# Top

**URL:** https://discuss.elastic.co/top.md?page=612&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 613

---

## [Guice creation errors: org.elasticsearch.Version](https://discuss.elastic.co/t/guice-creation-errors-org-elasticsearch-version/49888)

<div class="topic-metadata">

**Author:** [@blue](https://discuss.elastic.co/u/blue)\
**Replies:** 5\
**Last updated:** [May 12, 2016, 1:44pm UTC](https://discuss.elastic.co/t/guice-creation-errors-org-elasticsearch-version/49888 "2016-05-12T13:44:01Z")

</div>

Hi everybody, I'm developing a simple java app in an eclipse IDE and with weblogic. I'm using elasticsearch-0.90.5.jar and lucene-core-4.4.0.jar for it. When I try to create a connection with elasticSearch I get an e…

---

## [Exiting: Failed to create Beat meta file: open /usr/share/heartbeat/data/meta.json.new: permission denied](https://discuss.elastic.co/t/exiting-failed-to-create-beat-meta-file-open-usr-share-heartbeat-data-meta-json-new-permission-denied/284717)

<div class="topic-metadata">

**Author:** [@WookWook](https://discuss.elastic.co/u/WookWook)\
**Replies:** 3\
**Last updated:** [September 24, 2021, 7:57am UTC](https://discuss.elastic.co/t/exiting-failed-to-create-beat-meta-file-open-usr-share-heartbeat-data-meta-json-new-permission-denied/284717 "2021-09-24T07:57:15Z")

</div>

I setup Elastic Cloud on Kubernetes on Openshift 4.6. Right now with the following services (Elasticsearch/Kibana/Filebeat) I am now failing to get Heartbeat running. I had it running on another Testcluster without any …

---

## [Filebeat log stdout logstash](https://discuss.elastic.co/t/filebeat-log-stdout-logstash/171771)

<div class="topic-metadata">

**Author:** [@wiliamauc85](https://discuss.elastic.co/u/wiliamauc85)\
**Replies:** 2\
**Last updated:** [March 12, 2019, 11:12am UTC](https://discuss.elastic.co/t/filebeat-log-stdout-logstash/171771 "2019-03-12T11:12:32Z")

</div>

I'm relatively new to ELK and currently trying to go through this article and I'm trying to just look at the stdout in the logstash console however it doesn't seem to be working. My filebeat.yml config is on the squid s…

---

## [Elasticsearch highlighting: "copy\_to" without "store"](https://discuss.elastic.co/t/elasticsearch-highlighting-copy-to-without-store/179365)

<div class="topic-metadata">

**Author:** [@CanardMoussant](https://discuss.elastic.co/u/CanardMoussant)\
**Replies:** 7\
**Last updated:** [May 2, 2019, 2:50pm UTC](https://discuss.elastic.co/t/elasticsearch-highlighting-copy-to-without-store/179365 "2019-05-02T14:50:09Z")

</div>

I came across this post but that does not seem to help. I have the following ES mapping: properties { message { type: text analyzer: standard norms: false } additional { type: object …

---

## [How to index text file having size more than the system memory](https://discuss.elastic.co/t/how-to-index-text-file-having-size-more-than-the-system-memory/10350)

<div class="topic-metadata">

**Author:** [@sbbagal](https://discuss.elastic.co/u/sbbagal)\
**Replies:** 7\
**Last updated:** [February 1, 2013, 9:27am UTC](https://discuss.elastic.co/t/how-to-index-text-file-having-size-more-than-the-system-memory/10350 "2013-02-01T09:27:24Z")

</div>

Hi all , I am trying to index the text file using attachment plugin using transport client in java . I have 4 node cluster . If i try it using REST Api then it give curl argument is large type error and hang up and …

---

## [XML XPath filter is parsing fields but not inserting in Elasticsearch](https://discuss.elastic.co/t/xml-xpath-filter-is-parsing-fields-but-not-inserting-in-elasticsearch/123910)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Palve](https://discuss.elastic.co/u/Vaibhav_Palve)\
**Replies:** 8\
**Last updated:** [March 14, 2018, 7:42pm UTC](https://discuss.elastic.co/t/xml-xpath-filter-is-parsing-fields-but-not-inserting-in-elasticsearch/123910 "2018-03-14T19:42:11Z")

