# Top **URL:** https://discuss.elastic.co/top.md?page=633&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 634 --- ## [Kibana Visualize. Lower and Upper Standard deviation](https://discuss.elastic.co/t/kibana-visualize-lower-and-upper-standard-deviation/205623)
**Author:** [@evecitas89](https://discuss.elastic.co/u/evecitas89)\ **Replies:** 1\ **Last updated:** [October 29, 2019, 4:06pm UTC](https://discuss.elastic.co/t/kibana-visualize-lower-and-upper-standard-deviation/205623 "2019-10-29T16:06:44Z")
Hi all, I'm using kibana Data Table Visualization to visualize some information of a set of data. This is my table: My problem is with Standard Deviation. I've selected Standard Deviation as metric, but I'm interest… --- ## [How to delete a node with api? when the machine is power off in elasticsearch 5.3](https://discuss.elastic.co/t/how-to-delete-a-node-with-api-when-the-machine-is-power-off-in-elasticsearch-5-3/97330)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 7\ **Last updated:** [August 18, 2017, 3:18am UTC](https://discuss.elastic.co/t/how-to-delete-a-node-with-api-when-the-machine-is-power-off-in-elasticsearch-5-3/97330 "2017-08-18T03:18:46Z")
how to delete a node with api? elasticsearch 5.3 ,when the matchine is offline. thanks. --- ## [Does the field "system.cpu.user.pct" represent the server usage? and what are the contributing fields for the same](https://discuss.elastic.co/t/does-the-field-system-cpu-user-pct-represent-the-server-usage-and-what-are-the-contributing-fields-for-the-same/91506)
**Author:** [@prosenjit](https://discuss.elastic.co/u/prosenjit)\ **Replies:** 2\ **Last updated:** [July 3, 2017, 5:25am UTC](https://discuss.elastic.co/t/does-the-field-system-cpu-user-pct-represent-the-server-usage-and-what-are-the-contributing-fields-for-the-same/91506 "2017-07-03T05:25:28Z")
I have implemented ELK stack for logging solutions and aslo set up metricbeat for measuring server performance. I stumbled on system module's "system.cpu.user.pct" which is the system's cpu usage. Now, I need to understa… --- ## [Elasticsearch performance tuning doubts](https://discuss.elastic.co/t/elasticsearch-performance-tuning-doubts/182299)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 7\ **Last updated:** [June 2, 2019, 12:16pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-tuning-doubts/182299 "2019-06-02T12:16:27Z")
Hi, I have a 5 node cluster running elasticsearch 7.0.0. Indices: 700 Total size: 350GB (Primary storage excluding replicas) Some of the biggest indices are around 2.5-3GB in size. Now i have 1 primary shard and 1 r… --- ## [Logstash unable to connect to Elasticsearch over https](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362)
**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\ **Replies:** 6\ **Last updated:** [December 20, 2021, 8:38pm UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-to-elasticsearch-over-https/292362 "2021-12-20T20:38:59Z")
Hello, I am facing connection issues from logstash to my elastic stack. The very strange this is, that it worked until yesterday. Today (without any modification from my side) I get: Dec 17 22:00:55 ubuntu logstash-app… --- ## [Multiple lines for count of different values in one field](https://discuss.elastic.co/t/multiple-lines-for-count-of-different-values-in-one-field/148703)
**Author:** [@What](https://discuss.elastic.co/u/What)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 4:40pm UTC](https://discuss.elastic.co/t/multiple-lines-for-count-of-different-values-in-one-field/148703 "2018-09-19T16:40:55Z")
I have read in my Apache logfiles into Elasticsearch. They contain a field "server\_name" which specifies the domain name of the site that was visited. Possible values are "domain-1.com", "domain-2.com", etc. (eight domai… --- ## [Can I delete monitoring and logging indexes?](https://discuss.elastic.co/t/can-i-delete-monitoring-and-logging-indexes/238165)
