# Top

**URL:** https://discuss.elastic.co/top.md?page=433&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 434

---

## [Drop events older than three days](https://discuss.elastic.co/t/drop-events-older-than-three-days/83423)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 5\
**Last updated:** [April 25, 2017, 7:16pm UTC](https://discuss.elastic.co/t/drop-events-older-than-three-days/83423 "2017-04-25T19:16:08Z")

</div>

I'm using Logstash v5.3 on Ubuntu 14.04. I'm looking to drop events sent to logstash that have a timestamp which is three days old or more. I'm parsing the date off the events and using the 'date' plugin to index of…

---

## [Kibana 7.0.0 - FATAL ValidationError: child "elasticsearch" fails because \["url" is not allowed\]](https://discuss.elastic.co/t/kibana-7-0-0-fatal-validationerror-child-elasticsearch-fails-because-url-is-not-allowed/178773)

<div class="topic-metadata">

**Author:** [@nvelumani](https://discuss.elastic.co/u/nvelumani)\
**Replies:** 2\
**Last updated:** [April 28, 2019, 3:33pm UTC](https://discuss.elastic.co/t/kibana-7-0-0-fatal-validationerror-child-elasticsearch-fails-because-url-is-not-allowed/178773 "2019-04-28T15:33:20Z")

</div>

Hello Team, I am trying to install elasticserach and kibana 7.0.0 on a new machine with Ubuntu server 18.04 on it, My elasticsearch is running fine which I was able to confirm by running "curl -X GET "192.168.x.xxx:920…

---

## [Logstash doesn't read config from /etc/logstash/conf.d/](https://discuss.elastic.co/t/logstash-doesnt-read-config-from-etc-logstash-conf-d/60161)

<div class="topic-metadata">

**Author:** [@sgm](https://discuss.elastic.co/u/sgm)\
**Replies:** 3\
**Last updated:** [September 12, 2016, 11:47am UTC](https://discuss.elastic.co/t/logstash-doesnt-read-config-from-etc-logstash-conf-d/60161 "2016-09-12T11:47:12Z")

</div>

Hello. Sorry for my english. I installed logstash-2.4.0\_all.deb on ubuntu server 16.04.1. I wrote in /etc/logstash/conf.d/ex.conf: input { tcp { type =\> "eventlog" port =\> 3515 codec =\> …

---

## [Kibana Query Language - @timestamp](https://discuss.elastic.co/t/kibana-query-language-timestamp/229403)

<div class="topic-metadata">

**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\
**Replies:** 5\
**Last updated:** [April 23, 2020, 3:00pm UTC](https://discuss.elastic.co/t/kibana-query-language-timestamp/229403 "2020-04-23T15:00:11Z")

</div>

Hello there! I'm using the filter aggregation and what I want to visualize is data when a specific field has a specific value AND timestamp:now-1d. In other words I want to visualize some specific data with an offset o…

---

## [S3 output requires PutObject on \* Resources](https://discuss.elastic.co/t/s3-output-requires-putobject-on-resources/103457)

<div class="topic-metadata">

**Author:** [@Theodore\_Cowan](https://discuss.elastic.co/u/Theodore_Cowan)\
**Replies:** 6\
**Last updated:** [October 16, 2017, 10:55pm UTC](https://discuss.elastic.co/t/s3-output-requires-putobject-on-resources/103457 "2017-10-16T22:55:48Z")

</div>

Posting this so somebody else may avoid spending hours trying to debug the s3 output plugin. The plugin will throw permissions errors if you do not grant PutObject permissions on bucket resources. \[2017-10-11T02:53:41,…

---

## [Packetbeat data not going from ES to Kibana](https://discuss.elastic.co/t/packetbeat-data-not-going-from-es-to-kibana/28757)

<div class="topic-metadata">

**Author:** [@syn\_](https://discuss.elastic.co/u/syn_)\
**Replies:** 7\
**Last updated:** [December 24, 2015, 8:52am UTC](https://discuss.elastic.co/t/packetbeat-data-not-going-from-es-to-kibana/28757 "2015-12-24T08:52:52Z")

