# Top

**URL:** https://discuss.elastic.co/top.md?page=563&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 564

---

## [Elastic Stack Release - 5.0.0-alpha3](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-alpha3/51452)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [May 31, 2016, 4:22pm UTC](https://discuss.elastic.co/t/elastic-stack-release-5-0-0-alpha3/51452 "2016-05-31T16:22:41Z")

</div>

Hi all, we are pleased to announce 5.0.0-alpha3 for the entire Elastic Stack has been released!! Blog: https://www.elastic.co/blog/elastic-stack-release-5-0-0-alpha-3 Downloads: https://www.elastic.co/downloads Ple…

---

## [Links of existing graphs on Kibana Dashboard](https://discuss.elastic.co/t/links-of-existing-graphs-on-kibana-dashboard/28754)

<div class="topic-metadata">

**Author:** [@Sar82](https://discuss.elastic.co/u/Sar82)\
**Replies:** 5\
**Last updated:** [September 8, 2015, 5:04am UTC](https://discuss.elastic.co/t/links-of-existing-graphs-on-kibana-dashboard/28754 "2015-09-08T05:04:08Z")

</div>

Hi I want to show a link of existing graph or dashboard on another dashboard. Click on that link will navigate me to that graph or dashboard. To do this I used widget where I specified URL of a graph. But I am facing 2 d…

---

## [Watcher: \[illegal\_argument\_exception\] no accounts of type \[slack\] configured. Please set up an account using the \[xpack.notification.slack\] settings](https://discuss.elastic.co/t/watcher-illegal-argument-exception-no-accounts-of-type-slack-configured-please-set-up-an-account-using-the-xpack-notification-slack-settings/116307)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [January 20, 2018, 3:58pm UTC](https://discuss.elastic.co/t/watcher-illegal-argument-exception-no-accounts-of-type-slack-configured-please-set-up-an-account-using-the-xpack-notification-slack-settings/116307 "2018-01-20T15:58:02Z")

</div>

I'm trying to follow: Slack Action | X-Pack for the Elastic Stack \[6.1\] | Elastic, yet getting following message: Watcher: \[illegal\_argument\_exception\] no accounts of type \[slack\] configured. Please set up an account u…

---

## [Thread selection and locking](https://discuss.elastic.co/t/thread-selection-and-locking/26051)

<div class="topic-metadata">

**Author:** [@Ilija\_Subasic1](https://discuss.elastic.co/u/Ilija_Subasic1)\
**Replies:** 4\
**Last updated:** [July 24, 2015, 1:26pm UTC](https://discuss.elastic.co/t/thread-selection-and-locking/26051 "2015-07-24T13:26:19Z")

</div>

Hi all, We have a encountered a slow down of our elasticsearch services, and profiling showed us that most time is spent on java.nio.channels.selector.SelectImpl.select(), which I think means es is waiting for next a…

---

## [Filebeat is connected to Kafka, but it doesn't send Log](https://discuss.elastic.co/t/filebeat-is-connected-to-kafka-but-it-doesnt-send-log/303302)

<div class="topic-metadata">

**Author:** [@CemG](https://discuss.elastic.co/u/CemG)\
**Replies:** 6\
**Last updated:** [April 27, 2022, 9:41am UTC](https://discuss.elastic.co/t/filebeat-is-connected-to-kafka-but-it-doesnt-send-log/303302 "2022-04-27T09:41:37Z")

</div>

Hello, It is been 2 days that I have this issue. I would like to send log from a computer to elastic by the following way : Filebeat → Kafka → Logstash → Elasticsearch But Filebeat do not send log to Kafka and I don'…

---

## [Can not upload synonyms file in the elastic cloud](https://discuss.elastic.co/t/can-not-upload-synonyms-file-in-the-elastic-cloud/286888)

<div class="topic-metadata">

**Author:** [@aninda\_halder](https://discuss.elastic.co/u/aninda_halder)\
**Replies:** 5\
**Last updated:** [October 16, 2021, 6:27pm UTC](https://discuss.elastic.co/t/can-not-upload-synonyms-file-in-the-elastic-cloud/286888 "2021-10-16T18:27:43Z")

