Hi, I am looking to put the current date in to canvas for our reports, any ideas how i could do this? Thanks
---
## [Could not locate that index-pattern-field (id: source.geo.location)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-source-geo-location/177860)
I'm using Filebeat+Kibana+Elasticsearch 7.0.0. I have one filebeat agent and one elasticsearch node. I've activated the nginx module in filebeat and successfully added a geoip pipeline in Elasticsearch. When I open a r…
---
## [Range Type - null values](https://discuss.elastic.co/t/range-type-null-values/106217)
How is a null value handled in a given range type , ie if doc has field with gte=null and lte=5 and a query looks for the value 4 in the range, will it bring up the doc with the given ranges or not?
---
## [Elastic APM (Java Agent) getting 400 error](https://discuss.elastic.co/t/elastic-apm-java-agent-getting-400-error/272527)
Kibana version: 7.12.1 Elasticsearch version: 7.12.1 APM Server version: 7.12.1 APM Agent language and version: JAVA elastic-apm-agent-1.23.0.jar Browser version: Original install method (e.g. download page, yum, de…
---
## [Can I upload a csv file without timestamp to kibana?](https://discuss.elastic.co/t/can-i-upload-a-csv-file-without-timestamp-to-kibana/229700)
File could not be read \[illegal\_argument\_exception\] Could not find a timestamp in the sample provided
---
## [How to remove fuzziness in Simple Query String?](https://discuss.elastic.co/t/how-to-remove-fuzziness-in-simple-query-string/220078)
I am trying to disable fuzziness in my ElasticSearch query. The issue is that a search for medication returns lots of hits for medical. My query is below. The fuzzy\_max\_expansions arg doesn't have any effect. If I ad…
---
## [Unable to create ML job](https://discuss.elastic.co/t/unable-to-create-ml-job/148315)
Hi Team, I am using Elasticsearch 6.4.0 and my beats are sending log/ event directly to ES. But when i am trying to create a Machine Learning job its giving me below error. Elasticsearch output: \[2018-09-12T17:33:40…
---
## [Upgrade java for elasticsearch node](https://discuss.elastic.co/t/upgrade-java-for-elasticsearch-node/23353)
Hello, We are using java6 for our elasticsearch node of version 0.90 and googled, nothing discuss specifically on how to or procedure to upgrade java deployed in elasticsearch cluster. The one came close is t…
---
## [How changing root of json events with logstash filter?](https://discuss.elastic.co/t/how-changing-root-of-json-events-with-logstash-filter/282755)
Hello, I have a problem with json events that importing into elasticsearch from logstash. events come from mongodb (with jdbc input plugin) and then imported into elasticsearch. after importing events into logstash th…
---
## [Logstash not parsing new files added to docker volume](https://discuss.elastic.co/t/logstash-not-parsing-new-files-added-to-docker-volume/136796)
I have created a docker-compose file for ELK stack to parse the logs. \[root@onw-kwah-2v ELK-compose\]# cat docker-compose.yml version: '3' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsear…
---
## [Fix icons links](https://discuss.elastic.co/t/fix-icons-links/99774)
Front page's html has the following: \ \ …
---
## [Jdbc input plugin and rebuilding elasticsearch index?](https://discuss.elastic.co/t/jdbc-input-plugin-and-rebuilding-elasticsearch-index/38674)
Is there a way to use the clean\_run parameter in the jdbc input plugin to rebuild an index once a day while still doing periodic updates throughout the day to the same index? Using clean\_run doesn't seem to work the way …
---
## [How to restrict user to access only Kibana dashboard](https://discuss.elastic.co/t/how-to-restrict-user-to-access-only-kibana-dashboard/137945)
Created a user with "kibana\_dashboard\_only\_user" role even though the user has admin level access and used x-path basic license. Thanks
---
