# Top **URL:** https://discuss.elastic.co/top.md?page=555&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 556 --- ## [Elastic SQL query to get data of today ONLY](https://discuss.elastic.co/t/elastic-sql-query-to-get-data-of-today-only/235867)
**Author:** [@jaffarkazi](https://discuss.elastic.co/u/jaffarkazi)\ **Replies:** 8\ **Last updated:** [June 18, 2020, 5:03am UTC](https://discuss.elastic.co/t/elastic-sql-query-to-get-data-of-today-only/235867 "2020-06-18T05:03:03Z")
Through an Elastic SQL query, how can I retrieve data belonging to today only? I've tried: select "@timestamp", today(), now(), TimeOfLastReceivedUpdate FROM "index\*" where Name = 'value' and ("@timestamp" \>= today() A… --- ## [Add map to ELK with pfsense](https://discuss.elastic.co/t/add-map-to-elk-with-pfsense/31250)
**Author:** [@megarobo](https://discuss.elastic.co/u/megarobo)\ **Replies:** 6\ **Last updated:** [September 30, 2015, 9:01am UTC](https://discuss.elastic.co/t/add-map-to-elk-with-pfsense/31250 "2015-09-30T09:01:02Z")
i use ELK logstash 1.4 and kibana 3 and pfsense my ELK work very good and show map that IP blocked by countries i want to add map like this but with map countries with passed IP i possible and witch configuration need … --- ## [Visualize:Gateway Timeout](https://discuss.elastic.co/t/visualize-gateway-timeout/54566)
**Author:** [@ananthanaidu](https://discuss.elastic.co/u/ananthanaidu)\ **Replies:** 5\ **Last updated:** [July 18, 2016, 4:47pm UTC](https://discuss.elastic.co/t/visualize-gateway-timeout/54566 "2016-07-18T16:47:04Z")
Hello, Error: Gateway Timeout I got the Gateway Timeout error when i click visualize or dashboard,please help me to fix on this error. --- ## [Jdbc output plugin](https://discuss.elastic.co/t/jdbc-output-plugin/86833)
**Author:** [@Vittorio](https://discuss.elastic.co/u/Vittorio)\ **Replies:** 1\ **Last updated:** [May 24, 2017, 3:38pm UTC](https://discuss.elastic.co/t/jdbc-output-plugin/86833 "2017-05-24T15:38:56Z")
Hi there, As you can imagine reading the title, I'm using the unofficial jdbc output plugin to put logs into postgres. I'm facing 2 problems, and I was wandering somebody else has experienced the same issues. The f… --- ## [Update document to remove a field / overwrite](https://discuss.elastic.co/t/update-document-to-remove-a-field-overwrite/200755)
**Author:** [@dlaprade](https://discuss.elastic.co/u/dlaprade)\ **Replies:** 3\ **Last updated:** [September 24, 2019, 1:49am UTC](https://discuss.elastic.co/t/update-document-to-remove-a-field-overwrite/200755 "2019-09-24T01:49:06Z")
ES: 6.8 I have a document like: { "title": "mytitle", "description": "my description", "randomfield" : "random value" } My index fields is title. I would like to be able to update this document to rem… --- ## [Kibana グラフの重ね合せ](https://discuss.elastic.co/t/kibana/99710)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 3\ **Last updated:** [September 8, 2017, 7:49am UTC](https://discuss.elastic.co/t/kibana/99710 "2017-09-08T07:49:08Z")
例えば、データ通信量の折れ線グラフを、一週間前と比較して見るため、重ね合せて表示したいと思っています。 (今週と先週のデータ通信量の折れ線グラフが重なりあっている) このような表示はできないものでしょうか? --- ## [Convert UTC datetime to specified timezone](https://discuss.elastic.co/t/convert-utc-datetime-to-specified-timezone/235970)
**Author:** [@not\_found](https://discuss.elastic.co/u/not_found)\ **Replies:** 4\ **Last updated:** [June 8, 2020, 2:09pm UTC](https://discuss.elastic.co/t/convert-utc-datetime-to-specified-timezone/235970 "2020-06-08T14:09:58Z")
Hello, I have this following date : 2020-02-05 15:31:46 UTC I would like to convert it with ruby into Europe/Brussels. I tried : puts Time.parse(mydate2) // 2020-02-05 15:31:46 UTC puts Time.parse(mydate2).zone // UT… --- ## [Java High Level Rest Client](https://discuss.elastic.co/t/java-high-level-rest-client/124525)
