# Top **URL:** https://discuss.elastic.co/top.md?page=513&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 514 --- ## [Change X-Axis timestamp interval](https://discuss.elastic.co/t/change-x-axis-timestamp-interval/74898)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 1\ **Last updated:** [February 13, 2017, 10:22pm UTC](https://discuss.elastic.co/t/change-x-axis-timestamp-interval/74898 "2017-02-13T22:22:49Z")
Hello, I am confused about the interval in graph creation in Kibana. My rotation of logs is every hour on 24 hours. But in Kibana Visualize, my X-axis aggregation based to timestamp of logs is configured every hour BUT … --- ## [Need to limit number of characters to be read using grok](https://discuss.elastic.co/t/need-to-limit-number-of-characters-to-be-read-using-grok/147840)
**Author:** [@rgovinda](https://discuss.elastic.co/u/rgovinda)\ **Replies:** 3\ **Last updated:** [September 11, 2018, 6:05am UTC](https://discuss.elastic.co/t/need-to-limit-number-of-characters-to-be-read-using-grok/147840 "2018-09-11T06:05:45Z")
Question: how can I make grok read only the first 18 characters from this string "nameOfItem=Oranges of California and Florida". With the way I have, I am getting the last 18 cut off. Please help. grok pattern used: … --- ## [Logstash geoip filter targeting a geo\_point field](https://discuss.elastic.co/t/logstash-geoip-filter-targeting-a-geo-point-field/124353)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 3\ **Last updated:** [March 19, 2018, 7:10am UTC](https://discuss.elastic.co/t/logstash-geoip-filter-targeting-a-geo-point-field/124353 "2018-03-19T07:10:01Z")
Kibana, Elasticsearch and Logstash 6.2.2. Based on IP addresses in our log data we want to view the location of site visitors on a map in Kibana. Our mapping is setup with a field ip of type ip and another field locati… --- ## [Termsの上限数について](https://discuss.elastic.co/t/terms/107324)
**Author:** [@yoshiro](https://discuss.elastic.co/u/yoshiro)\ **Replies:** 2\ **Last updated:** [November 16, 2017, 6:25am UTC](https://discuss.elastic.co/t/terms/107324 "2017-11-16T06:25:56Z")
termsで1024件を超えた数を指定した場合に、下記のエラーが発生しました。 リクエスト GET /xxxxxx/\_search { "query": { "bool": { "must": \[ { "terms": { "xxxx\_id": \[ # ここに大量のID \] }… --- ## [ERR Kafka (topic=filebeat-test-logmiss30): dropping too large message of size 3463](https://discuss.elastic.co/t/err-kafka-topic-filebeat-test-logmiss30-dropping-too-large-message-of-size-3463/117003)
**Author:** [@wangyanzhao](https://discuss.elastic.co/u/wangyanzhao)\ **Replies:** 6\ **Last updated:** [January 30, 2018, 5:02am UTC](https://discuss.elastic.co/t/err-kafka-topic-filebeat-test-logmiss30-dropping-too-large-message-of-size-3463/117003 "2018-01-30T05:02:04Z")
I use filebeat to publish log to kafka, but get "2018/01/25 08:39:54.536086 client.go:203: ERR Kafka (topic=filebeat-test-logmiss30): dropping too large message of size 3463." configurations: Filebeat(6.1.2) output… --- ## [Can't find out sincedb files](https://discuss.elastic.co/t/cant-find-out-sincedb-files/129785)
**Author:** [@Pinno\_Lin](https://discuss.elastic.co/u/Pinno_Lin)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 9:04am UTC](https://discuss.elastic.co/t/cant-find-out-sincedb-files/129785 "2018-04-27T09:04:57Z")
Hi, I can't find out any sincedb files in $HOME or assign directory . The input configure above. When i restart logstash service. it always reload all record in files to Elasticsearch. but i not see any error about si… --- ## [Using Regex in Yaml for Logstash Translate Filter](https://discuss.elastic.co/t/using-regex-in-yaml-for-logstash-translate-filter/70855)
