# Top

**URL:** https://discuss.elastic.co/top.md?page=526&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 527

---

## [Can we run elastic search on 100MB](https://discuss.elastic.co/t/can-we-run-elastic-search-on-100mb/37821)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 2\
**Last updated:** [December 23, 2015, 2:30pm UTC](https://discuss.elastic.co/t/can-we-run-elastic-search-on-100mb/37821 "2015-12-23T14:30:33Z")

</div>

Can we run elasticsearch on 100MB. I have read the docs, the recommend is half of your RAM. I have 512 MB RAM but i have other processors are running on it. How does elasticsearch works, does it consumes all the RAM.?

---

## [Spammed by deprication warnings on scripted fields](https://discuss.elastic.co/t/spammed-by-deprication-warnings-on-scripted-fields/286032)

<div class="topic-metadata">

**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\
**Replies:** 5\
**Last updated:** [October 7, 2021, 9:44am UTC](https://discuss.elastic.co/t/spammed-by-deprication-warnings-on-scripted-fields/286032 "2021-10-07T09:44:32Z")

</div>

We' getting spammed in kibana dashboards with following deprecation messages Warning: 299 Elasticsearch-7.15.0-79d65f6e357953a5b3cbcc5e2c7c21073d89aa29 "\[script\]\[1:1019\] Deprecated field \[inline\] used, expected \[source\]…

---

## [Kibana APM App pages are TOO SLOW](https://discuss.elastic.co/t/kibana-apm-app-pages-are-too-slow/220570)

<div class="topic-metadata">

**Author:** [@Bingu\_Shim](https://discuss.elastic.co/u/Bingu_Shim)\
**Replies:** 8\
**Last updated:** [March 18, 2020, 3:13pm UTC](https://discuss.elastic.co/t/kibana-apm-app-pages-are-too-slow/220570 "2020-03-18T15:13:23Z")

</div>

Kibana APM App pages are too slow with only 1000 tps transaction data. Elasticsearch is installed on 10 'n1-highcpu-16' nodes on Google Compute Engine. I captured the screen to see the loading latency. Kibana versi…

---

## [Configuration of kibana with cross cluster search](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186)

<div class="topic-metadata">

**Author:** [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Replies:** 7\
**Last updated:** [February 1, 2018, 10:59am UTC](https://discuss.elastic.co/t/configuration-of-kibana-with-cross-cluster-search/117186 "2018-02-01T10:59:43Z")

</div>

I am switching my multi-cluster installation from using kibana running on a tribe node to using kibana with cross cluster search running on a single standalone elasticsearch node. From the documentation it appears to be…

---

## [How to setup logstash-forwarder to read recursively on a path?](https://discuss.elastic.co/t/how-to-setup-logstash-forwarder-to-read-recursively-on-a-path/29814)

<div class="topic-metadata">

**Author:** [@chaudharikiranp](https://discuss.elastic.co/u/chaudharikiranp)\
**Replies:** 6\
**Last updated:** [November 10, 2015, 4:25pm UTC](https://discuss.elastic.co/t/how-to-setup-logstash-forwarder-to-read-recursively-on-a-path/29814 "2015-11-10T16:25:27Z")

</div>

Please helo me understand how to setup logstash-forwarder to read recursively on a path. For example if the file I want logstash forwarder is build.xml and it can be anywhere in the directory structure "/foo/bar/jobs/…

---

## [Multiple problems with Kibana Dashboards (Metricbeat/Winlogbeat)](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424)

<div class="topic-metadata">

**Author:** [@keyofstarrysky973](https://discuss.elastic.co/u/keyofstarrysky973)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 12:29pm UTC](https://discuss.elastic.co/t/multiple-problems-with-kibana-dashboards-metricbeat-winlogbeat/263424 "2021-02-11T12:29:40Z")

</div>

Hey Everyone. I have followed a basic implementation of ELK Stack (version 7.10) on a Windows 10 machine. Now though, I'm having problems with the visualisation of data from two Beats agents (Metricbeat and Winlogbeat). …

---

## [Pricing Platinum vs Enterprise](https://discuss.elastic.co/t/pricing-platinum-vs-enterprise/297927)

<div class="topic-metadata">

**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\
**Replies:** 3\
**Last updated:** [February 22, 2022, 5:00pm UTC](https://discuss.elastic.co/t/pricing-platinum-vs-enterprise/297927 "2022-02-22T17:00:55Z")

