# Top

**URL:** https://discuss.elastic.co/top.md?page=479&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 480

---

## [When pushing data in child document getting null pointer exception as id is null](https://discuss.elastic.co/t/when-pushing-data-in-child-document-getting-null-pointer-exception-as-id-is-null/89653)

<div class="topic-metadata">

**Author:** [@RahulRoyeGov](https://discuss.elastic.co/u/RahulRoyeGov)\
**Replies:** 5\
**Last updated:** [June 16, 2017, 8:13am UTC](https://discuss.elastic.co/t/when-pushing-data-in-child-document-getting-null-pointer-exception-as-id-is-null/89653 "2017-06-16T08:13:17Z")

</div>

org.elasticsearch.transport.RemoteTransportException: \[Abyss\]\[127.0.0.1:9350\]\[indices:data/write/bulk\] Caused by: java.lang.NullPointerException: id must not be null at java.util.Objects.requireNonNull(Objects.java:228)…

---

## [Bucket Script Aggregation per Bucket in TSVB possible?](https://discuss.elastic.co/t/bucket-script-aggregation-per-bucket-in-tsvb-possible/227317)

<div class="topic-metadata">

**Author:** [@cyverboy2](https://discuss.elastic.co/u/cyverboy2)\
**Replies:** 3\
**Last updated:** [April 9, 2020, 2:48pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-per-bucket-in-tsvb-possible/227317 "2020-04-09T14:48:43Z")

</div>

Hey there, my data looks like this: Unique ID with should be my buckets Count: Number of entrys per Unique ID, each entry has a separate count value Max: max number of entry per Unique ID Min: min number of entry per …

---

## [Data from an external source](https://discuss.elastic.co/t/data-from-an-external-source/177040)

<div class="topic-metadata">

**Author:** [@obones](https://discuss.elastic.co/u/obones)\
**Replies:** 7\
**Last updated:** [April 18, 2019, 10:01am UTC](https://discuss.elastic.co/t/data-from-an-external-source/177040 "2019-04-18T10:01:19Z")

</div>

Hello, I'm still in the early stages of discovering ElasticSearch so I'll surely make some bogus assertions or assumptions here, please do not hesitate to correct me. What I understand so far is that data is fed into E…

---

## [Formatting of dates returned by query](https://discuss.elastic.co/t/formatting-of-dates-returned-by-query/103746)

<div class="topic-metadata">

**Author:** [@markpavey](https://discuss.elastic.co/u/markpavey)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 3:08pm UTC](https://discuss.elastic.co/t/formatting-of-dates-returned-by-query/103746 "2017-10-12T15:08:54Z")

</div>

The Elasticsearch documentation about the date data type says: Multiple formats can be specified by separating them with || as a separator. Each format will be tried in turn until a matching format is found. The first …

---

## [Problem to install Sense to ElastiticSearch 5.1.1 (Windows version)](https://discuss.elastic.co/t/problem-to-install-sense-to-elastiticsearch-5-1-1-windows-version/69538)

<div class="topic-metadata">

**Author:** [@boonpin](https://discuss.elastic.co/u/boonpin)\
**Replies:** 2\
**Last updated:** [December 21, 2016, 1:21am UTC](https://discuss.elastic.co/t/problem-to-install-sense-to-elastiticsearch-5-1-1-windows-version/69538 "2016-12-21T01:21:04Z")

</div>

Hi Guys, I have successfully installed: - 1. Kibana 5.1.1 (Windows version) 2. ElasticSearch 5.1.1(Windows version) I have problem to install sense (get from https://download.elastic.co/elastic/sense/sense-latest.tar…

---

## [Connecting Kibana to Elasticsearch on Kubernetes](https://discuss.elastic.co/t/connecting-kibana-to-elasticsearch-on-kubernetes/23452)

<div class="topic-metadata">

**Author:** [@Satnam\_Singh](https://discuss.elastic.co/u/Satnam_Singh)\
**Replies:** 4\
**Last updated:** [April 29, 2015, 9:07pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-elasticsearch-on-kubernetes/23452 "2015-04-29T21:07:55Z")

