# Top

**URL:** https://discuss.elastic.co/top.md?page=628&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 629

---

## [Elastic Agent GUI Installation](https://discuss.elastic.co/t/elastic-agent-gui-installation/334780)

<div class="topic-metadata">

**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\
**Replies:** 3\
**Last updated:** [May 31, 2023, 10:50pm UTC](https://discuss.elastic.co/t/elastic-agent-gui-installation/334780 "2023-05-31T22:50:56Z")

</div>

Elastic Will the elastic agent be installed in a way that supports gui in the future?

---

## [Horizontal barchart X-axis - controlling range](https://discuss.elastic.co/t/horizontal-barchart-x-axis-controlling-range/187171)

<div class="topic-metadata">

**Author:** [@gbarnett](https://discuss.elastic.co/u/gbarnett)\
**Replies:** 5\
**Last updated:** [July 3, 2019, 6:20pm UTC](https://discuss.elastic.co/t/horizontal-barchart-x-axis-controlling-range/187171 "2019-07-03T18:20:43Z")

</div>

On the horizontal barchart, I'm using a simple count. For example, the count might range from 0-5. The barchart currently labels the X-axis a 0.0, 0.5, 1.0, 1.5, … How do I control the x-axis so that it only labels wh…

---

## [Discover: Request Timeout after 30000ms: ES](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms-es/131400)

<div class="topic-metadata">

**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\
**Replies:** 5\
**Last updated:** [May 24, 2018, 10:41am UTC](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms-es/131400 "2018-05-24T10:41:31Z")

</div>

Hello Team Greetings of the day! I'm using ES on a node. Node Specifications: 2 VCPUs, 50GB DISK, 8 GB RAM Indices 4 Every Indice has less than 100mb of data. When I'm trying to visualise an indice data in discove…

---

## [High CPU & high IOPS on StressTest](https://discuss.elastic.co/t/high-cpu-high-iops-on-stresstest/43253)

<div class="topic-metadata">

**Author:** [@radap](https://discuss.elastic.co/u/radap)\
**Replies:** 5\
**Last updated:** [March 2, 2016, 3:01pm UTC](https://discuss.elastic.co/t/high-cpu-high-iops-on-stresstest/43253 "2016-03-02T15:01:32Z")

</div>

I recently have upgraded my ES from 1.5.2 to 2.2.0 version and add Shield to it. I\`m trying to perform a stress test by using Locust that blast the cluster with data (by nodejs app). I got strange results comparing to t…

---

## [Connection to 127.0.0.1 Failed](https://discuss.elastic.co/t/connection-to-127-0-0-1-failed/181213)

<div class="topic-metadata">

**Author:** [@markov](https://discuss.elastic.co/u/markov)\
**Replies:** 1\
**Last updated:** [May 15, 2019, 2:30pm UTC](https://discuss.elastic.co/t/connection-to-127-0-0-1-failed/181213 "2019-05-15T14:30:34Z")

</div>

hello guys, i'm getting this error when i try the curl -X GET "localhost:9200/" on Centos. i'm using a proxy. # curl -X GET "localhost:9200" \<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3…

---

## [o.e.b.Bootstrap \] \[sFoGO6h\] node validation exception \[1\] bootstrap checks failed](https://discuss.elastic.co/t/o-e-b-bootstrap-sfogo6h-node-validation-exception-1-bootstrap-checks-failed/96580)

<div class="topic-metadata">

**Author:** [@sankard](https://discuss.elastic.co/u/sankard)\
**Replies:** 1\
**Last updated:** [August 10, 2017, 10:23pm UTC](https://discuss.elastic.co/t/o-e-b-bootstrap-sfogo6h-node-validation-exception-1-bootstrap-checks-failed/96580 "2017-08-10T22:23:58Z")

</div>

Hi all, I am facing node validation error while starting elasticseach. Here is my debug log, I was not able find if i am missing any configuration. I’ve configured limit.conf and jvm with proper values \[2017-08-10T09:1…

---

## [No result when searching .raw field in Kibana](https://discuss.elastic.co/t/no-result-when-searching-raw-field-in-kibana/60349)

