# Top **URL:** https://discuss.elastic.co/top.md?page=503&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 504 --- ## [Add hours and replace @timestamp](https://discuss.elastic.co/t/add-hours-and-replace-timestamp/28730)
**Author:** [@colormegood](https://discuss.elastic.co/u/colormegood)\ **Replies:** 4\ **Last updated:** [September 6, 2015, 1:02am UTC](https://discuss.elastic.co/t/add-hours-and-replace-timestamp/28730 "2015-09-06T01:02:06Z")
Elasticsearch 1.7.1 Logstash 1.5.4 I use below syslog's logstash config. When i run logstash,error occurred. "logstash ruby exception occurred undefined method localtime". How can i fix it? configuration file for Lo… --- ## [Checking for missing date fields in painless script](https://discuss.elastic.co/t/checking-for-missing-date-fields-in-painless-script/161743)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 2\ **Last updated:** [December 20, 2018, 7:37pm UTC](https://discuss.elastic.co/t/checking-for-missing-date-fields-in-painless-script/161743 "2018-12-20T19:37:00Z")
Elasticsearch 6.4.3 I have an index file synced from PostgreSQL with the original timestamp created\_at configured as date type. At some later moment, a new timestamp event\_timestamp (also date type) has been introduces … --- ## [Error reports failures when exporting documents](https://discuss.elastic.co/t/error-reports-failures-when-exporting-documents/214717)
**Author:** [@Suniel](https://discuss.elastic.co/u/Suniel)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 8:32am UTC](https://discuss.elastic.co/t/error-reports-failures-when-exporting-documents/214717 "2020-01-14T08:32:07Z")
Caused by: org.elasticsearch.xpack.monitoring.exporter.ExportException: bulk \[default\_local\] reports failures when exporting documents at org.elasticsearch.xpack.monitoring.exporter.local.LocalBulk.throwExportException(… --- ## [Not able to see APM data in Kibana](https://discuss.elastic.co/t/not-able-to-see-apm-data-in-kibana/189648)
**Author:** [@aladine](https://discuss.elastic.co/u/aladine)\ **Replies:** 8\ **Last updated:** [July 11, 2019, 1:04am UTC](https://discuss.elastic.co/t/not-able-to-see-apm-data-in-kibana/189648 "2019-07-11T01:04:20Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.6.… --- ## [How to set separate interval for different timelion added in Dashboard](https://discuss.elastic.co/t/how-to-set-separate-interval-for-different-timelion-added-in-dashboard/100381)
**Author:** [@Suyog\_Kale](https://discuss.elastic.co/u/Suyog_Kale)\ **Replies:** 2\ **Last updated:** [September 14, 2017, 4:00am UTC](https://discuss.elastic.co/t/how-to-set-separate-interval-for-different-timelion-added-in-dashboard/100381 "2017-09-14T04:00:39Z")
Hello, I have added two different timelion in dashboard, I have set interval in both timelion es query. Timelion 1: .es(interval=1M,split=country:5,timefield=ts,q='type:sales') Timelion 2: .es(interval=1h,split=coun… --- ## [Multi host elasticsearch cluster using docker](https://discuss.elastic.co/t/multi-host-elasticsearch-cluster-using-docker/186561)
**Author:** [@nila](https://discuss.elastic.co/u/nila)\ **Replies:** 1\ **Last updated:** [June 24, 2019, 12:24pm UTC](https://discuss.elastic.co/t/multi-host-elasticsearch-cluster-using-docker/186561 "2019-06-24T12:24:28Z")
Hello everyone, I am trying to configure elasticsearch cluster on docker with 3 different hosts which are identical. Any one of these should be master/data nodes. I have the following docker-compose.yml file. I am getti… --- ## [Kibana scripted field url formatting with a string](https://discuss.elastic.co/t/kibana-scripted-field-url-formatting-with-a-string/24849)