**Author:** [@Kyle\_Belitz](https://discuss.elastic.co/u/Kyle_Belitz)\ **Replies:** 2\ **Last updated:** [January 8, 2017, 1:46am UTC](https://discuss.elastic.co/t/using-regex-in-yaml-for-logstash-translate-filter/70855 "2017-01-08T01:46:51Z")
Good day all, I need some help. I am trying to use the Logstash Translate Filter to enrich network data that bro is generating and that I'm ingesting into my ELK stack. For example, here is how i was enriching data man… --- ## [Unable to start Logstash via systemd on RHEL - can't find Elapsed Plugin](https://discuss.elastic.co/t/unable-to-start-logstash-via-systemd-on-rhel-cant-find-elapsed-plugin/114828)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 8\ **Last updated:** [January 19, 2018, 9:09am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-via-systemd-on-rhel-cant-find-elapsed-plugin/114828 "2018-01-19T09:09:34Z")
Hi ELK-bods, I'm going through my first install of ELK on Linux/RHEL and am not able to run Logstash via systemd as it seems it is not able to find/read the 'logstash-input-elapsed' plugin. This plugin has been instal… --- ## [Netflow visualizations Kibana 4 - Limited fields?](https://discuss.elastic.co/t/netflow-visualizations-kibana-4-limited-fields/46240)
**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\ **Replies:** 8\ **Last updated:** [April 7, 2016, 7:41am UTC](https://discuss.elastic.co/t/netflow-visualizations-kibana-4-limited-fields/46240 "2016-04-07T07:41:15Z")
Hi, I'm running a test environment where I have ELK set up and receiving syslogs and netflow from a router. Everything is coming in well and I am trying to make some visualizations. I feel like the fields I'm given o… --- ## [Unique field query in Timelion](https://discuss.elastic.co/t/unique-field-query-in-timelion/95847)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 3\ **Last updated:** [August 8, 2017, 6:30pm UTC](https://discuss.elastic.co/t/unique-field-query-in-timelion/95847 "2017-08-08T18:30:57Z")
I want to make a visualization using Timelion. I want to plot the count of documents only where a field is unique. In my case it is the user\_id of the user. How do I put the condition that some field should be unique i… --- ## [PANDAS or Ipython Notebook integration into kibana](https://discuss.elastic.co/t/pandas-or-ipython-notebook-integration-into-kibana/127136)
**Author:** [@mat\_lon](https://discuss.elastic.co/u/mat_lon)\ **Replies:** 6\ **Last updated:** [April 7, 2018, 6:56pm UTC](https://discuss.elastic.co/t/pandas-or-ipython-notebook-integration-into-kibana/127136 "2018-04-07T18:56:26Z")
Is there any current thoughts on taking output from a kibana query, and being able to pipe it or take it to an ipython notebook? I am highly interested in this feature, or potentially adding a feature to allow the output… --- ## [Metricbeatで取得する情報について](https://discuss.elastic.co/t/metricbeat/69551)
**Author:** [@takumi](https://discuss.elastic.co/u/takumi)\ **Replies:** 6\ **Last updated:** [December 22, 2016, 12:29pm UTC](https://discuss.elastic.co/t/metricbeat/69551 "2016-12-22T12:29:08Z")
metricbeat(5.1.1-1)を利用しております。 監視対象で同一プロセス名のものが複数起動しており、それらを区別したいと考えています。 以下のURLではsystem.process.cmdlineにコマンドラインの情報が含まれるようですが、私の構築環境ではコマンドラインの情報が送信されてきません。 https://www.elastic.co/guide/en/beats/metricbeat/current/metricbe… --- ## [UI test automation framework selection for Kibana](https://discuss.elastic.co/t/ui-test-automation-framework-selection-for-kibana/190208)
**Author:** [@Damith](https://discuss.elastic.co/u/Damith)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 6:54am UTC](https://discuss.elastic.co/t/ui-test-automation-framework-selection-for-kibana/190208 "2019-07-18T06:54:34Z")
Hi , I m looking forward to automate the Kibana visualizations and researching for a reliable automation framework/stack . What would be the ideal automation tool/stack for this? --- ## [Kibana Filters in an Array](https://discuss.elastic.co/t/kibana-filters-in-an-array/191454)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 10:01pm UTC](https://discuss.elastic.co/t/kibana-filters-in-an-array/191454 "2019-07-19T22:01:49Z")
Is there an way to make a filter that works like this? For example, I have a field in my documents that contains a text and is called streetNumber, and I want to get All documents that may be in this index, in a certain… --- ## [How to use frozen storage the right way](https://discuss.elastic.co/t/how-to-use-frozen-storage-the-right-way/342839)
