# Top

**URL:** https://discuss.elastic.co/top.md?page=449&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 450

---

## [Pending tasks queue](https://discuss.elastic.co/t/pending-tasks-queue/61915)

<div class="topic-metadata">

**Author:** [@ankush\_goswami](https://discuss.elastic.co/u/ankush_goswami)\
**Replies:** 7\
**Last updated:** [October 4, 2016, 1:04pm UTC](https://discuss.elastic.co/t/pending-tasks-queue/61915 "2016-10-04T13:04:51Z")

</div>

Hi Team, Below os my cluster health and I am not able to ingest any logs into ES because as soon as Logstash consumer starts to use Auto bulk api of elasticsearch. Documents are not getting indexed and my pending tasks…

---

## [How configure .p12 certificate in Elasticsearch TLS/SSL?](https://discuss.elastic.co/t/how-configure-p12-certificate-in-elasticsearch-tls-ssl/158204)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 3\
**Last updated:** [November 26, 2018, 10:59pm UTC](https://discuss.elastic.co/t/how-configure-p12-certificate-in-elasticsearch-tls-ssl/158204 "2018-11-26T22:59:03Z")

</div>

Hi All , I have a 6.4 version 5 node cluster . Each nod had a ".p12" certificate and a password 12345. Followed Doc: https://www.elastic.co/guide/en/elasticsearch/reference/6.4/configuring-tls.html#tls-transport My c…

---

## [The Pipeline is blocked](https://discuss.elastic.co/t/the-pipeline-is-blocked/55221)

<div class="topic-metadata">

**Author:** [@mits](https://discuss.elastic.co/u/mits)\
**Replies:** 4\
**Last updated:** [July 12, 2016, 10:42am UTC](https://discuss.elastic.co/t/the-pipeline-is-blocked/55221 "2016-07-12T10:42:12Z")

</div>

Having some trouble resolving this issue on my own. Here is the error at the end of my logstash.log {:timestamp=\>"2016-07-11T14:20:06.631000-0400", :message=\>"Beats input: The circuit breaker has detected a slowdown o…

---

## [Logstash plugin flush interval](https://discuss.elastic.co/t/logstash-plugin-flush-interval/25654)

<div class="topic-metadata">

**Author:** [@karthikbox](https://discuss.elastic.co/u/karthikbox)\
**Replies:** 1\
**Last updated:** [July 28, 2015, 6:07pm UTC](https://discuss.elastic.co/t/logstash-plugin-flush-interval/25654 "2015-07-28T18:07:24Z")

</div>

Hi all, I've been writing a custom filter plugin for logstash. I have a cleanup method which needs to be called periodically (lets say 3 sec). I understand that this is achievable by overriding "flush" method in my plu…

---

## [Elasticsearch - Could not index event to Elasticsearch status=\>400](https://discuss.elastic.co/t/elasticsearch-could-not-index-event-to-elasticsearch-status-400/311101)

<div class="topic-metadata">

**Author:** [@Maruthappan\_Muthu](https://discuss.elastic.co/u/Maruthappan_Muthu)\
**Replies:** 4\
**Last updated:** [August 10, 2022, 6:38am UTC](https://discuss.elastic.co/t/elasticsearch-could-not-index-event-to-elasticsearch-status-400/311101 "2022-08-10T06:38:35Z")

</div>

We are trying to poll the data from a device (PDU) through SNMP Input Plugin. The device MIB file has been imported to ELK logstash, as per SNMP input plugin | Logstash Reference \[8.3\] | Elastic. When executing the snmp…

---

## [Winlogbeat : Microsoft-Windows-PrintService/Operational](https://discuss.elastic.co/t/winlogbeat-microsoft-windows-printservice-operational/86200)

<div class="topic-metadata">

**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Replies:** 8\
**Last updated:** [May 19, 2017, 1:50pm UTC](https://discuss.elastic.co/t/winlogbeat-microsoft-windows-printservice-operational/86200 "2017-05-19T13:50:05Z")

</div>

Hi, I want to index in Elasticsearch all print jobs via Winlogbeat. So i installed on a Windows Server 2008 R2 Winlogbeat and configured to send via Logstash the events. I recieve events but not the one i want. I hav…