</div>

Can you help me to upload synonyms and stop word files in cloud ? After doing some googling i found this this link, and successfully add a custom extension but i can not enable them for existing Elasticsearch deployments…

---

## [Are persistent queues needed with Filebeat?](https://discuss.elastic.co/t/are-persistent-queues-needed-with-filebeat/98756)

<div class="topic-metadata">

**Author:** [@baldur](https://discuss.elastic.co/u/baldur)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 10:05pm UTC](https://discuss.elastic.co/t/are-persistent-queues-needed-with-filebeat/98756 "2017-08-30T22:05:24Z")

</div>

Hi all, I’m testing a simple Elastic Stack deployment to test Logstash without persistent queues. In this deployment, Logstash only gets data from Filebeats (apache logs). Both Logstash and Filebeat run fine and seem to…

---

## [Cannot set up email alert in Watcher](https://discuss.elastic.co/t/cannot-set-up-email-alert-in-watcher/113081)

<div class="topic-metadata">

**Author:** [@SIJIA\_CHEN](https://discuss.elastic.co/u/SIJIA_CHEN)\
**Replies:** 7\
**Last updated:** [January 2, 2018, 3:11am UTC](https://discuss.elastic.co/t/cannot-set-up-email-alert-in-watcher/113081 "2018-01-02T03:11:44Z")

</div>

Hi， I installed x-pack (both in Elasticsearch and Kibana, and also restarted all services) and tried to set an email alert by using watcher. However, when I clicked "test fire email", it gave me error showing " Watcher:…

---

## ["Inject" external value for sorting](https://discuss.elastic.co/t/inject-external-value-for-sorting/7686)

<div class="topic-metadata">

**Author:** [@Vadim\_Voituk](https://discuss.elastic.co/u/Vadim_Voituk)\
**Replies:** 7\
**Last updated:** [May 22, 2012, 3:19pm UTC](https://discuss.elastic.co/t/inject-external-value-for-sorting/7686 "2012-05-22T15:19:23Z")

</div>

Hello, What i'm trying ot implement is an ES-plugin, that "inject" some kind of external value (number) into document during search. Then this value will should be used in a sorting expression ("sort script"). M…

---

## [Kibana not compressing HTTP responses](https://discuss.elastic.co/t/kibana-not-compressing-http-responses/266989)

<div class="topic-metadata">

**Author:** [@juan.domenech](https://discuss.elastic.co/u/juan.domenech)\
**Replies:** 4\
**Last updated:** [April 9, 2021, 7:46am UTC](https://discuss.elastic.co/t/kibana-not-compressing-http-responses/266989 "2021-04-09T07:46:41Z")

</div>

Recently I've updated to Kibana 7.11.1 and I've noticed slow performance specially in Discover when many documents are returned. After some investigation I've noticed that Kibana is no longer compressing the response of…

---

## [Search with multiple keywords in Elastic](https://discuss.elastic.co/t/search-with-multiple-keywords-in-elastic/56984)

<div class="topic-metadata">

**Author:** [@Muru](https://discuss.elastic.co/u/Muru)\
**Replies:** 4\
**Last updated:** [August 2, 2016, 10:17am UTC](https://discuss.elastic.co/t/search-with-multiple-keywords-in-elastic/56984 "2016-08-02T10:17:52Z")

</div>

For Example, I have a organisation called Elastic and its having multiple products. I want search "loghash" in Elastic. "bool" =\> \[ "must" =\> \[ "match" =\> \[ "organisation" =\> "Elastic" \], "match" =\> \[ …

---

## [How to add a timestamp field with the indexing time in elasticsearch](https://discuss.elastic.co/t/how-to-add-a-timestamp-field-with-the-indexing-time-in-elasticsearch/62723)

<div class="topic-metadata">

**Author:** [@ericpietro](https://discuss.elastic.co/u/ericpietro)\
**Replies:** 2\
**Last updated:** [October 12, 2016, 9:23am UTC](https://discuss.elastic.co/t/how-to-add-a-timestamp-field-with-the-indexing-time-in-elasticsearch/62723 "2016-10-12T09:23:18Z")