</div>

Hi @magnusbaeck I am trying to parse the below xml to insert records in Elasticsearch : \<xmldata\> \<head1\> \<key1\>Value1\</key1\> \<key2\>Value2\</key2\> \<id\>0001\</id\> \<date\>01-01-2016 09:00:00\</date\> \</head1\> \<head…

---

## [Dropdown filter kibana canvas](https://discuss.elastic.co/t/dropdown-filter-kibana-canvas/319315)

<div class="topic-metadata">

**Author:** [@Gianluca\_De\_Pasquale](https://discuss.elastic.co/u/Gianluca_De_Pasquale)\
**Replies:** 5\
**Last updated:** [November 22, 2022, 2:36pm UTC](https://discuss.elastic.co/t/dropdown-filter-kibana-canvas/319315 "2022-11-22T14:36:08Z")

</div>

Hi all, following the topic Dropdown filter kibana canvas - Elastic Stack / Kibana - Discuss the Elastic Stack I tried to filter data on a table by using dropdown list element, but I did not succeed. I attach the code u…

---

## [Which port is my logstash using?](https://discuss.elastic.co/t/which-port-is-my-logstash-using/323021)

<div class="topic-metadata">

**Author:** [@waitangi](https://discuss.elastic.co/u/waitangi)\
**Replies:** 3\
**Last updated:** [January 12, 2023, 1:41pm UTC](https://discuss.elastic.co/t/which-port-is-my-logstash-using/323021 "2023-01-12T13:41:15Z")

</div>

Hello all I have a running server where logstash is working. In my pipelines.yml there's a line path.config: "/etc/logstash/conf.d/\*.conf" - this points to a directory where my configuration is. The directory contains …

---

## [Fielbeat only send line by line instead the whole new log entry at once](https://discuss.elastic.co/t/fielbeat-only-send-line-by-line-instead-the-whole-new-log-entry-at-once/41177)

<div class="topic-metadata">

**Author:** [@Pablo\_perez](https://discuss.elastic.co/u/Pablo_perez)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 7:53pm UTC](https://discuss.elastic.co/t/fielbeat-only-send-line-by-line-instead-the-whole-new-log-entry-at-once/41177 "2016-02-09T19:53:32Z")

</div>

Let´s say that I have a cluster where I´m sending logs line from filebeat to logstash. My problem is that filebeat since send line by line, and in my logstash I have configure that the input codec is json, my logstash is…

---

## [Execbeat is not outputting ps -ef|grep](https://discuss.elastic.co/t/execbeat-is-not-outputting-ps-ef-grep/75177)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 4\
**Last updated:** [February 16, 2017, 12:04pm UTC](https://discuss.elastic.co/t/execbeat-is-not-outputting-ps-ef-grep/75177 "2017-02-16T12:04:11Z")

</div>

Hi, I am using latest execbeat with ELK GA 5.0.0. I would like to know if certain process is running in my PC, say, Filebeat. Running the command ps -ef|grep filebeat returns the output; mypc 688 1 0 Jan16 ? …

---

## [How to use bool query with both "missing" and exists?](https://discuss.elastic.co/t/how-to-use-bool-query-with-both-missing-and-exists/54467)

<div class="topic-metadata">

**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\
**Replies:** 1\
**Last updated:** [July 4, 2016, 7:44am UTC](https://discuss.elastic.co/t/how-to-use-bool-query-with-both-missing-and-exists/54467 "2016-07-04T07:44:32Z")

</div>

How would I format a bool query to use both the "exists" and the "missing" (must\_not & exists) combined in a single query? I'm trying to stay away from deprecated filters... In that same note, how exactly does the mi…

---

## [Resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 2\
**Last updated:** [November 24, 2020, 9:40pm UTC](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549 "2020-11-24T21:40:09Z")

</div>

HI, Just upgraded from 7.9 to 7.10 and now kibana shows: "error","elasticsearch","data"\],"pid":10858,"message":"\[resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2/Ary\_lXNFQguMojj-E4-2bQ\] already exists"…

