# Top

**URL:** https://discuss.elastic.co/top.md?page=485&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 486

---

## [HighLevel REST Client : Retry requests on failure](https://discuss.elastic.co/t/highlevel-rest-client-retry-requests-on-failure/163497)

<div class="topic-metadata">

**Author:** [@Gopala\_Krishna](https://discuss.elastic.co/u/Gopala_Krishna)\
**Replies:** 1\
**Last updated:** [January 24, 2019, 8:36am UTC](https://discuss.elastic.co/t/highlevel-rest-client-retry-requests-on-failure/163497 "2019-01-24T08:36:01Z")

</div>

Hello! Background: We use an Elasticsearch cluster with a single node for indexing text documents. The High Level REST Client is used for interacting with the cluster. The cluster, the client all run in their own docker…

---

## [How to remove fields with - values in logstash filter?](https://discuss.elastic.co/t/how-to-remove-fields-with-values-in-logstash-filter/290879)

<div class="topic-metadata">

**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\
**Replies:** 4\
**Last updated:** [December 6, 2021, 9:58am UTC](https://discuss.elastic.co/t/how-to-remove-fields-with-values-in-logstash-filter/290879 "2021-12-06T09:58:35Z")

</div>

I have a patterns like : 2021-10-15 20:00:13 2396 tstur1 /ftp/workspace/ this is message 2020-10-15 18:00:13 - - this is the second message The fields are Date, Time, SessionId, path and message. The grok pattern use…

---

## [Sending too many IDs in elasticsearch-py mtermvectors](https://discuss.elastic.co/t/sending-too-many-ids-in-elasticsearch-py-mtermvectors/29282)

<div class="topic-metadata">

**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Replies:** 1\
**Last updated:** [September 15, 2015, 10:26pm UTC](https://discuss.elastic.co/t/sending-too-many-ids-in-elasticsearch-py-mtermvectors/29282 "2015-09-15T22:26:32Z")

</div>

Cross-posted on SO: http://stackoverflow.com/questions/32560339/sending-too-many-ids-in-elasticsearch-py-mtermvectors I'm trying to use mtermvectors() in the python elasticsearch-py client to retrieve term vectors for …

---

## [Create monthly index for metricbeat daily data](https://discuss.elastic.co/t/create-monthly-index-for-metricbeat-daily-data/101096)

<div class="topic-metadata">

**Author:** [@pasifus](https://discuss.elastic.co/u/pasifus)\
**Replies:** 8\
**Last updated:** [September 20, 2017, 10:18am UTC](https://discuss.elastic.co/t/create-monthly-index-for-metricbeat-daily-data/101096 "2017-09-20T10:18:22Z")

</div>

Hi My cluster get data from metricbeat and save daily elasticsearch indexes. I'm intresting in best way to convert daily to monthly indexes. The goal is to decreas index storage size and show monthly view of performan…

---

## [Search nested objects using wildcard paths?](https://discuss.elastic.co/t/search-nested-objects-using-wildcard-paths/36865)

<div class="topic-metadata">

**Author:** [@syzspectroom](https://discuss.elastic.co/u/syzspectroom)\
**Replies:** 5\
**Last updated:** [March 16, 2017, 12:51pm UTC](https://discuss.elastic.co/t/search-nested-objects-using-wildcard-paths/36865 "2017-03-16T12:51:51Z")

</div>

Hi. need help with querying 2 level deep nested objects using wildcard for paths my mapping looks like this: { "article": { "dynamic\_templates": \[ { "en": { "path\_match": "v…

---

## [Kubernetes metadata missing with add\_kubernetes\_metadata enabled](https://discuss.elastic.co/t/kubernetes-metadata-missing-with-add-kubernetes-metadata-enabled/254314)

<div class="topic-metadata">

**Author:** [@xsb](https://discuss.elastic.co/u/xsb)\
**Replies:** 6\
**Last updated:** [November 6, 2020, 4:48pm UTC](https://discuss.elastic.co/t/kubernetes-metadata-missing-with-add-kubernetes-metadata-enabled/254314 "2020-11-06T16:48:12Z")