</div>

Hello, I've upgraded to Elasticsearch 1.5.2 and Kibana 4.0.2 which I am deploying in a Kubernetes cluster. Specifically, I am running Elasticsearch in one "pod" (a Kubernetes container with its own IP) and I am …

---

## [Elasticsearch query on multiple fields with custom weight](https://discuss.elastic.co/t/elasticsearch-query-on-multiple-fields-with-custom-weight/126141)

<div class="topic-metadata">

**Author:** [@vishnu-team8](https://discuss.elastic.co/u/vishnu-team8)\
**Replies:** 1\
**Last updated:** [April 7, 2018, 5:37pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-multiple-fields-with-custom-weight/126141 "2018-04-07T17:37:26Z")

</div>

Let's say my index has name and skills. { "name": "Vishnu Prasad", "skills": \["devops", "ruby"\] } { "name": "Prasad", "skills": \["ruby"\] } { "name": "Jonathan", "skills": \["devops"\] } { "name": "V…

---

## [WARN Monitor.jvm](https://discuss.elastic.co/t/warn-monitor-jvm/27648)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [August 27, 2015, 8:39am UTC](https://discuss.elastic.co/t/warn-monitor-jvm/27648 "2015-08-27T08:39:52Z")

</div>

Hello, I am facing below issue in elasticsearch indexing. It seems indexing has got slower. There is difference of around 5-7 hrs in actual log time and the time it gets stored in DB. ES logs says below in log file. \[…

---

## [Score based on the matched multi-match counts](https://discuss.elastic.co/t/score-based-on-the-matched-multi-match-counts/144029)

<div class="topic-metadata">

**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\
**Replies:** 6\
**Last updated:** [August 13, 2018, 9:43pm UTC](https://discuss.elastic.co/t/score-based-on-the-matched-multi-match-counts/144029 "2018-08-13T21:43:32Z")

</div>

Hi, I was wondering the following thing. How to get the count of the matching fields? Like if you have a query with boosting of some kind o following query. GET hotels/\_search { "query": { "multi\_match": { …

---

## [Painless calculation based on time interval](https://discuss.elastic.co/t/painless-calculation-based-on-time-interval/99532)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 8\
**Last updated:** [September 7, 2017, 3:26pm UTC](https://discuss.elastic.co/t/painless-calculation-based-on-time-interval/99532 "2017-09-07T15:26:23Z")

</div>

Hi, In the Visual Time Series Builder, when using the calculation aggregation, is it possible to reference the current time interval that kibana selected? For example, when search for the last 24h and the time interval…

---

## [How do we convert from a hash to json before event reaches the grok filter](https://discuss.elastic.co/t/how-do-we-convert-from-a-hash-to-json-before-event-reaches-the-grok-filter/29445)

<div class="topic-metadata">

**Author:** [@tmo\_bgc](https://discuss.elastic.co/u/tmo_bgc)\
**Replies:** 8\
**Last updated:** [February 29, 2016, 9:10am UTC](https://discuss.elastic.co/t/how-do-we-convert-from-a-hash-to-json-before-event-reaches-the-grok-filter/29445 "2016-02-29T09:10:57Z")

</div>

How do we convert from a hash to json before event reaches the grok filter. The JMX input plugin produces a Hash, but the Grok filter expects JSON. input { jmx { path =\> "c:/LogStash/jmxconf/" polling\_freq…

---

## [Should http.enabled be true or false on a master only node?](https://discuss.elastic.co/t/should-http-enabled-be-true-or-false-on-a-master-only-node/1854)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 5\
**Last updated:** [August 14, 2015, 10:57am UTC](https://discuss.elastic.co/t/should-http-enabled-be-true-or-false-on-a-master-only-node/1854 "2015-08-14T10:57:58Z")

</div>

I was reading over this page: Node And it doesn't answer this question. Was wondering what the correct setting was for a master only node with regards to http.enabled. I am setting up dedicated instances for client …

---

## [Mapping ip address to specific network](https://discuss.elastic.co/t/mapping-ip-address-to-specific-network/132268)

<div class="topic-metadata">

**Author:** [@mmalewicz](https://discuss.elastic.co/u/mmalewicz)\
**Replies:** 8\
**Last updated:** [June 7, 2018, 12:10pm UTC](https://discuss.elastic.co/t/mapping-ip-address-to-specific-network/132268 "2018-06-07T12:10:52Z")