<div class="topic-metadata">

**Author:** [@zackcn](https://discuss.elastic.co/u/zackcn)\
**Replies:** 4\
**Last updated:** [September 19, 2016, 5:52am UTC](https://discuss.elastic.co/t/no-result-when-searching-raw-field-in-kibana/60349 "2016-09-19T05:52:20Z")

</div>

Hello, I'm using Kibana 4 with ElasticSearch 2.3.5 to store and search logs. I have a "Message" field which is analyzed and a "Message.raw" field which is not analyzed, this is configured in the mapping template. From …

---

## [Access denied ("java.lang.RuntimePermission" "accessDeclaredMembers")](https://discuss.elastic.co/t/access-denied-java-lang-runtimepermission-accessdeclaredmembers/108132)

<div class="topic-metadata">

**Author:** [@Vivek\_Unni](https://discuss.elastic.co/u/Vivek_Unni)\
**Replies:** 2\
**Last updated:** [November 17, 2017, 2:53pm UTC](https://discuss.elastic.co/t/access-denied-java-lang-runtimepermission-accessdeclaredmembers/108132 "2017-11-17T14:53:29Z")

</div>

I am trying to map the JSON response from other service to a POJO class(AMAUser class from an external jar ama-user-service.jar) using ObjectMapper. I have configured the policy file as below in /elasticsearch-5.6.0/plu…

---

## [LogStash::Error: Don't know how to handle \`Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\<main\>\`](https://discuss.elastic.co/t/logstash-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/345882)

<div class="topic-metadata">

**Author:** [@fae](https://discuss.elastic.co/u/fae)\
**Replies:** 6\
**Last updated:** [October 29, 2023, 6:53am UTC](https://discuss.elastic.co/t/logstash-dont-know-how-to-handle-java-illegalstateexception-for-pipelineaction-create-main/345882 "2023-10-29T06:53:11Z")

</div>

Need help troubleshooting logstash java issue, it was working fine until a while ago when it started throwing up this error below: systemctl status logstash -l ● logstash.service - Logstash service (ELK stack). Loade…

---

## [Is there any way to add APM services to Kibana dashboards?](https://discuss.elastic.co/t/is-there-any-way-to-add-apm-services-to-kibana-dashboards/186940)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 7\
**Last updated:** [June 25, 2019, 5:28pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-add-apm-services-to-kibana-dashboards/186940 "2019-06-25T17:28:30Z")

</div>

Hi everyone, I want to add the graphs (transactions, metrics, cpu, memory) for each service in the above picture to Kibana without actually building new visualizations. Is that possible? Do I have to do this configurat…

---

## [Lasticsearch is still initializing the Monitoring indices](https://discuss.elastic.co/t/lasticsearch-is-still-initializing-the-monitoring-indices/90866)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 5\
**Last updated:** [June 29, 2017, 8:06am UTC](https://discuss.elastic.co/t/lasticsearch-is-still-initializing-the-monitoring-indices/90866 "2017-06-29T08:06:52Z")

</div>

What does this mean and how can I solve this problem? I haven’t changed any of my config + this just happened very recently. Haven’t updated anything either. I installed elasticsearch from brew. These are some of the…

---

## [ETL Tool?](https://discuss.elastic.co/t/etl-tool/71637)

<div class="topic-metadata">

**Author:** [@jt3000](https://discuss.elastic.co/u/jt3000)\
**Replies:** 5\
**Last updated:** [January 23, 2017, 12:21pm UTC](https://discuss.elastic.co/t/etl-tool/71637 "2017-01-23T12:21:41Z")

</div>

Hello! I'm newbie in Beat. 1. Is Beat a ETL tool to integrate different data source from different database and then merge all data into one common and single database? 2. What context is Beat beats being used in b…

---

## [Elasticsearch can not be started by service](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773)

<div class="topic-metadata">

**Author:** [@mkkang66](https://discuss.elastic.co/u/mkkang66)\
**Replies:** 4\
**Last updated:** [December 7, 2020, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-can-not-be-started-by-service/257773 "2020-12-07T09:52:07Z")