</div>

Hello, I am trying to enable add\_kubernetes\_metadata to an ECK setup with no luck. My ECK has a Beats resource that manages a filebeat DaemonSet, it's all pretty standard as I've been mostly copying the config from the…

---

## [Elastic stack license problem](https://discuss.elastic.co/t/elastic-stack-license-problem/196730)

<div class="topic-metadata">

**Author:** [@tng](https://discuss.elastic.co/u/tng)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 11:54am UTC](https://discuss.elastic.co/t/elastic-stack-license-problem/196730 "2019-08-26T11:54:56Z")

</div>

Hello, I installed the Elastic stack with 'basic' license on Docker 4 days ago. I initialized the built-in users passwords and created a user for accessing the Kibana web UI and another user for storing into Elasticsear…

---

## [Collecting from multiple sources](https://discuss.elastic.co/t/collecting-from-multiple-sources/72070)

<div class="topic-metadata">

**Author:** [@mmethe](https://discuss.elastic.co/u/mmethe)\
**Replies:** 7\
**Last updated:** [January 20, 2017, 5:56pm UTC](https://discuss.elastic.co/t/collecting-from-multiple-sources/72070 "2017-01-20T17:56:47Z")

</div>

Hello, Kind of new to all this so hang in there. ELK running on Centos 7 Winlogbeat sending logs from several windows servers to ELK When I try to index logstash (rsyslog), I dont see any data. here is the inpu…

---

## [Count the occurrence of words in ElasticSearch](https://discuss.elastic.co/t/count-the-occurrence-of-words-in-elasticsearch/291595)

<div class="topic-metadata">

**Author:** [@Ashrut](https://discuss.elastic.co/u/Ashrut)\
**Replies:** 4\
**Last updated:** [December 14, 2021, 5:20am UTC](https://discuss.elastic.co/t/count-the-occurrence-of-words-in-elasticsearch/291595 "2021-12-14T05:20:31Z")

</div>

Hello Everyone, I am a newbie in Elasticsearch. I was wondering if there is any technique to search for the count of occurrence of a word (or an array of words) in a document. For e.g. if I want to search for the arra…

---

## [Logstash 7.3.0 node stats API does not list all pipelines](https://discuss.elastic.co/t/logstash-7-3-0-node-stats-api-does-not-list-all-pipelines/195724)

<div class="topic-metadata">

**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\
**Replies:** 1\
**Last updated:** [August 21, 2019, 5:16am UTC](https://discuss.elastic.co/t/logstash-7-3-0-node-stats-api-does-not-list-all-pipelines/195724 "2019-08-21T05:16:10Z")

</div>

Hi, We have a logstash deployment where we use the Node Stats API to independently track logstash performance/status. Till 7.2.0, the API behaved as documented, but after update to 7.3.0, we are seeing inconsistent repo…

---

## [Can not reindex to another host](https://discuss.elastic.co/t/can-not-reindex-to-another-host/178633)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 4\
**Last updated:** [May 8, 2019, 7:45am UTC](https://discuss.elastic.co/t/can-not-reindex-to-another-host/178633 "2019-05-08T07:45:10Z")

</div>

Hi community, I try to reindex from remote elasticsearch but i got err response. Here is what I run in kibana dev tool, POST \_reindex { "source": { "remote": { "host": "https://anotherhost:443", "socket\_timeout…

---

## [Bar chart filtered by Day Of Week](https://discuss.elastic.co/t/bar-chart-filtered-by-day-of-week/155743)

<div class="topic-metadata">

**Author:** [@fre](https://discuss.elastic.co/u/fre)\
**Replies:** 1\
**Last updated:** [November 9, 2018, 8:40pm UTC](https://discuss.elastic.co/t/bar-chart-filtered-by-day-of-week/155743 "2018-11-09T20:40:35Z")

</div>

Hi, I am trying to create a bar chart that shows how many files were updated each day of the week. The column that has this data stores it as, for example, Wed Mar 15 14:01:22. How do I filter the data in this column to…

