# Top **URL:** https://discuss.elastic.co/top.md?page=560&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 561 --- ## [Best practice to denormalize array objects](https://discuss.elastic.co/t/best-practice-to-denormalize-array-objects/161647)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 3\ **Last updated:** [December 21, 2018, 2:39pm UTC](https://discuss.elastic.co/t/best-practice-to-denormalize-array-objects/161647 "2018-12-21T14:39:15Z")
We're working on a new data structure to display in Kibana and we've got the " Objects in arrays are not well supported" warning. We also found that creating queries on this data structure does not seem straightforward. … --- ## [Basic license after upgrading to 6.3](https://discuss.elastic.co/t/basic-license-after-upgrading-to-6-3/138750)
**Author:** [@lpic10](https://discuss.elastic.co/u/lpic10)\ **Replies:** 2\ **Last updated:** [July 5, 2018, 6:01pm UTC](https://discuss.elastic.co/t/basic-license-after-upgrading-to-6-3/138750 "2018-07-05T18:01:32Z")
Hello, I had a 6.x cluster running with basic license, and it had expired few weeks ago. I took the opportunity to upgrade the cluster to 6.3 but I was still seeing warnings about the expired license, and before upgrad… --- ## [Reporting error / Bad Request](https://discuss.elastic.co/t/reporting-error-bad-request/166848)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [February 6, 2019, 8:07pm UTC](https://discuss.elastic.co/t/reporting-error-bad-request/166848 "2019-02-06T20:07:54Z")
Hello World! Kibana' user added (very long) Elasticsearch Query DSL (via filter), followed by Share-\>Generate CSV CSV report, yet error bellow was displayed at the bottom right corner. Reporting error Bad Request I… --- ## [Telnet logstash not working](https://discuss.elastic.co/t/telnet-logstash-not-working/78281)
**Author:** [@rrs](https://discuss.elastic.co/u/rrs)\ **Replies:** 4\ **Last updated:** [March 13, 2017, 2:44pm UTC](https://discuss.elastic.co/t/telnet-logstash-not-working/78281 "2017-03-13T14:44:13Z")
Hello, I installed logstash as per documentation and service started successfully. But, when we trying telnet localhost 5044, it is not working and the netstat also showing nothing. Can you please suggest me how to fi… --- ## [Filebeat and data.json file, field meaning and service tunning](https://discuss.elastic.co/t/filebeat-and-data-json-file-field-meaning-and-service-tunning/242278)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 0\ **Last updated:** [July 23, 2020, 5:54am UTC](https://discuss.elastic.co/t/filebeat-and-data-json-file-field-meaning-and-service-tunning/242278 "2020-07-23T05:54:05Z")
Dears, The filebeat service have file data.json in /var/lib/filebeat/registry/filebeat. The content of this file looks like: \[ "soure":"/apps/logs/my\_apps/file.log","offset":"308017933","timestamp":"2020-07-23T07:20:38… --- ## [Host not showing up despite events being present](https://discuss.elastic.co/t/host-not-showing-up-despite-events-being-present/223105)
**Author:** [@norup](https://discuss.elastic.co/u/norup)\ **Replies:** 8\ **Last updated:** [March 13, 2020, 1:49pm UTC](https://discuss.elastic.co/t/host-not-showing-up-despite-events-being-present/223105 "2020-03-13T13:49:05Z")
I am running the elk stack on 1 ubuntu device along with filebeat, and metricbeat and this device is showing up fine with syslog data and as a host. Im running winlogbeat on another device, and shipping the logs through … --- ## [Watcher not starting on hosted cluster](https://discuss.elastic.co/t/watcher-not-starting-on-hosted-cluster/70615)
**Author:** [@jakehschwartz](https://discuss.elastic.co/u/jakehschwartz)\ **Replies:** 8\ **Last updated:** [January 9, 2017, 4:55pm UTC](https://discuss.elastic.co/t/watcher-not-starting-on-hosted-cluster/70615 "2017-01-09T16:55:36Z")
Hello all, I have a cluster hosted on elastic cloud and I can index documents to the cluster, but when I try to create or delete watches, I receive the following error { "error": "ElasticsearchIllegalStateExceptio… --- ## [Logstash.stdout](https://discuss.elastic.co/t/logstash-stdout/45152)