---

## [How to add buttons on kibana visualization similar to dropdown in Controls](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672)

<div class="topic-metadata">

**Author:** [@HariniGajendran](https://discuss.elastic.co/u/HariniGajendran)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 11:45am UTC](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672 "2020-08-05T11:45:37Z")

</div>

Hi, I have a dashboard with dropdown, listing the logs and upon selection it would display the dashboard based on the selection. But instead of dropdown i would want a display button clicking on which should display the…

---

## [Help Creating a File Based User](https://discuss.elastic.co/t/help-creating-a-file-based-user/186311)

<div class="topic-metadata">

**Author:** [@ryh](https://discuss.elastic.co/u/ryh)\
**Replies:** 8\
**Last updated:** [June 26, 2019, 4:14pm UTC](https://discuss.elastic.co/t/help-creating-a-file-based-user/186311 "2019-06-26T16:14:24Z")

</div>

Hi All, I can't seem to get this working via Docker. Here's my Dockerfile. FROM docker.elastic.co/elasticsearch/elasticsearch:7.1.1 COPY --chown=elasticsearch:elasticsearch users /usr/share/elasticsearch/config/ COPY…

---

## [ES Unassigned shards not assigning](https://discuss.elastic.co/t/es-unassigned-shards-not-assigning/54064)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 8\
**Last updated:** [June 27, 2016, 9:12pm UTC](https://discuss.elastic.co/t/es-unassigned-shards-not-assigning/54064 "2016-06-27T21:12:22Z")

</div>

We recently had an elasticsearch cluster that we were moving to a new environment. Not certain why, but at some point half of our nodes in an old environment shut off. this caused a bunch of shards to go unassigned, whic…

---

## [Logstash hostname as field](https://discuss.elastic.co/t/logstash-hostname-as-field/146662)

<div class="topic-metadata">

**Author:** [@EdBanzil](https://discuss.elastic.co/u/EdBanzil)\
**Replies:** 2\
**Last updated:** [August 30, 2018, 10:39am UTC](https://discuss.elastic.co/t/logstash-hostname-as-field/146662 "2018-08-30T10:39:14Z")

</div>

Hi all, Just wondering how can i get the logstash hostname as field in a clustered environment? all i can see is the hostname of beats. TIA

---

## [Logstash JDBC plugin](https://discuss.elastic.co/t/logstash-jdbc-plugin/84874)

<div class="topic-metadata">

**Author:** [@calvinlyc](https://discuss.elastic.co/u/calvinlyc)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 12:32am UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin/84874 "2017-05-15T00:32:38Z")

</div>

Hi guys, We are currently using LogStash JDBC plugin to feed the data between MYSQL and ElasticSearch. However, MySQL database has issues by using OFFSET with large set of data which can slowdown the performance by t…

---

## [Selinux Restrictions](https://discuss.elastic.co/t/selinux-restrictions/348566)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 6\
**Last updated:** [December 4, 2023, 3:24pm UTC](https://discuss.elastic.co/t/selinux-restrictions/348566 "2023-12-04T15:24:14Z")

</div>

I am installing ELK 8.7.1 on an Oracle Linux version. I was able to install ELK without any problems and the services are in active state without any errors. When I try to access Kibana through port 5601 from the brows…

---

## [High CPU usage of elasticsearch](https://discuss.elastic.co/t/high-cpu-usage-of-elasticsearch/21450)

<div class="topic-metadata">

**Author:** [@Danishka\_Navin](https://discuss.elastic.co/u/Danishka_Navin)\
**Replies:** 5\
**Last updated:** [January 3, 2015, 6:11pm UTC](https://discuss.elastic.co/t/high-cpu-usage-of-elasticsearch/21450 "2015-01-03T18:11:47Z")

</div>

Hi, I am new to elasticsearch and logstash. using elasticsearch-1.1.1 and logstash-1.4.2-1 with Kibana. Its a single node with 4 vCPU and 30GB of physical memory. Currently logstash (single node) receive logs fr…