**Author:** [@Hrachya\_Yeghishyan](https://discuss.elastic.co/u/Hrachya_Yeghishyan)\ **Replies:** 3\ **Last updated:** [March 19, 2018, 2:55pm UTC](https://discuss.elastic.co/t/java-high-level-rest-client/124525 "2018-03-19T14:55:01Z")
Hi all, I'm eager to work on the gsoc project about the java high level rest client. Currently I'm working on the update index settings, and have already added the parts needed as described in the issue on github, but w… --- ## [How to increase replicas for .kibana index](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124)
**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\ **Replies:** 7\ **Last updated:** [September 28, 2020, 5:28am UTC](https://discuss.elastic.co/t/how-to-increase-replicas-for-kibana-index/250124 "2020-09-28T05:28:48Z")
Hi Team, In my cluster, I've found that by default every new index created with 1 shard and 1 replica; So I also changed default settings with 2 primary and 2 replica successfully for every new indices, which was found … --- ## [Ranged and recurring events](https://discuss.elastic.co/t/ranged-and-recurring-events/3567)
**Author:** [@mjarecki](https://discuss.elastic.co/u/mjarecki)\ **Replies:** 7\ **Last updated:** [November 15, 2010, 5:16pm UTC](https://discuss.elastic.co/t/ranged-and-recurring-events/3567 "2010-11-15T17:16:30Z")
Hi, We are looking at using ES in an upcoming project and are fleshing out data models for it - and are hoping for some suggestions on our approach. Our database consists of ranged and recurring events. We want to … --- ## [Problem with timestamp](https://discuss.elastic.co/t/problem-with-timestamp/72561)
**Author:** [@satishsnv](https://discuss.elastic.co/u/satishsnv)\ **Replies:** 8\ **Last updated:** [January 24, 2017, 2:49pm UTC](https://discuss.elastic.co/t/problem-with-timestamp/72561 "2017-01-24T14:49:25Z")
hi i am using following filter to overwrite the @timestamp, but its not working. may i know the issue. filter{ date{ match =\>\["timeStamp", "EEE yyyy MMM dd HH:mm:ss:SSS"\] remove\_field =\> \["timeStamp"\] } } --- ## [How split function works in Timelion chart](https://discuss.elastic.co/t/how-split-function-works-in-timelion-chart/267728)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 6\ **Last updated:** [March 29, 2021, 2:26pm UTC](https://discuss.elastic.co/t/how-split-function-works-in-timelion-chart/267728 "2021-03-29T14:26:37Z")
I am trying to understand how the split function in Timelion chart works. .es(....,split=rows:256,...) For example, if I have 10K rows, if I split 10k, Kibana goes timeout right away. When I try split less than 256 row… --- ## [LDAP - Authentication works, Authorization doesn't](https://discuss.elastic.co/t/ldap-authentication-works-authorization-doesnt/38332)
**Author:** [@contactimtiaz](https://discuss.elastic.co/u/contactimtiaz)\ **Replies:** 6\ **Last updated:** [January 8, 2016, 2:42pm UTC](https://discuss.elastic.co/t/ldap-authentication-works-authorization-doesnt/38332 "2016-01-08T14:42:36Z")
Hi I am trying to validate a simple LDAP setup on ElasticSearch with the SHIELD plugin. My Kibana setup is configured to use a LDAP user which in turn is configured and mapped to a role in ElasticSearch's role\_mapping.ym… --- ## [Replacing @timestamp with custom date](https://discuss.elastic.co/t/replacing-timestamp-with-custom-date/111781)
