# Top **URL:** https://discuss.elastic.co/top.md?page=443&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 444 --- ## [How to check if the field exists before to define him as geoppoint](https://discuss.elastic.co/t/how-to-check-if-the-field-exists-before-to-define-him-as-geoppoint/214871)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 6\ **Last updated:** [January 27, 2020, 3:06pm UTC](https://discuss.elastic.co/t/how-to-check-if-the-field-exists-before-to-define-him-as-geoppoint/214871 "2020-01-27T15:06:59Z")
Hello, I use Filebeats, Logstash and Elasticsearch to parse differents types of logs files ( IIS, Syslog, Apache, ... ) and watch the result with Kibana. I want to add a map on my dashboard so I use geoip to get gps coo… --- ## [ELK Stack and CI/CD](https://discuss.elastic.co/t/elk-stack-and-ci-cd/109254)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [November 28, 2017, 5:30am UTC](https://discuss.elastic.co/t/elk-stack-and-ci-cd/109254 "2017-11-28T05:30:45Z")
Can you please share your views on ELK stack with CI and CD. Any standard procedures/process have been set to accomplish this process as part of Dev Ops activity? --- ## [Querying for documents which do not contain an element in an array field](https://discuss.elastic.co/t/querying-for-documents-which-do-not-contain-an-element-in-an-array-field/4341)
**Author:** [@Adam\_Warski](https://discuss.elastic.co/u/Adam_Warski)\ **Replies:** 2\ **Last updated:** [May 4, 2011, 10:42am UTC](https://discuss.elastic.co/t/querying-for-documents-which-do-not-contain-an-element-in-an-array-field/4341 "2011-05-04T10:42:53Z")
Suppose I have a document with a "tags" field which is an array (just as here http://www.elasticsearch.org/guide/reference/mapping/array-type.html) Is it possible to query for documents \*do not\* contain a given tag? … --- ## [How to collect containerized elasticsearch logs with filebeat](https://discuss.elastic.co/t/how-to-collect-containerized-elasticsearch-logs-with-filebeat/299118)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 7\ **Last updated:** [March 15, 2022, 3:10pm UTC](https://discuss.elastic.co/t/how-to-collect-containerized-elasticsearch-logs-with-filebeat/299118 "2022-03-15T15:10:19Z")
Hey I am setting up an observaiblity use case to test it with docker, and I want to collect Elasticsearch logs (gc, audit, etc.) using Filebeat. I have Elasticsearch running in a docker container, and I have filebeat ru… --- ## [Could not locate that index-pattern-field (id: @timestamp)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-timestamp/273737)
**Author:** [@majidbarz](https://discuss.elastic.co/u/majidbarz)\ **Replies:** 3\ **Last updated:** [May 22, 2021, 6:43pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-timestamp/273737 "2021-05-22T18:43:14Z")
anyone can help me? Error: Could not locate that index-pattern-field (id: @timestamp) at FieldParamType.deserialize (http://192.168.226.11:5601/39457/bundles/plugin/data/data.plugin.js:1:535357) at http://192.168.226.… --- ## [javax.net.ssl.SSLException: Inbound closed before receiving peer's close\_notify: possible truncation attack?](https://discuss.elastic.co/t/javax-net-ssl-sslexception-inbound-closed-before-receiving-peers-close-notify-possible-truncation-attack/58865)
**Author:** [@bujar\_metaj](https://discuss.elastic.co/u/bujar_metaj)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 2:21pm UTC](https://discuss.elastic.co/t/javax-net-ssl-sslexception-inbound-closed-before-receiving-peers-close-notify-possible-truncation-attack/58865 "2016-09-06T14:21:12Z")
Hi need help with this issue I am getting the following issues when enabling searchguard 2 and searchguard ssl javax.net.ssl.SSLException: Inbound closed before receiving peer's close\_notify: possible truncation att… --- ## [Run logstash as service giving error](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 5\ **Last updated:** [July 12, 2020, 6:17am UTC](https://discuss.elastic.co/t/run-logstash-as-service-giving-error/240461 "2020-07-12T06:17:42Z")