---

## [Logstash doesn't appear to be reading config'd files](https://discuss.elastic.co/t/logstash-doesnt-appear-to-be-reading-configd-files/2144)

<div class="topic-metadata">

**Author:** [@nseery](https://discuss.elastic.co/u/nseery)\
**Replies:** 6\
**Last updated:** [June 11, 2015, 3:17pm UTC](https://discuss.elastic.co/t/logstash-doesnt-appear-to-be-reading-configd-files/2144 "2015-06-11T15:17:45Z")

</div>

Was running Logstash 1.5.0 on Debian 7 Wheezy. It was running fine. Upgraded to Debian 8 Jessie, and now it's running, but doesn't display data from the configured log files. It looks like it's only reading authentica…

---

## [How to config Logstash to set custom type](https://discuss.elastic.co/t/how-to-config-logstash-to-set-custom-type/45616)

<div class="topic-metadata">

**Author:** [@tuananhtd](https://discuss.elastic.co/u/tuananhtd)\
**Replies:** 4\
**Last updated:** [March 29, 2016, 6:18am UTC](https://discuss.elastic.co/t/how-to-config-logstash-to-set-custom-type/45616 "2016-03-29T06:18:25Z")

</div>

Hi guys! I know that this maybe a duplicated topic but I guess that the old topic is just outdated since I couldn't make it works. In my project I use FileBeat to ship JSON logs to Logstash. I want to have different ty…

---

## [Oracle vs Open JDK version](https://discuss.elastic.co/t/oracle-vs-open-jdk-version/144553)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [August 20, 2018, 1:53am UTC](https://discuss.elastic.co/t/oracle-vs-open-jdk-version/144553 "2018-08-20T01:53:01Z")

</div>

I see in the documentation (https://www.elastic.co/guide/en/elasticsearch/reference/current/\_installation.html) it is recommended to use the oracle JDK version. Let me know whether we can use Open JDK instead of Oracle J…

---

## [Kibana error Content-type header \[application/x-ndjson; charset=UTF-8\] is not supported](https://discuss.elastic.co/t/kibana-error-content-type-header-application-x-ndjson-charset-utf-8-is-not-supported/109598)

<div class="topic-metadata">

**Author:** [@ricamz](https://discuss.elastic.co/u/ricamz)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 2:21pm UTC](https://discuss.elastic.co/t/kibana-error-content-type-header-application-x-ndjson-charset-utf-8-is-not-supported/109598 "2017-11-30T14:21:05Z")

</div>

Hi. I am sending a log (from a kannel instance) through filebeat to logstash and then to elastic search cluster. All components are in the latest version (6.0.0) and I am getting the error "Content-type header \[applic…

---

## [beginsWith / endsWith / contains](https://discuss.elastic.co/t/beginswith-endswith-contains/5746)

<div class="topic-metadata">

**Author:** [@dawi](https://discuss.elastic.co/u/dawi)\
**Replies:** 2\
**Last updated:** [November 3, 2011, 8:59am UTC](https://discuss.elastic.co/t/beginswith-endswith-contains/5746 "2011-11-03T08:59:32Z")

</div>

Hi, I have to implement a search backend for our product to replace the old sql queries. The index is build using the following default analyzer settings: index.analysis.analyzer.default.filter = lowercase index…

---

## [Can't import dashboard via API - value must be an object](https://discuss.elastic.co/t/cant-import-dashboard-via-api-value-must-be-an-object/160561)

<div class="topic-metadata">

**Author:** [@robaato](https://discuss.elastic.co/u/robaato)\
**Replies:** 5\
**Last updated:** [December 14, 2018, 10:56am UTC](https://discuss.elastic.co/t/cant-import-dashboard-via-api-value-must-be-an-object/160561 "2018-12-14T10:56:08Z")

</div>

I exported a dashboard to export.json using web UI. Am trying to import via API: curl -XPOST 'http://localhost:5601/api/kibana/dashboards/import' -H 'kbn-xsrf:true' -H 'Content-type:application/json' --data @export.js…