</div>

Hello, I'm a little confused about the pricing model for Elastic Cloud. Specifically, I don't understand why I would ever subscribe to platinum over enterprise. It appears with the inclusion of searchable snapshots in e…

---

## [Empty aggregation buckets](https://discuss.elastic.co/t/empty-aggregation-buckets/35513)

<div class="topic-metadata">

**Author:** [@suhas](https://discuss.elastic.co/u/suhas)\
**Replies:** 3\
**Last updated:** [November 25, 2015, 8:28am UTC](https://discuss.elastic.co/t/empty-aggregation-buckets/35513 "2015-11-25T08:28:59Z")

</div>

Hi, I am just starting to experiment and learn elasticsearch and need a little help. I am using elasticsearch 2.0 with kibana 4.0. I have some json documents that I loaded into elasticsearch and was experimenting with …

---

## [High ram.percent, low heap.percent, low system ram usage. What is ram.percent?](https://discuss.elastic.co/t/high-ram-percent-low-heap-percent-low-system-ram-usage-what-is-ram-percent/106511)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 2\
**Last updated:** [November 6, 2017, 11:56am UTC](https://discuss.elastic.co/t/high-ram-percent-low-heap-percent-low-system-ram-usage-what-is-ram-percent/106511 "2017-11-06T11:56:27Z")

</div>

I had a 5 node cluster that went TU over the weekend (Tits Up). Version: 2.3.1 AWS instance type: m4.2xlarge vm.swappiness is set correctly (according to advice given here: https://www.elastic.co/guide/en/elasticsearc…

---

## [Two node cluster with all primary shards in Node 1 and all replica shards in Node 2](https://discuss.elastic.co/t/two-node-cluster-with-all-primary-shards-in-node-1-and-all-replica-shards-in-node-2/244742)

<div class="topic-metadata">

**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\
**Replies:** 7\
**Last updated:** [August 13, 2020, 1:29pm UTC](https://discuss.elastic.co/t/two-node-cluster-with-all-primary-shards-in-node-1-and-all-replica-shards-in-node-2/244742 "2020-08-13T13:29:32Z")

</div>

Dear all, I have an Elasticsearch cluster composed by two nodes: master node and data node. When I join the second node to the cluster, after some hours, the cluster health becomes green but I can see that all primary s…

---

## [Load old data to ElasticSearch](https://discuss.elastic.co/t/load-old-data-to-elasticsearch/123557)

<div class="topic-metadata">

**Author:** [@Codrin\_Costea](https://discuss.elastic.co/u/Codrin_Costea)\
**Replies:** 6\
**Last updated:** [March 12, 2018, 2:47pm UTC](https://discuss.elastic.co/t/load-old-data-to-elasticsearch/123557 "2018-03-12T14:47:29Z")

</div>

Hello ! I am new to Elastic Search and I would need some help in one problem. I try to load multiple log files from my proxy to Elastic Search, through logstast. The steps that I am following are: Create the .conf fil…

---

## [Illegal dynamic template parameter: \[match\_mapping\] Error](https://discuss.elastic.co/t/illegal-dynamic-template-parameter-match-mapping-error/86268)

<div class="topic-metadata">

**Author:** [@HritikJain](https://discuss.elastic.co/u/HritikJain)\
**Replies:** 0\
**Last updated:** [May 18, 2017, 1:23pm UTC](https://discuss.elastic.co/t/illegal-dynamic-template-parameter-match-mapping-error/86268 "2017-05-18T13:23:29Z")

</div>

Hello Team, I am new with Elasticsearch, So this could be know for you. I have integrated the Elasticsearch with Magento2, And the Indexing is done beautifully, But I again tried 2nd time to reindex, it does not succ…

---

## [Super confused about multiple indices with a single alias](https://discuss.elastic.co/t/super-confused-about-multiple-indices-with-a-single-alias/42176)

<div class="topic-metadata">

**Author:** [@patrick99e99](https://discuss.elastic.co/u/patrick99e99)\
**Replies:** 3\
**Last updated:** [February 18, 2016, 8:31pm UTC](https://discuss.elastic.co/t/super-confused-about-multiple-indices-with-a-single-alias/42176 "2016-02-18T20:31:48Z")

