# Top

**URL:** https://discuss.elastic.co/top.md?page=436&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 437

---

## [Kibana shows indices in gb size!](https://discuss.elastic.co/t/kibana-shows-indices-in-gb-size/295042)

<div class="topic-metadata">

**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\
**Replies:** 8\
**Last updated:** [January 22, 2022, 2:10pm UTC](https://discuss.elastic.co/t/kibana-shows-indices-in-gb-size/295042 "2022-01-22T14:10:29Z")

</div>

Hi, My Elasticsearch version 7.9.2. I'm using Filebeat to ship logs directly to Elasticsearch. All the services are running as docker container- Elasticsearch, Filebeat, Kibana The issue is- some of the Kibana indices…

---

## [Time of Day filter](https://discuss.elastic.co/t/time-of-day-filter/263277)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [February 5, 2021, 11:20pm UTC](https://discuss.elastic.co/t/time-of-day-filter/263277 "2021-02-05T23:20:15Z")

</div>

I am trying to produce a dashboard that has some visualizations but also some data tables. In order to produce the results I need in the data tables, there are times that I must filter based on the time of day. For exa…

---

## [Kibana visualizations broken after deleting index pattern - modifying object does not work](https://discuss.elastic.co/t/kibana-visualizations-broken-after-deleting-index-pattern-modifying-object-does-not-work/237088)

<div class="topic-metadata">

**Author:** [@mujina93](https://discuss.elastic.co/u/mujina93)\
**Replies:** 6\
**Last updated:** [June 17, 2020, 10:11am UTC](https://discuss.elastic.co/t/kibana-visualizations-broken-after-deleting-index-pattern-modifying-object-does-not-work/237088 "2020-06-17T10:11:11Z")

</div>

Hello, I had a dashboard in Kibana that was relying on an index pattern. I set a lifetime policy on the index and my index got deleted (I thought the "deletion time" was a retention window, i.e. documents older than X …

---

## [Monitor Microsoft Exchange Server 2013 logs](https://discuss.elastic.co/t/monitor-microsoft-exchange-server-2013-logs/152428)

<div class="topic-metadata">

**Author:** [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Replies:** 4\
**Last updated:** [October 15, 2018, 11:19am UTC](https://discuss.elastic.co/t/monitor-microsoft-exchange-server-2013-logs/152428 "2018-10-15T11:19:25Z")

</div>

Hello, I have installed ELK 6.4.0 in Windows environment, I configured winlogbeat for Windows logs and it works fine. Now I'd like to collect Exchange logs, so I have used filebeat but it is a little bit difficult to s…

---

## [Elasticsearch.yml and Keystore examples](https://discuss.elastic.co/t/elasticsearch-yml-and-keystore-examples/183185)

<div class="topic-metadata">

**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\
**Replies:** 3\
**Last updated:** [June 3, 2019, 7:13pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-and-keystore-examples/183185 "2019-06-03T19:13:53Z")

</div>

Does anyone have an example of how to call the keystore password from the yml file? I'm clear on how to create the keystore from the link below, but unsure how to call the password from inside the elasticsearch.yml file…

---

## [Error 1053: "The service did not respond in a timely fashion" when attempting to start winlogbeat service](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/96489)

<div class="topic-metadata">

**Author:** [@cghigliotty](https://discuss.elastic.co/u/cghigliotty)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 9:54pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/96489 "2017-08-09T21:54:27Z")

</div>

Hello all, When attempting to start the winlogbeat service in Windows I receive the following: Error 1053: “The service did not respond in a timely fashion” when attempting to start, stop or pause a service." I’ve suc…

---

## [Apply filter for individual visualization in dashboard](https://discuss.elastic.co/t/apply-filter-for-individual-visualization-in-dashboard/284275)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 3\
**Last updated:** [September 17, 2021, 6:50am UTC](https://discuss.elastic.co/t/apply-filter-for-individual-visualization-in-dashboard/284275 "2021-09-17T06:50:40Z")

