# Top

**URL:** https://discuss.elastic.co/top.md?page=607&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 608

---

## [Error: ENOENT: no such file or directory.....Kibana docker failed to start](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-kibana-docker-failed-to-start/225390)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 2\
**Last updated:** [March 27, 2020, 4:41pm UTC](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-kibana-docker-failed-to-start/225390 "2020-03-27T16:41:20Z")

</div>

I'm trying to load kibana.yml version 7.5.2 with Dockerfile in Windows10. It fails to read file located in directory. Error: {"type":"log","@timestamp":"2020-03-27T11:01:51Z","tags":\["fatal","root"\],"pid":6,"message":"…

---

## [Require example/tutorial for Logstash S3 Input Plugin](https://discuss.elastic.co/t/require-example-tutorial-for-logstash-s3-input-plugin/131907)

<div class="topic-metadata">

**Author:** [@Anilkumar\_Patel](https://discuss.elastic.co/u/Anilkumar_Patel)\
**Replies:** 2\
**Last updated:** [May 15, 2018, 12:10pm UTC](https://discuss.elastic.co/t/require-example-tutorial-for-logstash-s3-input-plugin/131907 "2018-05-15T12:10:45Z")

</div>

I am facing some issues in configuring the logstash s3 input plugin. I tried searching for a tutorial for this plugin but couldn't find any. Could you please provide a link to the tutorial/examples for this plugin if the…

---

## [Converting data type from string to int or from string to date](https://discuss.elastic.co/t/converting-data-type-from-string-to-int-or-from-string-to-date/271879)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 6\
**Last updated:** [May 5, 2021, 5:35pm UTC](https://discuss.elastic.co/t/converting-data-type-from-string-to-int-or-from-string-to-date/271879 "2021-05-05T17:35:16Z")

</div>

Hi all I've doing this call but how can you see data is string but I would like to convert data like ANGLE from text to a double or DATE like data fields, what's the call in order to do that? When data is flushed again …

---

## [Rename the index-pattern for sample visualizations](https://discuss.elastic.co/t/rename-the-index-pattern-for-sample-visualizations/266617)

<div class="topic-metadata">

**Author:** [@b133](https://discuss.elastic.co/u/b133)\
**Replies:** 1\
**Last updated:** [March 9, 2021, 9:24am UTC](https://discuss.elastic.co/t/rename-the-index-pattern-for-sample-visualizations/266617 "2021-03-09T09:24:13Z")

</div>

Short version: In the new Kibana Lens app, how do you open existing visualizations to edit? Long version: I want to use the sample visualizations/dashboards provided by Filebeat in indices named other than filebeat-\*. …

---

## [Query to get results based on priority of fields](https://discuss.elastic.co/t/query-to-get-results-based-on-priority-of-fields/307214)

<div class="topic-metadata">

**Author:** [@dawood\_abdullah](https://discuss.elastic.co/u/dawood_abdullah)\
**Replies:** 8\
**Last updated:** [June 16, 2022, 1:31pm UTC](https://discuss.elastic.co/t/query-to-get-results-based-on-priority-of-fields/307214 "2022-06-16T13:31:16Z")

</div>

Hi, I have following mapping : \> PUT products \> { \> "mappings" : { \> "properties" : { \> "item\_name" : {"type" : "keyword"}, \> "catalog\_name" : {"type" : "keyword"}, \> "group" : {"type" : "keyword"}, \> "l…

---

## [Interval and timestamp does not work as expected](https://discuss.elastic.co/t/interval-and-timestamp-does-not-work-as-expected/247345)

<div class="topic-metadata">

**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\
**Replies:** 8\
**Last updated:** [September 22, 2020, 4:02am UTC](https://discuss.elastic.co/t/interval-and-timestamp-does-not-work-as-expected/247345 "2020-09-22T04:02:39Z")

</div>

Hi currently it is Sep 03 09:38 here, the explore tab shows that there is data of timestamp Sep 02 10:03, I set the interval in TSVB for 1d but there is no data, in fact it shows nothing for 2d as well. The data appear w…

