# Top

**URL:** https://discuss.elastic.co/top.md?page=426&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 427

---

## [Only last 10 minutes relevant](https://discuss.elastic.co/t/only-last-10-minutes-relevant/98750)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 2\
**Last updated:** [September 1, 2017, 1:07pm UTC](https://discuss.elastic.co/t/only-last-10-minutes-relevant/98750 "2017-09-01T13:07:28Z")

</div>

How to index documents in Elastic and Logstash 5.5 in case I am interested in analyzing documents created only in last 10 minutes , should I reindex and delete index every 10 minutes ? What’s the best approach.

---

## [Elasticsearch returning blank response](https://discuss.elastic.co/t/elasticsearch-returning-blank-response/16105)

<div class="topic-metadata">

**Author:** [@Tom\_Pryor](https://discuss.elastic.co/u/Tom_Pryor)\
**Replies:** 4\
**Last updated:** [March 3, 2014, 4:27pm UTC](https://discuss.elastic.co/t/elasticsearch-returning-blank-response/16105 "2014-03-03T16:27:30Z")

</div>

Hi, Having a strange issue when trying to get a document by id, i.e GET to http://localhost:9200/index/type/ Sometimes Elasticsearch returns a HTTP 200 but a totally empty response. The other strange thing is t…

---

## [Archive old indices with data compression](https://discuss.elastic.co/t/archive-old-indices-with-data-compression/203879)

<div class="topic-metadata">

**Author:** [@kevinray0030](https://discuss.elastic.co/u/kevinray0030)\
**Replies:** 5\
**Last updated:** [October 16, 2019, 5:51pm UTC](https://discuss.elastic.co/t/archive-old-indices-with-data-compression/203879 "2019-10-16T17:51:33Z")

</div>

Hey all, I am trying to find a solution to where I can keep roughly 90 days of live data on my cluster but then archive anything over 90 days up to a year. This is a compliance requirement. I am currently looking into …

---

## [How to forward index from filebeat to elasticsearch via logstash](https://discuss.elastic.co/t/how-to-forward-index-from-filebeat-to-elasticsearch-via-logstash/38722)

<div class="topic-metadata">

**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\
**Replies:** 2\
**Last updated:** [January 11, 2016, 8:26am UTC](https://discuss.elastic.co/t/how-to-forward-index-from-filebeat-to-elasticsearch-via-logstash/38722 "2016-01-11T08:26:18Z")

</div>

Hello, I have this script for filebeat which sends all logs to logstash: filebeat: prospectors: paths: - D:\\Logs\\\* input\_type: log registry\_file: "D:/ElasticSearch/filebeat-1.0.0-windows/regist…

---

## [Vega Error](https://discuss.elastic.co/t/vega-error/130538)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 4\
**Last updated:** [May 7, 2018, 5:58pm UTC](https://discuss.elastic.co/t/vega-error/130538 "2018-05-07T17:58:36Z")

</div>

I'm trying to create a vega visual, but receiving 'invalid field type "undefined"' The 2 fields are strings, and the @timestamp a a date field. I've also tried it without converting the @timestamp to a date, and passing…

---

## [Transport.publish\_address was printed as \[ip:port\] instead of \[hostname/ip:port\] (7.5.1)](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port-7-5-1/224666)

<div class="topic-metadata">

**Author:** [@MMCDK](https://discuss.elastic.co/u/MMCDK)\
**Replies:** 5\
**Last updated:** [March 25, 2020, 8:51am UTC](https://discuss.elastic.co/t/transport-publish-address-was-printed-as-ip-port-instead-of-hostname-ip-port-7-5-1/224666 "2020-03-25T08:51:45Z")

</div>

Hi I am aware of other similar posts regarding the same issue as I describe here. I have tried to follow the posts at use the suggested solutions, but I have not had any success implementing the solution. Therefore I tr…

---

## [Sort by position / best match](https://discuss.elastic.co/t/sort-by-position-best-match/106232)

<div class="topic-metadata">

**Author:** [@jakobdo](https://discuss.elastic.co/u/jakobdo)\
**Replies:** 5\
**Last updated:** [November 29, 2017, 12:12pm UTC](https://discuss.elastic.co/t/sort-by-position-best-match/106232 "2017-11-29T12:12:09Z")