</div>

Hi, I want to apply a filter for only a single visualization into a dashboard. Problem is when I apply a filter, all other visualization in dashboard also apply filter. Have any logic to implement filter only for indi…

---

## [Adding new nodes to cluster with unicast without restarting](https://discuss.elastic.co/t/adding-new-nodes-to-cluster-with-unicast-without-restarting/16351)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 8\
**Last updated:** [March 14, 2014, 7:45am UTC](https://discuss.elastic.co/t/adding-new-nodes-to-cluster-with-unicast-without-restarting/16351 "2014-03-14T07:45:30Z")

</div>

Hi I am having an elasticsearch cluster. I am using the unicast to discover nodes. Can I add nodes to list dynamically without restarting the cluster? I tried to do this with the prepareUpdateSettings but i got "ign…

---

## [Exception during create index operation using java high level rest client](https://discuss.elastic.co/t/exception-during-create-index-operation-using-java-high-level-rest-client/123108)

<div class="topic-metadata">

**Author:** [@AshutoshB](https://discuss.elastic.co/u/AshutoshB)\
**Replies:** 2\
**Last updated:** [March 10, 2018, 8:32pm UTC](https://discuss.elastic.co/t/exception-during-create-index-operation-using-java-high-level-rest-client/123108 "2018-03-10T20:32:50Z")

</div>

Hi, I am using java high level rest client v6.2.2 to connect es cluster v5.3.1. The create index api creates the index successfully but throws the exception: Exception in thread "main" java.io.IOException: Unable to pa…

---

## [Exposing 'transport.tcp.port' to outside world](https://discuss.elastic.co/t/exposing-transport-tcp-port-to-outside-world/102232)

<div class="topic-metadata">

**Author:** [@NikhilJoshi2](https://discuss.elastic.co/u/NikhilJoshi2)\
**Replies:** 5\
**Last updated:** [September 29, 2017, 1:38pm UTC](https://discuss.elastic.co/t/exposing-transport-tcp-port-to-outside-world/102232 "2017-09-29T13:38:35Z")

</div>

In elasticsearch.yml file of version 5.5.0, I have below: http.port: 1180 transport.tcp.port: 1183 Then I went through various Elasticsearch documentation (this and this) and able to expose port 1180 to outside worl…

---

## [Migration from OpenSearch2.5 to Elasticsearch8.8.1](https://discuss.elastic.co/t/migration-from-opensearch2-5-to-elasticsearch8-8-1/336491)

<div class="topic-metadata">

**Author:** [@tatsuya](https://discuss.elastic.co/u/tatsuya)\
**Replies:** 8\
**Last updated:** [July 6, 2023, 12:57pm UTC](https://discuss.elastic.co/t/migration-from-opensearch2-5-to-elasticsearch8-8-1/336491 "2023-07-06T12:57:41Z")

</div>

Hello. I'm thinking of migrating from AWS OpenSearch to Elastic Cloud. First, I launched Elasticsearch 8.8.1 locally with docker and checked if the data could be migrated. Data migration experimented with Snapshot & R…

---

## [Elastic Stack 8.7.0, 7.17.10 Security Updates](https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327)

<div class="topic-metadata">

**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\
**Replies:** 0\
**Last updated:** [May 2, 2023, 4:01pm UTC](https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327 "2023-05-02T16:01:34Z")

</div>

Filebeat Information Exposure (ESA-2023-04) A flaw was discovered in the Filebeat httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logg…

---

## [Grok fields are not visible in kibana](https://discuss.elastic.co/t/grok-fields-are-not-visible-in-kibana/64808)

<div class="topic-metadata">

**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\
**Replies:** 8\
**Last updated:** [November 3, 2016, 11:40am UTC](https://discuss.elastic.co/t/grok-fields-are-not-visible-in-kibana/64808 "2016-11-03T11:40:35Z")

</div>

I have used filebeat to capture IIS logs. and I have used following grok to filter IIS logs. match =\> \["message", "%{TIMESTAMP\_ISO8601:timestamp} %{IPORHOST:serverip} %{WORD:verb} %{NOTSPACE:request} %{NOTSPACE:querystr…