**Author:** [@Marcin\_K](https://discuss.elastic.co/u/Marcin_K)\ **Replies:** 1\ **Last updated:** [July 4, 2015, 3:35pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-url-formatting-with-a-string/24849 "2015-07-04T15:35:23Z")
Hello, I love new kibana 4 feature that allows me to create URL based on variables. It's brilliant thank for that. It works just fine when I use number value doc\['variable'\].value or like this \_source.variable But whe… --- ## [Creating a new field based on substring](https://discuss.elastic.co/t/creating-a-new-field-based-on-substring/135248)
**Author:** [@Pradana](https://discuss.elastic.co/u/Pradana)\ **Replies:** 7\ **Last updated:** [June 11, 2018, 1:52pm UTC](https://discuss.elastic.co/t/creating-a-new-field-based-on-substring/135248 "2018-06-11T13:52:22Z")
I have below message : 2018-06-08 21:35:44,182 DEBUG \[org.mobicents.smsc.library.CdrGenerator\] 2018-06-08 21:35:44.171,62895416500343,1,1,6282880640846,1,1,success\_esme,SS7\_HR,message,null,92044,0,null,null,null,null,62… --- ## [Modifier configuration de Logstash sans redémarrer son service](https://discuss.elastic.co/t/modifier-configuration-de-logstash-sans-redemarrer-son-service/23920)
**Author:** [@Safia\_G](https://discuss.elastic.co/u/Safia_G)\ **Replies:** 7\ **Last updated:** [July 6, 2015, 5:07pm UTC](https://discuss.elastic.co/t/modifier-configuration-de-logstash-sans-redemarrer-son-service/23920 "2015-07-06T17:07:58Z")
Bonjour, Je dispose d'une pile ELK et je voudrais savoir comment procéder pour ne pas avoir à redémarrer le service Logstash si l'on veut modifier son fichier de configuration. Il faudrait donc que les logs continuent… --- ## [Pyspark-Elasticsearch connectivity and latest version compatibilty](https://discuss.elastic.co/t/pyspark-elasticsearch-connectivity-and-latest-version-compatibilty/325289)
**Author:** [@Bramha](https://discuss.elastic.co/u/Bramha)\ **Replies:** 6\ **Last updated:** [February 24, 2023, 2:24pm UTC](https://discuss.elastic.co/t/pyspark-elasticsearch-connectivity-and-latest-version-compatibilty/325289 "2023-02-24T14:24:12Z")
Hello All, I'm trying to use elasticsearch as a source in my poc. I'm using Python-3.10.10, Spark 3.3.0. I'm using Jupyter notebook below is my code: from pyspark import SparkConf, SparkContext conf = SparkConf() c… --- ## [ILM Waiting for Allocation on Warm Node](https://discuss.elastic.co/t/ilm-waiting-for-allocation-on-warm-node/208285)
**Author:** [@anilozyurt](https://discuss.elastic.co/u/anilozyurt)\ **Replies:** 6\ **Last updated:** [December 5, 2019, 10:13am UTC](https://discuss.elastic.co/t/ilm-waiting-for-allocation-on-warm-node/208285 "2019-12-05T10:13:16Z")
Hi, I'm using 3 nodes cluster and monthly indices with 6 primary and 1 replica shards. es-node-1 Hot node es-node-2 Warm node es-node-3 Cold node Using the ILM policy with no rollover and the monthly indices stuck a… --- ## [\[logstash-2015.07.21\]\[4\] failed to create engine](https://discuss.elastic.co/t/logstash-2015-07-21-4-failed-to-create-engine/25992)
**Author:** [@wdijkerman](https://discuss.elastic.co/u/wdijkerman)\ **Replies:** 2\ **Last updated:** [July 21, 2015, 3:15pm UTC](https://discuss.elastic.co/t/logstash-2015-07-21-4-failed-to-create-engine/25992 "2015-07-21T15:15:06Z")
Hi, We have an data corruption issue in Elasticsearch. We only have 1 node. We use it for our logstash setup. The machine crashed and we needed to run an filesystem check (and it repaired a lot of inodes and a lot of o… --- ## [How to create indices based on kubernetes metadata](https://discuss.elastic.co/t/how-to-create-indices-based-on-kubernetes-metadata/120525)
