# Top **URL:** https://discuss.elastic.co/top.md?page=548&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 549 --- ## [Error In Visualization (Kibana Dashboard)](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312)
**Author:** [@Jsof](https://discuss.elastic.co/u/Jsof)\ **Replies:** 4\ **Last updated:** [March 14, 2019, 6:32pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312 "2019-03-14T18:32:44Z")
Hi, I am new to kibana, logstash and elasticsearch, i am trying to implement https://github.com/shadow-box/Palo-Alto-Networks-ELK-Stack on my kibana and i am getting the following error when i open the kibana dashboard.… --- ## [Discovery.zen.ping.unicast.hosts setting on tribe node](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-setting-on-tribe-node/71495)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [January 16, 2017, 2:52am UTC](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-setting-on-tribe-node/71495 "2017-01-16T02:52:47Z")
I'd like to confirm with the setting for discovery.zen.ping.unicast.hosts on tribe node. I have configured tribe node as below, 10.1.0.15 is the IP address of the tribe node itself. # Tribe Node Setting # This settin… --- ## [Repository exception - doesn't match any of the locations specified by path.repo because this setting is empty](https://discuss.elastic.co/t/repository-exception-doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/81860)
**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\ **Replies:** 5\ **Last updated:** [April 13, 2017, 4:52pm UTC](https://discuss.elastic.co/t/repository-exception-doesnt-match-any-of-the-locations-specified-by-path-repo-because-this-setting-is-empty/81860 "2017-04-13T16:52:39Z")
Hello All, I would like to setup snapshot repository for my elastic search. The elasticsearch is running as a container. I followed the same process like mentioned in document: 1) Added path root@elasticsearch-5-e… --- ## [Master not discovered or elected yet, an election requires a node with id \[7pxH2sBjRcG2IZzFDfdKGg\]](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-7pxh2sbjrcg2izzfdfdkgg/221239)
**Author:** [@oengel](https://discuss.elastic.co/u/oengel)\ **Replies:** 7\ **Last updated:** [February 27, 2020, 3:59pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-a-node-with-id-7pxh2sbjrcg2izzfdfdkgg/221239 "2020-02-27T15:59:09Z")
Hi to all, On our cluster (not related to elasticsearch), we handle our own master election. (active/stdby architecture). Im trying to setup elasticsearch to work with our arch. We prepare the configuration file for e… --- ## [Re-import archived Windows Event Logs](https://discuss.elastic.co/t/re-import-archived-windows-event-logs/135393)
**Author:** [@erikjsmith](https://discuss.elastic.co/u/erikjsmith)\ **Replies:** 7\ **Last updated:** [June 11, 2018, 3:53pm UTC](https://discuss.elastic.co/t/re-import-archived-windows-event-logs/135393 "2018-06-11T15:53:35Z")
I have Windows Event Logs archived on my Windows Event Collector that are forwarded events from my endpoints. How can I re-import those into an ELK 6 stack? My WEC server has Winlogbeat installed and is sending the curr… --- ## [Geo\_point logging from python to elasticsearch](https://discuss.elastic.co/t/geo-point-logging-from-python-to-elasticsearch/37336)
**Author:** [@daTokenizer](https://discuss.elastic.co/u/daTokenizer)\ **Replies:** 3\ **Last updated:** [December 17, 2015, 10:23am UTC](https://discuss.elastic.co/t/geo-point-logging-from-python-to-elasticsearch/37336 "2015-12-17T10:23:27Z")
Hi folks, I am trying for a while to log geo\_point (not geo\_ip) events so i could see them in Kibana using the tilemap feature. this prooves difficult. this is a simplified version of the index call i'm using: log\_data… --- ## [ERR Failed to Perform Many Index Operations](https://discuss.elastic.co/t/err-failed-to-perform-many-index-operations/33684)