</div>

hi everybody, this is my problem: before 2.0.0 elasticsearch version, elasticsearch add a field called "\_timestamp" when indexing each log line.. but now, it's deprecated. :sleepy: my elasticsezarch version is : 2.3.3. h…

---

## [Field with different types on same index](https://discuss.elastic.co/t/field-with-different-types-on-same-index/315047)

<div class="topic-metadata">

**Author:** [@prabello](https://discuss.elastic.co/u/prabello)\
**Replies:** 5\
**Last updated:** [September 23, 2022, 11:41pm UTC](https://discuss.elastic.co/t/field-with-different-types-on-same-index/315047 "2022-09-23T23:41:33Z")

</div>

Currently, we are indexing information on elastic for each business that is our customer (B2B), this is causing us to have too many indexes, some with very small shards (500mb shards) But due to the nature of the data, …

---

## [Title case conversion in logstash filter-mutate](https://discuss.elastic.co/t/title-case-conversion-in-logstash-filter-mutate/119443)

<div class="topic-metadata">

**Author:** [@sujeetKumar](https://discuss.elastic.co/u/sujeetKumar)\
**Replies:** 6\
**Last updated:** [March 29, 2018, 12:31pm UTC](https://discuss.elastic.co/t/title-case-conversion-in-logstash-filter-mutate/119443 "2018-03-29T12:31:52Z")

</div>

Env- Elastic 5.5 Requirement: For Kibana Region map, Country Name is required in Title case. So, I can do this in logstash. I have tried below statement: filter { mutate { gsub =\> \[ # replace all first character o…

---

## [How can i schedule logstash every second for file input plugin?](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-second-for-file-input-plugin/216605)

<div class="topic-metadata">

**Author:** [@Gunawan\_Kevin](https://discuss.elastic.co/u/Gunawan_Kevin)\
**Replies:** 4\
**Last updated:** [January 30, 2020, 2:13am UTC](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-second-for-file-input-plugin/216605 "2020-01-30T02:13:02Z")

</div>

Hi All I want to make schedule in file input like jdbc input and i already used start\_interval and discover\_interval in my file input but still didn't work. is there another way for make file input schedule in every 5…

---

## [Logstash Date parsing (with AM/PM data) for YYYY-MM-dd HH:mm:ss,SSS format](https://discuss.elastic.co/t/logstash-date-parsing-with-am-pm-data-for-yyyy-mm-dd-hhss-sss-format/186094)

<div class="topic-metadata">

**Author:** [@abinashkd](https://discuss.elastic.co/u/abinashkd)\
**Replies:** 3\
**Last updated:** [June 20, 2019, 11:09am UTC](https://discuss.elastic.co/t/logstash-date-parsing-with-am-pm-data-for-yyyy-mm-dd-hhss-sss-format/186094 "2019-06-20T11:09:43Z")

</div>

Hi, I am new to logstash. With some R&D I have written a grok, but don't weather it validates or not. Input: ####\<Jun 17, 2019 1:33:20 PM GMT\> Output: I need the date in the format of 2019-06-17T13:33:20.000Z in ES…

---

## [Es 7 and docker single node cluster](https://discuss.elastic.co/t/es-7-and-docker-single-node-cluster/176585)

<div class="topic-metadata">

**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\
**Replies:** 3\
**Last updated:** [April 16, 2019, 7:16am UTC](https://discuss.elastic.co/t/es-7-and-docker-single-node-cluster/176585 "2019-04-16T07:16:56Z")

</div>

I'm trying to get a single node docker node up and running for testing. It seems things have changed since 6.7 and it now aborts with a "the default discovery settings are unsuitable for production use; at least one of \[…

---

## [Node hostname on filebeat events](https://discuss.elastic.co/t/node-hostname-on-filebeat-events/205673)

<div class="topic-metadata">

**Author:** [@ndg](https://discuss.elastic.co/u/ndg)\
**Replies:** 5\
**Last updated:** [October 30, 2019, 3:53pm UTC](https://discuss.elastic.co/t/node-hostname-on-filebeat-events/205673 "2019-10-30T15:53:11Z")

</div>

I created a post yesterday and i can't find it, so i hope this isn't flag as repost. I wanted to know if there was a way for filebeat to send specific metada from the node because right now i am getting a nod id for each…

