# Top **URL:** https://discuss.elastic.co/top.md?page=537&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 538 --- ## [Security policy in 2.0 breaks JConsole and VisualVM](https://discuss.elastic.co/t/security-policy-in-2-0-breaks-jconsole-and-visualvm/32861)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 7\ **Last updated:** [October 24, 2015, 3:07am UTC](https://discuss.elastic.co/t/security-policy-in-2-0-breaks-jconsole-and-visualvm/32861 "2015-10-24T03:07:23Z")
Hi, I'm not sure if anyone's aware of this, but the new security manager/policy in ES 2.0 completely breaks JConsole and VisualVM. By "breaks" I mean that one cannot use them to connect to ES. This worked before the … --- ## [Filebeat adds escape character to message field. How to disable that?](https://discuss.elastic.co/t/filebeat-adds-escape-character-to-message-field-how-to-disable-that/84908)
**Author:** [@tskeng](https://discuss.elastic.co/u/tskeng)\ **Replies:** 2\ **Last updated:** [May 9, 2017, 9:51am UTC](https://discuss.elastic.co/t/filebeat-adds-escape-character-to-message-field-how-to-disable-that/84908 "2017-05-09T09:51:13Z")
Hi, I'm using filebeat 5.3.0 and reading logs and send to a Kafka cluster. The original message is something like this: \`"{"timestamp":"2017-05-04T17:03:45.020159+0800","flow\_id":1692358547391513,"event\_type":"flow… --- ## [ssl.NotSslRecordException](https://discuss.elastic.co/t/ssl-notsslrecordexception/183655)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 6\ **Last updated:** [June 3, 2019, 2:53am UTC](https://discuss.elastic.co/t/ssl-notsslrecordexception/183655 "2019-06-03T02:53:46Z")
I am using elasticsearch version 7.1.0 and trying to connect three nodes with security function, but I receive the following error. It works well locally, but it's a problem at kubernetes. io.netty.handler.codec.Decode… --- ## [Kibana 7.8.0 ( xpack login page customization )](https://discuss.elastic.co/t/kibana-7-8-0-xpack-login-page-customization/242155)
**Author:** [@Archangel](https://discuss.elastic.co/u/Archangel)\ **Replies:** 8\ **Last updated:** [August 13, 2020, 3:52pm UTC](https://discuss.elastic.co/t/kibana-7-8-0-xpack-login-page-customization/242155 "2020-08-13T15:52:10Z")
Has anybody tried to customize the login page? I tried pretty much everything imaginable, I did rm optimize/bundles but any changes I make doesn't seem to reflect when I restart kibana... I tried to change the login tex… --- ## [Nested multi\_match](https://discuss.elastic.co/t/nested-multi-match/56370)
**Author:** [@saybb](https://discuss.elastic.co/u/saybb)\ **Replies:** 4\ **Last updated:** [August 5, 2016, 8:30am UTC](https://discuss.elastic.co/t/nested-multi-match/56370 "2016-08-05T08:30:26Z")
multi\_match query: how it works with nested type? With type object it works, but document-material is 1:n relations, so i cannot use type object "MATERIAL": { "type": "nested", "pr… --- ## [Geo distance sort](https://discuss.elastic.co/t/geo-distance-sort/13737)
**Author:** [@Iker\_Ibarguren](https://discuss.elastic.co/u/Iker_Ibarguren)\ **Replies:** 4\ **Last updated:** [September 25, 2013, 6:56am UTC](https://discuss.elastic.co/t/geo-distance-sort/13737 "2013-09-25T06:56:35Z")
Hi! I´m working with 80.000 records but only 2000 of them have location. This is my query: $q = new \\Elastica\\Query\\Builder('{ "from" : 0, "size" : 100, "query":{"match\_all" : { }}, … --- ## [Canvas : Howto display a dynamic Canvas in a website?](https://discuss.elastic.co/t/canvas-howto-display-a-dynamic-canvas-in-a-website/181547)