Hi All, I am able to run logstash as command line , but when I try to run it as a services . It is getting restarted after every 6 seconds and no data is getting loaded to elasticsearch I have placed my conf file in et… --- ## [Real Time Dashboard](https://discuss.elastic.co/t/real-time-dashboard/104835)
**Author:** [@hkothuri](https://discuss.elastic.co/u/hkothuri)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 2:40pm UTC](https://discuss.elastic.co/t/real-time-dashboard/104835 "2017-10-23T14:40:37Z")
Hi, I have just started with Elastic,Logstash and Kibana open source and trying to build Real Time Dashboards in Kibana. I'm pushing live data to elastic search from a 3rd party application. If i enable "Auto-Refresh" f… --- ## [The bulk request must be terminated by a newline](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline/280403)
**Author:** [@DrJHD](https://discuss.elastic.co/u/DrJHD)\ **Replies:** 4\ **Last updated:** [August 4, 2021, 11:25am UTC](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline/280403 "2021-08-04T11:25:02Z")
Despite reading the answers to the many variants of this question, I am stuck. I have tried 1, 2 and 3 "0a" characters at the end of my file (cut down - I have \>40 files) and get the same results. I must be missing somet… --- ## [Document\_type is being ignored](https://discuss.elastic.co/t/document-type-is-being-ignored/109667)
**Author:** [@Vivek\_Menon](https://discuss.elastic.co/u/Vivek_Menon)\ **Replies:** 4\ **Last updated:** [November 30, 2017, 6:29pm UTC](https://discuss.elastic.co/t/document-type-is-being-ignored/109667 "2017-11-30T18:29:03Z")
I am new to file beat. I am using filebeat to forward logs to logstash, from where it gets forwarded to elastic search. I am using version 6.0 for all of them. The problem I am having is that even if I set document\_typ… --- ## [To get total number of documents](https://discuss.elastic.co/t/to-get-total-number-of-documents/5537)
**Author:** [@arien](https://discuss.elastic.co/u/arien)\ **Replies:** 2\ **Last updated:** [October 8, 2011, 6:38pm UTC](https://discuss.elastic.co/t/to-get-total-number-of-documents/5537 "2011-10-08T18:38:21Z")
Hi; I want to fetch total number documents in an Index without using any query.I found the count api but for that query is required where i am only concerned with getting count of documents without query. Thanks; … --- ## [SSLHandshakeException: no cipher suites in common](https://discuss.elastic.co/t/sslhandshakeexception-no-cipher-suites-in-common/183929)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 5\ **Last updated:** [June 4, 2019, 6:21am UTC](https://discuss.elastic.co/t/sslhandshakeexception-no-cipher-suites-in-common/183929 "2019-06-04T06:21:58Z")
https://www.elastic.co/guide/en/elasticsearch/reference/7.1/configuring-tls.html#node-certificates Hi, I have a 3 node cluster, trying to setup the TLS security using the link above. Without enabling the below configs,… --- ## [Kibana show wrong time compared to the time value indexed in Elasticsearch](https://discuss.elastic.co/t/kibana-show-wrong-time-compared-to-the-time-value-indexed-in-elasticsearch/43992)
**Author:** [@gavinzhang](https://discuss.elastic.co/u/gavinzhang)\ **Replies:** 3\ **Last updated:** [March 14, 2016, 2:01am UTC](https://discuss.elastic.co/t/kibana-show-wrong-time-compared-to-the-time-value-indexed-in-elasticsearch/43992 "2016-03-14T02:01:09Z")
I have one "date" field stored in one index correctly. I can verify it by issue command "curl -XGET 'http://localhost:9200/myindex'. However, in KIbana I always get wrong time value that is the original time + 8 hours. … --- ## [Filtering Windows Events -](https://discuss.elastic.co/t/filtering-windows-events/85481)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 5\ **Last updated:** [May 18, 2017, 12:56am UTC](https://discuss.elastic.co/t/filtering-windows-events/85481 "2017-05-18T00:56:50Z")
I guess I have 2 questions... 1) We want to start going through all the windows command line and powershell logs, where is the best place to start filtering out the standard traffic on our network? I.E. this is norma… --- ## [Issues related to elasticsearch authentication](https://discuss.elastic.co/t/issues-related-to-elasticsearch-authentication/118590)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 7\ **Last updated:** [February 7, 2018, 1:30am UTC](https://discuss.elastic.co/t/issues-related-to-elasticsearch-authentication/118590 "2018-02-07T01:30:56Z")