</div>

I have read the documentation that says: An alias can point to multiple indices, so we need to remove the alias from the old index at the same time as we add it to the new index. The change needs to be atomic, which me…

---

## [Kibana - Apache proxy reverse](https://discuss.elastic.co/t/kibana-apache-proxy-reverse/89291)

<div class="topic-metadata">

**Author:** [@amruthapbhat](https://discuss.elastic.co/u/amruthapbhat)\
**Replies:** 5\
**Last updated:** [June 16, 2017, 4:11am UTC](https://discuss.elastic.co/t/kibana-apache-proxy-reverse/89291 "2017-06-16T04:11:28Z")

</div>

Hi, I have used X-pack for ES and kibana and using SSL enabling with apache. The configs are as below Apache config: ServerName my-example.com ServerAlias my-example.com Redirect permanent / https://my-examp…

---

## [RHEL6 ICMP ipv6 error at startup](https://discuss.elastic.co/t/rhel6-icmp-ipv6-error-at-startup/84384)

<div class="topic-metadata">

**Author:** [@lnm](https://discuss.elastic.co/u/lnm)\
**Replies:** 6\
**Last updated:** [May 10, 2017, 12:02pm UTC](https://discuss.elastic.co/t/rhel6-icmp-ipv6-error-at-startup/84384 "2017-05-10T12:02:13Z")

</div>

Hi, I'm running into issues when trying to do an ICMP ping with heartbeat to a different server. I'm getting some error messages on startup: 2017-05-03T10:27:26+02:00 INFO Select (active) monitor icmp 2017-05-03T1…

---

## [Multi match query with non fully analyzed fields](https://discuss.elastic.co/t/multi-match-query-with-non-fully-analyzed-fields/57181)

<div class="topic-metadata">

**Author:** [@ugolas](https://discuss.elastic.co/u/ugolas)\
**Replies:** 8\
**Last updated:** [August 10, 2016, 5:27am UTC](https://discuss.elastic.co/t/multi-match-query-with-non-fully-analyzed-fields/57181 "2016-08-10T05:27:19Z")

</div>

Hi, We need to implement a free text search, so that a user can search a string and we need to return the docs which have this string in one of multiple fields.. So I've written a multi match, cross fields query on t…

---

## [Cluster reroute and potential data loss](https://discuss.elastic.co/t/cluster-reroute-and-potential-data-loss/15573)

<div class="topic-metadata">

**Author:** [@Mark\_Conlin](https://discuss.elastic.co/u/Mark_Conlin)\
**Replies:** 3\
**Last updated:** [May 6, 2014, 1:40pm UTC](https://discuss.elastic.co/t/cluster-reroute-and-potential-data-loss/15573 "2014-05-06T13:40:17Z")

</div>

I was reading some ES docoand stumbled upon this part of the Cluster Reroute API: allocate: "\*Allocate an unassigned shard to a node. .... It also accepts the "allow primary" flag to explicitly specify that i…

---

## [How to isolate elastic search node from other nodes?](https://discuss.elastic.co/t/how-to-isolate-elastic-search-node-from-other-nodes/7638)

<div class="topic-metadata">

**Author:** [@Michal\_Domagala\_2](https://discuss.elastic.co/u/Michal_Domagala_2)\
**Replies:** 7\
**Last updated:** [October 5, 2012, 6:36pm UTC](https://discuss.elastic.co/t/how-to-isolate-elastic-search-node-from-other-nodes/7638 "2012-10-05T18:36:59Z")

</div>

Hello, I have some integration test of my application. The integration test starts own elastic search instance by \*node = nodeBuilder().settings(settings).local(true).node();\* and do its job. However, I have oth…

---

## [Dynamic index names](https://discuss.elastic.co/t/dynamic-index-names/281816)

<div class="topic-metadata">

**Author:** [@rudo1](https://discuss.elastic.co/u/rudo1)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 4:32am UTC](https://discuss.elastic.co/t/dynamic-index-names/281816 "2021-08-19T04:32:20Z")

</div>

Hi. I'm facing a problem with creating dynamic index names. I have few if statemnts like shown below to add new fields, but I can't see anything in kibana when I try to name index dynamically based on its value. filte…

---

## [How to load big table to es with logstash](https://discuss.elastic.co/t/how-to-load-big-table-to-es-with-logstash/99502)