---

## [Elastic Cloud can't login with AWS SSO](https://discuss.elastic.co/t/elastic-cloud-cant-login-with-aws-sso/172924)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 5\
**Last updated:** [March 26, 2019, 6:40am UTC](https://discuss.elastic.co/t/elastic-cloud-cant-login-with-aws-sso/172924 "2019-03-26T06:40:14Z")

</div>

Dear Elastic, Those 2 days I've been fighting with Elastic Cloud auth with AWS SSO, But It doesn't work, I don't know what am I missing about configuration on Elastic Cloud or AWS SSO. Could someone help me out? Rega…

---

## [Elasticsearch overhead all the time](https://discuss.elastic.co/t/elasticsearch-overhead-all-the-time/156571)

<div class="topic-metadata">

**Author:** [@liuyang1943](https://discuss.elastic.co/u/liuyang1943)\
**Replies:** 5\
**Last updated:** [November 16, 2018, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-overhead-all-the-time/156571 "2018-11-16T07:24:48Z")

</div>

I deployed ELK in one node, and configured the Elasticsearch's memory with 10G, no other changes for ES. But every time, when I perform the query from Kibana, the ES always reported the error as :slight\_smile: \[2018-11…

---

## [Using Elasticsearch and Kibana with Magento 1.9 for forecasting and BI?](https://discuss.elastic.co/t/using-elasticsearch-and-kibana-with-magento-1-9-for-forecasting-and-bi/83669)

<div class="topic-metadata">

**Author:** [@Haris\_Music](https://discuss.elastic.co/u/Haris_Music)\
**Replies:** 0\
**Last updated:** [April 26, 2017, 9:14am UTC](https://discuss.elastic.co/t/using-elasticsearch-and-kibana-with-magento-1-9-for-forecasting-and-bi/83669 "2017-04-26T09:14:28Z")

</div>

I am really excited about Elasticsearch, but I have a tough time figuring out if it's a Mission Impossible to actually do what I have in mind: I would like to build a BI (business intelligence) system with some forecas…

---

## [Aggregate over multiple keys in the document, without knowing the key details](https://discuss.elastic.co/t/aggregate-over-multiple-keys-in-the-document-without-knowing-the-key-details/158238)

<div class="topic-metadata">

**Author:** [@User\_User](https://discuss.elastic.co/u/User_User)\
**Replies:** 6\
**Last updated:** [November 27, 2018, 3:37pm UTC](https://discuss.elastic.co/t/aggregate-over-multiple-keys-in-the-document-without-knowing-the-key-details/158238 "2018-11-27T15:37:42Z")

</div>

I am new to Elastic Search and was exploring aggregation query. The documents I have are in the format - {"name":"A", "class":"10th", "subjects":{ "S1":92, "S2":92, "S3":92, } }…

---

## [Elasticsearch -Understanding Hot Threads](https://discuss.elastic.co/t/elasticsearch-understanding-hot-threads/150132)

<div class="topic-metadata">

**Author:** [@somnath.guthula](https://discuss.elastic.co/u/somnath.guthula)\
**Replies:** 4\
**Last updated:** [September 28, 2018, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-understanding-hot-threads/150132 "2018-09-28T07:29:36Z")

</div>

Hi, We are running a 9 Node Cluster on which I am seeing very high CPU Utilisation. (nodes.process.cpu.percent). This metric sometimes reaches 200%. I am not sure If I am able to understand the underlying cause to fix it…

---

## [Cisco Log](https://discuss.elastic.co/t/cisco-log/80280)

<div class="topic-metadata">

**Author:** [@mhalatuituia](https://discuss.elastic.co/u/mhalatuituia)\
**Replies:** 5\
**Last updated:** [April 3, 2017, 10:17am UTC](https://discuss.elastic.co/t/cisco-log/80280 "2017-04-03T10:17:16Z")

</div>

hi i have been trying for quite some time but i cannot get it to work .... here is my config .. file \>\>\>\>\>\>\>\> 02-beat-input.conf input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/…

