# Top **URL:** https://discuss.elastic.co/top.md?page=429&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 430 --- ## [How to ship custom log files to elastic?](https://discuss.elastic.co/t/how-to-ship-custom-log-files-to-elastic/210348)
**Author:** [@tortillla](https://discuss.elastic.co/u/tortillla)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 4:58pm UTC](https://discuss.elastic.co/t/how-to-ship-custom-log-files-to-elastic/210348 "2019-12-06T16:58:01Z")
I am trying to ship custom log files generated by my own application. The format of the log files follows syslog. I tried to find out how to ship custom log files (and not syslog or nginx, etc.), but didn't succeed. Any… --- ## [How to use Metricbeat Docker module in Docker Swarm](https://discuss.elastic.co/t/how-to-use-metricbeat-docker-module-in-docker-swarm/103019)
**Author:** [@muhammadrehansaeed](https://discuss.elastic.co/u/muhammadrehansaeed)\ **Replies:** 5\ **Last updated:** [October 9, 2017, 5:39pm UTC](https://discuss.elastic.co/t/how-to-use-metricbeat-docker-module-in-docker-swarm/103019 "2017-10-09T17:39:34Z")
I'm using Metricbeat in my Docker Swarm and have managed to get the system model pushing CPU and memory metrics to Elastic Search. I can then see the metrics in the sample dashboard in Kibana. However, I can't seem to ge… --- ## [Can mapping for index be updated for all types in one command](https://discuss.elastic.co/t/can-mapping-for-index-be-updated-for-all-types-in-one-command/55665)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 4\ **Last updated:** [July 18, 2016, 3:00pm UTC](https://discuss.elastic.co/t/can-mapping-for-index-be-updated-for-all-types-in-one-command/55665 "2016-07-18T15:00:47Z")
I got another question on related subject - but this seems like a different question - could maps for multiple types in one index be updated with one command? if I put: curl -X POST 'localhost:9200/testmaps/\_mapping?ig… --- ## [Unexpected read i/o on es nodes](https://discuss.elastic.co/t/unexpected-read-i-o-on-es-nodes/28002)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 5\ **Last updated:** [August 28, 2015, 1:30pm UTC](https://discuss.elastic.co/t/unexpected-read-i-o-on-es-nodes/28002 "2015-08-28T13:30:12Z")
hey, over the past few days i encountered a strange behaviour with one of our ES nodes. Although only indexing is running on this nodes and no queries are executed, the server still have quite high (~45mb/s) read i/o´s.… --- ## [Home Lab/Network ELK Stack Hardware Requirements](https://discuss.elastic.co/t/home-lab-network-elk-stack-hardware-requirements/97990)
**Author:** [@NubaScuba](https://discuss.elastic.co/u/NubaScuba)\ **Replies:** 3\ **Last updated:** [August 23, 2017, 3:00am UTC](https://discuss.elastic.co/t/home-lab-network-elk-stack-hardware-requirements/97990 "2017-08-23T03:00:42Z")
Hi All, Brand new to to the Elk Stack and I’ve been reading/lurking through lots of different stuff and my brain is getting fried as i can’t seem to find information specific enough to a home lab. Any information would … --- ## [Delete dashboard and all of its contents through kibana API](https://discuss.elastic.co/t/delete-dashboard-and-all-of-its-contents-through-kibana-api/221815)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 1\ **Last updated:** [March 17, 2020, 5:45am UTC](https://discuss.elastic.co/t/delete-dashboard-and-all-of-its-contents-through-kibana-api/221815 "2020-03-17T05:45:26Z")
Hi, Is there any way to delete a dashboard and all of its contents (index, visualizations etc) through kibana API? Also is there any way to delete all saved objects through kibana (or Elasticsearch) API? Thank you in … --- ## [How to get the inner hits of a nested query ? (JAVA API version 5.5)](https://discuss.elastic.co/t/how-to-get-the-inner-hits-of-a-nested-query-java-api-version-5-5/100146)
