# Top

**URL:** https://discuss.elastic.co/top.md?page=434&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 435

---

## [Handling Conflicts](https://discuss.elastic.co/t/handling-conflicts/135240)

<div class="topic-metadata">

**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\
**Replies:** 4\
**Last updated:** [June 11, 2018, 6:02am UTC](https://discuss.elastic.co/t/handling-conflicts/135240 "2018-06-11T06:02:12Z")

</div>

Hey, I do know that ElasticSearch uses internally version control, for optimistic concurrency control. It guarantees that only one update is processed at once to a document. However, what happens when processing multip…

---

## [Dashboard Timeout - Data might be incomplete because your request timed out](https://discuss.elastic.co/t/dashboard-timeout-data-might-be-incomplete-because-your-request-timed-out/212808)

<div class="topic-metadata">

**Author:** [@BALA\_BALA](https://discuss.elastic.co/u/BALA_BALA)\
**Replies:** 4\
**Last updated:** [January 8, 2020, 2:49am UTC](https://discuss.elastic.co/t/dashboard-timeout-data-might-be-incomplete-because-your-request-timed-out/212808 "2020-01-08T02:49:12Z")

</div>

Hi Team, I am getting timeout error "Data might be incomplete because your request timed out" while retrieving 12.5GB of data in Kibana dashboard. timeout increased from 30000 to "elasticsearch.requestTimeout: 90000" . …

---

## [Timestamp distribution hour of day](https://discuss.elastic.co/t/timestamp-distribution-hour-of-day/17851)

<div class="topic-metadata">

**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\
**Replies:** 4\
**Last updated:** [June 2, 2014, 4:34pm UTC](https://discuss.elastic.co/t/timestamp-distribution-hour-of-day/17851 "2014-06-02T16:34:26Z")

</div>

All the events in my index are \_timestamp enabled. I would like to look at a distribution of events based on the hour of day. Here is an example of what I would like to query: http://blog.redowlanalytics.com/pos…

---

## [Subtraction between 2 different fields(with scripted fields)](https://discuss.elastic.co/t/subtraction-between-2-different-fields-with-scripted-fields/210558)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 7\
**Last updated:** [December 9, 2019, 11:05am UTC](https://discuss.elastic.co/t/subtraction-between-2-different-fields-with-scripted-fields/210558 "2019-12-09T11:05:40Z")

</div>

Hello! I converted a string into int using scripted fields. Now I am trying to subtract this field with another field inside the the index pattern. My document looks something like this: { "\_source": { "type": "ex…

---

## [Multiple elasticsearch clusters for output](https://discuss.elastic.co/t/multiple-elasticsearch-clusters-for-output/172503)

<div class="topic-metadata">

**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\
**Replies:** 2\
**Last updated:** [March 15, 2019, 2:07pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-clusters-for-output/172503 "2019-03-15T14:07:08Z")

</div>

Hello I am currently managing logstash-elasticsearch set. Per customer request, we need to add 2nd elasticsearch cluster but current logstashes will be used same and deliver logs to both clusters. Is it possible to set…

---

## [KQL from @timestamp until 7days offset](https://discuss.elastic.co/t/kql-from-timestamp-until-7days-offset/294819)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 4\
**Last updated:** [January 19, 2022, 9:55pm UTC](https://discuss.elastic.co/t/kql-from-timestamp-until-7days-offset/294819 "2022-01-19T21:55:35Z")

</div>

Hi team, I need a query that takes the @timestamp from the timepicker and then add an offset of 7 days. I don't know how to do it. I tried: (@timestamp \<= "now-1d/d+7d") but it's not working as I wanted. Could someone …

---

## [Can't remove\_field - help please](https://discuss.elastic.co/t/cant-remove-field-help-please/42894)

<div class="topic-metadata">

**Author:** [@Marjana](https://discuss.elastic.co/u/Marjana)\
**Replies:** 8\
**Last updated:** [March 1, 2016, 3:29pm UTC](https://discuss.elastic.co/t/cant-remove-field-help-please/42894 "2016-03-01T15:29:57Z")

</div>

I am very new with Logstash, trying to create my first config. I am using 1.5.6 version. As I am testing, I wanted to try to use db2 log file as input. Got the multiline thing working fine. Example of my event: "2016-02…

