# Top

**URL:** https://discuss.elastic.co/top.md?page=519&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 520

---

## [How to convert json input to Syslog output](https://discuss.elastic.co/t/how-to-convert-json-input-to-syslog-output/45165)

<div class="topic-metadata">

**Author:** [@herofish](https://discuss.elastic.co/u/herofish)\
**Replies:** 1\
**Last updated:** [March 25, 2016, 1:54pm UTC](https://discuss.elastic.co/t/how-to-convert-json-input-to-syslog-output/45165 "2016-03-25T13:54:38Z")

</div>

Hello, I have a working Logstash server collecting logs from Windows hosts with the nxlog agent (sending json format). The Logstash server is taking the Windows agent logs and forwarding them to two destinations, a…

---

## [Multiple independent instances on one server](https://discuss.elastic.co/t/multiple-independent-instances-on-one-server/234573)

<div class="topic-metadata">

**Author:** [@davidpustai](https://discuss.elastic.co/u/davidpustai)\
**Replies:** 5\
**Last updated:** [May 28, 2020, 10:24am UTC](https://discuss.elastic.co/t/multiple-independent-instances-on-one-server/234573 "2020-05-28T10:24:22Z")

</div>

I have one VPS running two PHP applications (resp. production and test/staging environment of one application) that are using Elasticsearch. Until now I only had one cluster with one node, that was shared between both ap…

---

## [Aggregate - concatenate events](https://discuss.elastic.co/t/aggregate-concatenate-events/126808)

<div class="topic-metadata">

**Author:** [@las](https://discuss.elastic.co/u/las)\
**Replies:** 5\
**Last updated:** [April 5, 2018, 3:39pm UTC](https://discuss.elastic.co/t/aggregate-concatenate-events/126808 "2018-04-05T15:39:11Z")

</div>

12:12:12 processed T1 data1 val1 data2 val2 dataId 1111 data7 val7 I have configured filebeat to send multiline events like above to be sent to logstash. In logstash, I am using grok and aggregate to extract the da…

---

## [Parsing XML files with Logstash in Windows](https://discuss.elastic.co/t/parsing-xml-files-with-logstash-in-windows/54473)

<div class="topic-metadata">

**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\
**Replies:** 5\
**Last updated:** [July 4, 2016, 6:41pm UTC](https://discuss.elastic.co/t/parsing-xml-files-with-logstash-in-windows/54473 "2016-07-04T18:41:45Z")

</div>

Hi, I m trying to parse XML files in Windows under C:\\busesdata folder using Logstash 2.3.3 and sending them to ES 1.7.1. I was getting errors and fixing them, until logstash started without errors (as i think), but it…

---

## [Kibana 6.7.1 Cannot connect to the Elasticsearch cluster currently configured for Kibana](https://discuss.elastic.co/t/kibana-6-7-1-cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana/183477)

<div class="topic-metadata">

**Author:** [@anilo](https://discuss.elastic.co/u/anilo)\
**Replies:** 2\
**Last updated:** [May 30, 2019, 10:45am UTC](https://discuss.elastic.co/t/kibana-6-7-1-cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana/183477 "2019-05-30T10:45:35Z")

</div>

Kibana error on screen : Cannot connect to the Elasticsearch cluster currently configured for Kibana. To use the full set of free features in this distribution of Kibana, please update Elasticsearch to the default distr…

---

## [Can't delete index for elasticsearch](https://discuss.elastic.co/t/cant-delete-index-for-elasticsearch/31900)

<div class="topic-metadata">

**Author:** [@supermario](https://discuss.elastic.co/u/supermario)\
**Replies:** 4\
**Last updated:** [October 13, 2015, 7:10am UTC](https://discuss.elastic.co/t/cant-delete-index-for-elasticsearch/31900 "2015-10-13T07:10:48Z")

</div>

i have a wrong index that named 'logstash-%{type}-%{item}-2015.09.30'. i want to delete it. when i delete it by curl -XDELETE(curl -XDELETE http://192.168.3.15:9200/logstash-%{type}-%{item}-2015.09.30) return 'curl: (52)…