---

## [Elasticsearch basic license limitation on the number of nodes](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058)

<div class="topic-metadata">

**Author:** [@basiltitus](https://discuss.elastic.co/u/basiltitus)\
**Replies:** 1\
**Last updated:** [December 28, 2023, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-basic-license-limitation-on-the-number-of-nodes/350058 "2023-12-28T09:05:04Z")

</div>

Hi, We are using ELK as a single node cluster with Kibana and I'd been searching if there any limitation on the number of nodes for Elasticsearch free version. But i am unable to find information on these. Does ES fre…

---

## [Filebeat not using configured path on Windows](https://discuss.elastic.co/t/filebeat-not-using-configured-path-on-windows/72688)

<div class="topic-metadata">

**Author:** [@kpaulsenegain](https://discuss.elastic.co/u/kpaulsenegain)\
**Replies:** 3\
**Last updated:** [January 25, 2017, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-not-using-configured-path-on-windows/72688 "2017-01-25T12:40:46Z")

</div>

For this configuration: ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. The filebeat.full.yml …

---

## [Correct way to Start and Stop Winlogbeat with Powershell](https://discuss.elastic.co/t/correct-way-to-start-and-stop-winlogbeat-with-powershell/149428)

<div class="topic-metadata">

**Author:** [@JKCode](https://discuss.elastic.co/u/JKCode)\
**Replies:** 5\
**Last updated:** [September 30, 2018, 8:17am UTC](https://discuss.elastic.co/t/correct-way-to-start-and-stop-winlogbeat-with-powershell/149428 "2018-09-30T08:17:13Z")

</div>

Hi All, Newbie Alert!! I have been facing issues using Winlogbeats to ship localhost logs (application, system, security, etc.) to Elasticsearch. I have been following the instructions in the documentation, however, I…

---

## [\*fixed\* Repository Verification Exception on registering an repository](https://discuss.elastic.co/t/fixed-repository-verification-exception-on-registering-an-repository/87556)

<div class="topic-metadata">

**Author:** [@Kissaki](https://discuss.elastic.co/u/Kissaki)\
**Replies:** 2\
**Last updated:** [June 2, 2017, 8:17am UTC](https://discuss.elastic.co/t/fixed-repository-verification-exception-on-registering-an-repository/87556 "2017-06-02T08:17:43Z")

</div>

Hi there, I have a master-only node and 3 Data-Nodes in a Cluster running elasticsearch 5.1.1 and I want to make snapshots of some indexes. In every node, I set "path.repo: \["/opt/elasticsearch/archive"\]" in the elasti…

---

## [Delete recently viewed views](https://discuss.elastic.co/t/delete-recently-viewed-views/263665)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 4\
**Last updated:** [February 15, 2021, 9:06am UTC](https://discuss.elastic.co/t/delete-recently-viewed-views/263665 "2021-02-15T09:06:50Z")

</div>

In the upper left menu, dashboards and other things appear as recently view. Is there a way to clear/remove this?

---

## [Getting Infinity and -Infinity in terms\_stats query. What does it mean?](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 7\
**Last updated:** [April 19, 2013, 11:14am UTC](https://discuss.elastic.co/t/getting-infinity-and-infinity-in-terms-stats-query-what-does-it-mean/11612 "2013-04-19T11:14:56Z")

</div>

Hi all, I'm doing a simple query like: curl -XPOST 'http://localhost:9200/logstash-2013.04.17/\_search?pretty' -d '{ "query": { "match\_all": { } }, "facets" : { "domain\_size" : { …

---

## [Error while creating elastic cluster on docker](https://discuss.elastic.co/t/error-while-creating-elastic-cluster-on-docker/194070)

<div class="topic-metadata">

**Author:** [@yves.samen](https://discuss.elastic.co/u/yves.samen)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 11:35pm UTC](https://discuss.elastic.co/t/error-while-creating-elastic-cluster-on-docker/194070 "2019-08-23T23:35:16Z")