---

## [Elasticsearch ip range query](https://discuss.elastic.co/t/elasticsearch-ip-range-query/166106)

<div class="topic-metadata">

**Author:** [@vnpt\_Pham](https://discuss.elastic.co/u/vnpt_Pham)\
**Replies:** 2\
**Last updated:** [February 1, 2019, 2:49am UTC](https://discuss.elastic.co/t/elasticsearch-ip-range-query/166106 "2019-02-01T02:49:35Z")

</div>

Dear, I set mapping below PUT iptest { "mappings": { "addy": { "properties":{ "ips": { "type": "ip"} } } } } And insert data: PUT iptest/addy/1?refresh {"ips": \[ "10…

---

## [Gsub for numbers?](https://discuss.elastic.co/t/gsub-for-numbers/27436)

<div class="topic-metadata">

**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\
**Replies:** 7\
**Last updated:** [August 18, 2015, 12:14am UTC](https://discuss.elastic.co/t/gsub-for-numbers/27436 "2015-08-18T00:14:22Z")

</div>

This is a take on a previous topic I posted. I have values coming across the wire that are meant to go into integer/double/float... values in Elastic, but they are coming cross as string values. Within logstash, I ne…

---

## [Sorting on a Field that does not exist](https://discuss.elastic.co/t/sorting-on-a-field-that-does-not-exist/5820)

<div class="topic-metadata">

**Author:** [@LORDs\_diakonos](https://discuss.elastic.co/u/LORDs_diakonos)\
**Replies:** 3\
**Last updated:** [November 13, 2011, 6:59am UTC](https://discuss.elastic.co/t/sorting-on-a-field-that-does-not-exist/5820 "2011-11-13T06:59:16Z")

</div>

Sometimes I need to sort on a field that doesn't exist. I of course do not know it doesn't exist until runtime. I tried the following FieldSortBuilder sb = new FieldSortBuilder(sortbyArr\[0\].toLowerCase()); …

---

## [Kibana - Visualisation aggregation on Nested Object Issue](https://discuss.elastic.co/t/kibana-visualisation-aggregation-on-nested-object-issue/233097)

<div class="topic-metadata">

**Author:** [@charlz](https://discuss.elastic.co/u/charlz)\
**Replies:** 6\
**Last updated:** [June 23, 2020, 6:00am UTC](https://discuss.elastic.co/t/kibana-visualisation-aggregation-on-nested-object-issue/233097 "2020-06-23T06:00:21Z")

</div>

On creating Visualisation Aggregation of sum on property 'item.count' facing issue grouping on quote.created\_at Result Date ------------Count 2020-05-10 ----- 1 2020-03-05 ----- 2 { "id":50, "c…

---

## [Sync MySQL to Elasticsearch](https://discuss.elastic.co/t/sync-mysql-to-elasticsearch/60705)

<div class="topic-metadata">

**Author:** [@adrianolimit](https://discuss.elastic.co/u/adrianolimit)\
**Replies:** 6\
**Last updated:** [September 18, 2016, 11:25am UTC](https://discuss.elastic.co/t/sync-mysql-to-elasticsearch/60705 "2016-09-18T11:25:37Z")

</div>

Hello everyone, In order to synchronise my MySQL database with Elasticsearch I set up the following process : I activated the binary log in MySQL in order to see the different transactions After that, I execute Logst…

---

## [Unknown setting exception for "type"="date", "format": "year\_month\_day" in elastic search 5.5.0](https://discuss.elastic.co/t/unknown-setting-exception-for-type-date-format-year-month-day-in-elastic-search-5-5-0/93278)

<div class="topic-metadata">

**Author:** [@jayakrishnankk](https://discuss.elastic.co/u/jayakrishnankk)\
**Replies:** 2\
**Last updated:** [July 31, 2017, 10:55pm UTC](https://discuss.elastic.co/t/unknown-setting-exception-for-type-date-format-year-month-day-in-elastic-search-5-5-0/93278 "2017-07-31T22:55:06Z")

</div>

I am new to elastic search, I was going through this video : https://www.elastic.co/webinars/getting-started-elasticsearch. Installed elasticsearch-5.5.0 (linux 64 bit) and kibana 5.5.0 and xpack. When I create the i…