---

## [Newbie: Grok Pattern for Cisco FirePower Conf file](https://discuss.elastic.co/t/newbie-grok-pattern-for-cisco-firepower-conf-file/56671)

<div class="topic-metadata">

**Author:** [@Tyler\_Siemers](https://discuss.elastic.co/u/Tyler_Siemers)\
**Replies:** 3\
**Last updated:** [July 29, 2016, 12:16pm UTC](https://discuss.elastic.co/t/newbie-grok-pattern-for-cisco-firepower-conf-file/56671 "2016-07-29T12:16:46Z")

</div>

I am trying to setup a basic test grok filter to grab syslog messages from "Cisco Sourcefire". To start I am only grabbing logs related to blocked events. Here is a sample log message: Jul 28 18:52:51 CentralFP1 URLb…

---

## [Exiting: error loading config file: yaml: line 26: did not find expected key](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-26-did-not-find-expected-key/334250)

<div class="topic-metadata">

**Author:** [@FredMir](https://discuss.elastic.co/u/FredMir)\
**Replies:** 8\
**Last updated:** [June 5, 2023, 1:47pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-26-did-not-find-expected-key/334250 "2023-06-05T13:47:56Z")

</div>

I installed filebeat-7.16.3-x86\_64.rpm on a different server and trying to send output logs to logstash but I receive this error when try to run filebeat. Also, when trying to enable modules I get the same error. Would y…

---

## [Смена названия индекса](https://discuss.elastic.co/t/topic/161708)

<div class="topic-metadata">

**Author:** [@acidborn60](https://discuss.elastic.co/u/acidborn60)\
**Replies:** 8\
**Last updated:** [December 21, 2018, 3:22pm UTC](https://discuss.elastic.co/t/topic/161708 "2018-12-21T15:22:18Z")

</div>

Здравствуйте! Развернул filebeat (6.5.2) в кластере kubernetes, логи благополучно отправляются в elasticsearch. Появилось желание поменять название индекса, чтобы в названии был namespace. Внёс изменение в секцию: outp…

---

## [Kibana sometimes refuses connection behind nginx](https://discuss.elastic.co/t/kibana-sometimes-refuses-connection-behind-nginx/29755)

<div class="topic-metadata">

**Author:** [@das\_J](https://discuss.elastic.co/u/das_J)\
**Replies:** 5\
**Last updated:** [December 5, 2015, 12:07am UTC](https://discuss.elastic.co/t/kibana-sometimes-refuses-connection-behind-nginx/29755 "2015-12-05T00:07:49Z")

</div>

I am running Kibana 4.1.2 behind nginx 1.8.0. I am also running Icinga 2 which checks if Kibana is running. In my nginx error log there is (for each check) this error: 2015/09/22 09:22:38 \[error\] 10626#0: \*186124 con…

---

## [Accent-insensitive search](https://discuss.elastic.co/t/accent-insensitive-search/218404)

<div class="topic-metadata">

**Author:** [@danielchodusov](https://discuss.elastic.co/u/danielchodusov)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 5:12pm UTC](https://discuss.elastic.co/t/accent-insensitive-search/218404 "2020-02-10T17:12:02Z")

</div>

Hi, after spending hours trying to figure out I need a help with: How to search accent-insensitive + case insensitive? I have created an index: curl -X PUT "localhost:9200/my\_index?pretty" -H 'Content-Type: applicatio…

---

## [Какие требования для установки Elasticsearch,Кибаны](https://discuss.elastic.co/t/elasticsearch/73292)

<div class="topic-metadata">

**Author:** [@bobviivi](https://discuss.elastic.co/u/bobviivi)\
**Replies:** 1\
**Last updated:** [January 31, 2017, 1:44am UTC](https://discuss.elastic.co/t/elasticsearch/73292 "2017-01-31T01:44:24Z")

</div>

Я в Elasticsearch полный ноль. Получил задание по настройке и конфигурации. Пытаюсь понять какой сервер(а) нужно заказать. В документации не нашел системные требование (может плохо искал). как я понимаю это будет зав…

---

## [How to extract file name from source vairable](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 7\
**Last updated:** [February 8, 2017, 10:55am UTC](https://discuss.elastic.co/t/how-to-extract-file-name-from-source-vairable/74347 "2017-02-08T10:55:05Z")