---

## [Query missing nested objects along with other filter criteria](https://discuss.elastic.co/t/query-missing-nested-objects-along-with-other-filter-criteria/108801)

<div class="topic-metadata">

**Author:** [@Vijay\_arora1](https://discuss.elastic.co/u/Vijay_arora1)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 1:42pm UTC](https://discuss.elastic.co/t/query-missing-nested-objects-along-with-other-filter-criteria/108801 "2017-12-01T13:42:05Z")

</div>

I have been working on migrating from elastic search 2.2 to 5.x and re-writing the queries. There is one place where I have hit a road block and would really appreciate help. Here is the scenario: We have an index whi…

---

## [Create Kibana visualizaion using Serial Diff Aggregation](https://discuss.elastic.co/t/create-kibana-visualizaion-using-serial-diff-aggregation/37502)

<div class="topic-metadata">

**Author:** [@lessio](https://discuss.elastic.co/u/lessio)\
**Replies:** 3\
**Last updated:** [December 17, 2015, 8:20pm UTC](https://discuss.elastic.co/t/create-kibana-visualizaion-using-serial-diff-aggregation/37502 "2015-12-17T20:20:13Z")

</div>

I need to create a new visualization on Kibana using the Serial Diff feature. On this link shows the same graph that I would like to do https://www.elastic.co/guide/en/elasticsearch/reference/2.0/search-aggregations-pi…

---

## [Связь с Elasticsearch кластером oбрывается когда пытаюсь открыть дешбоард в кибане](https://discuss.elastic.co/t/elasticsearch-o/24890)

<div class="topic-metadata">

**Author:** [@Drewshg312](https://discuss.elastic.co/u/Drewshg312)\
**Replies:** 4\
**Last updated:** [July 4, 2015, 7:49pm UTC](https://discuss.elastic.co/t/elasticsearch-o/24890 "2015-07-04T19:49:47Z")

</div>

Здравствуйте! Такая ситуация: OS X 10.10.4, Elasticsearch 1.6.0, Logstash 1.5.2, Kibana 4.1.0 - все из Homebrew. Использую для анализа результатов из Suricata IDPS. Демоны работают нормально, кластер вроде здоров: $ cu…

---

## [Kibana 6.8.2 compatibility with Elasticsearch 7.6.2](https://discuss.elastic.co/t/kibana-6-8-2-compatibility-with-elasticsearch-7-6-2/233691)

<div class="topic-metadata">

**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\
**Replies:** 5\
**Last updated:** [June 8, 2020, 5:35am UTC](https://discuss.elastic.co/t/kibana-6-8-2-compatibility-with-elasticsearch-7-6-2/233691 "2020-06-08T05:35:48Z")

</div>

Hi Team Just wonder that if Kibana 6.8.2 is compatible with ES 7.6.2. We have dockerized ELK setup where currently we are using version 6.8.2 for Elasticsearch/Kibana/Logstash and planning Rolling upgrade to version 7.…

---

## [ES RPM source](https://discuss.elastic.co/t/es-rpm-source/14031)

<div class="topic-metadata">

**Author:** [@Joerg\_Heinemann](https://discuss.elastic.co/u/Joerg_Heinemann)\
**Replies:** 7\
**Last updated:** [October 21, 2013, 8:50pm UTC](https://discuss.elastic.co/t/es-rpm-source/14031 "2013-10-21T20:50:05Z")

</div>

I would like to setup up an ElasticSearch rpm project on openSUSE Build Service . Where can I find the official ES RPM source or the elasticsearch.spec files? I can't it find on GitHub. Cheers Joerg -- You…

---

## [Shards Not Being Allocated To Nodes](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587)

<div class="topic-metadata">

**Author:** [@vilakazil](https://discuss.elastic.co/u/vilakazil)\
**Replies:** 6\
**Last updated:** [October 14, 2021, 6:54am UTC](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587 "2021-10-14T06:54:04Z")

</div>

Hope to get assistance here as I have been struggling. I have 11 nodes that run Elasticsearch, with 2 master node. 5 shards and 1 replica (default) We recently ran patches on the nodes and upgraded the .Net software, t…