---

## [Terms aggregation returns no buckets if some records are missing the field?](https://discuss.elastic.co/t/terms-aggregation-returns-no-buckets-if-some-records-are-missing-the-field/1885)

<div class="topic-metadata">

**Author:** [@aswan](https://discuss.elastic.co/u/aswan)\
**Replies:** 5\
**Last updated:** [June 10, 2015, 9:33pm UTC](https://discuss.elastic.co/t/terms-aggregation-returns-no-buckets-if-some-records-are-missing-the-field/1885 "2015-06-10T21:33:14Z")

</div>

I'm using elasticsearch 1.5.0 and I have a bunch of web access logs. Due to a glitch inserting, I omitted the response field from some records. But this seems to have broken terms aggregations on that field: $ curl …

---

## [Curl'ing Kibana Dashboards exported into NDJSON](https://discuss.elastic.co/t/curling-kibana-dashboards-exported-into-ndjson/325012)

<div class="topic-metadata">

**Author:** [@plissken](https://discuss.elastic.co/u/plissken)\
**Replies:** 8\
**Last updated:** [February 10, 2023, 4:55pm UTC](https://discuss.elastic.co/t/curling-kibana-dashboards-exported-into-ndjson/325012 "2023-02-10T16:55:49Z")

</div>

I'm having considerable difficulty in understanding the documentation on the Kibana API's. There's so much out of date information on the web that I could literally spend months doing syntax jenga. I have a set of dash…

---

## [Old logs?](https://discuss.elastic.co/t/old-logs/110223)

<div class="topic-metadata">

**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\
**Replies:** 6\
**Last updated:** [December 26, 2017, 10:29pm UTC](https://discuss.elastic.co/t/old-logs/110223 "2017-12-26T22:29:03Z")

</div>

I recently upgrade our elasticstack from 2.4 to 5.6.4 which went fairly smoothly. I'm seeing lots of the following in the logstash logs tho: \[2017-12-04T22:29:34,620\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying fai…

---

## [Help with grokking when the logs aren't of a definite format](https://discuss.elastic.co/t/help-with-grokking-when-the-logs-arent-of-a-definite-format/163353)

<div class="topic-metadata">

**Author:** [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)\
**Replies:** 3\
**Last updated:** [January 8, 2019, 9:09pm UTC](https://discuss.elastic.co/t/help-with-grokking-when-the-logs-arent-of-a-definite-format/163353 "2019-01-08T21:09:20Z")

</div>

Hi, I have stream of logs coming in and I ship them using filebeat to logstash. One such event looks like this 1545371943.464899 IP 92.42.189.139.80 \> 185.234.217.231.55618: Flags \[P.\], seq 1:513, ack 172, win 260, op…

---

## [Login API CORS issue with localhost](https://discuss.elastic.co/t/login-api-cors-issue-with-localhost/94528)

<div class="topic-metadata">

**Author:** [@Sannj](https://discuss.elastic.co/u/Sannj)\
**Replies:** 3\
**Last updated:** [July 27, 2017, 8:58pm UTC](https://discuss.elastic.co/t/login-api-cors-issue-with-localhost/94528 "2017-07-27T20:58:56Z")

</div>

Hi, we are working with elastic search and kibana. We have them on different servers. We need to embed the kibana dashboard in an iframe in our react page. We are trying to auto-login by making an API call (/api/securi…

---

## [boolQuery: nested clauses and dynamically adding new ones](https://discuss.elastic.co/t/boolquery-nested-clauses-and-dynamically-adding-new-ones/24879)

<div class="topic-metadata">

**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\
**Replies:** 3\
**Last updated:** [July 7, 2015, 6:31am UTC](https://discuss.elastic.co/t/boolquery-nested-clauses-and-dynamically-adding-new-ones/24879 "2015-07-07T06:31:39Z")

</div>

Hi all, I am using the Java client. I am using QueryBuilders.boolQuery() to dynamically construct a DSL bool query for a nested object field. Example query looks this and it part of a query. This query could grow given…