</div>

HI Team, I need to extract the source field, when i process im getting grok parse failure please find the belwo image for your reference, Im using below grok pattern, %{PATH}/%{UUID:requestFileId}

---

## [Bootstrap checks failed,](https://discuss.elastic.co/t/bootstrap-checks-failed/287674)

<div class="topic-metadata">

**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\
**Replies:** 4\
**Last updated:** [November 24, 2021, 4:59pm UTC](https://discuss.elastic.co/t/bootstrap-checks-failed/287674 "2021-11-24T16:59:17Z")

</div>

Using this repository Getting below error, as per the error checked the configuration and its all same as expected ERROR: \[1\] bootstrap checks failed. You must address the points described in the following \[1\] lines b…

---

## [Can't setup password for Elasticsearch cluster with multiple master nodes](https://discuss.elastic.co/t/cant-setup-password-for-elasticsearch-cluster-with-multiple-master-nodes/199686)

<div class="topic-metadata">

**Author:** [@avinash9999](https://discuss.elastic.co/u/avinash9999)\
**Replies:** 2\
**Last updated:** [September 25, 2019, 3:23am UTC](https://discuss.elastic.co/t/cant-setup-password-for-elasticsearch-cluster-with-multiple-master-nodes/199686 "2019-09-25T03:23:00Z")

</div>

Not able to setup password for Elasticsearch cluster with 3 (master + data) nodes. I took advice from various post of many Elasticsearch Engineers to create cluster with 3 minimum nodes so I have create my cluster with …

---

## [Extract data with a Scripted Field - get domain name from URL string?](https://discuss.elastic.co/t/extract-data-with-a-scripted-field-get-domain-name-from-url-string/61746)

<div class="topic-metadata">

**Author:** [@Grant\_Griffith](https://discuss.elastic.co/u/Grant_Griffith)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 8:14pm UTC](https://discuss.elastic.co/t/extract-data-with-a-scripted-field-get-domain-name-from-url-string/61746 "2016-12-13T20:14:48Z")

</div>

Hey everyone, I'm using an ELK stack for our bind (DNS) query logs and would like to create a "Top Domains" visualization which I can almost do with the full 'dns\_dest' field. But, I don't want the full URL of the lookup…

---

## [Logstash created Index || index.lifecycle.rollover\_alias is empty or not defined](https://discuss.elastic.co/t/logstash-created-index-index-lifecycle-rollover-alias-is-empty-or-not-defined/272240)

<div class="topic-metadata">

**Author:** [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:31pm UTC](https://discuss.elastic.co/t/logstash-created-index-index-lifecycle-rollover-alias-is-empty-or-not-defined/272240 "2021-05-10T23:31:37Z")

</div>

Hi Elastic Team, I have Indices in my Elastic cluster created from logstash based on date regex. And these indices can be deleted after 3 days. but below error comes up for all indices. \*\*\*Index lifecycle error illega…

---

## [Combining Multiple Config Files](https://discuss.elastic.co/t/combining-multiple-config-files/58840)

<div class="topic-metadata">

**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Replies:** 7\
**Last updated:** [August 24, 2016, 9:11pm UTC](https://discuss.elastic.co/t/combining-multiple-config-files/58840 "2016-08-24T21:11:13Z")

</div>

Hi, How would I be able to combine multiple config files to push data to elasticsearch. I currently have 2 csv files that have different column names and data results. I want to be able to run multiple config files a…

---

## [Logstash 6.0 to elasticsearch 5.6.4 get a 503](https://discuss.elastic.co/t/logstash-6-0-to-elasticsearch-5-6-4-get-a-503/108748)

<div class="topic-metadata">

**Author:** [@rj-reilly](https://discuss.elastic.co/u/rj-reilly)\
**Replies:** 6\
**Last updated:** [November 22, 2017, 6:08pm UTC](https://discuss.elastic.co/t/logstash-6-0-to-elasticsearch-5-6-4-get-a-503/108748 "2017-11-22T18:08:00Z")

</div>

Hi, I upgraded logstash to 6.0 to take advantage of multiple pipelines and logstash receives a 503 from the already working elasticsearch. below is my config and conf logstash.yml path.data: /var/lib/logstash path.lo…