---

## [Recover Elastic Cluster password](https://discuss.elastic.co/t/recover-elastic-cluster-password/264669)

<div class="topic-metadata">

**Author:** [@thewasta](https://discuss.elastic.co/u/thewasta)\
**Replies:** 6\
**Last updated:** [February 21, 2021, 6:20am UTC](https://discuss.elastic.co/t/recover-elastic-cluster-password/264669 "2021-02-21T06:20:35Z")

</div>

Hello! For some reason, password/user doesn't work on my cluster, it used to work but now it doesn't. I don't know if it is because I had to reboot all servers (working with 3 servers). Now I would like to reset all pas…

---

## [Unable to create the index](https://discuss.elastic.co/t/unable-to-create-the-index/28817)

<div class="topic-metadata">

**Author:** [@soujanya](https://discuss.elastic.co/u/soujanya)\
**Replies:** 3\
**Last updated:** [September 21, 2015, 3:20am UTC](https://discuss.elastic.co/t/unable-to-create-the-index/28817 "2015-09-21T03:20:57Z")

</div>

Hi all, While I'm running config file, the index is not creating in elasticsearch. The same config file is running successfully in other server and index is creating. The respective log is as below... \[2015-09-07 17:…

---

## [Es\_rejected\_execution\_exception - what steps do I need to take?](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836)

<div class="topic-metadata">

**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\
**Replies:** 2\
**Last updated:** [June 10, 2022, 1:29am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836 "2022-06-10T01:29:15Z")

</div>

I am using Elasticsearch docker image 7.17.4. I am on a 12 core machine using Python and the helpers.parallel\_bulk() function with the default thread count and queue size. The error I get is elasticsearch.ApiError: Ap…

---

## [How to process .Json data in kibana](https://discuss.elastic.co/t/how-to-process-json-data-in-kibana/188280)

<div class="topic-metadata">

**Author:** [@busan](https://discuss.elastic.co/u/busan)\
**Replies:** 4\
**Last updated:** [July 2, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-process-json-data-in-kibana/188280 "2019-07-02T09:47:17Z")

</div>

Hi, when i try to process .Json data via kibana: my json file: { "classe": "XXX.XXXX.XXXXXXX.XXXX.XXXXXX.XXXXXXXX", "object\_pk": "XX", "datetime": "XXXX-XX-XXTXX:XX:XX.XXX", "jsonContent": { "rcp": "", …

---

## [Is there a way to know how to calculate RAM for Logstash](https://discuss.elastic.co/t/is-there-a-way-to-know-how-to-calculate-ram-for-logstash/105516)

<div class="topic-metadata">

**Author:** [@Neal\_Shan](https://discuss.elastic.co/u/Neal_Shan)\
**Replies:** 4\
**Last updated:** [October 27, 2017, 8:48am UTC](https://discuss.elastic.co/t/is-there-a-way-to-know-how-to-calculate-ram-for-logstash/105516 "2017-10-27T08:48:19Z")

</div>

I was running one Logstash JDBC instance to sync 3 tables to ES every 5 minuts, but now we need to sync 8 tables. Sync 8 takes too long. So I tried to run multi instances of Logstash on single server. It doesn't help. T…

---

## [How to parse a hostname](https://discuss.elastic.co/t/how-to-parse-a-hostname/33038)

<div class="topic-metadata">

**Author:** [@Mark\_Tellier](https://discuss.elastic.co/u/Mark_Tellier)\
**Replies:** 2\
**Last updated:** [October 28, 2015, 1:33am UTC](https://discuss.elastic.co/t/how-to-parse-a-hostname/33038 "2015-10-28T01:33:35Z")

</div>

I am new to Logstash and am having difficulty with a filter, I would like to replace a fully qualified host name with the short host name. The possible host name values are inconsistent: esx1.acme.com esx2.acme.com esx…