</div>

Hello, I have a problem preparing logstash script. I'm parsing a syslog, then I get a source IPv4 address. I would like to match this addres to a networks defined in file and add a field with network name. example of …

---

## [How does logstash use pipeline.batch.size to execute pipeline?](https://discuss.elastic.co/t/how-does-logstash-use-pipeline-batch-size-to-execute-pipeline/322772)

<div class="topic-metadata">

**Author:** [@rickfish](https://discuss.elastic.co/u/rickfish)\
**Replies:** 7\
**Last updated:** [January 10, 2023, 2:00pm UTC](https://discuss.elastic.co/t/how-does-logstash-use-pipeline-batch-size-to-execute-pipeline/322772 "2023-01-10T14:00:03Z")

</div>

I am looking for documentation on how Logstash processes a pipeline when pipeline.batch.size is more than 1. This is my assumption: The input plugin generates several events, not dictated by batch size While there are…

---

## [Filter vs bool Query Performance , getting bad performance on using Filters](https://discuss.elastic.co/t/filter-vs-bool-query-performance-getting-bad-performance-on-using-filters/130182)

<div class="topic-metadata">

**Author:** [@jalaj](https://discuss.elastic.co/u/jalaj)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 1:55pm UTC](https://discuss.elastic.co/t/filter-vs-bool-query-performance-getting-bad-performance-on-using-filters/130182 "2018-05-09T13:55:06Z")

</div>

Hi, Generally it is recommended to use filters for optimal performance, but I am getting 5 times more latency when using filters compared to bool query. However for me it does not make sense to use bool as logically I …

---

## [Fail to connect spark-elasticsearch with SSL](https://discuss.elastic.co/t/fail-to-connect-spark-elasticsearch-with-ssl/206818)

<div class="topic-metadata">

**Author:** [@daniel.velasco](https://discuss.elastic.co/u/daniel.velasco)\
**Replies:** 4\
**Last updated:** [November 12, 2019, 2:22am UTC](https://discuss.elastic.co/t/fail-to-connect-spark-elasticsearch-with-ssl/206818 "2019-11-12T02:22:27Z")

</div>

Hi, I'm trying to connect spark with elasticsearch using the elastic-spark connector (https://www.elastic.co/guide/en/elasticsearch/hadoop/master/spark.html). Elastic is located on a different machine from which I launch…

---

## [Public live dashboard/workpad](https://discuss.elastic.co/t/public-live-dashboard-workpad/213465)

<div class="topic-metadata">

**Author:** [@Jeremy\_Andrews](https://discuss.elastic.co/u/Jeremy_Andrews)\
**Replies:** 2\
**Last updated:** [December 31, 2019, 10:04pm UTC](https://discuss.elastic.co/t/public-live-dashboard-workpad/213465 "2019-12-31T22:04:53Z")

</div>

I'd like to create a public page on my website which shows live data from Elasticsearch, and I'm trying to figure out the best approach. Ideally I'd just like to embed a Canvas workpad but I can't quite find a way to do …

---

## [Update @timestamp as per log data](https://discuss.elastic.co/t/update-timestamp-as-per-log-data/83927)

<div class="topic-metadata">

**Author:** [@sumitbiswas](https://discuss.elastic.co/u/sumitbiswas)\
**Replies:** 8\
**Last updated:** [April 28, 2017, 6:20am UTC](https://discuss.elastic.co/t/update-timestamp-as-per-log-data/83927 "2017-04-28T06:20:42Z")

</div>

My log looks like below Apr 27 10:35:44.001204 xxxClient(106809) NOTICE: {970020} ABC CLIENT\_MIN\_LATENCY in the last period for host abc4.example.com was 4906 Can you please help me to know how do I update event's @t…