<div class="topic-metadata">

**Author:** [@gaobo\_yu](https://discuss.elastic.co/u/gaobo_yu)\
**Replies:** 5\
**Last updated:** [September 7, 2017, 5:21am UTC](https://discuss.elastic.co/t/how-to-load-big-table-to-es-with-logstash/99502 "2017-09-07T05:21:26Z")

</div>

Hi : I hava a mysql table named “orders” with ten million records ,I am trying to import all the data to Es with the plugin logstash-input-jdbc, but it seems cost a long time to finish this task, I have optimized all th…

---

## [Grok filter is not working (custom pattern)](https://discuss.elastic.co/t/grok-filter-is-not-working-custom-pattern/82017)

<div class="topic-metadata">

**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\
**Replies:** 5\
**Last updated:** [April 12, 2017, 6:21pm UTC](https://discuss.elastic.co/t/grok-filter-is-not-working-custom-pattern/82017 "2017-04-12T18:21:29Z")

</div>

I've a log file (http://codepad.org/vAMFhhR2), and I want to extract a specific number out of it (line 18) I wrote a custom pattern grok filter, tested it on http://grokdebug.herokuapp.com/, it works fine and extracts my…

---

## [Colored bubble chart in Kibana](https://discuss.elastic.co/t/colored-bubble-chart-in-kibana/57192)

<div class="topic-metadata">

**Author:** [@Meenakshi07](https://discuss.elastic.co/u/Meenakshi07)\
**Replies:** 3\
**Last updated:** [August 8, 2016, 1:17pm UTC](https://discuss.elastic.co/t/colored-bubble-chart-in-kibana/57192 "2016-08-08T13:17:59Z")

</div>

Is it possible to generate a colored bubble chart which has 4 quadrants in Kibana? X axis would range from 0 to 10 and need to split chart at 5. Y axis would range from 0 to 110 and need to split the chart at 50. Please …

---

## [Using result of one subquery in another subquery](https://discuss.elastic.co/t/using-result-of-one-subquery-in-another-subquery/7241)

<div class="topic-metadata">

**Author:** [@bgossey](https://discuss.elastic.co/u/bgossey)\
**Replies:** 3\
**Last updated:** [October 15, 2012, 7:16am UTC](https://discuss.elastic.co/t/using-result-of-one-subquery-in-another-subquery/7241 "2012-10-15T07:16:31Z")

</div>

Hey, Is the following query possible with elastic search: I have two types: company and category - Company is a type containing fields like name, phone, keywords, location… and also a special field called categ…

---

## [.NET Agent is not capturing / sending spans to APM/ Elastic](https://discuss.elastic.co/t/net-agent-is-not-capturing-sending-spans-to-apm-elastic/314319)

<div class="topic-metadata">

**Author:** [@dwmri](https://discuss.elastic.co/u/dwmri)\
**Replies:** 8\
**Last updated:** [October 10, 2022, 6:32pm UTC](https://discuss.elastic.co/t/net-agent-is-not-capturing-sending-spans-to-apm-elastic/314319 "2022-10-10T18:32:08Z")

</div>

Hi, We are trying to capture tracing data from a .NET application into APM to help pinpoint performance problems, we can see HTTP requests listed under the application in Kibana, with URL and times, however we cannot se…

---

## [Filebeat TTL value: is it seconds? milliseconds?](https://discuss.elastic.co/t/filebeat-ttl-value-is-it-seconds-milliseconds/138646)

<div class="topic-metadata">

**Author:** [@Precision](https://discuss.elastic.co/u/Precision)\
**Replies:** 3\
**Last updated:** [July 26, 2018, 10:25am UTC](https://discuss.elastic.co/t/filebeat-ttl-value-is-it-seconds-milliseconds/138646 "2018-07-26T10:25:54Z")

</div>

Is the "ttl" value in seconds or milliseconds? https://www.elastic.co/guide/en/beats/filebeat/master/logstash-output.html#\_literal\_ttl\_literal The documentation does not say anything about it.