</div>

I installed an elasticsearch 7.10.0 by tar.gz archives because my network is a closed network. I can run it as a deamon with ' ../bin/elasticsearch -d -p es.pid' but systemctl command can not be run. The followings are …

---

## [Run filebeat with output log](https://discuss.elastic.co/t/run-filebeat-with-output-log/41428)

<div class="topic-metadata">

**Author:** [@Pablo\_perez](https://discuss.elastic.co/u/Pablo_perez)\
**Replies:** 4\
**Last updated:** [February 10, 2016, 9:17pm UTC](https://discuss.elastic.co/t/run-filebeat-with-output-log/41428 "2016-02-10T21:17:54Z")

</div>

I´ve been using filebeat, and I´m trying to resolve an issue when I start it in background. I would like to start it to throwing log information for the startup and shutdown but I cannot find a way to make it works. Thi…

---

## [ElasticSearch date format](https://discuss.elastic.co/t/elasticsearch-date-format/23008)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 4\
**Last updated:** [April 3, 2015, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-date-format/23008 "2015-04-03T11:58:18Z")

</div>

Hi All, when i insert date to elastic search in the format of yyyy-MM-DD hh:mm:ss from java api getting date format exception.but when i use yyyy-MM-DDThh:mm:ss between them it is inserted fine.please explain m…

---

## [No matching index template found for data streamd](https://discuss.elastic.co/t/no-matching-index-template-found-for-data-streamd/307485)

<div class="topic-metadata">

**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 8:29am UTC](https://discuss.elastic.co/t/no-matching-index-template-found-for-data-streamd/307485 "2022-06-21T08:29:47Z")

</div>

Hello, i am trying to run metricbeat setup command to create datastream but i am getting an error ./metricbeat setup --index-management -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=\["https://${ES\_URL}…

---

## [Kibana - remove grey bar - partial data](https://discuss.elastic.co/t/kibana-remove-grey-bar-partial-data/163345)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 9:43am UTC](https://discuss.elastic.co/t/kibana-remove-grey-bar-partial-data/163345 "2019-01-09T09:43:10Z")

</div>

Hello, I am building a date histogram visualization and when I specify a desired timestamp, some grey bars appears with the information: "This are may contain partial data. The selected time range does not fully cover …

---

## [Query that finds duplicate log lines and their respective count](https://discuss.elastic.co/t/query-that-finds-duplicate-log-lines-and-their-respective-count/199937)

<div class="topic-metadata">

**Author:** [@AndriesN](https://discuss.elastic.co/u/AndriesN)\
**Replies:** 3\
**Last updated:** [September 19, 2019, 3:21pm UTC](https://discuss.elastic.co/t/query-that-finds-duplicate-log-lines-and-their-respective-count/199937 "2019-09-19T15:21:25Z")

</div>

Hi all, I am doing a school project where I am using your product for a log management system. I have lots of data and I want to know which log lines are duplicate and how many duplicates there are for that particular …

---

## [Default settings used: Filter workers: 2](https://discuss.elastic.co/t/default-settings-used-filter-workers-2/35201)

<div class="topic-metadata">

**Author:** [@aqiao](https://discuss.elastic.co/u/aqiao)\
**Replies:** 8\
**Last updated:** [November 22, 2015, 9:15pm UTC](https://discuss.elastic.co/t/default-settings-used-filter-workers-2/35201 "2015-11-22T21:15:00Z")

</div>

when i start logstash using bin/logtash -f test.config, it shows the message as title ps. i have removed all .sincedb\_\* files and the logstash version is 2.0 test.config \`input { file { path =\> "/data/tmp/elktest/t…

---

## [Unable to display float value of a number scripted-field](https://discuss.elastic.co/t/unable-to-display-float-value-of-a-number-scripted-field/130629)

<div class="topic-metadata">

**Author:** [@dighan](https://discuss.elastic.co/u/dighan)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 9:07am UTC](https://discuss.elastic.co/t/unable-to-display-float-value-of-a-number-scripted-field/130629 "2018-05-07T09:07:41Z")