**Author:** [@nsonnier](https://discuss.elastic.co/u/nsonnier)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 1:30pm UTC](https://discuss.elastic.co/t/canvas-howto-display-a-dynamic-canvas-in-a-website/181547 "2019-05-20T13:30:46Z")
Hello Community, I'm a new Elastic / Kibana / Canvas user. Is it possible to display a dynamic Canvas in a WebSite iFrame / Div ? I already search in documentation / tutorials but didnt't find a response :frowning: T… --- ## [Filebeat 6.2.4 running as root on Red Hat Linux](https://discuss.elastic.co/t/filebeat-6-2-4-running-as-root-on-red-hat-linux/132067)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 3\ **Last updated:** [May 22, 2018, 7:13am UTC](https://discuss.elastic.co/t/filebeat-6-2-4-running-as-root-on-red-hat-linux/132067 "2018-05-22T07:13:29Z")
Hi. Somehow Filebat insists on running as root, and not as filebeat user. Should not Filebeat run as the filebeat user? My setup: Linux: Red Hat Enterprise Linux Server release 6.9 Java: openjdk version "1.8.0\_161" … --- ## [Stop words filter not working](https://discuss.elastic.co/t/stop-words-filter-not-working/10530)
**Author:** [@Haensel](https://discuss.elastic.co/u/Haensel)\ **Replies:** 8\ **Last updated:** [January 29, 2013, 10:03pm UTC](https://discuss.elastic.co/t/stop-words-filter-not-working/10530 "2013-01-29T22:03:05Z")
Hi, I have the following problem: I have a list of company names but want to exclude the "form of the organization" (like Limited, LLC etc.) by using my own stopwords filter. So far so good, but I can't get it to … --- ## [Unknown secure setting \[secure\_bind\_password\] please check that any required plugins are installed](https://discuss.elastic.co/t/unknown-secure-setting-secure-bind-password-please-check-that-any-required-plugins-are-installed/199329)
**Author:** [@sfgroups1](https://discuss.elastic.co/u/sfgroups1)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 1:54pm UTC](https://discuss.elastic.co/t/unknown-secure-setting-secure-bind-password-please-check-that-any-required-plugins-are-installed/199329 "2019-09-13T13:54:09Z")
Hi, when I deploy below in my kubernetes cluster 1.15.3. POD is failing with secure setting error message. How to fix this error? apiVersion: v1 kind: Secret metadata: name: secure-bind-password type: Opaque data: … --- ## [Keyword analyzer but allow redundant white spaces](https://discuss.elastic.co/t/keyword-analyzer-but-allow-redundant-white-spaces/110441)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [December 18, 2017, 4:34pm UTC](https://discuss.elastic.co/t/keyword-analyzer-but-allow-redundant-white-spaces/110441 "2017-12-18T16:34:36Z")
My requirement is, that for example POST /index/type/1 { "title": "Hello Elasticsearch" } I want to return the doc with exactly matched title but allowing redundant white spaces between words. For example, Searchi… --- ## [Parse csv log file using filebeat](https://discuss.elastic.co/t/parse-csv-log-file-using-filebeat/171422)
**Author:** [@Tayyab](https://discuss.elastic.co/u/Tayyab)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 1:36pm UTC](https://discuss.elastic.co/t/parse-csv-log-file-using-filebeat/171422 "2019-03-11T13:36:57Z")
I have a log file which is in csv format and I need it to parse to elastic search using filebeat with the fields like IP, Client.OS, url, datafield etc in that line of csv file. I have read that I have to use logstash t… --- ## [Kibana - URL filtering](https://discuss.elastic.co/t/kibana-url-filtering/157861)