**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 6:38pm UTC](https://discuss.elastic.co/t/how-to-get-the-inner-hits-of-a-nested-query-java-api-version-5-5/100146 "2017-09-12T18:38:38Z")
Hi, I was wondering How to get the inner hits of a nested query? SearchResponse response = client.prepareSearch("trace-index2") .setTypes("trace-log2") .setSearchType(SearchType.DFS\_QUE… --- ## [Use of text fields in Visualizations](https://discuss.elastic.co/t/use-of-text-fields-in-visualizations/218042)
**Author:** [@Denilson\_Rodrigues](https://discuss.elastic.co/u/Denilson_Rodrigues)\ **Replies:** 1\ **Last updated:** [February 5, 2020, 6:52pm UTC](https://discuss.elastic.co/t/use-of-text-fields-in-visualizations/218042 "2020-02-05T18:52:22Z")
According to this thread, and this docs , it's not possible to use text fields in visualize, because is not a agreggable field. En my environment a have a visuzation that is using a text field, and i can clone that to w… --- ## [Queries on left join on a single index in elasticsearch](https://discuss.elastic.co/t/queries-on-left-join-on-a-single-index-in-elasticsearch/162496)
**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\ **Replies:** 7\ **Last updated:** [January 2, 2019, 10:05am UTC](https://discuss.elastic.co/t/queries-on-left-join-on-a-single-index-in-elasticsearch/162496 "2019-01-02T10:05:06Z")
Hello, Is it possible to use left join on single index. Ex; i have a table Sample, loaded into elasticsearch with index name as index\_sample. So, i had a query left join applied to same table Sample, can i frame quer… --- ## [Webhooks for Watcher Actions](https://discuss.elastic.co/t/webhooks-for-watcher-actions/89407)
**Author:** [@christiannwamba](https://discuss.elastic.co/u/christiannwamba)\ **Replies:** 7\ **Last updated:** [June 16, 2017, 9:53am UTC](https://discuss.elastic.co/t/webhooks-for-watcher-actions/89407 "2017-06-16T09:53:52Z")
Hi! I am trying to create a watcher action webhook but I keep getting invalid character in host name error for the following configuration: "actions" : { "log\_error" : { "logging" : { "text" : "Found {{ctx.payl… --- ## [Metricbeat to Logstash on a remote server not working](https://discuss.elastic.co/t/metricbeat-to-logstash-on-a-remote-server-not-working/97904)
**Author:** [@Syed\_Washfi\_Ahmad](https://discuss.elastic.co/u/Syed_Washfi_Ahmad)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 12:31pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-on-a-remote-server-not-working/97904 "2017-08-22T12:31:47Z")
I am new to elastic stack . I am trying to send metrics from one pc to another remote server using Metricbeat and logstash. Below are my configuration files, metricbeat.yml\*\*\*\*\* metricbeat.modules: #-----------------… --- ## [Issue with TSVB - no data to display](https://discuss.elastic.co/t/issue-with-tsvb-no-data-to-display/216983)
**Author:** [@vmitri](https://discuss.elastic.co/u/vmitri)\ **Replies:** 6\ **Last updated:** [February 12, 2020, 8:31pm UTC](https://discuss.elastic.co/t/issue-with-tsvb-no-data-to-display/216983 "2020-02-12T20:31:40Z")
Hello, i'm new to ElasticStack and this forum as well and i decided to ask here for help with this strange issue i'm getting while using the visual builder. I'm using Kibana 7.4.1, when i try to sort by ascending/descend… --- ## [Using port 443 to access kibanan (solution)](https://discuss.elastic.co/t/using-port-443-to-access-kibanan-solution/299317)