---

## [Increase data size in Rally existing tracks](https://discuss.elastic.co/t/increase-data-size-in-rally-existing-tracks/116514)

<div class="topic-metadata">

**Author:** [@Alp1](https://discuss.elastic.co/u/Alp1)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 7:19pm UTC](https://discuss.elastic.co/t/increase-data-size-in-rally-existing-tracks/116514 "2018-01-23T19:19:50Z")

</div>

Hi Daniel , I am using Rally's existing tracks to perform benchmarking. I noticed that nyc taxis is the largest track with 4.5GB compressed and 74.3 GB uncompressed docs. I want to test with larger data volume. Is there…

---

## [Geolocation mapping](https://discuss.elastic.co/t/geolocation-mapping/7526)

<div class="topic-metadata">

**Author:** [@phoenix](https://discuss.elastic.co/u/phoenix)\
**Replies:** 6\
**Last updated:** [May 9, 2012, 8:24am UTC](https://discuss.elastic.co/t/geolocation-mapping/7526 "2012-05-09T08:24:13Z")

</div>

Hi all I'm facing a problem. I have documents containing geoloacation data. But when i querya gographic query, i get an error, saying 'the 'location' field is not a geo\_point type'. I tried to remove my index an…

---

## [Any workaround for request Entity Too Large in kibana](https://discuss.elastic.co/t/any-workaround-for-request-entity-too-large-in-kibana/127134)

<div class="topic-metadata">

**Author:** [@pandeesh](https://discuss.elastic.co/u/pandeesh)\
**Replies:** 1\
**Last updated:** [April 6, 2018, 9:59pm UTC](https://discuss.elastic.co/t/any-workaround-for-request-entity-too-large-in-kibana/127134 "2018-04-06T21:59:56Z")

</div>

Hi I have an index pattern which currently has 4000 fields in it. whenever I try to refresh the index pattern, it ends up with " request Entity Too Large" error. When i try to see the request in chrome console, it's hitt…

---

## [Benchmark for existing cluster](https://discuss.elastic.co/t/benchmark-for-existing-cluster/93496)

<div class="topic-metadata">

**Author:** [@Thennarasu\_Subramani](https://discuss.elastic.co/u/Thennarasu_Subramani)\
**Replies:** 3\
**Last updated:** [July 18, 2017, 12:07pm UTC](https://discuss.elastic.co/t/benchmark-for-existing-cluster/93496 "2017-07-18T12:07:54Z")

</div>

Hi All Greate day I want to take a benchmark for my existing cluster,i am totally confusing where i have to configure my elastic search details,i am having ES server in EC2 instance ,here my configuration is one mas…

---

## [Using logstash File Input to monitor files on a network share](https://discuss.elastic.co/t/using-logstash-file-input-to-monitor-files-on-a-network-share/182)

<div class="topic-metadata">

**Author:** [@markus](https://discuss.elastic.co/u/markus)\
**Replies:** 2\
**Last updated:** [October 27, 2015, 2:18pm UTC](https://discuss.elastic.co/t/using-logstash-file-input-to-monitor-files-on-a-network-share/182 "2015-10-27T14:18:17Z")

</div>

Hi, we are using Logstash on Windows to process logfiles residing on several windows servers. Is it possible / advisible to setup network shares to the various logfiles from the shipper machine and ship all log files fro…

---

## [How to send an application (systemd service) logs to Logstash using Journalbeat?](https://discuss.elastic.co/t/how-to-send-an-application-systemd-service-logs-to-logstash-using-journalbeat/212435)

<div class="topic-metadata">

**Author:** [@arblr](https://discuss.elastic.co/u/arblr)\
**Replies:** 2\
**Last updated:** [December 31, 2019, 6:04am UTC](https://discuss.elastic.co/t/how-to-send-an-application-systemd-service-logs-to-logstash-using-journalbeat/212435 "2019-12-31T06:04:35Z")