**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\ **Replies:** 2\ **Last updated:** [December 10, 2018, 11:36pm UTC](https://discuss.elastic.co/t/kibana-url-filtering/157861 "2018-12-10T23:36:58Z")
Hi all, I am using URL links below to browse through several dashboards. On a main dashboard I define a "customer id" which I pin to the global filter. When I click on a link without any filter but just another dashboar… --- ## [How to query logstash elasticsearch API to get all data (Im only seeing data fields, not the actual data)](https://discuss.elastic.co/t/how-to-query-logstash-elasticsearch-api-to-get-all-data-im-only-seeing-data-fields-not-the-actual-data/89080)
**Author:** [@Garrett\_Huff](https://discuss.elastic.co/u/Garrett_Huff)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 6:47pm UTC](https://discuss.elastic.co/t/how-to-query-logstash-elasticsearch-api-to-get-all-data-im-only-seeing-data-fields-not-the-actual-data/89080 "2017-06-13T18:47:35Z")
Hello, im trying to query the elasticsearch index that contains all of my logstash data (http://localhost:9200/logstash-\*) but for some reason im not receiving the actual data documents, only the data field names and typ… --- ## [Rejecting mapping update to \[.kibana\] ... \[indices:admin/create\]](https://discuss.elastic.co/t/rejecting-mapping-update-to-kibana-indices-admin-create/166794)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 8\ **Last updated:** [February 21, 2019, 10:36pm UTC](https://discuss.elastic.co/t/rejecting-mapping-update-to-kibana-indices-admin-create/166794 "2019-02-21T22:36:09Z")
We are installing Kibana in our org and we are seeing the following error message: That appears when clicking on the "No" button you can see in the screen (but it's appearing in other more important parts of the UI). … --- ## [Kibana 5.3 xpack reporting fails](https://discuss.elastic.co/t/kibana-5-3-xpack-reporting-fails/83924)
**Author:** [@kribor](https://discuss.elastic.co/u/kribor)\ **Replies:** 8\ **Last updated:** [May 11, 2017, 9:24pm UTC](https://discuss.elastic.co/t/kibana-5-3-xpack-reporting-fails/83924 "2017-05-11T21:24:03Z")
Hi I'm trying to get reporting to work in kibana without luck. "There was an error generating your report for the "MyVis" visualization: Max attempts reached (3)" Using this thread I managed to get logging working and … --- ## [urlMaker.py Version 2 - Dynamic Kibana URL's](https://discuss.elastic.co/t/urlmaker-py-version-2-dynamic-kibana-urls/254503)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 1\ **Last updated:** [November 9, 2020, 1:32am UTC](https://discuss.elastic.co/t/urlmaker-py-version-2-dynamic-kibana-urls/254503 "2020-11-09T01:32:07Z")
Hello, I just released version 2 of my little open source projects that allows the creation of dynamic Kibana dashboards using custom links to a small flask service. This small tool in my use-case at least adds a lot of … --- ## [Module haproxy : error getting IdlePct: strconv.ParseFloat: parsing \\"\\": invalid syntax](https://discuss.elastic.co/t/module-haproxy-error-getting-idlepct-strconv-parsefloat-parsing-invalid-syntax/202647)
**Author:** [@bodo.te](https://discuss.elastic.co/u/bodo.te)\ **Replies:** 7\ **Last updated:** [October 18, 2019, 6:49pm UTC](https://discuss.elastic.co/t/module-haproxy-error-getting-idlepct-strconv-parsefloat-parsing-invalid-syntax/202647 "2019-10-18T18:49:28Z")
Version: metricbeat 7.4.0 haproxy 1.9.8 Operating System: Ubuntu 16.04.6 LTS Discuss Forum URL: https://discuss.elastic.co/t/haproxy-strconv-parsefloat-parsing-invalid-syntax/181403 Steps to Reproduce: install meso… --- ## [X-pack 6.3 sql query](https://discuss.elastic.co/t/x-pack-6-3-sql-query/137765)
**Author:** [@suhan\_kim](https://discuss.elastic.co/u/suhan_kim)\ **Replies:** 6\ **Last updated:** [June 28, 2018, 11:34am UTC](https://discuss.elastic.co/t/x-pack-6-3-sql-query/137765 "2018-06-28T11:34:36Z")
curl -X POST "http://localhost:9200/\_xpack/sql?format=json" -H 'Content-Type: application/json' -d' { "query": "SELECT \* FROM logstash-2018.06.28" } ' {"error":{"root\_cause":\[{"type":"parsing\_exception","reason":"li… --- ## [Grok and date filter](https://discuss.elastic.co/t/grok-and-date-filter/55376)