</div>

Hey. I'm playing with scripted-field in Kibana 5.6.6. It's super powerful ! I'm just facing a little issue about formatting: I create a scripted-field returning a float from a ratio \[scripted-field\] I visualise the …

---

## [Jenkins build data visualization](https://discuss.elastic.co/t/jenkins-build-data-visualization/18177)

<div class="topic-metadata">

**Author:** [@Robert\_Diebels](https://discuss.elastic.co/u/Robert_Diebels)\
**Replies:** 2\
**Last updated:** [June 18, 2014, 11:45am UTC](https://discuss.elastic.co/t/jenkins-build-data-visualization/18177 "2014-06-18T11:45:30Z")

</div>

Hi guys/girls, I don't know if this is the right place. However I've recently watched this video: http://www.elasticsearch.org/webinars/elk-stack-devops-environment/?watch=1 I've been thinking how I could integrat…

---

## [Convert single node to Clustered Nodes](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 5\
**Last updated:** [September 29, 2021, 7:48am UTC](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432 "2021-09-29T07:48:23Z")

</div>

I have a single node Elasticsearch instance. It had default Elasticsearch yml configuration as below. It has one index with some data. # ======================== Elasticsearch Configuration ========================= # #…

---

## [Would it be possible the relation grate-grandparent/grate-grandchild in elasticsearch?](https://discuss.elastic.co/t/would-it-be-possible-the-relation-grate-grandparent-grate-grandchild-in-elasticsearch/26875)

<div class="topic-metadata">

**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\
**Replies:** 4\
**Last updated:** [August 5, 2015, 2:38pm UTC](https://discuss.elastic.co/t/would-it-be-possible-the-relation-grate-grandparent-grate-grandchild-in-elasticsearch/26875 "2015-08-05T14:38:01Z")

</div>

Hi, I would like to know if it would be posible the relation grate-grandparent/grate-grandchild so It exists too the relations parent/child and grandparent/grandchild in elasticsearch. Thanks in advance. Best reg…

---

## [Delete all Indices through curl API](https://discuss.elastic.co/t/delete-all-indices-through-curl-api/15092)

<div class="topic-metadata">

**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\
**Replies:** 0\
**Last updated:** [January 3, 2014, 1:16pm UTC](https://discuss.elastic.co/t/delete-all-indices-through-curl-api/15092 "2014-01-03T13:16:06Z")

</div>

Hi, curl -XDELETE 'http://localhost:9200/\_all' taking too much time to clear indices. ES cluster (version Beta1) has 2 dedicated master nodes , 10 dedicated data-nodes. Each node has approximately 350 shards .…

---

## [Getting ConnectTransportException for 127.0.0.1:9300](https://discuss.elastic.co/t/getting-connecttransportexception-for-127-0-0-1-9300/57886)

<div class="topic-metadata">

**Author:** [@Devanshi\_Choudhary](https://discuss.elastic.co/u/Devanshi_Choudhary)\
**Replies:** 2\
**Last updated:** [August 12, 2016, 7:28am UTC](https://discuss.elastic.co/t/getting-connecttransportexception-for-127-0-0-1-9300/57886 "2016-08-12T07:28:46Z")

</div>

Hi, I am setting up elasticsearch in my environment and using 3 virtual boxes, each Virtual box has 2 instances of elasticsearch configured - one is master node and other is data node So when I start my server1(Hostn…

---

## [Filebeat cisco/asa module not working](https://discuss.elastic.co/t/filebeat-cisco-asa-module-not-working/257088)

<div class="topic-metadata">

**Author:** [@Rafal\_Radziejewski](https://discuss.elastic.co/u/Rafal_Radziejewski)\
**Replies:** 7\
**Last updated:** [December 4, 2020, 8:10pm UTC](https://discuss.elastic.co/t/filebeat-cisco-asa-module-not-working/257088 "2020-12-04T20:10:41Z")