**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\ **Replies:** 0\ **Last updated:** [March 10, 2022, 10:11am UTC](https://discuss.elastic.co/t/using-port-443-to-access-kibanan-solution/299317 "2022-03-10T10:11:53Z")
Continuing the discussion from How to use port 443 to access Kibana. legacy-multitenancy error: sorry for the delay in my answer. solution setcap 'CAP\_NET\_BIND\_SERVICE=+eip' /usr/share/kibana/node/bin/node then ch… --- ## [Filebeat will output dumplication when logrotate happened](https://discuss.elastic.co/t/filebeat-will-output-dumplication-when-logrotate-happened/60799)
**Author:** [@haha](https://discuss.elastic.co/u/haha)\ **Replies:** 8\ **Last updated:** [September 20, 2016, 11:52am UTC](https://discuss.elastic.co/t/filebeat-will-output-dumplication-when-logrotate-happened/60799 "2016-09-20T11:52:26Z")
Hi, when I use filebeat to collect the log data. I found that the output file have many dumplications of a log entry. The log data is generated by a python script. Every log entry has a unique number and every 300 entrie… --- ## [Import rules from public detection rules repo](https://discuss.elastic.co/t/import-rules-from-public-detection-rules-repo/245344)
**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\ **Replies:** 2\ **Last updated:** [August 18, 2020, 7:39pm UTC](https://discuss.elastic.co/t/import-rules-from-public-detection-rules-repo/245344 "2020-08-18T19:39:32Z")
Hi I want to import new rules from the repo but the rule's format is json or toml but SIEM only accepts ndjson files. should i manually convert them? is there a tool you recommend? --- ## [How to create sub index using elastic search?](https://discuss.elastic.co/t/how-to-create-sub-index-using-elastic-search/4847)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 3\ **Last updated:** [July 13, 2011, 5:31pm UTC](https://discuss.elastic.co/t/how-to-create-sub-index-using-elastic-search/4847 "2011-07-13T17:31:42Z")
Hi All I have a situation where i want to create sub index of main index .Is it possible in elastic search? if yes,then please help me. Thanks --- ## [\[Solved\] Elasticsearch not accessible over internet through ip addresss](https://discuss.elastic.co/t/solved-elasticsearch-not-accessible-over-internet-through-ip-addresss/55521)
**Author:** [@VVasanth](https://discuss.elastic.co/u/VVasanth)\ **Replies:** 4\ **Last updated:** [July 21, 2016, 8:52am UTC](https://discuss.elastic.co/t/solved-elasticsearch-not-accessible-over-internet-through-ip-addresss/55521 "2016-07-21T08:52:43Z")
Hi, We are facing issues while accessing elasticsearch over ip address on internet in AWS Windows environment. Could you please help me resolve this issue? I have tried various options of modifying network.host par… --- ## [Solutions for master timeouts while creating indices](https://discuss.elastic.co/t/solutions-for-master-timeouts-while-creating-indices/174367)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 5\ **Last updated:** [March 29, 2019, 6:01am UTC](https://discuss.elastic.co/t/solutions-for-master-timeouts-while-creating-indices/174367 "2019-03-29T06:01:53Z")
I have read so many threads for ProcessClusterEventTimeoutException timeouts. We are facing the same while creating an index. Based on my understanding, the real issue is too many updates to cluster state causing this ti… --- ## [Warning Courier Fetch: shards failed](https://discuss.elastic.co/t/warning-courier-fetch-shards-failed/76923)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 6\ **Last updated:** [March 4, 2017, 9:47pm UTC](https://discuss.elastic.co/t/warning-courier-fetch-shards-failed/76923 "2017-03-04T21:47:15Z")
Hi All, I am seeing this warning in Kibana 5 with ES 5.0 installed. What can be the reason for the failure and how to fix it. -- Niraj --- ## [Metricbeat Failed to connect EOF](https://discuss.elastic.co/t/metricbeat-failed-to-connect-eof/210939)