**Author:** [@munjadd](https://discuss.elastic.co/u/munjadd)\ **Replies:** 2\ **Last updated:** [December 14, 2017, 4:05pm UTC](https://discuss.elastic.co/t/replacing-timestamp-with-custom-date/111781 "2017-12-14T16:05:18Z")
Hi, I am using filebeat to send lines from a dhcp log (from windows server dhcp), and i am trying to replace the @timestamp field. Here is an example line from the dhcp log file: 11,12/14/17,14:22:04,Renew,10.1.65.60,p… --- ## [Getting "too many scroll contexts" when re-indexing](https://discuss.elastic.co/t/getting-too-many-scroll-contexts-when-re-indexing/279065)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 3\ **Last updated:** [July 20, 2021, 8:47am UTC](https://discuss.elastic.co/t/getting-too-many-scroll-contexts-when-re-indexing/279065 "2021-07-20T08:47:46Z")
Hi, I have a task where I need to sort by the field "\_id" I knew that I should not use this field for sorting and that instead it is better to add an extra field the has the same value as \_id and then I can use that fie… --- ## [Filebeat add system time in prospectors field](https://discuss.elastic.co/t/filebeat-add-system-time-in-prospectors-field/99913)
**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\ **Replies:** 4\ **Last updated:** [September 12, 2017, 6:53pm UTC](https://discuss.elastic.co/t/filebeat-add-system-time-in-prospectors-field/99913 "2017-09-12T18:53:11Z")
Filebeat version 5.2 Is there a way to add system current time (using date command) as a custom field in filebeat prosectors? I am able to add hardcoded values in custom fields but am looking for gathering system time a… --- ## [ILM hot-warm with beats and component templates](https://discuss.elastic.co/t/ilm-hot-warm-with-beats-and-component-templates/241272)
**Author:** [@niklaskurvinen](https://discuss.elastic.co/u/niklaskurvinen)\ **Replies:** 1\ **Last updated:** [July 16, 2020, 10:13am UTC](https://discuss.elastic.co/t/ilm-hot-warm-with-beats-and-component-templates/241272 "2020-07-16T10:13:22Z")
I've been looking at implementing hot-warm architecture in the most default way possible, but with 7.8 the component templates were introduced which changes some behavior previously documented in guides for this topic. I… --- ## [Improving performance using Reindex API](https://discuss.elastic.co/t/improving-performance-using-reindex-api/51746)
**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\ **Replies:** 7\ **Last updated:** [July 15, 2016, 7:15pm UTC](https://discuss.elastic.co/t/improving-performance-using-reindex-api/51746 "2016-07-15T19:15:41Z")
Hey All, ES version: 2.3.2 I have couple of questions regarding Reindex API: I'm reindexing data using Reindex API, every time I copy data from one index to another the size of the document is almost as big as twi… --- ## [Keystore not working properly](https://discuss.elastic.co/t/keystore-not-working-properly/185278)
**Author:** [@bkasrai](https://discuss.elastic.co/u/bkasrai)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 1:13pm UTC](https://discuss.elastic.co/t/keystore-not-working-properly/185278 "2019-06-13T13:13:20Z")
Good afternoon, I have been combing the threads here and following the documentation on setting up keystore however nothing in the threads seem to have a resolution and for whatever reason, even with the steps I am foll… --- ## [Exiting: 1 error: 1 error: missing required field accessing '0.perfmon.counters'](https://discuss.elastic.co/t/exiting-1-error-1-error-missing-required-field-accessing-0-perfmon-counters/109641)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [December 1, 2017, 10:51am UTC](https://discuss.elastic.co/t/exiting-1-error-1-error-missing-required-field-accessing-0-perfmon-counters/109641 "2017-12-01T10:51:10Z")