</div>

Elasticsearch 7.9.2 Filebeat 7.10 Running command: sudo filebeat setup -e --dashboards --pipelines --template Produces: 2020-11-30T16:04:16.488+0100 ERROR \[load\] cfgfile/list.go:99 Error creating runner from config:…

---

## [Filebeatで、ログ収集がとまる](https://discuss.elastic.co/t/filebeat/206762)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 5\
**Last updated:** [December 6, 2019, 1:45pm UTC](https://discuss.elastic.co/t/filebeat/206762 "2019-12-06T13:45:12Z")

</div>

Filebeatでのログ収集がとまり、困っています。 下記が出力され、決まった時間にログ収集がとまります。 現在、対処として、filebeatを再起動させて、ログ収集を再開させています。 他に、よい対処方法がありましたら、ご教示お願いします。 ログ収集がとまったときの出力 /var/log/messages rsyslogd: \[origin software="rsyslogd" swVersion="8.16.0" x-…

---

## [Problems with min\_doc\_count](https://discuss.elastic.co/t/problems-with-min-doc-count/102114)

<div class="topic-metadata">

**Author:** [@klubbe](https://discuss.elastic.co/u/klubbe)\
**Replies:** 2\
**Last updated:** [September 29, 2017, 6:29am UTC](https://discuss.elastic.co/t/problems-with-min-doc-count/102114 "2017-09-29T06:29:58Z")

</div>

I'm making a visualization with the Kibana tool and it keeps giving me an error, but I don't understand why. What I'm trying to do is removing rows which gets 0 from the count aggregation. i have tried adding the min\_do…

---

## [Cert error for intial setup of fileBeat](https://discuss.elastic.co/t/cert-error-for-intial-setup-of-filebeat/297614)

<div class="topic-metadata">

**Author:** [@ledufakademy](https://discuss.elastic.co/u/ledufakademy)\
**Replies:** 3\
**Last updated:** [February 20, 2022, 1:17pm UTC](https://discuss.elastic.co/t/cert-error-for-intial-setup-of-filebeat/297614 "2022-02-20T13:17:50Z")

</div>

i follow exactly the documentaion , but we stuck on :slight\_smile: filebeat setup. filebeat setup Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch at ht…

---

## [Event Log Record Number Tracking](https://discuss.elastic.co/t/event-log-record-number-tracking/106245)

<div class="topic-metadata">

**Author:** [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\
**Replies:** 6\
**Last updated:** [November 3, 2017, 2:30pm UTC](https://discuss.elastic.co/t/event-log-record-number-tracking/106245 "2017-11-03T14:30:48Z")

</div>

Hi, For Winlogbeat there is a file in c:\\ProgramData\\Winlogbeat.winlogbeat.yml that shows you the last record sent to Elasticsearch from the machine. I noticed that if you delete this file it will not resend the events …

---

## [Creating Logstash Filter using Grok plugin](https://discuss.elastic.co/t/creating-logstash-filter-using-grok-plugin/38760)

<div class="topic-metadata">

**Author:** [@Kaufusihm](https://discuss.elastic.co/u/Kaufusihm)\
**Replies:** 6\
**Last updated:** [January 14, 2016, 12:25am UTC](https://discuss.elastic.co/t/creating-logstash-filter-using-grok-plugin/38760 "2016-01-14T00:25:32Z")

</div>

I'm trying to build a grok filter for my logstash filter config. This is a sample of a standard event I'm trying to tag. \[2016-01-05T23:59:23.352-0700\] \[glassfish 4.1\] \[INFO\] \[\] \[edu.utah.acs.student.classinformation…

---

## [Search API vs Query DSL](https://discuss.elastic.co/t/search-api-vs-query-dsl/58149)

<div class="topic-metadata">

**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Replies:** 1\
**Last updated:** [August 16, 2016, 3:06pm UTC](https://discuss.elastic.co/t/search-api-vs-query-dsl/58149 "2016-08-16T15:06:25Z")

</div>

Hi, can someone please explain the difference between Search API and Query DSL? I have been using both but still don't understand the difference. Thanks