---

## [Logstash conf not working for json format](https://discuss.elastic.co/t/logstash-conf-not-working-for-json-format/90109)

<div class="topic-metadata">

**Author:** [@gangamstyle](https://discuss.elastic.co/u/gangamstyle)\
**Replies:** 8\
**Last updated:** [June 27, 2017, 6:03am UTC](https://discuss.elastic.co/t/logstash-conf-not-working-for-json-format/90109 "2017-06-27T06:03:38Z")

</div>

Hi Marcus, I have tried the json plugin but it is not working plz help me {"\_id":{"$oid":"592fdb630b2262682c85351d"},"Date":"20170510","url":"Loading of Page /start","Device":"Mobile","Browser":"UC Browser mobile","B…

---

## [Getting following error when starting kibana 5.6](https://discuss.elastic.co/t/getting-following-error-when-starting-kibana-5-6/101912)

<div class="topic-metadata">

**Author:** [@ctayal1211](https://discuss.elastic.co/u/ctayal1211)\
**Replies:** 7\
**Last updated:** [September 27, 2017, 3:51pm UTC](https://discuss.elastic.co/t/getting-following-error-when-starting-kibana-5-6/101912 "2017-09-27T15:51:50Z")

</div>

log \[00:06:09.483\] \[info\]\[status\]\[ui settings\] Status changed from uninitialized to yellow - Elasticsearch plugin is yellow log \[00:06:09.496\] \[info\]\[elasticsearch\] Adding mappings to kibana index for SavedObject ty…

---

## [Is possible to query logs from S3 bucket from directly in Kibana](https://discuss.elastic.co/t/is-possible-to-query-logs-from-s3-bucket-from-directly-in-kibana/163839)

<div class="topic-metadata">

**Author:** [@sadiesh](https://discuss.elastic.co/u/sadiesh)\
**Replies:** 4\
**Last updated:** [January 11, 2019, 11:46am UTC](https://discuss.elastic.co/t/is-possible-to-query-logs-from-s3-bucket-from-directly-in-kibana/163839 "2019-01-11T11:46:13Z")

</div>

As part of my housekeeping process , I have to push a week older logs to S3 bucket due to server space limitations . We want to query the same logs which is stored in S3 from Kibana. Is it possible ?

---

## [Why am I getting this \`unexpected byte \[0x10\]\` in the constructor for a custom PluginBuilder?](https://discuss.elastic.co/t/why-am-i-getting-this-unexpected-byte-0x10-in-the-constructor-for-a-custom-pluginbuilder/151760)

<div class="topic-metadata">

**Author:** [@Brett\_Anderson](https://discuss.elastic.co/u/Brett_Anderson)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 8:53pm UTC](https://discuss.elastic.co/t/why-am-i-getting-this-unexpected-byte-0x10-in-the-constructor-for-a-custom-pluginbuilder/151760 "2018-10-11T20:53:45Z")

</div>

Using Elasticsearch 5.6.5 I'm getting the following strange error: org.elasticsearch.transport.RemoteTransportException: \[iad1esdn20vz166\]\[x.x.x.x:31203\]\[indices:data/read/search\[phase/query\]\] Caused by: java.lang.Ill…

---

## [How to sent syslog from mikrotik to ELK](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601)

<div class="topic-metadata">

**Author:** [@Zhamax](https://discuss.elastic.co/u/Zhamax)\
**Replies:** 1\
**Last updated:** [January 9, 2021, 3:46pm UTC](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601 "2021-01-09T15:46:26Z")

</div>

Hi everyone i have some questions to ask. i want to sent syslog from mikrotik to Elastic But I'm confused about how to write code into Input, Filter and output ? Thank you in advance for your help

---

## [Elasticsearch to store account information](https://discuss.elastic.co/t/elasticsearch-to-store-account-information/5159)

<div class="topic-metadata">

**Author:** [@moraleslos](https://discuss.elastic.co/u/moraleslos)\
**Replies:** 3\
**Last updated:** [August 14, 2011, 10:30pm UTC](https://discuss.elastic.co/t/elasticsearch-to-store-account-information/5159 "2011-08-14T22:30:30Z")