---

## [Knowlegde Graphs, ELK and NEO4j](https://discuss.elastic.co/t/knowlegde-graphs-elk-and-neo4j/351686)

<div class="topic-metadata">

**Author:** [@wil93](https://discuss.elastic.co/u/wil93)\
**Replies:** 4\
**Last updated:** [February 1, 2024, 2:47pm UTC](https://discuss.elastic.co/t/knowlegde-graphs-elk-and-neo4j/351686 "2024-02-01T14:47:48Z")

</div>

Hello, I would like to use ‘knowledge graph’ capabilities to detect and identify potential relationships and patterns in data (1). That data is currently stored in Elasticsearch indices. I would like to detect relation…

---

## [Steps to Install and Configure SQL Server with Logstash](https://discuss.elastic.co/t/steps-to-install-and-configure-sql-server-with-logstash/134854)

<div class="topic-metadata">

**Author:** [@Minasys](https://discuss.elastic.co/u/Minasys)\
**Replies:** 2\
**Last updated:** [June 7, 2018, 10:52am UTC](https://discuss.elastic.co/t/steps-to-install-and-configure-sql-server-with-logstash/134854 "2018-06-07T10:52:32Z")

</div>

I'm trying to find a step by step tutorial to install and configure SQL Server with Logstash or Elasticsearch and I can't find full ones. I need help doing that as I'm new to Elasticsearch!

---

## [Tuning for high update and delete rate](https://discuss.elastic.co/t/tuning-for-high-update-and-delete-rate/14079)

<div class="topic-metadata">

**Author:** [@Dan\_Everton](https://discuss.elastic.co/u/Dan_Everton)\
**Replies:** 5\
**Last updated:** [December 12, 2013, 5:07am UTC](https://discuss.elastic.co/t/tuning-for-high-update-and-delete-rate/14079 "2013-12-12T05:07:36Z")

</div>

Howdy, One of our indices has a fairly high document count (around 100 million) and a high update and delete rate. In any given day, maybe a quarter of those documents will be updated, replaced, or deleted. Given …

---

## [Filebeat warning log "Cannot index event"](https://discuss.elastic.co/t/filebeat-warning-log-cannot-index-event/368808)

<div class="topic-metadata">

**Author:** [@rodolk](https://discuss.elastic.co/u/rodolk)\
**Replies:** 7\
**Last updated:** [September 23, 2025, 8:26am UTC](https://discuss.elastic.co/t/filebeat-warning-log-cannot-index-event/368808 "2025-09-23T08:26:58Z")

</div>

When sending logs from Filebeat to Elasticsearch, when there is an indexing error, Filebeat will log the message Cannot index event (status=400): dropping event! Look at the event log to view the event and cause." The …

---

## [Watcher Email has Incorrect Format Using Mustache Template](https://discuss.elastic.co/t/watcher-email-has-incorrect-format-using-mustache-template/29344)

<div class="topic-metadata">

**Author:** [@deck](https://discuss.elastic.co/u/deck)\
**Replies:** 3\
**Last updated:** [September 16, 2015, 8:43pm UTC](https://discuss.elastic.co/t/watcher-email-has-incorrect-format-using-mustache-template/29344 "2015-09-16T20:43:48Z")

</div>

I have recently created a watch that is supposed to send a formatted email with details about the query to the recipients. As a test to get the format of an html table correct I have the email body setup like this: "b…

---

## [Filebeat No data has been received from this module yet](https://discuss.elastic.co/t/filebeat-no-data-has-been-received-from-this-module-yet/207705)

<div class="topic-metadata">

**Author:** [@yasharne](https://discuss.elastic.co/u/yasharne)\
**Replies:** 2\
**Last updated:** [November 15, 2019, 4:44pm UTC](https://discuss.elastic.co/t/filebeat-no-data-has-been-received-from-this-module-yet/207705 "2019-11-15T16:44:12Z")

</div>

I have a container for kibana on a network named emk and mapped port of 5601 and a container for filebeat on the emk and three redis containers on emk and logstach on emk. I can ping all hosts from each other. I tried t…

---

## [How to use variable in canvas](https://discuss.elastic.co/t/how-to-use-variable-in-canvas/303842)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 1\
**Last updated:** [May 9, 2022, 3:05pm UTC](https://discuss.elastic.co/t/how-to-use-variable-in-canvas/303842 "2022-05-09T15:05:12Z")