---

## [Logstash As Side Car Container](https://discuss.elastic.co/t/logstash-as-side-car-container/82982)

<div class="topic-metadata">

**Author:** [@Java\_Padawan](https://discuss.elastic.co/u/Java_Padawan)\
**Replies:** 3\
**Last updated:** [April 27, 2017, 5:15am UTC](https://discuss.elastic.co/t/logstash-as-side-car-container/82982 "2017-04-27T05:15:05Z")

</div>

I've been using logstash 2.x as a side car for a microservice container. And I facing an issue where it consumes a lot of resources. 1.4GB Ram and almost 2000 millicores for one of the most active microservice. Not gi…

---

## [Capture Kibana dashboard as static html page](https://discuss.elastic.co/t/capture-kibana-dashboard-as-static-html-page/155605)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 2\
**Last updated:** [November 8, 2018, 5:38am UTC](https://discuss.elastic.co/t/capture-kibana-dashboard-as-static-html-page/155605 "2018-11-08T05:38:02Z")

</div>

We have a dashboard with a number of visualisations and our customers run it for last 7 days. There's no x-pack. For a dashboard, we capture the Snapshot URL of the dashboard and then embed the \<iframe\>....\</iframe\> lin…

---

## [ELK stack Upgrade](https://discuss.elastic.co/t/elk-stack-upgrade/36924)

<div class="topic-metadata">

**Author:** [@GustavoHoyer1](https://discuss.elastic.co/u/GustavoHoyer1)\
**Replies:** 5\
**Last updated:** [December 11, 2015, 5:13pm UTC](https://discuss.elastic.co/t/elk-stack-upgrade/36924 "2015-12-11T17:13:55Z")

</div>

I'm planning to upgrade my ELK stack for the latest versions: logstash from 1.4.2 to 2.1.1 Elasticsearch from 1.4.4 para 2.1.0 Kibana from 4.1.2 para 4.3.0 Is there any documentation explaining the changes between r…

---

## [Understand "reconnect" and "retries" settings in Kafka output](https://discuss.elastic.co/t/understand-reconnect-and-retries-settings-in-kafka-output/272157)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 9:52am UTC](https://discuss.elastic.co/t/understand-reconnect-and-retries-settings-in-kafka-output/272157 "2021-05-05T09:52:25Z")

</div>

Hello all, With this config : input { tcp { type =\> "NETWORK\_DEVICE" port =\> 1602 } filter{ } output { kafka { topic\_id =\> \["network.device"\] codec =\> json bootstrap\_servers =\> "kafka1:9092,kafka2:9092,k…

---

## [Solaris 10 for Elasticsearch](https://discuss.elastic.co/t/solaris-10-for-elasticsearch/24716)

<div class="topic-metadata">

**Author:** [@Nilesh\_Date](https://discuss.elastic.co/u/Nilesh_Date)\
**Replies:** 2\
**Last updated:** [February 27, 2017, 6:40pm UTC](https://discuss.elastic.co/t/solaris-10-for-elasticsearch/24716 "2017-02-27T18:40:33Z")

</div>

Hi, Can I use solaris 10 as an base operation system to install elasticsearch ? It will be a production setup which will have 3 nodes in elasticseach cluster.

---

## [Disable filter option (Dashboard Kibana)](https://discuss.elastic.co/t/disable-filter-option-dashboard-kibana/85549)

<div class="topic-metadata">

**Author:** [@Helder\_Marques](https://discuss.elastic.co/u/Helder_Marques)\
**Replies:** 3\
**Last updated:** [May 12, 2017, 2:40pm UTC](https://discuss.elastic.co/t/disable-filter-option-dashboard-kibana/85549 "2017-05-12T14:40:00Z")

</div>

Can I disable these buttons? I don't want users to see them.