I trying to use metricbeat 6.0.0 (windows64) C:\\Program Files\\metricbeat\>metricbeat.exe test config Config OK C:\\Program Files\\metricbeat\>metricbeat.exe test output elasticsearch: http://elasticsearch.xxxxx.local:9200.… --- ## [Removing square brackets from JSON output](https://discuss.elastic.co/t/removing-square-brackets-from-json-output/31321)
**Author:** [@maisyweb](https://discuss.elastic.co/u/maisyweb)\ **Replies:** 2\ **Last updated:** [September 29, 2015, 11:47am UTC](https://discuss.elastic.co/t/removing-square-brackets-from-json-output/31321 "2015-09-29T11:47:46Z")
Hi, Logstash newbe here and I think it rocks. I'm converting xml files to output JSON but I noticed that in the JSON all values that are not objects themselves are arrays. For example {"externalID":\["67"\],"latitud… --- ## [Ingest pipeline split MESSAGE field into multiple fields](https://discuss.elastic.co/t/ingest-pipeline-split-message-field-into-multiple-fields/308834)
**Author:** [@moberreiter](https://discuss.elastic.co/u/moberreiter)\ **Replies:** 6\ **Last updated:** [July 5, 2022, 6:20am UTC](https://discuss.elastic.co/t/ingest-pipeline-split-message-field-into-multiple-fields/308834 "2022-07-05T06:20:37Z")
Hello everybody, I am new to elasticsearch and kibana and wanted to ask how to split a message into multiple fields. I tried creating an ingest pipeline with MESSAGE field and "," as separator, but it doesn't work as I… --- ## [Logstash is periodically hanging (unresponsive). How to recognize and fix?](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-how-to-recognize-and-fix/183794)
**Author:** [@PaulDonskikh](https://discuss.elastic.co/u/PaulDonskikh)\ **Replies:** 3\ **Last updated:** [June 14, 2019, 9:56pm UTC](https://discuss.elastic.co/t/logstash-is-periodically-hanging-unresponsive-how-to-recognize-and-fix/183794 "2019-06-14T21:56:04Z")
Hi! I'm working on an ELK-stack installation. And there's a logstash instance which for some unknown yet reason periodically (once in 2-10 days) stops inserting data into ES. And the most confusing part is that the lo… --- ## [How do I subtract two timestamps in VisualBuilder](https://discuss.elastic.co/t/how-do-i-subtract-two-timestamps-in-visualbuilder/125277)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 4\ **Last updated:** [March 26, 2018, 3:48pm UTC](https://discuss.elastic.co/t/how-do-i-subtract-two-timestamps-in-visualbuilder/125277 "2018-03-26T15:48:20Z")
In my JSON I have two fields of type date: @timestamp and ls-timestamp Let's say that i have the following in my JSON document in ES: @timestamp in Kibana Discover mode prints this string: March 22nd 2018, 21:54:08.79… --- ## [Logstash cannot connect to InfluxDB](https://discuss.elastic.co/t/logstash-cannot-connect-to-influxdb/28608)
**Author:** [@kemra102](https://discuss.elastic.co/u/kemra102)\ **Replies:** 4\ **Last updated:** [February 17, 2016, 11:52pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-influxdb/28608 "2016-02-17T23:52:23Z")
I am using the logstash-output-influxdb plugin to send some of our log data to InfluxDB. I have this configured like so: influxdb { data\_points =\> { "duration" =\> "%{data.event.duration}" } … --- ## [Elasticsearch on CentOS 7.4.1708, bootstrap.memory\_lock problems when starting on boot, but no problems on manual start](https://discuss.elastic.co/t/elasticsearch-on-centos-7-4-1708-bootstrap-memory-lock-problems-when-starting-on-boot-but-no-problems-on-manual-start/118476)