**Author:** [@Rohit\_Vyavahare](https://discuss.elastic.co/u/Rohit_Vyavahare)\ **Replies:** 3\ **Last updated:** [February 19, 2018, 11:16pm UTC](https://discuss.elastic.co/t/how-to-create-indices-based-on-kubernetes-metadata/120525 "2018-02-19T23:16:11Z")
I am using filebeat in kubernetes to ship logs to Elasticsearch. I want to create indexes based on namespaces . I tried this : output.elasticsearch: hosts: \["http://localhost:9200"\] index: "filebeat-%{\[beat.version\]… --- ## [To show aggregated data on bars using timelion/any other visualisation for todays vs one week](https://discuss.elastic.co/t/to-show-aggregated-data-on-bars-using-timelion-any-other-visualisation-for-todays-vs-one-week/93925)
**Author:** [@gvashistha](https://discuss.elastic.co/u/gvashistha)\ **Replies:** 3\ **Last updated:** [July 25, 2017, 12:39pm UTC](https://discuss.elastic.co/t/to-show-aggregated-data-on-bars-using-timelion-any-other-visualisation-for-todays-vs-one-week/93925 "2017-07-25T12:39:20Z")
Based on a field value We have to show parallel bars or drop down to display what is the total count or percentage increase/decrease for this field as compared to same day prior week and the catch is Dashboard filter sho… --- ## [Are there any limits to search, visualization or dashboard objects](https://discuss.elastic.co/t/are-there-any-limits-to-search-visualization-or-dashboard-objects/32494)
**Author:** [@Shailen](https://discuss.elastic.co/u/Shailen)\ **Replies:** 7\ **Last updated:** [October 21, 2015, 5:08pm UTC](https://discuss.elastic.co/t/are-there-any-limits-to-search-visualization-or-dashboard-objects/32494 "2015-10-21T17:08:47Z")
We would like to monitor 715 different counters each on multiple servers. I am trying to create dashboards segregated by each server. I wrote a script to auto-generate the search, visualization and dashboard objects. I i… --- ## [Horizontal bar chart in Canvas - value of measure positioned inconveniently](https://discuss.elastic.co/t/horizontal-bar-chart-in-canvas-value-of-measure-positioned-inconveniently/199653)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 6\ **Last updated:** [September 18, 2019, 8:33am UTC](https://discuss.elastic.co/t/horizontal-bar-chart-in-canvas-value-of-measure-positioned-inconveniently/199653 "2019-09-18T08:33:44Z")
Hi All, We have recently upgraded to ES6.8 and are exploring capabilities provided by Canvas. My question is around the horizontal bar chart available within Canvas elements. Is there a way to show the value of measure… --- ## [Unable to get the whole query in dashboard](https://discuss.elastic.co/t/unable-to-get-the-whole-query-in-dashboard/2541)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\ **Replies:** 6\ **Last updated:** [July 12, 2016, 5:30pm UTC](https://discuss.elastic.co/t/unable-to-get-the-whole-query-in-dashboard/2541 "2016-07-12T17:30:33Z")
In Mysql or Http, i'm not getting whole path or query. That query is dividing into different lines. Can you please help me for this. --- ## [Log UI failed to format message from](https://discuss.elastic.co/t/log-ui-failed-to-format-message-from/163196)
**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Replies:** 4\ **Last updated:** [January 7, 2019, 6:30pm UTC](https://discuss.elastic.co/t/log-ui-failed-to-format-message-from/163196 "2019-01-07T18:30:51Z")
Hi, I was looking in to Logs UI and I have setup filebeat to send the logs over to ES. However all I see in the Logs UI is an error message saying Failed to format message from /opt/logstash/logs/logstash-plain.log Do… --- ## [Elasticsearch cluster, Master-Slave relationship and querying](https://discuss.elastic.co/t/elasticsearch-cluster-master-slave-relationship-and-querying/28115)