**Author:** [@pierrejnelson](https://discuss.elastic.co/u/pierrejnelson)\ **Replies:** 6\ **Last updated:** [March 23, 2016, 1:51pm UTC](https://discuss.elastic.co/t/logstash-stdout/45152 "2016-03-23T13:51:03Z")
Would anyone happen to know what makes this file. I need to move it to where I have all my space but I can't seem to find it. --- ## [Winlogbeat wont send logs](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288)
**Author:** [@kevin.baker](https://discuss.elastic.co/u/kevin.baker)\ **Replies:** 2\ **Last updated:** [January 2, 2019, 7:01pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288 "2019-01-02T19:01:13Z")
Forgive me, Ive been using Elk for less than a week. i am trying to get windows logs forwarded to Logstash, but cant seem to get them to go. I have seen a few different setups with SSL Certs and what not, are those requi… --- ## [Reporting Timeout settings do not work](https://discuss.elastic.co/t/reporting-timeout-settings-do-not-work/71235)
**Author:** [@Borrelworst](https://discuss.elastic.co/u/Borrelworst)\ **Replies:** 5\ **Last updated:** [January 11, 2017, 8:01pm UTC](https://discuss.elastic.co/t/reporting-timeout-settings-do-not-work/71235 "2017-01-11T20:01:11Z")
Hi, In Kibana, when setting timeout settings for the reporting function in kibana.yml to: xpack.reporting.queue.timeout: \*\*\*\* It will not be picked up. I set it to 600000, but it keeps saying: There was an error … --- ## [ES Master suddenly losing connection to data nodes](https://discuss.elastic.co/t/es-master-suddenly-losing-connection-to-data-nodes/25610)
**Author:** [@kimbad](https://discuss.elastic.co/u/kimbad)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 3:05pm UTC](https://discuss.elastic.co/t/es-master-suddenly-losing-connection-to-data-nodes/25610 "2015-10-28T15:05:42Z")
Hi All, I have 3 node cluster running ES v1.3.6 on AWS EC" instances. The cluster comprises of 1 master and 2 data nodes and has been running successfully for over 6 months. The data volumes are fairly small and I have… --- ## [Kibana session issues](https://discuss.elastic.co/t/kibana-session-issues/289299)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 8\ **Last updated:** [February 19, 2022, 12:59am UTC](https://discuss.elastic.co/t/kibana-session-issues/289299 "2022-02-19T00:59:50Z")
Question relating to session timeout issues. We have been having this issue since 7.11 and are currently on 7.13.4. I have been making changes to the following. I got tired of it, and went over board with the following c… --- ## [\[WARN\] Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495)
**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 12:55pm UTC](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495 "2021-11-30T12:55:48Z")
Elasticsearch.log file error \[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[node-1\] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/:9200, remoteAddress=/… --- ## [Adding BasicAuth Credentials to TransportClient](https://discuss.elastic.co/t/adding-basicauth-credentials-to-transportclient/170183)
**Author:** [@arulsince1975](https://discuss.elastic.co/u/arulsince1975)\ **Replies:** 4\ **Last updated:** [February 27, 2019, 7:28pm UTC](https://discuss.elastic.co/t/adding-basicauth-credentials-to-transportclient/170183 "2019-02-27T19:28:26Z")
Hi, I have been trying to use TransportClient instead of HttpClient to connect to ElasticSearch. However I am not sure how basic credentials can be supplied to TransportClient to connect. I know how this can be achieve… --- ## [Grok isn't loading patterns](https://discuss.elastic.co/t/grok-isnt-loading-patterns/100327)