**Author:** [@jbiggley](https://discuss.elastic.co/u/jbiggley)\ **Replies:** 6\ **Last updated:** [November 9, 2015, 11:45pm UTC](https://discuss.elastic.co/t/err-failed-to-perform-many-index-operations/33684 "2015-11-09T23:45:04Z")
We're trying to get filebeat to run on our logstash host to test the ingestion of logs but we keep getting the same error regardless of the config. I've pasted the config file we are using below which results in the err… --- ## [BigDecimal in ElasticSearch](https://discuss.elastic.co/t/bigdecimal-in-elasticsearch/12787)
**Author:** [@sameer\_mohammed](https://discuss.elastic.co/u/sameer_mohammed)\ **Replies:** 1\ **Last updated:** [July 15, 2013, 8:34am UTC](https://discuss.elastic.co/t/bigdecimal-in-elasticsearch/12787 "2013-07-15T08:34:28Z")
Hi I have an oracle table where most of the number fields are BigDecimal. I want to migrate all the data from the table to elasticsearch. If I don't provide any mapping, elasticsearch is taking the bigdecimal valu… --- ## [Error does not display in APM Errors](https://discuss.elastic.co/t/error-does-not-display-in-apm-errors/274779)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 5\ **Last updated:** [June 4, 2021, 8:13pm UTC](https://discuss.elastic.co/t/error-does-not-display-in-apm-errors/274779 "2021-06-04T20:13:33Z")
I have a asp.net core web app (mvc) application that writes logs using serilog. Whenever run I the application and perform operations and a certain operation that will cause an Error, that error will get recorded into Di… --- ## [Elasticsearch not starting after enabling cluster and node configuration](https://discuss.elastic.co/t/elasticsearch-not-starting-after-enabling-cluster-and-node-configuration/75998)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 5\ **Last updated:** [February 22, 2017, 1:08pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-enabling-cluster-and-node-configuration/75998 "2017-02-22T13:08:44Z")
2017-02-22 13:59:37 Commons Daemon procrun stderr initialized Exception in thread "main" ception: unknown setting \[discovery.zen.ping.multicast.enabled\] please check that any required plugins are installed, or check the … --- ## [Reindex vs Snapshot and restore](https://discuss.elastic.co/t/reindex-vs-snapshot-and-restore/102653)
**Author:** [@vivek7mehta](https://discuss.elastic.co/u/vivek7mehta)\ **Replies:** 2\ **Last updated:** [October 4, 2017, 9:08am UTC](https://discuss.elastic.co/t/reindex-vs-snapshot-and-restore/102653 "2017-10-04T09:08:39Z")
I have around 500 GB of data on one cluster and I want to migrate all of my data from this cluster to another cluster which is hosted on different server. So I can think of two options either snapshot and restore \[crea… --- ## [Sort on timestamp returns wrong order](https://discuss.elastic.co/t/sort-on-timestamp-returns-wrong-order/76201)
**Author:** [@mapkyca](https://discuss.elastic.co/u/mapkyca)\ **Replies:** 2\ **Last updated:** [February 24, 2017, 9:37am UTC](https://discuss.elastic.co/t/sort-on-timestamp-returns-wrong-order/76201 "2017-02-24T09:37:42Z")
Pulling my hair out on this one... Using ES 2.3 Trying to sort results based on a unix epoch field, but results are being returned in the wrong order... however, they are being sorted (you can reverse the order and g… --- ## [Format number format in json input field?](https://discuss.elastic.co/t/format-number-format-in-json-input-field/156646)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [November 14, 2018, 11:33am UTC](https://discuss.elastic.co/t/format-number-format-in-json-input-field/156646 "2018-11-14T11:33:23Z")
