co/t/getting-the-following-warning-from-elastic-search-restarts/810 "2015-05-18T20:45:40Z")
Hi All, when i restart elastic search I am getting the following error.please explain me why I am getting the following error. 2015-05-17 14:12:37,814\]\[WARN \]\[common.jna \] Unable to lock JVM memory (… --- ## [How to avoid jdbc database polling and make connections on demand?](https://discuss.elastic.co/t/how-to-avoid-jdbc-database-polling-and-make-connections-on-demand/82298)
**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\ **Replies:** 2\ **Last updated:** [May 12, 2017, 11:13am UTC](https://discuss.elastic.co/t/how-to-avoid-jdbc-database-polling-and-make-connections-on-demand/82298 "2017-05-12T11:13:39Z")
I've already setup a scenario where I get all the sales from a database (input-jdbc) , by polling the database every minute via jdbc schedule parameter. I send this (output-rabbitmq) to a rabbitmq queue and I subscribe… --- ## [Filebeat multiline not working with autodiscover](https://discuss.elastic.co/t/filebeat-multiline-not-working-with-autodiscover/198103)
**Author:** [@zaratustra689](https://discuss.elastic.co/u/zaratustra689)\ **Replies:** 7\ **Last updated:** [September 16, 2019, 3:45am UTC](https://discuss.elastic.co/t/filebeat-multiline-not-working-with-autodiscover/198103 "2019-09-16T03:45:13Z")
Hello, I have the following configuration in filebeat.yml and the multiline feature is NOT working as expected. I have read previous posts with this issue, but the difference is that i'm NOT using prospectors or inputs.… --- ## [No Implicit conversion of Nil](https://discuss.elastic.co/t/no-implicit-conversion-of-nil/253594)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [October 28, 2020, 7:54pm UTC](https://discuss.elastic.co/t/no-implicit-conversion-of-nil/253594 "2020-10-28T19:54:16Z")
I am getting following error. but do not where in code it is getting this error from. \[ERROR\] 2020-10-28 11:41:31.825 \[\[main\]\>worker7\] WorkerLoop - Exception in pipelineworker, the pipeline stopped processing new events… --- ## [LDAP Authentication is not working](https://discuss.elastic.co/t/ldap-authentication-is-not-working/161684)
**Author:** [@sadiesh](https://discuss.elastic.co/u/sadiesh)\ **Replies:** 8\ **Last updated:** [December 24, 2018, 9:02am UTC](https://discuss.elastic.co/t/ldap-authentication-is-not-working/161684 "2018-12-24T09:02:52Z")
Getting above error with XPACK Platinum License --- ## [Java 8.1 bulk request](https://discuss.elastic.co/t/java-8-1-bulk-request/302423)
**Author:** [@3xil3](https://discuss.elastic.co/u/3xil3)\ **Replies:** 6\ **Last updated:** [April 26, 2022, 10:40pm UTC](https://discuss.elastic.co/t/java-8-1-bulk-request/302423 "2022-04-26T22:40:34Z")
Hi, I'm having trouble doing a bulk index request using the java 8.1.1 client. I get an unclear error message and I'm basically stuck. String test= "{ \\"test\\",\\"test\\"}"; final InputStream jsonInputStr… --- ## [Elasticsearch permissions required by Filebeat](https://discuss.elastic.co/t/elasticsearch-permissions-required-by-filebeat/155185)
**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\ **Replies:** 6\ **Last updated:** [November 2, 2018, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-permissions-required-by-filebeat/155185 "2018-11-02T20:08:42Z")
I'm looking to secure my Elastic Cloud deployment by creating additional users (and roles where necessary) on the system. I'm not comfortable using the root elastic username and password for writing logs from Filebeat, a… --- ## [Rollover api : How to Run it 30 min wise](https://discuss.elastic.co/t/rollover-api-how-to-run-it-30-min-wise/143318)