</div>

My application / service name 'appdb', running as systemd service. I can observe logs from this application using shall command 'journalctl -u appdb.service'. I want to send these logs to Logstash. I am using the followi…

---

## [Kibana with X-pack Basic connected to AWS Elasticsearch (without X-pack)](https://discuss.elastic.co/t/kibana-with-x-pack-basic-connected-to-aws-elasticsearch-without-x-pack/151121)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 2\
**Last updated:** [October 5, 2018, 3:09pm UTC](https://discuss.elastic.co/t/kibana-with-x-pack-basic-connected-to-aws-elasticsearch-without-x-pack/151121 "2018-10-05T15:09:59Z")

</div>

Hi All, I am running into issues integrating Kibana (X-pack Basic) with AWS Elasticsearch (no X-pack). Is this configuration supported? Can you connect a Kibana with X-pack Basic to an Elasticsearch with no X-pack? Thi…

---

## [Set up Elastic Search On Production](https://discuss.elastic.co/t/set-up-elastic-search-on-production/55395)

<div class="topic-metadata">

**Author:** [@sattu531](https://discuss.elastic.co/u/sattu531)\
**Replies:** 7\
**Last updated:** [July 13, 2016, 1:46pm UTC](https://discuss.elastic.co/t/set-up-elastic-search-on-production/55395 "2016-07-13T13:46:41Z")

</div>

Hi, I am very new into elastic search world. Just created one search system using elastic search which contains around 2L docs. I did it on my local machine and now I want to take it live on production Currently I did al…

---

## [Dynamically change X axis interval](https://discuss.elastic.co/t/dynamically-change-x-axis-interval/79244)

<div class="topic-metadata">

**Author:** [@vishalkin](https://discuss.elastic.co/u/vishalkin)\
**Replies:** 1\
**Last updated:** [March 21, 2017, 7:42pm UTC](https://discuss.elastic.co/t/dynamically-change-x-axis-interval/79244 "2017-03-21T19:42:14Z")

</div>

Hi, I want to design 4 visualizations that shows data: 1. Hourly (last 24 hrs) 2. Daily (last 20 days) 3. Weekly (last 10 weeks) 4. Monthly (last 12 months) Creating 4 different visualizations makes no sense as they …

---

## [Multiple Beats Input (filebeat, topbeat)](https://discuss.elastic.co/t/multiple-beats-input-filebeat-topbeat/47149)

<div class="topic-metadata">

**Author:** [@nocode](https://discuss.elastic.co/u/nocode)\
**Replies:** 2\
**Last updated:** [April 12, 2016, 6:19pm UTC](https://discuss.elastic.co/t/multiple-beats-input-filebeat-topbeat/47149 "2016-04-12T18:19:14Z")

</div>

So I've configured an ELK stack. Initially, I configured my logging to use json format and used filebeat to send to logstash. Once I got that working, I wanted to start collecting system metrics so I disabled the fileb…

---

## [Logo change](https://discuss.elastic.co/t/logo-change/226370)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 5\
**Last updated:** [April 27, 2020, 11:44pm UTC](https://discuss.elastic.co/t/logo-change/226370 "2020-04-27T23:44:23Z")

</div>

How can I change logo in newest Kibana?

---

## [S3 input, execution expired \[SOLVED\]](https://discuss.elastic.co/t/s3-input-execution-expired-solved/32996)

<div class="topic-metadata">

**Author:** [@calle\_eman](https://discuss.elastic.co/u/calle_eman)\
**Replies:** 5\
**Last updated:** [October 28, 2015, 10:41am UTC](https://discuss.elastic.co/t/s3-input-execution-expired-solved/32996 "2015-10-28T10:41:41Z")

</div>

I have one logstash that's shipping files to s3, and one logstash that gets them from s3 and inserts them in elasticsearch. But the s3 input isn't working. Config: s3 { access\_key\_id =\> "XXXX" secret\_access\_key …