---

## [How to understand the monitor metric “cpu Throttling”](https://discuss.elastic.co/t/how-to-understand-the-monitor-metric-cpu-throttling/214157)

<div class="topic-metadata">

**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\
**Replies:** 2\
**Last updated:** [January 9, 2020, 2:14am UTC](https://discuss.elastic.co/t/how-to-understand-the-monitor-metric-cpu-throttling/214157 "2020-01-09T02:14:26Z")

</div>

Hi,all: I have not set cpu limit for es node，why kibana report cpu Throttling in some es node？ And I don't understand this metric means.Can anybody help me？

---

## [How to install multiple filebeat services in same host (Windows Server)?](https://discuss.elastic.co/t/how-to-install-multiple-filebeat-services-in-same-host-windows-server/257879)

<div class="topic-metadata">

**Author:** [@noobman2logstash](https://discuss.elastic.co/u/noobman2logstash)\
**Replies:** 1\
**Last updated:** [December 8, 2020, 6:39pm UTC](https://discuss.elastic.co/t/how-to-install-multiple-filebeat-services-in-same-host-windows-server/257879 "2020-12-08T18:39:34Z")

</div>

Hi i need help figuring out this issue as i want to run two filebeat services that points to two deferent directories in the c drive. we currently have a team using filebeat pointing to redis and now i want to install a …

---

## [Can not install elasticsearch 6.4.2 on windows 7 32 bit?](https://discuss.elastic.co/t/can-not-install-elasticsearch-6-4-2-on-windows-7-32-bit/155564)

<div class="topic-metadata">

**Author:** [@SailorJupiter](https://discuss.elastic.co/u/SailorJupiter)\
**Replies:** 2\
**Last updated:** [November 6, 2018, 3:34pm UTC](https://discuss.elastic.co/t/can-not-install-elasticsearch-6-4-2-on-windows-7-32-bit/155564 "2018-11-06T15:34:20Z")

</div>

Can not install elasticsearch 6.4.2 on windows 7 32-bit? When I executed elasticsearch 6.4.2.bat, it will stop in a half way. So I can't install it, does it support windows 7 32-bit? How about packbeat? Could I instal…

---

## [Upping the value of set script.max\_compilations\_per\_minute](https://discuss.elastic.co/t/upping-the-value-of-set-script-max-compilations-per-minute/76249)

<div class="topic-metadata">

**Author:** [@fassisrosa](https://discuss.elastic.co/u/fassisrosa)\
**Replies:** 2\
**Last updated:** [February 28, 2017, 7:54pm UTC](https://discuss.elastic.co/t/upping-the-value-of-set-script-max-compilations-per-minute/76249 "2017-02-28T19:54:05Z")

</div>

Hey there, I am currently bumping into the error: org.elasticsearch.common.breaker.CircuitBreakingException: \[script\] Too many dynamic script compilations within one minute The nature of the application I am wor…

---

## [Convert a datetime value (not timestamp) to UTC](https://discuss.elastic.co/t/convert-a-datetime-value-not-timestamp-to-utc/127842)

<div class="topic-metadata">

**Author:** [@roblopes](https://discuss.elastic.co/u/roblopes)\
**Replies:** 3\
**Last updated:** [April 12, 2018, 6:16pm UTC](https://discuss.elastic.co/t/convert-a-datetime-value-not-timestamp-to-utc/127842 "2018-04-12T18:16:01Z")

</div>

Hi, I know that there are tons of topics on this subject, but the only ones that I found didn't work for me.\\ I have a date field with a date and time that has to be converted in Logstash to the UTC value. I tried lot…

---

## [How to search for regex with spaces?](https://discuss.elastic.co/t/how-to-search-for-regex-with-spaces/78930)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 9:57pm UTC](https://discuss.elastic.co/t/how-to-search-for-regex-with-spaces/78930 "2017-03-28T21:57:36Z")

</div>

I'm trying to do the following search on a field in my index called "msgbody" msgbody:/Task lge00\[57\].5 boundary/ So I can see all the logs with the following text in the msgbody field. Task lge005.5 boundary Task …