**Author:** [@Chanawit\_Onchoo](https://discuss.elastic.co/u/Chanawit_Onchoo)\ **Replies:** 5\ **Last updated:** [July 13, 2016, 7:22am UTC](https://discuss.elastic.co/t/grok-and-date-filter/55376 "2016-07-13T07:22:20Z")
Hello I have some question to ask about date filter how can I try to change type that get from grok to date (input) : notBefore=Nov 10 00:00:00 2015 GMT notAfter=Nov 28 23:59:59 2016 GMT issuer= /C=US/O=SSS/OU=STT/CN=… --- ## [Random very slow queries](https://discuss.elastic.co/t/random-very-slow-queries/9425)
**Author:** [@Felipe\_Hummel](https://discuss.elastic.co/u/Felipe_Hummel)\ **Replies:** 7\ **Last updated:** [October 25, 2012, 10:22am UTC](https://discuss.elastic.co/t/random-very-slow-queries/9425 "2012-10-25T10:22:16Z")
Hi, we have a ~57GB index (with index compression) with ~36 million documents. 4 EC2 machines (7.4GB RAM 2-cores) with 2 primary shards each (no replicas). We are not in production yet, so the load is basically d… --- ## [Data race condition in automaton queries](https://discuss.elastic.co/t/data-race-condition-in-automaton-queries/353937)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 0\ **Last updated:** [February 22, 2024, 11:46pm UTC](https://discuss.elastic.co/t/data-race-condition-in-automaton-queries/353937 "2024-02-22T23:46:48Z")
Hello, In a local unit test involving a runtime field and a regexp query with ES 8.12.1, I have experienced search inconsistencies with the result count. The query shown below uses the script parity which returns even o… --- ## [Configure Kibana for remote cluster search](https://discuss.elastic.co/t/configure-kibana-for-remote-cluster-search/220041)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 5\ **Last updated:** [February 19, 2020, 8:05pm UTC](https://discuss.elastic.co/t/configure-kibana-for-remote-cluster-search/220041 "2020-02-19T20:05:16Z")
Hi, I'm using Elastic stack 7.5 and have several data centers. Not all data centers have a good bandwitch, so setting up a cluster distributed between data centers is not a good option according to: So i was thinkin… --- ## [Will an even number of master nodes cause split brain situation with 7.x version of ES?](https://discuss.elastic.co/t/will-an-even-number-of-master-nodes-cause-split-brain-situation-with-7-x-version-of-es/218654)
**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\ **Replies:** 5\ **Last updated:** [February 10, 2020, 7:25pm UTC](https://discuss.elastic.co/t/will-an-even-number-of-master-nodes-cause-split-brain-situation-with-7-x-version-of-es/218654 "2020-02-10T19:25:19Z")
Due to some limitation with our provisioning system, it is difficult to provision an odd number of nodes. For some other technologies, we have provisioned zookeepers with an even number of nodes for 2-3 years now and th… --- ## [Une connexion existante a dû être fermée par l’hôte distant](https://discuss.elastic.co/t/une-connexion-existante-a-du-etre-fermee-par-l-hote-distant/127323)
**Author:** [@chrigui94](https://discuss.elastic.co/u/chrigui94)\ **Replies:** 3\ **Last updated:** [April 9, 2018, 2:44pm UTC](https://discuss.elastic.co/t/une-connexion-existante-a-du-etre-fermee-par-l-hote-distant/127323 "2018-04-09T14:44:17Z")
I always receive this problem and I can't find a solution for this : \[2018-04-09T11:31:33,435\]\[WARN \]\[o.e.h.n.Netty4HttpServerTransport\] \[SST-P1307000FW\] caught exception while handling client http traffic, closing conn… --- ## [Read data from .fdx and .fdt files](https://discuss.elastic.co/t/read-data-from-fdx-and-fdt-files/13485)