---

## [Replace @timestamp with unix timestamp from MySQL](https://discuss.elastic.co/t/replace-timestamp-with-unix-timestamp-from-mysql/88428)

<div class="topic-metadata">

**Author:** [@Bdriss\_Sana](https://discuss.elastic.co/u/Bdriss_Sana)\
**Replies:** 3\
**Last updated:** [June 8, 2017, 9:23pm UTC](https://discuss.elastic.co/t/replace-timestamp-with-unix-timestamp-from-mysql/88428 "2017-06-08T21:23:44Z")

</div>

I'm trying to inject MySQL data to Elasticsearch using Logstash. This is my mysql table structure (id , datetime, value) where datetime consists if Unix Timestamp. ( example (131,1436298252,128) ) And here's the conf…

---

## [Unexpected and uneven per-index shard allocation](https://discuss.elastic.co/t/unexpected-and-uneven-per-index-shard-allocation/81221)

<div class="topic-metadata">

**Author:** [@schwartzie](https://discuss.elastic.co/u/schwartzie)\
**Replies:** 7\
**Last updated:** [April 6, 2017, 12:12am UTC](https://discuss.elastic.co/t/unexpected-and-uneven-per-index-shard-allocation/81221 "2017-04-06T00:12:18Z")

</div>

Hello, We have a 5-node ES 2.3.3 cluster that we use for a write-heavy logging workload. We keep 90 daily indices on it, each with the default settings of {"number\_of\_shards": 5, "number\_of\_replicas": 1}. Each index co…

---

## [Kibana marvel-ui plugin will not install](https://discuss.elastic.co/t/kibana-marvel-ui-plugin-will-not-install/33279)

<div class="topic-metadata">

**Author:** [@Entr04y](https://discuss.elastic.co/u/Entr04y)\
**Replies:** 7\
**Last updated:** [October 22, 2016, 6:08am UTC](https://discuss.elastic.co/t/kibana-marvel-ui-plugin-will-not-install/33279 "2016-10-22T06:08:43Z")

</div>

According to the docs, this should install the marvel UI plugin: /opt/kibana/bin/kibana plugin -i elasticsearch/marvel-ui/latest This is the result I am getting: Installing marvel-ui Attempting to extract from http…

---

## [RPM Repo Broken with RHEL Satellite](https://discuss.elastic.co/t/rpm-repo-broken-with-rhel-satellite/26359)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 6\
**Last updated:** [February 15, 2016, 4:52pm UTC](https://discuss.elastic.co/t/rpm-repo-broken-with-rhel-satellite/26359 "2016-02-15T16:52:43Z")

</div>

I was trying to add the RPM repo's provide by Elastic to my RHEL Satelite 6.0 server as that is how we do patch management. I was I opened a case with Redhat to make sure of the issue is with Our environment or the …

---

## [400 The plain HTTP request was sent to HTTPS port](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284)

<div class="topic-metadata">

**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\
**Replies:** 3\
**Last updated:** [April 18, 2022, 6:23pm UTC](https://discuss.elastic.co/t/400-the-plain-http-request-was-sent-to-https-port/302284 "2022-04-18T18:23:46Z")

</div>

Hi, I'm using python client only (have not installed Elasticsearch on my machine) and I'm trying to query kibana and I get following error message: Elasticsearch.exceptions.RequestError: RequestError(400, '\\r\\n400 The p…

---

## [Elastic-agent make ssl verification none](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827 "2020-08-21T09:44:39Z")

</div>

Hello, I am playing around with elastic ingest manager and I configured a fleet in kibana. I would like to update the elasticsearch ssl verification\_mode to none in the agent config but it's not possible or at least I d…

---

## [\[logstash.runner \] An unexpected error occurred! {:error=\>#, :backtrace=\>](https://discuss.elastic.co/t/logstash-runner-an-unexpected-error-occurred-error-backtrace/137001)

<div class="topic-metadata">

**Author:** [@sunilkumar](https://discuss.elastic.co/u/sunilkumar)\
**Replies:** 1\
**Last updated:** [June 25, 2018, 6:41am UTC](https://discuss.elastic.co/t/logstash-runner-an-unexpected-error-occurred-error-backtrace/137001 "2018-06-25T06:41:38Z")

</div>

My Config file is like this input { file { path =\> "D:\\logstash\\logstash-6.1.0\\bin\\repoprolog.log" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" ignore\_older =\> 0 codec =\> multiline { patt…