---

## [Unable to install elasticsearch 5.5](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5/94452)

<div class="topic-metadata">

**Author:** [@vijjun123](https://discuss.elastic.co/u/vijjun123)\
**Replies:** 8\
**Last updated:** [July 26, 2017, 4:50am UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5/94452 "2017-07-26T04:50:38Z")

</div>

Unable to install elasticsearch 5.5 While executing ./elasticsearch got the below error Could you please guide the further $ ./elasticsearch 2017-07-25 09:28:57,277 main ERROR Could not register mbeans java.security.…

---

## [How do I know if I have open source vs basic](https://discuss.elastic.co/t/how-do-i-know-if-i-have-open-source-vs-basic/159776)

<div class="topic-metadata">

**Author:** [@hadingerb](https://discuss.elastic.co/u/hadingerb)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 8:50pm UTC](https://discuss.elastic.co/t/how-do-i-know-if-i-have-open-source-vs-basic/159776 "2018-12-06T20:50:11Z")

</div>

So I downloaded elasticsearch (clicked on the download for opensource/basic), and I am wondering which one I have. The download button is the same for both, and there are features that basic has that open source doesnt. …

---

## [Removing specific text from a log mesg](https://discuss.elastic.co/t/removing-specific-text-from-a-log-mesg/89023)

<div class="topic-metadata">

**Author:** [@Raghu19](https://discuss.elastic.co/u/Raghu19)\
**Replies:** 4\
**Last updated:** [June 14, 2017, 12:52pm UTC](https://discuss.elastic.co/t/removing-specific-text-from-a-log-mesg/89023 "2017-06-14T12:52:15Z")

</div>

Is there a way to parse the log message and search for a particular string and if that is present, then to ignore/remove that string from that message? Every log message in the log file that i am trying to parse using …

---

## [Sorting based on Nested aggregation values](https://discuss.elastic.co/t/sorting-based-on-nested-aggregation-values/53435)

<div class="topic-metadata">

**Author:** [@Vysakh](https://discuss.elastic.co/u/Vysakh)\
**Replies:** 0\
**Last updated:** [June 21, 2016, 7:06am UTC](https://discuss.elastic.co/t/sorting-based-on-nested-aggregation-values/53435 "2016-06-21T07:06:36Z")

</div>

My mapping is as follows ------------------------------------------------------------ POST /userinfo { "mappings": { "skillinfo": { "properties": { "keyskills": { "type": "nested", …

---

## [120s Timeout on Elasticsearch Queries via Kibana](https://discuss.elastic.co/t/120s-timeout-on-elasticsearch-queries-via-kibana/200007)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 5\
**Last updated:** [September 18, 2019, 5:28pm UTC](https://discuss.elastic.co/t/120s-timeout-on-elasticsearch-queries-via-kibana/200007 "2019-09-18T17:28:00Z")

</div>

I have two clusters (ES 7.3.1, bundled OpenJDK 12) that are hosted by an internal team here at my org. Each cluster has 6 data nodes, three master nodes, and one cluster has two client nodes that perform searches against…

---

## [Winlogbeat](https://discuss.elastic.co/t/winlogbeat/103293)

<div class="topic-metadata">

**Author:** [@fatmafouad\_y](https://discuss.elastic.co/u/fatmafouad_y)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 1:30pm UTC](https://discuss.elastic.co/t/winlogbeat/103293 "2017-10-12T13:30:36Z")

</div>

I got an error when I delete winlogbeat for the first time ... error is : Get-Process : Parameter cannot be processed because the parameter name 'e' is ambiguous. Possible matches include: -Err orAction -ErrorVariabl…

---

## [Problem in Kibana](https://discuss.elastic.co/t/problem-in-kibana/335846)

<div class="topic-metadata">

**Author:** [@Anass.EL](https://discuss.elastic.co/u/Anass.EL)\
**Replies:** 4\
**Last updated:** [June 13, 2023, 10:55am UTC](https://discuss.elastic.co/t/problem-in-kibana/335846 "2023-06-13T10:55:57Z")

</div>

Hello everyone, I was using ELK stack to put in place an internal SOC, all was well there was only a problem with the license but it was resolved, and then suddenky kibana stoped functioning it just gives me the error: …