</div>

Hello, i'm searching against a elacsticsearch server and i am wondering if i can control the score of a result? Today i do a search like: query = { 'query': { 'multi\_match': { 'query': "Foo Bar Inc",…

---

## [Bool Query Not Working as Expected](https://discuss.elastic.co/t/bool-query-not-working-as-expected/108228)

<div class="topic-metadata">

**Author:** [@mrbushid0](https://discuss.elastic.co/u/mrbushid0)\
**Replies:** 5\
**Last updated:** [November 19, 2017, 4:54pm UTC](https://discuss.elastic.co/t/bool-query-not-working-as-expected/108228 "2017-11-19T16:54:03Z")

</div>

I'm trying to write a simple query in ES 5.6.4 to be the equivalent of "SELECT \* FROM index WHERE Location LIKE '%Michigan%' OR Location LIKE '%Main%', and it's working but the second term in the "or" does not match as m…

---

## [Kibana server is not ready yet . (Error: Failure installing common resources shared between all indices.)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-failure-installing-common-resources-shared-between-all-indices/313142)

<div class="topic-metadata">

**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\
**Replies:** 2\
**Last updated:** [August 29, 2022, 9:28am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-failure-installing-common-resources-shared-between-all-indices/313142 "2022-08-29T09:28:18Z")

</div>

Error: Kibana server is not ready yet, My kibana.log file is below sudo tail /var/log/kibana/kibana.log bhaveshk@linux:~$ sudo tail /var/log/kibana/kibana.log {"type":"log","@timestamp":"2022-08-29T13:12:06+05…

---

## [Why the user who is not authorized is able to create dashboard/reports in kibana](https://discuss.elastic.co/t/why-the-user-who-is-not-authorized-is-able-to-create-dashboard-reports-in-kibana/24699)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 7\
**Last updated:** [July 2, 2015, 7:11pm UTC](https://discuss.elastic.co/t/why-the-user-who-is-not-authorized-is-able-to-create-dashboard-reports-in-kibana/24699 "2015-07-02T19:11:37Z")

</div>

Hi Experts, I am new to shield , so I am following "http://blog.trifork.com/2015/03/05/shield-your-kibana-dashboards/" blog to start. I have done almost everything i.e --\> Installed Shield --\> Created 2 user (vikas, g…

---

## [Why am i getting .keyword for my feilds in index pattern](https://discuss.elastic.co/t/why-am-i-getting-keyword-for-my-feilds-in-index-pattern/137983)

<div class="topic-metadata">

**Author:** [@vebabu](https://discuss.elastic.co/u/vebabu)\
**Replies:** 3\
**Last updated:** [June 29, 2018, 9:01pm UTC](https://discuss.elastic.co/t/why-am-i-getting-keyword-for-my-feilds-in-index-pattern/137983 "2018-06-29T21:01:45Z")

</div>

Hi All, I am new to kibana and i am trying to transfer my data from aws service to kibana. Once I receive the data from AWS and create a index patter i can see two fields created for every 1 filed of my original data. …

---

## [在线等：histogram 按时间 聚合 的 时区 问题](https://discuss.elastic.co/t/histogram/141473)

<div class="topic-metadata">

**Author:** [@kklingjie](https://discuss.elastic.co/u/kklingjie)\
**Replies:** 5\
**Last updated:** [July 25, 2018, 10:09am UTC](https://discuss.elastic.co/t/histogram/141473 "2018-07-25T10:09:02Z")

</div>

ES 插入的 数据 : "hits": \[{ "\_index": "log", "\_type": "accesslog", "\_id": "5b2977e843644c8a7e8b4582", "\_score": 1, "\_source": { "id": { "$id": "5b2977e843644c8a7e8b4582" }, "ip": "117.30.209.86", "source\_url": "www", "…