---

## [Kill error](https://discuss.elastic.co/t/kill-error/262786)

<div class="topic-metadata">

**Author:** [@peyman\_peymani](https://discuss.elastic.co/u/peyman_peymani)\
**Replies:** 4\
**Last updated:** [February 2, 2021, 6:30am UTC](https://discuss.elastic.co/t/kill-error/262786 "2021-02-02T06:30:10Z")

</div>

Hi dear our server after works 6 or 7 hours we have kill in process ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendo …

---

## [Unable to extract Kibana 6.0.0 zip format for Windows](https://discuss.elastic.co/t/unable-to-extract-kibana-6-0-0-zip-format-for-windows/130524)

<div class="topic-metadata">

**Author:** [@amits\_h](https://discuss.elastic.co/u/amits_h)\
**Replies:** 4\
**Last updated:** [May 7, 2018, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-extract-kibana-6-0-0-zip-format-for-windows/130524 "2018-05-07T13:44:28Z")

</div>

Hi all, I am trying to download the Kibana 6.0.0 zip setup for Windows but every time I download it, there is some error while extracting the archive. I have tried multiple times, from different Wifi and open internet n…

---

## [Authentication failed in APM Server in 7.17.4 but works in 8.2.0](https://discuss.elastic.co/t/authentication-failed-in-apm-server-in-7-17-4-but-works-in-8-2-0/307469)

<div class="topic-metadata">

**Author:** [@User28](https://discuss.elastic.co/u/User28)\
**Replies:** 6\
**Last updated:** [June 27, 2022, 5:07am UTC](https://discuss.elastic.co/t/authentication-failed-in-apm-server-in-7-17-4-but-works-in-8-2-0/307469 "2022-06-27T05:07:03Z")

</div>

Kibana version: 7.17.4 Elasticsearch version: 7.17.4 APM Server version: 7.17.4 APM Agent language and version: Java APM agent 1.30.0 Browser version: Chrome Original install method (e.g. download page, yum, deb,…

---

## [Keycloak Elasticsearch/Kibana Configuration](https://discuss.elastic.co/t/keycloak-elasticsearch-kibana-configuration/299624)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 8\
**Last updated:** [March 16, 2022, 7:42am UTC](https://discuss.elastic.co/t/keycloak-elasticsearch-kibana-configuration/299624 "2022-03-16T07:42:27Z")

</div>

Hi, I'm having trouble configuring Kibana and Keycloak to use SSO. I am getting an error like the one below: Failed to authenticate user with OpenID Connect (Caused by ElasticsearchSecurityException\[Failed to exchange …

---

## [Add mapping to unmapped field](https://discuss.elastic.co/t/add-mapping-to-unmapped-field/242369)

<div class="topic-metadata">

**Author:** [@JulienCarnec](https://discuss.elastic.co/u/JulienCarnec)\
**Replies:** 2\
**Last updated:** [July 23, 2020, 8:45pm UTC](https://discuss.elastic.co/t/add-mapping-to-unmapped-field/242369 "2020-07-23T20:45:16Z")

</div>

Is there a way to store an unmapped field in documents, and then later on, create a mapping for this unmapped field to have it searchable, without having to reindex all my docs in a new index? Here is what I do: 1- cre…

---

## [It seems that require\_field\_match highlight option does not work](https://discuss.elastic.co/t/it-seems-that-require-field-match-highlight-option-does-not-work/255051)

<div class="topic-metadata">

**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\
**Replies:** 6\
**Last updated:** [November 12, 2020, 7:58am UTC](https://discuss.elastic.co/t/it-seems-that-require-field-match-highlight-option-does-not-work/255051 "2020-11-12T07:58:59Z")

</div>

Maybe I've missed something but it seems to me that highlight option require\_field\_match does not work correctly (ES 7.9.3 but I tested it with older versions also). Very simple example follows: Let's have following in…

---

## [Elasticsearch 6.x Join behaviour](https://discuss.elastic.co/t/elasticsearch-6-x-join-behaviour/105086)

<div class="topic-metadata">

**Author:** [@plexaikm](https://discuss.elastic.co/u/plexaikm)\
**Replies:** 5\
**Last updated:** [October 29, 2017, 11:12am UTC](https://discuss.elastic.co/t/elasticsearch-6-x-join-behaviour/105086 "2017-10-29T11:12:19Z")

</div>

Hello Reading the v6.x documentation, preparing for migration from 2.4/5.5 to 6.x later on, In some indices we currently have multiple types (already something to change) and parent-child relations between different t…

---

## [Parse Json Array to flat object](https://discuss.elastic.co/t/parse-json-array-to-flat-object/104544)

<div class="topic-metadata">

**Author:** [@abudaev](https://discuss.elastic.co/u/abudaev)\
**Replies:** 3\
**Last updated:** [October 19, 2017, 5:23pm UTC](https://discuss.elastic.co/t/parse-json-array-to-flat-object/104544 "2017-10-19T17:23:16Z")