---

## [Logstash-plugin missing from yum repo?](https://discuss.elastic.co/t/logstash-plugin-missing-from-yum-repo/48242)

<div class="topic-metadata">

**Author:** [@vchav73](https://discuss.elastic.co/u/vchav73)\
**Replies:** 3\
**Last updated:** [April 25, 2016, 1:06am UTC](https://discuss.elastic.co/t/logstash-plugin-missing-from-yum-repo/48242 "2016-04-25T01:06:49Z")

</div>

I am updating from a 1.x installation to 2.3 on a CentOS 6 server. I removed the 1.x install using yum, saving the config files. I then installed 2.3 using this procedure: https://www.elastic.co/guide/en/logstash/current…

---

## [Transfer data/fields from one index to another](https://discuss.elastic.co/t/transfer-data-fields-from-one-index-to-another/273961)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 4\
**Last updated:** [May 27, 2021, 4:07am UTC](https://discuss.elastic.co/t/transfer-data-fields-from-one-index-to-another/273961 "2021-05-27T04:07:16Z")

</div>

Can anybody help me moving the data from one index to another in Kibana. I have an index "abc" with lot number of documents and say 100 fields and I want to extract 10 fields out of it and with some filter applied to re…

---

## [Не происходит распределение шард по нодам](https://discuss.elastic.co/t/topic/128747)

<div class="topic-metadata">

**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\
**Replies:** 4\
**Last updated:** [April 19, 2018, 5:30pm UTC](https://discuss.elastic.co/t/topic/128747 "2018-04-19T17:30:32Z")

</div>

Здравствуйте! Помогите пожалуйста, после сбоя не происходит распределения/восстановления шард. Статус кластера застрял на желтом, вижу что шарды не восстанавливаются. yellow open tenders\_index\_2017 XUu1wCCYRf…

---

## [RSLP Stemmer (Brazilian Portuguese) plugin 1.0.0](https://discuss.elastic.co/t/rslp-stemmer-brazilian-portuguese-plugin-1-0-0/33905)

<div class="topic-metadata">

**Author:** [@anaelcarvalho](https://discuss.elastic.co/u/anaelcarvalho)\
**Replies:** 3\
**Last updated:** [June 7, 2017, 8:00pm UTC](https://discuss.elastic.co/t/rslp-stemmer-brazilian-portuguese-plugin-1-0-0/33905 "2017-06-07T20:00:05Z")

</div>

This is an implementation of the RSLP stemmer algorithm as described in "A Stemming Algorithm for the Portuguese Language" by Orengo, V.M. and Huyck, C. https://github.com/anaelcarvalho/elasticsearch-analysis-rslp A …

---

## [Not enough master nodes discovered during pinging (found \[\[\]\], but needed \[2\]), pinging again](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-found-but-needed-2-pinging-again/150575)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 3\
**Last updated:** [October 5, 2018, 6:44am UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging-found-but-needed-2-pinging-again/150575 "2018-10-05T06:44:26Z")

</div>

Hi, I have a 4 node cluster. 3 nodes are running on Red Hat Enterprise Linux Server. 1 node is on Windows Server 2008 R2. Configurations are as follows: node4 \[coordinating node\] cluster.name: appmon node.name: no…

---

## [How to hide some menus in Kibana 6.x](https://discuss.elastic.co/t/how-to-hide-some-menus-in-kibana-6-x/118827)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 5\
**Last updated:** [February 9, 2018, 5:19am UTC](https://discuss.elastic.co/t/how-to-hide-some-menus-in-kibana-6-x/118827 "2018-02-09T05:19:09Z")

</div>

how to hide timelion devtools monitoring managment in kibana sidemenu ? i have tried console.enabled: false timelion.enabled: false but didn't get any changes what is the alternative way for this?