**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\ **Replies:** 3\ **Last updated:** [September 6, 2013, 11:07am UTC](https://discuss.elastic.co/t/read-data-from-fdx-and-fdt-files/13485 "2013-09-06T11:07:35Z")
Hi All, My use case is to reindexing the data if any index got corrupted. I am able to read the data of a shard by using lucene's java api \*IndexReader\*. But using this api we can read data only if index is in sta… --- ## [Query hierarchical data](https://discuss.elastic.co/t/query-hierarchical-data/191355)
**Author:** [@Borwick\_5576](https://discuss.elastic.co/u/Borwick_5576)\ **Replies:** 4\ **Last updated:** [July 24, 2019, 9:59am UTC](https://discuss.elastic.co/t/query-hierarchical-data/191355 "2019-07-24T09:59:02Z")
I'm working in creating and simplifying probabilistic topic models for large corpora of data. Every document I would index will contain a field having the following format: ... "topics" : { "level0" : \["keywords"\], … --- ## [Make sure document is indexed before search for it](https://discuss.elastic.co/t/make-sure-document-is-indexed-before-search-for-it/37057)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 6\ **Last updated:** [December 14, 2015, 2:42pm UTC](https://discuss.elastic.co/t/make-sure-document-is-indexed-before-search-for-it/37057 "2015-12-14T14:42:30Z")
Hey, I have a use case In which I index a document and immediately try to search for it. The thing is because elasticsearch is eventual consistent, sometimes the document is indexed before the query get executed, and … --- ## [Why are indices slower to create the more indices you have?](https://discuss.elastic.co/t/why-are-indices-slower-to-create-the-more-indices-you-have/29205)
**Author:** [@ubershmekel](https://discuss.elastic.co/u/ubershmekel)\ **Replies:** 6\ **Last updated:** [September 15, 2015, 9:11am UTC](https://discuss.elastic.co/t/why-are-indices-slower-to-create-the-more-indices-you-have/29205 "2015-09-15T09:11:02Z")
I was indexing a list of a few hundred product builds that have about a gig of data each. I'm using one machine for this. I don't mind searches being a bit slow (e.g up to 30 seconds) and I don't mind indexing to take ab… --- ## [Replacing log4j with logback](https://discuss.elastic.co/t/replacing-log4j-with-logback/8470)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 3\ **Last updated:** [July 25, 2012, 1:40am UTC](https://discuss.elastic.co/t/replacing-log4j-with-logback/8470 "2012-07-25T01:40:01Z")
I'd like to replace log4j with logback (so that I can log json messages to Loggly; see https://github.com/qos-ch/logback-extensions). Elasticsearch appears to be smart enough to detect what logging libraries are avai… --- ## [Best practices with localized indices](https://discuss.elastic.co/t/best-practices-with-localized-indices/12467)
**Author:** [@Jorge\_T](https://discuss.elastic.co/u/Jorge_T)\ **Replies:** 2\ **Last updated:** [June 19, 2013, 6:31pm UTC](https://discuss.elastic.co/t/best-practices-with-localized-indices/12467 "2013-06-19T18:31:26Z")
Hi folks, I'm working on a new implementation, which will be localized to about 20 languages. I would like to know if there are any best practices in structuring index mappings for this kind of scenario. Should I:… --- ## [Search UI Version 1.0.0 Released](https://discuss.elastic.co/t/search-ui-version-1-0-0-released/191054)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [July 17, 2019, 4:04pm UTC](https://discuss.elastic.co/t/search-ui-version-1-0-0-released/191054 "2019-07-17T16:04:44Z")