## [How to unhide redacted values using apm](https://discuss.elastic.co/t/how-to-unhide-redacted-values-using-apm/200438)
Hi all, I am using the File Output functionality of Metricbeat and Winlogbeat 5.5.1, and I’d like the ability to add beat data to the output filename. Specifically the date component of the @timestamp field. Does the Be…
---
## [Is it possible to update a mapping field by only reindexing documents affected by the change?](https://discuss.elastic.co/t/is-it-possible-to-update-a-mapping-field-by-only-reindexing-documents-affected-by-the-change/75222)
I did something dumb and deployed a service that populates a new field in our Elasticsearch index before applying the corresponding mapping to the index. As a result, about 40 documents were indexed with the default str…
---
## [Problems getting started ELK centos7](https://discuss.elastic.co/t/problems-getting-started-elk-centos7/24233)
I am on centos7 minima version on a vm virtualbox, @IP=10.82.136.52 in local network. I have no public IP 192.168.xxx, no FQDN. I install all ELK on this server with default config but not ngnix, - elasticsearch wget htt…
---
## [Failed action with response of 400, dropping action (Logstash to Kafka to Logstash to E and Mongo) (SOLVED)](https://discuss.elastic.co/t/failed-action-with-response-of-400-dropping-action-logstash-to-kafka-to-logstash-to-e-and-mongo-solved/32637)
Hi All, String JSON messages cannot parsed successfully by logstash, following is my logstash configuration (similar to http://stackoverflow.com/questions/30542879/how-to-use-logstashs-json-filter) input { ka…
---
## [Table visualization in kibana](https://discuss.elastic.co/t/table-visualization-in-kibana/341946)
I want to create a table visualization in kibana in which i want to display short\_date which is in date format for every entry the bytes and the duration as a separate row. If i select top values in the rows section it…
---
## [Elasticsearch - limit to half of available cpu cores](https://discuss.elastic.co/t/elasticsearch-limit-to-half-of-available-cpu-cores/113917)
Hi. Is there an option to limit Elasticsearch to run, for example, on only half of available cpu cores on the machine? I'm running some heavy queries on my ELK instance which sometimes loads all cores at 100%. Since ther…
---
## [Infrastructure for elastic](https://discuss.elastic.co/t/infrastructure-for-elastic/87282)
Hello Community, at the moment, I would like to inform myself a bit more. I did some research already but I didn't got a satisfying answer. I would like to know on which infrastructure elastic can run? I know about cl…
---
## [ELK Machine capacity for 10000 events per sec](https://discuss.elastic.co/t/elk-machine-capacity-for-10000-events-per-sec/27818)
I have close to 1000 log files which produces 10000 events per sec, out of which i have to extract 1000 events per sec and parse it to elasticsearch. Currently i have a machine (bare metal) which has 32 CPU cores, 47 gi…
---
## [インデックス、マッピング定義の作成エラー](https://discuss.elastic.co/t/topic/256987)
Hi, Is it possible to send logs to Elasticsearch 6.2 from Logstash 5.5? When I look at matrix table it says, Elasticsearch 6.2 is compatible only with Logstash 5.6 - 6.2. Does that mean that Logstash 5.5 will not be abl…
---
## [Problems to create an index pattern](https://discuss.elastic.co/t/problems-to-create-an-index-pattern/179787)
Problems to create an index pattern I have a problem when I'm trying to create an index pattern in Kibana. I have a system configured in the Elasticsearch cloud for my company, and I access it with a user with superuse…
---
## [Filebeat to Logstash connection fails](https://discuss.elastic.co/t/filebeat-to-logstash-connection-fails/78396)
Hello guys, I'm trying to connect a Filebeat instance with Logstash. Filebeat and Logstash are on version 5.2.1. These are my config files. filebeat.yml output.logstash: hosts: \["130.164.67.34:5044"\] ssl.certif…
---