</div>

Hello. I have a log string like this: 2017-08-18 14:26:07.757 \[pool-18-thread-4\] INFO r.s.c.i.s.w.WebSocketServerSessionHandler - SEND \[63426612-2bbd-4e34-97c2-6bcc374fd654\] OnItemAdded: {"item": {"id": "3ca48ea5-4dd2…

---

## [Distributed Tracing logging and Integrating with Kibana](https://discuss.elastic.co/t/distributed-tracing-logging-and-integrating-with-kibana/17030)

<div class="topic-metadata">

**Author:** [@Bhavesh\_Mistry](https://discuss.elastic.co/u/Bhavesh_Mistry)\
**Replies:** 0\
**Last updated:** [April 15, 2014, 5:16pm UTC](https://discuss.elastic.co/t/distributed-tracing-logging-and-integrating-with-kibana/17030 "2014-04-15T17:16:36Z")

</div>

I have implemented a Distributed Transaction Logging library with Tree like Structure as mention in Google Dapper( http://research.google.com/pubs/pub36356.html) and eBay CAL Transaction Logging Framework( http://…

---

## [Filebeat white/black list for container logs in kubernetes](https://discuss.elastic.co/t/filebeat-white-black-list-for-container-logs-in-kubernetes/230854)

<div class="topic-metadata">

**Author:** [@Vahid\_Mouasvi](https://discuss.elastic.co/u/Vahid_Mouasvi)\
**Replies:** 7\
**Last updated:** [May 12, 2020, 8:58am UTC](https://discuss.elastic.co/t/filebeat-white-black-list-for-container-logs-in-kubernetes/230854 "2020-05-12T08:58:42Z")

</div>

Hi, I have a kubernetes cluster with 3 nodes and I installed and uped filebeat 7.6 for shipping logs from our containers from the cluster with this link configuration. I wanna exclude some containers or pods from loggin…

---

## [Kafka output failed in 6.4.0](https://discuss.elastic.co/t/kafka-output-failed-in-6-4-0/145868)

<div class="topic-metadata">

**Author:** [@shiloong](https://discuss.elastic.co/u/shiloong)\
**Replies:** 4\
**Last updated:** [October 5, 2018, 7:29pm UTC](https://discuss.elastic.co/t/kafka-output-failed-in-6-4-0/145868 "2018-10-05T19:29:34Z")

</div>

In logstash 6.4.0 on MacOS and oracle jdk 1.8.0\_181-b13，use the default setting for kafka output plugin start failed \[logstash.outputs.kafka \] Unable to create Kafka producer from given configuration {:kafka\_error\_messa…

---

## [Kibana error: security\_exception: \[security\_exception\] Reason: unable to authenticate with provided credentials and anonymous access is not allowed for this request](https://discuss.elastic.co/t/kibana-error-security-exception-security-exception-reason-unable-to-authenticate-with-provided-credentials-and-anonymous-access-is-not-allowed-for-this-request/344243)

<div class="topic-metadata">

**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\
**Replies:** 1\
**Last updated:** [October 5, 2023, 3:26pm UTC](https://discuss.elastic.co/t/kibana-error-security-exception-security-exception-reason-unable-to-authenticate-with-provided-credentials-and-anonymous-access-is-not-allowed-for-this-request/344243 "2023-10-05T15:26:00Z")

</div>

Hi. I upgraded the Kibana from 7.17 to 8.5.3 and got some corrupt indices. then I used these instructions and deleted .kibana and . monitoring indices. Resolve Migration Failures But I also deleted .security\_7. This …

---

## [Getting error {“ok”:false,”message”:”backend closed connection”} when POST request](https://discuss.elastic.co/t/getting-error-ok-false-message-backend-closed-connection-when-post-request/319219)

<div class="topic-metadata">

**Author:** [@StevenMartins](https://discuss.elastic.co/u/StevenMartins)\
**Replies:** 5\
**Last updated:** [November 24, 2022, 7:57am UTC](https://discuss.elastic.co/t/getting-error-ok-false-message-backend-closed-connection-when-post-request/319219 "2022-11-24T07:57:22Z")