</div>

Hi guys, Not sure if this is the best category, as it may be either an ElasticSearch or Kibana issue, but since I followed the guide found here: https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-gettin…

---

## [Geo\_point - no compatible types](https://discuss.elastic.co/t/geo-point-no-compatible-types/32667)

<div class="topic-metadata">

**Author:** [@schilwan](https://discuss.elastic.co/u/schilwan)\
**Replies:** 4\
**Last updated:** [October 21, 2015, 3:28pm UTC](https://discuss.elastic.co/t/geo-point-no-compatible-types/32667 "2015-10-21T15:28:56Z")

</div>

I am getting the no compatible types message from Kibana and cannot figure out why. I am getting the geo details using logstash as per below geoip { source =\> "ipAddress" target =\> "geometry" database =\> "/etc/logst…

---

## [Mocking Search Results in new Java API](https://discuss.elastic.co/t/mocking-search-results-in-new-java-api/337012)

<div class="topic-metadata">

**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\
**Replies:** 3\
**Last updated:** [July 7, 2023, 9:30pm UTC](https://discuss.elastic.co/t/mocking-search-results-in-new-java-api/337012 "2023-07-07T21:30:45Z")

</div>

Are there any examples of how to mock an Elasticsearch search result for the Java API for unit tests with Mockito? Do you mock the entire search result or individual hits? If I search the Internet for examples I only see…

---

## [How much minimum ram is required for these indicies?](https://discuss.elastic.co/t/how-much-minimum-ram-is-required-for-these-indicies/212969)

<div class="topic-metadata">

**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\
**Replies:** 2\
**Last updated:** [December 25, 2019, 8:46am UTC](https://discuss.elastic.co/t/how-much-minimum-ram-is-required-for-these-indicies/212969 "2019-12-25T08:46:51Z")

</div>

I'm having trouble figuring out how much ram i need per data node to accommodate my indexes. I search in all these indexes at once and i use highlighting when searching so that probably adds to the memory footprint. At…

---

## [Setting up ssl for Windows elasaticsearch, filebeat and kibana](https://discuss.elastic.co/t/setting-up-ssl-for-windows-elasaticsearch-filebeat-and-kibana/113855)

<div class="topic-metadata">

**Author:** [@GSCully](https://discuss.elastic.co/u/GSCully)\
**Replies:** 5\
**Last updated:** [January 17, 2018, 5:49pm UTC](https://discuss.elastic.co/t/setting-up-ssl-for-windows-elasaticsearch-filebeat-and-kibana/113855 "2018-01-17T17:49:26Z")

</div>

Looking for help setting up ssl on kibana to elasticsearch help, Using Windows certificates, how do I go about securing the systems? I can export my root certificate as a cer file or a p7b file, can those be used? I've…

---

## [Logstash install plugin extremely slow?](https://discuss.elastic.co/t/logstash-install-plugin-extremely-slow/50642)

<div class="topic-metadata">

**Author:** [@xdzhou](https://discuss.elastic.co/u/xdzhou)\
**Replies:** 4\
**Last updated:** [April 12, 2017, 6:07pm UTC](https://discuss.elastic.co/t/logstash-install-plugin-extremely-slow/50642 "2017-04-12T18:07:30Z")

</div>

Did anyone experienced the similar issue. When using logstash-plugin to install and uninstall plugins, either online or offline, it becomes extremely slow, mean 10-30 minutes, but somehow it finished successfully. for …

---

## [Creating Dashboard Using Rest API?](https://discuss.elastic.co/t/creating-dashboard-using-rest-api/106467)

<div class="topic-metadata">

**Author:** [@Joeltstephen](https://discuss.elastic.co/u/Joeltstephen)\
**Replies:** 3\
**Last updated:** [November 7, 2017, 10:41pm UTC](https://discuss.elastic.co/t/creating-dashboard-using-rest-api/106467 "2017-11-07T22:41:40Z")

</div>

Is it possible to create Kibana dashboard using rest api ?