---

## [Uninstall fails on Ubuntu with SysV](https://discuss.elastic.co/t/uninstall-fails-on-ubuntu-with-sysv/162631)

<div class="topic-metadata">

**Author:** [@Chewbacca](https://discuss.elastic.co/u/Chewbacca)\
**Replies:** 4\
**Last updated:** [January 7, 2019, 11:57am UTC](https://discuss.elastic.co/t/uninstall-fails-on-ubuntu-with-sysv/162631 "2019-01-07T11:57:32Z")

</div>

I have elasticsearch installed on my Ubuntu installation (18.04 on WSL), which uses SysV. I installed it using the instructions https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html I want to uninsta…

---

## [Need help with configuration](https://discuss.elastic.co/t/need-help-with-configuration/32166)

<div class="topic-metadata">

**Author:** [@m\_abdelfattah](https://discuss.elastic.co/u/m_abdelfattah)\
**Replies:** 6\
**Last updated:** [October 15, 2015, 8:10pm UTC](https://discuss.elastic.co/t/need-help-with-configuration/32166 "2015-10-15T20:10:25Z")

</div>

I have the following setup for an ELK Platform: logstash-forwarder on 20 machines as following: 4 machines (Nginx + sys logs) 4 machines (PostgreSQL) 12 machines (Ruby on Rails + sys logs) And I have one machine tha…

---

## [Logstash.outputs.elasticsearch Marking url as dead. connection issue. AWS EBS datastore](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-connection-issue-aws-ebs-datastore/185993)

<div class="topic-metadata">

**Author:** [@Harikrishna\_Sarvaiya](https://discuss.elastic.co/u/Harikrishna_Sarvaiya)\
**Replies:** 8\
**Last updated:** [July 3, 2019, 9:00am UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-marking-url-as-dead-connection-issue-aws-ebs-datastore/185993 "2019-07-03T09:00:01Z")

</div>

Checked all the existing threads couldn't help any. \[2019-06-17T02:23:50,125\]\[WARN \]\[logstash.outputs.elasticsearch\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableE…

---

## [Ingestion speed slow down after some time](https://discuss.elastic.co/t/ingestion-speed-slow-down-after-some-time/12575)

<div class="topic-metadata">

**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\
**Replies:** 7\
**Last updated:** [January 11, 2017, 7:20am UTC](https://discuss.elastic.co/t/ingestion-speed-slow-down-after-some-time/12575 "2017-01-11T07:20:09Z")

</div>

Hi All, we are indexing continuous stream of data, the size of each record is 22 KB. At the starting hour, we are getting speed of 180 records/sec. After 3 hours, we are getting speed of 85 records/sec. Af…

---

## [ES Java matchAllQuery paging size limit](https://discuss.elastic.co/t/es-java-matchallquery-paging-size-limit/45337)

<div class="topic-metadata">

**Author:** [@ajmariella](https://discuss.elastic.co/u/ajmariella)\
**Replies:** 7\
**Last updated:** [March 25, 2016, 11:30am UTC](https://discuss.elastic.co/t/es-java-matchallquery-paging-size-limit/45337 "2016-03-25T11:30:45Z")

</div>

I'm using the java API to do a matchAllQuery() including .setFetchSource for some particular fields to get returned. I am also using .setFrom and .setSize. WHen I get my initial results back, I get totalHits = 4,9123,345…

---

## [Kibana showing 'WHERE' is not an int or ext command on start up](https://discuss.elastic.co/t/kibana-showing-where-is-not-an-int-or-ext-command-on-start-up/36544)

<div class="topic-metadata">

**Author:** [@KavyaS](https://discuss.elastic.co/u/KavyaS)\
**Replies:** 7\
**Last updated:** [January 1, 2016, 1:01pm UTC](https://discuss.elastic.co/t/kibana-showing-where-is-not-an-int-or-ext-command-on-start-up/36544 "2016-01-01T13:01:25Z")

</div>

When i run Kibana on windows 7 it shows the following message: 'WHERE' is not recognized as an internal or external command, operable program or batch file. I checked the kibana.bat file and it contains the following…

---

## [Text in Line Chart - Canvas Kibana](https://discuss.elastic.co/t/text-in-line-chart-canvas-kibana/170801)

<div class="topic-metadata">

**Author:** [@Deyvis\_Valladares](https://discuss.elastic.co/u/Deyvis_Valladares)\
**Replies:** 4\
**Last updated:** [March 8, 2019, 8:59pm UTC](https://discuss.elastic.co/t/text-in-line-chart-canvas-kibana/170801 "2019-03-08T20:59:12Z")

</div>

Hi Team, Could you help me in this case? I try to put labels in my line chart, but I don't now how move the text to over the line. Thanks.