</div>

Hi, Just recently found ES when doing research about IR (lucene, etc). Seems like ES fits what I would like to do for a new project-- almost entirely. Would like to use it solely without the need to use another No…

---

## [Content-Type header \[application/x-www-form-urlencoded\] is not supported, "status":406](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/229528)

<div class="topic-metadata">

**Author:** [@DanielSTO](https://discuss.elastic.co/u/DanielSTO)\
**Replies:** 4\
**Last updated:** [May 12, 2020, 11:17am UTC](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/229528 "2020-05-12T11:17:36Z")

</div>

Hello! I am trying to run a simple query that I have copied as a curl from kibana and I am Trying to run it on my windows comand line. My curl is: curl -XGET "http://localhost:9200/inspections/\_doc/\_search" -H 'Conten…

---

## [Can i "post\_filter" multiple fields?](https://discuss.elastic.co/t/can-i-post-filter-multiple-fields/42174)

<div class="topic-metadata">

**Author:** [@kenshero](https://discuss.elastic.co/u/kenshero)\
**Replies:** 4\
**Last updated:** [March 15, 2016, 6:09pm UTC](https://discuss.elastic.co/t/can-i-post-filter-multiple-fields/42174 "2016-03-15T18:09:06Z")

</div>

this DSL my elasticsearch { "query": { "multi\_match": { "query": "text\_search xxxxxxx", "type" : "phrase\_prefix", "fields": \["xxxxxx","yyyyyyy"\] } }, "post\_…

---

## [Filebeat not reading apache logs?](https://discuss.elastic.co/t/filebeat-not-reading-apache-logs/39419)

<div class="topic-metadata">

**Author:** [@tomiford](https://discuss.elastic.co/u/tomiford)\
**Replies:** 8\
**Last updated:** [January 19, 2016, 7:22am UTC](https://discuss.elastic.co/t/filebeat-not-reading-apache-logs/39419 "2016-01-19T07:22:20Z")

</div>

Hi I am new to filebeat and have set up the syslog files of our servers to be sent to logstash by filebeat. I am now trying to get apache logs into logstash but it does not seem to be reading the log. When starting u…

---

## [Kibana server not ready yet: ValidationError: child "elasticsearch" fails because \[child "hosts" fails because \["hosts" at position 0 fails because \["0" must be a string\]\]\]](https://discuss.elastic.co/t/kibana-server-not-ready-yet-validationerror-child-elasticsearch-fails-because-child-hosts-fails-because-hosts-at-position-0-fails-because-0-must-be-a-string/168925)

<div class="topic-metadata">

**Author:** [@amin.nugroho](https://discuss.elastic.co/u/amin.nugroho)\
**Replies:** 2\
**Last updated:** [February 22, 2019, 7:22am UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet-validationerror-child-elasticsearch-fails-because-child-hosts-fails-because-hosts-at-position-0-fails-because-0-must-be-a-string/168925 "2019-02-22T07:22:25Z")

</div>

Hi, I am setting up a production cluster with version 6.6.0.1 as follows: 3 elastic nodes all as master, ingest, data 1 kibana node with elastic in it as elastic load balancer (master,ingest,data: false) 1 apm, 1 log…

---

## [How to change the default type "doc" for fileBeat index when ingest data to ES by ingest?](https://discuss.elastic.co/t/how-to-change-the-default-type-doc-for-filebeat-index-when-ingest-data-to-es-by-ingest/124786)

<div class="topic-metadata">

**Author:** [@jackyshen](https://discuss.elastic.co/u/jackyshen)\
**Replies:** 3\
**Last updated:** [March 22, 2018, 4:33pm UTC](https://discuss.elastic.co/t/how-to-change-the-default-type-doc-for-filebeat-index-when-ingest-data-to-es-by-ingest/124786 "2018-03-22T16:33:12Z")

</div>

I set the prospectors to ingest Nginx log to ES by fileBeat 5.5.0, and I found the type is "\_type": "doc". I want to change the type name doc to other name, how to do it ? \*\*My config :\*\* filebeat.prospectors: - ty…

---

## [How can I remove the object in nested array by logstash?](https://discuss.elastic.co/t/how-can-i-remove-the-object-in-nested-array-by-logstash/201006)