**Author:** [@elkuser2](https://discuss.elastic.co/u/elkuser2)\ **Replies:** 8\ **Last updated:** [December 12, 2019, 2:51pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-connect-eof/210939 "2019-12-12T14:51:47Z")
I am trying to run metricbeat, but no data is showing up in the GUI and I keep getting the following error in the metricbeat logs: 2019-12-06T20:48:49.394Z ERROR pipeline/output.go:100 Failed to connect to bac… --- ## [How to parse mail log from syslog](https://discuss.elastic.co/t/how-to-parse-mail-log-from-syslog/124287)
**Author:** [@Pinno\_Lin](https://discuss.elastic.co/u/Pinno_Lin)\ **Replies:** 7\ **Last updated:** [March 20, 2018, 6:52am UTC](https://discuss.elastic.co/t/how-to-parse-mail-log-from-syslog/124287 "2018-03-20T06:52:08Z")
Hi, I have a .TXT file abut mail log from syslog, i try to parse log with grok, but failed. the source row: 2018-03-14 13:56:17 local0.info ms1.zootek.com.tw CEF:0|Cellopoint|CelloOS|4.1.5|FILTER\_LOG|Filter by mail pro… --- ## [Mutate add\_field value null](https://discuss.elastic.co/t/mutate-add-field-value-null/42296)
**Author:** [@rss87](https://discuss.elastic.co/u/rss87)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 12:01pm UTC](https://discuss.elastic.co/t/mutate-add-field-value-null/42296 "2016-11-17T12:01:44Z")
Hi, Is possible to add a field with value null, for example something like this: Mutate{ add\_field{"field1"=\> null}} I tried this, but added null like a string Thanks!! --- ## [Changing the field to not\_Analyzed(Noob)](https://discuss.elastic.co/t/changing-the-field-to-not-analyzed-noob/25540)
**Author:** [@avc](https://discuss.elastic.co/u/avc)\ **Replies:** 6\ **Last updated:** [December 6, 2016, 8:22am UTC](https://discuss.elastic.co/t/changing-the-field-to-not-analyzed-noob/25540 "2016-12-06T08:22:21Z")
Hi, I load a file to elasticsearch from Logstash. input { file { path =\> \["/home/user/iops.csv"\] start\_position =\> "beginning" } } filter { csv { separator =\> "," … --- ## [Data table visualization with custom aggregation query](https://discuss.elastic.co/t/data-table-visualization-with-custom-aggregation-query/138637)
**Author:** [@hjSohn](https://discuss.elastic.co/u/hjSohn)\ **Replies:** 3\ **Last updated:** [July 9, 2018, 7:49am UTC](https://discuss.elastic.co/t/data-table-visualization-with-custom-aggregation-query/138637 "2018-07-09T07:49:34Z")
Hello Team, I am using ES to check chatbot's response success rate. (document contains message and tag) I want to visualize that total count : the number of documents that contain @send in customTags keyword field fa… --- ## [FATAL \[index\_not\_found\_exception\] no such index \[.kibana\_task\_manager\], with { resource.type="index\_or\_alias" & resource.id=".kibana\_task\_manager" & index\_uuid="\_na\_" & index=".kibana\_task\_manager" }](https://discuss.elastic.co/t/fatal-index-not-found-exception-no-such-index-kibana-task-manager-with-resource-type-index-or-alias-resource-id-kibana-task-manager-index-uuid-na-index-kibana-task-manager/253676)
**Author:** [@Priya\_Zingade](https://discuss.elastic.co/u/Priya_Zingade)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/fatal-index-not-found-exception-no-such-index-kibana-task-manager-with-resource-type-index-or-alias-resource-id-kibana-task-manager-index-uuid-na-index-kibana-task-manager/253676 "2020-11-05T07:20:43Z")
Hi am facing this error FATAL \[index\_not\_found\_exception\] no such index \[.kibana\_task\_manager\], with { resource.type="index\_or\_alias" & resource.id=".kibana\_task\_manager" & index\_uuid="na" & index=".kibana\_task\_manager… --- ## [Elasticsearch opening way too many (200K) Pipes, FDs](https://discuss.elastic.co/t/elasticsearch-opening-way-too-many-200k-pipes-fds/105817)