---

## [Script filtering by nested object size problem](https://discuss.elastic.co/t/script-filtering-by-nested-object-size-problem/79622)

<div class="topic-metadata">

**Author:** [@psu](https://discuss.elastic.co/u/psu)\
**Replies:** 5\
**Last updated:** [April 21, 2017, 9:21am UTC](https://discuss.elastic.co/t/script-filtering-by-nested-object-size-problem/79622 "2017-04-21T09:21:05Z")

</div>

I have a personal messages system. Each message contains MEMBERS nested object "MEMBERS" : { "type" : "nested", "properties" : { "ID" : { "type" : "long" …

---

## [ERROR: X-Pack Security is disabled by configuration. - dp](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration-dp/213452)

<div class="topic-metadata">

**Author:** [@es4dp](https://discuss.elastic.co/u/es4dp)\
**Replies:** 1\
**Last updated:** [January 3, 2020, 4:12am UTC](https://discuss.elastic.co/t/error-x-pack-security-is-disabled-by-configuration-dp/213452 "2020-01-03T04:12:45Z")

</div>

Hi All, I have 3 nodes 7.2.1 cluster running on Ubuntu with .tar.gz distribution. elasticsearch.yaml: xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.securi…

---

## [Winlogbeat and Scheduled Task Logs (or others)](https://discuss.elastic.co/t/winlogbeat-and-scheduled-task-logs-or-others/136517)

<div class="topic-metadata">

**Author:** [@wyliebsd](https://discuss.elastic.co/u/wyliebsd)\
**Replies:** 4\
**Last updated:** [June 19, 2018, 4:25pm UTC](https://discuss.elastic.co/t/winlogbeat-and-scheduled-task-logs-or-others/136517 "2018-06-19T16:25:41Z")

</div>

Could someone possibly assist me in capturing Schedule Task logs with Winlogbeat? Right now my config is like this: winlogbeat.event\_logs: - name: Application ignore\_older: 72h - name: Security - name: System -…

---

## [How to fix signal red?](https://discuss.elastic.co/t/how-to-fix-signal-red/216945)

<div class="topic-metadata">

**Author:** [@Nobuo1106](https://discuss.elastic.co/u/Nobuo1106)\
**Replies:** 6\
**Last updated:** [January 29, 2020, 9:50am UTC](https://discuss.elastic.co/t/how-to-fix-signal-red/216945 "2020-01-29T09:50:51Z")

</div>

I am very new to Elastic. The project, which I was assigned, uses Elastic and worked without problem, but from a few days ago we could not be able to reach Elastic. When I command curl http://localhost:9200/\_cluster/…

---

## [Escaping html in elastic search response](https://discuss.elastic.co/t/escaping-html-in-elastic-search-response/179930)

<div class="topic-metadata">

**Author:** [@Valentin](https://discuss.elastic.co/u/Valentin)\
**Replies:** 7\
**Last updated:** [June 19, 2019, 11:51am UTC](https://discuss.elastic.co/t/escaping-html-in-elastic-search-response/179930 "2019-06-19T11:51:08Z")

</div>

Hi everyone, To enable highlighting in elasticsearch search result and avoid javascript injection, we decided to escape special characters before indexing them. But doing this, we have remarked that ascii folding featur…

---

## [How to change color of Bar graph](https://discuss.elastic.co/t/how-to-change-color-of-bar-graph/48790)

<div class="topic-metadata">

**Author:** [@Karl\_Trasschaert](https://discuss.elastic.co/u/Karl_Trasschaert)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 3:56pm UTC](https://discuss.elastic.co/t/how-to-change-color-of-bar-graph/48790 "2016-04-29T15:56:14Z")

</div>

Hi, I'm starting with kibana 4. I've created a new graph bar, i would like to know if it's possible to have one color per bar in the graph ? Thx

---

## [Does filebeat.yml setup.template.append\_fields support multi-fields for elasticsearch index template?](https://discuss.elastic.co/t/does-filebeat-yml-setup-template-append-fields-support-multi-fields-for-elasticsearch-index-template/172207)