Hi, i am doing some bucket aggregation where I calculate the throughput per second, minute and hour. Can I use the json inputf field to format the number? on per hour level I want to show only integer value, not float. … --- ## [Remove old data from database](https://discuss.elastic.co/t/remove-old-data-from-database/222374)
**Author:** [@coi6644](https://discuss.elastic.co/u/coi6644)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 9:57pm UTC](https://discuss.elastic.co/t/remove-old-data-from-database/222374 "2020-03-05T21:57:35Z")
Hi, How can I remove data older from 12 months from database? I have a ELK+Elastiflow to collect logs from some equipments, but I need to do a cleanup of records older than 12 monts. --- ## [Logstash service doesn't output logs, command line does](https://discuss.elastic.co/t/logstash-service-doesnt-output-logs-command-line-does/90294)
**Author:** [@leoponton](https://discuss.elastic.co/u/leoponton)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 3:28pm UTC](https://discuss.elastic.co/t/logstash-service-doesnt-output-logs-command-line-does/90294 "2017-06-21T15:28:12Z")
If I start the logstash service using service or systemctl, it starts and reports as running but produces no output that is seen by elasticsearch. On the other hand, if I run logstash using ./bin/logstash -f /etc/log… --- ## [Building custom filebeat debian](https://discuss.elastic.co/t/building-custom-filebeat-debian/71163)
**Author:** [@surajs](https://discuss.elastic.co/u/surajs)\ **Replies:** 7\ **Last updated:** [January 24, 2017, 1:03am UTC](https://discuss.elastic.co/t/building-custom-filebeat-debian/71163 "2017-01-24T01:03:21Z")
So i've been following https://discuss.elastic.co/t/how-to-create-a-new-beats-output/61074/3 to create a custom beats output. So now i have two repositories as discussed in the post : 1. filebeat 2. custom-output I… --- ## [Accessing the result field from the searchUI to pass to another api](https://discuss.elastic.co/t/accessing-the-result-field-from-the-searchui-to-pass-to-another-api/216285)
**Author:** [@mchennupati](https://discuss.elastic.co/u/mchennupati)\ **Replies:** 7\ **Last updated:** [January 24, 2020, 1:22pm UTC](https://discuss.elastic.co/t/accessing-the-result-field-from-the-searchui-to-pass-to-another-api/216285 "2020-01-24T13:22:25Z")
Hi, I am trying to configure a search with autocomplete. I guess a common use case is where on retrieving the autocomplete suggestions and identifying the search term. For e.g, in the videogames tutorial. You can searc… --- ## [CPU usage slowly climbs until ES needs a restart](https://discuss.elastic.co/t/cpu-usage-slowly-climbs-until-es-needs-a-restart/38276)
**Author:** [@travisbell](https://discuss.elastic.co/u/travisbell)\ **Replies:** 4\ **Last updated:** [April 11, 2016, 4:55pm UTC](https://discuss.elastic.co/t/cpu-usage-slowly-climbs-until-es-needs-a-restart/38276 "2016-04-11T16:55:24Z")
Hi everyone, We're seeing kind of an annoying issue with our ES cluster which is that after 7-10 days (this is not a science, it's just whenever the problem becomes bad enough) the CPU ES is using is 2-3x more than aft… --- ## [Adding another disk to an ES node](https://discuss.elastic.co/t/adding-another-disk-to-an-es-node/10425)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 2\ **Last updated:** [January 23, 2013, 5:20pm UTC](https://discuss.elastic.co/t/adding-another-disk-to-an-es-node/10425 "2013-01-23T17:20:55Z")