**Author:** [@digirave](https://discuss.elastic.co/u/digirave)\ **Replies:** 3\ **Last updated:** [February 6, 2018, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-on-centos-7-4-1708-bootstrap-memory-lock-problems-when-starting-on-boot-but-no-problems-on-manual-start/118476 "2018-02-06T10:30:13Z")
I am trying to run elasticsearch-5.6.6-1 on startup on CentOS 7.4.1708. I have no problems with almost the exact setup on CentOS 6.x. The server has 64 GB of ram with most of it not used. When I set bootstrap.memory\_… --- ## [2016/02/25 17:37:08.496727 transport.go:125: ERR SSL client failed to connect with: dial tcp 172.31.31.169:5044: getsockopt: no route to host](https://discuss.elastic.co/t/2016-02-25-17-37-08-496727-transport-go-125-err-ssl-client-failed-to-connect-with-dial-tcp-172-31-31-169-5044-getsockopt-no-route-to-host/42757)
**Author:** [@Mayur\_Patel](https://discuss.elastic.co/u/Mayur_Patel)\ **Replies:** 5\ **Last updated:** [February 26, 2016, 9:34pm UTC](https://discuss.elastic.co/t/2016-02-25-17-37-08-496727-transport-go-125-err-ssl-client-failed-to-connect-with-dial-tcp-172-31-31-169-5044-getsockopt-no-route-to-host/42757 "2016-02-26T21:34:10Z")
Hey I am using Amazon EC2 server for my app. I have follow this tutorial for setting ELK stack: https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04 … --- ## [SQL, SOAP, File, .. Endpoints enough but what and how?](https://discuss.elastic.co/t/sql-soap-file-endpoints-enough-but-what-and-how/55946)
**Author:** [@Dirk\_Ronsmans](https://discuss.elastic.co/u/Dirk_Ronsmans)\ **Replies:** 6\ **Last updated:** [July 20, 2016, 12:10pm UTC](https://discuss.elastic.co/t/sql-soap-file-endpoints-enough-but-what-and-how/55946 "2016-07-20T12:10:04Z")
Hi, Allow me to explain my predicament and hopefully you all will be able to enlighten me :slight\_smile: I'm completely new to the Elastic Stack and over the last couple of days/weeks have been investigating the poss… --- ## [Migration Problem 6.0](https://discuss.elastic.co/t/migration-problem-6-0/108891)
**Author:** [@Rob\_Schwerdtner](https://discuss.elastic.co/u/Rob_Schwerdtner)\ **Replies:** 4\ **Last updated:** [December 8, 2017, 11:57am UTC](https://discuss.elastic.co/t/migration-problem-6-0/108891 "2017-12-08T11:57:02Z")
After trying to migrate from 5.3 (via 5.6) to 6.0 i have to face sharding errors. My Indecies seemed to be looked and i can not revert from this status. My setting looks like this and read\_only is set to false and writ… --- ## [X-Pack Free license - change password](https://discuss.elastic.co/t/x-pack-free-license-change-password/119433)
**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\ **Replies:** 8\ **Last updated:** [February 13, 2018, 8:28am UTC](https://discuss.elastic.co/t/x-pack-free-license-change-password/119433 "2018-02-13T08:28:46Z")
I'm using X-Pack 6.2 over Elastic stack 6.2. I've used auto-generated passwords during installation steps. As in the tutorial I've used U/P(elastic/generatedPass) to log into Kibana. Now to share the login, I want to … --- ## [Dec 13th, 2020: \[EN\] Making it personal: Tailoring content with signed search keys in App Search](https://discuss.elastic.co/t/dec-13th-2020-en-making-it-personal-tailoring-content-with-signed-search-keys-in-app-search/257827)