</div>

Hi, After a few minutes (5/10min) of POST requests, I get this error : {“ok”:false,”message”:”backend closed connection”} in my console but I do not see error in App Search API logs... How is it possible ? What can be …

---

## [APM Agent Queue is ful](https://discuss.elastic.co/t/apm-agent-queue-is-ful/195670)

<div class="topic-metadata">

**Author:** [@vikassharma123](https://discuss.elastic.co/u/vikassharma123)\
**Replies:** 1\
**Last updated:** [August 19, 2019, 5:21am UTC](https://discuss.elastic.co/t/apm-agent-queue-is-ful/195670 "2019-08-19T05:21:49Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: APM Agent get Queue …

---

## [Cannot instantiate the type TransportClient](https://discuss.elastic.co/t/cannot-instantiate-the-type-transportclient/141725)

<div class="topic-metadata">

**Author:** [@BleedCode](https://discuss.elastic.co/u/BleedCode)\
**Replies:** 7\
**Last updated:** [July 26, 2018, 12:03pm UTC](https://discuss.elastic.co/t/cannot-instantiate-the-type-transportclient/141725 "2018-07-26T12:03:03Z")

</div>

For fetching data from multiple indices, i am trying to use SearchResponse client. But while creating transportClient i get instantiate error. What wrong i am doing? Following is my code snippet: public void setup() t…

---

## [Input Filtering on fields or bpf filter before sending to elastic](https://discuss.elastic.co/t/input-filtering-on-fields-or-bpf-filter-before-sending-to-elastic/26716)

<div class="topic-metadata">

**Author:** [@Alexandre\_Derumier](https://discuss.elastic.co/u/Alexandre_Derumier)\
**Replies:** 7\
**Last updated:** [September 25, 2015, 10:11am UTC](https://discuss.elastic.co/t/input-filtering-on-fields-or-bpf-filter-before-sending-to-elastic/26716 "2015-09-25T10:11:49Z")

</div>

Hi, I would like to known if it's possible to filter data in packetbeat, based on protocol fields. For example, I would like to exclude some ips from client\_ip or host from http.request\_headers.host. Also, is it poss…

---

## [Unable to delete index](https://discuss.elastic.co/t/unable-to-delete-index/128596)

<div class="topic-metadata">

**Author:** [@tronyx](https://discuss.elastic.co/u/tronyx)\
**Replies:** 4\
**Last updated:** [April 18, 2018, 9:37pm UTC](https://discuss.elastic.co/t/unable-to-delete-index/128596 "2018-04-18T21:37:32Z")

</div>

Experiencing an issue with two indices that were somehow marked as read-only and now I'm unable to remove that restriction. Here is what I have tried and the result: ~\]# curl -XPOST 'http://10.48.184.94:9200/lvs-logstas…

---

## [How do i ignore mapping conflict?](https://discuss.elastic.co/t/how-do-i-ignore-mapping-conflict/127523)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 4\
**Last updated:** [April 10, 2018, 8:46pm UTC](https://discuss.elastic.co/t/how-do-i-ignore-mapping-conflict/127523 "2018-04-10T20:46:23Z")

</div>

I have some fields on which i do not perform any searching or aggregations and i dont care about that fields either? how do i ignore mapping conflicts while forwarding data? Also there is one field which is object Th…

---

## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 6,](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-6/177387)

<div class="topic-metadata">

**Author:** [@Apurva\_Ganthi](https://discuss.elastic.co/u/Apurva_Ganthi)\
**Replies:** 3\
**Last updated:** [April 18, 2019, 1:03pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of-at-line-6/177387 "2019-04-18T13:03:43Z")

</div>

Hello, My code for the logstash-simple.conf file is as follows:- input { file { type =\> "mylog" path =\> "C:\\Softwares\\ELK\\custom-\*.log" mode =\> "tail" start\_ position =\> "beginning" } } filter { if (\[t…

---

## [Need help with parsing json fields](https://discuss.elastic.co/t/need-help-with-parsing-json-fields/172686)

<div class="topic-metadata">

**Author:** [@Adrian\_Hove](https://discuss.elastic.co/u/Adrian_Hove)\
**Replies:** 3\
**Last updated:** [March 18, 2019, 4:47pm UTC](https://discuss.elastic.co/t/need-help-with-parsing-json-fields/172686 "2019-03-18T16:47:17Z")