---

## [Index ".kibana" is not getting created when using Elasticsearch and Kibana on docker-compose](https://discuss.elastic.co/t/index-kibana-is-not-getting-created-when-using-elasticsearch-and-kibana-on-docker-compose/124185)

<div class="topic-metadata">

**Author:** [@shadab.gaur](https://discuss.elastic.co/u/shadab.gaur)\
**Replies:** 7\
**Last updated:** [March 19, 2018, 3:29am UTC](https://discuss.elastic.co/t/index-kibana-is-not-getting-created-when-using-elasticsearch-and-kibana-on-docker-compose/124185 "2018-03-19T03:29:55Z")

</div>

I am using Docker Compose on my Mac machine to run the Elasticsearch and Kibana. After bringing docker compose up, I am able to access both elasticsearch and kibana using their URLs, but Kibana doesn't has default ".kib…

---

## [Learning to use Topbeat](https://discuss.elastic.co/t/learning-to-use-topbeat/35902)

<div class="topic-metadata">

**Author:** [@puneetaadit](https://discuss.elastic.co/u/puneetaadit)\
**Replies:** 7\
**Last updated:** [December 1, 2015, 11:47am UTC](https://discuss.elastic.co/t/learning-to-use-topbeat/35902 "2015-12-01T11:47:44Z")

</div>

Dear All, I am new to Topbeat and looking forward to learn it to monitor the system and its components. I have installed it on Windows and able to start it using Windows power shell but not able to move forward. If you…

---

## [Logstash - No mapping found for \[@timestamp\] in order to sort on](https://discuss.elastic.co/t/logstash-no-mapping-found-for-timestamp-in-order-to-sort-on/170021)

<div class="topic-metadata">

**Author:** [@Kanthasamyraja](https://discuss.elastic.co/u/Kanthasamyraja)\
**Replies:** 8\
**Last updated:** [February 26, 2019, 4:45pm UTC](https://discuss.elastic.co/t/logstash-no-mapping-found-for-timestamp-in-order-to-sort-on/170021 "2019-02-26T16:45:46Z")

</div>

Hi, I am using 6.5.4 version Logstash keeps printing the below line almost every second. Failed to query elasticsearch for previous event {:index=\>"", :query=\>"", :event=\>#LogStash::Event:0x535f580d, :error=\>"#\<Runtim…

---

## [Bug ? Elasticsearch 7 failing to parse custom date format](https://discuss.elastic.co/t/bug-elasticsearch-7-failing-to-parse-custom-date-format/177104)

<div class="topic-metadata">

**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\
**Replies:** 5\
**Last updated:** [April 17, 2019, 9:17pm UTC](https://discuss.elastic.co/t/bug-elasticsearch-7-failing-to-parse-custom-date-format/177104 "2019-04-17T21:17:47Z")

</div>

Hello, I am unable to create an index using the following date format using the latest version of elasticsearch PUT http://localhost:9200/demo HTTP/1.1 Accept: application/json Content-Type: application/json Content-Le…

---

## [Index.final\_pipeline not working as expected](https://discuss.elastic.co/t/index-final-pipeline-not-working-as-expected/276195)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 6\
**Last updated:** [July 19, 2021, 2:19am UTC](https://discuss.elastic.co/t/index-final-pipeline-not-working-as-expected/276195 "2021-07-19T02:19:46Z")

</div>

Hello, I have a filebeat that uses a module with a ingest pipeline, since I still need to make some transformations I'm trying to use another ingest pipeline with the setting index.final\_pipeline in the index settings. …

---

## [Using ctx.results Variable in a Message](https://discuss.elastic.co/t/using-ctx-results-variable-in-a-message/216498)

<div class="topic-metadata">

**Author:** [@stevebanik](https://discuss.elastic.co/u/stevebanik)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 6:53pm UTC](https://discuss.elastic.co/t/using-ctx-results-variable-in-a-message/216498 "2020-02-07T18:53:59Z")

</div>

I'd like to use the ctx.results variable in a message using {{ctx.results.0}} but I am not able to display the \_source value I'm interested in. For example, the extraction query response is: { "\_shards": { …