---

## [Duplicate logs - logstash-input-s3?](https://discuss.elastic.co/t/duplicate-logs-logstash-input-s3/39231)

<div class="topic-metadata">

**Author:** [@plonka2000](https://discuss.elastic.co/u/plonka2000)\
**Replies:** 8\
**Last updated:** [January 17, 2016, 4:27pm UTC](https://discuss.elastic.co/t/duplicate-logs-logstash-input-s3/39231 "2016-01-17T16:27:32Z")

</div>

Hi all, I'm using LS2.1.1 with ES2.1.1, in AWS, to log various sources within my environment. One of these sources is AWS CloudTrail. I've noticed a strange problem when trying to optimise my elasticsearch cluster, by…

---

## [Transport client ping timeout + no node available exception](https://discuss.elastic.co/t/transport-client-ping-timeout-no-node-available-exception/12435)

<div class="topic-metadata">

**Author:** [@Abhishek\_Sanoujam](https://discuss.elastic.co/u/Abhishek_Sanoujam)\
**Replies:** 8\
**Last updated:** [June 15, 2013, 10:45pm UTC](https://discuss.elastic.co/t/transport-client-ping-timeout-no-node-available-exception/12435 "2013-06-15T22:45:14Z")

</div>

I am using java transport client and it frequently gets no node available exception: Caused by: org.elasticsearch.client.transport.NoNodeAvailableException: No node available at org.elasticsearch.client.tr…

---

## [Elasticsearch and Kibana Url says "your connection to this site is not secure "](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562)

<div class="topic-metadata">

**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\
**Replies:** 7\
**Last updated:** [October 27, 2022, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562 "2022-10-27T04:28:35Z")

</div>

I am running elastic 8.4. From the documentation, it says that the security is automatically enabled and configured. But when I get my elasticsearch running and visit https:localhost:9200 I get the message: Your connect…

---

## [How can i use logstash to process custom log?](https://discuss.elastic.co/t/how-can-i-use-logstash-to-process-custom-log/132694)

<div class="topic-metadata">

**Author:** [@Anilkumar\_Patel](https://discuss.elastic.co/u/Anilkumar_Patel)\
**Replies:** 4\
**Last updated:** [May 22, 2018, 6:53am UTC](https://discuss.elastic.co/t/how-can-i-use-logstash-to-process-custom-log/132694 "2018-05-22T06:53:41Z")

</div>

Hi, I am new to the logstash and elasticsearch and I don't know how to process these below logs. fields in the log file are source, method, date & logmessage. Source : abcd.cs Method : abcd() Date : 15/05/…

---

## [Can we use fileBeat to send jSON logs?](https://discuss.elastic.co/t/can-we-use-filebeat-to-send-json-logs/116563)

<div class="topic-metadata">

**Author:** [@jpereira](https://discuss.elastic.co/u/jpereira)\
**Replies:** 3\
**Last updated:** [January 23, 2018, 10:37pm UTC](https://discuss.elastic.co/t/can-we-use-filebeat-to-send-json-logs/116563 "2018-01-23T22:37:07Z")

</div>

Hi folks, I have some logs on my system that are jSON payload and I would like to know if can I use the "beat" to handle/ship the logs to the ES. e.g: fileBeat can do that? I have tried, but non-success. filebeat.pros…

---

## [Logstash 6.4.x : reading multiple files in conf.d](https://discuss.elastic.co/t/logstash-6-4-x-reading-multiple-files-in-conf-d/149515)

<div class="topic-metadata">

**Author:** [@nonozi](https://discuss.elastic.co/u/nonozi)\
**Replies:** 8\
**Last updated:** [September 22, 2018, 5:17pm UTC](https://discuss.elastic.co/t/logstash-6-4-x-reading-multiple-files-in-conf-d/149515 "2018-09-22T17:17:26Z")

</div>

Hello I encounter a very special problem on a debian 9.5: 1 my conf files are well read in /etc/logstash/conf.d but as soon as there are several, they are no longer taken into account. Example: juste one file iptables…