</div>

I have a sweet log I am trying to parse into JSON. \[2019-03-16 00:00:00\] production.INFO {"timestamp":1552694400,"execution\_time":0.0272369384765625} my default logstash config input { beats { port =\> 5044 } }…

---

## [Retrieve the last Documents from ElasticSearch in Ascending Order](https://discuss.elastic.co/t/retrieve-the-last-documents-from-elasticsearch-in-ascending-order/169137)

<div class="topic-metadata">

**Author:** [@donnadulcinea](https://discuss.elastic.co/u/donnadulcinea)\
**Replies:** 2\
**Last updated:** [February 20, 2019, 10:43am UTC](https://discuss.elastic.co/t/retrieve-the-last-documents-from-elasticsearch-in-ascending-order/169137 "2019-02-20T10:43:43Z")

</div>

I want to retrieve the last 3 documents from a set taking into account that the desired elements order is given by a field named created . To do that I'm exploiting the combination of sort + order mechanism, as also po…

---

## [No settings to update](https://discuss.elastic.co/t/no-settings-to-update/85507)

<div class="topic-metadata">

**Author:** [@Neal\_Shan](https://discuss.elastic.co/u/Neal_Shan)\
**Replies:** 1\
**Last updated:** [May 15, 2017, 1:14am UTC](https://discuss.elastic.co/t/no-settings-to-update/85507 "2017-05-15T01:14:31Z")

</div>

Hi Guys, I was using Elasticsearch 2.3.5, and trying to update settings but I got this. Reference link: https://www.elastic.co/guide/en/elasticsearch/reference/1.4/indices-update-settings.html#update-settings-analysis …

---

## [Kibana JSON input to exclude data in one chart](https://discuss.elastic.co/t/kibana-json-input-to-exclude-data-in-one-chart/178800)

<div class="topic-metadata">

**Author:** [@landy](https://discuss.elastic.co/u/landy)\
**Replies:** 8\
**Last updated:** [April 30, 2019, 7:45am UTC](https://discuss.elastic.co/t/kibana-json-input-to-exclude-data-in-one-chart/178800 "2019-04-30T07:45:48Z")

</div>

Hello! I am using ES, Kibana version - 6.6.1 I want to exclude 'Men's clothing' & 'Women's clothing' data in the attached chart. Is it possible to use JSON input to realize this? Is there any way to exclude certain dat…

---

## [Could not get resource 'https://plugins.gradle.org/m2/com/gradle/build-scan/com.gradle.build-scan.gradle.plugin/1.13.2/com.gradle.build-scan.gradle.plugin-1.13.2.jar'](https://discuss.elastic.co/t/could-not-get-resource-https-plugins-gradle-org-m2-com-gradle-build-scan-com-gradle-build-scan-gradle-plugin-1-13-2-com-gradle-build-scan-gradle-plugin-1-13-2-jar/140074)

<div class="topic-metadata">

**Author:** [@wonho\_choi](https://discuss.elastic.co/u/wonho_choi)\
**Replies:** 5\
**Last updated:** [July 18, 2018, 2:43pm UTC](https://discuss.elastic.co/t/could-not-get-resource-https-plugins-gradle-org-m2-com-gradle-build-scan-com-gradle-build-scan-gradle-plugin-1-13-2-com-gradle-build-scan-gradle-plugin-1-13-2-jar/140074 "2018-07-18T14:43:36Z")

</div>

I've run ES master branch (7.0.0-Alpha) with gradle run But It showed Error resolving plugin \[id: 'com.gradle.build-scan', version: '1.13.2'\] Could not resolve all dependencies for configuration 'detachedConfiguratio…

---

## [Number formatting in Y axis](https://discuss.elastic.co/t/number-formatting-in-y-axis/1793)

<div class="topic-metadata">

**Author:** [@anoban](https://discuss.elastic.co/u/anoban)\
**Replies:** 3\
**Last updated:** [June 25, 2015, 1:35am UTC](https://discuss.elastic.co/t/number-formatting-in-y-axis/1793 "2015-06-25T01:35:54Z")

</div>

We need a feature to force a certain amount of decimal places on the Y axis. ie I have a value that hovers between 150.2134 and 150.2145. Kibana shows 150.2 ... not really useful \[smile\] I'd rather have a big 150. show…

[Previous page](https://discuss.elastic.co/top.md?page=525&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=527&per_page=50&period=all)