**Author:** [@axel\_r](https://discuss.elastic.co/u/axel_r)\ **Replies:** 3\ **Last updated:** [September 12, 2023, 4:08pm UTC](https://discuss.elastic.co/t/how-to-use-frozen-storage-the-right-way/342839 "2023-09-12T16:08:12Z")
Hello everyone, I'd like some clarification and information on data tiers frozen in an Elastic Cloud environment. I'm not sure if I understand how this works and I can't find any documentation that answers my questions… --- ## [Close\_removed not working properly?](https://discuss.elastic.co/t/close-removed-not-working-properly/89055)
**Author:** [@ashak](https://discuss.elastic.co/u/ashak)\ **Replies:** 6\ **Last updated:** [June 20, 2017, 12:44pm UTC](https://discuss.elastic.co/t/close-removed-not-working-properly/89055 "2017-06-20T12:44:31Z")
Hi, We've an ELK setup that we recently introduced filebeat too. Part of our testing was to stop the logstash instances that filebeat writes to for a while to backlog some data to confirm that it cause no issues and th… --- ## [Index Templates - Differences between \_template & \_index\_template](https://discuss.elastic.co/t/index-templates-differences-between-template-index-template/255367)
**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\ **Replies:** 2\ **Last updated:** [November 13, 2020, 8:09pm UTC](https://discuss.elastic.co/t/index-templates-differences-between-template-index-template/255367 "2020-11-13T20:09:24Z")
Hello everyone, Need help to identify the differences between the subject mentioned endpoints usage. \_index\_template endpoint POST \_index\_template/index-template-1 { "index\_patterns": \["logs-2019\*"\], "template": … --- ## [How to get more than 10 terms bucket with Java API?](https://discuss.elastic.co/t/how-to-get-more-than-10-terms-bucket-with-java-api/18934)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 2\ **Last updated:** [July 30, 2014, 2:37pm UTC](https://discuss.elastic.co/t/how-to-get-more-than-10-terms-bucket-with-java-api/18934 "2014-07-30T14:37:16Z")
I have an ES where I have indexed a bunch of files. Each file is tagged with a category field. I want to write Java code to get a list of all the categories. I am trying to do this using the terms aggregation: Que… --- ## [Error when installing license on ES 6.4.0](https://discuss.elastic.co/t/error-when-installing-license-on-es-6-4-0/150745)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 5\ **Last updated:** [October 5, 2018, 3:40pm UTC](https://discuss.elastic.co/t/error-when-installing-license-on-es-6-4-0/150745 "2018-10-05T15:40:07Z")
I'm trying to install a non-production license on my monitoring cluster, but I'm getting the following error: Please address the errors in your form. Error encountered uploading license: Cannot install a \[GOLD\] license… --- ## [Does File input work recursively](https://discuss.elastic.co/t/does-file-input-work-recursively/95612)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 9:04pm UTC](https://discuss.elastic.co/t/does-file-input-work-recursively/95612 "2017-08-02T21:04:32Z")
Hi Everyone, I am building up my logstash config and i am using the following file input plugin to ingest gzip files. input { file { path =\> "/home/niraj/sync/bigdata-dev" tags =\> "bigdata-dev1" codec =\> "gzip\_lines… --- ## [ES6.1 Heap memory used by the index writer](https://discuss.elastic.co/t/es6-1-heap-memory-used-by-the-index-writer/116535)
**Author:** [@loren](https://discuss.elastic.co/u/loren)\ **Replies:** 8\ **Last updated:** [February 5, 2018, 10:15pm UTC](https://discuss.elastic.co/t/es6-1-heap-memory-used-by-the-index-writer/116535 "2018-02-05T22:15:02Z")
QQ: what would cause IndexWriter memory to constantly spike? I'm indexing data to a new 3 node ES6.1 cluster running on i3.xlarge instances. Each node is showing roughly equal numbers for index request rate, disk usage,… --- ## [How to copy other index mapping to create a new index?](https://discuss.elastic.co/t/how-to-copy-other-index-mapping-to-create-a-new-index/62022)