**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\ **Replies:** 2\ **Last updated:** [August 28, 2015, 4:49am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-master-slave-relationship-and-querying/28115 "2015-08-28T04:49:40Z")
Hi Initially, i was running elasticsearch on a single machine on a rackspace. In the config file, i had in the beginning written network.host: localhost Later when i had to run elasticsearch server on two machines… --- ## [Endpoint-security State changed to DEGRADED: Protecting with policy](https://discuss.elastic.co/t/endpoint-security-state-changed-to-degraded-protecting-with-policy/281308)
**Author:** [@Alexey\_Shalin](https://discuss.elastic.co/u/Alexey_Shalin)\ **Replies:** 4\ **Last updated:** [August 17, 2021, 3:18am UTC](https://discuss.elastic.co/t/endpoint-security-state-changed-to-degraded-protecting-with-policy/281308 "2021-08-17T03:18:09Z")
Good Day, After some mins after staring agent Elastic Agent .. status changed from Health to UnHealth (with Endpoint Security Integration) I check logs and find line: endpoint-security State changed to DEGRADED: Protec… --- ## [Get position / offset of word in search query response](https://discuss.elastic.co/t/get-position-offset-of-word-in-search-query-response/94069)
**Author:** [@NicoMika](https://discuss.elastic.co/u/NicoMika)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 1:45pm UTC](https://discuss.elastic.co/t/get-position-offset-of-word-in-search-query-response/94069 "2017-07-21T13:45:23Z")
Hi, I start using ES and enjoying its features. I'm a beginner and I have some use case and I hope ES can answer them ! Hope you can help me with my questions. First, some context. I have a document indexed with a t… --- ## [Important delay in the appearance of logs in Kibana](https://discuss.elastic.co/t/important-delay-in-the-appearance-of-logs-in-kibana/77330)
**Author:** [@vdsm](https://discuss.elastic.co/u/vdsm)\ **Replies:** 7\ **Last updated:** [March 9, 2017, 8:08am UTC](https://discuss.elastic.co/t/important-delay-in-the-appearance-of-logs-in-kibana/77330 "2017-03-09T08:08:29Z")
Hi everyone, I see a problem about my ELK stack currently in pre-production, and I do not understand where it comes from ... When I view the logs in Kibana, these are systematically between 25 and 40 minutes behind the T… --- ## [How to add two fields using Timelion?](https://discuss.elastic.co/t/how-to-add-two-fields-using-timelion/124147)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 4:58pm UTC](https://discuss.elastic.co/t/how-to-add-two-fields-using-timelion/124147 "2018-03-19T16:58:51Z")
Hello, I am trying to add the values of system.cpu.system.pct & system.cpu.user.pct and get the total cpu usage for this particular server. I have the following query: (.es(index=metricbeat-\*, q='beat.hostname:server1… --- ## [Logstash null fields to drop](https://discuss.elastic.co/t/logstash-null-fields-to-drop/170731)
**Author:** [@fedwe](https://discuss.elastic.co/u/fedwe)\ **Replies:** 4\ **Last updated:** [March 4, 2019, 2:52pm UTC](https://discuss.elastic.co/t/logstash-null-fields-to-drop/170731 "2019-03-04T14:52:54Z")
if i have 2 fields i want a condition if \[field1\] == nil and \[field2\] == nil { drop{} } if both fieds are null values i want to drop the event but none of the conditions i tried worked \[field1\] == "" and \[field2\] ==… --- ## [Data table visualizations and empty fields](https://discuss.elastic.co/t/data-table-visualizations-and-empty-fields/28726)
**Author:** [@LansK](https://discuss.elastic.co/u/LansK)\ **Replies:** 2\ **Last updated:** [September 27, 2015, 6:42am UTC](https://discuss.elastic.co/t/data-table-visualizations-and-empty-fields/28726 "2015-09-27T06:42:03Z")
In a data table visualization, I have a field that I use the metric count aggregation on. However, often the field is empty in many documents. When I try to use a bucket to split rows by terms in this field (to see the t… --- ## [If Primary and Replica shards both fail how to recover?](https://discuss.elastic.co/t/if-primary-and-replica-shards-both-fail-how-to-recover/168636)