**Author:** [@BoffinPanda](https://discuss.elastic.co/u/BoffinPanda)\ **Replies:** 6\ **Last updated:** [August 11, 2018, 3:09am UTC](https://discuss.elastic.co/t/rollover-api-how-to-run-it-30-min-wise/143318 "2018-08-11T03:09:01Z")
Suppose I do : POST /indexname/\_rollover { "conditions": { "max\_age": "30m", "max\_docs": 1000, "max\_size": "5gb" } } Will it work? If not what is the correct way of generating indices every 30 mins. --- ## [Failed to complete action: delete\_indices](https://discuss.elastic.co/t/failed-to-complete-action-delete-indices/128446)
**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\ **Replies:** 7\ **Last updated:** [April 18, 2018, 1:46pm UTC](https://discuss.elastic.co/t/failed-to-complete-action-delete-indices/128446 "2018-04-18T13:46:05Z")
Hello All, I was receiving this error upon executing a delete\_indices action. Failed to complete action: delete\_indices. \: Exception encountered. Rerun with loglevel DEBUG … --- ## [Kibana Dashboard Autorefresh](https://discuss.elastic.co/t/kibana-dashboard-autorefresh/26517)
**Author:** [@mganesh123](https://discuss.elastic.co/u/mganesh123)\ **Replies:** 4\ **Last updated:** [August 9, 2016, 3:00am UTC](https://discuss.elastic.co/t/kibana-dashboard-autorefresh/26517 "2016-08-09T03:00:23Z")
Hi, I am currently using Kibana 4.0.1. I see that the autorefresh setting is not saved with the dashboard (within Kibana). I was also interested in this being saved with the exported URL so I could embed this within my o… --- ## [SSL with Filebeat not working](https://discuss.elastic.co/t/ssl-with-filebeat-not-working/128225)
**Author:** [@va1entin](https://discuss.elastic.co/u/va1entin)\ **Replies:** 1\ **Last updated:** [April 18, 2018, 12:23pm UTC](https://discuss.elastic.co/t/ssl-with-filebeat-not-working/128225 "2018-04-18T12:23:46Z")
Hey folks, I tried to get SSL working between Logstash and Filebeat but ran out of ideas now. I have two servers in my test case. Both use self-signed certificates from the same CA. The configs look as follows: Logst… --- ## [Aggregation with java High Level Rest Client](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/222447)
**Author:** [@Jonixo](https://discuss.elastic.co/u/Jonixo)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 6:07pm UTC](https://discuss.elastic.co/t/aggregation-with-java-high-level-rest-client/222447 "2020-03-06T18:07:22Z")
I manage to create a working query but I'm having hard time converting it to java. Working query: GET edgedevicedata/\_search { "size": 0, "aggs": { "by\_days": { "date\_histogram": { "field": "@t… --- ## [Topics\_pattern of kafka input plugin is not working](https://discuss.elastic.co/t/topics-pattern-of-kafka-input-plugin-is-not-working/169405)
**Author:** [@srineela](https://discuss.elastic.co/u/srineela)\ **Replies:** 1\ **Last updated:** [March 13, 2019, 1:17pm UTC](https://discuss.elastic.co/t/topics-pattern-of-kafka-input-plugin-is-not-working/169405 "2019-03-13T13:17:13Z")
I am having topics in kafka with prefix "abc-". When I use topics\_pattern =\> "abc-\*" in kafka input plugin I am not getting any results in elasticerach. It is not throwing any errors in logstash also. Currently I am usi… --- ## [Décalage de l'heure entre Date et timestamp](https://discuss.elastic.co/t/decalage-de-lheure-entre-date-et-timestamp/2197)
**Author:** [@Sofi](https://discuss.elastic.co/u/Sofi)\ **Replies:** 6\ **Last updated:** [June 9, 2015, 2:12pm UTC](https://discuss.elastic.co/t/decalage-de-lheure-entre-date-et-timestamp/2197 "2015-06-09T14:12:34Z")
Bonjour, J'indexe des dates dans mon elasticsearch et quand je vérifie sur Elasticsearch-HQ pour voir les résultats je trouve un décalage de 2h dans l'heure que j'ai indexée et celle de @timestamp, pourquoi ? Exemple… --- ## [How to merge separate date and time to @timestamp](https://discuss.elastic.co/t/how-to-merge-separate-date-and-time-to-timestamp/132545)