---

## [Logstash Memory Requirements and JVM Sizing](https://discuss.elastic.co/t/logstash-memory-requirements-and-jvm-sizing/227072)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 8\
**Last updated:** [April 16, 2020, 5:02am UTC](https://discuss.elastic.co/t/logstash-memory-requirements-and-jvm-sizing/227072 "2020-04-16T05:02:01Z")

</div>

Hello I am getting approx 5000 events per second and a lot of Grok, KV, DNS filters are being used. My current memory is 16 GB, 8 Core thread per core is 2. I have set JVM size to 8GB. But My JVM is getting full and…

---

## [How to parse json data in ruby filter?](https://discuss.elastic.co/t/how-to-parse-json-data-in-ruby-filter/135295)

<div class="topic-metadata">

**Author:** [@clash\_of\_clanss](https://discuss.elastic.co/u/clash_of_clanss)\
**Replies:** 7\
**Last updated:** [June 11, 2018, 10:16am UTC](https://discuss.elastic.co/t/how-to-parse-json-data-in-ruby-filter/135295 "2018-06-11T10:16:21Z")

</div>

Hi, I am having one json file and I am trying to parse those json field in logstash. so I decided to create one ruby file from that I have to parse those json fields. is there any way to do this process? for example, …

---

## [Kibana Login Session expiration](https://discuss.elastic.co/t/kibana-login-session-expiration/45701)

<div class="topic-metadata">

**Author:** [@tom.stark](https://discuss.elastic.co/u/tom.stark)\
**Replies:** 4\
**Last updated:** [January 9, 2018, 6:30pm UTC](https://discuss.elastic.co/t/kibana-login-session-expiration/45701 "2018-01-09T18:30:34Z")

</div>

We would like to use Kibana (4.4.) version to use as TV-Dashbaord. Unfortunately the Kibana plugin expires session after specific period of time. Where to find kibana settings for that?

---

## [Get line number of the log file line being processed](https://discuss.elastic.co/t/get-line-number-of-the-log-file-line-being-processed/40960)

<div class="topic-metadata">

**Author:** [@nabbaraju](https://discuss.elastic.co/u/nabbaraju)\
**Replies:** 3\
**Last updated:** [February 4, 2016, 2:48pm UTC](https://discuss.elastic.co/t/get-line-number-of-the-log-file-line-being-processed/40960 "2016-02-04T14:48:42Z")

</div>

I am setting up a log file processor using ELK stash. I need a unique ID so I can use it as document\_id - there can be duplicate lines in the app access log so all I need is the file name and the line number which is un…

---

## [How to match a empty value field](https://discuss.elastic.co/t/how-to-match-a-empty-value-field/114006)

<div class="topic-metadata">

**Author:** [@neal1991](https://discuss.elastic.co/u/neal1991)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 1:30am UTC](https://discuss.elastic.co/t/how-to-match-a-empty-value-field/114006 "2018-01-05T01:30:01Z")

</div>

I am trying to search the exchange logs in kibana. And sometimes there are some data just like: 2017-10-05 23:59:56 10.100.1.22 OPTIONS /Microsoft-Server-ActiveSync/default.eas - 443 hdqsmsg01\\sjzznhf 106.114.181.40 - 4…

---

## [Native controller process has stopped - no new native processes can be started?](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/224035)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 6\
**Last updated:** [March 18, 2020, 2:32pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped-no-new-native-processes-can-be-started/224035 "2020-03-18T14:32:09Z")

</div>

I am trying to install Elasicsearch 7.1.0 but I am failing to do so. I am not doing it on Docker or using it for production mode I am using Ubuntu on Virtual Box And i am not able to install it. \[2020-03-18T05:31:13,…

---

## [Error Could not contact Elasticsearch at http://\<hostname\>:9200. Please ensure that Elasticsearch is reachable from your system. 1 alert(s)](https://discuss.elastic.co/t/error-could-not-contact-elasticsearch-at-http-hostname-9200-please-ensure-that-elasticsearch-is-reachable-from-your-system-1-alert-s/22979)