<div class="topic-metadata">

**Author:** [@PSM](https://discuss.elastic.co/u/PSM)\
**Replies:** 2\
**Last updated:** [March 19, 2019, 5:44pm UTC](https://discuss.elastic.co/t/does-filebeat-yml-setup-template-append-fields-support-multi-fields-for-elasticsearch-index-template/172207 "2019-03-19T17:44:59Z")

</div>

I'm configuring the filebeat filebeat.yml to load elasticsearch index templates. I have a few fields that I'd like to index as both type keyword and type text so I can use them for sorting and aggregation as well as for…

---

## [Any endpoint could update synonyms files for es cluster](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590)

<div class="topic-metadata">

**Author:** [@cindy](https://discuss.elastic.co/u/cindy)\
**Replies:** 0\
**Last updated:** [August 27, 2020, 9:28am UTC](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590 "2020-08-27T09:28:03Z")

</div>

Is there any API in es for updating synonyms files or any plan to provide such API interface? API caller only provide synonyms content list, API could update synonyms file on each ES cluster nodes and return update resu…

---

## [Setting xpack.monitoring.enabled hasn't been registered](https://discuss.elastic.co/t/setting-xpack-monitoring-enabled-hasnt-been-registered/86310)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 3\
**Last updated:** [June 5, 2017, 1:04pm UTC](https://discuss.elastic.co/t/setting-xpack-monitoring-enabled-hasnt-been-registered/86310 "2017-06-05T13:04:13Z")

</div>

Running a logstash config at command line and getting "setting xpack.monitoring.enabled hasn't been registered". I have a logstash.yml with true setting for xpack.monitoring.enabled, valid settings for url and username a…

---

## [Ignoring the 'pipelines.yml' file because modules or command line options are specified](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified/120606)

<div class="topic-metadata">

**Author:** [@Rajkumar\_idsil](https://discuss.elastic.co/u/Rajkumar_idsil)\
**Replies:** 4\
**Last updated:** [February 23, 2018, 6:53am UTC](https://discuss.elastic.co/t/ignoring-the-pipelines-yml-file-because-modules-or-command-line-options-are-specified/120606 "2018-02-23T06:53:46Z")

</div>

Initializing module {:module\_name=\>"fb\_apache", :directory=\>"G:/Rajkumar/ELK/logstash-6.2.1/modules/fb\_apache/configuration"} \[logstash.modules.scaffold\] Initializing module {:module\_name=\>"netflow", :directory=\>"G:/Raj…

---

## [Timelion split and then filter on splitted values](https://discuss.elastic.co/t/timelion-split-and-then-filter-on-splitted-values/134277)

<div class="topic-metadata">

**Author:** [@Faisal\_Karakunnel\_Mo](https://discuss.elastic.co/u/Faisal_Karakunnel_Mo)\
**Replies:** 5\
**Last updated:** [June 10, 2018, 9:20pm UTC](https://discuss.elastic.co/t/timelion-split-and-then-filter-on-splitted-values/134277 "2018-06-10T21:20:12Z")

</div>

Hi, Is it possible in timelion to filter out few of the split values? for example, see below query .es(index = sample-\*, q="version:"v1.6"",split=model:5). This will result in 5 different lines model1, model2, model3, …

---

## [Kibana - Log - kibana-monitoring](https://discuss.elastic.co/t/kibana-log-kibana-monitoring/235818)

<div class="topic-metadata">

**Author:** [@jgonzalez](https://discuss.elastic.co/u/jgonzalez)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 4:13pm UTC](https://discuss.elastic.co/t/kibana-log-kibana-monitoring/235818 "2020-06-12T16:13:17Z")

</div>

Hello all, i just started up my cluster for the first time, it is composed of 2 data nodes and 1 master node, then i started up kibana, but i am having these warnings: log \[16:40:30.928\] \[warning\]\[kibana-monitorin…

---

## [APM Java Agent Security Update](https://discuss.elastic.co/t/apm-java-agent-security-update/289627)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [November 18, 2021, 5:41pm UTC](https://discuss.elastic.co/t/apm-java-agent-security-update/289627 "2021-11-18T17:41:52Z")