---

## [Run Elastic detection rule in non real time logs](https://discuss.elastic.co/t/run-elastic-detection-rule-in-non-real-time-logs/283787)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 1\
**Last updated:** [September 11, 2021, 1:15pm UTC](https://discuss.elastic.co/t/run-elastic-detection-rule-in-non-real-time-logs/283787 "2021-09-11T13:15:22Z")

</div>

Hello, I have some windows log files and I have uploaded them to my cluster using winlogbeat \[Not sure how to read from .evtx files | Winlogbeat Reference \[master\] | Elastic\] I would like to know if it's possible to ru…

---

## [How to combine data from different index in one view while viewing in kibana?](https://discuss.elastic.co/t/how-to-combine-data-from-different-index-in-one-view-while-viewing-in-kibana/284425)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 7\
**Last updated:** [October 5, 2021, 4:47pm UTC](https://discuss.elastic.co/t/how-to-combine-data-from-different-index-in-one-view-while-viewing-in-kibana/284425 "2021-10-05T16:47:22Z")

</div>

I am trying to put traffic logs to Elasticsearch. Suppose there are 100 traffic rows. Suppose there are around 25 columns for each row. Suppose 15 columns of all of the 100 traffic logs are same . rest of the columns …

---

## [\[SOLVED\] Average of a sum](https://discuss.elastic.co/t/solved-average-of-a-sum/54434)

<div class="topic-metadata">

**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\
**Replies:** 3\
**Last updated:** [August 19, 2016, 10:05pm UTC](https://discuss.elastic.co/t/solved-average-of-a-sum/54434 "2016-08-19T22:05:34Z")

</div>

Hello, In visualization, data table , i have a sum of received mega octet. I need to make an average of this sum Total sessions Total received Mo Total sent Mo 3,23…

---

## [Query : Use of Union feature in elastic search](https://discuss.elastic.co/t/query-use-of-union-feature-in-elastic-search/10707)

<div class="topic-metadata">

**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\
**Replies:** 1\
**Last updated:** [February 12, 2013, 5:38am UTC](https://discuss.elastic.co/t/query-use-of-union-feature-in-elastic-search/10707 "2013-02-12T05:38:11Z")

</div>

Hello Folks, How to union the result of two or more query . Elastic search query. I used following Dis Max Query for union curl -XGET 'http://localhost:9200/new\_index/n ew\_indext/\_search?size=2' -d'{"query":{ "dis\_…

---

## [Using custom pipeline for existing filebeat module](https://discuss.elastic.co/t/using-custom-pipeline-for-existing-filebeat-module/213270)

<div class="topic-metadata">

**Author:** [@jsosic](https://discuss.elastic.co/u/jsosic)\
**Replies:** 2\
**Last updated:** [January 23, 2020, 6:50pm UTC](https://discuss.elastic.co/t/using-custom-pipeline-for-existing-filebeat-module/213270 "2020-01-23T18:50:39Z")

</div>

Hi guys. I use custom nginx log format, with some additional fields, so current pipeline in Filebeat 7.x nginx module fails with "grok parse failure". My platform is CentOS 7.x. Now, I'm thinking of what is the best w…

---

## [Problem With Elasticsearch Cluster : failed to send join request to master](https://discuss.elastic.co/t/problem-with-elasticsearch-cluster-failed-to-send-join-request-to-master/17232)

<div class="topic-metadata">

**Author:** [@Rukshan\_Kothwala](https://discuss.elastic.co/u/Rukshan_Kothwala)\
**Replies:** 2\
**Last updated:** [April 23, 2017, 10:45am UTC](https://discuss.elastic.co/t/problem-with-elasticsearch-cluster-failed-to-send-join-request-to-master/17232 "2017-04-23T10:45:17Z")

</div>

I've configured a cluster on two different network where nodes can telnet each other on ports 9200,9300. \[2014-04-28 07:19:51,429\]\[INFO \]\[discovery.zen \] \[\*\*\*logs01\] failed to send join request to maste…

---

## [How to index the csv file data into elasticsearch?](https://discuss.elastic.co/t/how-to-index-the-csv-file-data-into-elasticsearch/301395)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [April 6, 2022, 9:30am UTC](https://discuss.elastic.co/t/how-to-index-the-csv-file-data-into-elasticsearch/301395 "2022-04-06T09:30:12Z")

</div>

How to index the data from a CSV file into Elasticsearch without using logstash? Looking to get it done through curl command and providing the csv file as input.