**Author:** [@jiona](https://discuss.elastic.co/u/jiona)\ **Replies:** 5\ **Last updated:** [May 23, 2018, 12:05am UTC](https://discuss.elastic.co/t/how-to-merge-separate-date-and-time-to-timestamp/132545 "2018-05-23T00:05:27Z")
Hi all. I parse a csv with date and time events. These events has no syslogtime. They are separated in to date and time. How can I merge date and time to the @timestamp? I tried some samples with "mutate" and "date" … --- ## [Error in sending email : \[WATCHER\]](https://discuss.elastic.co/t/error-in-sending-email-watcher/48688)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 7\ **Last updated:** [April 29, 2016, 3:08pm UTC](https://discuss.elastic.co/t/error-in-sending-email-watcher/48688 "2016-04-29T15:08:00Z")
"actions": \[ { "id": "email\_admin", "type": "email", "status": "failure", "reason": "MessagingException\[failed to send email with subject \[Wat… --- ## [Kibana 8.10.3, 7.17.14 Security Update](https://discuss.elastic.co/t/kibana-8-10-3-7-17-14-security-update/344735)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [October 10, 2023, 12:40pm UTC](https://discuss.elastic.co/t/kibana-8-10-3-7-17-14-security-update/344735 "2023-10-10T12:40:01Z")
Kibana heap buffer overflow vulnerability (ESA-2023-19) On Sept 11, 2023, Google Chrome announced CVE-2023-4863, described as “Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 a… --- ## [The context.thresholdOf, context.metricOf and context.valueOf not working in inventory alert](https://discuss.elastic.co/t/the-context-thresholdof-context-metricof-and-context-valueof-not-working-in-inventory-alert/250094)
**Author:** [@mohanr](https://discuss.elastic.co/u/mohanr)\ **Replies:** 5\ **Last updated:** [October 3, 2020, 5:44pm UTC](https://discuss.elastic.co/t/the-context-thresholdof-context-metricof-and-context-valueof-not-working-in-inventory-alert/250094 "2020-10-03T17:44:25Z")
Hi, I am using the ELK 7.8.0 and making an inventory alert. I have created an action message as shown below. But I am not getting values for context.thresholdOf, context.metricOf and context.valueOf. I have also trie… --- ## [Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/96764)
**Author:** [@816a835aba6364ba2bda](https://discuss.elastic.co/u/816a835aba6364ba2bda)\ **Replies:** 8\ **Last updated:** [August 11, 2017, 2:25pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch/96764 "2017-08-11T14:25:01Z")
I run the command with a non-root user but get an error \[elsearch@vultr elasticsearch-rtf\]$ ./bin/elasticsearch Error: Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch the java -version and … --- ## [Save data from Databricks to ElasticSearch Cloud](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679)
**Author:** [@shoeb\_ansari](https://discuss.elastic.co/u/shoeb_ansari)\ **Replies:** 0\ **Last updated:** [January 27, 2020, 3:04pm UTC](https://discuss.elastic.co/t/save-data-from-databricks-to-elasticsearch-cloud/216679 "2020-01-27T15:04:28Z")
While executing the Databricks notebook to save data in Elasticsearch cloud if you are getting below error: “org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Cannot detect ES version - typically this happens… --- ## [Reporting Windows Security Events in Kibana](https://discuss.elastic.co/t/reporting-windows-security-events-in-kibana/44748)
**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\ **Replies:** 3\ **Last updated:** [March 18, 2016, 9:15am UTC](https://discuss.elastic.co/t/reporting-windows-security-events-in-kibana/44748 "2016-03-18T09:15:45Z")
Hi, I've been experimenting with ELK for reporting Windows security events. Whilst I'm able to get the data into logstash using Winlogbeats over TLS, I've yet to visualize the activity of users on servers. These are t… --- ## [Kibana - joining data tables on specific fields](https://discuss.elastic.co/t/kibana-joining-data-tables-on-specific-fields/205262)