**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\ **Replies:** 3\ **Last updated:** [July 9, 2020, 12:34pm UTC](https://discuss.elastic.co/t/can-i-delete-monitoring-and-logging-indexes/238165 "2020-07-09T12:34:10Z")
As I mentioned in my previous post (AppSearch disk consumption keeps growing), my EES+ES node is quickly filling up the disk, even my document count and size is pretty stable Kibana shows me that my most heavy indexes a… --- ## [Watcher with conditions fails on transform](https://discuss.elastic.co/t/watcher-with-conditions-fails-on-transform/147962)
**Author:** [@JeffreyH1989](https://discuss.elastic.co/u/JeffreyH1989)\ **Replies:** 5\ **Last updated:** [September 13, 2018, 11:26am UTC](https://discuss.elastic.co/t/watcher-with-conditions-fails-on-transform/147962 "2018-09-13T11:26:39Z")
Good afternoon, I'm trying to create a Watcher for cluster alerting in Slack. I'm using the Elasticsearch cluster state watcher included with X-Pack. For testing, i'm verifying if the behavior works like the built-in on… --- ## [Group Values with Aggregation](https://discuss.elastic.co/t/group-values-with-aggregation/200255)
**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\ **Replies:** 7\ **Last updated:** [September 23, 2019, 3:48pm UTC](https://discuss.elastic.co/t/group-values-with-aggregation/200255 "2019-09-23T15:48:00Z")
I am trying to write an aggregation query but not sure what I am missing here. I have the following structure across multiple documents. Some of the field names may not be present in documents. { "CaptureData": \[{ … --- ## [\[Painless\] Stored script - Multiline - Parsing Error](https://discuss.elastic.co/t/painless-stored-script-multiline-parsing-error/211091)
**Author:** [@Remy\_Letient](https://discuss.elastic.co/u/Remy_Letient)\ **Replies:** 2\ **Last updated:** [December 9, 2019, 2:21pm UTC](https://discuss.elastic.co/t/painless-stored-script-multiline-parsing-error/211091 "2019-12-09T14:21:18Z")
Hello, I'm new with the usage of script. I understand they are 2 modes to write the script itseft, in a single line and in multiline with the usage of """. But I found sample on Web, but in all cases I have a parsing ex… --- ## [Case-insensitive search on not\_analyzed field](https://discuss.elastic.co/t/case-insensitive-search-on-not-analyzed-field/12644)
**Author:** [@Ankit\_Jain](https://discuss.elastic.co/u/Ankit_Jain)\ **Replies:** 2\ **Last updated:** [July 5, 2013, 3:38pm UTC](https://discuss.elastic.co/t/case-insensitive-search-on-not-analyzed-field/12644 "2013-07-05T15:38:16Z")
Hi All, I would like to perform case insensitive search on not\_analyzed field, as well as I would like to provide support for wildcard search. And, wildcard search is not working on keyword analyzer. Also, I tr… --- ## [Kibana | FATAL Error: HELP](https://discuss.elastic.co/t/kibana-fatal-error-help/274274)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 6\ **Last updated:** [May 30, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-fatal-error-help/274274 "2021-05-30T00:09:33Z")
Hi all I've obtained this error: I've created some plot through vega lite and when I execute again the script used for kibana I've this error but until some time before everthing works well. I've a node of kibana and a… --- ## [\[Logstash\] Lire des fichier Excel .xls et envoyer à Elasticsearch](https://discuss.elastic.co/t/logstash-lire-des-fichier-excel-xls-et-envoyer-a-elasticsearch/137800)