**Author:** [@rajeev](https://discuss.elastic.co/u/rajeev)\ **Replies:** 8\ **Last updated:** [November 1, 2017, 1:13am UTC](https://discuss.elastic.co/t/elasticsearch-opening-way-too-many-200k-pipes-fds/105817 "2017-11-01T01:13:58Z")
We have elasticsearch running in our product, its not a cluster configuration. We have noticed despite maximum FD limit set to 65536, it has opened too many Pipes/ root\]# lsof | grep -i elasticsearch | wc -l 204875 ro… --- ## [Using a regex in the custom field of Filebeat](https://discuss.elastic.co/t/using-a-regex-in-the-custom-field-of-filebeat/126252)
**Author:** [@gvdm90](https://discuss.elastic.co/u/gvdm90)\ **Replies:** 5\ **Last updated:** [March 30, 2018, 4:04pm UTC](https://discuss.elastic.co/t/using-a-regex-in-the-custom-field-of-filebeat/126252 "2018-03-30T16:04:22Z")
Here I can read that when configuring a prospect I can add a custom field to the data, which later I can use for filtering. So for example I can write - type: log paths: - /my/path/app1.csv fields: app\_name… --- ## [Logstash 7.x on raspberry pi 4](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348)
**Author:** [@wiznil](https://discuss.elastic.co/u/wiznil)\ **Replies:** 3\ **Last updated:** [November 18, 2019, 2:49pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348 "2019-11-18T14:49:35Z")
Hi all, never had any success in getting logstash 7.x installed on raspberry pi 4, is anyone able to get it running? Below are the steps that I have taken: root@wks:/# uname -a Linux home-wks 4.19.57-v7l+ #1244 SMP T… --- ## [Kibana Visualaztion Data Table 'Missing' values](https://discuss.elastic.co/t/kibana-visualaztion-data-table-missing-values/155957)
**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\ **Replies:** 4\ **Last updated:** [November 8, 2018, 9:41pm UTC](https://discuss.elastic.co/t/kibana-visualaztion-data-table-missing-values/155957 "2018-11-08T21:41:39Z")
Hi, I'm trying to create a table that shows the breakdown of user with the number of login attempts from a workstation. When I initially ran this, I was seeing a number lower than expected. I checked the Show Missing fie… --- ## [\[Help!\] Number of indexes and shards per node](https://discuss.elastic.co/t/help-number-of-indexes-and-shards-per-node/81561)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 8\ **Last updated:** [April 7, 2017, 6:06am UTC](https://discuss.elastic.co/t/help-number-of-indexes-and-shards-per-node/81561 "2017-04-07T06:06:49Z")
Hello I appreciate if I could get advice with number of indices. I have 3 elasticsearch nodes with below spec for each node. 8 core 64 GB (30 GB heap) 48TB (RAID 1+0) Our requirement is 60GB/day , with avg 50… --- ## [Missing Geo\_point field in geohash aggregate -! Kibana 4.5](https://discuss.elastic.co/t/missing-geo-point-field-in-geohash-aggregate-kibana-4-5/68761)
**Author:** [@Bob\_Metelsky](https://discuss.elastic.co/u/Bob_Metelsky)\ **Replies:** 7\ **Last updated:** [December 13, 2016, 5:05am UTC](https://discuss.elastic.co/t/missing-geo-point-field-in-geohash-aggregate-kibana-4-5/68761 "2016-12-13T05:05:29Z")
Guys, having a heck of a time creating a simple tile map all files and configuration are here https://sites.google.com/site/developtroubleshooting/elastic-geoip Im having a presentation tomorrow and I need to get a t… --- ## [APM Server transport error (ECONNREFUSED): connect ECONNREFUSED 127.0.0.1:8200](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused-connect-econnrefused-127-0-0-1-8200/198693)