I deployed elasticsearch into kubernetes cluster with 3 nodes, and the OS of each node is Oracle Linux 7.3. I started 3 elasticsearch instances (actually a POD in kubernetes cluster); one of them was elected as master n… --- ## [ElasticSearch S3 snapshot fails after writing test files](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-fails-after-writing-test-files/55744)
**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\ **Replies:** 8\ **Last updated:** [July 19, 2016, 8:51am UTC](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-fails-after-writing-test-files/55744 "2016-07-19T08:51:49Z")
I have configured a role in AWS to allow all operations on an s3 paths: s3:///foo/ and s3:///foo/\*. Then, I configured an S3 snapshot like: PUT /\_snapshot/s3\_backup { "type": "s3", "settings": { "bucket":… --- ## [Bad request when generating CSV -\> HPE\_HEADER\_OVERFLOW](https://discuss.elastic.co/t/bad-request-when-generating-csv-hpe-header-overflow/161831)
**Author:** [@Zzo](https://discuss.elastic.co/u/Zzo)\ **Replies:** 5\ **Last updated:** [January 22, 2019, 5:00pm UTC](https://discuss.elastic.co/t/bad-request-when-generating-csv-hpe-header-overflow/161831 "2019-01-22T17:00:49Z")
Hi, I'm running the basic edition of ES and Kibana 6.5.3. Since I moved from 6.5.0 to 6.5.3 I have some issue when generating CSV from the Discover. I have a popup with "Reporting error : Bad request". And in the kib… --- ## [Spring-kafka instrumentation - KafkaListenerEndpointContainer mono-thread](https://discuss.elastic.co/t/spring-kafka-instrumentation-kafkalistenerendpointcontainer-mono-thread/193810)
**Author:** [@gregjeanmart](https://discuss.elastic.co/u/gregjeanmart)\ **Replies:** 5\ **Last updated:** [August 11, 2019, 9:49am UTC](https://discuss.elastic.co/t/spring-kafka-instrumentation-kafkalistenerendpointcontainer-mono-thread/193810 "2019-08-11T09:49:05Z")
Hi there, I currently have a micro-services architecture composed of Spring-boot micro-services and communicating synchronously via Rest and asynchronously via Kafka messages. While the synchronous communication is ful… --- ## [How to get custom metrics in APM?](https://discuss.elastic.co/t/how-to-get-custom-metrics-in-apm/321116)
**Author:** [@stretch0](https://discuss.elastic.co/u/stretch0)\ **Replies:** 6\ **Last updated:** [December 16, 2022, 1:30pm UTC](https://discuss.elastic.co/t/how-to-get-custom-metrics-in-apm/321116 "2022-12-16T13:30:26Z")
I have setup application performance monitoring in my Nodejs application. I can see my metrics coming through for CPU / memory etc but can't seem to get things to work for custom metrics. I am following the docs on addi… --- ## [Adding new index-pattern in Kibana through REST API](https://discuss.elastic.co/t/adding-new-index-pattern-in-kibana-through-rest-api/191742)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 6\ **Last updated:** [July 25, 2019, 7:55am UTC](https://discuss.elastic.co/t/adding-new-index-pattern-in-kibana-through-rest-api/191742 "2019-07-25T07:55:50Z")
Hi I'm upgrading from 5.6.13 to 7.0.0. I came to know there are few breaking changes. Earlier I use to have a script to create index-pattern, visualizations, dashboards through REST API Can you direct me a sample to d… --- ## [@timestamp kibana and log time are differents](https://discuss.elastic.co/t/timestamp-kibana-and-log-time-are-differents/175217)
**Author:** [@zolthar-z](https://discuss.elastic.co/u/zolthar-z)\ **Replies:** 2\ **Last updated:** [April 23, 2019, 4:56pm UTC](https://discuss.elastic.co/t/timestamp-kibana-and-log-time-are-differents/175217 "2019-04-23T16:56:13Z")
HI I have a situation with my elastic platform, I send logs from filebeat directly to elasticseach and visualize it using kibana, the problem is that the logs sent from filebeat have the time for the client servers and … --- ## [Aggregations without count](https://discuss.elastic.co/t/aggregations-without-count/58340)