---

## ["minimum\_should\_match":"100%" vs "type": "phrase"](https://discuss.elastic.co/t/minimum-should-match-100-vs-type-phrase/50727)

<div class="topic-metadata">

**Author:** [@Cedric\_MONCADE](https://discuss.elastic.co/u/Cedric_MONCADE)\
**Replies:** 1\
**Last updated:** [May 23, 2016, 5:18pm UTC](https://discuss.elastic.co/t/minimum-should-match-100-vs-type-phrase/50727 "2016-05-23T17:18:38Z")

</div>

Hi, I'm new in Elasticsearch query and I'm wondering what is the difference between "minimum\_should\_match":"100%" and "type": "phrase"? example: { "match": { "tags": { "query": "My text", …

---

## [Unavailable Shards Exception Not enough active copies to meet write consistency of \[QUORUM\] (have 1, needed 2)](https://discuss.elastic.co/t/unavailable-shards-exception-not-enough-active-copies-to-meet-write-consistency-of-quorum-have-1-needed-2/39501)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 3\
**Last updated:** [April 12, 2016, 6:11pm UTC](https://discuss.elastic.co/t/unavailable-shards-exception-not-enough-active-copies-to-meet-write-consistency-of-quorum-have-1-needed-2/39501 "2016-04-12T18:11:19Z")

</div>

Hi All, We are using ES version 1.7.2 in Production cluster. ES cluster has 3 different physical servers. We have 3 indices such as es\_chr, es\_cval & es\_item Sync job is running everyday for all indices. Yesterday d…

---

## [Setting the refresh interval from Java API](https://discuss.elastic.co/t/setting-the-refresh-interval-from-java-api/11409)

<div class="topic-metadata">

**Author:** [@Matt\_Chambers](https://discuss.elastic.co/u/Matt_Chambers)\
**Replies:** 2\
**Last updated:** [April 2, 2013, 8:17pm UTC](https://discuss.elastic.co/t/setting-the-refresh-interval-from-java-api/11409 "2013-04-02T20:17:34Z")

</div>

Anyone have an example on how to do this? Its easy with Curl but I'm embedding this bulk indexing operation into my server. -Matt -- You received this message because you are subscribed to the Google Groups "…

---

## [Division on metric result](https://discuss.elastic.co/t/division-on-metric-result/249111)

<div class="topic-metadata">

**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\
**Replies:** 5\
**Last updated:** [October 12, 2020, 1:16pm UTC](https://discuss.elastic.co/t/division-on-metric-result/249111 "2020-10-12T13:16:42Z")

</div>

Hi gays i want to divide the metric result on 2 how i can do this in kibana ? with unique count i have 53 so i want to display 26.5 which is 53/2 thanx for help.

---

## [Logs UI along with spaces](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212)

<div class="topic-metadata">

**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\
**Replies:** 5\
**Last updated:** [May 8, 2019, 2:23pm UTC](https://discuss.elastic.co/t/logs-ui-along-with-spaces/177212 "2019-05-08T14:23:03Z")

</div>

I created a space called 'dev' and then created objects like index-pattern, visualization and dashboards etc .. And then a role with read permission to that space and read access to the related indexes. Created a user 'd…

---

## [Monitoring under xpack basic license](https://discuss.elastic.co/t/monitoring-under-xpack-basic-license/89723)

<div class="topic-metadata">

**Author:** [@sunil\_bhardwaj](https://discuss.elastic.co/u/sunil_bhardwaj)\
**Replies:** 3\
**Last updated:** [June 21, 2017, 12:02pm UTC](https://discuss.elastic.co/t/monitoring-under-xpack-basic-license/89723 "2017-06-21T12:02:53Z")

</div>

Hi , I have install Elastic core and Kibana. I have also installed xpack Elastic and Kibana using Basic License which is for 1 year. As per the subscriptions page, Monitoring is free under basic free plan. But what I see…

---

## [Browser Client is out of Date](https://discuss.elastic.co/t/browser-client-is-out-of-date/77296)

<div class="topic-metadata">

**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\
**Replies:** 3\
**Last updated:** [March 6, 2017, 7:37pm UTC](https://discuss.elastic.co/t/browser-client-is-out-of-date/77296 "2017-03-06T19:37:42Z")