<div class="topic-metadata">

**Author:** [@living](https://discuss.elastic.co/u/living)\
**Replies:** 5\
**Last updated:** [September 26, 2019, 2:24am UTC](https://discuss.elastic.co/t/how-can-i-remove-the-object-in-nested-array-by-logstash/201006 "2019-09-26T02:24:46Z")

</div>

Hi, The log output like this: { "@timestamp" =\> 2019-09-19T17:30:48.984Z, "characterid" =\> "20036815", "inventory\_item" =\> \[ \[ 0\] { "item\_equipped" =\> true, …

---

## [How to search for a first occurrence of a term](https://discuss.elastic.co/t/how-to-search-for-a-first-occurrence-of-a-term/149426)

<div class="topic-metadata">

**Author:** [@caub](https://discuss.elastic.co/u/caub)\
**Replies:** 4\
**Last updated:** [September 21, 2018, 6:19pm UTC](https://discuss.elastic.co/t/how-to-search-for-a-first-occurrence-of-a-term/149426 "2018-09-21T18:19:41Z")

</div>

I'd like to search in the last 5 minutes, for values in the err\_msg field that occured for the first time ever. And repeat this search every 5 minutes, so it should be as efficient as possible I wonder how to shape this…

---

## [Trouble sending GELF event](https://discuss.elastic.co/t/trouble-sending-gelf-event/24868)

<div class="topic-metadata">

**Author:** [@nzHillNet](https://discuss.elastic.co/u/nzHillNet)\
**Replies:** 4\
**Last updated:** [November 28, 2016, 10:00am UTC](https://discuss.elastic.co/t/trouble-sending-gelf-event/24868 "2016-11-28T10:00:04Z")

</div>

Hi all, I see a few "Google" entries with this issue, but haven't located a fix. In short I have Windows event logs being shipped to Logstash with nxlog in JSON format. I don't currently have a filter, and the output…

---

## [Installation failure](https://discuss.elastic.co/t/installation-failure/87537)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 7\
**Last updated:** [June 27, 2017, 6:41am UTC](https://discuss.elastic.co/t/installation-failure/87537 "2017-06-27T06:41:47Z")

</div>

Hi there, I am testing ece beta 2 on ubuntu 16.04. I have the phenomena that on one test machine the first installation does not work, then I remove the docker images, then I restart the installation script and afterward…

---

## [Snapshot restore to another cluster - snapshot does not exist exception](https://discuss.elastic.co/t/snapshot-restore-to-another-cluster-snapshot-does-not-exist-exception/77398)

<div class="topic-metadata">

**Author:** [@Shirel\_Vaiman](https://discuss.elastic.co/u/Shirel_Vaiman)\
**Replies:** 0\
**Last updated:** [March 4, 2017, 9:38pm UTC](https://discuss.elastic.co/t/snapshot-restore-to-another-cluster-snapshot-does-not-exist-exception/77398 "2017-03-04T21:38:03Z")

</div>

Hi, I've started a 5.2.1 cluster, and I'm trying to restore all of the data from the old 2.3 cluster. 1) I did an initial snapshot to S3, it was successful, and I've managed to restore it to the new cluster. 2) I did an…

---

## [Logstash output plugin kafka is not pushing data into kafka](https://discuss.elastic.co/t/logstash-output-plugin-kafka-is-not-pushing-data-into-kafka/104383)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 3\
**Last updated:** [October 21, 2017, 6:42am UTC](https://discuss.elastic.co/t/logstash-output-plugin-kafka-is-not-pushing-data-into-kafka/104383 "2017-10-21T06:42:20Z")

</div>

Hi all here i am trying to push Elasticsearch data into kafka input { elasticsearch { hosts =\> "192.168.1.59:9233" index =\> "titanic1" # user =\> "elastic" # password =\> "changeme" # query =\> '{…

---

## [Partial Match vs Exact Match Scoring with Ngrams](https://discuss.elastic.co/t/partial-match-vs-exact-match-scoring-with-ngrams/38522)

<div class="topic-metadata">

**Author:** [@lacollam](https://discuss.elastic.co/u/lacollam)\
**Replies:** 1\
**Last updated:** [January 14, 2016, 7:46pm UTC](https://discuss.elastic.co/t/partial-match-vs-exact-match-scoring-with-ngrams/38522 "2016-01-14T19:46:42Z")