---

## [Sorting in KQL](https://discuss.elastic.co/t/sorting-in-kql/270711)

<div class="topic-metadata">

**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\
**Replies:** 2\
**Last updated:** [April 20, 2021, 2:08pm UTC](https://discuss.elastic.co/t/sorting-in-kql/270711 "2021-04-20T14:08:00Z")

</div>

Hi, I know I can sort in Elastic api and in kibana, but now I have to use an api which only have KQL input which it encodes in base64 and send to elasticsearch. (external service) I've tried all instances of id: desc\`\`s…

---

## [Extract timestamp from filename](https://discuss.elastic.co/t/extract-timestamp-from-filename/56135)

<div class="topic-metadata">

**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\
**Replies:** 4\
**Last updated:** [July 22, 2016, 9:36pm UTC](https://discuss.elastic.co/t/extract-timestamp-from-filename/56135 "2016-07-22T21:36:27Z")

</div>

Hi All, currently i have filename with the below format \[XXXXXXXX\]\[YYYYYYYYYY\]\[2016\_07\_21\]\[19\_21\_12\]\[160721T192103\]\[ZZZZ\]AB\_RTRT.0.log. is there a way, i can extract the datetimestamp and index it to a specific field i…

---

## [ES Breaker memory limit](https://discuss.elastic.co/t/es-breaker-memory-limit/33394)

<div class="topic-metadata">

**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\
**Replies:** 4\
**Last updated:** [November 4, 2015, 5:08pm UTC](https://discuss.elastic.co/t/es-breaker-memory-limit/33394 "2015-11-04T17:08:10Z")

</div>

Hi! When I make some search in Kibana, and I get some errors... Elastic logs... \[2015-10-30 07:50:15,054\]\[WARN \]\[indices.breaker \] \[belerian\] \[FIELDDATA\] New used memory 520090414 \[495.9mb\] from field \[src\_i…

---

## [Effective way to search for Addresses, City or States](https://discuss.elastic.co/t/effective-way-to-search-for-addresses-city-or-states/44088)

<div class="topic-metadata">

**Author:** [@jlossada](https://discuss.elastic.co/u/jlossada)\
**Replies:** 1\
**Last updated:** [March 10, 2016, 11:01pm UTC](https://discuss.elastic.co/t/effective-way-to-search-for-addresses-city-or-states/44088 "2016-03-10T23:01:14Z")

</div>

I am using Elasticsearch to search for events. Each has an Address, City, State, Zipcode. I was using a filed in the Mappings of the event called formatted\_address, that would be the whole address with city and state and…

---

## [Whats the meaning of "gt" and "lte" in the field called "monitor.timespan"?](https://discuss.elastic.co/t/whats-the-meaning-of-gt-and-lte-in-the-field-called-monitor-timespan/275667)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 1\
**Last updated:** [June 11, 2021, 2:43pm UTC](https://discuss.elastic.co/t/whats-the-meaning-of-gt-and-lte-in-the-field-called-monitor-timespan/275667 "2021-06-11T14:43:18Z")

</div>

Hello! I just see in "heartbeat" index a field called "monitor.timespan" which contains the following: { "lt": "2021-06-11T09:58:59.034Z", "gte": "2021-06-11T09:58:54.034Z" } What's the meaning of "lt" and "gte"? …

---

## [ILM action failed "check-rollover-ready,Moving to ERROR step"?](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 4\
**Last updated:** [March 10, 2022, 7:50am UTC](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288 "2022-03-10T07:50:33Z")

</div>

I found that my es cluster is always reporting an error, he said that the ILM work failed, according to the prompt "check-rollover-ready", I didn't understand what it needs to identify, and the target index is the system…

---

## [Is there any mainframe plugin for elasticsearch?](https://discuss.elastic.co/t/is-there-any-mainframe-plugin-for-elasticsearch/26549)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 2\
**Last updated:** [March 22, 2017, 5:02am UTC](https://discuss.elastic.co/t/is-there-any-mainframe-plugin-for-elasticsearch/26549 "2017-03-22T05:02:57Z")