**Author:** [@Emrah](https://discuss.elastic.co/u/Emrah)\ **Replies:** 1\ **Last updated:** [August 19, 2016, 8:15am UTC](https://discuss.elastic.co/t/aggregations-without-count/58340 "2016-08-19T08:15:58Z")
I just wonder that if i can exclude doc counts calculating when i get aggregations. Because at the moment i don't need doc counts. Does Elasticsearch make an extra effort to calculate doc counts on aggregation, or basica… --- ## [Live threat map with elastic & Kibana](https://discuss.elastic.co/t/live-threat-map-with-elastic-kibana/98093)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [August 25, 2017, 8:35pm UTC](https://discuss.elastic.co/t/live-threat-map-with-elastic-kibana/98093 "2017-08-25T20:35:30Z")
Hello Team, Is it possible with Kibana & Elasticsearch t configure a live cyber threat map? I am sure you guys must have seen on the internet something like this where live threat map displays the Geo and IP addresse… --- ## [\[Solved\]Tcp input/output](https://discuss.elastic.co/t/solved-tcp-input-output/27411)
**Author:** [@DavidL](https://discuss.elastic.co/u/DavidL)\ **Replies:** 3\ **Last updated:** [August 26, 2016, 3:01pm UTC](https://discuss.elastic.co/t/solved-tcp-input-output/27411 "2016-08-26T15:01:04Z")
I have two logstash instances on two machines, trying to receive json from to the other, In the receiver I have: input { tcp { port =\> 9302 codec =\> "json" } } And in the sender I have outp… --- ## [Fleet setup - cannot enable kibana security](https://discuss.elastic.co/t/fleet-setup-cannot-enable-kibana-security/267117)
**Author:** [@bleed2002](https://discuss.elastic.co/u/bleed2002)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 9:08am UTC](https://discuss.elastic.co/t/fleet-setup-cannot-enable-kibana-security/267117 "2021-03-25T09:08:42Z")
Hi there, I want to try out central management for Elastic Agents, but i cannot get "Kibana security" enabled, although I'm sure it is configured correctly. I'm running the stack on docker (19.03.12), ELK\_VERSION is 7.… --- ## [How to update elasticsearch.yml if I am using Elastic cloud?](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud/200291)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 4\ **Last updated:** [September 20, 2019, 12:40am UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud/200291 "2019-09-20T00:40:58Z")
I am trying to set up Slack notification using the following reference: https://www.elastic.co/guide/en/elastic-stack-overview/current/actions-slack.html However, in order to send those notifications, I need to set up … --- ## [ES Embedded in 7.0](https://discuss.elastic.co/t/es-embedded-in-7-0/219823)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 1\ **Last updated:** [February 18, 2020, 5:56pm UTC](https://discuss.elastic.co/t/es-embedded-in-7-0/219823 "2020-02-18T17:56:49Z")
Is it possible to run ES embedded in 7.0? I am running into the same situation described in this previous thread. One of the participants mentioned that running ES embedded is deprecated in 7.0. I didn't see any mention … --- ## [Force a node to be the master](https://discuss.elastic.co/t/force-a-node-to-be-the-master/261467)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 6\ **Last updated:** [January 19, 2021, 9:26am UTC](https://discuss.elastic.co/t/force-a-node-to-be-the-master/261467 "2021-01-19T09:26:23Z")
Just curious, how to fix a broken cluster like this: Via official Helm release, I made a 3 nodes cluster, was working fine: node-0 / node-1 / node-2 I scaled down the STS to 0, to remove all pods/nodes. Then when I s… --- ## [Update format for an existing field of date type](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 3\ **Last updated:** [September 3, 2019, 10:31am UTC](https://discuss.elastic.co/t/update-format-for-an-existing-field-of-date-type/197787 "2019-09-03T10:31:53Z")
I currently use ElasticSearch 7.2.0. I followed the instructions here to update the format of an existing field of date type: { "mappings": { "properties": { "TimeStamp": { "type": "date", … --- ## [Spring-boot-starter-data-elasticsearch causes a problem](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-causes-a-problem/170608)