</div>

Hi, I am trying to use canvas variable's within ESQL query and cannot work out the syntax, I have it working within Markdown but cannot work it out within my query, I've searched the support and discuss and tried a numb…

---

## [Data and indexes lost after restart](https://discuss.elastic.co/t/data-and-indexes-lost-after-restart/88851)

<div class="topic-metadata">

**Author:** [@Pippo](https://discuss.elastic.co/u/Pippo)\
**Replies:** 1\
**Last updated:** [June 12, 2017, 11:58am UTC](https://discuss.elastic.co/t/data-and-indexes-lost-after-restart/88851 "2017-06-12T11:58:07Z")

</div>

Hi, I've lost all my data when restarting Elasticsearch. My indexes still seemed to be there (they were visible with a curl -u user:pass -XGET http://localhost:9200/\_cat/indices?v, but no index patterns were visible in…

---

## [Building a network topology with Graph](https://discuss.elastic.co/t/building-a-network-topology-with-graph/166064)

<div class="topic-metadata">

**Author:** [@moreauap96](https://discuss.elastic.co/u/moreauap96)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 6:18pm UTC](https://discuss.elastic.co/t/building-a-network-topology-with-graph/166064 "2019-01-29T18:18:14Z")

</div>

Good Evening, I am currently working to generate a real time network topology based off NetFlow data (using the Logstash module for ingestion) then using graph to visualize it. My current settings: significant links:…

---

## [Parse xml content to elasticsearch](https://discuss.elastic.co/t/parse-xml-content-to-elasticsearch/81954)

<div class="topic-metadata">

**Author:** [@zak](https://discuss.elastic.co/u/zak)\
**Replies:** 3\
**Last updated:** [April 11, 2017, 10:31am UTC](https://discuss.elastic.co/t/parse-xml-content-to-elasticsearch/81954 "2017-04-11T10:31:21Z")

</div>

I have a XML documents to be indexed \<metadata \<meta content="Our Projects" name="Section"/ \<meta content="Completed Projects" name="Categorie"/ \</metadata And I want to index the content

---

## [Harvesting same file with different prospector config](https://discuss.elastic.co/t/harvesting-same-file-with-different-prospector-config/89546)

<div class="topic-metadata">

**Author:** [@monitoring\_it](https://discuss.elastic.co/u/monitoring_it)\
**Replies:** 7\
**Last updated:** [June 16, 2017, 1:59am UTC](https://discuss.elastic.co/t/harvesting-same-file-with-different-prospector-config/89546 "2017-06-16T01:59:05Z")

</div>

Does anyone see any issue with harvesting same file from different filebeat prospectors each having its own custom fields and set of include exclude regexs? My usecase is, i want filebeat to parse a single file for cer…

---

## [How use APM agent with elasticsearch?](https://discuss.elastic.co/t/how-use-apm-agent-with-elasticsearch/153930)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 2\
**Last updated:** [October 25, 2018, 9:09am UTC](https://discuss.elastic.co/t/how-use-apm-agent-with-elasticsearch/153930 "2018-10-25T09:09:25Z")

</div>

how configure it in elasticsearch. is configure in jvm.options ? with this configure? -javaagent:/opt/ES6/elasticsearch-6.4.2/config/elastic-apm-agent-0.7.1.jar -Delastic.apm.service\_name=elasticsearch\_server -Delas…

---

## [Can we extract folder and file out of log.file.path field?](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [February 4, 2020, 7:05pm UTC](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722 "2020-02-04T19:05:20Z")

</div>

Hi, I want to extract the folder and file name out of log.file.path filed we have in kibana. SO for example- C:\\Program Files (x86)\\xxx SST\\DispatcherAPP\\logs\\dispatcher.log In this file path, I want to create a field …

---

## [Failed to start logstash](https://discuss.elastic.co/t/failed-to-start-logstash/153984)

<div class="topic-metadata">

**Author:** [@arvind.jadaun](https://discuss.elastic.co/u/arvind.jadaun)\
**Replies:** 6\
**Last updated:** [October 26, 2018, 4:40am UTC](https://discuss.elastic.co/t/failed-to-start-logstash/153984 "2018-10-26T04:40:45Z")