Search UI Version 1.0.0 Released Search UI for Elastic App Search is now generally available! Build a feature-rich search experience that has custom search components without all the heavy lifting and custom coding. Le… --- ## [Auditd vs Beats performance](https://discuss.elastic.co/t/auditd-vs-beats-performance/142993)
**Author:** [@nwed](https://discuss.elastic.co/u/nwed)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 3:21pm UTC](https://discuss.elastic.co/t/auditd-vs-beats-performance/142993 "2018-08-14T15:21:19Z")
Hello, I recently setup auditd rules within auditbeat. Awesome solution that will really help us make better sense of audit logs. Obviously a big issue with auditd is performance. We are working on generating metric arou… --- ## [Kubectl apply failed installing ES](https://discuss.elastic.co/t/kubectl-apply-failed-installing-es/218652)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 4\ **Last updated:** [February 11, 2020, 9:15am UTC](https://discuss.elastic.co/t/kubectl-apply-failed-installing-es/218652 "2020-02-11T09:15:21Z")
I keep getting the following error, while my collegues with "almost" exactly the same configuration in minikube have no issues: TASK \[elastic : Elastic Cluster\] \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*… --- ## [How to show Memory Usage is at values percent](https://discuss.elastic.co/t/how-to-show-memory-usage-is-at-values-percent/92585)
**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 2:40am UTC](https://discuss.elastic.co/t/how-to-show-memory-usage-is-at-values-percent/92585 "2017-07-13T02:40:38Z")
Hi, @spinscale I'm having trouble with settings alerts for my memory usage. I'm using Metricbeat which is stashing only the memory metrics to Elasticsearch. This is the JSON for the watch that I've configured: PUT \_x… --- ## [UnavailableShardsException: at least one primary shard for the index \[.security-7\] is unavailable](https://discuss.elastic.co/t/unavailableshardsexception-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/347393)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 5\ **Last updated:** [November 20, 2023, 11:03am UTC](https://discuss.elastic.co/t/unavailableshardsexception-at-least-one-primary-shard-for-the-index-security-7-is-unavailable/347393 "2023-11-20T11:03:48Z")
Hi, I have deleted all files manually from /var/lib/elasticsearch/nodes/0/indices/. Now when i restart Elasticsearch server. \[2023-11-17T09:20:22,899\]\[INFO \]\[o.e.x.s.a.RealmsAuthenticator\] \[ip\] Authentication of \[elast… --- ## [Logstash read new data in elasticsearch as input?](https://discuss.elastic.co/t/logstash-read-new-data-in-elasticsearch-as-input/56541)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 7\ **Last updated:** [August 1, 2016, 3:36pm UTC](https://discuss.elastic.co/t/logstash-read-new-data-in-elasticsearch-as-input/56541 "2016-08-01T15:36:08Z")
Hello folks, I am using elasticsearch as an input of logstash. My script works well. However, when I insert new data in elasticsearch, after I run logstash, these new data are not read by logstash. I know that Elastics… --- ## [My log server and ELK server both are in same time zone but in kibana discovery page log @timestamp shows different time](https://discuss.elastic.co/t/my-log-server-and-elk-server-both-are-in-same-time-zone-but-in-kibana-discovery-page-log-timestamp-shows-different-time/170912)
**Author:** [@PrasanthDaya](https://discuss.elastic.co/u/PrasanthDaya)\ **Replies:** 1\ **Last updated:** [March 5, 2019, 4:07pm UTC](https://discuss.elastic.co/t/my-log-server-and-elk-server-both-are-in-same-time-zone-but-in-kibana-discovery-page-log-timestamp-shows-different-time/170912 "2019-03-05T16:07:32Z")
Hi, My Log server and ELK server both are in UTC-1 time zone but in kibana discovery page log @timestamp shows different time. Note: Initially my ELK server was in IST time zone later I changed it to UTC-1 matching lo… --- ## [Count of keywords (search criteria) during search operations Elasticsearch](https://discuss.elastic.co/t/count-of-keywords-search-criteria-during-search-operations-elasticsearch/111242)