Hi, Is there a way to change path.dir (see http://www.elasticsearch.org/guide/reference/setup/dir-layout.html ) on a live cluster, say when one wants to add new disks to ES servers and tell ES to start using the… --- ## [Timelion-show metric, or pie chart etc](https://discuss.elastic.co/t/timelion-show-metric-or-pie-chart-etc/47724)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 6\ **Last updated:** [July 11, 2016, 10:50am UTC](https://discuss.elastic.co/t/timelion-show-metric-or-pie-chart-etc/47724 "2016-07-11T10:50:49Z")
Hello, I would like to know if we can create different types of charts with timelion than line charts (I'm searching more for metrics , pie chart etc. - the ones that are available in kibana) Thank you! --- ## [How to auto delete data older than 2 month or 30 days from elastcisearch index?](https://discuss.elastic.co/t/how-to-auto-delete-data-older-than-2-month-or-30-days-from-elastcisearch-index/345161)
**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\ **Replies:** 5\ **Last updated:** [October 17, 2023, 7:40am UTC](https://discuss.elastic.co/t/how-to-auto-delete-data-older-than-2-month-or-30-days-from-elastcisearch-index/345161 "2023-10-17T07:40:02Z")
Note: I am not using date in index name like index -yyyy-mm . any method to do this i am using python Elasticsearch client to store data in es database. --- ## [Intermittently failed with 401 Unauthorized](https://discuss.elastic.co/t/intermittently-failed-with-401-unauthorized/288835)
**Author:** [@John\_Luong\_Nhat\_Truo](https://discuss.elastic.co/u/John_Luong_Nhat_Truo)\ **Replies:** 5\ **Last updated:** [November 10, 2021, 7:24am UTC](https://discuss.elastic.co/t/intermittently-failed-with-401-unauthorized/288835 "2021-11-10T07:24:22Z")
Hi, I'm using basic authentication with REST API but sometime server response 401 Unauthorized as: 401 Unauthorized {"error":{"root\_cause":\[{"type":"security\_exception","reason":"unable to authenticate user \[xxxxxxxxx\]… --- ## [Dealing with non standard log formats](https://discuss.elastic.co/t/dealing-with-non-standard-log-formats/125500)
**Author:** [@jon\_uk](https://discuss.elastic.co/u/jon_uk)\ **Replies:** 8\ **Last updated:** [March 27, 2018, 10:46pm UTC](https://discuss.elastic.co/t/dealing-with-non-standard-log-formats/125500 "2018-03-27T22:46:19Z")
I'm trying (really really trying) to make sense of the logs coming from isc-dhcpd, a DHCP server. Depending upon the stage of the DHCP request process, the format of the output is slightly different. i've got three worki… --- ## [Elasticsearch.service is not a native service, redirecting to systemd-sysv-install](https://discuss.elastic.co/t/elasticsearch-service-is-not-a-native-service-redirecting-to-systemd-sysv-install/85666)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 0\ **Last updated:** [May 14, 2017, 6:02am UTC](https://discuss.elastic.co/t/elasticsearch-service-is-not-a-native-service-redirecting-to-systemd-sysv-install/85666 "2017-05-14T06:02:54Z")
hello what is this Error ??:: elasticsearch.service is not a native service, redirecting to systemd-sysv-install. Executing: /lib/systemd/systemd-sysv-install enable elasticsearch root@pc:~# sudo /bin/systemctl ena… --- ## [Exiting: Error in initing input: No paths were defined for input accessing 'filebeat.inputs.0' (source:'filebeat.yml')](https://discuss.elastic.co/t/exiting-error-in-initing-input-no-paths-were-defined-for-input-accessing-filebeat-inputs-0-source-filebeat-yml/205550)
**Author:** [@mridula\_guuds](https://discuss.elastic.co/u/mridula_guuds)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 10:16pm UTC](https://discuss.elastic.co/t/exiting-error-in-initing-input-no-paths-were-defined-for-input-accessing-filebeat-inputs-0-source-filebeat-yml/205550 "2019-10-30T22:16:19Z")
\[d3p@d3papp-po-a1p filebeat\]$ ./filebeat -e -d "\*" 2019-10-28T21:06:20.221Z INFO instance/beat.go:492 Home path: \[/home/d3p/filebeat\] Config path: \[/home/d3p/filebeat\] Data path: \[/home/d3p/filebeat/data\] L… --- ## [Ruby filter condition](https://discuss.elastic.co/t/ruby-filter-condition/96722)