</div>

Hi, I'am creating an elastic cluster on a local docker on my macbook. I'm having this message while launching the 3rd node of elastic. "stacktrace": \["org.elasticsearch.bootstrap.StartupException: ElasticsearchExceptio…

---

## [Parse sonarqube logs](https://discuss.elastic.co/t/parse-sonarqube-logs/122130)

<div class="topic-metadata">

**Author:** [@kunaljangade](https://discuss.elastic.co/u/kunaljangade)\
**Replies:** 5\
**Last updated:** [March 1, 2018, 7:52pm UTC](https://discuss.elastic.co/t/parse-sonarqube-logs/122130 "2018-03-01T19:52:32Z")

</div>

Hi, I have been using logstash for a month now and diving deep into its filters. I am facing issues with parsing sonarqube logs. I have configured filebeat to send 5 log files that are generated by sonarqube and added f…

---

## [Any way to change uid of elasticsearch user in docker image?](https://discuss.elastic.co/t/any-way-to-change-uid-of-elasticsearch-user-in-docker-image/117043)

<div class="topic-metadata">

**Author:** [@anonymouslemming](https://discuss.elastic.co/u/anonymouslemming)\
**Replies:** 1\
**Last updated:** [January 26, 2018, 8:26am UTC](https://discuss.elastic.co/t/any-way-to-change-uid-of-elasticsearch-user-in-docker-image/117043 "2018-01-26T08:26:32Z")

</div>

Hi all, Is there any way to change the uid of the elasticsearch user in the oss elasticsearch docker image without rebuilding the image ? I'm using docker.elastic.co/elasticsearch/elasticsearch-oss:6.1.2, and I can see…

---

## [Need some help with Ruby event.set / get to use multiplication in config](https://discuss.elastic.co/t/need-some-help-with-ruby-event-set-get-to-use-multiplication-in-config/165042)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 2\
**Last updated:** [January 21, 2019, 1:43pm UTC](https://discuss.elastic.co/t/need-some-help-with-ruby-event-set-get-to-use-multiplication-in-config/165042 "2019-01-21T13:43:02Z")

</div>

Currency and Gross\_Value are existing fields: mutate { add\_field =\> {"Gross\_Euro" =\> "" }} mutate { convert =\> { "Gross\_Euro" =\> "float" }} if "INR" in \[Currency\] { ruby { code =\> "event \['Gross\_Euro'\] = event\['Gross\_V…

---

## [CRIT No outputs are defined](https://discuss.elastic.co/t/crit-no-outputs-are-defined/38561)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 2\
**Last updated:** [January 7, 2016, 6:51pm UTC](https://discuss.elastic.co/t/crit-no-outputs-are-defined/38561 "2016-01-07T18:51:16Z")

</div>

I am new with logstash, I am using logstash 1.5.4, and I am using filebeats to read files and foward to logstash pipeline I already installed filebeat input plugin, and started filebeat using systemctl. and I started th…

---

## [What kind of size is better to set logstash pipline?](https://discuss.elastic.co/t/what-kind-of-size-is-better-to-set-logstash-pipline/95112)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 3\
**Last updated:** [August 4, 2017, 2:28am UTC](https://discuss.elastic.co/t/what-kind-of-size-is-better-to-set-logstash-pipline/95112 "2017-08-04T02:28:26Z")

</div>

I have 3 logstash servers with 16GB memory and 4vcpu enabled in a cluster environment. so my question is that what kind of size is better to set logstash pipline ? My configure file like this as below: OS: mem:16G c…

---

## [Filebeat harvester started but not sending logs to logstash / kibana](https://discuss.elastic.co/t/filebeat-harvester-started-but-not-sending-logs-to-logstash-kibana/260030)

<div class="topic-metadata">

**Author:** [@Eden\_Corbin](https://discuss.elastic.co/u/Eden_Corbin)\
**Replies:** 7\
**Last updated:** [January 4, 2021, 12:04am UTC](https://discuss.elastic.co/t/filebeat-harvester-started-but-not-sending-logs-to-logstash-kibana/260030 "2021-01-04T00:04:13Z")