**Author:** [@jwlee](https://discuss.elastic.co/u/jwlee)\ **Replies:** 5\ **Last updated:** [February 20, 2019, 9:45pm UTC](https://discuss.elastic.co/t/if-primary-and-replica-shards-both-fail-how-to-recover/168636 "2019-02-20T21:45:01Z")
I tried to find a relevant document but I could not get the answer. Let's say there are primary shard and replica shard. I believe if the primary shard goes down, the replica shard promoted to the primary shard and recr… --- ## [Nouvelle installation et lancement de KIBANA impossible // Kibana server is not ready yet](https://discuss.elastic.co/t/nouvelle-installation-et-lancement-de-kibana-impossible-kibana-server-is-not-ready-yet/228873)
**Author:** [@Kev\_Doub](https://discuss.elastic.co/u/Kev_Doub)\ **Replies:** 3\ **Last updated:** [April 28, 2020, 12:54pm UTC](https://discuss.elastic.co/t/nouvelle-installation-et-lancement-de-kibana-impossible-kibana-server-is-not-ready-yet/228873 "2020-04-28T12:54:37Z")
Bonjour à tous, je suis en phase de test pour choisir une solution de centralisation de logs dans une petite entreprise. j'ai commencer à mettre en place cette solution et je me trouve déjà bloqué pour accéder à KIBANA. … --- ## [Can't update cluster watermarks](https://discuss.elastic.co/t/cant-update-cluster-watermarks/156244)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 6\ **Last updated:** [November 12, 2018, 8:18am UTC](https://discuss.elastic.co/t/cant-update-cluster-watermarks/156244 "2018-11-12T08:18:17Z")
Hi, I got some exceptions in my logfiles: Caused by: java.lang.IllegalArgumentException: unable to consistently parse \[cluster.routing.allocation.disk.watermark.low=20gb\], \[cluster.routing.allocation.disk.watermark… --- ## [Enabling shield and ssl on node with multiple elasticsearch instances](https://discuss.elastic.co/t/enabling-shield-and-ssl-on-node-with-multiple-elasticsearch-instances/46706)
**Author:** [@peppetrick](https://discuss.elastic.co/u/peppetrick)\ **Replies:** 6\ **Last updated:** [April 13, 2016, 1:29pm UTC](https://discuss.elastic.co/t/enabling-shield-and-ssl-on-node-with-multiple-elasticsearch-instances/46706 "2016-04-13T13:29:12Z")
Hi We have a problem with setting SSL and shield on a cluster. The cluster is done by 3 machine with two elastic istance each, it is a test environment that reproduce the deployment env in terms of elastic nodes. T… --- ## [Duplicate/copy index](https://discuss.elastic.co/t/duplicate-copy-index/13819)
**Author:** [@mj1](https://discuss.elastic.co/u/mj1)\ **Replies:** 1\ **Last updated:** [October 4, 2013, 2:35pm UTC](https://discuss.elastic.co/t/duplicate-copy-index/13819 "2013-10-04T14:35:31Z")
Hi, I have a use case where I'd like to duplicate an index and then modify the duplicate in order to preserve the original in case we need to rollback. The workflow would be: 1. Index A exists with alias pointi… --- ## [Unable to connect to Elasticsearch at http://localhost:5601 - Windows 10](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-5601-windows-10/152869)
**Author:** [@jugurtha](https://discuss.elastic.co/u/jugurtha)\ **Replies:** 5\ **Last updated:** [October 29, 2018, 10:58am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-at-http-localhost-5601-windows-10/152869 "2018-10-29T10:58:32Z")
kibana doesn't work i installed kibana and elastic in the same server i have this error for kibana kibna.yml Kibana is served by a back end server. This controls which port to use. server.port: 5601 The host to bi… --- ## [Courier Fetch error](https://discuss.elastic.co/t/courier-fetch-error/26620)