**Author:** [@Tje](https://discuss.elastic.co/u/Tje)\ **Replies:** 3\ **Last updated:** [September 10, 2019, 8:00am UTC](https://discuss.elastic.co/t/apm-server-transport-error-econnrefused-connect-econnrefused-127-0-0-1-8200/198693 "2019-09-10T08:00:22Z")
I have installed apm-server and setup apm-server.yml as bellow for nodeJs Agent output.elasticsearch: hosts: \["localhost:9200"\] username: "elastic" password: "elastic" then run service apm-server start . config… --- ## [Logstash giving error "Elasticsearch Unreachable](https://discuss.elastic.co/t/logstash-giving-error-elasticsearch-unreachable/313515)
**Author:** [@Amit\_sah](https://discuss.elastic.co/u/Amit_sah)\ **Replies:** 4\ **Last updated:** [September 2, 2022, 9:34am UTC](https://discuss.elastic.co/t/logstash-giving-error-elasticsearch-unreachable/313515 "2022-09-02T09:34:33Z")
\[2022-09-02T13:20:38,199\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"http://elastic:xxxxxx@localhost:9200/", :exception=\>LogStash::Outputs… --- ## [Kibana - \_score is always null](https://discuss.elastic.co/t/kibana--score-is-always-null/57912)
**Author:** [@tharris](https://discuss.elastic.co/u/tharris)\ **Replies:** 4\ **Last updated:** [August 12, 2016, 9:31pm UTC](https://discuss.elastic.co/t/kibana--score-is-always-null/57912 "2016-08-12T21:31:53Z")
Apologies if this would be better placed in the Elasticsearch forum. Whenever I do a search on my index in Kibana the score always returns as null so the results are just sorted by the timestamp. I'm sure the scoring w… --- ## [Filebeat performance tuning](https://discuss.elastic.co/t/filebeat-performance-tuning/69456)
**Author:** [@ashwani](https://discuss.elastic.co/u/ashwani)\ **Replies:** 3\ **Last updated:** [December 23, 2016, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-performance-tuning/69456 "2016-12-23T14:45:09Z")
Hi, We recently upgraded filebeat (1.0.1 to 5.0.1), logstash (2.1.1 to 2.4.0) versions on our rpm based 8 core cpu with 14 GB RAM in our filebeat -\> logstash -\> Elastic Search -\> Kibana application. All configurations ar… --- ## [Getting this error - java.util.concurrent.CancellationException: Request execution cancelled](https://discuss.elastic.co/t/getting-this-error-java-util-concurrent-cancellationexception-request-execution-cancelled/350579)
**Author:** [@mr.fantastic](https://discuss.elastic.co/u/mr.fantastic)\ **Replies:** 2\ **Last updated:** [January 9, 2024, 7:09am UTC](https://discuss.elastic.co/t/getting-this-error-java-util-concurrent-cancellationexception-request-execution-cancelled/350579 "2024-01-09T07:09:58Z")
I am facing this issue, where my app tried to send search requests to es and encounters this issue. my client config is - \> RestClientBuilder restClientBuilder = RestClient.builder(new HttpHost(elasticSearchProps.getHo… --- ## [Wrong timestamp on kibana](https://discuss.elastic.co/t/wrong-timestamp-on-kibana/249979)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 6\ **Last updated:** [October 1, 2020, 1:35pm UTC](https://discuss.elastic.co/t/wrong-timestamp-on-kibana/249979 "2020-10-01T13:35:01Z")
Hi , guys. I can not properly set time on my kibana web. As you can see on picture bellow , timestamp on kibana and timestamp on elasticsearch returned document has a 3 hours difference. Other: Both , kiabana and ela… --- ## [Canvas data filtering](https://discuss.elastic.co/t/canvas-data-filtering/165292)
**Author:** [@tomhel](https://discuss.elastic.co/u/tomhel)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 9:50pm UTC](https://discuss.elastic.co/t/canvas-data-filtering/165292 "2019-01-23T21:50:11Z")
My use case for Canvas is all about counting documents and visualizing how many documents that meet different criteria. In almost all cases, I want to count the total number of documents that match some criteria, and sho… --- ## [How to implement to store Spring-boot embedded tomcat access logs?](https://discuss.elastic.co/t/how-to-implement-to-store-spring-boot-embedded-tomcat-access-logs/90562)