</div>

I'm certainly missing something in my configuration. I'm running a full docker setup, and can access Kibana and view indexes, including some logs I manually sent to logstash, I'm working on adding filebeat, docker logs s…

---

## [Variable \[\_source\] is not defined](https://discuss.elastic.co/t/variable-source-is-not-defined/149437)

<div class="topic-metadata">

**Author:** [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Replies:** 4\
**Last updated:** [September 24, 2018, 5:20am UTC](https://discuss.elastic.co/t/variable-source-is-not-defined/149437 "2018-09-24T05:20:12Z")

</div>

Hi, I want to query by a field that's not indexed. A script query should solve my question , query dsl as follows: GET /\_search { "query": { "bool" : { "must" : { "script" : { …

---

## [Integrate Kibana with custom application](https://discuss.elastic.co/t/integrate-kibana-with-custom-application/2118)

<div class="topic-metadata">

**Author:** [@brylie](https://discuss.elastic.co/u/brylie)\
**Replies:** 1\
**Last updated:** [June 9, 2015, 2:24am UTC](https://discuss.elastic.co/t/integrate-kibana-with-custom-application/2118 "2015-06-09T02:24:55Z")

</div>

We are developing an application that will display analytics data. We are considering integrating our application with Kibana/Elasticsearch. Specifically, we would like to allow users real-time access to query data, to w…

---

## [Dissector mapping, pattern not found](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found/186509)

<div class="topic-metadata">

**Author:** [@wasder](https://discuss.elastic.co/u/wasder)\
**Replies:** 2\
**Last updated:** [June 20, 2019, 10:57am UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found/186509 "2019-06-20T10:57:01Z")

</div>

Can't understand why my pattern doesn't work. None of events are parsed with such error: \[2019-06-19T18:01:29,601\]\[WARN \]\[org.logstash.dissect.Dissector\] Dissector mapping, pattern not found { "field"=\>"message", "pat…

---

## [How to setup https for kibana?](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383)

<div class="topic-metadata">

**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\
**Replies:** 4\
**Last updated:** [November 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/how-to-setup-https-for-kibana/287383 "2021-11-01T08:36:08Z")

</div>

Hi all, Sorry about my bad English. I'm config https following the guide: I generated a server certificate and private key for Kibana: ./bin/elasticsearch-certutil csr -name kibana-server MY\_IP\_SERVER Kibana setting…

---

## [Transport.tcp.port doesn't work for localhost?](https://discuss.elastic.co/t/transport-tcp-port-doesnt-work-for-localhost/16743)

<div class="topic-metadata">

**Author:** [@Dario\_Rossi](https://discuss.elastic.co/u/Dario_Rossi)\
**Replies:** 8\
**Last updated:** [April 2, 2014, 2:39pm UTC](https://discuss.elastic.co/t/transport-tcp-port-doesnt-work-for-localhost/16743 "2014-04-02T14:39:15Z")

</div>

I've the following problem: to do an integration test, I set up an embedded node and then I create a TransportClient to connect to it. The setup of the embedded node is (among other things): port = 11547; // …

---

## [How to achieve ELK High availability](https://discuss.elastic.co/t/how-to-achieve-elk-high-availability/23025)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 5\
**Last updated:** [April 16, 2015, 2:07pm UTC](https://discuss.elastic.co/t/how-to-achieve-elk-high-availability/23025 "2015-04-16T14:07:55Z")

</div>

Hi Exerts, Need your valuable suggestions here . I have ELK on a single windows instance and I want to make it high available . I mean if one machine goes down second will take up the whole load, like clustering. …

---

## [Elasticsearch GeoIP and unknown error](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541)

<div class="topic-metadata">

**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\
**Replies:** 6\
**Last updated:** [October 14, 2022, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-geoip-and-unknown-error/316541 "2022-10-14T16:15:50Z")