</div>

APM Java Agent Local Privilege Escalation issue (ESA-2021-29) A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with…

---

## [How to set multi value about http.cors.allow-origin in es 5.x](https://discuss.elastic.co/t/how-to-set-multi-value-about-http-cors-allow-origin-in-es-5-x/98146)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 8\
**Last updated:** [August 30, 2017, 7:59am UTC](https://discuss.elastic.co/t/how-to-set-multi-value-about-http-cors-allow-origin-in-es-5-x/98146 "2017-08-30T07:59:38Z")

</div>

how to set http.cors.allow-origin in es when i wan’t to only two ip can use elasticsearch-head connect to es? how can set teh http.cors.allow-origin this is one ip http.cors.allow-origin: /https?://localhost(:\[0-9\]+)?…

---

## [HTTP error 401 in node: 401 Unauthorized](https://discuss.elastic.co/t/http-error-401-in-node-401-unauthorized/132532)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 2\
**Last updated:** [May 18, 2018, 8:58pm UTC](https://discuss.elastic.co/t/http-error-401-in-node-401-unauthorized/132532 "2018-05-18T20:58:15Z")

</div>

Elastic 6.1.1 Metricbeat 6.2.2 I have metricbeat on an elasticsearch server and when I check kibana all I see are errors: HTTP error 401 in node: 401 Unauthorized When I view the logs I don't see anything to indicate…

---

## [Can nested fields prevent mapping explosion?](https://discuss.elastic.co/t/can-nested-fields-prevent-mapping-explosion/95464)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 6:00am UTC](https://discuss.elastic.co/t/can-nested-fields-prevent-mapping-explosion/95464 "2017-08-03T06:00:26Z")

</div>

Hi, We have a situation where we put lot’s of JSON data via Logstash into Elasticsearch. The JSON differs a lot so we get many distinct fieldnames and hit the limit of 1000 fields per Index. As far as I understand the …

---

## [Multisearch query performance](https://discuss.elastic.co/t/multisearch-query-performance/36956)

<div class="topic-metadata">

**Author:** [@Anatoly\_Petkevich](https://discuss.elastic.co/u/Anatoly_Petkevich)\
**Replies:** 3\
**Last updated:** [December 11, 2015, 10:46am UTC](https://discuss.elastic.co/t/multisearch-query-performance/36956 "2015-12-11T10:46:41Z")

</div>

We execute multisearch requests with 50 almost identical search queries. These queries took very close time being ran separately. With multisearch query we see that "took" element in each subsequent response is greater …

---

## [Kibana Dashboard not getting updated](https://discuss.elastic.co/t/kibana-dashboard-not-getting-updated/40937)

<div class="topic-metadata">

**Author:** [@abinay](https://discuss.elastic.co/u/abinay)\
**Replies:** 8\
**Last updated:** [February 8, 2016, 8:51am UTC](https://discuss.elastic.co/t/kibana-dashboard-not-getting-updated/40937 "2016-02-08T08:51:51Z")

</div>

Hii I am using ELK setup . Just to provide some convenience what I did was that I made dashboards of the indices and shared their URL's on simple frontend so that any guy does not have to look through all the tabs in the…

---

## [Grouping using multiple fields](https://discuss.elastic.co/t/grouping-using-multiple-fields/48244)

<div class="topic-metadata">

**Author:** [@chris\_es](https://discuss.elastic.co/u/chris_es)\
**Replies:** 0\
**Last updated:** [April 24, 2016, 12:13am UTC](https://discuss.elastic.co/t/grouping-using-multiple-fields/48244 "2016-04-24T00:13:26Z")

</div>

The objective is to group by two fields and then sum the corresponding amounts. Equivalent to the SQL query: select empID, empName , SUM(salary) FROM random GROUP BY empId, empName. I used terms aggregation but it do…

---

## [Elasticsearch.esplugin: Replace/Change/Disable integTestCluster#wait Task](https://discuss.elastic.co/t/elasticsearch-esplugin-replace-change-disable-integtestcluster-wait-task/115006)