---

## [Import data from elasticsearch](https://discuss.elastic.co/t/import-data-from-elasticsearch/136821)

<div class="topic-metadata">

**Author:** [@komal\_mittal](https://discuss.elastic.co/u/komal_mittal)\
**Replies:** 4\
**Last updated:** [June 22, 2018, 6:15am UTC](https://discuss.elastic.co/t/import-data-from-elasticsearch/136821 "2018-06-22T06:15:52Z")

</div>

how can I import data from elasticsearch in python code which is used for k-means clustering?

---

## [Change filter for just 1 visualization](https://discuss.elastic.co/t/change-filter-for-just-1-visualization/142584)

<div class="topic-metadata">

**Author:** [@BaetzY](https://discuss.elastic.co/u/BaetzY)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 5:10am UTC](https://discuss.elastic.co/t/change-filter-for-just-1-visualization/142584 "2018-08-02T05:10:15Z")

</div>

Hi Guys, I created a Dashboard with 3 visualizations in it. All of them were made with the Visual Builder and are "Time Lines". The first and second visualization shows the CPU Usage grouped by name of all the computer…

---

## [The definition of grok pattern CISCO\_REASON](https://discuss.elastic.co/t/the-definition-of-grok-pattern-cisco-reason/90373)

<div class="topic-metadata">

**Author:** [@Shuxin\_Lin](https://discuss.elastic.co/u/Shuxin_Lin)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 5:49pm UTC](https://discuss.elastic.co/t/the-definition-of-grok-pattern-cisco-reason/90373 "2017-06-22T17:49:59Z")

</div>

My log entry is like: 2017-05-16T03:48:19.191162+00:00 ip-10-133-8-70 tcp\[18916\]: LOG Statistics \[Sender\] .... In this example, "LOG Statitics" can be extracted by pre-defined pattern: CISCO\_REASON But I cannot f…

---

## [ELASTICSEARCH STUCK DURING INSTALLATION](https://discuss.elastic.co/t/elasticsearch-stuck-during-installation/179250)

<div class="topic-metadata">

**Author:** [@Debasish\_Rath](https://discuss.elastic.co/u/Debasish_Rath)\
**Replies:** 6\
**Last updated:** [May 1, 2019, 8:31pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-during-installation/179250 "2019-05-01T20:31:52Z")

</div>

During installation on redhat machine, installation stucked. ANy IDEA? below is the log \[2019-05-01T19:39:46,225\]\[INFO \]\[o.e.p.PluginsService \] \[srv-appmid-wl.sentel.lan\] loaded module \[transport-netty4\] \[2019-05-0…

---

## [Reporting not sending me the reports](https://discuss.elastic.co/t/reporting-not-sending-me-the-reports/61341)

<div class="topic-metadata">

**Author:** [@vk126y](https://discuss.elastic.co/u/vk126y)\
**Replies:** 6\
**Last updated:** [October 13, 2016, 10:36pm UTC](https://discuss.elastic.co/t/reporting-not-sending-me-the-reports/61341 "2016-10-13T22:36:43Z")

</div>

I have successfully configured the reports plugin but not able to generate the reports and getting the below errors There was an error generating your report for the "Login-Dashboard" dashboard: Error: URL open failed.…

---

## [Grokparsefailure ... but it's all working and logs are being parsed...?](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614)

<div class="topic-metadata">

**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\
**Replies:** 7\
**Last updated:** [May 1, 2022, 4:54pm UTC](https://discuss.elastic.co/t/grokparsefailure-but-its-all-working-and-logs-are-being-parsed/303614 "2022-05-01T16:54:29Z")