---

## [Kibana not starting after upgrade fron 6.6.1 to 6.7](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-fron-6-6-1-to-6-7/174889)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 2\
**Last updated:** [April 1, 2019, 11:56pm UTC](https://discuss.elastic.co/t/kibana-not-starting-after-upgrade-fron-6-6-1-to-6-7/174889 "2019-04-01T23:56:28Z")

</div>

I upgraded kibana from 6.6.1 to 6.7 on Linux. I am seeing this error. I installed using tar package. My elastic search version is 6.6.1. {"type":"log","@timestamp":"2019-04-01T23:03:26Z","tags":\["warning","task\_manage…

---

## [Gauge Visualzation - Display Count and Average](https://discuss.elastic.co/t/gauge-visualzation-display-count-and-average/123795)

<div class="topic-metadata">

**Author:** [@Lazarbeam](https://discuss.elastic.co/u/Lazarbeam)\
**Replies:** 3\
**Last updated:** [March 14, 2018, 10:58pm UTC](https://discuss.elastic.co/t/gauge-visualzation-display-count-and-average/123795 "2018-03-14T22:58:12Z")

</div>

Team -- After much searching through Google and these forums, I've decided I've pulled my hair out enough to try to figure out if what I'm trying to accomplish is possible and am making this post. All components are ve…

---

## [Revisiting colons in field names](https://discuss.elastic.co/t/revisiting-colons-in-field-names/25005)

<div class="topic-metadata">

**Author:** [@bonhomme](https://discuss.elastic.co/u/bonhomme)\
**Replies:** 3\
**Last updated:** [January 28, 2016, 2:43am UTC](https://discuss.elastic.co/t/revisiting-colons-in-field-names/25005 "2016-01-28T02:43:54Z")

</div>

TL;DR version : Is there any possibility of searching on field names that contain colons in ElasticSearch? (Necessary for semantically tagged JSON-LD documents) This is a bit of a re-visit of https://discuss.elastic…

---

## [How to compare two field values using query\_string in Elasticsearch](https://discuss.elastic.co/t/how-to-compare-two-field-values-using-query-string-in-elasticsearch/231713)

<div class="topic-metadata">

**Author:** [@Srinivas\_Kondapally](https://discuss.elastic.co/u/Srinivas_Kondapally)\
**Replies:** 1\
**Last updated:** [May 11, 2020, 6:30am UTC](https://discuss.elastic.co/t/how-to-compare-two-field-values-using-query-string-in-elasticsearch/231713 "2020-05-11T06:30:46Z")

</div>

I am using Elast Alert for Alerting System which queries ElasticSearch using REST API's for a certain interval of time. But I have a scenario that I need to compare two fields if the values of two fields get matches aler…

---

## [How to filter nested JSON Data in Logstash](https://discuss.elastic.co/t/how-to-filter-nested-json-data-in-logstash/139124)

<div class="topic-metadata">

**Author:** [@Sami\_Hilaneh](https://discuss.elastic.co/u/Sami_Hilaneh)\
**Replies:** 8\
**Last updated:** [July 10, 2018, 1:49pm UTC](https://discuss.elastic.co/t/how-to-filter-nested-json-data-in-logstash/139124 "2018-07-10T13:49:18Z")

</div>

hey all, i am trying to get some specific fileds(filter them) from a big nested JSON Data, i have like example this JSON Data: { "agent": "Mozilla/5.0 (compatible; MSIE 9.0)", "ip": "192.168.24.44", "request": "/in…

---

## [Start ES on Centos 7.4 problem](https://discuss.elastic.co/t/start-es-on-centos-7-4-problem/125709)

<div class="topic-metadata">

**Author:** [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Replies:** 5\
**Last updated:** [March 28, 2018, 6:45am UTC](https://discuss.elastic.co/t/start-es-on-centos-7-4-problem/125709 "2018-03-28T06:45:17Z")

</div>

I'm running ES 6.2.3 stack on Windows server for more then half a year. Now when ma stack is fully configured and running, we've decided to move to Centos. So far I've installed ES and KB with X-Pack. KB is working, bu…