<div class="topic-metadata">

**Author:** [@Sergey\_Zemlyanoy](https://discuss.elastic.co/u/Sergey_Zemlyanoy)\
**Replies:** 7\
**Last updated:** [July 24, 2015, 5:59pm UTC](https://discuss.elastic.co/t/error-could-not-contact-elasticsearch-at-http-hostname-9200-please-ensure-that-elasticsearch-is-reachable-from-your-system-1-alert-s/22979 "2015-07-24T17:59:12Z")

</div>

Hi, It's global problem in our environment. We cannot open Kibana UI all browsers but Internet Explorer. What might be misconfigured? ELK stack in general looks sane. Regards Sergey -- You received this m…

---

## [How to get ids for dashboard](https://discuss.elastic.co/t/how-to-get-ids-for-dashboard/230726)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [May 4, 2020, 1:01pm UTC](https://discuss.elastic.co/t/how-to-get-ids-for-dashboard/230726 "2020-05-04T13:01:11Z")

</div>

is there a curl command that I can run and get dashboard IDs? or is there endpoint define which has this information? I am trying to create a script which does dashboard/viz export in loop. I have figure out how to do…

---

## [Vehicle tracking through coordinate map](https://discuss.elastic.co/t/vehicle-tracking-through-coordinate-map/120055)

<div class="topic-metadata">

**Author:** [@Rodolfo\_Albuquerque](https://discuss.elastic.co/u/Rodolfo_Albuquerque)\
**Replies:** 5\
**Last updated:** [February 16, 2018, 1:31pm UTC](https://discuss.elastic.co/t/vehicle-tracking-through-coordinate-map/120055 "2018-02-16T13:31:35Z")

</div>

Hey guys, So my gratuation project is to monitor a vehicle through IoT technology. I got all the sensors working sending data to logstash and ultimately visualizing it through graphs in Kibana. Now my goal is to track …

---

## [Elasticsearch throwing some overhead warning in logs](https://discuss.elastic.co/t/elasticsearch-throwing-some-overhead-warning-in-logs/264137)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 3\
**Last updated:** [February 12, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-throwing-some-overhead-warning-in-logs/264137 "2021-02-12T15:01:57Z")

</div>

HI Team, we are getting below response in elasticsearch log , anyone can help me on this why im getting this kind of error on it, \[2021-02-12T07:29:17,371\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[datanode1\] \[gc\]\[242917\] …

---

## [Result window is too large](https://discuss.elastic.co/t/result-window-is-too-large/58925)

<div class="topic-metadata">

**Author:** [@sukhada369](https://discuss.elastic.co/u/sukhada369)\
**Replies:** 8\
**Last updated:** [August 26, 2016, 10:54am UTC](https://discuss.elastic.co/t/result-window-is-too-large/58925 "2016-08-26T10:54:08Z")

</div>

Error: \[query\_phase\_execution\_exception\] Result window is too large, from + size must be less than or equal to: \[10000\] but was \[2147483647\]. I have changed the size of max\_result\_window of .kibana index from 10000 to …

---

## [ECS-Kibana issue: is it possible to combine dynamic filter for kubernetes.pod.name or kubernetes.container.\_module.pod.name](https://discuss.elastic.co/t/ecs-kibana-issue-is-it-possible-to-combine-dynamic-filter-for-kubernetes-pod-name-or-kubernetes-container-module-pod-name/195449)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [August 20, 2019, 6:35am UTC](https://discuss.elastic.co/t/ecs-kibana-issue-is-it-possible-to-combine-dynamic-filter-for-kubernetes-pod-name-or-kubernetes-container-module-pod-name/195449 "2019-08-20T06:35:26Z")

</div>

Hi, I am using metricbeat to gather information about my kubernetes cluster. I want to build my own status dashboard to see if my deployments / statefulsets in kubernetes are healthy and I want to be able to dig deeper …

---

## [Health check failed](https://discuss.elastic.co/t/health-check-failed/189446)

<div class="topic-metadata">

**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\
**Replies:** 6\
**Last updated:** [July 9, 2019, 6:22am UTC](https://discuss.elastic.co/t/health-check-failed/189446 "2019-07-09T06:22:02Z")

</div>

Hi Team I install elasticsearch 7.2 and only one node, after installed, when I check with curl localhost:9200, it's seem working and return information such version, cluster\_name etc, but when i check the health with lo…