**Author:** [@Juneyoung\_Oh](https://discuss.elastic.co/u/Juneyoung_Oh)\ **Replies:** 3\ **Last updated:** [June 27, 2017, 10:19am UTC](https://discuss.elastic.co/t/how-to-implement-to-store-spring-boot-embedded-tomcat-access-logs/90562 "2017-06-27T10:19:33Z")
Hi. I am trying to store spring boot tomcat access log to logstash. So I implement org.springframework.boot.context.embedded.EmbeddedServletContainerCustomizer like below. It works fine, I can see the access-\* logs in K… --- ## [There is a problem with this saved object A field associated with this object no longer exists in the index pattern. If you know what this error means, go ahead and fix it — otherwise click the delete button above](https://discuss.elastic.co/t/there-is-a-problem-with-this-saved-object-a-field-associated-with-this-object-no-longer-exists-in-the-index-pattern-if-you-know-what-this-error-means-go-ahead-and-fix-it-otherwise-click-the-delete-button-above/187175)
**Author:** [@Analyst](https://discuss.elastic.co/u/Analyst)\ **Replies:** 6\ **Last updated:** [June 24, 2019, 7:32pm UTC](https://discuss.elastic.co/t/there-is-a-problem-with-this-saved-object-a-field-associated-with-this-object-no-longer-exists-in-the-index-pattern-if-you-know-what-this-error-means-go-ahead-and-fix-it-otherwise-click-the-delete-button-above/187175 "2019-06-24T19:32:45Z")
Hi Team, I recently imported a saved object into the kibana, but some of the visualizations are working fine but some of them are throwing the above error. I see that there are few posts on thsi topic but i having troub… --- ## [{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/188868)
**Author:** [@pramesh1](https://discuss.elastic.co/u/pramesh1)\ **Replies:** 1\ **Last updated:** [July 12, 2019, 7:19pm UTC](https://discuss.elastic.co/t/statuscode-500-error-internal-server-error-message-an-internal-server-error-occurred/188868 "2019-07-12T19:19:25Z")
I getting below errors. any idea. ? I am using elk OSS 7.1.1 with own-home and readonlyrest plugin. plz help {"type":"log","@timestamp":"2019-07-04T08:59:30Z","tags":\["debug","legacy- proxy"\],"pid":14865,"message":… --- ## [Mapping es.mapping.id](https://discuss.elastic.co/t/mapping-es-mapping-id/477)
**Author:** [@CG76](https://discuss.elastic.co/u/CG76)\ **Replies:** 1\ **Last updated:** [May 12, 2015, 9:41am UTC](https://discuss.elastic.co/t/mapping-es-mapping-id/477 "2015-05-12T09:41:11Z")
Hi all, I tried to declare one of my json fields (mmsi) as es.mapping.id in EsBolt but it crashes with EsHadoopIllegalArgumentException. How do I resolve the problem? My stack trace is as follows: java.lang.RuntimeEx… --- ## [KQL in ES query?](https://discuss.elastic.co/t/kql-in-es-query/227407)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 10:16am UTC](https://discuss.elastic.co/t/kql-in-es-query/227407 "2020-04-10T10:16:29Z")
Hi, is possible to use KQL in ES query? My problem is that I have just basic license, no alerts, and this is my personal project so no option to buy better license. I can do PHP/Bash script but problem is about query… K… --- ## [Failed to convert the data type from string to float](https://discuss.elastic.co/t/failed-to-convert-the-data-type-from-string-to-float/126175)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 3\ **Last updated:** [March 30, 2018, 5:40am UTC](https://discuss.elastic.co/t/failed-to-convert-the-data-type-from-string-to-float/126175 "2018-03-30T05:40:15Z")
Hi experts, I have met an data type converting issue. My requirement is parse a xml file ------ done collect some node information which i need ------ done add a field to be used to retrieve it ------ done convert da… --- ## ["type":"parse\_exception","reason":"request body is required"},"status":400}](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664)