**Author:** [@nivo33](https://discuss.elastic.co/u/nivo33)\ **Replies:** 4\ **Last updated:** [September 14, 2017, 1:32pm UTC](https://discuss.elastic.co/t/grok-isnt-loading-patterns/100327 "2017-09-14T13:32:23Z")
Hi, I have tried to implement some custom grok patterns into a separate file and load it into logstash conf by using patterns\_dir. Each time running logstash with the following conf output a pattern not defined error me… --- ## [Error while creating Elasticsearch API Client(8.0.1) object using Spring Boot](https://discuss.elastic.co/t/error-while-creating-elasticsearch-api-client-8-0-1-object-using-spring-boot/300263)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 3\ **Last updated:** [March 22, 2022, 4:29pm UTC](https://discuss.elastic.co/t/error-while-creating-elasticsearch-api-client-8-0-1-object-using-spring-boot/300263 "2022-03-22T16:29:29Z")
I am implementing Elasticsearch 8.0.1 version using Spring Boot. As mentioned in the documentation, this is the pom.xml of my project \ \ \ \co.elastic.clients\ **Author:** [@swasheck](https://discuss.elastic.co/u/swasheck)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 9:00pm UTC](https://discuss.elastic.co/t/snmp-trap-monitoring-with-logstash/114742 "2018-01-09T21:00:01Z") Currently running ELK 6.1.1 (Docker sebp/elk) and trying to get SNMP trap monitoring functional. My current config is as follows: input { snmptrap { type =\> "snmptrap" host =\> "0.0.0.0" p… --- ## [Config Logstash with https to Elasticsearch cluster](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/249606)
**Author:** [@AkatsukiPain](https://discuss.elastic.co/u/AkatsukiPain)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 6:43am UTC](https://discuss.elastic.co/t/config-logstash-with-https-to-elasticsearch-cluster/249606 "2020-10-05T06:43:20Z")
Error Logs in Logstash \[2020-09-23T12:24:31,929\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://palelasticsearch01mgt:9200/", :erro… --- ## [Logstash - Get index name from filename](https://discuss.elastic.co/t/logstash-get-index-name-from-filename/213891)
**Author:** [@Lubos\_Marek](https://discuss.elastic.co/u/Lubos_Marek)\ **Replies:** 3\ **Last updated:** [January 7, 2020, 10:13am UTC](https://discuss.elastic.co/t/logstash-get-index-name-from-filename/213891 "2020-01-07T10:13:35Z")
Hello, I am loading files by logstash and I would like to know if it possible to set index from filename. For example my files are: system1-yyyyMMdd.csv (system1-20200106.csv) system2-yyyyMMdd.csv (system2-20200106.c… --- ## [Unable to parse custom X-pack watcher](https://discuss.elastic.co/t/unable-to-parse-custom-x-pack-watcher/130944)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 8\ **Last updated:** [May 14, 2018, 5:04am UTC](https://discuss.elastic.co/t/unable-to-parse-custom-x-pack-watcher/130944 "2018-05-14T05:04:56Z")
Hi, I am unable to parse the custom watcher which I've written. I am getting errors in chain transform: Watcher: \[parse\_exception\] could not parse \[search\] transform for watch \[inlined\]. unexpected field \[indices\] Her… --- ## [LogStash for .Net core applications](https://discuss.elastic.co/t/logstash-for-net-core-applications/89471)
**Author:** [@sslv](https://discuss.elastic.co/u/sslv)\ **Replies:** 3\ **Last updated:** [June 15, 2017, 4:50pm UTC](https://discuss.elastic.co/t/logstash-for-net-core-applications/89471 "2017-06-15T16:50:53Z")
Hi, Everyone I am a newbie to Logstash. I found it very interesting. But currently I am dealing with logging related to .netcore application. Am I right in using Log stash for my logging needs? I am confused after seein… --- ## [Connectivity issues with Java client](https://discuss.elastic.co/t/connectivity-issues-with-java-client/43603)