**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\ **Replies:** 2\ **Last updated:** [August 11, 2017, 9:57am UTC](https://discuss.elastic.co/t/ruby-filter-condition/96722 "2017-08-11T09:57:39Z")
Hi I having a data like status,id 0,A 2,B 3,C A,D B,E 6,N Based on status value need to add one more field and insert good,bad in new field if status is even number then new field value is good else status is a… --- ## [Count words/tokens in a field in a document](https://discuss.elastic.co/t/count-words-tokens-in-a-field-in-a-document/68811)
**Author:** [@Jimmy\_Oentung](https://discuss.elastic.co/u/Jimmy_Oentung)\ **Replies:** 2\ **Last updated:** [December 14, 2016, 4:09am UTC](https://discuss.elastic.co/t/count-words-tokens-in-a-field-in-a-document/68811 "2016-12-14T04:09:21Z")
Hi there, is there any convenient way to get the count of words/tokens in each field of a document? I know I can use termvector and sum all term frequency in each field to get this number. but I was wondering if there… --- ## [Failed with result 'exit-code'](https://discuss.elastic.co/t/failed-with-result-exit-code/204957)
**Author:** [@Pulko](https://discuss.elastic.co/u/Pulko)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 6:11am UTC](https://discuss.elastic.co/t/failed-with-result-exit-code/204957 "2019-10-25T06:11:39Z")
Hi guys, Thx for having me here. I'm a newbie :slight\_smile: I need your help : My company would like to use ActiveCollab as a project management tool. AC requires ElasticSearch (but not supporting the 7.x version ye… --- ## [Illegal reflective access by com.headius.backport9.modules.Modules](https://discuss.elastic.co/t/illegal-reflective-access-by-com-headius-backport9-modules-modules/186035)
**Author:** [@lbarbero](https://discuss.elastic.co/u/lbarbero)\ **Replies:** 1\ **Last updated:** [June 17, 2019, 1:16pm UTC](https://discuss.elastic.co/t/illegal-reflective-access-by-com-headius-backport9-modules-modules/186035 "2019-06-17T13:16:50Z")
Hello, I am trying to run logstash 7.1 with java 11. I start the service with systemctl start logstash.servise and I get a warning when I check the service status: ● logstash.service - logstash Loaded: loaded (/etc/s… --- ## [Trying to send postgresql query from Logstash to ElasticSearch](https://discuss.elastic.co/t/trying-to-send-postgresql-query-from-logstash-to-elasticsearch/106113)
**Author:** [@a\_dom](https://discuss.elastic.co/u/a_dom)\ **Replies:** 3\ **Last updated:** [November 3, 2017, 6:30am UTC](https://discuss.elastic.co/t/trying-to-send-postgresql-query-from-logstash-to-elasticsearch/106113 "2017-11-03T06:30:37Z")
Hi I'm following this tutorial (https://www.elastic.co/blog/logstash-jdbc-input-plugin) and I managed to recreate example 1 using my own table. But example 2 give me the following error and stops. ./bin/logstash -f logs… --- ## [Getting geo\_point from Twitter](https://discuss.elastic.co/t/getting-geo-point-from-twitter/33529)
**Author:** [@JamesK](https://discuss.elastic.co/u/JamesK)\ **Replies:** 3\ **Last updated:** [May 6, 2017, 11:12pm UTC](https://discuss.elastic.co/t/getting-geo-point-from-twitter/33529 "2017-05-06T23:12:35Z")
Afternoon all, I've been using logstash to feed twitter data into elasticsearch so I can visualise it with kibana. Have successfully changed config file to work with last week's new releases, so no problems there, but I'… --- ## [Show top 100 most occured errors from log](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339)