**Author:** [@WebsocketServer\_Face](https://discuss.elastic.co/u/WebsocketServer_Face)\ **Replies:** 4\ **Last updated:** [December 12, 2017, 7:57am UTC](https://discuss.elastic.co/t/count-of-keywords-search-criteria-during-search-operations-elasticsearch/111242 "2017-12-12T07:57:24Z")
Hi Elasticsearch Team. We are executing search operation using keywords in document content. Search results returned list of documents matching the keywords in the content. Is it possible to get the count of how many… --- ## [Create a new plugin for Kibana](https://discuss.elastic.co/t/create-a-new-plugin-for-kibana/99197)
**Author:** [@njkl](https://discuss.elastic.co/u/njkl)\ **Replies:** 1\ **Last updated:** [September 2, 2017, 6:00pm UTC](https://discuss.elastic.co/t/create-a-new-plugin-for-kibana/99197 "2017-09-02T18:00:41Z")
Hi, I am trying to create avery basic plugin for kibana, I check the offcial documentation ... but I think its outdated : https://www.elastic.co/guide/en/kibana/current/development-plugin-resources.html it says that … --- ## [Parsing Websphere SysErr log file using logstash](https://discuss.elastic.co/t/parsing-websphere-syserr-log-file-using-logstash/38677)
**Author:** [@praveerg](https://discuss.elastic.co/u/praveerg)\ **Replies:** 5\ **Last updated:** [January 9, 2016, 3:31pm UTC](https://discuss.elastic.co/t/parsing-websphere-syserr-log-file-using-logstash/38677 "2016-01-09T15:31:38Z")
I need help to create a pipeline file for IBM websphere systemerr log file which has combination of single line and multiline events. Can some help here ? --- ## [Error loading Data unknown error](https://discuss.elastic.co/t/error-loading-data-unknown-error/206694)
**Author:** [@Youness\_Farah](https://discuss.elastic.co/u/Youness_Farah)\ **Replies:** 4\ **Last updated:** [November 12, 2019, 8:52am UTC](https://discuss.elastic.co/t/error-loading-data-unknown-error/206694 "2019-11-12T08:52:31Z")
this happens when I look for a word in discover the kibana server stops and displays the following message: varsion kibana : 7.4.0 elasticsearch rest runing , when I look in kibana log files there is nothing --- ## [Create ElasticSearch cluster with 2 or 3 nodes](https://discuss.elastic.co/t/create-elasticsearch-cluster-with-2-or-3-nodes/335901)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 4\ **Last updated:** [June 14, 2023, 1:45pm UTC](https://discuss.elastic.co/t/create-elasticsearch-cluster-with-2-or-3-nodes/335901 "2023-06-14T13:45:46Z")
I need to create an Elasticsearch cluster on Ubuntu machines, but to ensure high availability I would like to have more than one node in case I need to update or upgrade the server. Is there any material that teaches ho… --- ## [Downgrade from 5.0 to 2.4](https://discuss.elastic.co/t/downgrade-from-5-0-to-2-4/69611)
**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 3:02pm UTC](https://discuss.elastic.co/t/downgrade-from-5-0-to-2-4/69611 "2016-12-29T15:02:14Z")
Hello, we have upgraded to ES 5.0 yesterday and it turned out it would be better for us to stay on 2.4 for a little longer because of a 3rd party software. Is it possible to downgrade from 5.0 to 2.4 without reindexi… --- ## [Calculating the Sum of Count metric in Kibana](https://discuss.elastic.co/t/calculating-the-sum-of-count-metric-in-kibana/112152)