**Author:** [@Shawn\_Johnson](https://discuss.elastic.co/u/Shawn_Johnson)\ **Replies:** 8\ **Last updated:** [March 17, 2016, 6:24pm UTC](https://discuss.elastic.co/t/connectivity-issues-with-java-client/43603 "2016-03-17T18:24:48Z")
I have a simple two node cluster, and I'm trying to run a custom Java client (indexer-client-node0) on the same server as one of the 'data' (XX4) nodes. It happens that data-node2 (XX5) is master at the moment - which m… --- ## [Please help to understand these Exceptions](https://discuss.elastic.co/t/please-help-to-understand-these-exceptions/22515)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 8\ **Last updated:** [March 13, 2015, 2:57pm UTC](https://discuss.elastic.co/t/please-help-to-understand-these-exceptions/22515 "2015-03-13T14:57:36Z")
Hi all, I'm hoping someone can help me piece together the below log entries/stack traces/Exceptions. I have a 3 node cluster in Development in EC2, and two of them had issues. I'm running ES 1.4.4, 32GB RAM, 16GB … --- ## [\[bool\] query does not support \[range\]](https://discuss.elastic.co/t/bool-query-does-not-support-range/169536)
**Author:** [@rajkumar\_E1](https://discuss.elastic.co/u/rajkumar_E1)\ **Replies:** 1\ **Last updated:** [February 22, 2019, 2:58pm UTC](https://discuss.elastic.co/t/bool-query-does-not-support-range/169536 "2019-02-22T14:58:20Z")
Dear Team, I am working on to filter record with match + range filter, but its throw following issue "\[bool\] query does not support \[range\]" What I did: Array ( \[index\] =\> index\_name \[type\] =\> … --- ## [Field data loading is forbidden on Hostname](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-hostname/36786)
**Author:** [@NotSoCleverLogin](https://discuss.elastic.co/u/NotSoCleverLogin)\ **Replies:** 1\ **Last updated:** [December 10, 2015, 5:39am UTC](https://discuss.elastic.co/t/field-data-loading-is-forbidden-on-hostname/36786 "2015-12-10T05:39:24Z")
There are two previous posts that were solved without really any solution being brought up in my opinion. I've stood up the latest version of the ELK stack and my current issue resolves around the error in the topic. … --- ## [ES 2.0 rename cluster](https://discuss.elastic.co/t/es-2-0-rename-cluster/34088)
**Author:** [@renevdm](https://discuss.elastic.co/u/renevdm)\ **Replies:** 5\ **Last updated:** [November 7, 2015, 10:27pm UTC](https://discuss.elastic.co/t/es-2-0-rename-cluster/34088 "2015-11-07T22:27:25Z")
My ES cluster consists of 1 node (so far). If I want to rename the cluster, is it sufficient to adjust the clustername in elasticsearch.yml, or do I have to more? And is it the same when changing a node name? --- ## [Error Installing Marvel](https://discuss.elastic.co/t/error-installing-marvel/44671)
**Author:** [@rameeelastic](https://discuss.elastic.co/u/rameeelastic)\ **Replies:** 4\ **Last updated:** [August 16, 2016, 6:28pm UTC](https://discuss.elastic.co/t/error-installing-marvel/44671 "2016-08-16T18:28:43Z")
I am running the ELK stack on windows 7 64 bit. I am using the latest version of ElasticSearch (version 2.2.1) and I am trying to install marvel plugin but it is throwing some permission error as below @@@@@@@@@@@@@@@… --- ## [ログを4つのログに分割してElasticsearchに送る](https://discuss.elastic.co/t/4-elasticsearch/206889)
**Author:** [@keikei12](https://discuss.elastic.co/u/keikei12)\ **Replies:** 6\ **Last updated:** [November 15, 2019, 1:46am UTC](https://discuss.elastic.co/t/4-elasticsearch/206889 "2019-11-15T01:46:57Z")
下記のようなログをlogstashで整形してElasticSearchに送りたいのですが可能でしょうか？ ＜ログのフォーマット＞ 日付:ログ種別△ログ1△△ログ2△△ログ3△△ログ4 ※△はタブです。 ログ1、ログ2、ログ3、ログ4とそれぞれ別のログとして elasticsearchに送りたいです。 --- ## [Accessing \_id in ingest pipeline](https://discuss.elastic.co/t/accessing-id-in-ingest-pipeline/176503)
**Author:** [@Oleg-Arkhipov](https://discuss.elastic.co/u/Oleg-Arkhipov)\ **Replies:** 6\ **Last updated:** [April 12, 2019, 8:23pm UTC](https://discuss.elastic.co/t/accessing-id-in-ingest-pipeline/176503 "2019-04-12T20:23:55Z")
Search After documentation (as well as one or two other places in docs) state that aggregation and sorting on \_id field is inefficient, and it is better to create a duplicate of \_id in another ordinary field with doc\_va… --- ## [Logstash dynamic id](https://discuss.elastic.co/t/logstash-dynamic-id/122627)