**Author:** [@orhantoy](https://discuss.elastic.co/u/orhantoy)\ **Replies:** 0\ **Last updated:** [December 13, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2020-en-making-it-personal-tailoring-content-with-signed-search-keys-in-app-search/257827 "2020-12-13T08:00:05Z")
Signed search keys in Elastic App Search give you more control of a user's search experience. You can tailor the experience to show results you know are more relevant to the specific user while also letting you control w… --- ## [How aggs by id and order result by title?](https://discuss.elastic.co/t/how-aggs-by-id-and-order-result-by-title/99486)
**Author:** [@Gaz](https://discuss.elastic.co/u/Gaz)\ **Replies:** 0\ **Last updated:** [September 5, 2017, 8:41pm UTC](https://discuss.elastic.co/t/how-aggs-by-id-and-order-result-by-title/99486 "2017-09-05T20:41:30Z")
Mapping: { "mappings": { "post": { "properties": { "tags": { "type": "nested" } } } } } Posts: { "title": "some title", "message": "some message", "tags": \[ … --- ## [Decoding with logstash-avro Flume Avro Sink events](https://discuss.elastic.co/t/decoding-with-logstash-avro-flume-avro-sink-events/65024)
**Author:** [@dcam](https://discuss.elastic.co/u/dcam)\ **Replies:** 0\ **Last updated:** [November 4, 2016, 4:02pm UTC](https://discuss.elastic.co/t/decoding-with-logstash-avro-flume-avro-sink-events/65024 "2016-11-04T16:02:01Z")
I am getting apache Flume events from Avro Sink into Logstash but messages are not correctly decoded from logstash-codec-avro. Some ideas how to solve it would be very helpful My logstash conf looks like: input… --- ## [How to sync database changes to Elastic search using logstash](https://discuss.elastic.co/t/how-to-sync-database-changes-to-elastic-search-using-logstash/184682)
**Author:** [@Prashant\_Shirsath](https://discuss.elastic.co/u/Prashant_Shirsath)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 3:45am UTC](https://discuss.elastic.co/t/how-to-sync-database-changes-to-elastic-search-using-logstash/184682 "2019-06-14T03:45:11Z")
I am completely naive to ELK stack. My requirement is I am creating indexes on ES using logstash via JDBC plugin. I am indexing DB table to ES. If DB tables modified or new data inserted then only modified and inserted … --- ## [ILM not triggering delete phase](https://discuss.elastic.co/t/ilm-not-triggering-delete-phase/180767)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 5\ **Last updated:** [May 18, 2019, 3:37am UTC](https://discuss.elastic.co/t/ilm-not-triggering-delete-phase/180767 "2019-05-18T03:37:13Z")
Hello, I've been playing around with Index Lifecycle Management lately. Things are working more or less as expected. Indices are rolled over as defined in the ilm policy. What does not seem to be working is the delete … --- ## [Conflict in mapping](https://discuss.elastic.co/t/conflict-in-mapping/41165)
**Author:** [@gnujeremie](https://discuss.elastic.co/u/gnujeremie)\ **Replies:** 5\ **Last updated:** [February 10, 2016, 5:12pm UTC](https://discuss.elastic.co/t/conflict-in-mapping/41165 "2016-02-10T17:12:50Z")
Hi, I updated my mapping, adding a field "position (integer)" in type A while there was another field "position (float)" in type B. I had a message telling my about the conflict, so I created a new field. But now when… --- ## [How to selective apply filters on one of the plots in a Visualization](https://discuss.elastic.co/t/how-to-selective-apply-filters-on-one-of-the-plots-in-a-visualization/120857)
**Author:** [@Aditya\_V](https://discuss.elastic.co/u/Aditya_V)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 12:02am UTC](https://discuss.elastic.co/t/how-to-selective-apply-filters-on-one-of-the-plots-in-a-visualization/120857 "2018-02-22T00:02:57Z")
The usecase is as follows: Imagine data with X axis = Some Term, Y axis = Some data point, and each entry in the database has a date time value. Something like ('A', 5, 2017-08-01) , ('B', 6, '2018-08-01) , ('A', 3, 20… --- ## [Check database availability](https://discuss.elastic.co/t/check-database-availability/213835)