**Author:** [@alicia1](https://discuss.elastic.co/u/alicia1)\ **Replies:** 6\ **Last updated:** [June 28, 2018, 4:27pm UTC](https://discuss.elastic.co/t/logstash-lire-des-fichier-excel-xls-et-envoyer-a-elasticsearch/137800 "2018-06-28T16:27:58Z")
Bonjour, J'aimerais savoir s'il est possible de lire des fichier Excel (.xls) et les envoyer à Elasticseach. Car on a des fichiers de log Excel. Oubien il faut les convertir en CSV avant? Merci. --- ## [Logstash new plugin system too restrictive](https://discuss.elastic.co/t/logstash-new-plugin-system-too-restrictive/24247)
**Author:** [@rtoma](https://discuss.elastic.co/u/rtoma)\ **Replies:** 6\ **Last updated:** [July 6, 2015, 5:31pm UTC](https://discuss.elastic.co/t/logstash-new-plugin-system-too-restrictive/24247 "2015-07-06T17:31:40Z")
With 1.5.0RC4 the --pluginpath parameter was dropped, because to paraphrase it was not needed anymore. The new plugin system is well designed, but: It breaks any installation using the pluginpath parameter. Offering… --- ## [Transfer TLS Windows Server 2012R2 DNS logs by nxlog towards ELK pile on debian](https://discuss.elastic.co/t/transfer-tls-windows-server-2012r2-dns-logs-by-nxlog-towards-elk-pile-on-debian/44341)
**Author:** [@OncleThorgal](https://discuss.elastic.co/u/OncleThorgal)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 1:18pm UTC](https://discuss.elastic.co/t/transfer-tls-windows-server-2012r2-dns-logs-by-nxlog-towards-elk-pile-on-debian/44341 "2016-03-21T13:18:32Z")
Hello everyone! I'm new to the forum, so, I appeal to you because I meet a problem in viewing my DNS logs on ELK stack. Here is my problem: I have Windows Server 2012R2 VM with nxlog above . The configuration file is t… --- ## [Kibana 5.0 Ingest API](https://discuss.elastic.co/t/kibana-5-0-ingest-api/65043)
**Author:** [@j9s3](https://discuss.elastic.co/u/j9s3)\ **Replies:** 5\ **Last updated:** [November 24, 2016, 9:42am UTC](https://discuss.elastic.co/t/kibana-5-0-ingest-api/65043 "2016-11-24T09:42:23Z")
Is the Ingest API available in Kibana 5.0.0? I'm following the examples referenced in here: POST localhost:5601/api/kibana/ingest and I'm getting a 404 response: {"statusCode":404,"error":"Not Found"} --- ## [Metricbeat: How to monitor podman resources](https://discuss.elastic.co/t/metricbeat-how-to-monitor-podman-resources/216619)
**Author:** [@giraffe](https://discuss.elastic.co/u/giraffe)\ **Replies:** 2\ **Last updated:** [January 28, 2020, 2:00am UTC](https://discuss.elastic.co/t/metricbeat-how-to-monitor-podman-resources/216619 "2020-01-28T02:00:45Z")
Hi Team environment: CentOS 7.7 metricbeat 7.5.2 podman 1.4.4-4 I'm using podman (https://podman.io/) for run containers. Podman is a daemonless container engine for developing, managing, and running OCI Containers… --- ## [Aggregations based on text fields instead of keyword fields](https://discuss.elastic.co/t/aggregations-based-on-text-fields-instead-of-keyword-fields/174781)
**Author:** [@David9](https://discuss.elastic.co/u/David9)\ **Replies:** 8\ **Last updated:** [April 1, 2019, 3:16pm UTC](https://discuss.elastic.co/t/aggregations-based-on-text-fields-instead-of-keyword-fields/174781 "2019-04-01T15:16:18Z")
Let's say we are analyzing posts to a sports forum, where the records contain a title, a body (text) field, and keyword fields, where the keywords might be the name of the sport that the post concerns. I know how to do … --- ## [The new Centos 7, RPM installation cannot run](https://discuss.elastic.co/t/the-new-centos-7-rpm-installation-cannot-run/141013)