---

## [Mixed log with json field](https://discuss.elastic.co/t/mixed-log-with-json-field/26688)

<div class="topic-metadata">

**Author:** [@Or\_Cohen](https://discuss.elastic.co/u/Or_Cohen)\
**Replies:** 8\
**Last updated:** [August 16, 2015, 3:12pm UTC](https://discuss.elastic.co/t/mixed-log-with-json-field/26688 "2015-08-16T15:12:23Z")

</div>

Hi, I have a log with mixed fields the first two fields are outsude the json the third one is a json Example: tag : 02:00:00 --\> {"v":"2.59","tagid":"2edfe14540b51a047dc8f66c219c7804","cb":"1665253253","ds":"loading"…

---

## [G1GC In Production with Regard to Consistency](https://discuss.elastic.co/t/g1gc-in-production-with-regard-to-consistency/47561)

<div class="topic-metadata">

**Author:** [@elm](https://discuss.elastic.co/u/elm)\
**Replies:** 4\
**Last updated:** [April 17, 2016, 8:28am UTC](https://discuss.elastic.co/t/g1gc-in-production-with-regard-to-consistency/47561 "2016-04-17T08:28:27Z")

</div>

Hello, we are having massive problems with our ES cluster during high peaks of indexing (~2 GB/s), if forces a stop the world GC for around 40-60 seconds on each nodes once every 1-2 minutes during this time. Therefor…

---

## [Watcher “watcher.actions.email.html.sanitization” table attributes](https://discuss.elastic.co/t/watcher-watcher-actions-email-html-sanitization-table-attributes/50971)

<div class="topic-metadata">

**Author:** [@santhosh](https://discuss.elastic.co/u/santhosh)\
**Replies:** 7\
**Last updated:** [June 6, 2016, 9:35am UTC](https://discuss.elastic.co/t/watcher-watcher-actions-email-html-sanitization-table-attributes/50971 "2016-06-06T09:35:41Z")

</div>

I construct email alerts in elasticsearch watcher using HTML and I have also configured to sanitize following html tags in elasticsearch.yml watcher.actions.email.html.sanitization: allow: \_tables, \_blocks, \_formatti…

---

## [Tibco ems logstash input plugin working](https://discuss.elastic.co/t/tibco-ems-logstash-input-plugin-working/93226)

<div class="topic-metadata">

**Author:** [@chetan\_vartak](https://discuss.elastic.co/u/chetan_vartak)\
**Replies:** 0\
**Last updated:** [July 14, 2017, 5:54pm UTC](https://discuss.elastic.co/t/tibco-ems-logstash-input-plugin-working/93226 "2017-07-14T17:54:27Z")

</div>

I saw few topics on tibco ems. But none of them had a solution. I got it working. Here is the setting I used to consume messages from a queue. jms.yml --\> # Tibco EMS ems: :factory: com.tibco.tibjms.TibjmsConnecti…

---

## [Change analyzer into an existing index](https://discuss.elastic.co/t/change-analyzer-into-an-existing-index/264746)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [February 21, 2021, 9:15pm UTC](https://discuss.elastic.co/t/change-analyzer-into-an-existing-index/264746 "2021-02-21T21:15:05Z")

</div>

Hey there, I have an existing index without any custom setting or mapping for any field, so everything is by default. Into the docs I have a field named category which contains words like Women's or Womens. POST my\_in…

---

## [End point security fails for Elastic Agent with error "Missed two check-ins"](https://discuss.elastic.co/t/end-point-security-fails-for-elastic-agent-with-error-missed-two-check-ins/297477)

<div class="topic-metadata">

**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\
**Replies:** 5\
**Last updated:** [February 18, 2022, 3:35am UTC](https://discuss.elastic.co/t/end-point-security-fails-for-elastic-agent-with-error-missed-two-check-ins/297477 "2022-02-18T03:35:34Z")

</div>

When I install elastic-agent and fleet-server against a successfully running https/SSL Elasticsearch and Kibana.....The output indicates a successful start and enrolment but a few minutes later the elastic-agent status i…