</div>

I have a straight forward question where I have incorporated ngram's for partial matchings in 2.x. The implementation works well but the score results aren't working as I hoped. I would like my score results to look some…

---

## [Creating Gauge Visualization](https://discuss.elastic.co/t/creating-gauge-visualization/122384)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [March 4, 2018, 1:53am UTC](https://discuss.elastic.co/t/creating-gauge-visualization/122384 "2018-03-04T01:53:56Z")

</div>

I have a field that contains one of two values, pass or fail. I'd like to setup a gauge with the following math: Total # of field occurrence / Total # field = pass This should leave me with an integer between 0.0 to 1…

---

## [Parse Failure \[No mapping found for \[@timestamp\] in order to sort on](https://discuss.elastic.co/t/parse-failure-no-mapping-found-for-timestamp-in-order-to-sort-on/67698)

<div class="topic-metadata">

**Author:** [@negar](https://discuss.elastic.co/u/negar)\
**Replies:** 5\
**Last updated:** [December 1, 2016, 9:47pm UTC](https://discuss.elastic.co/t/parse-failure-no-mapping-found-for-timestamp-in-order-to-sort-on/67698 "2016-12-01T21:47:55Z")

</div>

Hi, I have been trying to use the following query to get data back, sorted by @timestamp: var my\_indices=\["news","oct", "finance", "othernews","bing","reports","fda", "research","twitter","facebook","indeed","discuss…

---

## [Data not showing in Kibana](https://discuss.elastic.co/t/data-not-showing-in-kibana/87485)

<div class="topic-metadata">

**Author:** [@Ranjeet\_Ranjan](https://discuss.elastic.co/u/Ranjeet_Ranjan)\
**Replies:** 3\
**Last updated:** [May 30, 2017, 4:27am UTC](https://discuss.elastic.co/t/data-not-showing-in-kibana/87485 "2017-05-30T04:27:53Z")

</div>

Hi, I have configured successfully but I am not able to see any data in Kibana. Getting massage No results found Infra info Elasticsearch Kibana Logstash Filebeat Centos 7 curl -XGET http://username:password@localho…

---

## [Waiting for elected master node \[null\] to setup local exporter \[default\_local\]?](https://discuss.elastic.co/t/waiting-for-elected-master-node-null-to-setup-local-exporter-default-local/85498)

<div class="topic-metadata">

**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\
**Replies:** 3\
**Last updated:** [May 15, 2017, 3:32am UTC](https://discuss.elastic.co/t/waiting-for-elected-master-node-null-to-setup-local-exporter-default-local/85498 "2017-05-15T03:32:50Z")

</div>

I have three nodes in my cluster, and I have installed x-pack on elasticsearch \[2017-05-12T09:37:20,543\]\[INFO \]\[o.e.x.m.e.l.LocalExporter\] waiting for elected master node \[null\] to setup local exporter \[default\_local\]…

---

## [Filebeat log sending problem](https://discuss.elastic.co/t/filebeat-log-sending-problem/62244)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 6\
**Last updated:** [October 6, 2016, 1:58pm UTC](https://discuss.elastic.co/t/filebeat-log-sending-problem/62244 "2016-10-06T13:58:12Z")

</div>

Server Side java -version java version "1.8.0\_101" elasticsearch version "5.0.0-beta1", bin/kibana --version 5.0.0-beta1 bin/logstash --version logstash 5.0.0-beta1 /etc/logstash/conf.d/02-beats-input.conf …

---

## [Randomly getting Error: Failed to decrypt report job data. with Kibana](https://discuss.elastic.co/t/randomly-getting-error-failed-to-decrypt-report-job-data-with-kibana/179135)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 7\
**Last updated:** [July 8, 2019, 6:51pm UTC](https://discuss.elastic.co/t/randomly-getting-error-failed-to-decrypt-report-job-data-with-kibana/179135 "2019-07-08T18:51:32Z")

</div>

Hi, I have two instances of Kibana 6.4.2 running in Docker container on DC/OS and I randomly get: Error: Failed to decrypt report job data. with Kibana. Sometimes the reports work, sometimes not. I have set xpack.repor…