**Author:** [@pbsf](https://discuss.elastic.co/u/pbsf)\ **Replies:** 4\ **Last updated:** [October 25, 2019, 8:59pm UTC](https://discuss.elastic.co/t/kibana-joining-data-tables-on-specific-fields/205262 "2019-10-25T20:59:53Z")
I have two metrics on Kibana that share a field. metric.metric: "A" metric.Id: {SomeNumber} metric.Amount: {SomeNumber} metric.metric: "B" metric.Id: {SomeNumber} metric.Capability: {SomeString} I have visualizations … --- ## [How much disk space to allocate on master node before creating replicas?](https://discuss.elastic.co/t/how-much-disk-space-to-allocate-on-master-node-before-creating-replicas/52235)
**Author:** [@devj1988](https://discuss.elastic.co/u/devj1988)\ **Replies:** 4\ **Last updated:** [June 8, 2016, 6:48pm UTC](https://discuss.elastic.co/t/how-much-disk-space-to-allocate-on-master-node-before-creating-replicas/52235 "2016-06-08T18:48:10Z")
Hi, I want to know how much disk space I should allocate for my master node. I have a primary shard of size x and I want n replicas. Are replicas created on the master node fully and then copied to a sister node?… --- ## [Getting a "RDD element of type java.util.HashMap cannot be used" error](https://discuss.elastic.co/t/getting-a-rdd-element-of-type-java-util-hashmap-cannot-be-used-error/96134)
**Author:** [@Antonio\_Ye](https://discuss.elastic.co/u/Antonio_Ye)\ **Replies:** 6\ **Last updated:** [August 8, 2017, 8:17pm UTC](https://discuss.elastic.co/t/getting-a-rdd-element-of-type-java-util-hashmap-cannot-be-used-error/96134 "2017-08-08T20:17:27Z")
I am using pyspark and I have an RDD of complex JSON strings that I converted to JSON using python’s json.loads. When I try to save this to elasticsearch using rdd.saveAsNewAPIHadoopFile I get a “RDD element of type java… --- ## [Mixing bool and multi match/function score query](https://discuss.elastic.co/t/mixing-bool-and-multi-match-function-score-query/16771)
**Author:** [@gkwelding](https://discuss.elastic.co/u/gkwelding)\ **Replies:** 2\ **Last updated:** [April 3, 2014, 8:53am UTC](https://discuss.elastic.co/t/mixing-bool-and-multi-match-function-score-query/16771 "2014-04-03T08:53:53Z")
I'm currently doing a query that's a mix of multi match and function score. The important bit of the JSON looks like this: "function\_score":{ "query":{ "query\_string":{ … --- ## [Query\_string search is not working correctly when field value contains dots](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860)
**Author:** [@DarwinGoyal](https://discuss.elastic.co/u/DarwinGoyal)\ **Replies:** 8\ **Last updated:** [November 17, 2022, 1:07pm UTC](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860 "2022-11-17T13:07:16Z")
Hi. An index contains a text property named description. Value of the description is "2:1.9.4" When I try to search using below query GET finding-index/\_search { "query": { "bool" : { "must" : \[ { … --- ## [ES failed to recover after crash](https://discuss.elastic.co/t/es-failed-to-recover-after-crash/8195)
**Author:** [@nelalx](https://discuss.elastic.co/u/nelalx)\ **Replies:** 8\ **Last updated:** [July 8, 2012, 3:50pm UTC](https://discuss.elastic.co/t/es-failed-to-recover-after-crash/8195 "2012-07-08T15:50:36Z")
Hi We are facing an isssue with ES. Our ES instance crashed due to low disk space. After that it triggers out exceptions which are described below.. at org.elasticsearch.index.shard.service.InternalIndexShar… [Previous page](https://discuss.elastic.co/top.md?page=423&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=425&per_page=50&period=all)