---

## [Logstash: Translation missing](https://discuss.elastic.co/t/logstash-translation-missing/53028)

<div class="topic-metadata">

**Author:** [@urbanninja](https://discuss.elastic.co/u/urbanninja)\
**Replies:** 4\
**Last updated:** [June 20, 2016, 8:44pm UTC](https://discuss.elastic.co/t/logstash-translation-missing/53028 "2016-06-20T20:44:23Z")

</div>

Hi, I'm new to ELK and have recently got the ELK stack to work on an Amazon Web Services t2.medium instance. My problem is that I can't get Logstash run my configuration file, which is throwing an error. I get thi…

---

## [Deleting data from Elastic](https://discuss.elastic.co/t/deleting-data-from-elastic/74756)

<div class="topic-metadata">

**Author:** [@Luq](https://discuss.elastic.co/u/Luq)\
**Replies:** 8\
**Last updated:** [February 13, 2017, 6:49pm UTC](https://discuss.elastic.co/t/deleting-data-from-elastic/74756 "2017-02-13T18:49:21Z")

</div>

Hi, I just started using Elastic stack and my 80GB system got filled up to 100% with logs. I have Logstash 5.1 receiving syslogs and forwarding them to Elasticsearch 5.1. It filled the space and now I'm trying to fig…

---

## [WMS layer issue in Kibana](https://discuss.elastic.co/t/wms-layer-issue-in-kibana/115239)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 2:06pm UTC](https://discuss.elastic.co/t/wms-layer-issue-in-kibana/115239 "2018-01-12T14:06:09Z")

</div>

Hi there. I encounter a problem when trying to add WMS layers to my visualization. When I use native Kibana viz, it works perfectly. When adding a WMS layer, the original map which Kibana has in background (Openstreet) d…

---

## [Install failure on windows - EPERM: operation not permitted](https://discuss.elastic.co/t/install-failure-on-windows-eperm-operation-not-permitted/66381)

<div class="topic-metadata">

**Author:** [@nlmpij](https://discuss.elastic.co/u/nlmpij)\
**Replies:** 4\
**Last updated:** [November 18, 2016, 7:56pm UTC](https://discuss.elastic.co/t/install-failure-on-windows-eperm-operation-not-permitted/66381 "2016-11-18T19:56:31Z")

</div>

I'm running the 5.0.0.0 version of kibana and elastic search First part of installation (on elasticsearch) was successful. However the kibana part did not succeed. Can someone explain what I'm doing wrong? D:\\Tools\\E…

---

## [Kibana doesn't bind to port 5601](https://discuss.elastic.co/t/kibana-doesnt-bind-to-port-5601/673)

<div class="topic-metadata">

**Author:** [@ChrisMark](https://discuss.elastic.co/u/ChrisMark)\
**Replies:** 1\
**Last updated:** [May 14, 2015, 1:35pm UTC](https://discuss.elastic.co/t/kibana-doesnt-bind-to-port-5601/673 "2015-05-14T13:35:21Z")

</div>

Hi guys, i have met a problem while trying to launch a new ELK server. My problem is that kibana does't seem to bind to port 5601. See what i am seeing: ubuntu@logstashganglia:~$ sudo service kibana4 start \* Startin…

---

## [Logstash output filename timezone problem](https://discuss.elastic.co/t/logstash-output-filename-timezone-problem/69894)

<div class="topic-metadata">

**Author:** [@for\_logstash](https://discuss.elastic.co/u/for_logstash)\
**Replies:** 5\
**Last updated:** [January 4, 2017, 10:23am UTC](https://discuss.elastic.co/t/logstash-output-filename-timezone-problem/69894 "2017-01-04T10:23:33Z")

</div>

Hi I want to output the file using current time just like the config below. output { file { path =\>"/home/test/%{+YYYYMMdd}/nginx\_%{+YYYYMMdd\_HH}.log" } } the filename generated use the UTC timezone time, …