**Author:** [@raychou1203](https://discuss.elastic.co/u/raychou1203)\ **Replies:** 3\ **Last updated:** [March 3, 2019, 5:19am UTC](https://discuss.elastic.co/t/spring-boot-starter-data-elasticsearch-causes-a-problem/170608 "2019-03-03T05:19:48Z")
When I am using elasticsearch through spring-boot-starter-data-elasticsearch, it occurs a problem when run a junit test. Also, there is a spring-boot-starter-data-redis and someone says that it cause the problem. java.… --- ## [Embedding elasticsearch into app](https://discuss.elastic.co/t/embedding-elasticsearch-into-app/37830)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 6\ **Last updated:** [December 29, 2015, 10:16am UTC](https://discuss.elastic.co/t/embedding-elasticsearch-into-app/37830 "2015-12-29T10:16:59Z")
Hello, We are distributing ES 2.1 within our product. So ES is embbeded into our application. We are seeing several posts where it's told that embedding ES is not a good idea for production environments. Is this real… --- ## [Setting a timestamp from a JSON parsed object](https://discuss.elastic.co/t/setting-a-timestamp-from-a-json-parsed-object/86910)
**Author:** [@Vedran\_Maricevic](https://discuss.elastic.co/u/Vedran_Maricevic)\ **Replies:** 2\ **Last updated:** [May 29, 2017, 7:21am UTC](https://discuss.elastic.co/t/setting-a-timestamp-from-a-json-parsed-object/86910 "2017-05-29T07:21:17Z")
I am having an issue with setting a timestamp from a JSON parse. I have this string (valid JSON): \[{"orderNumber":"423523-4325-3212-4235-463a72e76fe8","externalOrderNumber":"reactivate\_22d6ff0d8f55eb821be14df9d35505a6… --- ## [Elasticsearch housekeeping](https://discuss.elastic.co/t/elasticsearch-housekeeping/185518)
**Author:** [@dey\_subhro](https://discuss.elastic.co/u/dey_subhro)\ **Replies:** 7\ **Last updated:** [June 26, 2019, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-housekeeping/185518 "2019-06-26T14:29:09Z")
Hi, I am using Amazon ES, can someone tell me what is the ideal way of automatically deleting the old indexes from the cluster considering Amazon ES does not provide the ILM features ? I have 25 GB of daily index and I… --- ## [How to plot multiple series by multiple indexes into one visualization?](https://discuss.elastic.co/t/how-to-plot-multiple-series-by-multiple-indexes-into-one-visualization/93872)
**Author:** [@monai](https://discuss.elastic.co/u/monai)\ **Replies:** 2\ **Last updated:** [July 20, 2017, 7:59am UTC](https://discuss.elastic.co/t/how-to-plot-multiple-series-by-multiple-indexes-into-one-visualization/93872 "2017-07-20T07:59:28Z")
I read the documentation on Time Series visualization that it can create multiple series by field in the same index. However, I want to create a line chart with several series that distinguished by index e.g. green lin… --- ## [Logstash.licensechecker.licensereader error when enable SSL between logstash and elasticsearch](https://discuss.elastic.co/t/logstash-licensechecker-licensereader-error-when-enable-ssl-between-logstash-and-elasticsearch/202640)
**Author:** [@rambo](https://discuss.elastic.co/u/rambo)\ **Replies:** 1\ **Last updated:** [October 11, 2019, 8:36am UTC](https://discuss.elastic.co/t/logstash-licensechecker-licensereader-error-when-enable-ssl-between-logstash-and-elasticsearch/202640 "2019-10-11T08:36:38Z")
Hi I enabled SSL, but logstash met below error: \[2019-10-08T17:21:54,292\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:message=\>"No Available connections"} … --- ## [Migration from ES 2.x to ES 5.x](https://discuss.elastic.co/t/migration-from-es-2-x-to-es-5-x/73211)
**Author:** [@cfifua](https://discuss.elastic.co/u/cfifua)\ **Replies:** 7\ **Last updated:** [February 21, 2017, 10:01pm UTC](https://discuss.elastic.co/t/migration-from-es-2-x-to-es-5-x/73211 "2017-02-21T22:01:32Z")
We have created new ES cluster v5.x. We have added new backup repository for restoring (old ES 2.x). We have restored from our snapshot and everything was fine. We have retention period for our ES snapshots. We are using… --- ## [Merging the data column wise from two different indexes](https://discuss.elastic.co/t/merging-the-data-column-wise-from-two-different-indexes/363296)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 6\ **Last updated:** [July 19, 2024, 10:07am UTC](https://discuss.elastic.co/t/merging-the-data-column-wise-from-two-different-indexes/363296 "2024-07-19T10:07:00Z")