---

## [RegEx Query in Discover](https://discuss.elastic.co/t/regex-query-in-discover/189586)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 5:00pm UTC](https://discuss.elastic.co/t/regex-query-in-discover/189586 "2019-07-09T17:00:02Z")

</div>

I'm looking at website requests in my log that shows lots of strings in Kibana 7.0. I want to filter out anything that ends in a file extension, so I have the following regex pattern that should work, \\.\\w{3,4}$. Howev…

---

## [Can't connect to Kibana from a remote host](https://discuss.elastic.co/t/cant-connect-to-kibana-from-a-remote-host/166048)

<div class="topic-metadata">

**Author:** [@hHelen](https://discuss.elastic.co/u/hHelen)\
**Replies:** 5\
**Last updated:** [February 1, 2019, 4:50pm UTC](https://discuss.elastic.co/t/cant-connect-to-kibana-from-a-remote-host/166048 "2019-02-01T16:50:29Z")

</div>

I recently installed elasticsearch, which seems to be working when I run this command: curl -X GET "localhost:9200" but I can't seem to connect to the server from a remote host even though I have configured it to allow …

---

## [Elasticsearch results per page](https://discuss.elastic.co/t/elasticsearch-results-per-page/98155)

<div class="topic-metadata">

**Author:** [@Akhil\_Prashar](https://discuss.elastic.co/u/Akhil_Prashar)\
**Replies:** 7\
**Last updated:** [August 24, 2017, 9:58am UTC](https://discuss.elastic.co/t/elasticsearch-results-per-page/98155 "2017-08-24T09:58:14Z")

</div>

Hi guys, I want to display 20 results in a single page and then I want a next page option for next 20 results and so on. I shall be really thankful to you if you can help me with this.

---

## [How pass arguments to Visualization](https://discuss.elastic.co/t/how-pass-arguments-to-visualization/139617)

<div class="topic-metadata">

**Author:** [@RajiReddy](https://discuss.elastic.co/u/RajiReddy)\
**Replies:** 3\
**Last updated:** [July 12, 2018, 7:50pm UTC](https://discuss.elastic.co/t/how-pass-arguments-to-visualization/139617 "2018-07-12T19:50:35Z")

</div>

Hi, I am trying to create a visualization and embed into my web application. I could pass date arguments to the saved search in kibana. But How can I pass them to Visualization? Or is there any way to create visualiza…

---

## [Elasticsearch support for Distributed FS like Rook-ceph](https://discuss.elastic.co/t/elasticsearch-support-for-distributed-fs-like-rook-ceph/199410)

<div class="topic-metadata">

**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\
**Replies:** 6\
**Last updated:** [September 24, 2019, 12:13pm UTC](https://discuss.elastic.co/t/elasticsearch-support-for-distributed-fs-like-rook-ceph/199410 "2019-09-24T12:13:10Z")

</div>

Hi, Does Elasticsearch architecture supports Distributed File system for storage like rook-ceph?

---

## [Create multiple indexes while pushing data from filebeat to elasticsearch](https://discuss.elastic.co/t/create-multiple-indexes-while-pushing-data-from-filebeat-to-elasticsearch/148649)

<div class="topic-metadata">

**Author:** [@souravtyson](https://discuss.elastic.co/u/souravtyson)\
**Replies:** 4\
**Last updated:** [September 17, 2018, 11:02am UTC](https://discuss.elastic.co/t/create-multiple-indexes-while-pushing-data-from-filebeat-to-elasticsearch/148649 "2018-09-17T11:02:04Z")

</div>

Hi team, I am trying to push the nginx logs using filebeat to elasticsearch. I wanted to created multiple indexes based on data logged in my file. For example : i have a field of response time that gets logged into th…

---

## [Wich urls use kibana maps?](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823)

<div class="topic-metadata">

**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\
**Replies:** 1\
**Last updated:** [August 9, 2021, 7:14pm UTC](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823 "2021-08-09T19:14:11Z")

</div>

Hi, I have a server without internet connection running Kibana, I need to add to my firewall rules the URLs that Kibana Maps use to allow the traffic between the server and the APIs of the kibana maps. I don't find the…