---

## [Kibana memory usage](https://discuss.elastic.co/t/kibana-memory-usage/28968)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 4\
**Last updated:** [December 9, 2015, 5:37am UTC](https://discuss.elastic.co/t/kibana-memory-usage/28968 "2015-12-09T05:37:47Z")

</div>

Hi, I'm wondering if anyone is monitoring their Kibana Node app? Check this: Is anyone else seeing similar memory/GC patterns? It's obviously problematic and I'm wondering if anyone else is monitoring Kibana and is…

---

## [Is possible to get zabbix data to kibana dashboard](https://discuss.elastic.co/t/is-possible-to-get-zabbix-data-to-kibana-dashboard/258799)

<div class="topic-metadata">

**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\
**Replies:** 3\
**Last updated:** [December 16, 2020, 12:05pm UTC](https://discuss.elastic.co/t/is-possible-to-get-zabbix-data-to-kibana-dashboard/258799 "2020-12-16T12:05:36Z")

</div>

Can you advise is possible to send data from zabbix agent to kibana dashboard

---

## [Filebeat config error](https://discuss.elastic.co/t/filebeat-config-error/139350)

<div class="topic-metadata">

**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\
**Replies:** 3\
**Last updated:** [July 12, 2018, 1:49am UTC](https://discuss.elastic.co/t/filebeat-config-error/139350 "2018-07-12T01:49:25Z")

</div>

}} 2018-07-10T14:14:14.001+0100 INFO instance/beat.go:225 Setup Beat: filebeat; Version: 6.3.1 2018-07-10T14:14:14.001+0100 DEBUG \[beat\] instance/beat.go:242 Initializing output plugins 2018-07-10T14…

---

## [Transform vs copy\_to, text concatenation used for aggregation](https://discuss.elastic.co/t/transform-vs-copy-to-text-concatenation-used-for-aggregation/31781)

<div class="topic-metadata">

**Author:** [@noelyim](https://discuss.elastic.co/u/noelyim)\
**Replies:** 2\
**Last updated:** [October 7, 2015, 3:16pm UTC](https://discuss.elastic.co/t/transform-vs-copy-to-text-concatenation-used-for-aggregation/31781 "2015-10-07T15:16:49Z")

</div>

I have similar question as this poster: I have 2 fields: doc\_a.prop.proptexta doc\_a.prop.proptextb I want to identify if there are duplication using this 2 fields of doc\_a. So, i tried copyto: I create a mapping a…

---

## [How to explicitly trigger /disable merge process?](https://discuss.elastic.co/t/how-to-explicitly-trigger-disable-merge-process/23959)

<div class="topic-metadata">

**Author:** [@bvnagaraju](https://discuss.elastic.co/u/bvnagaraju)\
**Replies:** 8\
**Last updated:** [June 29, 2015, 2:06pm UTC](https://discuss.elastic.co/t/how-to-explicitly-trigger-disable-merge-process/23959 "2015-06-29T14:06:40Z")

</div>

Hi, how to explicitly trigger /disable merge process ?

---

## [Filebeat @metadata object, can we remove this object before publishing?](https://discuss.elastic.co/t/filebeat-metadata-object-can-we-remove-this-object-before-publishing/189847)

<div class="topic-metadata">

**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\
**Replies:** 5\
**Last updated:** [July 23, 2019, 7:03am UTC](https://discuss.elastic.co/t/filebeat-metadata-object-can-we-remove-this-object-before-publishing/189847 "2019-07-23T07:03:32Z")

</div>

I'm using filebeat 7.1.1 with a simple log file input filebeat.inputs: - type: log When the events are published, there is a "@metadata" object inserted in the event. { "@timestamp": "2019-07-10T18:24:56.312Z", …

---

## [Facets and a tree-like structure](https://discuss.elastic.co/t/facets-and-a-tree-like-structure/11168)

<div class="topic-metadata">

**Author:** [@Pawel\_Mlynarczyk](https://discuss.elastic.co/u/Pawel_Mlynarczyk)\
**Replies:** 2\
**Last updated:** [March 19, 2013, 11:26am UTC](https://discuss.elastic.co/t/facets-and-a-tree-like-structure/11168 "2013-03-19T11:26:37Z")