</div>

Hi All, Is there any mainframe plugin available for Elasticsearch/Logstash which connects & fetch the data from Mainframe and index in ES? Thanks, Rohan

---

## [Filebeat to Logstash : How to keep lines order](https://discuss.elastic.co/t/filebeat-to-logstash-how-to-keep-lines-order/154612)

<div class="topic-metadata">

**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\
**Replies:** 6\
**Last updated:** [October 31, 2018, 12:35pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-how-to-keep-lines-order/154612 "2018-10-31T12:35:19Z")

</div>

Hello, I use a filebeat instance to read some log files and send them to a logstash instance on another server to store them as a file output. On one of the logs, line order is not critical, so I haven't encountered th…

---

## [Is it possible to generate or export a csv from Kibana dev tool](https://discuss.elastic.co/t/is-it-possible-to-generate-or-export-a-csv-from-kibana-dev-tool/343027)

<div class="topic-metadata">

**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\
**Replies:** 2\
**Last updated:** [September 19, 2023, 8:38am UTC](https://discuss.elastic.co/t/is-it-possible-to-generate-or-export-a-csv-from-kibana-dev-tool/343027 "2023-09-19T08:38:11Z")

</div>

Hi, I wonder if it is possible to generate a CSV report from dev tool ? The following is my query run on Kibana dev tool, it composed of query and aggregation. I want to generate the query response to a csv. if it is …

---

## [Elasticsearch unable to verify the first certificate error](https://discuss.elastic.co/t/elasticsearch-unable-to-verify-the-first-certificate-error/80979)

<div class="topic-metadata">

**Author:** [@koladoo](https://discuss.elastic.co/u/koladoo)\
**Replies:** 2\
**Last updated:** [April 3, 2017, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-unable-to-verify-the-first-certificate-error/80979 "2017-04-03T13:06:11Z")

</div>

Hi all, I tried setting up X-Pack Security on a single host, single node and everything worked fine. Now I am trying to set it up using 3 different hosts (Elasticsearch, Kibana and Logstash), with 2 elasticsearch nodes…

---

## [Filebeat setup (error loading template: failed to put data stream. no matching index template found for data stream)](https://discuss.elastic.co/t/filebeat-setup-error-loading-template-failed-to-put-data-stream-no-matching-index-template-found-for-data-stream/307789)

<div class="topic-metadata">

**Author:** [@ulisses](https://discuss.elastic.co/u/ulisses)\
**Replies:** 5\
**Last updated:** [June 24, 2022, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-setup-error-loading-template-failed-to-put-data-stream-no-matching-index-template-found-for-data-stream/307789 "2022-06-24T15:24:31Z")

</div>

I'm running a dev environment to understand how i can use filebeat and elasticsearch to store our application logs but i can't make it work with custom configurations. I'm trying to change index name following this docu…

---

## [Malware detected in elasticsearch index file](https://discuss.elastic.co/t/malware-detected-in-elasticsearch-index-file/150753)

<div class="topic-metadata">

**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\
**Replies:** 3\
**Last updated:** [October 4, 2018, 8:52pm UTC](https://discuss.elastic.co/t/malware-detected-in-elasticsearch-index-file/150753 "2018-10-04T20:52:08Z")

</div>

Our malware detection found a malware (Exploit:O97M/DDEDownloader.C) in a index file system file where we store our indices: file:D:\\ESData\\Data\\nodes\\0\\indices\\w9l0szt8RR-ZeQ8p4asJqA\\3\\index\_108v\_Lucene70\_0.dvd Have i…

---

## [Install Timelion offline](https://discuss.elastic.co/t/install-timelion-offline/39193)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 4\
**Last updated:** [March 29, 2016, 2:56pm UTC](https://discuss.elastic.co/t/install-timelion-offline/39193 "2016-03-29T14:56:34Z")

</div>

Is there any way to install this kibana plugin offline? It would be really useful for offline machines. Thanks in advance

---

## [Reading config/env variable inside kibana plugin](https://discuss.elastic.co/t/reading-config-env-variable-inside-kibana-plugin/167643)

<div class="topic-metadata">

**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\
**Replies:** 8\
**Last updated:** [March 29, 2019, 4:39pm UTC](https://discuss.elastic.co/t/reading-config-env-variable-inside-kibana-plugin/167643 "2019-03-29T16:39:29Z")

</div>

Hello Community. I have been trying for a while to read env variable inside kibana plugin JS code. I have the elk stack running as containers and want to provide environment variables via docker or configmap via kuberne…

---

## [Alternatives to wildcard search for "contains" type searching](https://discuss.elastic.co/t/alternatives-to-wildcard-search-for-contains-type-searching/189623)

<div class="topic-metadata">

**Author:** [@onearmedscissor](https://discuss.elastic.co/u/onearmedscissor)\
**Replies:** 5\
**Last updated:** [July 11, 2019, 8:30am UTC](https://discuss.elastic.co/t/alternatives-to-wildcard-search-for-contains-type-searching/189623 "2019-07-11T08:30:43Z")

</div>

Hi, I'm dealing with unstructured documents where we're indexing the contents of the text of the document. Generally right now we just have a fairly basic configuration where we use the standard analyzer on the body of t…

---

## [Can beats pick data from database and send to elasticsearch](https://discuss.elastic.co/t/can-beats-pick-data-from-database-and-send-to-elasticsearch/92211)

<div class="topic-metadata">

**Author:** [@vinod\_hy](https://discuss.elastic.co/u/vinod_hy)\
**Replies:** 1\
**Last updated:** [July 7, 2017, 2:41pm UTC](https://discuss.elastic.co/t/can-beats-pick-data-from-database-and-send-to-elasticsearch/92211 "2017-07-07T14:41:42Z")

</div>

Hi All, Right now i am using filebeat which forwards the content of a particular log file to logstash. I want to know is there any support from beats where i can forward content from database to logstash.

---

## [マッピングのdate型について](https://discuss.elastic.co/t/date/86601)

<div class="topic-metadata">

**Author:** [@Genta](https://discuss.elastic.co/u/Genta)\
**Replies:** 4\
**Last updated:** [May 28, 2017, 11:32pm UTC](https://discuss.elastic.co/t/date/86601 "2017-05-28T23:32:07Z")

</div>

下記のようなJSONファイル（取込みデータ）をelasticsearchに取込む場合、 access\_dayと、access\_timeをそれぞれ日付と時間で認識させたかったため、 mappingシートには、 "access\_day" : { "type": "date" ,"format": "yyyyMMdd" }, "access\_time" : { "type": "date" ,"format"…

---

## [Display a percentage column in any table visualization (Data Table or Visual Builder Table)](https://discuss.elastic.co/t/display-a-percentage-column-in-any-table-visualization-data-table-or-visual-builder-table/182412)

<div class="topic-metadata">

**Author:** [@zandri.boshoff](https://discuss.elastic.co/u/zandri.boshoff)\
**Replies:** 3\
**Last updated:** [May 29, 2019, 12:41pm UTC](https://discuss.elastic.co/t/display-a-percentage-column-in-any-table-visualization-data-table-or-visual-builder-table/182412 "2019-05-29T12:41:48Z")

</div>

Hi I am struggling to find a way to add a percentage (%) column to a table that contains more than one aggregation. I know that you can add a % column to a table in the visual builder visualisation, however it seems tha…

---

## [What's the difference between bind\_host and publish\_host in ElasticSearch?](https://discuss.elastic.co/t/whats-the-difference-between-bind-host-and-publish-host-in-elasticsearch/17974)

<div class="topic-metadata">

**Author:** [@flyer](https://discuss.elastic.co/u/flyer)\
**Replies:** 2\
**Last updated:** [June 8, 2014, 1:59am UTC](https://discuss.elastic.co/t/whats-the-difference-between-bind-host-and-publish-host-in-elasticsearch/17974 "2014-06-08T01:59:00Z")

</div>

From this document network settings , I know that \*publish\_host\* is the host that other nodes in the cluster will communicate to. But I don't understand the functionality of \*bind\_host\*, which means that: The netw…

---

## [Filebeat exclude lines not working](https://discuss.elastic.co/t/filebeat-exclude-lines-not-working/139879)

<div class="topic-metadata">

**Author:** [@HerberthObregon](https://discuss.elastic.co/u/HerberthObregon)\
**Replies:** 4\
**Last updated:** [July 14, 2018, 9:12am UTC](https://discuss.elastic.co/t/filebeat-exclude-lines-not-working/139879 "2018-07-14T09:12:04Z")

</div>

Filebeats does not exclude the lines as I expected my configuration is filebeat.prospectors: - type: log enabled: true paths: - /var/log/\*.log exclude\_lines: \['.js','.png','.svg','.json','.txt'\] #also i try…

---

## [Include\_in\_all 5.3.1](https://discuss.elastic.co/t/include-in-all-5-3-1/83901)

<div class="topic-metadata">

**Author:** [@billnbell](https://discuss.elastic.co/u/billnbell)\
**Replies:** 3\
**Last updated:** [April 29, 2017, 10:20pm UTC](https://discuss.elastic.co/t/include-in-all-5-3-1/83901 "2017-04-29T22:20:11Z")

</div>

I am getting tons of INFO messages in the log. On every Bulk add: field \[include\_in\_all\] is deprecated, as \[\_all\] is deprecated, and will be disallowed in 6.0, use \[copy\_to\] instead. field \[include\_in\_all\] is deprecat…

---

## [Beats, Elastic Agent, APM Server, and Fleet Server 8.10.1 Security Update - Improper Certificate Validation issue (ESA-2023-16)](https://discuss.elastic.co/t/beats-elastic-agent-apm-server-and-fleet-server-8-10-1-security-update-improper-certificate-validation-issue-esa-2023-16/343385)

<div class="topic-metadata">

**Author:** [@rodrigo\_silva](https://discuss.elastic.co/u/rodrigo_silva)\
**Replies:** 0\
**Last updated:** [September 19, 2023, 3:32pm UTC](https://discuss.elastic.co/t/beats-elastic-agent-apm-server-and-fleet-server-8-10-1-security-update-improper-certificate-validation-issue-esa-2023-16/343385 "2023-09-19T15:32:21Z")

</div>

Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue (ESA-2023-16) It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify …

---

## [How do I create a navigation link in a markdown widget?](https://discuss.elastic.co/t/how-do-i-create-a-navigation-link-in-a-markdown-widget/43265)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 1\
**Last updated:** [March 2, 2016, 3:50pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-navigation-link-in-a-markdown-widget/43265 "2016-03-02T15:50:28Z")

</div>

I'm looking at https://www.elastic.co/blog/elastic-at-rsa-conference-2016 and it appears they have created a Navigation widget. I have two dashboards that are related so I'd like to create a link on each to the other. I'…

---

## [Logs that are visible in stdout not showing up in es/kibana](https://discuss.elastic.co/t/logs-that-are-visible-in-stdout-not-showing-up-in-es-kibana/55090)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 4\
**Last updated:** [July 8, 2016, 8:37pm UTC](https://discuss.elastic.co/t/logs-that-are-visible-in-stdout-not-showing-up-in-es-kibana/55090 "2016-07-08T20:37:40Z")

</div>

My output plugin is using BOTH stdout { codec =\> rubydebug } and an elasticsearch output connecting to our cluster, I do this sometimes to help me debug. When I run a test script to send a bunch of data to logstash, wi…

---

## [Get list of kiaban visualization and dashboards](https://discuss.elastic.co/t/get-list-of-kiaban-visualization-and-dashboards/130043)

<div class="topic-metadata">

**Author:** [@jmukhtar](https://discuss.elastic.co/u/jmukhtar)\
**Replies:** 5\
**Last updated:** [May 10, 2018, 1:53pm UTC](https://discuss.elastic.co/t/get-list-of-kiaban-visualization-and-dashboards/130043 "2018-05-10T13:53:29Z")

</div>

I have a test deployment of ELK stack and i am trying to get a list of kibana visualizations but following command is not showing me any useful output curl localhost:9200/.kibana/visualization/\_search {"took":2,"timed\_…

---

## [Failed to execute watch transform (NoClassDefFoundError)](https://discuss.elastic.co/t/failed-to-execute-watch-transform-noclassdeffounderror/41257)

<div class="topic-metadata">

**Author:** [@terramexx](https://discuss.elastic.co/u/terramexx)\
**Replies:** 8\
**Last updated:** [February 10, 2016, 9:02am UTC](https://discuss.elastic.co/t/failed-to-execute-watch-transform-noclassdeffounderror/41257 "2016-02-10T09:02:09Z")

</div>

We are on ELK 2.2.0. I am trying to hunt a bug with watcher but I had no success in last days. After a few successful executions the watcher keeps falling in following exception: ScriptException\[failed to run inlin…

---

## [How to use port 443 to access Kibana](https://discuss.elastic.co/t/how-to-use-port-443-to-access-kibana/266757)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 2:57am UTC](https://discuss.elastic.co/t/how-to-use-port-443-to-access-kibana/266757 "2021-03-10T02:57:56Z")

</div>

Hi, I think this is basic. How can I use port 443? Changing the kibana.yml itself is not enough?! Any other configurations on the OS level? Or something else? Currently, I can access with HTTPS but with port 5601 on…

---

## [Disable auto refresh](https://discuss.elastic.co/t/disable-auto-refresh/264653)

<div class="topic-metadata">

**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\
**Replies:** 4\
**Last updated:** [March 3, 2021, 3:24pm UTC](https://discuss.elastic.co/t/disable-auto-refresh/264653 "2021-03-03T15:24:51Z")

</div>

Hello, i was trying to disable auto refresh in Kibana. I would like to completely disable it. But timepicker:refreshInterval "pause": true is not working no matter what i do. It always goes back to enable and 10sec. Ki…

---

## [Federated Alerting for Elasticsearch, Prometheus and Apache Kafka systems](https://discuss.elastic.co/t/federated-alerting-for-elasticsearch-prometheus-and-apache-kafka-systems/97412)

<div class="topic-metadata">

**Author:** [@lucasponce](https://discuss.elastic.co/u/lucasponce)\
**Replies:** 0\
**Last updated:** [August 17, 2017, 12:37pm UTC](https://discuss.elastic.co/t/federated-alerting-for-elasticsearch-prometheus-and-apache-kafka-systems/97412 "2017-08-17T12:37:35Z")

</div>

Hello, From Hawkular team we are working to create a lightweight alerting component that can alert on Elasticsearch and combined with other ecosystems like Prometheus and Apache Kafka. We would like to get feedback abo…

---

## [Kibana 5 - best practice for multiple environments](https://discuss.elastic.co/t/kibana-5-best-practice-for-multiple-environments/104509)

<div class="topic-metadata">

**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\
**Replies:** 3\
**Last updated:** [October 24, 2017, 3:48pm UTC](https://discuss.elastic.co/t/kibana-5-best-practice-for-multiple-environments/104509 "2017-10-24T15:48:37Z")

</div>

Hi, I have dev and testing environments, I pointed both filebeats to the same Kibana instance, with different index prefixes, of course. It looks like the best practice for me, instead of managing different elastic sea…

---

## [Drop event if condition](https://discuss.elastic.co/t/drop-event-if-condition/215370)

<div class="topic-metadata">

**Author:** [@dennys\_84](https://discuss.elastic.co/u/dennys_84)\
**Replies:** 6\
**Last updated:** [January 17, 2020, 10:41am UTC](https://discuss.elastic.co/t/drop-event-if-condition/215370 "2020-01-17T10:41:35Z")

</div>

Hi all. We are trying to accomplish such task: Log auth events from windows security logs. We set winlogbeat to export data to logstash. But problem is that there are too much incoming events with the same id. So we ne…