---

## [High OS memory usage and less heap memory usage during indexing](https://discuss.elastic.co/t/high-os-memory-usage-and-less-heap-memory-usage-during-indexing/28027)

<div class="topic-metadata">

**Author:** [@puneetm](https://discuss.elastic.co/u/puneetm)\
**Replies:** 5\
**Last updated:** [August 26, 2015, 12:20pm UTC](https://discuss.elastic.co/t/high-os-memory-usage-and-less-heap-memory-usage-during-indexing/28027 "2015-08-26T12:20:10Z")

</div>

Hi, I am trying to index 500 million records. I have heap\_size of 16 GB, total memory of 32 GB. I am trying to index 50,000 records in bulk in a loop till 500 million records with a single transport client connection…

---

## [Elasticsearch Heapdump Location?](https://discuss.elastic.co/t/elasticsearch-heapdump-location/91395)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 2\
**Last updated:** [July 3, 2017, 6:48am UTC](https://discuss.elastic.co/t/elasticsearch-heapdump-location/91395 "2017-07-03T06:48:39Z")

</div>

Hi, I want to know where my heap dump will be stored since i want to analyse what is going on my ES because some times it is giving OUTOFMEMORY exception. When i had given ps -ef | grep elastic i can see the followin…

---

## [\-XX:+DisableExplicitGC used in default config? why?](https://discuss.elastic.co/t/xx-disableexplicitgc-used-in-default-config-why/1138)

<div class="topic-metadata">

**Author:** [@burtonator](https://discuss.elastic.co/u/burtonator)\
**Replies:** 2\
**Last updated:** [August 14, 2015, 7:23pm UTC](https://discuss.elastic.co/t/xx-disableexplicitgc-used-in-default-config-why/1138 "2015-08-14T19:23:34Z")

</div>

Im curious why -XX:+DisableExplicitGC is used in our Elasticsearch install (via apt packages). I often use an explicit GC to see how much memory is locked into the heap so that I can see how much memory we have free…

---

## [Render raw html in Kibana markdown](https://discuss.elastic.co/t/render-raw-html-in-kibana-markdown/36226)

<div class="topic-metadata">

**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Replies:** 3\
**Last updated:** [December 10, 2015, 12:57am UTC](https://discuss.elastic.co/t/render-raw-html-in-kibana-markdown/36226 "2015-12-10T00:57:35Z")

</div>

Looking for a way to open link in Kibana markdown in a new tab. Right now I have links in markdown like this: \[Click me!\](https://discuss.elastic.co/c/kibana) which yields Click me!. The problem is, back navigation i…

---

## [Error publishing events (EOF, broken pipe, i/o timeout, connection reset)](https://discuss.elastic.co/t/error-publishing-events-eof-broken-pipe-i-o-timeout-connection-reset/67005)

<div class="topic-metadata">

**Author:** [@knobli](https://discuss.elastic.co/u/knobli)\
**Replies:** 6\
**Last updated:** [November 28, 2016, 2:21pm UTC](https://discuss.elastic.co/t/error-publishing-events-eof-broken-pipe-i-o-timeout-connection-reset/67005 "2016-11-28T14:21:52Z")

</div>

Filebeat can't publish the data to logstash if there is a lot of traffic (~ 100-150 lines per second). I read a lot about discussions about the "Error publishing events" but nothing really matches my case. In the logstas…

---

## [Kibana behind AWS ELB](https://discuss.elastic.co/t/kibana-behind-aws-elb/56295)

<div class="topic-metadata">

**Author:** [@choonming](https://discuss.elastic.co/u/choonming)\
**Replies:** 4\
**Last updated:** [July 26, 2016, 12:31pm UTC](https://discuss.elastic.co/t/kibana-behind-aws-elb/56295 "2016-07-26T12:31:12Z")

</div>

I'm trying to get my ELK instance running on a private subnet in the AWS VPC. The ELK stack is working fine on its own. In order to access the Kibana dashboard from the internet, I've created an ELB an attached my ELK in…