---

## [Elasticsearch - Comprehensive Brief](https://discuss.elastic.co/t/elasticsearch-comprehensive-brief/69903)

<div class="topic-metadata">

**Author:** [@Tejaswini](https://discuss.elastic.co/u/Tejaswini)\
**Replies:** 1\
**Last updated:** [December 24, 2016, 3:20am UTC](https://discuss.elastic.co/t/elasticsearch-comprehensive-brief/69903 "2016-12-24T03:20:22Z")

</div>

Elasticsearch is a real-time distributed and open source full-text search and analytics engine. It is used in Single Page Application (SPA) projects. Elasticsearch is open source developed in Java and used by many big or…

---

## [Grok patterns for credit card](https://discuss.elastic.co/t/grok-patterns-for-credit-card/47891)

<div class="topic-metadata">

**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\
**Replies:** 7\
**Last updated:** [April 23, 2016, 6:42pm UTC](https://discuss.elastic.co/t/grok-patterns-for-credit-card/47891 "2016-04-23T18:42:19Z")

</div>

Can someone suggest grok pattern for 4836-6646-5481 this is credit card number Thanks gaurav

---

## [Auto renewal of SSL certificates](https://discuss.elastic.co/t/auto-renewal-of-ssl-certificates/253335)

<div class="topic-metadata">

**Author:** [@radw](https://discuss.elastic.co/u/radw)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 11:28am UTC](https://discuss.elastic.co/t/auto-renewal-of-ssl-certificates/253335 "2020-11-09T11:28:39Z")

</div>

Hey guys. I'm using ECK v1.0.0-beta1 on Kubernetes and my self-signed SSL certificates(the ones from the all-in-one,yml) have expired. As per the documentation, I've read that they should auto renew 24h prior to expir…

---

## [Can't use \_all index with Kibana 4.1.1](https://discuss.elastic.co/t/cant-use--all-index-with-kibana-4-1-1/28201)

<div class="topic-metadata">

**Author:** [@scaissie](https://discuss.elastic.co/u/scaissie)\
**Replies:** 8\
**Last updated:** [September 3, 2015, 2:57pm UTC](https://discuss.elastic.co/t/cant-use--all-index-with-kibana-4-1-1/28201 "2015-09-03T14:57:00Z")

</div>

I am using Elasticsearch 1.7.1. I'm using Tribe Node with three clusters. I can query the \_all index using curl on the Tribe Node: curl http://localhost:9200/\_all/\_search?pretty But I can't query the \_all index from Kiba…

---

## [Handling Time Zones and Daylight saving time](https://discuss.elastic.co/t/handling-time-zones-and-daylight-saving-time/83661)

<div class="topic-metadata">

**Author:** [@Paulo\_Henrique\_PH](https://discuss.elastic.co/u/Paulo_Henrique_PH)\
**Replies:** 2\
**Last updated:** [April 27, 2017, 6:11am UTC](https://discuss.elastic.co/t/handling-time-zones-and-daylight-saving-time/83661 "2017-04-27T06:11:17Z")

</div>

Hi guys, I've got a user case where a customer is struggling to get the right aggregations due to the Daylight saving time. We are applying the offset factor (eg -01:00) and seems like it isn't enough. I've read a top…

---

## [Tagging event logs in Winlogbeat in order to filter in Logstash](https://discuss.elastic.co/t/tagging-event-logs-in-winlogbeat-in-order-to-filter-in-logstash/109471)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 4\
**Last updated:** [December 2, 2017, 10:00pm UTC](https://discuss.elastic.co/t/tagging-event-logs-in-winlogbeat-in-order-to-filter-in-logstash/109471 "2017-12-02T22:00:15Z")

</div>

hello what would the solution be in winlogbeat.yml to this example from filelogbeat below i want to do special filtering on powershell logs and thus tag them or similar once it get to logstash here is my config from wi…

---

## [Feasible solution of snapshot for 30 GB and increasing every day data](https://discuss.elastic.co/t/feasible-solution-of-snapshot-for-30-gb-and-increasing-every-day-data/217568)