## [Elasticsear 8.X TLS question](https://discuss.elastic.co/t/elasticsear-8-x-tls-question/299521)
I'm a beginner, and the latest release of elastic 8.x is a great product that automatically configures TLS security, solves previous complex deployments, and is perfect for a little white like me. But I'm also having pr…
---
## [Ransomware protection](https://discuss.elastic.co/t/ransomware-protection/360948)
Hi What is "Anti-Ransomware Elastic-Do-Not-Touch" appearing on the folders machines
---
## [Parse a String to an Int](https://discuss.elastic.co/t/parse-a-string-to-an-int/76621)
I am new to the whole ELK. I have a field that I get through a Json that is called "msgDeliveryTime" who I get as a String even though it is an Integer. So I tried to learn the "GROK" and I improvised the following: in…
---
## [Create new event in ruby filter](https://discuss.elastic.co/t/create-new-event-in-ruby-filter/101528)
Hi. I cant create new event in fuby filter. (Use logstash 5.6.0) In filter: filter { ruby { code =\> " yield LogStash::Event.new( 'timestamp' =\> event.get('timestamp'),…
---
## [X509: cannot validate certificate for 192.168.0.85 because it doesn't contain any IP SANs](https://discuss.elastic.co/t/x509-cannot-validate-certificate-for-192-168-0-85-because-it-doesnt-contain-any-ip-sans/183691)
Hello I'm just start 7.1 ES & KB & Metricbeat I have an error my metricbeat.yml #============================== Kibana ===================================== setup.kibana: host: "https://192.168.0.85:5601" #------…
---
## [Using environment variables in kibana.yml](https://discuss.elastic.co/t/using-environment-variables-in-kibana-yml/41307)
Hello all! I've done some looking around, but can't find the answer: Is it possible to use environment variables in kibana.yml to influence things like the logging.dest target? I've tried a couple things, but have ha…
---
## [What Is Lower And Upper Std Deviation?](https://discuss.elastic.co/t/what-is-lower-and-upper-std-deviation/238175)
Hi, I wanted to show the spread of data about the zero mark wrt to the positive side and negative side. So i tried with standard deviation - i get 2 indices - lower and upper standard deviation. What do they mean exac…
---
## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/317390)
Hello Community, I am trying to run Kibana server but I am getting this error, can anyone give me some advice? This is my es.yml file, I want xpack.security.enabled: false remains In my kibana.yml just uncomment …
---
## [Painless Script to calculate time difference between 2 dates](https://discuss.elastic.co/t/painless-script-to-calculate-time-difference-between-2-dates/307335)
Hi I have 2 columns as date datatype in my Kibana Index Pattern and I want to add a third column as the difference between the 2 columns: Here is sample and format of the columns: Col1: Jun 16, 2022 , 09:00:00.000 Col2…
---
## [\[7.5.0\] Problem with reporting feature (dependencies most likely)](https://discuss.elastic.co/t/7-5-0-problem-with-reporting-feature-dependencies-most-likely/213686)
Hi there! I think the title is self-explanatory but I'll add here some further info. I'm trying to make some reports on a Kibana instance installed on a RHEL 6.3 (Santiago) machine. Now, it fails with main error Erro…
---
## [Filebeat not writing docker containers logs into Elasticsearch](https://discuss.elastic.co/t/filebeat-not-writing-docker-containers-logs-into-elasticsearch/165574)
Hi, I have several docker containers (using docker-compose) and I'm trying to use Filebeat (from docker) to push my containers logs to elasticsearch with no success. This is my filebeat.yml: filebeat.inputs: - type:…
---
## [Aggregation still returning duplicates](https://discuss.elastic.co/t/aggregation-still-returning-duplicates/115461)
Hi guys, I'm try to get all unique values for a field that is not analyzed but I am still getting duplicates: Mapping: { "County":{ "type":"string", "fielddata":true, "fields":{ "raw":{ "type":"…
---