---

## [Where is canvas expression documentation?](https://discuss.elastic.co/t/where-is-canvas-expression-documentation/172753)

<div class="topic-metadata">

**Author:** [@jpazsedano](https://discuss.elastic.co/u/jpazsedano)\
**Replies:** 5\
**Last updated:** [March 20, 2019, 11:04am UTC](https://discuss.elastic.co/t/where-is-canvas-expression-documentation/172753 "2019-03-20T11:04:36Z")

</div>

Hi Well, my situation is simple. I've run into some trouble using Canvas expressions and in the docs all I've found is this: https://www.elastic.co/guide/en/kibana/master/canvas-function-reference.html It's just a very…

---

## [Is there a REST API for Kibana?](https://discuss.elastic.co/t/is-there-a-rest-api-for-kibana/101834)

<div class="topic-metadata">

**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 9:22pm UTC](https://discuss.elastic.co/t/is-there-a-rest-api-for-kibana/101834 "2017-09-26T21:22:19Z")

</div>

Hi, Is there any plan to implement a REST API for configuring Kibana? Or does a REST API currently exist? We find Kibana useful, but we don't use it that much due to the upkeep effort of click-based configuration. Idea…

---

## [Данные из Logstash не попадают в Elasticsearch](https://discuss.elastic.co/t/logstash-elasticsearch/176263)

<div class="topic-metadata">

**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\
**Replies:** 8\
**Last updated:** [April 14, 2019, 11:30pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch/176263 "2019-04-14T23:30:07Z")

</div>

Доброго дня Коллеги, на одном из обновлений "сломался" Logstash, данные которые шли через него перестали попадать в ES (прямая запись в ES работает прекрасно) LS ставился из deb пакетов, он работает как сервис. если е…

---

## [Searchable, aggregatable](https://discuss.elastic.co/t/searchable-aggregatable/83204)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 4\
**Last updated:** [April 21, 2017, 7:02pm UTC](https://discuss.elastic.co/t/searchable-aggregatable/83204 "2017-04-21T19:02:11Z")

</div>

Hi, I would like to make our ELK efficient. I know in which fields I will never search or aggregate but I still want to display them. Is there any way how to define "not searchable" (or aggregatable) field? I read that …

---

## [Facing issue while starting elasticsearch](https://discuss.elastic.co/t/facing-issue-while-starting-elasticsearch/160507)

<div class="topic-metadata">

**Author:** [@johnrabi](https://discuss.elastic.co/u/johnrabi)\
**Replies:** 3\
**Last updated:** [December 12, 2018, 10:16am UTC](https://discuss.elastic.co/t/facing-issue-while-starting-elasticsearch/160507 "2018-12-12T10:16:17Z")

</div>

Hi Team, i am facing issue , while starting the elasticsearch at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:86) Caused by: ParsingException\[Failed to parse object: expecting token of type \[START…

---

## [\_status returns illegal argument exception](https://discuss.elastic.co/t/-status-returns-illegal-argument-exception/31263)

<div class="topic-metadata">

**Author:** [@maria](https://discuss.elastic.co/u/maria)\
**Replies:** 2\
**Last updated:** [September 28, 2015, 5:04pm UTC](https://discuss.elastic.co/t/-status-returns-illegal-argument-exception/31263 "2015-09-28T17:04:53Z")

</div>

To work with head plugin I need http://localhost:9200/\_status to work properly. However it returns: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"No feature for name \[\_status\]"}\]... This queries…

---

## [Bulk request on ElasticSearch returns the message “The bulk request must be terminated by a newline”](https://discuss.elastic.co/t/bulk-request-on-elasticsearch-returns-the-message-the-bulk-request-must-be-terminated-by-a-newline/175355)

<div class="topic-metadata">

**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 9:03am UTC](https://discuss.elastic.co/t/bulk-request-on-elasticsearch-returns-the-message-the-bulk-request-must-be-terminated-by-a-newline/175355 "2019-04-04T09:03:34Z")