**Author:** [@radd](https://discuss.elastic.co/u/radd)\ **Replies:** 6\ **Last updated:** [January 9, 2020, 8:00am UTC](https://discuss.elastic.co/t/check-database-availability/213835 "2020-01-09T08:00:46Z")
Hi, I am new in ELK and I have one question regarding monitoring oracle DB availability. Please advice me, because I wish, with your help and knowledge, to find the best solution. I have read that I can monitor for Or… --- ## [Error: unhandled courier request error: unknown error](https://discuss.elastic.co/t/error-unhandled-courier-request-error-unknown-error/53082)
**Author:** [@gnuhpc](https://discuss.elastic.co/u/gnuhpc)\ **Replies:** 6\ **Last updated:** [July 14, 2016, 12:46pm UTC](https://discuss.elastic.co/t/error-unhandled-courier-request-error-unknown-error/53082 "2016-07-14T12:46:01Z")
ES 2.3.3 Kibana 4.5.1 One Django-based proxy (revproxy) was used ahead of kibana. The kibana can be reached via the proxy, but got the error as below: Oops! Looks like something went wrong. Refreshing may do the … --- ## [Datastream behavior in filebeat?](https://discuss.elastic.co/t/datastream-behavior-in-filebeat/330325)
**Author:** [@matheuscirillo](https://discuss.elastic.co/u/matheuscirillo)\ **Replies:** 4\ **Last updated:** [April 20, 2023, 11:32am UTC](https://discuss.elastic.co/t/datastream-behavior-in-filebeat/330325 "2023-04-20T11:32:11Z")
A very simple filebeat.yml configuration: filebeat: inputs: - type: filestream id: vouchers-logs-stream paths: - /path/to/logs/\*.log json: keys\_under\_root: true add\_error\_key: true … --- ## [Format for timestamps](https://discuss.elastic.co/t/format-for-timestamps/252878)
**Author:** [@georgemichael](https://discuss.elastic.co/u/georgemichael)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 8:46pm UTC](https://discuss.elastic.co/t/format-for-timestamps/252878 "2020-10-21T20:46:23Z")
I am working on some logging software and was wondering what format kibana indexes timestamps. I was thinking of using something similar to log.go for formatting log header to buffer as seen here: func (l \*Logger) forma… --- ## [【ダッシュボード】重複行を1行にまとめて表示する方法](https://discuss.elastic.co/t/topic/236829)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [June 16, 2020, 7:33am UTC](https://discuss.elastic.co/t/topic/236829 "2020-06-16T07:33:04Z")
お世話になります。 以下のように"id"と"time"が存在するindexがあります。 id time 1 2020/6/1 10:00 1 2020/6/1 11:00 1 2020/7/1 11:00 2 2020/6/1 12:00 2 2020/6/1 12:00 3 2020/7/1 12:00 上記indexに関して、同じidの中でtimeが最も過去の日付のデータのみ、 ダッシ… --- ## [使用Filebeat创建新索引ILM的问题](https://discuss.elastic.co/t/filebeat-ilm/308777)
**Author:** [@busishe](https://discuss.elastic.co/u/busishe)\ **Replies:** 6\ **Last updated:** [July 8, 2022, 12:19pm UTC](https://discuss.elastic.co/t/filebeat-ilm/308777 "2022-07-08T12:19:42Z")
我编辑了 filebeat.yml 中的配置项"setup.ilm.policy\_name"指定索引的ilm策略为我在kibana中自建的测试策略。 filebeat日志启动的时候看到它做了相关的检测，这个配置是生效了的。 {"log.level":"info","@timestamp":"2022-07-04T02:51:11.473Z","log.logger":"index-management.ilm","log.origi… --- ## [How to parse xml from a single line](https://discuss.elastic.co/t/how-to-parse-xml-from-a-single-line/131975)