**Author:** [@mattcrawfoord](https://discuss.elastic.co/u/mattcrawfoord)\ **Replies:** 1\ **Last updated:** [October 3, 2016, 5:47am UTC](https://discuss.elastic.co/t/how-to-copy-other-index-mapping-to-create-a-new-index/62022 "2016-10-03T05:47:32Z")
I have a logstash-user-\* index ,I want to create a new index logstash-user2-\* and the new index mapping or any settings the same as logstash-user-\* What can I do? Thanks! --- ## [Migrating data from one node setup to new cluster](https://discuss.elastic.co/t/migrating-data-from-one-node-setup-to-new-cluster/163079)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 5\ **Last updated:** [January 7, 2019, 8:29am UTC](https://discuss.elastic.co/t/migrating-data-from-one-node-setup-to-new-cluster/163079 "2019-01-07T08:29:15Z")
Recently got budget to upgrade our one node setup to a clustered, kubernetes-based system. To this end I need to migrate the existing data to the new setup. Existing node will not be part of the cluster. How? --- ## [Learning Grok](https://discuss.elastic.co/t/learning-grok/134773)
**Author:** [@Jukocross](https://discuss.elastic.co/u/Jukocross)\ **Replies:** 5\ **Last updated:** [June 8, 2018, 2:49am UTC](https://discuss.elastic.co/t/learning-grok/134773 "2018-06-08T02:49:35Z")
Hi, i'm learning grok and trying out to craft my own filter. Below is the example which i have tried using https://grokdebug.herokuapp.com to debug. However, i still received grokparsefailure when output to elasticsear… --- ## [After "service elasticsearch start" it crashes](https://discuss.elastic.co/t/after-service-elasticsearch-start-it-crashes/74795)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 5\ **Last updated:** [February 16, 2017, 9:44am UTC](https://discuss.elastic.co/t/after-service-elasticsearch-start-it-crashes/74795 "2017-02-16T09:44:26Z")
Hi everyone, I am new to ElasticSearch, I tried to create a new VM with version 5.2 of ES. I did so with an rpm file. After all the process i try to start ES by "service elasticsearch start" and it works fine! After c… --- ## [How to Create a Watchlist/Lookup Tables](https://discuss.elastic.co/t/how-to-create-a-watchlist-lookup-tables/38228)
**Author:** [@praveen\_siem](https://discuss.elastic.co/u/praveen_siem)\ **Replies:** 5\ **Last updated:** [January 13, 2016, 10:23am UTC](https://discuss.elastic.co/t/how-to-create-a-watchlist-lookup-tables/38228 "2016-01-13T10:23:04Z")
Dear Team, Do anyone have idea on how do we create a watchlist in ELK. In other terms lookup tables. This specifies a range of values say 50 or 100 or more in a single file. And save it as .csv or .txt For Ex: there … --- ## [Date parsing issue - returns wrong month](https://discuss.elastic.co/t/date-parsing-issue-returns-wrong-month/34476)
**Author:** [@thomas.dotreppe](https://discuss.elastic.co/u/thomas.dotreppe)\ **Replies:** 5\ **Last updated:** [November 16, 2015, 5:21pm UTC](https://discuss.elastic.co/t/date-parsing-issue-returns-wrong-month/34476 "2015-11-16T17:21:43Z")
I originally the data was not in ElasticSearch but after some help, it looks like the date was parsed incorrectly (it gets the month incorrectly). Here are the 3 (original) lines coming from the log file: \[MST Nov … --- ## [Update mapping - what is safe to ignore?](https://discuss.elastic.co/t/update-mapping-what-is-safe-to-ignore/4928)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 5\ **Last updated:** [July 26, 2011, 2:30pm UTC](https://discuss.elastic.co/t/update-mapping-what-is-safe-to-ignore/4928 "2011-07-26T14:30:11Z")
Using ES 0.16.2 Due to a change in the source content that I am indexing, I need to update a field from a long to string. The original mapping is dynamic, no explicit mapping was ever provided: "event": { "d… --- ## [How to get response header with cookie from POST request to Kibana REST API /internal/security/login](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530)