</div>

Hi, My elasticsearch DB suddently stopped making geoip resolve on entries, and on the elasticsearch DB logs the following message is logged: \[2022-10-13T15:06:21,875\]\[WARN \]\[o.e.i.g.GeoIpDownloader \] \[host\] could not …

---

## [Set a default value if nil](https://discuss.elastic.co/t/set-a-default-value-if-nil/228319)

<div class="topic-metadata">

**Author:** [@Yaniv\_Nuriel](https://discuss.elastic.co/u/Yaniv_Nuriel)\
**Replies:** 8\
**Last updated:** [April 16, 2020, 8:26pm UTC](https://discuss.elastic.co/t/set-a-default-value-if-nil/228319 "2020-04-16T20:26:24Z")

</div>

Hey, I know it has been asked a lot, but I tried every solution and nothing works for me. I have a field that sometimes is empty (,,) so I want to set "ebay" in that case. Here it is how it looks like when it is nil: …

---

## [Force Merge To do or not to do](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070)

<div class="topic-metadata">

**Author:** [@Neeraj\_Jain7483](https://discuss.elastic.co/u/Neeraj_Jain7483)\
**Replies:** 7\
**Last updated:** [March 1, 2022, 5:22am UTC](https://discuss.elastic.co/t/force-merge-to-do-or-not-to-do/298070 "2022-03-01T05:22:43Z")

</div>

I have a scenario in which we have indices for each month, and each document has a field, say expiry date, and according to that expiry date, documents will be deleted when they reach their expiry. One-month-old index wi…

---

## [Timezone UTC +00:00 getting converted on Kibana Display to +05:30](https://discuss.elastic.co/t/timezone-utc-00-00-getting-converted-on-kibana-display-to-05-30/38727)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 3\
**Last updated:** [January 8, 2016, 2:02pm UTC](https://discuss.elastic.co/t/timezone-utc-00-00-getting-converted-on-kibana-display-to-05-30/38727 "2016-01-08T14:02:51Z")

</div>

I am querying Elasticsearch where timestamp is in UTC +00:00 format. While querying from Kibana it converts to +5:30 which i dont want. Is there any dateformat which will display same quried from Elasticsearch(without …

---

## [Kibana, canvas, Image reveal problem after upgrade to 8.4.1 from 8.3.1](https://discuss.elastic.co/t/kibana-canvas-image-reveal-problem-after-upgrade-to-8-4-1-from-8-3-1/313986)

<div class="topic-metadata">

**Author:** [@Ibrahim\_Z\_HIDIR](https://discuss.elastic.co/u/Ibrahim_Z_HIDIR)\
**Replies:** 0\
**Last updated:** [September 8, 2022, 11:15am UTC](https://discuss.elastic.co/t/kibana-canvas-image-reveal-problem-after-upgrade-to-8-4-1-from-8-3-1/313986 "2022-09-08T11:15:30Z")

</div>

Hi I've just upgraded elastic clsuter from 8.3.1 to 8.4.1 and also kibana. After upgrade kibana all the Image reveal images turned exclamation mark, and when I've click on an image I'am getting error "Expression failed …

---

## [Winlogbeat displaying GUID in Windows events instead of object name](https://discuss.elastic.co/t/winlogbeat-displaying-guid-in-windows-events-instead-of-object-name/71442)

<div class="topic-metadata">

**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\
**Replies:** 7\
**Last updated:** [January 16, 2017, 10:57pm UTC](https://discuss.elastic.co/t/winlogbeat-displaying-guid-in-windows-events-instead-of-object-name/71442 "2017-01-16T22:57:44Z")

</div>

Hello, We are using Winlogbeat 1.2.3 to ship Windows events via Logstash into Elasticsearch. When I look at a 4662 events in Kibi, for example, under ObjectType and ObjectName I see the GUIDs rather than "ObjectType…

---

## [Elasticsearch official benchmarking results](https://discuss.elastic.co/t/elasticsearch-official-benchmarking-results/156315)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-official-benchmarking-results/156315 "2018-11-13T17:36:26Z")