</div>

Hello, I have upgraded Kibana 4.5.4 to 5.2.2 and whenever i try to open Kibana i get the following error message. I dont understand what is happening. Please see the following screenshot of the same Please somebody …

---

## [How to calculate the total document length](https://discuss.elastic.co/t/how-to-calculate-the-total-document-length/137164)

<div class="topic-metadata">

**Author:** [@atef](https://discuss.elastic.co/u/atef)\
**Replies:** 6\
**Last updated:** [June 25, 2018, 1:55pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-total-document-length/137164 "2018-06-25T13:55:30Z")

</div>

please is there anyone know how to calculate the total document length (number of characters)

---

## [Marvel Problem with some dashboards](https://discuss.elastic.co/t/marvel-problem-with-some-dashboards/1324)

<div class="topic-metadata">

**Author:** [@ChrisMark](https://discuss.elastic.co/u/ChrisMark)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 1:28pm UTC](https://discuss.elastic.co/t/marvel-problem-with-some-dashboards/1324 "2015-12-16T13:28:36Z")

</div>

Ηello guys, i had my marvel page working fine some hours ago, but now i have a problem. The problem is that Overview page as well as Shard Allocation page cannot be loaded. In overview page i take empty diagramms and …

---

## [ES lost the file lock while running](https://discuss.elastic.co/t/es-lost-the-file-lock-while-running/84233)

<div class="topic-metadata">

**Author:** [@xuhaibo](https://discuss.elastic.co/u/xuhaibo)\
**Replies:** 3\
**Last updated:** [May 3, 2017, 2:49am UTC](https://discuss.elastic.co/t/es-lost-the-file-lock-while-running/84233 "2017-05-03T02:49:28Z")

</div>

Ask you have not encountered under the ES operation of the file lock is lost, and can not lead to the problem, I encountered several times. Every time you see the file lock is lost and then the new index begins to go wro…

---

## [Tomcat HTTP requests are not showing up in kibana](https://discuss.elastic.co/t/tomcat-http-requests-are-not-showing-up-in-kibana/87101)

<div class="topic-metadata">

**Author:** [@sksamy](https://discuss.elastic.co/u/sksamy)\
**Replies:** 5\
**Last updated:** [May 25, 2017, 1:14pm UTC](https://discuss.elastic.co/t/tomcat-http-requests-are-not-showing-up-in-kibana/87101 "2017-05-25T13:14:19Z")

</div>

I installed Elastic Search, Kibana and Packet Beat. I have apache tomcat running on my same windows machine. localhost:8080 requests are not showing up. packetbeat.yml file #################### Packetbeat Configura…

---

## [Remove left whitespaces logstash](https://discuss.elastic.co/t/remove-left-whitespaces-logstash/304514)

<div class="topic-metadata">

**Author:** [@dannie-ml](https://discuss.elastic.co/u/dannie-ml)\
**Replies:** 7\
**Last updated:** [May 12, 2022, 4:01pm UTC](https://discuss.elastic.co/t/remove-left-whitespaces-logstash/304514 "2022-05-12T16:01:15Z")

</div>

Hi i have the following fields: "delivery\_quantity" : " \\s\\s\\s\\s4", "numerator" : "\\s\\s\\s1", "denominator" : "\\s\\s\\s1" I've tried to use mutate split and gsub but didnt work. I've seen that split works when you ha…

---

## [Insufficent permission for apm\_system user](https://discuss.elastic.co/t/insufficent-permission-for-apm-system-user/189197)

<div class="topic-metadata">

**Author:** [@chikien276](https://discuss.elastic.co/u/chikien276)\
**Replies:** 4\
**Last updated:** [July 8, 2019, 5:08pm UTC](https://discuss.elastic.co/t/insufficent-permission-for-apm-system-user/189197 "2019-07-08T17:08:30Z")

</div>

My APM server cannot connect to ElasticSearch using apm\_system user and , I've tried disable and enabled setup.template.overwrite. Kibana version: 7.2.0 Elasticsearch version: 7.2.0 APM Server version: 7.2.0 APM …