</div>

Hello everybody I want to index a tree-like structure in ElasticSearch. That structure is an (let's call it) Item, that has a child Items. Each of the child may have their own child Items. What I'm trying to achi…

---

## [Concatenation in Ruby Code](https://discuss.elastic.co/t/concatenation-in-ruby-code/99614)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 1\
**Last updated:** [September 7, 2017, 5:29am UTC](https://discuss.elastic.co/t/concatenation-in-ruby-code/99614 "2017-09-07T05:29:55Z")

</div>

Hi - Could someone please let me know how to concatenate a couple of strings in Ruby code over Logstash. Below is the snippet of code: for i in 0…arr.size - 1 cpu\_hash = \[cpu\_hash, {‘CPU#{i}’ =\> arr\[i\].to\_i}\].reduce &…

---

## [Logstash output load balancing and workers settings](https://discuss.elastic.co/t/logstash-output-load-balancing-and-workers-settings/48176)

<div class="topic-metadata">

**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Replies:** 4\
**Last updated:** [April 25, 2016, 1:03pm UTC](https://discuss.elastic.co/t/logstash-output-load-balancing-and-workers-settings/48176 "2016-04-25T13:03:39Z")

</div>

Hello, I have a filebeat agent that will be sending quite a lot of access log data and our current setup have 4 receiving logstash hosts. I would like to benefit from these to gain a maximum throughput. When I read th…

---

## [Saved object is missing Could not locate that search (id: WallDetail.uat1)](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-search-id-walldetail-uat1/218834)

<div class="topic-metadata">

**Author:** [@meiyuan](https://discuss.elastic.co/u/meiyuan)\
**Replies:** 6\
**Last updated:** [February 14, 2020, 4:36pm UTC](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-search-id-walldetail-uat1/218834 "2020-02-14T16:36:09Z")

</div>

Hi there, We are using Elasticsearch and Kibana 7.0.1. We have a saved search Object called WallDetail.uat1. Here is how we set it up: columns \[ "\_source" \] kibanaSavedObjectMeta.searchSourceJSON { "highlight…

---

## [Verify x-pack running](https://discuss.elastic.co/t/verify-x-pack-running/99330)

<div class="topic-metadata">

**Author:** [@nh45](https://discuss.elastic.co/u/nh45)\
**Replies:** 3\
**Last updated:** [September 5, 2017, 3:20pm UTC](https://discuss.elastic.co/t/verify-x-pack-running/99330 "2017-09-05T15:20:24Z")

</div>

Hi, Already have a production cluster on which X-Pack is installed and running. But some logstash nodes are not showing in the monitoring tab. So how can I log into specific logstash nodes to verify if x-pack is running…

---

## [Encrypting communications in Kibana](https://discuss.elastic.co/t/encrypting-communications-in-kibana/186369)

<div class="topic-metadata">

**Author:** [@philshikkim](https://discuss.elastic.co/u/philshikkim)\
**Replies:** 4\
**Last updated:** [June 21, 2019, 7:18am UTC](https://discuss.elastic.co/t/encrypting-communications-in-kibana/186369 "2019-06-21T07:18:55Z")

</div>

Hello, English is not my native language. I hope you get my drift. I want to make a Kibana secure communication using https. So I made this following: $ openssl genrsa -out server.key 2048 $ openssl req -new -key ser…

---

## [Refused to load the script 'https://maps.googleapis.com/...' because it violates the following Content Security Policy directive:](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954)

<div class="topic-metadata">

**Author:** [@Raja\_SP](https://discuss.elastic.co/u/Raja_SP)\
**Replies:** 1\
**Last updated:** [June 27, 2020, 3:28pm UTC](https://discuss.elastic.co/t/refused-to-load-the-script-https-maps-googleapis-com-because-it-violates-the-following-content-security-policy-directive/238954 "2020-06-27T15:28:58Z")

</div>

Hi, I am developing a plugin that uses googlemaps api for geofencing purposes. I have the csp.rules configured in kibana.yml as below: csp.rules: "script-src 'unsafe-eval' 'self' 'https://maps.googleapis.com'" "worker…