**Author:** [@saki](https://discuss.elastic.co/u/saki)\ **Replies:** 8\ **Last updated:** [July 23, 2018, 2:15am UTC](https://discuss.elastic.co/t/the-new-centos-7-rpm-installation-cannot-run/141013 "2018-07-23T02:15:30Z")
I followed the guide,complete installation. but curl -XGET 'http://localhost:9200' didn't work. So I check systemctl status elasticsearch.service -l and get: Loaded: loaded (/usr/lib/systemd/system/elasticsearch.servic… --- ## [INFO Error publishing events (retrying): read tcp read: connection reset by peer](https://discuss.elastic.co/t/info-error-publishing-events-retrying-read-tcp-read-connection-reset-by-peer/77358)
**Author:** [@wmstein](https://discuss.elastic.co/u/wmstein)\ **Replies:** 3\ **Last updated:** [March 4, 2017, 5:44pm UTC](https://discuss.elastic.co/t/info-error-publishing-events-retrying-read-tcp-read-connection-reset-by-peer/77358 "2017-03-04T17:44:18Z")
I put filebeat on a prod box and can not get filebeat to push to Logstash on my elkserver box. I am getting the below error from the filebeat.log file INFO Error publishing events (retrying): read tcp IP:45790-\>ELK\_IP:… --- ## [Tomcat/catalina.out logs are getting parsed by grok debugger but not by logstash](https://discuss.elastic.co/t/tomcat-catalina-out-logs-are-getting-parsed-by-grok-debugger-but-not-by-logstash/70005)
**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\ **Replies:** 3\ **Last updated:** [January 8, 2017, 4:55pm UTC](https://discuss.elastic.co/t/tomcat-catalina-out-logs-are-getting-parsed-by-grok-debugger-but-not-by-logstash/70005 "2017-01-08T16:55:49Z")
Hi, We have tomcat/catalina.out log files which are getting parsed by grok debugger properly but when we provide same grok pattern in logstash indexer, it never parses it. In almost all logs it gives grokparsefailure. I… --- ## [FATAL Error: \[config validation of \[server\].host\]: value must be a valid hostname (see RFC 1123)](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-host-value-must-be-a-valid-hostname-see-rfc-1123/310029)
**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\ **Replies:** 1\ **Last updated:** [July 23, 2022, 5:40pm UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-host-value-must-be-a-valid-hostname-see-rfc-1123/310029 "2022-07-23T17:40:28Z")
I am trying to install ELK stack locally as a part of a docker-compose as follows: version: '3.2' services: elasticsearch: container\_name: elasticsearch build: context: elasticsearch/ args: … --- ## [Moving data from one cluster to other cluster](https://discuss.elastic.co/t/moving-data-from-one-cluster-to-other-cluster/178495)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 7\ **Last updated:** [April 30, 2019, 12:11pm UTC](https://discuss.elastic.co/t/moving-data-from-one-cluster-to-other-cluster/178495 "2019-04-30T12:11:45Z")
there are situations where we need to copy the data (indices or timestamp range) from one cluster to another cluster. is there a tool or efficient way to get this done ? Any pointers will be useful. Thanks. --- ## [Use heartbeat for statuspage](https://discuss.elastic.co/t/use-heartbeat-for-statuspage/274911)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 1\ **Last updated:** [August 10, 2021, 8:46pm UTC](https://discuss.elastic.co/t/use-heartbeat-for-statuspage/274911 "2021-08-10T20:46:49Z")
Hearbeat and the corresponding uptime dashboard seem perfect to display an infrastructure statuspage as statuspage.io or betteruptime.com do it. Unfortunately, all statuspage products that I have found until now, do not … --- ## [How does a node behave with the failure of a data disk?](https://discuss.elastic.co/t/how-does-a-node-behave-with-the-failure-of-a-data-disk/25242)
**Author:** [@clark](https://discuss.elastic.co/u/clark)\ **Replies:** 4\ **Last updated:** [July 10, 2015, 1:29am UTC](https://discuss.elastic.co/t/how-does-a-node-behave-with-the-failure-of-a-data-disk/25242 "2015-07-10T01:29:12Z")
Does the node go offline? or Are only the shards in that path.data effected? or Something completely different? