# Top

**URL:** https://discuss.elastic.co/top.md?page=491&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 492

---

## [How can I swap indexes?](https://discuss.elastic.co/t/how-can-i-swap-indexes/2364)

<div class="topic-metadata">

**Author:** [@patrick99e99](https://discuss.elastic.co/u/patrick99e99)\
**Replies:** 3\
**Last updated:** [June 10, 2015, 9:32pm UTC](https://discuss.elastic.co/t/how-can-i-swap-indexes/2364 "2015-06-10T21:32:15Z")

</div>

Hi everyone. I am working on an application that has an extremely large production database. On occasion, I need to test things locally with real data, so I during these times, I switch to a copy of my production datab…

---

## [Multiline codec and csv filter](https://discuss.elastic.co/t/multiline-codec-and-csv-filter/92016)

<div class="topic-metadata">

**Author:** [@Yimjunhyeok](https://discuss.elastic.co/u/Yimjunhyeok)\
**Replies:** 0\
**Last updated:** [July 6, 2017, 5:10am UTC](https://discuss.elastic.co/t/multiline-codec-and-csv-filter/92016 "2017-07-06T05:10:58Z")

</div>

This is source (2 logs) 172.16.110.11|ABC|!|@|#|abcd abcdkasjdlaskd asdsadlksadklsdakl |!|@|#| 123.123.11.1|ddaskd|!|@|#|skdlsadsakdljadd,vcmacl askdlsad ask dkas dska d |!|@|#| Seperator ==\> | , |!|@|#| Column…

---

## [JAVA API for multiple query cluases](https://discuss.elastic.co/t/java-api-for-multiple-query-cluases/5931)

<div class="topic-metadata">

**Author:** [@alichi](https://discuss.elastic.co/u/alichi)\
**Replies:** 8\
**Last updated:** [November 28, 2011, 6:44pm UTC](https://discuss.elastic.co/t/java-api-for-multiple-query-cluases/5931 "2011-11-28T18:44:57Z")

</div>

Hi mates, I have been asked to use elasticsearch JAVA API (I personally love its REST API, but I am not the decision maker here). I have been struggling with finding a good set of classes/methods to build comprehensi…

---

## [Elasticsearch SearchContextMissingException during 'scan & scroll' query with Spring Data Elasticsearch](https://discuss.elastic.co/t/elasticsearch-searchcontextmissingexception-during-scan-scroll-query-with-spring-data-elasticsearch/54402)

<div class="topic-metadata">

**Author:** [@esnosek](https://discuss.elastic.co/u/esnosek)\
**Replies:** 1\
**Last updated:** [June 30, 2016, 12:09pm UTC](https://discuss.elastic.co/t/elasticsearch-searchcontextmissingexception-during-scan-scroll-query-with-spring-data-elasticsearch/54402 "2016-06-30T12:09:36Z")

</div>

I am using elasticsearch 2.2.0 with default cluster configuration. I encounter a problem with scan and scroll query using spring data elasticsearch. When I execute the query I get error like this: \[2016-06-29 12:45:5…

---

## [Connection issues using apikey](https://discuss.elastic.co/t/connection-issues-using-apikey/261452)

<div class="topic-metadata">

**Author:** [@LarryLeisure](https://discuss.elastic.co/u/LarryLeisure)\
**Replies:** 2\
**Last updated:** [January 21, 2021, 4:10pm UTC](https://discuss.elastic.co/t/connection-issues-using-apikey/261452 "2021-01-21T16:10:17Z")

</div>

Dear all, I have just recently started working with ElasticSearch and Rest APIs and would like to ask for your help concerning the following issue: I am using a trial version of ElasticSearch Cloud Service, set up a de…

---

## [Proper configuration of "server.host", "elasticsearch.host", and "network.host" settings on multinode cluster in production](https://discuss.elastic.co/t/proper-configuration-of-server-host-elasticsearch-host-and-network-host-settings-on-multinode-cluster-in-production/255378)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 2\
**Last updated:** [November 16, 2020, 2:56pm UTC](https://discuss.elastic.co/t/proper-configuration-of-server-host-elasticsearch-host-and-network-host-settings-on-multinode-cluster-in-production/255378 "2020-11-16T14:56:55Z")

</div>

Hello, I'm building a multi-node elastic stack cluster with the following nodes: 3 master-eligible nodes (with all default roles) 1 coordinating-only node with Kibana additional data/ingest-dedicated nodes as needed A…

---

## [BulkIndexError using Elasticsearch in Python](https://discuss.elastic.co/t/bulkindexerror-using-elasticsearch-in-python/219417)

<div class="topic-metadata">

**Author:** [@brendanwalker](https://discuss.elastic.co/u/brendanwalker)\
**Replies:** 2\
**Last updated:** [February 14, 2020, 5:30pm UTC](https://discuss.elastic.co/t/bulkindexerror-using-elasticsearch-in-python/219417 "2020-02-14T17:30:33Z")

</div>

I am writing a program to search through really large (\>400mb) csv files provided by the government. Some of these files have over 1,000,000 rows. This is a local program that roughly 5 people will use in my company to h…

---

## [Kibana context root?](https://discuss.elastic.co/t/kibana-context-root/57791)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 2\
**Last updated:** [August 12, 2016, 5:27am UTC](https://discuss.elastic.co/t/kibana-context-root/57791 "2016-08-12T05:27:54Z")

</div>

Hello, We are trying to redirect to Kibana through webseal. I just upgraded to KIbana 4.5.3. Wehn I hit the url http://:5601 it goes to http://:5601/app/kibana Can anybody tell me where does it takes this /app/kib…

---

## [Elastic Cloud on Kubernetes (ECK) 2.8 Security Update](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [September 26, 2023, 9:48am UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854 "2023-09-26T09:48:13Z")

</div>

Elastic Cloud on Kubernetes (ECK) secret token configuration issue (ESA-2023-11) Secret token configuration is never applied when using ECK \<2.8 with APM Server \>=8.0. This could lead to anonymous requests to an APM Se…

---

## [Failed to publish events: temporary bulk send failure for custom ES index](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure-for-custom-es-index/234387)

<div class="topic-metadata">

**Author:** [@robsv](https://discuss.elastic.co/u/robsv)\
**Replies:** 3\
**Last updated:** [June 1, 2020, 4:34pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure-for-custom-es-index/234387 "2020-06-01T16:34:05Z")

</div>

I am trying to set up a custom index name for Metricbeat to use in ES (so I can have more than one server send to the same ES). When I start metricbeat with systemctl, it gets in a loop and constantly throws a "Failed to…

---

## [\[Solved\] Cluster Recommendations? Slow Indexing on Elastic Stack 5](https://discuss.elastic.co/t/solved-cluster-recommendations-slow-indexing-on-elastic-stack-5/82436)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 8\
**Last updated:** [May 16, 2017, 8:16pm UTC](https://discuss.elastic.co/t/solved-cluster-recommendations-slow-indexing-on-elastic-stack-5/82436 "2017-05-16T20:16:45Z")

</div>

I have a ten node cluster running fully on Elastic 5.3 (except Filebeat, which is v5.2.2). I need some tuning recommendations for how to get my indexing rate up (\>3k/sec for primary shards). About my config: Four nodes…

---

## [What are the differences between \`xpack.security.http.ssl.enabled\` and \`xpack.security.transport.ssl.enabled\`](https://discuss.elastic.co/t/what-are-the-differences-between-xpack-security-http-ssl-enabled-and-xpack-security-transport-ssl-enabled/287757)

<div class="topic-metadata">

**Author:** [@QiaolingTang](https://discuss.elastic.co/u/QiaolingTang)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 4:24pm UTC](https://discuss.elastic.co/t/what-are-the-differences-between-xpack-security-http-ssl-enabled-and-xpack-security-transport-ssl-enabled/287757 "2021-10-27T16:24:04Z")

</div>

I'm trying to configure xpack on my ES cluster, when I read the document, for the xpack.security.http.ssl.enabled and xpack.security.transport.ssl.enabled, both of them are Used to enable or disable TLS/SSL., but I can't…

---

## [Login page at Kibana](https://discuss.elastic.co/t/login-page-at-kibana/40898)

<div class="topic-metadata">

**Author:** [@mrehanb](https://discuss.elastic.co/u/mrehanb)\
**Replies:** 3\
**Last updated:** [February 4, 2016, 9:47pm UTC](https://discuss.elastic.co/t/login-page-at-kibana/40898 "2016-02-04T21:47:47Z")

</div>

I like to setup login page while accessing Kibana. This is required that unauthorized user will not access Kibana and avoid unnecessary load. Just like splunk had credential page. Please advise how can i setup the same…

---

## [Getting "master not discovered exception" even when Master Node is present](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-when-master-node-is-present/52433)

<div class="topic-metadata">

**Author:** [@arunkumar987](https://discuss.elastic.co/u/arunkumar987)\
**Replies:** 0\
**Last updated:** [June 10, 2016, 10:35am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-when-master-node-is-present/52433 "2016-06-10T10:35:14Z")

</div>

Getting the exception, master\_not\_discovered\_exception when running http://localhost:9200/\_cat/indices?v in the browser. I verified that the master node is present by running http://localhost:9200/\_nodes and I got the o…

---

## [Fixing mappings/index without loasing data](https://discuss.elastic.co/t/fixing-mappings-index-without-loasing-data/71218)

<div class="topic-metadata">

**Author:** [@Keeper-of-the-Keys](https://discuss.elastic.co/u/Keeper-of-the-Keys)\
**Replies:** 2\
**Last updated:** [January 15, 2017, 3:11pm UTC](https://discuss.elastic.co/t/fixing-mappings-index-without-loasing-data/71218 "2017-01-15T15:11:50Z")

</div>

I have a bunch of fields that were interpreted as long/int instead of double/float as result I have the following conflict: "cpuload.avg1": "Field \[cpuload.avg1\] of type \[integer\] conflicts with existing field of type \[f…

---

## [ElasticSearch Watcher Painless script : illegal\_argument\_exception, reson: Extraneous for loop](https://discuss.elastic.co/t/elasticsearch-watcher-painless-script-illegal-argument-exception-reson-extraneous-for-loop/153508)

<div class="topic-metadata">

**Author:** [@tianshu\_Peng](https://discuss.elastic.co/u/tianshu_Peng)\
**Replies:** 1\
**Last updated:** [October 23, 2018, 7:49am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-painless-script-illegal-argument-exception-reson-extraneous-for-loop/153508 "2018-10-23T07:49:48Z")

</div>

I'm running a applicaiton and I want to alert on apiName with different threshold here is my query result: { "took": 120, "timed\_out": false, "\_shards": { "total": 139, "successful": 139, "skipped": 1…

---

## [Automation for CSV file generation in data tables](https://discuss.elastic.co/t/automation-for-csv-file-generation-in-data-tables/226569)

<div class="topic-metadata">

**Author:** [@WAFA\_Mardiney](https://discuss.elastic.co/u/WAFA_Mardiney)\
**Replies:** 3\
**Last updated:** [April 7, 2020, 9:45pm UTC](https://discuss.elastic.co/t/automation-for-csv-file-generation-in-data-tables/226569 "2020-04-07T21:45:26Z")

</div>

I'm using kibana data table visualization, I can export csv file from the button below the table but is there a way to automate this process to happen each day for example? I saw a previous topic automated csv file gener…

---

## [Ruby exception occurred: undefined method \`\*' for nil:NilClass](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/84477)

<div class="topic-metadata">

**Author:** [@jiyu3268891](https://discuss.elastic.co/u/jiyu3268891)\
**Replies:** 2\
**Last updated:** [May 4, 2017, 9:25am UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass/84477 "2017-05-04T09:25:03Z")

</div>

filter { grok { match =\> \["message", "%{TIMESTAMP\_ISO8601:a} %{WORD} %{USER}\] %{WORD} %{WORD} %{WORD:keyvalue}"\] add\_tag =\> "warn" } metrics { meter =\> "events.%{keyvalue}" add\_tag =\> "metric" ignore\_older\_than =\> 10 }…

---

## [Canvas dropdownfilter does not filter](https://discuss.elastic.co/t/canvas-dropdownfilter-does-not-filter/161950)

<div class="topic-metadata">

**Author:** [@JeroenK](https://discuss.elastic.co/u/JeroenK)\
**Replies:** 5\
**Last updated:** [January 6, 2019, 12:15pm UTC](https://discuss.elastic.co/t/canvas-dropdownfilter-does-not-filter/161950 "2019-01-06T12:15:38Z")

</div>

I'm working on my first Canvas and want to show statistics about my payment brands in my shop, including a time filter and a payment brand filter: Everything works as I want, except for the payment brands filter. Afte…

---

## [Need step by step process to upload log files into elastic search through Logstash to see result in KIbana](https://discuss.elastic.co/t/need-step-by-step-process-to-upload-log-files-into-elastic-search-through-logstash-to-see-result-in-kibana/119736)

<div class="topic-metadata">

**Author:** [@Anilg](https://discuss.elastic.co/u/Anilg)\
**Replies:** 5\
**Last updated:** [February 14, 2018, 7:46am UTC](https://discuss.elastic.co/t/need-step-by-step-process-to-upload-log-files-into-elastic-search-through-logstash-to-see-result-in-kibana/119736 "2018-02-14T07:46:22Z")

</div>

I have all the setup...already few ".json" files are successfully uploaded.but for log files I need help...I am using ubuntu...Thanks in advance..

---

## [How to handle lots of small indices](https://discuss.elastic.co/t/how-to-handle-lots-of-small-indices/272063)

<div class="topic-metadata">

**Author:** [@fillg1](https://discuss.elastic.co/u/fillg1)\
**Replies:** 8\
**Last updated:** [May 5, 2021, 12:13pm UTC](https://discuss.elastic.co/t/how-to-handle-lots-of-small-indices/272063 "2021-05-05T12:13:31Z")

</div>

Hi folks We are using Elasticsearch as a kind of backend for our application. Due to security and privacy reasons, we create a per user index which is opened/ closed by the application. This size of the index is small…

---

## [Example script for "scripted upsert"](https://discuss.elastic.co/t/example-script-for-scripted-upsert/60418)

<div class="topic-metadata">

**Author:** [@kaung](https://discuss.elastic.co/u/kaung)\
**Replies:** 0\
**Last updated:** [September 13, 2016, 6:32pm UTC](https://discuss.elastic.co/t/example-script-for-scripted-upsert/60418 "2016-09-13T18:32:39Z")

</div>

The example for "scripted upsert" only mentions a script ID "my\_web\_session\_summariser". Does anyone have the content of that script? https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update.html#\_lite…

---

## [X Pack License Cost Required](https://discuss.elastic.co/t/x-pack-license-cost-required/160177)

<div class="topic-metadata">

**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\
**Replies:** 3\
**Last updated:** [December 11, 2018, 6:17pm UTC](https://discuss.elastic.co/t/x-pack-license-cost-required/160177 "2018-12-11T18:17:03Z")

</div>

Hi I want to purchase the licensed version of X-Pack for doing some research on my laptop. Can anyone help me on what is the license fee and the procedure for obtaining license for the same. I tried to check on elasti…

---

## [Marvel installation nodejs error?](https://discuss.elastic.co/t/marvel-installation-nodejs-error/37001)

<div class="topic-metadata">

**Author:** [@stpruitt](https://discuss.elastic.co/u/stpruitt)\
**Replies:** 7\
**Last updated:** [December 14, 2015, 6:10pm UTC](https://discuss.elastic.co/t/marvel-installation-nodejs-error/37001 "2015-12-14T18:10:28Z")

</div>

Newbie question. I have ES 2.1.0 installed. I installed kibana 4.3.0. The marvel 2.1.0 plugin is installed in ES. The marvel installation instructions next said to install in kibana via: bin/kibana plugin --instal…

---

## [How to find last element of array in logstash](https://discuss.elastic.co/t/how-to-find-last-element-of-array-in-logstash/243276)

<div class="topic-metadata">

**Author:** [@Rakesh\_Katakam](https://discuss.elastic.co/u/Rakesh_Katakam)\
**Replies:** 4\
**Last updated:** [July 30, 2020, 8:44pm UTC](https://discuss.elastic.co/t/how-to-find-last-element-of-array-in-logstash/243276 "2020-07-30T20:44:10Z")

</div>

Hi, I am trying to split string and add a new event with last index as value. Here below is code snippet which I am trying. Could someone please help me out on the same. Input : eqdomain/eqlogs/abc/hyper.log Script: …

---

## [Spike detection in elasticsearch](https://discuss.elastic.co/t/spike-detection-in-elasticsearch/26206)

<div class="topic-metadata">

**Author:** [@Sajid\_Moinuddin](https://discuss.elastic.co/u/Sajid_Moinuddin)\
**Replies:** 4\
**Last updated:** [July 27, 2015, 7:10am UTC](https://discuss.elastic.co/t/spike-detection-in-elasticsearch/26206 "2015-07-27T07:10:53Z")

</div>

I am trying to get something like setup with watcher, would appreciate if anyone points me to the right direction. Basically I want my conditions to be more dynamic rather than just greater than / less than match. http…

---

## [ES 6.2 Multiple Function Scores/Boost Modes](https://discuss.elastic.co/t/es-6-2-multiple-function-scores-boost-modes/127557)

<div class="topic-metadata">

**Author:** [@Jon\_Hourany](https://discuss.elastic.co/u/Jon_Hourany)\
**Replies:** 2\
**Last updated:** [April 23, 2018, 7:57pm UTC](https://discuss.elastic.co/t/es-6-2-multiple-function-scores-boost-modes/127557 "2018-04-23T19:57:08Z")

</div>

I'm trying to add the Page Rank to the score of a document, adjusted by date decay. I know I can multiply the Rank and Date Decay together with a "score\_mode": "multiply", but I have other factors that I want summed, and…

---

## [Looking for shell based elasticsearch client or something similar to curator run in command line](https://discuss.elastic.co/t/looking-for-shell-based-elasticsearch-client-or-something-similar-to-curator-run-in-command-line/166009)

<div class="topic-metadata">

**Author:** [@morningspace](https://discuss.elastic.co/u/morningspace)\
**Replies:** 6\
**Last updated:** [February 2, 2019, 3:53pm UTC](https://discuss.elastic.co/t/looking-for-shell-based-elasticsearch-client-or-something-similar-to-curator-run-in-command-line/166009 "2019-02-02T15:53:29Z")

</div>

Hi All, I'm curious whether there's any shell based elasticsearch client implementation or something similar to curator exists in community. I can see there are many types of elasticsearch clients documented at https://…

---

## [High CPU usage ElasticSearch Causing Search slow and timeout with Kibana](https://discuss.elastic.co/t/high-cpu-usage-elasticsearch-causing-search-slow-and-timeout-with-kibana/285221)

<div class="topic-metadata">

**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\
**Replies:** 8\
**Last updated:** [September 30, 2021, 12:48pm UTC](https://discuss.elastic.co/t/high-cpu-usage-elasticsearch-causing-search-slow-and-timeout-with-kibana/285221 "2021-09-30T12:48:20Z")

</div>

Hello Guys, Hope you are all doing well! We are using Fluent-bit + Elastic + Kibana stack for logging our kubernetes containers. However, sometimes the CPU usage goes too high and search from kibana not working. Setup…

---

## [Logstash - Elastic search input plugin - Aggregation query doesn't seem to work](https://discuss.elastic.co/t/logstash-elastic-search-input-plugin-aggregation-query-doesnt-seem-to-work/171147)

<div class="topic-metadata">

**Author:** [@hariharnarayanan](https://discuss.elastic.co/u/hariharnarayanan)\
**Replies:** 1\
**Last updated:** [March 25, 2019, 8:26pm UTC](https://discuss.elastic.co/t/logstash-elastic-search-input-plugin-aggregation-query-doesnt-seem-to-work/171147 "2019-03-25T20:26:35Z")

</div>

I'm trying to use logstash to source data from elastic search and index them in elastic search log index. Basically, I am trying to use an aggregate query from ES input and put them in another ES log index. When I use cu…

---

## [Aggregation with terms and cardinality deliver different results](https://discuss.elastic.co/t/aggregation-with-terms-and-cardinality-deliver-different-results/131155)

<div class="topic-metadata">

**Author:** [@Alexander\_Zerr](https://discuss.elastic.co/u/Alexander_Zerr)\
**Replies:** 1\
**Last updated:** [May 9, 2018, 11:11am UTC](https://discuss.elastic.co/t/aggregation-with-terms-and-cardinality-deliver-different-results/131155 "2018-05-09T11:11:20Z")

</div>

I have big trouble with cardinality and term aggregation. Different aggregation over my index with 2700k entries deliver me diverse count/sum. Is it possible to get the correct count from ES like MySql or is ES not the b…

---

## [Logstash not showing any output](https://discuss.elastic.co/t/logstash-not-showing-any-output/120850)

<div class="topic-metadata">

**Author:** [@student](https://discuss.elastic.co/u/student)\
**Replies:** 4\
**Last updated:** [February 23, 2018, 10:32am UTC](https://discuss.elastic.co/t/logstash-not-showing-any-output/120850 "2018-02-23T10:32:02Z")

</div>

Hi I am a student working on a project and decided to use ELK Stack as a logging tool to present its value. I am using SUSE Linux Enterprise Server 12 SP3 (x86\_64) as OS and running it on a virtual machine. I need a…

---

## [Filebeat as Daemonset for all Kubernetes Logs (including nginx)](https://discuss.elastic.co/t/filebeat-as-daemonset-for-all-kubernetes-logs-including-nginx/166752)

<div class="topic-metadata">

**Author:** [@sujituk](https://discuss.elastic.co/u/sujituk)\
**Replies:** 3\
**Last updated:** [February 2, 2019, 10:38pm UTC](https://discuss.elastic.co/t/filebeat-as-daemonset-for-all-kubernetes-logs-including-nginx/166752 "2019-02-02T22:38:29Z")

</div>

I have attached my filebeat which was taken from https://github.com/elastic/beats/blob/6.5/deploy/kubernetes/filebeat-kubernetes.yaml + Added ES endpoint with creds + disabled filebeat.config.inputs + enabled autodiscove…

---

## [How to calculate each IP address count,avg requests per day,bit size,byte size in packet beats](https://discuss.elastic.co/t/how-to-calculate-each-ip-address-count-avg-requests-per-day-bit-size-byte-size-in-packet-beats/67068)

<div class="topic-metadata">

**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\
**Replies:** 4\
**Last updated:** [November 28, 2016, 5:03pm UTC](https://discuss.elastic.co/t/how-to-calculate-each-ip-address-count-avg-requests-per-day-bit-size-byte-size-in-packet-beats/67068 "2016-11-28T17:03:47Z")

</div>

Hello everyone, Packet beats are really awesome, but I don't know how to calculate each IP address count per day,Avg requests per day,bit size,byte size with respect to IP in packet beats ?

---

## [Logstash Connection Reset by Peer](https://discuss.elastic.co/t/logstash-connection-reset-by-peer/217690)

<div class="topic-metadata">

**Author:** [@kitedj](https://discuss.elastic.co/u/kitedj)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 6:32pm UTC](https://discuss.elastic.co/t/logstash-connection-reset-by-peer/217690 "2020-02-17T18:32:07Z")

</div>

Hello, I'm trying to debug a warning message I'm getting in my Logstash logs for my Winlogbeat filter. I've tried adding the setting client\_inactivity\_timeout =\> 0 to my Logstash input filter like I read in similar issue…

---

## [How to update about JavaEsSpark.saveToEs](https://discuss.elastic.co/t/how-to-update-about-javaesspark-savetoes/106279)

<div class="topic-metadata">

**Author:** [@hyitclj](https://discuss.elastic.co/u/hyitclj)\
**Replies:** 0\
**Last updated:** [November 3, 2017, 8:09am UTC](https://discuss.elastic.co/t/how-to-update-about-javaesspark-savetoes/106279 "2017-11-03T08:09:37Z")

</div>

Issue description Description My test ES data: #! Deprecation: query malformed, empty clause found at \[2:13\] { "took": 1, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "failed": 0 }, "hits": { …

---

## [Unknown SSL protocol error after activating trial license](https://discuss.elastic.co/t/unknown-ssl-protocol-error-after-activating-trial-license/210725)

<div class="topic-metadata">

**Author:** [@jg\_opti](https://discuss.elastic.co/u/jg_opti)\
**Replies:** 7\
**Last updated:** [January 7, 2020, 4:24pm UTC](https://discuss.elastic.co/t/unknown-ssl-protocol-error-after-activating-trial-license/210725 "2020-01-07T16:24:01Z")

</div>

Hi, We encountered an issue after switch to the trial license from the basic license, the ssl connection of the http layer don't work anymore from remote Kibana and Logstash nodes. I didn't see any problem for the tran…

---

## [Problem accessing maven repository https://artifacts.elastic.co/maven](https://discuss.elastic.co/t/problem-accessing-maven-repository-https-artifacts-elastic-co-maven/81130)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 3\
**Last updated:** [April 4, 2017, 2:09pm UTC](https://discuss.elastic.co/t/problem-accessing-maven-repository-https-artifacts-elastic-co-maven/81130 "2017-04-04T14:09:57Z")

</div>

Attempting to write an x-pack custom realm based on : https://github.com/elastic/shield-custom-realm-example Attempting to add the elasticsearch-releases repo to nexus as a proxy repository but getting an error: jvm…

---

## [Basic Authentication with Spark fails with 403(forbidden)](https://discuss.elastic.co/t/basic-authentication-with-spark-fails-with-403-forbidden/38343)

<div class="topic-metadata">

**Author:** [@jvaradhan](https://discuss.elastic.co/u/jvaradhan)\
**Replies:** 2\
**Last updated:** [January 9, 2016, 1:23pm UTC](https://discuss.elastic.co/t/basic-authentication-with-spark-fails-with-403-forbidden/38343 "2016-01-09T13:23:10Z")

</div>

I am trying to write to ES with Basic auth. It fails with this error (see below). I tried it with straight java and other tools with setting the basic auth headers and they all work fine. Here is the code val sparkConf…

---

## [2FA Auth](https://discuss.elastic.co/t/2fa-auth/231651)

<div class="topic-metadata">

**Author:** [@rwr](https://discuss.elastic.co/u/rwr)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 4:33pm UTC](https://discuss.elastic.co/t/2fa-auth/231651 "2020-05-11T16:33:19Z")

</div>

Hi All I have a question, can kibana use 2 Factor Authentication ? Thanks

---

## [Kibana: No Living connections](https://discuss.elastic.co/t/kibana-no-living-connections/24351)

<div class="topic-metadata">

**Author:** [@lhorsky1](https://discuss.elastic.co/u/lhorsky1)\
**Replies:** 2\
**Last updated:** [June 26, 2015, 1:11pm UTC](https://discuss.elastic.co/t/kibana-no-living-connections/24351 "2015-06-26T13:11:41Z")

</div>

I have built a distributed Logstash environment with 2 Logstash/Redis servers, 3 ES nodes, and 1 Kibana server. I have made the recommended performance changes to the ES servers (ES Heap, Max file, etc). And my ES envi…

---

## [What is the easiest way to download an extremely large data amount of data from kibana?](https://discuss.elastic.co/t/what-is-the-easiest-way-to-download-an-extremely-large-data-amount-of-data-from-kibana/175006)

<div class="topic-metadata">

**Author:** [@Matt3](https://discuss.elastic.co/u/Matt3)\
**Replies:** 1\
**Last updated:** [April 3, 2019, 1:25am UTC](https://discuss.elastic.co/t/what-is-the-easiest-way-to-download-an-extremely-large-data-amount-of-data-from-kibana/175006 "2019-04-03T01:25:10Z")

</div>

I have a lot of data I need a copy of thats currently stored in Kibana. As far as I know all of the data stored in indicies on the machine is in an unreadable format so I cannot simply copy the files. I tried generating …

---

## [Ruby filter - How to add fields?](https://discuss.elastic.co/t/ruby-filter-how-to-add-fields/43272)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 0\
**Last updated:** [March 2, 2016, 4:34pm UTC](https://discuss.elastic.co/t/ruby-filter-how-to-add-fields/43272 "2016-03-02T16:34:18Z")

</div>

Hi I'm trying to do this: if \[directive\] { ruby { code =\> "if event\['directive'\] \<=30 event\[scenario\] = 'scenario\_one' end " } } Basically if the directive field exists (which I h…

---

## [Average number of records over hour of day, day of week and month of year](https://discuss.elastic.co/t/average-number-of-records-over-hour-of-day-day-of-week-and-month-of-year/66057)

<div class="topic-metadata">

**Author:** [@shantanuchalla](https://discuss.elastic.co/u/shantanuchalla)\
**Replies:** 3\
**Last updated:** [November 15, 2016, 10:27am UTC](https://discuss.elastic.co/t/average-number-of-records-over-hour-of-day-day-of-week-and-month-of-year/66057 "2016-11-15T10:27:11Z")

</div>

I want to generate a visualization which shows average no. of records generated over different hours of the day across days or average no. of records on a monday or any day of the week. Similarly for average no. of recor…

---

## [Do data streams require rollover\_alias setting](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437)

<div class="topic-metadata">

**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\
**Replies:** 3\
**Last updated:** [August 5, 2022, 3:21pm UTC](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437 "2022-08-05T15:21:43Z")

</div>

Whilst setting up a new heartbeat-8.3.2 I've noticed that the automatically created template has only index.lifecycle.name setting but not the rollover\_alias. Does that mean it's not required when using data streams? The…

---

## [Change username](https://discuss.elastic.co/t/change-username/169478)

<div class="topic-metadata">

**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 7:08pm UTC](https://discuss.elastic.co/t/change-username/169478 "2019-02-21T19:08:32Z")

</div>

Hi, this has been asked before but the only resolution I could see was to DM a site admin. Any chance I could be shown how to change my username or could some kind hearted admin help me out :grinning: Thanks

---

## [A POC for APM Java agent](https://discuss.elastic.co/t/a-poc-for-apm-java-agent/110264)

<div class="topic-metadata">

**Author:** [@davidecavestro](https://discuss.elastic.co/u/davidecavestro)\
**Replies:** 0\
**Last updated:** [December 5, 2017, 6:42am UTC](https://discuss.elastic.co/t/a-poc-for-apm-java-agent/110264 "2017-12-05T06:42:48Z")

</div>

Hi, I've shared a poc for an APM java agent. For me it has been useful to get some insights into Elastic APM API. As of now it supports automatic tracing for requests (as transactions) and errors on Spring and Boot appl…

---

## [Marvel monitoring data not showing up on separate marvel cluster](https://discuss.elastic.co/t/marvel-monitoring-data-not-showing-up-on-separate-marvel-cluster/44635)

<div class="topic-metadata">

**Author:** [@oberlech](https://discuss.elastic.co/u/oberlech)\
**Replies:** 6\
**Last updated:** [August 24, 2016, 6:55pm UTC](https://discuss.elastic.co/t/marvel-monitoring-data-not-showing-up-on-separate-marvel-cluster/44635 "2016-08-24T18:55:40Z")

</div>

Hi everyone. I have the following situation. I'm running a elasticsearch cluster with the marvel agent instaled which is configured to send it's monitoring data to a separate cluster. As far as i can observe with Kiban…

---

## [Head plugin unable to connect to Elasticsearch 5.3 - cluster health: not connected](https://discuss.elastic.co/t/head-plugin-unable-to-connect-to-elasticsearch-5-3-cluster-health-not-connected/83327)

<div class="topic-metadata">

**Author:** [@jovanmal](https://discuss.elastic.co/u/jovanmal)\
**Replies:** 3\
**Last updated:** [May 16, 2017, 6:06am UTC](https://discuss.elastic.co/t/head-plugin-unable-to-connect-to-elasticsearch-5-3-cluster-health-not-connected/83327 "2017-05-16T06:06:57Z")

</div>

Hi guys, I have Elasticsearch 5.3 installed on Centos 7 x64 server. Also, I have started Head plugin with built-in web server, following next steps: git clone git://github.com/mobz/elasticsearch-head.git cd elastic…

---

## [Error.message HTTP error 403 in : 403 Forbidden event.dataset elasticsearch.enrich](https://discuss.elastic.co/t/error-message-http-error-403-in-403-forbidden-event-dataset-elasticsearch-enrich/216425)

<div class="topic-metadata">

**Author:** [@tennaen](https://discuss.elastic.co/u/tennaen)\
**Replies:** 5\
**Last updated:** [February 5, 2020, 7:30am UTC](https://discuss.elastic.co/t/error-message-http-error-403-in-403-forbidden-event-dataset-elasticsearch-enrich/216425 "2020-02-05T07:30:55Z")

</div>

I have this problem with metricbeat: error.message HTTP error 403 in : 403 Forbidden event.dataset elasticsearch.enrich This is my metricbeat.yml output.elasticsearch: # Array of hosts to connect to. hosts: \["my.…

[Previous page](https://discuss.elastic.co/top.md?page=490&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=492&per_page=50&period=all)