</div>

Hi, I was going through the official Elasticsearch benchmarking results provided online at https://elasticsearch-benchmarks.elastic.co/index.html#tracks/http-logs/nightly/30d I noticed something intriguing. The number…

---

## [How to stop score calculating?](https://discuss.elastic.co/t/how-to-stop-score-calculating/152398)

<div class="topic-metadata">

**Author:** [@hym](https://discuss.elastic.co/u/hym)\
**Replies:** 2\
**Last updated:** [October 23, 2018, 7:27am UTC](https://discuss.elastic.co/t/how-to-stop-score-calculating/152398 "2018-10-23T07:27:21Z")

</div>

I have a couple of questions in my mind regarding query tuning in Elastic search Sometimes score for result hits are null, though the query written in Query Context , why? Is there any configuration in Elastic search t…

---

## [Java.lang.IllegalArgumentException: Mapper for \[hits\] conflicts with existing mapping in other types](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapper-for-hits-conflicts-with-existing-mapping-in-other-types/40041)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 5\
**Last updated:** [January 27, 2016, 5:44pm UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapper-for-hits-conflicts-with-existing-mapping-in-other-types/40041 "2016-01-27T17:44:10Z")

</div>

I cannot open the Dashboard in Kibana and when I check the elasticsearch.log I see this \[2016-01-25 16:14:37,421\]\[DEBUG\]\[action.admin.indices.mapping.put\] \[search-wa\] failed to put mappings on indices \[\[.kibana\]\], typ…

---

## [Logstash plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/logstash-plugin-had-an-unrecoverable-error-will-restart-this-plugin/326220)

<div class="topic-metadata">

**Author:** [@Vinicius\_Carmo](https://discuss.elastic.co/u/Vinicius_Carmo)\
**Replies:** 6\
**Last updated:** [February 24, 2023, 12:39pm UTC](https://discuss.elastic.co/t/logstash-plugin-had-an-unrecoverable-error-will-restart-this-plugin/326220 "2023-02-24T12:39:56Z")

</div>

Hello everyone, I need help I tried using the Microsoft-sentinel plugin output logstash. but I get an error: A plugin had an unrecoverable error. Will restart this plugin Error: address already in use I used two outp…

---

## [Kibana multi-tenancy](https://discuss.elastic.co/t/kibana-multi-tenancy/76619)

<div class="topic-metadata">

**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 3:26pm UTC](https://discuss.elastic.co/t/kibana-multi-tenancy/76619 "2017-03-15T15:26:49Z")

</div>

I had recently installed Kibana 5.2 and I have multiple ES indexes ; I created 2 separate user and each of them can access only one index and I log in the same time whith both of them and see different data for each as I…

---

## [Downtime for SLA-Reporting](https://discuss.elastic.co/t/downtime-for-sla-reporting/174146)

<div class="topic-metadata">

**Author:** [@icefish-creativ](https://discuss.elastic.co/u/icefish-creativ)\
**Replies:** 2\
**Last updated:** [March 27, 2019, 10:49pm UTC](https://discuss.elastic.co/t/downtime-for-sla-reporting/174146 "2019-03-27T22:49:35Z")

</div>

Hi Uptime is a really great feature.Is it planned in the next Versions build in "Downtime" ? i think it is useful for everybody or rather essential for SLA-Reporting. it would be nice you could set a SLA-Value , so yo…

---

## [Shield 2.2.0 plugin for Kibana fails install due to error "unknown export types chromeNavControls in plugin shield"](https://discuss.elastic.co/t/shield-2-2-0-plugin-for-kibana-fails-install-due-to-error-unknown-export-types-chromenavcontrols-in-plugin-shield/41432)

<div class="topic-metadata">

**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\
**Replies:** 6\
**Last updated:** [February 22, 2016, 1:53am UTC](https://discuss.elastic.co/t/shield-2-2-0-plugin-for-kibana-fails-install-due-to-error-unknown-export-types-chromenavcontrols-in-plugin-shield/41432 "2016-02-22T01:53:50Z")