**Author:** [@5JrA2ngS8Snub](https://discuss.elastic.co/u/5JrA2ngS8Snub)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 7:18pm UTC](https://discuss.elastic.co/t/show-top-100-most-occured-errors-from-log/257339 "2020-12-02T19:18:50Z")
FYI: I'm new to using the ELK stack. I want to have more (easier) insight into the apache error log data my servers are producing. My plan is to create dashboards that will show me the information I need. One of the mo… --- ## [Access and match a subfield (nested field) in a Painless script with the reindex API](https://discuss.elastic.co/t/access-and-match-a-subfield-nested-field-in-a-painless-script-with-the-reindex-api/224711)
**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\ **Replies:** 2\ **Last updated:** [March 24, 2020, 9:44am UTC](https://discuss.elastic.co/t/access-and-match-a-subfield-nested-field-in-a-painless-script-with-the-reindex-api/224711 "2020-03-24T09:44:52Z")
I have to change type (reindex) a field "source.ip" from the text mapping type to the IP type. Because some of the "source.ip" values have non IP format (like "bob\_IP"). I've tried: POST \_reindex { "source": { … --- ## [Elastic APM (8.1) with Docker compose: error querying cluster\_uuid: status\_code=401](https://discuss.elastic.co/t/elastic-apm-8-1-with-docker-compose-error-querying-cluster-uuid-status-code-401/299533)
**Author:** [@ziomill](https://discuss.elastic.co/u/ziomill)\ **Replies:** 3\ **Last updated:** [April 16, 2022, 11:03pm UTC](https://discuss.elastic.co/t/elastic-apm-8-1-with-docker-compose-error-querying-cluster-uuid-status-code-401/299533 "2022-04-16T23:03:34Z")
Hello, I'm trying to run Elasticsearch, Kibana and Elastic APM with Docker Compose. The final goal is to send telemetry data to the Elastic Stack through the OpenTelemetry collector. After adding the APM Integration th… --- ## [\[1\]: max number of threads \[2048\] for user \[elasticsearch\] is too low, increase to at least \[4096\]](https://discuss.elastic.co/t/1-max-number-of-threads-2048-for-user-elasticsearch-is-too-low-increase-to-at-least-4096/146809)
**Author:** [@yuzhongzhu](https://discuss.elastic.co/u/yuzhongzhu)\ **Replies:** 0\ **Last updated:** [August 31, 2018, 6:27am UTC](https://discuss.elastic.co/t/1-max-number-of-threads-2048-for-user-elasticsearch-is-too-low-increase-to-at-least-4096/146809 "2018-08-31T06:27:18Z")
Hi,I install elasticsearch6.4 in ubuntu on docker, and I have set nproc to 4096, but I still get the error message "\[1\]: max number of threads \[2048\] for user \[elasticsearch\] is too low, increase to at least \[4096\]", Can… --- ## [Number\_of\_replicas changes for new indexes of filebeat and metricbeat](https://discuss.elastic.co/t/number-of-replicas-changes-for-new-indexes-of-filebeat-and-metricbeat/84483)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 6:27am UTC](https://discuss.elastic.co/t/number-of-replicas-changes-for-new-indexes-of-filebeat-and-metricbeat/84483 "2017-05-09T06:27:13Z")
Hi, I set number of replicas to 0 to make all my indexes green ( I only have one machine in my cluster). curl -XPUT 'elasticsearch:9200/\_settings' -d '{ "index" : { "number\_of\_replicas" : 0 } }' The next day I have n… --- ## [How to update the field via Painless Scripting in a Watcher rule](https://discuss.elastic.co/t/how-to-update-the-field-via-painless-scripting-in-a-watcher-rule/68534)
**Author:** [@Vinson](https://discuss.elastic.co/u/Vinson)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 9:46pm UTC](https://discuss.elastic.co/t/how-to-update-the-field-via-painless-scripting-in-a-watcher-rule/68534 "2016-12-20T21:46:32Z")
We are using Watcher to monitor the CPU utilization and send the alert email to the support team. We found that the data format of CPU usage field is a decimal and not the percent, so we try to use Painless script to … --- ## [Print any value using Markdown](https://discuss.elastic.co/t/print-any-value-using-markdown/101824)