---

## [No mapping found in order to sort on (Dates)](https://discuss.elastic.co/t/no-mapping-found-in-order-to-sort-on-dates/142640)

<div class="topic-metadata">

**Author:** [@Etienne\_Poulin](https://discuss.elastic.co/u/Etienne_Poulin)\
**Replies:** 1\
**Last updated:** [August 2, 2018, 7:17am UTC](https://discuss.elastic.co/t/no-mapping-found-in-order-to-sort-on-dates/142640 "2018-08-02T07:17:37Z")

</div>

So I'm trying to order my logs by date. I'm currently querying http://localhost:9200/myindex/\_search?pretty=true&sort="date" without the pretty, within a java app. When I do that, I'm getting the following error: { "e…

---

## [High RAM Usage Across Cluster](https://discuss.elastic.co/t/high-ram-usage-across-cluster/248582)

<div class="topic-metadata">

**Author:** [@jcannell](https://discuss.elastic.co/u/jcannell)\
**Replies:** 7\
**Last updated:** [September 15, 2020, 1:44am UTC](https://discuss.elastic.co/t/high-ram-usage-across-cluster/248582 "2020-09-15T01:44:00Z")

</div>

Hello again, we are continuing to test out our new elasticsearch cluster. I'm trying to understand the following: Why is ram usage always so high? (it doesn't ever decrease, even when nobody is searching or indexing). …

---

## [Mutate timestamp for nginx logs](https://discuss.elastic.co/t/mutate-timestamp-for-nginx-logs/104814)

<div class="topic-metadata">

**Author:** [@gotjoshua](https://discuss.elastic.co/u/gotjoshua)\
**Replies:** 6\
**Last updated:** [October 23, 2017, 6:32pm UTC](https://discuss.elastic.co/t/mutate-timestamp-for-nginx-logs/104814 "2017-10-23T18:32:34Z")

</div>

Continuing the discussion from Keep Logstash from Crashing: @dedemorton gave a workaround that prevents logstash from crashing, but i end up with a read-timestamp field with the literal string value "@timestamp" in the …

---

## [The content length (938946807) is bigger than the maximum allowed string (536870888) sending logstash-plain.log to elasticsearch](https://discuss.elastic.co/t/the-content-length-938946807-is-bigger-than-the-maximum-allowed-string-536870888-sending-logstash-plain-log-to-elasticsearch/319533)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 8\
**Last updated:** [November 22, 2022, 1:00pm UTC](https://discuss.elastic.co/t/the-content-length-938946807-is-bigger-than-the-maximum-allowed-string-536870888-sending-logstash-plain-log-to-elasticsearch/319533 "2022-11-22T13:00:00Z")

</div>

Hi I have setup filebeat to send logstash logs to logstah then elasticsearch. Getting this error when trying to access it on discover page Search Error The content length (938946807) is bigger than the maximum allowed s…

---

## [Never started node but got ERROR: Skipping security auto configuration because it appears that security is already configured](https://discuss.elastic.co/t/never-started-node-but-got-error-skipping-security-auto-configuration-because-it-appears-that-security-is-already-configured/317757)

<div class="topic-metadata">

**Author:** [@2019240081](https://discuss.elastic.co/u/2019240081)\
**Replies:** 3\
**Last updated:** [November 2, 2022, 2:44am UTC](https://discuss.elastic.co/t/never-started-node-but-got-error-skipping-security-auto-configuration-because-it-appears-that-security-is-already-configured/317757 "2022-11-02T02:44:02Z")

</div>

I got token from already running master node with following command bin\\elasticsearch-create-enrollment-token -s node I ran other node that I've never strated bin\\elasticsearch --enrollment-token \<enrollment-token\> b…

---

## [How to upgrade to a specific version](https://discuss.elastic.co/t/how-to-upgrade-to-a-specific-version/203575)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 7:09am UTC](https://discuss.elastic.co/t/how-to-upgrade-to-a-specific-version/203575 "2019-10-16T07:09:55Z")

</div>

Hi all, I am currently on version 7.1.1, but I wish to upgrade it to 7.3.2. Instead of upgrading to the latest version 7.4.0, how can I upgrade using the repository to this 7.3.2 ?