Hi, I am trying to merge two indexes column wise based on a common key from both the indices. I have tried logstash ruby code, transforms but nothing seems working to me. I am getting individual records having the colum… --- ## [Splitting message into fields to create chart based on those fields](https://discuss.elastic.co/t/splitting-message-into-fields-to-create-chart-based-on-those-fields/92291)
**Author:** [@BentCoder](https://discuss.elastic.co/u/BentCoder)\ **Replies:** 6\ **Last updated:** [July 12, 2017, 8:16pm UTC](https://discuss.elastic.co/t/splitting-message-into-fields-to-create-chart-based-on-those-fields/92291 "2017-07-12T20:16:27Z")
I want to be able to split log "message" into three fields (log\_time, log\_level, log\_data) so that I can create Pie Chart based on those fields - see image below. How do I do it? Current Logstash config: input { … --- ## [No data after CSV Export - Kibana](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/288486)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 5\ **Last updated:** [December 8, 2021, 7:24pm UTC](https://discuss.elastic.co/t/no-data-after-csv-export-kibana/288486 "2021-12-08T19:24:34Z")
Continuing the discussion from Reporting - CSV Export: contains partial data: Hi Team, currently we are facing two issues related to csv Export. If index is frozen then how to export data in csv as we are getting emp… --- ## [Logstash not processing data](https://discuss.elastic.co/t/logstash-not-processing-data/193726)
**Author:** [@mzidy](https://discuss.elastic.co/u/mzidy)\ **Replies:** 5\ **Last updated:** [August 6, 2019, 10:14am UTC](https://discuss.elastic.co/t/logstash-not-processing-data/193726 "2019-08-06T10:14:36Z")
Hi guys, Trying to send data Logstash -\> Elasticsearch (WIN 10, both are running on localhost, configs are tested and are ok) and I'm experiencing issue that actual data is not sent (this is the only warning I get): \[2… --- ## [How to handle errors with logstash?](https://discuss.elastic.co/t/how-to-handle-errors-with-logstash/44174)
**Author:** [@Mehmet\_Ozer](https://discuss.elastic.co/u/Mehmet_Ozer)\ **Replies:** 2\ **Last updated:** [March 24, 2016, 5:59pm UTC](https://discuss.elastic.co/t/how-to-handle-errors-with-logstash/44174 "2016-03-24T17:59:23Z")
Hello everyone, I just a have a question about error handling in Logstash. For example I have a cluster like; kafka -\> logstash -\> Elasticsearch and this logstash is also connected to a HDFS. so either kafk… --- ## [Unable to install fleet server](https://discuss.elastic.co/t/unable-to-install-fleet-server/282525)
**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\ **Replies:** 5\ **Last updated:** [August 26, 2021, 1:41pm UTC](https://discuss.elastic.co/t/unable-to-install-fleet-server/282525 "2021-08-26T13:41:43Z")
Hi @scottdfedorov, Since this is a production environment, I tried installing fleet by providing my own certificates and this is the error I see: sudo ./elastic-agent install --url=https://abc:8220 \\ -f \\ --fleet-serve… --- ## [How to do custom docker image that has certain features disabled](https://discuss.elastic.co/t/how-to-do-custom-docker-image-that-has-certain-features-disabled/132007)
**Author:** [@tsullivan](https://discuss.elastic.co/u/tsullivan)\ **Replies:** 5\ **Last updated:** [May 16, 2018, 5:02pm UTC](https://discuss.elastic.co/t/how-to-do-custom-docker-image-that-has-certain-features-disabled/132007 "2018-05-16T17:02:13Z")
Hi, I'm relatively new to Docker, and I would like to make a custom docker image of Kibana based on the official one, docker.elastic.co/kibana/kibana:6.2.4, that includes Canvas. My Dockerfile looks like: FROM docker.el… --- ## [TOO\_MANY\_REQUESTS/12/disk usage exceeded flood-stage watermark, index has read-only-allow-delete block](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/377233)