</div>

I am using ElasticSearch 6.7.0, and I am currently working through its tutorial. Currently, I am stuck at this step, which requires me to download some sample data stored inside a file accounts.json. Here is a small snip…

---

## [Fetch data from elastic search to java application](https://discuss.elastic.co/t/fetch-data-from-elastic-search-to-java-application/174536)

<div class="topic-metadata">

**Author:** [@Mangesh\_Panchwagh](https://discuss.elastic.co/u/Mangesh_Panchwagh)\
**Replies:** 4\
**Last updated:** [April 1, 2019, 6:30am UTC](https://discuss.elastic.co/t/fetch-data-from-elastic-search-to-java-application/174536 "2019-04-01T06:30:38Z")

</div>

Hi, I am new to elasticsearch. I am building an application which uploads the resumes. Then I will fetch the resume of particular candidate using some filters like firstname, lastname etc. I am able to push my postgres…

---

## [How to extract a specific string from a log after a match in grok filter?](https://discuss.elastic.co/t/how-to-extract-a-specific-string-from-a-log-after-a-match-in-grok-filter/173473)

<div class="topic-metadata">

**Author:** [@WarriorHarb](https://discuss.elastic.co/u/WarriorHarb)\
**Replies:** 4\
**Last updated:** [March 22, 2019, 1:20pm UTC](https://discuss.elastic.co/t/how-to-extract-a-specific-string-from-a-log-after-a-match-in-grok-filter/173473 "2019-03-22T13:20:34Z")

</div>

Hello, So i have a multi-lined log, each line has a format, after creating a grok filter that detects the keyword "callid" ,i would like to extract the ID right after that keyword and save it to a new field. here is a s…

---

## [Apm-server config in docker compose with ES and Kibana](https://discuss.elastic.co/t/apm-server-config-in-docker-compose-with-es-and-kibana/301227)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 3\
**Last updated:** [April 4, 2022, 1:06am UTC](https://discuss.elastic.co/t/apm-server-config-in-docker-compose-with-es-and-kibana/301227 "2022-04-04T01:06:27Z")

</div>

Kibana version : 8.0.0 Elasticsearch version : 8.0.0 APM Server version : 8.0.0 APM Agent language and version : Java 1.28.0 Browser version : Chrome Original install method (e.g. download page, yum, deb, from sourc…

---

## [Cannot connect Spark to Elasticsearch \*RESOLVED\*](https://discuss.elastic.co/t/cannot-connect-spark-to-elasticsearch-resolved/29811)

<div class="topic-metadata">

**Author:** [@bjoernsteffens](https://discuss.elastic.co/u/bjoernsteffens)\
**Replies:** 3\
**Last updated:** [September 26, 2015, 2:25pm UTC](https://discuss.elastic.co/t/cannot-connect-spark-to-elasticsearch-resolved/29811 "2015-09-26T14:25:02Z")

</div>

Hi, I am trying to connect my Spark to Elasticsearch to read log data. I get all sorts of weird error messages. I would be happy of someone could give me a pointer with some complete documentation. spark-shell --mast…

---

## [FATAL Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 1:35am UTC](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733 "2020-08-21T01:35:09Z")

</div>

I used version 7.6.1 before, and then I changed it to kibana:8.0.0-SNAPSHOT Restart the pod and it won't work Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read at Object.readSync (f…

---

## [FileBeat ignore\_older behavior](https://discuss.elastic.co/t/filebeat-ignore-older-behavior/50226)

<div class="topic-metadata">

**Author:** [@logilouis](https://discuss.elastic.co/u/logilouis)\
**Replies:** 2\
**Last updated:** [May 17, 2016, 10:24pm UTC](https://discuss.elastic.co/t/filebeat-ignore-older-behavior/50226 "2016-05-17T22:24:54Z")

</div>

Hi, I am using FileBeat 1.2.2 and would like to confirm my understanding with the usage of ignore\_older. The Setup: FileBeat is configured with ignore\_older of 1h, and it is harvesting /var/log/apache.log. FileBeat …

[Previous page](https://discuss.elastic.co/top.md?page=432&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=434&per_page=50&period=all)