**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 7:12am UTC](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530 "2021-01-29T07:12:27Z")
My goal is to skip login page in Kibana. With an HTTP request, I would to login in Kibana using the REST API /internal/security/login. The request is come from my Angular application and to bypass CORS and multi-origi… --- ## [S3 snapshotting timed out requiring Elasticsearch process restart - 6.3.0](https://discuss.elastic.co/t/s3-snapshotting-timed-out-requiring-elasticsearch-process-restart-6-3-0/166205)
**Author:** [@Martin\_Brennan](https://discuss.elastic.co/u/Martin_Brennan)\ **Replies:** 5\ **Last updated:** [February 18, 2019, 4:22pm UTC](https://discuss.elastic.co/t/s3-snapshotting-timed-out-requiring-elasticsearch-process-restart-6-3-0/166205 "2019-02-18T16:22:36Z")
We ran into an issue where we were unable to read or write snapshots to s3. The error is listed below. We mitigated the issue by restarting the Elasticsearch process on the master node. On an independent cluster we also… --- ## [Native controller process has stopped](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 1\ **Last updated:** [September 17, 2021, 6:09pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505 "2021-09-17T18:09:03Z")
I am not able to start the elasticsearch service, I am getting the following errors. I could find many discussions with the same error but didn't find solution in any of them. Below are the logs, can anyone please provi… --- ## [How to read "true/false" values from a csv-file and parse them to bool datatype](https://discuss.elastic.co/t/how-to-read-true-false-values-from-a-csv-file-and-parse-them-to-bool-datatype/132988)
**Author:** [@magida](https://discuss.elastic.co/u/magida)\ **Replies:** 1\ **Last updated:** [May 23, 2018, 1:52pm UTC](https://discuss.elastic.co/t/how-to-read-true-false-values-from-a-csv-file-and-parse-them-to-bool-datatype/132988 "2018-05-23T13:52:39Z")
Hello, I am currently in the midst of reading a bunch of logfiles in a csv-format using logstash. Now a problem that i've come across which i've tried to solve by myself but failed, is that that when a boolean value is … --- ## [Metric beat module list empty](https://discuss.elastic.co/t/metric-beat-module-list-empty/147064)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 5\ **Last updated:** [September 4, 2018, 1:43pm UTC](https://discuss.elastic.co/t/metric-beat-module-list-empty/147064 "2018-09-04T13:43:36Z")
Hello Team, I am using ELK6.4.0 and beat 6.4.0. Today i have installed the metricbeat6.4.0 over my 3 ubuntu16.04 servers. When i installed them all things were working properly except disk data was not avaialble on dash… --- ## [Mapper Parsing Exception after Upgrade to 5.1.1](https://discuss.elastic.co/t/mapper-parsing-exception-after-upgrade-to-5-1-1/69853)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 7\ **Last updated:** [February 6, 2017, 6:08pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-after-upgrade-to-5-1-1/69853 "2017-02-06T18:08:35Z")
I recently upgraded from ES 2.4.1 to ES 5.1.1 (along with Kibana, & logstash now at 5.1.1) and am getting mapper parsing exceptions; {"index"=\>{"\_index"=\>"filebeat-2016.12.22", "\_type"=\>"stunnel", "\_id"=\>"AVkohgLnKCAs… --- ## [Overloading during bulk write from Spark](https://discuss.elastic.co/t/overloading-during-bulk-write-from-spark/87297)
**Author:** [@pferrel](https://discuss.elastic.co/u/pferrel)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 11:50pm UTC](https://discuss.elastic.co/t/overloading-during-bulk-write-from-spark/87297 "2017-05-30T23:50:00Z")
I create a completely new index and write it to ES using the Spark/Hadoop library from Elastic. I need a pretty big cluster to accomplish the calculations that create the index and the last step it to write it to Elast… --- ## [Elasticsearch on Raspberry Pi 3+](https://discuss.elastic.co/t/elasticsearch-on-raspberry-pi-3/179764)