<div class="topic-metadata">

**Author:** [@priyanka10](https://discuss.elastic.co/u/priyanka10)\
**Replies:** 6\
**Last updated:** [February 6, 2020, 6:26am UTC](https://discuss.elastic.co/t/feasible-solution-of-snapshot-for-30-gb-and-increasing-every-day-data/217568 "2020-02-06T06:26:15Z")

</div>

I want to know that how can I take differential snapshots in ElasticSearch and also how it works? We received around 30 GB of data monthly in all indices of ElasticSearch. Few indices get update daily and few indices da…

---

## [How to connect postgresql with kibana](https://discuss.elastic.co/t/how-to-connect-postgresql-with-kibana/310273)

<div class="topic-metadata">

**Author:** [@Khadija\_BOUDINAR](https://discuss.elastic.co/u/Khadija_BOUDINAR)\
**Replies:** 3\
**Last updated:** [July 21, 2022, 11:56am UTC](https://discuss.elastic.co/t/how-to-connect-postgresql-with-kibana/310273 "2022-07-21T11:56:45Z")

</div>

Hi all, Can postgres connect to kibana

---

## [SQL Views in Elastic](https://discuss.elastic.co/t/sql-views-in-elastic/273408)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 1:40pm UTC](https://discuss.elastic.co/t/sql-views-in-elastic/273408 "2021-05-19T13:40:22Z")

</div>

Is there functionality in Elasticsearch that would be comparable to that of a view in SQL? What I would like to do is use a query (a complex aggregation) as the "definition" of a new index. Lets say I have index-A that…

---

## [Big delay in writing to Elasticsearch from some log inputs of Filebeat](https://discuss.elastic.co/t/big-delay-in-writing-to-elasticsearch-from-some-log-inputs-of-filebeat/228007)

<div class="topic-metadata">

**Author:** [@r2r2](https://discuss.elastic.co/u/r2r2)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 3:28pm UTC](https://discuss.elastic.co/t/big-delay-in-writing-to-elasticsearch-from-some-log-inputs-of-filebeat/228007 "2020-04-17T15:28:21Z")

</div>

Hello! I had to migrate my Elasticsearch 7.0.1 in a docker container from ssd to hdd. After that I can see some filebeat log inputs are very late. I use filebeat to send Nginx logs using a log file input for multiple …

---

## [Node-RED + Elasticsearch](https://discuss.elastic.co/t/node-red-elasticsearch/140345)

<div class="topic-metadata">

**Author:** [@Nicolas\_Prange](https://discuss.elastic.co/u/Nicolas_Prange)\
**Replies:** 4\
**Last updated:** [July 17, 2018, 7:07pm UTC](https://discuss.elastic.co/t/node-red-elasticsearch/140345 "2018-07-17T19:07:18Z")

</div>

Hi, I am trying to send data from Node-RED to Elasticsearch, but I receive the following error: Elasticsearch ERROR: 2018-07-17T14:30:15Z Error: Request error, retrying HEAD http://localhost/twitterr/tweets/1 =\> conn…

---

## [Machine learning nodes](https://discuss.elastic.co/t/machine-learning-nodes/132590)

<div class="topic-metadata">

**Author:** [@mkemalm](https://discuss.elastic.co/u/mkemalm)\
**Replies:** 1\
**Last updated:** [May 20, 2018, 10:41pm UTC](https://discuss.elastic.co/t/machine-learning-nodes/132590 "2018-05-20T22:41:05Z")

</div>

Hello, i am asking to verify some considerations about machine learning in elk stack. -xpack.ml.enabled should be true in master nodes. True or False? -node.ml should be true in nodes which are doing ml job actually. …

---

## [Elastic agent shows healthy (Also no error messages in Logs) in Kibana but fails to send data to elastic search](https://discuss.elastic.co/t/elastic-agent-shows-healthy-also-no-error-messages-in-logs-in-kibana-but-fails-to-send-data-to-elastic-search/302575)

<div class="topic-metadata">

**Author:** [@ajj31](https://discuss.elastic.co/u/ajj31)\
**Replies:** 5\
**Last updated:** [May 5, 2022, 7:29pm UTC](https://discuss.elastic.co/t/elastic-agent-shows-healthy-also-no-error-messages-in-logs-in-kibana-but-fails-to-send-data-to-elastic-search/302575 "2022-05-05T19:29:54Z")