**Author:** [@PADMAVATHI\_GUNTURU](https://discuss.elastic.co/u/PADMAVATHI_GUNTURU)\ **Replies:** 4\ **Last updated:** [November 9, 2020, 7:01am UTC](https://discuss.elastic.co/t/type-parse-exception-reason-request-body-is-required-status-400/254664 "2020-11-09T07:01:18Z")
When using the \_bulk API, curl command, I'm seeing this error. I have given 3 JSON files. 2 files were worked, one file is thrown this error. I don't understand the reason here. The 3rd file input data is like the below … --- ## [Searching on UUIDs](https://discuss.elastic.co/t/searching-on-uuids/10199)
**Author:** [@Dennis](https://discuss.elastic.co/u/Dennis)\ **Replies:** 1\ **Last updated:** [December 29, 2012, 4:53pm UTC](https://discuss.elastic.co/t/searching-on-uuids/10199 "2012-12-29T16:53:11Z")
UUIDs are basically 16 byte long byte fields. They can be displayed as 128 0s and 1s bits, two loooooong signed decimal (long) integers, a 32 character hexidecimal number, or 24 character base 58 number. I'd lik… --- ## [Inconsistent completion suggester results size](https://discuss.elastic.co/t/inconsistent-completion-suggester-results-size/280807)
**Author:** [@abido](https://discuss.elastic.co/u/abido)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 12:05pm UTC](https://discuss.elastic.co/t/inconsistent-completion-suggester-results-size/280807 "2021-08-09T12:05:09Z")
Hello, I am getting weird behaviour with the number of results returned by the Completion Suggester. I have the following request body for example: "suggest": { "title": { "prefix": "ja", "completion": { … --- ## [Filebeat and Metricbeats setup fails with Elasticsearch and Kibana 7.0 -Failed to import dashboard: Failed to load directory](https://discuss.elastic.co/t/filebeat-and-metricbeats-setup-fails-with-elasticsearch-and-kibana-7-0-failed-to-import-dashboard-failed-to-load-directory/177068)
**Author:** [@bradfordaemorton](https://discuss.elastic.co/u/bradfordaemorton)\ **Replies:** 2\ **Last updated:** [April 22, 2019, 2:44am UTC](https://discuss.elastic.co/t/filebeat-and-metricbeats-setup-fails-with-elasticsearch-and-kibana-7-0-failed-to-import-dashboard-failed-to-load-directory/177068 "2019-04-22T02:44:11Z")
Running sudo metricbeat setup and sudo filebeat setup and get the following error belows. root@ubuntu-s-1vcpu-2gb-sfo2-01:/etc/metricbeat/modules.d# sudo metricbeat setup Index setup complete. Loading dashboards (Kiba… --- ## [How to fetch IP address of using winlogbeat?](https://discuss.elastic.co/t/how-to-fetch-ip-address-of-using-winlogbeat/113409)
**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\ **Replies:** 8\ **Last updated:** [January 5, 2018, 5:40pm UTC](https://discuss.elastic.co/t/how-to-fetch-ip-address-of-using-winlogbeat/113409 "2018-01-05T17:40:19Z")
Hi, I installed winlogbeat on host but i am only able to see hostname of the device not source ip. Is there any configuration changes required to get source ip ? --- ## [Setting passwords for all built-in users for x-pack](https://discuss.elastic.co/t/setting-passwords-for-all-built-in-users-for-x-pack/118671)
**Author:** [@t.d.garland100](https://discuss.elastic.co/u/t.d.garland100)\ **Replies:** 4\ **Last updated:** [February 8, 2018, 11:47pm UTC](https://discuss.elastic.co/t/setting-passwords-for-all-built-in-users-for-x-pack/118671 "2018-02-08T23:47:20Z")
After running the following code in the following directory: /usr/share/elasticsearch I ran the following code: sudo bin/x-pack/setup-passwords interactive I get the following message: SSL connection to https://127.… [Previous page](https://discuss.elastic.co/top.md?page=428&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=430&per_page=50&period=all)