---

## [Kibana 4.3.1 On Windows XP - Unable to connect to Elasticsearch at http://localhost:9200](https://discuss.elastic.co/t/kibana-4-3-1-on-windows-xp-unable-to-connect-to-elasticsearch-at-http-localhost-9200/37997)

<div class="topic-metadata">

**Author:** [@swarnkar](https://discuss.elastic.co/u/swarnkar)\
**Replies:** 4\
**Last updated:** [December 9, 2016, 1:55am UTC](https://discuss.elastic.co/t/kibana-4-3-1-on-windows-xp-unable-to-connect-to-elasticsearch-at-http-localhost-9200/37997 "2016-12-09T01:55:46Z")

</div>

Hello there. I am trying to setup elasticsearch-2.1.1 and kibana-4.3.1 on windows XP SP3: I am able to push data to ES and able to access it via Head Plugin. But Kibana is not connecting to ES, it shows: Status: Red pl…

---

## [Is there an elasticsearch-oss (RPM) package?](https://discuss.elastic.co/t/is-there-an-elasticsearch-oss-rpm-package/153263)

<div class="topic-metadata">

**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\
**Replies:** 5\
**Last updated:** [October 28, 2018, 10:45pm UTC](https://discuss.elastic.co/t/is-there-an-elasticsearch-oss-rpm-package/153263 "2018-10-28T22:45:27Z")

</div>

Hi, I have setup Elasticsearch repos according to https://www.elastic.co/guide/en/elasticsearch/reference/current/rpm.html#rpm-repo. I have also had a look at the main download pages on the Elasticsearch website. I do…

---

## [Multiple input configuration](https://discuss.elastic.co/t/multiple-input-configuration/143299)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 8\
**Last updated:** [August 7, 2018, 1:16pm UTC](https://discuss.elastic.co/t/multiple-input-configuration/143299 "2018-08-07T13:16:34Z")

</div>

I want to read multiple log files and send it to logstash. Below is my configuration (I just wanted to test it locally so the configuration I used is given below): filebeat.config.modules: path: ${path.config}/modules…

---

## [How to set "ignore\_above" : 256 to higher value while using python elasticsearch client?](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338)

<div class="topic-metadata">

**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\
**Replies:** 8\
**Last updated:** [November 25, 2020, 6:37am UTC](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338 "2020-11-25T06:37:38Z")

</div>

I am using python ES client to index data into my ES... I have a column which is more than 256 characters. when I create a data table viz. in kibana I get no results message if I include that lengthy column. Below is t…

---

## [Query related logs that contain a keyword](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529)

<div class="topic-metadata">

**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\
**Replies:** 6\
**Last updated:** [February 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/query-related-logs-that-contain-a-keyword/264529 "2021-02-24T12:44:14Z")

</div>

I have a need to query the logs in Elasticsearch through Kibana in a certain way that I will explain soon. I'll try my best to explain what I'm looking for and hopefully someone can tell me if it is possible via Kibana o…

---

## [Creating a cumulative graph in Kibana based on histogram](https://discuss.elastic.co/t/creating-a-cumulative-graph-in-kibana-based-on-histogram/46050)

<div class="topic-metadata">

**Author:** [@morberg](https://discuss.elastic.co/u/morberg)\
**Replies:** 6\
**Last updated:** [August 18, 2016, 10:32am UTC](https://discuss.elastic.co/t/creating-a-cumulative-graph-in-kibana-based-on-histogram/46050 "2016-08-18T10:32:02Z")

</div>

Using timelion it is possible to create a cumulative graph with dates on the X-axis. Is there a way to create a cumulative graph (with or without timelion) using a histogram on the X-axis? I tried feeding timelion my h…

---

## [Analyze\_wildcard](https://discuss.elastic.co/t/analyze-wildcard/5156)

<div class="topic-metadata">

**Author:** [@Sindre\_Sorhus](https://discuss.elastic.co/u/Sindre_Sorhus)\
**Replies:** 2\
**Last updated:** [August 15, 2011, 7:27am UTC](https://discuss.elastic.co/t/analyze-wildcard/5156 "2011-08-15T07:27:03Z")

</div>

From the docs: http://www.elasticsearch.org/guide/reference/query-dsl/query-string-query.html analyze\_wildcardBy default, wildcards terms in a query string are not analyzed. By setting this value to true, a best effo…