</div>

v 7.17.2 - ELK Elastic Agent for EndPoint security gets enrolled and installed successfully. But instead of showing data received from elastic agent , it always goes to the attached screenshot " Next step: Enroll an …

---

## [Reading file from beginning using file input](https://discuss.elastic.co/t/reading-file-from-beginning-using-file-input/168253)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [February 13, 2019, 5:17pm UTC](https://discuss.elastic.co/t/reading-file-from-beginning-using-file-input/168253 "2019-02-13T17:17:47Z")

</div>

I have this setting, but it is not reading file again and again. I want to read this file from beginning when it is changed. I am getting this file copy from another system every one hour. It reads once when I starts …

---

## [How to change the number of shards per index in a cluster where indexes are created per day](https://discuss.elastic.co/t/how-to-change-the-number-of-shards-per-index-in-a-cluster-where-indexes-are-created-per-day/49328)

<div class="topic-metadata">

**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\
**Replies:** 8\
**Last updated:** [May 11, 2016, 7:29pm UTC](https://discuss.elastic.co/t/how-to-change-the-number-of-shards-per-index-in-a-cluster-where-indexes-are-created-per-day/49328 "2016-05-11T19:29:29Z")

</div>

We have an ES cluster storing events for about 10 different applications. Each applications events are stored in an index specific to that application (the apps are unrelated), and a new index is created daily for each a…

---

## [Failed to publish events caused by: EOF,Failed to publish events caused by: client is not connected,Failed to publish events: client is not connected](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof-failed-to-publish-events-caused-by-client-is-not-connected-failed-to-publish-events-client-is-not-connected/195042)

<div class="topic-metadata">

**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\
**Replies:** 2\
**Last updated:** [August 21, 2019, 8:20am UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof-failed-to-publish-events-caused-by-client-is-not-connected-failed-to-publish-events-client-is-not-connected/195042 "2019-08-21T08:20:52Z")

</div>

Hello everyone, i have a very simple filebeat which send some simple log file to logstash which is running on another server,,after i start filebeat and logstash the log which i see from filebeat shows me the connection…

---

## [Elasticsearch Pipeline - Hash Message with sha1](https://discuss.elastic.co/t/elasticsearch-pipeline-hash-message-with-sha1/111378)

<div class="topic-metadata">

**Author:** [@Vladimir\_Herrlein](https://discuss.elastic.co/u/Vladimir_Herrlein)\
**Replies:** 0\
**Last updated:** [December 12, 2017, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-pipeline-hash-message-with-sha1/111378 "2017-12-12T15:57:49Z")

</div>

Dear all, I would like share with you the way found to generate the document\_id during the ingest phase via a custom painless script by making the SHA1 hash based on the message field. The Pipeline test: POST \_ingest/…

---

## [Json filter is not working](https://discuss.elastic.co/t/json-filter-is-not-working/124434)

<div class="topic-metadata">

**Author:** [@David\_Gidony](https://discuss.elastic.co/u/David_Gidony)\
**Replies:** 6\
**Last updated:** [March 27, 2018, 1:35pm UTC](https://discuss.elastic.co/t/json-filter-is-not-working/124434 "2018-03-27T13:35:52Z")

</div>

hi, i'm trying to parse json file as simple as possible. field:value without touching the json order. when i run log stash, it starts , but nothing happened... this is the log stash console while running, just sits th…

---

## [Packetbeat for windows?](https://discuss.elastic.co/t/packetbeat-for-windows/25205)

<div class="topic-metadata">

**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 6\
**Last updated:** [September 4, 2015, 7:27pm UTC](https://discuss.elastic.co/t/packetbeat-for-windows/25205 "2015-09-04T19:27:14Z")

</div>

I want to install packetbeat latest version for windows. In elastic.co there is no windows version. Can anyone help me for installing packetbeat in windows.?

[Previous page](https://discuss.elastic.co/top.md?page=478&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=480&per_page=50&period=all)