**Author:** [@Jackman](https://discuss.elastic.co/u/Jackman)\ **Replies:** 8\ **Last updated:** [April 17, 2025, 8:49am UTC](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/377233 "2025-04-17T08:49:19Z")
Hey Guys im currently running an elastic-search container on my docker where im running a local development area, which all seemed fine at first but at one point i got the error in the title or to be exact: 2025-04-17 0… --- ## [Elasticsearch add new field in index by using update by query plugin](https://discuss.elastic.co/t/elasticsearch-add-new-field-in-index-by-using-update-by-query-plugin/51792)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 4\ **Last updated:** [June 3, 2016, 2:54pm UTC](https://discuss.elastic.co/t/elasticsearch-add-new-field-in-index-by-using-update-by-query-plugin/51792 "2016-06-03T14:54:14Z")
Hi All, I want to add a new field (with value) to all documents which is already indexed. I guess we can possible to do it using bulk update\_by\_query plugin. We are using Elasticsearch 1.7.3 version in DEV server a… --- ## [Kibana Greater Than or Equal To](https://discuss.elastic.co/t/kibana-greater-than-or-equal-to/140932)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 6\ **Last updated:** [July 27, 2018, 4:20pm UTC](https://discuss.elastic.co/t/kibana-greater-than-or-equal-to/140932 "2018-07-27T16:20:33Z")
Good Morning! I need to perform a Range query in Kibana, but have run into a problem. From the Discover tab, I need to perform this query (count(sourcename:"name") \>= 1 )to get back a list of documents. I have not fig… --- ## [How to move the whole data to main memory](https://discuss.elastic.co/t/how-to-move-the-whole-data-to-main-memory/8766)
**Author:** [@Jalal](https://discuss.elastic.co/u/Jalal)\ **Replies:** 6\ **Last updated:** [September 17, 2012, 5:24pm UTC](https://discuss.elastic.co/t/how-to-move-the-whole-data-to-main-memory/8766 "2012-09-17T17:24:52Z")
Hi, I am trying to leverage max performance out of elasticsearch by moving the whole data to main memory, my whole data set and index are like 2GB and I have huge amount of ram, I want to move everything to main me… --- ## [Problem installing X-pack](https://discuss.elastic.co/t/problem-installing-x-pack/72069)
**Author:** [@venkata\_sreekanth\_bh](https://discuss.elastic.co/u/venkata_sreekanth_bh)\ **Replies:** 5\ **Last updated:** [January 18, 2017, 8:39pm UTC](https://discuss.elastic.co/t/problem-installing-x-pack/72069 "2017-01-18T20:39:20Z")
I am trying to install x-pack offline. I don't know why it is failing. I put the same url in the browser and it downloaded the file. D:\\kibana-5.1.2-windows-x86\\bin\>kibana-plugin.bat install file:///D:/x-pack-5.1. 2.zi… --- ## [Grok filter for mysql-slow-logs produces grokparsefailure but passes tests](https://discuss.elastic.co/t/grok-filter-for-mysql-slow-logs-produces-grokparsefailure-but-passes-tests/55799)
**Author:** [@Jon\_Slusher](https://discuss.elastic.co/u/Jon_Slusher)\ **Replies:** 4\ **Last updated:** [July 20, 2016, 9:37pm UTC](https://discuss.elastic.co/t/grok-filter-for-mysql-slow-logs-produces-grokparsefailure-but-passes-tests/55799 "2016-07-20T21:37:27Z")
I created a grok filter using the excellent grok constructor online. I pulled an example message string from a parsed mysql-slow-log and tested it using the grok pattern tester and it passed that test. When I apply it wi… --- ## [Change default timestamp field of Index](https://discuss.elastic.co/t/change-default-timestamp-field-of-index/304522)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 2\ **Last updated:** [May 13, 2022, 3:20am UTC](https://discuss.elastic.co/t/change-default-timestamp-field-of-index/304522 "2022-05-13T03:20:03Z")
I have an index pattern in kibana whose timestamp is in UTC, I want to change this default timestamp to another date field. Is there a way to achieve this? [Previous page](https://discuss.elastic.co/top.md?page=442&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=444&per_page=50&period=all)