---

## [I can't reopen a closed index](https://discuss.elastic.co/t/i-cant-reopen-a-closed-index/335895)

<div class="topic-metadata">

**Author:** [@Hatef](https://discuss.elastic.co/u/Hatef)\
**Replies:** 8\
**Last updated:** [June 14, 2023, 6:34pm UTC](https://discuss.elastic.co/t/i-cant-reopen-a-closed-index/335895 "2023-06-14T18:34:15Z")

</div>

Hi all, I'm pretty new to ES but have played around with ELK stack a bit and I'm more familiar now to run some API queries and modifying configs. I have closed an index called accelerate which is the main source of our…

---

## [Ignore filters for some visualizations (data tables) in dashboard](https://discuss.elastic.co/t/ignore-filters-for-some-visualizations-data-tables-in-dashboard/162909)

<div class="topic-metadata">

**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 4:30am UTC](https://discuss.elastic.co/t/ignore-filters-for-some-visualizations-data-tables-in-dashboard/162909 "2019-01-07T04:30:19Z")

</div>

Hi All, I have two data tables in my dashboard, I want to have a Input Control to filter data based on some filed, but I want to make sure this filter should be applicable only for one of my table and other table should…

---

## [NUMBER field appears as a string in Kibana](https://discuss.elastic.co/t/number-field-appears-as-a-string-in-kibana/89014)

<div class="topic-metadata">

**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 4:16am UTC](https://discuss.elastic.co/t/number-field-appears-as-a-string-in-kibana/89014 "2017-06-13T04:16:04Z")

</div>

I am using ELK to parse my logs. I have created a number field duration in Logstash. %{NUMBER:duration} I want to find maximum duration. I am using metric in Kibana for the same. But duration field does not appear as…

---

## [Starting Elasticsearch with systemd hangs](https://discuss.elastic.co/t/starting-elasticsearch-with-systemd-hangs/229510)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 3\
**Last updated:** [April 23, 2020, 7:46pm UTC](https://discuss.elastic.co/t/starting-elasticsearch-with-systemd-hangs/229510 "2020-04-23T19:46:36Z")

</div>

Hello, I'm having trouble trying to start Elasticsearh (tar.gz installation) with Systemd. This is the service's unit file. I copyied from Elastic's repo in Github and changed user, group and path variables. Other than…

---

## [Issue parsing Apache log coming from Filebeat](https://discuss.elastic.co/t/issue-parsing-apache-log-coming-from-filebeat/68297)

<div class="topic-metadata">

**Author:** [@bicofino](https://discuss.elastic.co/u/bicofino)\
**Replies:** 4\
**Last updated:** [December 9, 2016, 12:14pm UTC](https://discuss.elastic.co/t/issue-parsing-apache-log-coming-from-filebeat/68297 "2016-12-09T12:14:53Z")

</div>

Hello all, I'm trying use ELK with Filebeat to parse some apache logs, but the filter never gets fired. ELK Server: Packages installed: logstash-5.0.2-1.noarch kibana-5.0.2-1.x86\_64 elasticsearch-5.0.2-1.noarch T…

---

## [Import Canvas to dashboard](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 6:56am UTC](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684 "2021-05-12T06:56:31Z")

</div>

I need images and custom icons in the dashboard. In the canvas editor I can do that. However, is it possible to import the canvas to a dashboard?

---

## [Elastic APM Agent for Go 1.11.0 Security Update](https://discuss.elastic.co/t/elastic-apm-agent-for-go-1-11-0-security-update/263252)

<div class="topic-metadata">

**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\
**Replies:** 0\
**Last updated:** [February 4, 2021, 2:19pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-for-go-1-11-0-security-update/263252 "2021-02-04T14:19:59Z")

</div>

Elastic APM Agent for Go information disclosure (ESA-2021-02) The Elastic APM agent for Go can leak sensitive HTTP header information when logging the details during an application panic. Normally, the APM agent will sa…

[Previous page](https://discuss.elastic.co/top.md?page=484&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=486&per_page=50&period=all)