---

## [Beginner: Trouble getting started](https://discuss.elastic.co/t/beginner-trouble-getting-started/282617)

<div class="topic-metadata">

**Author:** [@jmsbooth](https://discuss.elastic.co/u/jmsbooth)\
**Replies:** 7\
**Last updated:** [August 27, 2021, 11:33pm UTC](https://discuss.elastic.co/t/beginner-trouble-getting-started/282617 "2021-08-27T23:33:21Z")

</div>

Deployed elasticsearch to an Ubuntu VM within Azure cloud. Edited the elasticsearch.yaml for the port, cluster.initial\_master\_nodes, and the network host: \[network.host\](https://network.host/): "localhost" http.port: 92…

---

## [Amazon SES 535 Authentication Credentials Invalid](https://discuss.elastic.co/t/amazon-ses-535-authentication-credentials-invalid/56561)

<div class="topic-metadata">

**Author:** [@iGaskin](https://discuss.elastic.co/u/iGaskin)\
**Replies:** 3\
**Last updated:** [July 28, 2016, 3:29pm UTC](https://discuss.elastic.co/t/amazon-ses-535-authentication-credentials-invalid/56561 "2016-07-28T15:29:19Z")

</div>

I've created my watcher with the following watch config: { "trigger": { "schedule": { "interval": "10s" } }, "input": { "simple": { "color": "red", "status": "error", "count"…

---

## [Duplicate Message sent?](https://discuss.elastic.co/t/duplicate-message-sent/25494)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 3\
**Last updated:** [July 15, 2015, 9:50am UTC](https://discuss.elastic.co/t/duplicate-message-sent/25494 "2015-07-15T09:50:03Z")

</div>

Hi All, there are 5 hosts (logstash-forwarder \> redis \> logstash-center \> elasticsearch \< Kibana), when I push an message to logstash-forwarder, redis always receives 2 messages, I try to delete the keys of list of red…

---

## [Disabling Replica Shard Check](https://discuss.elastic.co/t/disabling-replica-shard-check/105023)

<div class="topic-metadata">

**Author:** [@jmukhtar](https://discuss.elastic.co/u/jmukhtar)\
**Replies:** 4\
**Last updated:** [October 26, 2017, 9:37am UTC](https://discuss.elastic.co/t/disabling-replica-shard-check/105023 "2017-10-26T09:37:32Z")

</div>

I am running a single node ES with no replica's and monitoring it via icinga/nagios. I have set the replica shards to 0 via the curl command curl -XPUT 'localhost:9200/\_settings?pretty' -H 'Content-Type: application/jso…

---

## [LogStash-Outputs -ElasticSearch - URI is not valid - host is not specified](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-uri-is-not-valid-host-is-not-specified/222664)

<div class="topic-metadata">

**Author:** [@Austin\_Lai](https://discuss.elastic.co/u/Austin_Lai)\
**Replies:** 1\
**Last updated:** [March 9, 2020, 2:16pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-uri-is-not-valid-host-is-not-specified/222664 "2020-03-09T14:16:33Z")

</div>

Anyone solved the issue of below error message?? logstash7.6.1 | \[2020-03-08T06:49:05,409\]\[DEBUG\]\[logstash.plugins.registry\] On demand adding plugin to the registry {:name=\>"elasticsearch", :type=\>"output", :class=\>LogSt…

---

## [How can I change the timezone on Kibana?](https://discuss.elastic.co/t/how-can-i-change-the-timezone-on-kibana/348172)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 2\
**Last updated:** [November 28, 2023, 7:08pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-timezone-on-kibana/348172 "2023-11-28T19:08:18Z")

</div>

I've noticed that my Kibana has a 3hours difference with my actual time. I've been looking into similar cases but so far changing the timezone in the Advanced Settings hasn't worked yet. What other ways could I try to ac…

[Previous page](https://discuss.elastic.co/top.md?page=425&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=427&per_page=50&period=all)