**Author:** [@kottapar](https://discuss.elastic.co/u/kottapar)\ **Replies:** 4\ **Last updated:** [October 1, 2017, 11:03am UTC](https://discuss.elastic.co/t/print-any-value-using-markdown/101824 "2017-10-01T11:03:55Z")
I was exploring Markdown widget and I can see that the only variables I can use are of the form xx.last.raw. For example we're using this to collect the Top N servers consuming memory. I want to use the Markdown to disp… --- ## [Can not run kibana by source code](https://discuss.elastic.co/t/can-not-run-kibana-by-source-code/238397)
**Author:** [@Fent](https://discuss.elastic.co/u/Fent)\ **Replies:** 6\ **Last updated:** [June 29, 2020, 3:44am UTC](https://discuss.elastic.co/t/can-not-run-kibana-by-source-code/238397 "2020-06-29T03:44:27Z")
Hi, I try to run kibana by source code ,but it seem no work well This my step: Step1 Download the kibana source code download from https://github.com/elastic/kibana/archive/v7.4.2.zip and unzip to d:\\elk\\kibana … --- ## [Linked indices shown 0 even after adding it to lifecycle](https://discuss.elastic.co/t/linked-indices-shown-0-even-after-adding-it-to-lifecycle/176706)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 3\ **Last updated:** [April 24, 2019, 4:36pm UTC](https://discuss.elastic.co/t/linked-indices-shown-0-even-after-adding-it-to-lifecycle/176706 "2019-04-24T16:36:40Z")
Hi I am usning Elastic search 6.7. I have created policies in the lifecycle management index and added indices to it. But the status is shown 0. Any idea how can I see what inxdex is connected to which lifecycle policy… --- ## [How can I check ruby version using in Logstash](https://discuss.elastic.co/t/how-can-i-check-ruby-version-using-in-logstash/139081)
**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\ **Replies:** 3\ **Last updated:** [July 16, 2018, 2:20pm UTC](https://discuss.elastic.co/t/how-can-i-check-ruby-version-using-in-logstash/139081 "2018-07-16T14:20:35Z")
How can I check ruby version using in Logstash?? --- ## [IBM JAVA and Elasticsearch](https://discuss.elastic.co/t/ibm-java-and-elasticsearch/25090)
**Author:** [@admurray](https://discuss.elastic.co/u/admurray)\ **Replies:** 4\ **Last updated:** [March 22, 2017, 5:19am UTC](https://discuss.elastic.co/t/ibm-java-and-elasticsearch/25090 "2017-03-22T05:19:44Z")
I am trying to build Elasticsearch on the IBM mainframe, using IBM Java. Does anyone have an estimate on when the 1.7.0 release will be completed? I have had better luck with the master branch than the earlier releases. … --- ## [Saving logs in different logstash index](https://discuss.elastic.co/t/saving-logs-in-different-logstash-index/110131)
**Author:** [@Sumit\_Sijaria](https://discuss.elastic.co/u/Sumit_Sijaria)\ **Replies:** 5\ **Last updated:** [December 12, 2017, 12:34pm UTC](https://discuss.elastic.co/t/saving-logs-in-different-logstash-index/110131 "2017-12-12T12:34:02Z")
Hi team, I have question regarding saving logs in different logstash files based on pattern matching. for example- filter{ grok{ match =\> \[ "message","pattern1", "message","pattern2" \] } } output{ //how to sa… --- ## [클러스터 구성시 node끼리 발견을 못하는 경우 해결방법](https://discuss.elastic.co/t/node/190313)
**Author:** [@e9ac683d8419af836157](https://discuss.elastic.co/u/e9ac683d8419af836157)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 8:10am UTC](https://discuss.elastic.co/t/node/190313 "2019-07-17T08:10:23Z")
클라우드 서버에 3개의 머신을 생성 후 각가 el7.2 버전을 설치하였습니다. el실행 후 각 노드끼리 발견하지 못하고 클러스터 구성이 안됩니다. 저는 각 노드들이 9031 포트를 통해 통신하길 바랍니다. 확인된 사항 각 서버에서 telnet을 통한 포트 오픈 netstate 명령어로 해당 포트로 listen 중 ( tcp6 으로 만되어있는데 이게 문제일수도 ? ) 네트워크 관련… --- ## [CSV file indexed to %{\[@metadata\] instead of target](https://discuss.elastic.co/t/csv-file-indexed-to-metadata-instead-of-target/95957)