</div>

I'm seeing pretty much all of my logs in Elastic/Kibana tagged with the following tags: \_grokparsefailure\_sysloginput, \_grokparsefailure, \_geoip\_lookup\_failure Which is odd, as they are being processed just fine. Exam…

---

## [Kibana not able to connect to elasticsearch](https://discuss.elastic.co/t/kibana-not-able-to-connect-to-elasticsearch/29038)

<div class="topic-metadata">

**Author:** [@shivam\_singh](https://discuss.elastic.co/u/shivam_singh)\
**Replies:** 5\
**Last updated:** [September 11, 2015, 9:55am UTC](https://discuss.elastic.co/t/kibana-not-able-to-connect-to-elasticsearch/29038 "2015-09-11T09:55:14Z")

</div>

Hi, I am not able to connect to my elasticsearch instance from kibana instance. Both are on AWS EC2. Getting this error: Error: Unknown error while connecting to Elasticsearch Error: Internal Server Error at resp…

---

## [Kibana not starting up after enabling https (Single node) , seems to be missing credentials?](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 4\
**Last updated:** [August 6, 2021, 3:48pm UTC](https://discuss.elastic.co/t/kibana-not-starting-up-after-enabling-https-single-node-seems-to-be-missing-credentials/280659 "2021-08-06T15:48:32Z")

</div>

Hello, I'm using Kibana 7.14 and had enabled https recently . All the services logstash and elasticsearch start up successfully while kibana fails . I had been looking at the kibana logs and they show this {"type":"log…

---

## [Input simple txt file](https://discuss.elastic.co/t/input-simple-txt-file/202892)

<div class="topic-metadata">

**Author:** [@happycampo](https://discuss.elastic.co/u/happycampo)\
**Replies:** 3\
**Last updated:** [October 9, 2019, 7:22pm UTC](https://discuss.elastic.co/t/input-simple-txt-file/202892 "2019-10-09T19:22:11Z")

</div>

Hello, Not sure what I'm missing: I have setup a docker elk stack and now I'm trying to see if I can ingest a log file locally. I was having trouble with logstash shutting down when introducing a new input. See thi…

---

## [Query\_string queries and special characters](https://discuss.elastic.co/t/query-string-queries-and-special-characters/13344)

<div class="topic-metadata">

**Author:** [@Curt\_Kohler](https://discuss.elastic.co/u/Curt_Kohler)\
**Replies:** 1\
**Last updated:** [August 27, 2013, 4:45pm UTC](https://discuss.elastic.co/t/query-string-queries-and-special-characters/13344 "2013-08-27T16:45:33Z")

</div>

We've been using query\_string queries with ElasticSearch as part of a quick proof of concept in the company. While we have had pretty good success, we have seen some things we don't understand as well. Hoping some…

---

## [Access Kibana from internet (Using Public IP)](https://discuss.elastic.co/t/access-kibana-from-internet-using-public-ip/225665)

<div class="topic-metadata">

**Author:** [@Boobeshwaran](https://discuss.elastic.co/u/Boobeshwaran)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 3:44am UTC](https://discuss.elastic.co/t/access-kibana-from-internet-using-public-ip/225665 "2020-03-31T03:44:15Z")

</div>

Hi Team, I am trying to host my personal ELK stack on Azure Cloud. I am using Windows server 2016 OS, Elastic 7.3.0 and Kibana 7.3.0. I wish to host Kibana on Cloud to access from internet. I have configured the server…

---

## [Random sorting for matched and unmatched parts of result set](https://discuss.elastic.co/t/random-sorting-for-matched-and-unmatched-parts-of-result-set/70556)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 6\
**Last updated:** [January 10, 2017, 6:48pm UTC](https://discuss.elastic.co/t/random-sorting-for-matched-and-unmatched-parts-of-result-set/70556 "2017-01-10T18:48:29Z")

</div>

Hi, I have index with 25 000 documents which are looks like: GET locations/location/10/\_source { "country\_code": "US", "id": "10", "continent\_code": "NA", "city\_name": "New York" } I need to get cities from …

[Previous page](https://discuss.elastic.co/top.md?page=606&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=608&per_page=50&period=all)