**Author:** [@timmal](https://discuss.elastic.co/u/timmal)\ **Replies:** 6\ **Last updated:** [July 31, 2015, 11:03am UTC](https://discuss.elastic.co/t/courier-fetch-error/26620 "2015-07-31T11:03:11Z")
Hello everybody, I've a problem with my ELK stack. Until now, all worked fine, but since 2 days, I've an error and I don't know how I can fix it. I've a warning message at the top of my Kibana's pages : "Courier Fetc… --- ## [Preventing stop-of-the-world garbage collection](https://discuss.elastic.co/t/preventing-stop-of-the-world-garbage-collection/21419)
**Author:** [@Michal\_Taborsky](https://discuss.elastic.co/u/Michal_Taborsky)\ **Replies:** 6\ **Last updated:** [December 30, 2014, 9:21am UTC](https://discuss.elastic.co/t/preventing-stop-of-the-world-garbage-collection/21419 "2014-12-30T09:21:28Z")
Hello everyone, we are using ES as a backend of an online service and occasionally, we are hit by a big garbage collection, which stops the node completely and causes all sorts of problems. The nodes have plenty o… --- ## [TimeStamp Preserve 6 digit ms](https://discuss.elastic.co/t/timestamp-preserve-6-digit-ms/91007)
**Author:** [@Hoffin\_Ag](https://discuss.elastic.co/u/Hoffin_Ag)\ **Replies:** 8\ **Last updated:** [June 27, 2017, 6:08pm UTC](https://discuss.elastic.co/t/timestamp-preserve-6-digit-ms/91007 "2017-06-27T18:08:57Z")
Hi , Time ms upto 6 digit is crucial in our case, how to use 6 digit ms. in elastic truncating ms after 4 digit. Transactional system each ms is very important. ex Format : yy:mm:dd hh:mm:ss:SSSSSSZ elastic format :… --- ## [Using both Filebeat and Winlogbeat](https://discuss.elastic.co/t/using-both-filebeat-and-winlogbeat/103484)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 2\ **Last updated:** [October 11, 2017, 11:48am UTC](https://discuss.elastic.co/t/using-both-filebeat-and-winlogbeat/103484 "2017-10-11T11:48:32Z")
Hello all, I'm using both Filebeat and Winlogbeat to send events to Logstash which then forwards them to Elasticsearch nodes, however whilst my Winlogbeat events are being indexed in Elasticsearch I cannot find anything … --- ## [Logstash condition match](https://discuss.elastic.co/t/logstash-condition-match/36207)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 4\ **Last updated:** [December 3, 2015, 11:33am UTC](https://discuss.elastic.co/t/logstash-condition-match/36207 "2015-12-03T11:33:55Z")
I have to add one more field , if my condition is true. But its not working. My condition is " Json message has a field called clientip, if its present then one more filed has to be added with message" Log Message : {… --- ## [Scripted field doc\['@timestamp'\].date.hourOfDay returs nothing](https://discuss.elastic.co/t/scripted-field-doc-timestamp-date-hourofday-returs-nothing/204685)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 5\ **Last updated:** [October 22, 2019, 6:02pm UTC](https://discuss.elastic.co/t/scripted-field-doc-timestamp-date-hourofday-returs-nothing/204685 "2019-10-22T18:02:58Z")
Hello all, I'm trying to get the hours of the day that the message was sent at so I can filter for during work hours in kibana but the doc\['@timestamp'\].date.hourOfDay that is suggested to use in the painless scripting… --- ## [Struggling to parse JSON data with logstash](https://discuss.elastic.co/t/struggling-to-parse-json-data-with-logstash/207186)
**Author:** [@Lee\_Quince](https://discuss.elastic.co/u/Lee_Quince)\ **Replies:** 4\ **Last updated:** [November 9, 2019, 3:21pm UTC](https://discuss.elastic.co/t/struggling-to-parse-json-data-with-logstash/207186 "2019-11-09T15:21:39Z")
So I have a basic http json post that is sent on the format of { "sq": 3, "ht": \[ { "si": "90:B6:86:42:2C:9F", "sm": "90B686", "bi": "00:00:00:00:00:00", "ap": 0, "ot": 1473246736, "ct": 1473246736, "sh": -90, … --- ## [By-field break-down of an elasticsearch index disk usage](https://discuss.elastic.co/t/by-field-break-down-of-an-elasticsearch-index-disk-usage/73886)