**Author:** [@bulsac](https://discuss.elastic.co/u/bulsac)\ **Replies:** 7\ **Last updated:** [August 8, 2017, 5:18am UTC](https://discuss.elastic.co/t/csv-file-indexed-to-metadata-instead-of-target/95957 "2017-08-08T05:18:41Z")
I am attempting to ingest a CSV file using logstash into an elasticsearch index that I have pre-defined using a PUT request. It appears that logstash is ingesting the CSV file not into the intended elasticsearch index, b… --- ## [Improving search speed for 100 million queries](https://discuss.elastic.co/t/improving-search-speed-for-100-million-queries/5067)
**Author:** [@Uli\_Kohler](https://discuss.elastic.co/u/Uli_Kohler)\ **Replies:** 7\ **Last updated:** [August 8, 2011, 8:34am UTC](https://discuss.elastic.co/t/improving-search-speed-for-100-million-queries/5067 "2011-08-08T08:34:24Z")
Hi, I'm currently trying to index about 1 billion small document with ElasticSearch 0.17.1 on a 21-node dedicated cluster. Each one contains a text fragment and doesn't have to be stored (I'm only interested in the I… --- ## [Monitoring Logstash with metricbeat: Error connection refused](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat-error-connection-refused/256760)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [November 30, 2020, 8:28am UTC](https://discuss.elastic.co/t/monitoring-logstash-with-metricbeat-error-connection-refused/256760 "2020-11-30T08:28:28Z")
Hello, I am trying to monitor my Logstash node using metricbeat, but I am getting these errors: Error fetching data for metricset logstash.node: error making http request: Get "https://X.X.X.X:9600/\_node": dial tcp X.X.… --- ## [Parsing firewall logs in logstash](https://discuss.elastic.co/t/parsing-firewall-logs-in-logstash/212786)
**Author:** [@heinrich](https://discuss.elastic.co/u/heinrich)\ **Replies:** 6\ **Last updated:** [December 23, 2019, 9:45pm UTC](https://discuss.elastic.co/t/parsing-firewall-logs-in-logstash/212786 "2019-12-23T21:45:44Z")
Hi all, I'm struggling parsing sophos utm firewall logs to extract data from the message field from filebeat. I'm new to grok and kv filters and require some help please. After some digging i have come across suggestion… --- ## [Average on Kibana Timelion with two values or parameter](https://discuss.elastic.co/t/average-on-kibana-timelion-with-two-values-or-parameter/88361)
**Author:** [@shreyanshu\_pare](https://discuss.elastic.co/u/shreyanshu_pare)\ **Replies:** 6\ **Last updated:** [June 6, 2017, 1:42pm UTC](https://discuss.elastic.co/t/average-on-kibana-timelion-with-two-values-or-parameter/88361 "2017-06-06T13:42:41Z")
I have json { ExchangeName:BITFINEX, CurrencyPair:ETHBTC ,MachineTime:June 5th 2017, 15:59:53.883, BidPrice:0.094 ,BidSize:22.935, AskPrice:0.094 ,AskSize:20.01, LastPrice:0.094 } In timelion i want to find an avera… --- ## [Unable to connect local kibana to remote elasticsearch running in AWS VPC](https://discuss.elastic.co/t/unable-to-connect-local-kibana-to-remote-elasticsearch-running-in-aws-vpc/180489)
**Author:** [@kpiyush](https://discuss.elastic.co/u/kpiyush)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 2:05pm UTC](https://discuss.elastic.co/t/unable-to-connect-local-kibana-to-remote-elasticsearch-running-in-aws-vpc/180489 "2019-05-10T14:05:32Z")
Hi, I am running elasticsearch in vpc using amazon elasticsearch service. I used the following article to access elasticsearch locally. Using the article, I am able to access ES using https://localhost:9200 using cu… [Previous page](https://discuss.elastic.co/top.md?page=547&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=549&per_page=50&period=all)