**Author:** [@Akhil\_Kintali](https://discuss.elastic.co/u/Akhil_Kintali)\ **Replies:** 1\ **Last updated:** [December 19, 2017, 11:31am UTC](https://discuss.elastic.co/t/calculating-the-sum-of-count-metric-in-kibana/112152 "2017-12-19T11:31:44Z")
{"Username": A, "Condition":92, "Severity":32} {"Username": A, "Condition":89, "Severity":65} {"Username": B, "Condition":92, "Severity":60} {"Username": B, "Condition":21, "Severity":53} {"Username": B, "Condition":… --- ## ["Something is wrong with your Configuration Error" in logstash](https://discuss.elastic.co/t/something-is-wrong-with-your-configuration-error-in-logstash/158197)
**Author:** [@Sanj](https://discuss.elastic.co/u/Sanj)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 3:37pm UTC](https://discuss.elastic.co/t/something-is-wrong-with-your-configuration-error-in-logstash/158197 "2018-11-26T15:37:56Z")
Hi Team, I'm trying to run a simple logstash configuration that is mentioned below input { beats { port =\> 5044 } } filter { kv { source =\> "message" trim =\> "{}" field\_split =\> "," value\_split =\> ":" } } output… --- ## [Filebeat fails to send docker container logs to Logstash](https://discuss.elastic.co/t/filebeat-fails-to-send-docker-container-logs-to-logstash/134419)
**Author:** [@Dolores](https://discuss.elastic.co/u/Dolores)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 2:59pm UTC](https://discuss.elastic.co/t/filebeat-fails-to-send-docker-container-logs-to-logstash/134419 "2018-06-06T14:59:50Z")
I have a custom image of filebeat, and I am trying to forward all docker container logs to logstash and later on to see them on Kibana (through Elasticsearch). I can't see what am I doing wrong, as I cant see any logs on… --- ## [Could not resolve all files for configuration ':benchmarks:classpath'](https://discuss.elastic.co/t/could-not-resolve-all-files-for-configuration-benchmarks-classpath/98368)
**Author:** [@saliormoon](https://discuss.elastic.co/u/saliormoon)\ **Replies:** 7\ **Last updated:** [August 28, 2017, 10:59am UTC](https://discuss.elastic.co/t/could-not-resolve-all-files-for-configuration-benchmarks-classpath/98368 "2017-08-28T10:59:50Z")
elasticsearch version: 5.5.2 OS: Windows When I compile elasticsearch source code with gradle, I encountered a problem, such as: What went wrong: A problem occurred configuring project ':benchmarks'. Could not re… --- ## [Can I use ES highlight features on a specific document/text?](https://discuss.elastic.co/t/can-i-use-es-highlight-features-on-a-specific-document-text/1562)
**Author:** [@MJB](https://discuss.elastic.co/u/MJB)\ **Replies:** 4\ **Last updated:** [May 31, 2015, 1:28pm UTC](https://discuss.elastic.co/t/can-i-use-es-highlight-features-on-a-specific-document-text/1562 "2015-05-31T13:28:20Z")
I'm currently trying to get highlighting features to work in my custom query handler. As far as I can tell, the ES Java API allows highlighting terms of a given query: SearchResponse search = client().prepareSearch(… --- ## [Replacing filtered and or filter query with bool (Elasticsearch 5.2)](https://discuss.elastic.co/t/replacing-filtered-and-or-filter-query-with-bool-elasticsearch-5-2/78596)
**Author:** [@lukejolly](https://discuss.elastic.co/u/lukejolly)\ **Replies:** 3\ **Last updated:** [March 15, 2017, 7:33pm UTC](https://discuss.elastic.co/t/replacing-filtered-and-or-filter-query-with-bool-elasticsearch-5-2/78596 "2017-03-15T19:33:19Z")
I upgraded to Elasticsearch 5.2 and this query no longer works: POST \_search { "size":3000, "query":{ "filtered":{ "query":{ "range":{ "@timestamp":{"gt":"now-2m", "lte":"now"} }… [Previous page](https://discuss.elastic.co/top.md?page=536&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=538&per_page=50&period=all)