**Author:** [@1243user](https://discuss.elastic.co/u/1243user)\ **Replies:** 8\ **Last updated:** [March 6, 2018, 6:40am UTC](https://discuss.elastic.co/t/logstash-dynamic-id/122627 "2018-03-06T06:40:31Z")
i am using elasticsearch + logstash + kibana . i have i question , i get log data like this : 2018-03-01 18:03:13.504 INFO 30613 --- \[nio-8040-exec-3\] com.gh.controller.LogController : log/SearchIndex … --- ## [Grok Regex - Captured and Non-Captured Groups](https://discuss.elastic.co/t/grok-regex-captured-and-non-captured-groups/41417)
**Author:** [@bhatch](https://discuss.elastic.co/u/bhatch)\ **Replies:** 2\ **Last updated:** [February 10, 2016, 8:15pm UTC](https://discuss.elastic.co/t/grok-regex-captured-and-non-captured-groups/41417 "2016-02-10T20:15:56Z")
I have some data coming into Logstash that has an email address. What I want to do is create a new column with just the domain. This will allow us to better look for trends and issues by domain. None of the existing G… --- ## [How to sort day of week in kibana?](https://discuss.elastic.co/t/how-to-sort-day-of-week-in-kibana/49531)
**Author:** [@saba\_soltani](https://discuss.elastic.co/u/saba_soltani)\ **Replies:** 3\ **Last updated:** [May 2, 2017, 12:54pm UTC](https://discuss.elastic.co/t/how-to-sort-day-of-week-in-kibana/49531 "2017-05-02T12:54:07Z")
Hi I have a string field in my data set "Week\_day" which contains Monday , Tuesday ,.... . I want to create a barchart to show average of sales in each day during a period. when I am using bar chart and average aggreg… --- ## [Unknown setting 'user/password' for elasticsearch {:level=\>:error}](https://discuss.elastic.co/t/unknown-setting-user-password-for-elasticsearch-level-error/1959)
**Author:** [@Raman\_Saini](https://discuss.elastic.co/u/Raman_Saini)\ **Replies:** 2\ **Last updated:** [June 8, 2015, 6:11am UTC](https://discuss.elastic.co/t/unknown-setting-user-password-for-elasticsearch-level-error/1959 "2015-06-08T06:11:24Z")
Hi all, Please help to fix this issue. I am using elastic search with shield and logstash. When i try to run logstash i am getting below error Unknown setting 'user' for elasticsearch {:level=\>:error} Unknown setti… --- ## [Could we monitor multiple ES clusters using a single Monitoring ES cluster?](https://discuss.elastic.co/t/could-we-monitor-multiple-es-clusters-using-a-single-monitoring-es-cluster/142472)
**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\ **Replies:** 6\ **Last updated:** [August 14, 2018, 12:03pm UTC](https://discuss.elastic.co/t/could-we-monitor-multiple-es-clusters-using-a-single-monitoring-es-cluster/142472 "2018-08-14T12:03:06Z")
I have a use case that i have 2 ES clusters let us say es1 and es2, is it possible that i can monitor both of these clusters using a single monitring ES custer let us say esMonit1. So what happens is when we enable xpac… --- ## [Nodes being dropped from cluster](https://discuss.elastic.co/t/nodes-being-dropped-from-cluster/263161)
**Author:** [@khuang](https://discuss.elastic.co/u/khuang)\ **Replies:** 7\ **Last updated:** [February 5, 2021, 7:20pm UTC](https://discuss.elastic.co/t/nodes-being-dropped-from-cluster/263161 "2021-02-05T19:20:04Z")
I am currently trying to set up a 17 node cluster. 3 master nodes - 4 vCPU, 12 GB RAM, 7 GB Heap 10 data nodes - 15 vCPU, 116 GB RAM, 32 GB Heap 3 ingest nodes - 7 vCPU, 8 GB RAM, 2 GB Heap (Is this enough?) 1 coordi… --- ## [How to parse suricata rules with logstash](https://discuss.elastic.co/t/how-to-parse-suricata-rules-with-logstash/292548)
**Author:** [@karpaz](https://discuss.elastic.co/u/karpaz)\ **Replies:** 7\ **Last updated:** [January 11, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-to-parse-suricata-rules-with-logstash/292548 "2022-01-11T11:58:54Z")
Hi, guys, I've been solving a "parsing" problem for a while now. First I tried it with GROK, then with KV filter. I have not been successful with either method. So I am turning to you for help to see if anyone experien… --- ## [Multiple patterns in grok filter](https://discuss.elastic.co/t/multiple-patterns-in-grok-filter/153106)