**Author:** [@aalesh](https://discuss.elastic.co/u/aalesh)\ **Replies:** 4\ **Last updated:** [February 3, 2017, 8:28pm UTC](https://discuss.elastic.co/t/by-field-break-down-of-an-elasticsearch-index-disk-usage/73886 "2017-02-03T20:28:05Z")
Hi, We're using metricbeat to stream various system usage metrics to the Elasticsearch server. The problem is the index gets quite large (7+ GB per week). So, we are considering removing some of the metricbeat events f… --- ## [Document version number not advancing](https://discuss.elastic.co/t/document-version-number-not-advancing/115888)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 8\ **Last updated:** [January 18, 2018, 4:50am UTC](https://discuss.elastic.co/t/document-version-number-not-advancing/115888 "2018-01-18T04:50:15Z")
Hello, I just tested how versions work, loaded the same set of CSV files again, same loading script and everything is the same. Looking at the "discover" section of Kibana I expected to see the @version number in my do… --- ## [Beats input: the pipeline is blocked, temporary refusing new connection.",reconnect\_backoff\_sleep=\>0.5](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection-reconnect-backoff-sleep-0-5/43655)
**Author:** [@aryaray](https://discuss.elastic.co/u/aryaray)\ **Replies:** 5\ **Last updated:** [June 6, 2016, 2:13pm UTC](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked-temporary-refusing-new-connection-reconnect-backoff-sleep-0-5/43655 "2016-06-06T14:13:45Z")
Hi , We Setup ELK stack it's running fine 2 days before. But now We facing that logs are coming delayed . We check logstash log for identify issue. There we getting that Beats input: The circuit breaker has detected … --- ## [data-error-message="Elastic did not load properly. Check the server output for more information. kbn\_legacy\_browser\_error](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337)
**Author:** [@Satyasree](https://discuss.elastic.co/u/Satyasree)\ **Replies:** 3\ **Last updated:** [March 17, 2021, 5:45am UTC](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337 "2021-03-17T05:45:01Z")
Hi All I have enabled Xpack security for Elasticsearch and Kibana which are hosted in IBM Cloud Kubernetes environment. Please find elasticsearch values.yml file clusterName: "elasticsearch" nodeGroup: "master" mast… --- ## [Dangling index problem](https://discuss.elastic.co/t/dangling-index-problem/8539)
**Author:** [@ashu\_raikvar](https://discuss.elastic.co/u/ashu_raikvar)\ **Replies:** 6\ **Last updated:** [July 28, 2012, 12:53pm UTC](https://discuss.elastic.co/t/dangling-index-problem/8539 "2012-07-28T12:53:11Z")
hi all, please provide me some solution asap i have some indexes on local files at my server.after shutdown and restart it detected some other server as master which had no index in it.i realized the problem and af… --- ## [Kibana dashboard import API not working from API export](https://discuss.elastic.co/t/kibana-dashboard-import-api-not-working-from-api-export/208961)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 7\ **Last updated:** [November 22, 2019, 6:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-api-not-working-from-api-export/208961 "2019-11-22T18:32:21Z")