---

## [Deleting a documents using regular expressions](https://discuss.elastic.co/t/deleting-a-documents-using-regular-expressions/165038)

<div class="topic-metadata">

**Author:** [@akhilsai1499](https://discuss.elastic.co/u/akhilsai1499)\
**Replies:** 4\
**Last updated:** [January 24, 2019, 6:17am UTC](https://discuss.elastic.co/t/deleting-a-documents-using-regular-expressions/165038 "2019-01-24T06:17:44Z")

</div>

Hi Lets say there are documents with id 1001,1002,1003,1004 Is there any method to delete the document by using the regular expressions? DELETE indexname/100\*

---

## [Distinguish between syslog inputs](https://discuss.elastic.co/t/distinguish-between-syslog-inputs/83877)

<div class="topic-metadata">

**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\
**Replies:** 4\
**Last updated:** [April 27, 2017, 4:35pm UTC](https://discuss.elastic.co/t/distinguish-between-syslog-inputs/83877 "2017-04-27T16:35:04Z")

</div>

Hello, can anyone tell me how I would distinguish between two different syslog sources in Logstash, for example one source being a firewall device and another being an ESXi host? I know you can use tags but as I can't in…

---

## [Deprecation warnings in Elasticsearch 6.6](https://discuss.elastic.co/t/deprecation-warnings-in-elasticsearch-6-6/170461)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 3\
**Last updated:** [March 1, 2019, 3:27pm UTC](https://discuss.elastic.co/t/deprecation-warnings-in-elasticsearch-6-6/170461 "2019-03-01T15:27:07Z")

</div>

Hi, could you please help me figuring out how to get rid of these deprecation warnings? \[WARN \]\[o.e.d.a.a.i.t.p.PutIndexTemplateRequest\] \[WzjI3Q1\] Deprecated field \[template\] used, replaced by \[index\_patterns\] \[WARN \]\[…

---

## [Is there a way to ingest logs from Azure Log Analytics workspace to Logstash?](https://discuss.elastic.co/t/is-there-a-way-to-ingest-logs-from-azure-log-analytics-workspace-to-logstash/219698)

<div class="topic-metadata">

**Author:** [@iniyan.g](https://discuss.elastic.co/u/iniyan.g)\
**Replies:** 0\
**Last updated:** [February 18, 2020, 4:06am UTC](https://discuss.elastic.co/t/is-there-a-way-to-ingest-logs-from-azure-log-analytics-workspace-to-logstash/219698 "2020-02-18T04:06:06Z")

</div>

Hi Team We are working on to develop a central monitoring solution using ELK stack. AWS and Azure are the common platform where we are planning to ingest event logs from various services to logstash for parsing and visu…

---

## [Grok Pattern](https://discuss.elastic.co/t/grok-pattern/25029)

<div class="topic-metadata">

**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Replies:** 5\
**Last updated:** [July 8, 2015, 6:34am UTC](https://discuss.elastic.co/t/grok-pattern/25029 "2015-07-08T06:34:14Z")

</div>

I'm not familiar on Grok pattern. Can someone please help me to write the Grok pattern for the below example in Logstash, At the same time, I have to populate some data on Kibana from the below one Sample Log: 2015-07…

---

## [Phrase query matches across array elements?](https://discuss.elastic.co/t/phrase-query-matches-across-array-elements/9982)

<div class="topic-metadata">

**Author:** [@Anil\_Rhemtulla](https://discuss.elastic.co/u/Anil_Rhemtulla)\
**Replies:** 5\
**Last updated:** [December 7, 2012, 9:53pm UTC](https://discuss.elastic.co/t/phrase-query-matches-across-array-elements/9982 "2012-12-07T21:53:11Z")

</div>

I have an index with a list of tags, very similar to the example in ES documentation for Arrays: http://www.elasticsearch.org/guide/reference/mapping/array-type.html Using Elastic Head I can see the tags for a doc…

[Previous page](https://discuss.elastic.co/top.md?page=611&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=613&per_page=50&period=all)