**Author:** [@Billz1026](https://discuss.elastic.co/u/Billz1026)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 6:05am UTC](https://discuss.elastic.co/t/multiple-patterns-in-grok-filter/153106 "2018-10-19T06:05:44Z")
Hi, I have written following grok filter to match multiple log formats. filter { grok { match =\> { "message" =\> "%{MONTH:Month}%{SPACE}%{NUMBER:Day} %{TIME:Time} %{IP:Host} %{NUMBER:SEQ\_NO}: %{DATA:Month\_From\_Device… --- ## [Failed to start filebeat service on centos 7](https://discuss.elastic.co/t/failed-to-start-filebeat-service-on-centos-7/105027)
**Author:** [@curious1](https://discuss.elastic.co/u/curious1)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 12:41pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-service-on-centos-7/105027 "2017-10-25T12:41:36Z")
I am running rails application on this server and i want to forward rails logs to logstash installed on another centos server . I have added logstasher gem for json formatted logs. But when i do sudo service filebeat st… --- ## [Logstash to ECS](https://discuss.elastic.co/t/logstash-to-ecs/193994)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 4\ **Last updated:** [August 13, 2019, 1:16pm UTC](https://discuss.elastic.co/t/logstash-to-ecs/193994 "2019-08-13T13:16:50Z")
Since the beats modules can collect data and emit ECS format, is it possible to send data to a logstash node that contains the same data and have logstash perform the ECS conversion work. Example: legacy systems utilize… --- ## [Very Slow Scrolling](https://discuss.elastic.co/t/very-slow-scrolling/88523)
**Author:** [@blanks](https://discuss.elastic.co/u/blanks)\ **Replies:** 4\ **Last updated:** [June 8, 2017, 12:19pm UTC](https://discuss.elastic.co/t/very-slow-scrolling/88523 "2017-06-08T12:19:25Z")
I want to get all my data (logs) out of elasticsearch with the elastic package for r. I use the scrolling api (size 10000), but it takes forever (9 minutes) to get 2,5 million documents. I have one node with a SSD and 16… --- ## [Logstash Configuration Issues](https://discuss.elastic.co/t/logstash-configuration-issues/116062)
**Author:** [@Bheeshma](https://discuss.elastic.co/u/Bheeshma)\ **Replies:** 2\ **Last updated:** [February 6, 2018, 4:28pm UTC](https://discuss.elastic.co/t/logstash-configuration-issues/116062 "2018-02-06T16:28:11Z")
Hi, I am new to this forum, trying to learn the ELK stack on my own . Thanks to ELK documentation on the website uploaded. i was able to install and configure Elastic Search, Kibana softwares however when trying to con… --- ## [Sorting in Kibana Data Table Visualization](https://discuss.elastic.co/t/sorting-in-kibana-data-table-visualization/274200)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 1\ **Last updated:** [May 27, 2021, 2:36pm UTC](https://discuss.elastic.co/t/sorting-in-kibana-data-table-visualization/274200 "2021-05-27T14:36:29Z")
Hi All, I have been using Elastic Cloud for more than 6 months now. The version I am using is 7.12. I am trying to create a data table visualization in Kibana. I have a couple of buckets(Category and Sub-Category) and … --- ## [Cannot extract value from entity](https://discuss.elastic.co/t/cannot-extract-value-from-entity/66556)
**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\ **Replies:** 1\ **Last updated:** [November 18, 2016, 4:17pm UTC](https://discuss.elastic.co/t/cannot-extract-value-from-entity/66556 "2016-11-18T16:17:15Z")
I've had this script running for some time but it suddenly started throwing an error. The error message looks like my device\_id is in a nested array in my table but after inspecting the table it is not. def esConfig()… --- ## [Filebeat kafka ssl output](https://discuss.elastic.co/t/filebeat-kafka-ssl-output/269652)