**Author:** [@gonzalo](https://discuss.elastic.co/u/gonzalo)\ **Replies:** 6\ **Last updated:** [May 24, 2018, 1:01pm UTC](https://discuss.elastic.co/t/how-to-parse-xml-from-a-single-line/131975 "2018-05-24T13:01:32Z")
Hello, Before starting just thank you all. The fact is that I am trying to parse an XML through the XML filter from logstash but I am getting blocked. The XML format is as follows: \ **Author:** [@ammu](https://discuss.elastic.co/u/ammu)\ **Replies:** 7\ **Last updated:** [March 18, 2019, 3:29pm UTC](https://discuss.elastic.co/t/error-beater-beater-beater-go-142-failed-to-listen-listen-tcp-13-233-140-23-bind-cannot-assign-requested-address/172154 "2019-03-18T15:29:32Z") If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: Ela… --- ## [Curl: (77) error setting certificate verify locations:](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945)
**Author:** [@CBrad](https://discuss.elastic.co/u/CBrad)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:38pm UTC](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945 "2022-07-05T17:38:05Z")
I am installing Elasticsearch on Amazon Linux 2 EC2 instances, and using the latest version of ES 8.2.3. When I run: sudo systemctl status elasticsearch.service ES shows as running on all three, but when I check: $ cu… --- ## [Detection rule: Failed login attempts](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590)
**Author:** [@bnk](https://discuss.elastic.co/u/bnk)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 10:51am UTC](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590 "2021-06-02T10:51:35Z")
Hi, I've created my own detection rule for employees failed login attempts. It does work but when signal comes to Security -\> Detection dashboard, it do not show user.name or host.name. This is screen shot of my rule: … --- ## [Metricbeat DNS error in kubernetes Cluster](https://discuss.elastic.co/t/metricbeat-dns-error-in-kubernetes-cluster/263303)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 8\ **Last updated:** [February 22, 2021, 8:47am UTC](https://discuss.elastic.co/t/metricbeat-dns-error-in-kubernetes-cluster/263303 "2021-02-22T08:47:37Z")
I have installed metric beat using helm chart and I am getting following DNS error. 2021-02-04T21:27:38.074Z WARN \[transport\] transport/tcp.go:52 DNS lookup failure "k8s-rke-cluster1-node2": lookup k8s-rke-cluster1-node… --- ## ["View Metrics" shows GraphQL Error](https://discuss.elastic.co/t/view-metrics-shows-graphql-error/196258)
**Author:** [@pfa](https://discuss.elastic.co/u/pfa)\ **Replies:** 8\ **Last updated:** [September 2, 2019, 11:45am UTC](https://discuss.elastic.co/t/view-metrics-shows-graphql-error/196258 "2019-09-02T11:45:31Z")
Hi! After migration from 7.1.1 to 7.3.0 the Infrastructure UI "Show Metrics" isn't working any more. The tiles in global view(hosts and kubernetes) show correct metrics, "view logs" is also working properly. Error Mes… --- ## [Counting matching parent documents by aggregations on child documents](https://discuss.elastic.co/t/counting-matching-parent-documents-by-aggregations-on-child-documents/29055)
**Author:** [@andrisp](https://discuss.elastic.co/u/andrisp)\ **Replies:** 5\ **Last updated:** [September 17, 2015, 6:27am UTC](https://discuss.elastic.co/t/counting-matching-parent-documents-by-aggregations-on-child-documents/29055 "2015-09-17T06:27:40Z")
I have two document types: 1) ads (title, url and similar fields) 2) ad\_views (time, user\_id, gender, age, country and similar fields). ad\_views document type has ads as parent. The wanted end result is search form whe… [Previous page](https://discuss.elastic.co/top.md?page=554&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=556&per_page=50&period=all)