I am trying to use the export/import APIs so I can extract my objects and put them in a repo so they can be loaded in an install script that also does all the elasticsearch mappings and whatnot. I am testing and the exp… --- ## [How to display a date as a date, not a long, in a terms panel?](https://discuss.elastic.co/t/how-to-display-a-date-as-a-date-not-a-long-in-a-terms-panel/26584)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 5\ **Last updated:** [August 5, 2015, 1:33pm UTC](https://discuss.elastic.co/t/how-to-display-a-date-as-a-date-not-a-long-in-a-terms-panel/26584 "2015-08-05T13:33:09Z")
Hi all, I have a mapped field called 'start\_date' that I want to display in a terms panel as a "human readable" date string, not a long. Is this possible? I did a search through this group and didn't see the question… --- ## [Use kibana for clickhouse rather than elasticsearch](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356)
**Author:** [@DrissiReda](https://discuss.elastic.co/u/DrissiReda)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 9:04pm UTC](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356 "2021-04-29T21:04:45Z")
Hello, I'm trying to add support for clickhouse for kibana. And to do so I need to know what kind of request kibana sends to elasticsearch (especially aggregations). What parts of the source code should I look for? Can … --- ## [Malformed \[mappings\] section for type \[dynamic\_templates\],](https://discuss.elastic.co/t/malformed-mappings-section-for-type-dynamic-templates/188428)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 2\ **Last updated:** [July 3, 2019, 12:50pm UTC](https://discuss.elastic.co/t/malformed-mappings-section-for-type-dynamic-templates/188428 "2019-07-03T12:50:02Z")
Hello I am trying to add the following mapping to my index ELK 6.8.0 PUT \_template/logstash-\* { "template" : "logstash-\*", "version" : 60001, "settings" : { "index.refresh\_interval" : "5s", "index.number\_… --- ## [How to recover from split brain?](https://discuss.elastic.co/t/how-to-recover-from-split-brain/17203)
**Author:** [@Srividhya\_Umashanker](https://discuss.elastic.co/u/Srividhya_Umashanker)\ **Replies:** 2\ **Last updated:** [April 28, 2014, 7:57am UTC](https://discuss.elastic.co/t/how-to-recover-from-split-brain/17203 "2014-04-28T07:57:52Z")
I encountered Split Brain Scenario. What steps to follow to recover from it, without losing data ? Just restarting the nodes alone does not solve the problem. -- You received this message because you are subscri… --- ## [Curl command not working in ES](https://discuss.elastic.co/t/curl-command-not-working-in-es/41900)
**Author:** [@bubu.senapati](https://discuss.elastic.co/u/bubu.senapati)\ **Replies:** 3\ **Last updated:** [February 16, 2016, 3:38pm UTC](https://discuss.elastic.co/t/curl-command-not-working-in-es/41900 "2016-02-16T15:38:43Z")
Hi Magnus, there is an index in my elastic search which i want to close and subsequently delete. The index created is with name falog-%{\[time\_stamp\]} I tried to execute the curl like curl -XPOST 'http://localhost:9200/fa… --- ## [Filebeat: Error while retrieving FD information: error getting number of open FD: key not found](https://discuss.elastic.co/t/filebeat-error-while-retrieving-fd-information-error-getting-number-of-open-fd-key-not-found/178378)
**Author:** [@kutomi](https://discuss.elastic.co/u/kutomi)\ **Replies:** 7\ **Last updated:** [May 14, 2019, 12:42pm UTC](https://discuss.elastic.co/t/filebeat-error-while-retrieving-fd-information-error-getting-number-of-open-fd-key-not-found/178378 "2019-05-14T12:42:23Z")
I also got the same error as this post. ERROR instance/metrics\_file\_descriptors.go:39 Error while retrieving FD information: error getting number of open FD: key not found I wonder what is the cause of this error? … [Previous page](https://discuss.elastic.co/top.md?page=502&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=504&per_page=50&period=all)