**Author:** [@madhan\_dhanikachalam](https://discuss.elastic.co/u/madhan_dhanikachalam)\ **Replies:** 4\ **Last updated:** [April 9, 2021, 5:12pm UTC](https://discuss.elastic.co/t/filebeat-kafka-ssl-output/269652 "2021-04-09T17:12:32Z")
Trying to set up ssl kafka output in filebeat. reading a log file and sending to kafka. non-ssl works fine. for ssl i am trying the below #---- kafka output output.kafka: # initial brokers for reading cluster metadat… --- ## [Is there a way to set Kibana's default timezone to UTC from the yml file?](https://discuss.elastic.co/t/is-there-a-way-to-set-kibanas-default-timezone-to-utc-from-the-yml-file/193976)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 4\ **Last updated:** [August 14, 2019, 3:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-set-kibanas-default-timezone-to-utc-from-the-yml-file/193976 "2019-08-14T15:56:18Z")
We are using Kibana 6.5.4, and have an issue where our data which is timestamped in UTC from our applications, is showing up incorrectly in Kibana. I've found this is because the Kibana settings default to using the brow… --- ## [One Input Event - 2 Output Events](https://discuss.elastic.co/t/one-input-event-2-output-events/127920)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 4\ **Last updated:** [April 13, 2018, 10:31am UTC](https://discuss.elastic.co/t/one-input-event-2-output-events/127920 "2018-04-13T10:31:32Z")
We have tomcat access logs which we read from a FileBeat input and pass to an ElasticSearch output IndexA (fields a, b, c). We would however like to have some of these log entries (the 400 and 500 errors) additionally i… --- ## [Running elasticsearch (5.1.1) as root (kali linux)](https://discuss.elastic.co/t/running-elasticsearch-5-1-1-as-root-kali-linux/70022)
**Author:** [@nas\_bench](https://discuss.elastic.co/u/nas_bench)\ **Replies:** 4\ **Last updated:** [December 26, 2016, 9:54pm UTC](https://discuss.elastic.co/t/running-elasticsearch-5-1-1-as-root-kali-linux/70022 "2016-12-26T21:54:10Z")
So here is my problem, i installed elasticsearch and navigated to where it was installed and i tried to run it. but when i type ./elasticsearch i get this message Exception in thread "main" org.elasticsearch.bootstrap.… --- ## [Unanalyzed fields](https://discuss.elastic.co/t/unanalyzed-fields/37272)
**Author:** [@OscarCrespo](https://discuss.elastic.co/u/OscarCrespo)\ **Replies:** 4\ **Last updated:** [January 18, 2016, 8:40pm UTC](https://discuss.elastic.co/t/unanalyzed-fields/37272 "2016-01-18T20:40:33Z")
hi, i need help to correct kibana field. when I try to visualizing the fields, shown me the following warning: "Careful! The field contains Analyzed selected strings. Analyzed strings are highly unique and can use a l… --- ## [\[ANNOUNCEMENT\] logstash-output-firebase released](https://discuss.elastic.co/t/announcement-logstash-output-firebase-released/71396)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [January 12, 2017, 3:19pm UTC](https://discuss.elastic.co/t/announcement-logstash-output-firebase-released/71396 "2017-01-12T15:19:49Z")
As promised earlier, a new Logstash output plugin called logstash-output-firebase is now available to sink event data to your Firebase real-time databases. This plugin supports the four REST operations provided by Fir… --- ## [Truncate/delete the entire index once new data arrives from Logstash](https://discuss.elastic.co/t/truncate-delete-the-entire-index-once-new-data-arrives-from-logstash/181163)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 3\ **Last updated:** [May 27, 2019, 8:28am UTC](https://discuss.elastic.co/t/truncate-delete-the-entire-index-once-new-data-arrives-from-logstash/181163 "2019-05-27T08:28:11Z")
Hello Guys, We are preparing a pipeline, responsible for getting the 'current state' of data in our source table. What it means is that the source table contains let's say 10 records. We would like to reflect those 10 … [Previous page](https://discuss.elastic.co/top.md?page=559&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=561&per_page=50&period=all)