---

## [How to display aggregations results in bar chart with vega](https://discuss.elastic.co/t/how-to-display-aggregations-results-in-bar-chart-with-vega/133409)

<div class="topic-metadata">

**Author:** [@pqt120583](https://discuss.elastic.co/u/pqt120583)\
**Replies:** 6\
**Last updated:** [May 28, 2018, 10:38am UTC](https://discuss.elastic.co/t/how-to-display-aggregations-results-in-bar-chart-with-vega/133409 "2018-05-28T10:38:23Z")

</div>

Currently, I want to display a barchart with y is the number Of customer value and x is the name of bucket field properties ("isActive", "isRegistered", "isBanned") as below query result: "buckets": \[ { "key\_as\_string…

---

## [Kibana search for events with missing fields](https://discuss.elastic.co/t/kibana-search-for-events-with-missing-fields/14303)

<div class="topic-metadata">

**Author:** [@Bruno\_Galindro\_da\_Co](https://discuss.elastic.co/u/Bruno_Galindro_da_Co)\
**Replies:** 1\
**Last updated:** [November 8, 2013, 3:19pm UTC](https://discuss.elastic.co/t/kibana-search-for-events-with-missing-fields/14303 "2013-11-08T15:19:18Z")

</div>

How can I search for events that doesn't have a particular field indexed on it? I need this because I don't setup the null\_value attribute for the fields in my logstash template. So, if the event not comming with…

---

## [Delete a specific type from an index](https://discuss.elastic.co/t/delete-a-specific-type-from-an-index/114499)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 12:21pm UTC](https://discuss.elastic.co/t/delete-a-specific-type-from-an-index/114499 "2018-01-08T12:21:18Z")

</div>

Hey, I have one index named logstash\_ecps-rct\* and i have many types in it. i want to delete the type: mssql from it so i tried devtools: DELETE logstash-ecps\_rct\*/mssql and i got this error No handler found for uri…

---

## [What is the best way to log via tcp?](https://discuss.elastic.co/t/what-is-the-best-way-to-log-via-tcp/90658)

<div class="topic-metadata">

**Author:** [@Pommes9485](https://discuss.elastic.co/u/Pommes9485)\
**Replies:** 2\
**Last updated:** [June 26, 2017, 6:18pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-log-via-tcp/90658 "2017-06-26T18:18:41Z")

</div>

Hey there, I've been playing with the elastic stack for the past month and would like to implement it into my application. The application is written in .NET and up until now I thought, that the communication via tcp …

---

## [How to remove duplicate events in logstash](https://discuss.elastic.co/t/how-to-remove-duplicate-events-in-logstash/67859)

<div class="topic-metadata">

**Author:** [@Priyanka\_Marihal](https://discuss.elastic.co/u/Priyanka_Marihal)\
**Replies:** 2\
**Last updated:** [December 7, 2016, 6:09am UTC](https://discuss.elastic.co/t/how-to-remove-duplicate-events-in-logstash/67859 "2016-12-07T06:09:29Z")

</div>

Hi, I really need your help. I am using filebeat for transferring logs and processing using logstash and storing into elasticsearch as well as in CSV file but i can see duplicate events in both CSV file and Elastic…

---

## [Visualisation don't work even after recreating index templates](https://discuss.elastic.co/t/visualisation-dont-work-even-after-recreating-index-templates/126286)

<div class="topic-metadata">

**Author:** [@geertn444](https://discuss.elastic.co/u/geertn444)\
**Replies:** 4\
**Last updated:** [March 30, 2018, 10:58pm UTC](https://discuss.elastic.co/t/visualisation-dont-work-even-after-recreating-index-templates/126286 "2018-03-30T22:58:24Z")

</div>

Ok, so i got a big problem. I wanted to change some settings in my index template. I have a JSON template definition file which i used to import long time ago, before there was any data and dashboards. At that time this…