</div>

Hi Guys, This is first time i am starting logstash on my windows machine and below is the error msg i have. Is there anyone out there who has similar challenges like me. Seeking for your inputs. Thanks! \> \[2018-10-25T1…

---

## [CPU and Memory Usage on Selected Processes](https://discuss.elastic.co/t/cpu-and-memory-usage-on-selected-processes/46453)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 6\
**Last updated:** [April 18, 2016, 1:59pm UTC](https://discuss.elastic.co/t/cpu-and-memory-usage-on-selected-processes/46453 "2016-04-18T13:59:41Z")

</div>

How can i get CPU and Memory for the selected(RED) processes only ?

---

## [How are number fields and their BKD-trees represented internally?](https://discuss.elastic.co/t/how-are-number-fields-and-their-bkd-trees-represented-internally/88422)

<div class="topic-metadata">

**Author:** [@chanakyan-arivumani](https://discuss.elastic.co/u/chanakyan-arivumani)\
**Replies:** 2\
**Last updated:** [June 7, 2017, 3:31am UTC](https://discuss.elastic.co/t/how-are-number-fields-and-their-bkd-trees-represented-internally/88422 "2017-06-07T03:31:13Z")

</div>

where exactly does elasticsearch store numeric fields/ bkd trees? how are they indexed? how is the relationship between text fields and number fields in a mapping defined internally?

---

## [Cluster down - No action possible](https://discuss.elastic.co/t/cluster-down-no-action-possible/116617)

<div class="topic-metadata">

**Author:** [@david1980](https://discuss.elastic.co/u/david1980)\
**Replies:** 5\
**Last updated:** [January 23, 2018, 9:50am UTC](https://discuss.elastic.co/t/cluster-down-no-action-possible/116617 "2018-01-23T09:50:42Z")

</div>

Hello, {"error":{"root\_cause":\[{"type":"circuit\_breaking\_exception","reason":"\[parent\] Data too large, data for \[\<http\_request\>\] would be \[1740972440/1.6gb\], which is larger than the limit of \[1491035750/1.3gb\]","bytes\_…

---

## [Understanding depricated field type - Error: Rejecting mapping update to ... final mapping would have more than 1 type](https://discuss.elastic.co/t/understanding-depricated-field-type-error-rejecting-mapping-update-to-final-mapping-would-have-more-than-1-type/108674)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 5:34pm UTC](https://discuss.elastic.co/t/understanding-depricated-field-type-error-rejecting-mapping-update-to-final-mapping-would-have-more-than-1-type/108674 "2017-12-12T17:34:59Z")

</div>

Hi, I've read that the type field in ES 6.0.0 is depricated and that it is planed to remove it in 7.0.0. Did I catch this correctly? If so, I've got a question about how to understand the new paradigm / the thoughts b…

---

## [CCR - Remove follow\_stats and License fetching problem](https://discuss.elastic.co/t/ccr-remove-follow-stats-and-license-fetching-problem/175389)

<div class="topic-metadata">

**Author:** [@kley](https://discuss.elastic.co/u/kley)\
**Replies:** 7\
**Last updated:** [April 11, 2019, 9:46am UTC](https://discuss.elastic.co/t/ccr-remove-follow-stats-and-license-fetching-problem/175389 "2019-04-11T09:46:54Z")

</div>

Hi! I'm playing around with the new cross cluster replication feature and ran into some issues. Firstly, it worked like a charm, data got replicated and everything was good. After that, I decided to put load on the lead…

---

## [Bulk insert is too slow](https://discuss.elastic.co/t/bulk-insert-is-too-slow/278794)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 8\
**Last updated:** [July 17, 2021, 9:35am UTC](https://discuss.elastic.co/t/bulk-insert-is-too-slow/278794 "2021-07-17T09:35:32Z")

</div>

I have a 2 node Elasticsearch (Version 6.8) cluster (they are running on 2 Ubuntu servers with 4GB RAM) and I am running MySQL on the same servers. The bulk insert is writing 100 documents at a time and each insert take…

[Previous page](https://discuss.elastic.co/top.md?page=562&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=564&per_page=50&period=all)