---

## [Elasticsearch & Kibana JVM Management](https://discuss.elastic.co/t/elasticsearch-kibana-jvm-management/66339)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 5\
**Last updated:** [November 18, 2016, 2:34pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-jvm-management/66339 "2016-11-18T14:34:03Z")

</div>

Hi everyone, I have a doubt about JVM usage with Elasticsarch & Kibana. For example, I have an Elasticsearch 1.7.5 and Kibana 3. In a normal conditions Elasticsearch has 30% heap usage, when I use Kibana and I try to o…

---

## [Dealing with frequent logrotation - ignore\_older seems to be ignored](https://discuss.elastic.co/t/dealing-with-frequent-logrotation-ignore-older-seems-to-be-ignored/36271)

<div class="topic-metadata">

**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\
**Replies:** 5\
**Last updated:** [December 3, 2015, 3:33pm UTC](https://discuss.elastic.co/t/dealing-with-frequent-logrotation-ignore-older-seems-to-be-ignored/36271 "2015-12-03T15:33:33Z")

</div>

I am using filebeat to forward logs from a pair of Varnish servers, and these produce a fairly large amount of data pretty quickly. Because we don't want to keep this stuff, I've set up a one-hour log-rotation schedule f…

---

## [Error with Azure Billing Metrics Integration - Version API incorrect](https://discuss.elastic.co/t/error-with-azure-billing-metrics-integration-version-api-incorrect/296056)

<div class="topic-metadata">

**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\
**Replies:** 1\
**Last updated:** [February 10, 2022, 3:26pm UTC](https://discuss.elastic.co/t/error-with-azure-billing-metrics-integration-version-api-incorrect/296056 "2022-02-10T15:26:13Z")

</div>

Hello, For my internship project, I have to integrate the monitoring of costs in a monitoring tool. So I wanted to use the Azure Billing Metrics integration. The problem is that I get nothing at all because of the foll…

---

## [Cloudflare Logs via Logstash](https://discuss.elastic.co/t/cloudflare-logs-via-logstash/291743)

<div class="topic-metadata">

**Author:** [@ZiaulAfiq](https://discuss.elastic.co/u/ZiaulAfiq)\
**Replies:** 5\
**Last updated:** [December 24, 2021, 1:24pm UTC](https://discuss.elastic.co/t/cloudflare-logs-via-logstash/291743 "2021-12-24T13:24:43Z")

</div>

Hello & Greetings all! I'm doing some testing to retrieve Cloudflare logs using Logstash. My approach in retrieving the Cloudflare logs are by using Bash script to pull the logs from cloudflare then push them to logstas…

---

## [Indexing compressed (gzip) content into Elastic through Java APIs](https://discuss.elastic.co/t/indexing-compressed-gzip-content-into-elastic-through-java-apis/74102)

<div class="topic-metadata">

**Author:** [@jasons-tlr](https://discuss.elastic.co/u/jasons-tlr)\
**Replies:** 5\
**Last updated:** [February 7, 2017, 1:18pm UTC](https://discuss.elastic.co/t/indexing-compressed-gzip-content-into-elastic-through-java-apis/74102 "2017-02-07T13:18:41Z")

</div>

My use cases are within ES 2.4 & 5x; the goal being to feed GZIP content directly into an ES index through my Java application. I'm aware that compressed (GZIP) content can be loaded via the REST end-points, but would …

---

## [High CPU usage when idle](https://discuss.elastic.co/t/high-cpu-usage-when-idle/54963)

<div class="topic-metadata">

**Author:** [@pip0](https://discuss.elastic.co/u/pip0)\
**Replies:** 5\
**Last updated:** [July 8, 2016, 3:54pm UTC](https://discuss.elastic.co/t/high-cpu-usage-when-idle/54963 "2016-07-08T15:54:28Z")

</div>

Hey I'm currently experiencing a high CPU usage in environment. This is my result of hot threads any idea why the spike is happening ?