**Author:** [@vatolin](https://discuss.elastic.co/u/vatolin)\ **Replies:** 3\ **Last updated:** [May 6, 2019, 3:13pm UTC](https://discuss.elastic.co/t/elasticsearch-on-raspberry-pi-3/179764 "2019-05-06T15:13:11Z")
Hello. I am an absolute beginner. I've purchased a Raspberry Pi 3+ and set up my own NextCloud. That works. Now, I want to enable a full text search in my Nextcloud. Therefore, I want to install Elasticsearch on my Ras… --- ## [Fleet agent](https://discuss.elastic.co/t/fleet-agent/296349)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 6\ **Last updated:** [March 16, 2022, 8:36pm UTC](https://discuss.elastic.co/t/fleet-agent/296349 "2022-03-16T20:36:36Z")
Hello, I have a question about the fleet agent once it is deployed to a device. I have a self signed cert so I use this command to enroll .\\elastic-agent.exe install --url=https://192.168.131.155:8220 --enrollment-tok… --- ## [Accidentally deleted .kibana](https://discuss.elastic.co/t/accidentally-deleted-kibana/124944)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 1\ **Last updated:** [March 21, 2018, 9:44am UTC](https://discuss.elastic.co/t/accidentally-deleted-kibana/124944 "2018-03-21T09:44:17Z")
Hi, I accidentally deleted .kibana index, all my visualizations and dashboards have been deleted. Could someone please help me how to recover it back. Thanks ! --- ## [Kibana does not create .kibana index](https://discuss.elastic.co/t/kibana-does-not-create-kibana-index/62405)
**Author:** [@ageldenberg](https://discuss.elastic.co/u/ageldenberg)\ **Replies:** 4\ **Last updated:** [October 8, 2016, 3:49am UTC](https://discuss.elastic.co/t/kibana-does-not-create-kibana-index/62405 "2016-10-08T03:49:54Z")
Upgraded to kibana 4.6.1 and elasticsearch 2.4.1. Before installing Kibana deleted an old version of .kibana index. Elasticsearch seems to work OK after the upgrade: root@lablogstash:~/softshop# curl -XGET "localhost:… --- ## [Explicit Mapping Vs Dynamic Mapping](https://discuss.elastic.co/t/explicit-mapping-vs-dynamic-mapping/138139)
**Author:** [@bluelullaby](https://discuss.elastic.co/u/bluelullaby)\ **Replies:** 3\ **Last updated:** [July 2, 2018, 8:54am UTC](https://discuss.elastic.co/t/explicit-mapping-vs-dynamic-mapping/138139 "2018-07-02T08:54:10Z")
Recently, I need to build a new project to replace the old one which is based on Lucene. But in my experiment, I have found that there is a serious restriction about updating field mapping. From this address (https://ww… --- ## [Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction/153521)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 1\ **Last updated:** [October 23, 2018, 5:41am UTC](https://discuss.elastic.co/t/failed-to-execute-action-id-main-action-type-logstash-failedaction/153521 "2018-10-23T05:41:03Z")
\[2018-10-23T05:27:51,602\]\[ERROR\]\[logstash.pipeline \] Error registering plugin {:pipeline\_id=\>"main", :plugin=\>"\\\"jdbc:oracle:thin:@host:port/servicename\\", jdbc\_user… --- ## [Kibana 9.3.3 Security Update (ESA-2026-28)](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2026, 4:29pm UTC](https://discuss.elastic.co/t/kibana-9-3-3-security-update-esa-2026-28/385815 "2026-04-08T16:29:23Z")
Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with wor… --- ## [Publishing a hostname instead of an ip address](https://discuss.elastic.co/t/publishing-a-hostname-instead-of-an-ip-address/70954)