---

## [Exact match on log message field](https://discuss.elastic.co/t/exact-match-on-log-message-field/295228)

<div class="topic-metadata">

**Author:** [@melkamar](https://discuss.elastic.co/u/melkamar)\
**Replies:** 5\
**Last updated:** [January 25, 2022, 11:27am UTC](https://discuss.elastic.co/t/exact-match-on-log-message-field/295228 "2022-01-25T11:27:05Z")

</div>

Hi, I am evaluating the Alerts feature in the latest Kibana version. We are collecting logs from our server and I want to set up exact-match alerting rules. When creating an alert and setting up a condition on the messag…

---

## [Can't curl from host to elasticsearch docker](https://discuss.elastic.co/t/cant-curl-from-host-to-elasticsearch-docker/176775)

<div class="topic-metadata">

**Author:** [@Roberto\_Moravia](https://discuss.elastic.co/u/Roberto_Moravia)\
**Replies:** 6\
**Last updated:** [April 18, 2019, 12:22pm UTC](https://discuss.elastic.co/t/cant-curl-from-host-to-elasticsearch-docker/176775 "2019-04-18T12:22:42Z")

</div>

Hy, I'm trying to set up a "lab" dev environment with 3 Elasticsearch nodes and a Kibana in order to practice managing a cluster. However, even with a single node, I can't access the Elasticsearch node from the host ma…

---

## [I cannot see my all log in kibana](https://discuss.elastic.co/t/i-cannot-see-my-all-log-in-kibana/131555)

<div class="topic-metadata">

**Author:** [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\
**Replies:** 6\
**Last updated:** [May 16, 2018, 8:28am UTC](https://discuss.elastic.co/t/i-cannot-see-my-all-log-in-kibana/131555 "2018-05-16T08:28:19Z")

</div>

i have foldre full of log file and my logstash config is : input { file { path =\> "/home/adanic/kilid-logs/\*.log" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } output { elasticsearch { hosts =\> …

---

## [Index.created\_date error](https://discuss.elastic.co/t/index-created-date-error/103897)

<div class="topic-metadata">

**Author:** [@ATS\_Cha](https://discuss.elastic.co/u/ATS_Cha)\
**Replies:** 6\
**Last updated:** [October 13, 2017, 4:13pm UTC](https://discuss.elastic.co/t/index-created-date-error/103897 "2017-10-13T16:13:53Z")

</div>

5649{"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[2whDrQ3\]\[x.x.x.x:9300\]\[indices:admin/create\]"}\],"type":"illegal\_argument\_exception","reason":"unknown setting \[index.creation\_date\] please check…

---

## [Restoring particular index from a snapshot using Curator?](https://discuss.elastic.co/t/restoring-particular-index-from-a-snapshot-using-curator/77502)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 6\
**Last updated:** [March 6, 2017, 1:27pm UTC](https://discuss.elastic.co/t/restoring-particular-index-from-a-snapshot-using-curator/77502 "2017-03-06T13:27:08Z")

</div>

actions: 1: action: restore description: \>- Restore all indices in the most recent snapshot with state SUCCESS. Wait for the restore to complete before continuing. Do not skip the repository …

---

## [How to integrate Kibana Dashboard with some other application in live server](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboard-with-some-other-application-in-live-server/100853)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 1:48pm UTC](https://discuss.elastic.co/t/how-to-integrate-kibana-dashboard-with-some-other-application-in-live-server/100853 "2017-09-19T13:48:19Z")

</div>

i am new to Elastic Stack. I already created a Kibana dashboard in local system. My local dashboard have to integrate with some other application which is already in live server(AWS). The developed application is java ba…

---

## [VM RAM / CPU Requirements](https://discuss.elastic.co/t/vm-ram-cpu-requirements/182714)

<div class="topic-metadata">

**Author:** [@JeremysBrain](https://discuss.elastic.co/u/JeremysBrain)\
**Replies:** 2\
**Last updated:** [May 24, 2019, 8:07pm UTC](https://discuss.elastic.co/t/vm-ram-cpu-requirements/182714 "2019-05-24T20:07:23Z")