---

## [Filebeat -\> logstash, wrapping message and extra fields problems!](https://discuss.elastic.co/t/filebeat-logstash-wrapping-message-and-extra-fields-problems/82494)

<div class="topic-metadata">

**Author:** [@Ilia](https://discuss.elastic.co/u/Ilia)\
**Replies:** 6\
**Last updated:** [April 18, 2017, 5:24am UTC](https://discuss.elastic.co/t/filebeat-logstash-wrapping-message-and-extra-fields-problems/82494 "2017-04-18T05:24:33Z")

</div>

I'm using the following configuration as my ELK stack architecture: (filebeat)\* -\> (kafka -\> logstash -\> elasticsearch -\> kibana) My problem is that the events are augmented with some unnecessary fields when they reach…

---

## [Pushing Data to Elasticsearch from Spark](https://discuss.elastic.co/t/pushing-data-to-elasticsearch-from-spark/70827)

<div class="topic-metadata">

**Author:** [@boots](https://discuss.elastic.co/u/boots)\
**Replies:** 6\
**Last updated:** [January 11, 2017, 2:09pm UTC](https://discuss.elastic.co/t/pushing-data-to-elasticsearch-from-spark/70827 "2017-01-11T14:09:24Z")

</div>

Hello All, I am running into an issue when trying to use the Spark Scala library to push data to an index within our Elasticsearch cluster. I have a DStream\[(String, String)\] with the first String being the '\_id' I wa…

---

## [APM transaction name is not consistent](https://discuss.elastic.co/t/apm-transaction-name-is-not-consistent/322713)

<div class="topic-metadata">

**Author:** [@ciizo](https://discuss.elastic.co/u/ciizo)\
**Replies:** 2\
**Last updated:** [January 11, 2023, 3:59am UTC](https://discuss.elastic.co/t/apm-transaction-name-is-not-consistent/322713 "2023-01-11T03:59:49Z")

</div>

Kibana version: 8.1.2 Elasticsearch version: 8.1.2 APM Server version: 8.1.2 APM Agent language and version: APM .NET 1.19.0 Browser version: Chrome 108.0.5359.125 (Official Build) (64-bit) APM transaction name is m…

---

## [Java - not able to load FFI provider: How to start the logstash without the error?](https://discuss.elastic.co/t/java-not-able-to-load-ffi-provider-how-to-start-the-logstash-without-the-error/332788)

<div class="topic-metadata">

**Author:** [@karthic](https://discuss.elastic.co/u/karthic)\
**Replies:** 3\
**Last updated:** [May 18, 2023, 7:33am UTC](https://discuss.elastic.co/t/java-not-able-to-load-ffi-provider-how-to-start-the-logstash-without-the-error/332788 "2023-05-18T07:33:35Z")

</div>

Tried to load logstash in a Centos environment \[INFO \]\[logstash.runner \] JVM bootstrap flags: \[-Xms1g, -Xmx1g, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -XX:+HeapDumpOnOutOfMem…

---

## [Dedup in Kibana search](https://discuss.elastic.co/t/dedup-in-kibana-search/138041)

<div class="topic-metadata">

**Author:** [@Rohit\_Jawle](https://discuss.elastic.co/u/Rohit_Jawle)\
**Replies:** 3\
**Last updated:** [July 5, 2018, 8:00pm UTC](https://discuss.elastic.co/t/dedup-in-kibana-search/138041 "2018-07-05T20:00:14Z")

</div>

In splunk, there is a command called dedup, followed by a field name. How do you do this in elk?

---

## [Kibana empty dashboard](https://discuss.elastic.co/t/kibana-empty-dashboard/17521)

<div class="topic-metadata">

**Author:** [@itbladehq3](https://discuss.elastic.co/u/itbladehq3)\
**Replies:** 3\
**Last updated:** [January 5, 2015, 7:15pm UTC](https://discuss.elastic.co/t/kibana-empty-dashboard/17521 "2015-01-05T19:15:42Z")

</div>

I have the following is showing up when I pull up my kibana dashboard: http://192.168.10.25/#/dashboard {{dashboard.current.title}} When I tail my logs I see the following 2014/05/14 13:31:45 \[error\] 17152#…

[Previous page](https://discuss.elastic.co/top.md?page=627&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=629&per_page=50&period=all)