## [Json mapping causes logs to be lost](https://discuss.elastic.co/t/json-mapping-causes-logs-to-be-lost/105468)
When a JSON object is logged as a string and subsequently as an object (or visa versa), it causes Elasticsearch to throw a stack trace and not record the element, but there is no recovery form Logstash, which causes the …
---
## [Query Filter via Script failing for array object](https://discuss.elastic.co/t/query-filter-via-script-failing-for-array-object/118406)
Get the records back but sorted by the record\_score: Do you notice how this sends back the anomalies from least anomalous to most anomalous? We want to sort this so they come back the other way! When I run this qu…
---
## [Windows File Server](https://discuss.elastic.co/t/windows-file-server/71014)
I need to monitor which user accessed which files in network share. at offline times. from windows file server is there a way i can get this information and send to ELK to monitor. i need to grab their IP address/AD u…
---
## [Heartbeat Dashboard Questions](https://discuss.elastic.co/t/heartbeat-dashboard-questions/117206)
Hi guys, I have a few questions about hearthbeat. I am using ELK stack 6.0.0, and I have successfully installed hearthbeat, hearthbeat template, and dashboard. But I\`am experiencing some limitations, which I'm not sure…
---
## [Working 2.4 ES stops working when upgraded to 5.0](https://discuss.elastic.co/t/working-2-4-es-stops-working-when-upgraded-to-5-0/64173)
Oh no, it worked beautifully at 2.4 then crapped out at 5.0. unfortunately, I can't seem to find any good log type indication as to the problem. At the status line I see: systemctl status elasticsearch â elasticsearc…
---
## [Copying fields to a geopoint type?](https://discuss.elastic.co/t/copying-fields-to-a-geopoint-type/16777)
Hi, I'm new to elasticsearch. My usecase is to load a csv file containing some agencies with geo location, each lines are like : id;label;address;zipcode;city;region;\*latitude\*;\*longitude\*;(and some others fiel…
---
## [Syslog input, received character set?](https://discuss.elastic.co/t/syslog-input-received-character-set/34426)
I'm on linux using the logstash syslog input and ruby debug output but am getting this error: Received an event that has a different character encoding than you configured. {:text=\>"\\\\u0000\\\\u0005 ...", :expected\_chars…
---
## [Watcher Webhook stays in "Firing" Status](https://discuss.elastic.co/t/watcher-webhook-stays-in-firing-status/179965)
My Webhook action for a watcher I have stays in Firing state and does not trigger, however when I manually execute the watcher it fires successfully. The watchers aim is to trigger every time the field "host" exists wit…
---
## [Exception in thread "main" java.lang.NoSuchMethodError: org.apache.logging.log4j.Logger.debug(Ljava/lang/String;Ljava/lang/Object;)V](https://discuss.elastic.co/t/exception-in-thread-main-java-lang-nosuchmethoderror-org-apache-logging-log4j-logger-debug-ljava-lang-string-ljava-lang-object-v/191260)
Trying to upgrade elastic version from 2.4 to 5.6.16 Maven Dependency \2.11.1\ \3.2.1.Final\ \1.1.3\ \
**Author:** [@Idarlington](https://discuss.elastic.co/u/Idarlington)\
**Replies:** 5\
**Last updated:** [April 14, 2016, 10:20am UTC](https://discuss.elastic.co/t/cant-find-etc-default-elasticsearch/47294 "2016-04-14T10:20:15Z")
Hello, I cant seem to locate the elasticsearch's file in the /etc/default/ path on our production server. (ubuntu 14.04) I need it to change the heap size of of elasticsearch which has been giving the java.lang.OutOfM…
---
## [Impact of client nodes on aggregations/Optimization of heavy aggregations](https://discuss.elastic.co/t/impact-of-client-nodes-on-aggregations-optimization-of-heavy-aggregations/27185)
We have a massive, multi level aggregation that consumes a lot of memory and CPU in our ES cluster. The cluster consists of 3 master nodes and 4 data nodes. The heap size of each node is 8G, with 40% allocated to the fie…
[Previous page](https://discuss.elastic.co/top.md?page=511&per_page=50&period=all)
[Next page](https://discuss.elastic.co/top.md?page=513&per_page=50&period=all)