</div>

I'm trying to create a basic ELK stack as a proof of concept for logging and monitoring our infrastructure. I'm planning on starting with simple Linux VM's in vSphere, but may move on to Elastic Cloud or some kind of co…

---

## [Visualization of array vs array from a single document](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528)

<div class="topic-metadata">

**Author:** [@Leonid\_Pantaler](https://discuss.elastic.co/u/Leonid_Pantaler)\
**Replies:** 4\
**Last updated:** [September 17, 2020, 1:17pm UTC](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528 "2020-09-17T13:17:40Z")

</div>

Hi, I'm new to kibana and trying to create a line visualization from arrays given in a single document Let's say some document has the following arrays: A: \[55, 99, 57, 8\] B: \[1, 2, 3, 4\] I want B to be my X axis an…

---

## [How to parse nested logs with JSON through logstash](https://discuss.elastic.co/t/how-to-parse-nested-logs-with-json-through-logstash/241781)

<div class="topic-metadata">

**Author:** [@Ranjan\_Bansal](https://discuss.elastic.co/u/Ranjan_Bansal)\
**Replies:** 4\
**Last updated:** [July 22, 2020, 4:59am UTC](https://discuss.elastic.co/t/how-to-parse-nested-logs-with-json-through-logstash/241781 "2020-07-22T04:59:04Z")

</div>

Hello All, I am facing issue while parsing nested JSON in my logs. I checked some of the posts over internet regarding nested JSON but none actually resolved my problem. There might be the case I am making some mistake …

---

## [Elasticsearch service stops rapidly](https://discuss.elastic.co/t/elasticsearch-service-stops-rapidly/67492)

<div class="topic-metadata">

**Author:** [@munam-nauman](https://discuss.elastic.co/u/munam-nauman)\
**Replies:** 4\
**Last updated:** [December 1, 2016, 12:29am UTC](https://discuss.elastic.co/t/elasticsearch-service-stops-rapidly/67492 "2016-12-01T00:29:24Z")

</div>

Hello. My elasticsearch engine stops after every 5-6 hours and I had to restart it again. Can anyone please help me. I am running elasticsearch server in CentOS 7. Thanks in anticipation.

---

## [Word Cloud from elasticsearch API](https://discuss.elastic.co/t/word-cloud-from-elasticsearch-api/94099)

<div class="topic-metadata">

**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\
**Replies:** 1\
**Last updated:** [July 21, 2017, 12:16pm UTC](https://discuss.elastic.co/t/word-cloud-from-elasticsearch-api/94099 "2017-07-21T12:16:07Z")

</div>

I want to create a word cloud from a text field. But i couldn't find a direct API for it. Any suggestion will be helpful.

---

## [Two pipelines for the same file](https://discuss.elastic.co/t/two-pipelines-for-the-same-file/90872)

<div class="topic-metadata">

**Author:** [@hding](https://discuss.elastic.co/u/hding)\
**Replies:** 5\
**Last updated:** [June 28, 2017, 12:51pm UTC](https://discuss.elastic.co/t/two-pipelines-for-the-same-file/90872 "2017-06-28T12:51:57Z")

</div>

My log file contains log lines of two types: "NORMAL" and "ERROR". Each line starts with its type. The logs are stored in the same directory. I have built two pipelines: "pipeline\_1" and "pipeline\_2". How do I con…

---

## [Horizontal bar chart label location](https://discuss.elastic.co/t/horizontal-bar-chart-label-location/215749)

<div class="topic-metadata">

**Author:** [@Fraeco](https://discuss.elastic.co/u/Fraeco)\
**Replies:** 4\
**Last updated:** [January 21, 2020, 2:57pm UTC](https://discuss.elastic.co/t/horizontal-bar-chart-label-location/215749 "2020-01-21T14:57:53Z")

</div>

Is there a way to change the location of the Y-axis label used by the Horizontal Bar Chart? I'm struggling to get a proper layout because of variable lenght labels, and it's eating up a lot of whitespace as well. Examp…

[Previous page](https://discuss.elastic.co/top.md?page=518&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=520&per_page=50&period=all)