<div class="topic-metadata">

**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\
**Replies:** 5\
**Last updated:** [January 11, 2018, 2:31pm UTC](https://discuss.elastic.co/t/elasticsearch-esplugin-replace-change-disable-integtestcluster-wait-task/115006 "2018-01-11T14:31:48Z")

</div>

I am trying to use elasticsearch.esplugin for integration tests on my plugin (Have already Set those up for Maven: david.pilato.fr/blog/2016/10/18/elasticsearch-real-integration-tests-updated-for-ga/) but as soon as I us…

---

## [Cannot get dashboard/visualizations to load](https://discuss.elastic.co/t/cannot-get-dashboard-visualizations-to-load/155434)

<div class="topic-metadata">

**Author:** [@njmauch](https://discuss.elastic.co/u/njmauch)\
**Replies:** 3\
**Last updated:** [November 8, 2018, 5:50pm UTC](https://discuss.elastic.co/t/cannot-get-dashboard-visualizations-to-load/155434 "2018-11-08T17:50:26Z")

</div>

HI, I have been trying to get my kibana dashboards/visualizations to load for some time now and seem to be running out of options. I have information flowing over and I can see the index. I created the index "filebeat…

---

## [How to stop Ml Daily Maintenance Service in elasticsearch (SLM retention snapshot cleanup task)](https://discuss.elastic.co/t/how-to-stop-ml-daily-maintenance-service-in-elasticsearch-slm-retention-snapshot-cleanup-task/255623)

<div class="topic-metadata">

**Author:** [@sakthiskv](https://discuss.elastic.co/u/sakthiskv)\
**Replies:** 8\
**Last updated:** [November 17, 2020, 9:47am UTC](https://discuss.elastic.co/t/how-to-stop-ml-daily-maintenance-service-in-elasticsearch-slm-retention-snapshot-cleanup-task/255623 "2020-11-17T09:47:26Z")

</div>

Hai , How to turn off or disable automatic deletion (ML daily maintenance task) in ES ?. everyday its happening , anyone plz help on this. \[2020-08-19T01:30:00,036\]\[INFO \]\[o.e.x.s.SnapshotRetentionTask\] \[\] starting …

---

## [Elasticsearch how to create index template with raw field](https://discuss.elastic.co/t/elasticsearch-how-to-create-index-template-with-raw-field/114253)

<div class="topic-metadata">

**Author:** [@jerrychen](https://discuss.elastic.co/u/jerrychen)\
**Replies:** 3\
**Last updated:** [January 8, 2018, 10:32am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-create-index-template-with-raw-field/114253 "2018-01-08T10:32:52Z")

</div>

Elasticsearch 5.4.0 My logstash will create index by date, I want to create index template,which can auto add raw field not-analyzed. so i can do aggs term by string field. I got some error when create template by kiban…

---

## [Events with start and end date](https://discuss.elastic.co/t/events-with-start-and-end-date/27765)

<div class="topic-metadata">

**Author:** [@joris\_renkens](https://discuss.elastic.co/u/joris_renkens)\
**Replies:** 2\
**Last updated:** [August 21, 2015, 10:04am UTC](https://discuss.elastic.co/t/events-with-start-and-end-date/27765 "2015-08-21T10:04:08Z")

</div>

Hi, I'm analyzing a series of events that have a start time and an end time. I would like to plot an area chart with time on the x axis and on the y axis the number of events that are ongoing at that moment (start \< x…

---

## [Update by query don't accept user-defined param in java high level client](https://discuss.elastic.co/t/update-by-query-dont-accept-user-defined-param-in-java-high-level-client/226927)

<div class="topic-metadata">

**Author:** [@tnarita](https://discuss.elastic.co/u/tnarita)\
**Replies:** 8\
**Last updated:** [October 28, 2020, 3:49am UTC](https://discuss.elastic.co/t/update-by-query-dont-accept-user-defined-param-in-java-high-level-client/226927 "2020-10-28T03:49:01Z")

</div>

Hi, I'm using REST High Level Client in v7.5 I'm getting error when I tried to update all document by UpdateByQueryRequest. Error message : cannot write xcontent for unknown value of type class entity.Navigation Belo…

[Previous page](https://discuss.elastic.co/top.md?page=448&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=450&per_page=50&period=all)