---

## [List all Kibana embedded Iframe URLs](https://discuss.elastic.co/t/list-all-kibana-embedded-iframe-urls/81128)

<div class="topic-metadata">

**Author:** [@Bil](https://discuss.elastic.co/u/Bil)\
**Replies:** 4\
**Last updated:** [April 5, 2017, 11:24am UTC](https://discuss.elastic.co/t/list-all-kibana-embedded-iframe-urls/81128 "2017-04-05T11:24:13Z")

</div>

I have saved a few graphs in Kibana, is there anyway that I can query ES or Kibana to return all the embedded Iframe URLs without the need of clicking the 'Share' button for each and every visualise objects? Thanks.

---

## [Socket hang up kibana](https://discuss.elastic.co/t/socket-hang-up-kibana/135591)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 8\
**Last updated:** [June 13, 2018, 2:57pm UTC](https://discuss.elastic.co/t/socket-hang-up-kibana/135591 "2018-06-13T14:57:06Z")

</div>

Hello, Kibana is throwing socket hang up exception very frequently and because of this problem kibana is unable to serve any search request. Every time due to below error socket hang up error occurs. {"type":"log","@ti…

---

## [How to remove quotes from value of fieldname](https://discuss.elastic.co/t/how-to-remove-quotes-from-value-of-fieldname/124004)

<div class="topic-metadata">

**Author:** [@micruzz82](https://discuss.elastic.co/u/micruzz82)\
**Replies:** 8\
**Last updated:** [March 15, 2018, 12:40am UTC](https://discuss.elastic.co/t/how-to-remove-quotes-from-value-of-fieldname/124004 "2018-03-15T00:40:37Z")

</div>

Hi all. I've been having problems with indexing where in the JSON is returning values in string format but I would like to remove the quotes on all values "dn": "topology/pod-1/node-104/sys/phys-\[eth1/48\]/CDeqptEgrTota…

---

## [How to install/enable ingest-geoip and ingest-user-agent in ELK STACK 7.1](https://discuss.elastic.co/t/how-to-install-enable-ingest-geoip-and-ingest-user-agent-in-elk-stack-7-1/186216)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 3\
**Last updated:** [June 18, 2019, 10:52am UTC](https://discuss.elastic.co/t/how-to-install-enable-ingest-geoip-and-ingest-user-agent-in-elk-stack-7-1/186216 "2019-06-18T10:52:05Z")

</div>

Hi, Anyone can help me solve? Is their anyone has idea why I can't install ingest-geoip and ingest-user-agent in my newly installed ELK STACK 7.1 in Ubuntu 16.04 LTS? Ran these: # sudo bin/elasticsearch-plugin insta…

---

## [Logstash-output Kafka: message load balancing](https://discuss.elastic.co/t/logstash-output-kafka-message-load-balancing/37804)

<div class="topic-metadata">

**Author:** [@tguan](https://discuss.elastic.co/u/tguan)\
**Replies:** 3\
**Last updated:** [October 14, 2016, 8:46am UTC](https://discuss.elastic.co/t/logstash-output-kafka-message-load-balancing/37804 "2016-10-14T08:46:50Z")

</div>

Is there any good example for specifying the message\_key for logstash Kafka output to balance the messages to be stored between different partitions on the kafka server side? I have 3 partitions in the topic, and running…

---

## [Saved Items Import/Export Json/ndjson discrepancy](https://discuss.elastic.co/t/saved-items-import-export-json-ndjson-discrepancy/199834)

<div class="topic-metadata">

**Author:** [@SpinDORK](https://discuss.elastic.co/u/SpinDORK)\
**Replies:** 6\
**Last updated:** [September 26, 2019, 5:35pm UTC](https://discuss.elastic.co/t/saved-items-import-export-json-ndjson-discrepancy/199834 "2019-09-26T17:35:27Z")

</div>

Hi, We have a Dev and Prod copy of Kibana, our Dev is 7.1.0, our Prod is 7.2.0 The problem is when developing in Dev and exporting, we get a .json file which gives an warning when importing into Prod and nothing in Pro…

[Previous page](https://discuss.elastic.co/top.md?page=433&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=435&per_page=50&period=all)