**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\ **Replies:** 0\ **Last updated:** [January 9, 2017, 3:07pm UTC](https://discuss.elastic.co/t/publishing-a-hostname-instead-of-an-ip-address/70954 "2017-01-09T15:07:35Z")
I'm trying to set up my v5 cluster to publish a host name instead of an IP address as it's endpoint. The problem is, that even if I type a hostname in the elasticsearch.yml file, then it will resolve that hostname to a… --- ## [Difference between network.host, transport.host and http.host settings](https://discuss.elastic.co/t/difference-between-network-host-transport-host-and-http-host-settings/308215)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 5\ **Last updated:** [June 28, 2022, 11:23pm UTC](https://discuss.elastic.co/t/difference-between-network-host-transport-host-and-http-host-settings/308215 "2022-06-28T23:23:56Z")
Why http.host: and #transport.host: are still 0.0.0.0 after changing network.host: to a static @ i know that i have been configured my network.host before "0.0.0.0" but it still 0.0.0.0 in this two settings { http.host: … --- ## [Coloring Metric aggregation based on String](https://discuss.elastic.co/t/coloring-metric-aggregation-based-on-string/286821)
**Author:** [@Cibot](https://discuss.elastic.co/u/Cibot)\ **Replies:** 3\ **Last updated:** [October 19, 2021, 8:14am UTC](https://discuss.elastic.co/t/coloring-metric-aggregation-based-on-string/286821 "2021-10-19T08:14:54Z")
I have been trying to create a dashboard with relevant information for a service. As such we display logs, uptime over time, errors, current state and so on. To make it easy to indicate whether a service is down, I wan… --- ## [Profile API UI](https://discuss.elastic.co/t/profile-api-ui/56486)
**Author:** [@Asaf\_Mesika](https://discuss.elastic.co/u/Asaf_Mesika)\ **Replies:** 3\ **Last updated:** [December 14, 2016, 1:33pm UTC](https://discuss.elastic.co/t/profile-api-ui/56486 "2016-12-14T13:33:10Z")
Hi, I was wondering if anyone know a visualization (UI) exists for Profile API? Thanks, Asaf --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 127.0.0.1:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-127-0-0-1-9200/305585)
**Author:** [@devikingno](https://discuss.elastic.co/u/devikingno)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 9:57am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-127-0-0-1-9200/305585 "2022-05-25T09:57:02Z")
Hi everyone I'm trying setup SSL, TLS, HTTPS for my Elasticsearch and kibana container, 2 container ES and Kibana are all the same version (8.1.3) and run at localhost. I'm edited the configure host file locally in /et… --- ## [How to list out all \*\*hidden\*\* indices in a cluster](https://discuss.elastic.co/t/how-to-list-out-all-hidden-indices-in-a-cluster/291291)
**Author:** [@Bruce\_Liu](https://discuss.elastic.co/u/Bruce_Liu)\ **Replies:** 1\ **Last updated:** [December 9, 2021, 5:59am UTC](https://discuss.elastic.co/t/how-to-list-out-all-hidden-indices-in-a-cluster/291291 "2021-12-09T05:59:15Z")
I'm trying to list out all hidden indices in a cluster. I tried GET \_cat/indices?expand\_wildcards=hidden,open&v, but even the status of the hidden index(index.hidden=true) is open, and the request lists out all open indi… --- ## [Change null value from database for one field using logstash and insert into Elasticsearch](https://discuss.elastic.co/t/change-null-value-from-database-for-one-field-using-logstash-and-insert-into-elasticsearch/97552)
**Author:** [@malhotras](https://discuss.elastic.co/u/malhotras)\ **Replies:** 7\ **Last updated:** [August 21, 2017, 1:09pm UTC](https://discuss.elastic.co/t/change-null-value-from-database-for-one-field-using-logstash-and-insert-into-elasticsearch/97552 "2017-08-21T13:09:32Z")
I would like to replace the value of field with NULL to some other value. This field is obtained by using Logstash JDBC plugin from database. Here is my config file. input { jdbc { jdbc\_connection\_string =\> "url" jdbc… --- ## [Error parsing json in Logstash](https://discuss.elastic.co/t/error-parsing-json-in-logstash/93813)
**Author:** [@camarar](https://discuss.elastic.co/u/camarar)\ **Replies:** 1\ **Last updated:** [July 19, 2017, 5:55pm UTC](https://discuss.elastic.co/t/error-parsing-json-in-logstash/93813 "2017-07-19T17:55:36Z")
Dear, I would like receive help to solve my problem... I have this error for all event: exception=\>#\