</div>

Installation of shield 2.2.0 plugin for Kibana fails due to some export type. Here's entire install command and output: bin/kibana plugin --install shield --url file:///home/username/shield-2.2.0.tar.gz Installing shie…

---

## [Logstash-plugin and JVM options](https://discuss.elastic.co/t/logstash-plugin-and-jvm-options/99646)

<div class="topic-metadata">

**Author:** [@jakub.krauz](https://discuss.elastic.co/u/jakub.krauz)\
**Replies:** 2\
**Last updated:** [September 7, 2017, 3:18am UTC](https://discuss.elastic.co/t/logstash-plugin-and-jvm-options/99646 "2017-09-07T03:18:26Z")

</div>

Hi, I’m having issues invoking logstash-plugin command while logstash is running. It fails with ‘Cannot allocate memory’ error. I believe the reason is it uses the same jvm.options file as logstash which defines 3GB jav…

---

## [ES fails to update dynamic mapping; mapping and index creation times out afterwards](https://discuss.elastic.co/t/es-fails-to-update-dynamic-mapping-mapping-and-index-creation-times-out-afterwards/15366)

<div class="topic-metadata">

**Author:** [@Chris\_Hairfield](https://discuss.elastic.co/u/Chris_Hairfield)\
**Replies:** 3\
**Last updated:** [February 10, 2014, 8:17am UTC](https://discuss.elastic.co/t/es-fails-to-update-dynamic-mapping-mapping-and-index-creation-times-out-afterwards/15366 "2014-02-10T08:17:50Z")

</div>

Hello, Has anyone encountered a "hung" Elasticsearch instance where mapping creation/updates and index creations timed out? Here are the details... Elasticsearch 1.0.0.RC1, default configuration (we've seen it on 0.9…

---

## [Splitting indices to reduce heap usage?](https://discuss.elastic.co/t/splitting-indices-to-reduce-heap-usage/106931)

<div class="topic-metadata">

**Author:** [@cjbottaro](https://discuss.elastic.co/u/cjbottaro)\
**Replies:** 8\
**Last updated:** [November 13, 2017, 9:57pm UTC](https://discuss.elastic.co/t/splitting-indices-to-reduce-heap-usage/106931 "2017-11-13T21:57:53Z")

</div>

Hello. We have an Es cluster where the document count continues to grow over time. The heap usage seems to grow with the document count. At some point, the cluster craps out. We were wondering if we split our indices…

---

## [Error: Request to Elasticsearch failed](https://discuss.elastic.co/t/error-request-to-elasticsearch-failed/54024)

<div class="topic-metadata">

**Author:** [@dkspace](https://discuss.elastic.co/u/dkspace)\
**Replies:** 2\
**Last updated:** [June 28, 2016, 12:46pm UTC](https://discuss.elastic.co/t/error-request-to-elasticsearch-failed/54024 "2016-06-28T12:46:12Z")

</div>

Dear colleagues. could you help me to know the reason for below error maybe you experienced it. Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"illegal\_state\_exception","reason":"Field data loa…

---

## [How to get multiple fields on vertical bar based on time in kibana](https://discuss.elastic.co/t/how-to-get-multiple-fields-on-vertical-bar-based-on-time-in-kibana/110488)

<div class="topic-metadata">

**Author:** [@venkat545](https://discuss.elastic.co/u/venkat545)\
**Replies:** 6\
**Last updated:** [December 8, 2017, 4:57pm UTC](https://discuss.elastic.co/t/how-to-get-multiple-fields-on-vertical-bar-based-on-time-in-kibana/110488 "2017-12-08T16:57:51Z")

</div>

hello guys..I am new to Kibana ..i am unable to display the chart like this..based on time i am trying to make the time lapse of in outs with various breaks in a single bar how to accomplish this.could anyone help me out\[…

[Previous page](https://discuss.elastic.co/top.md?page=435&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=437&per_page=50&period=all)
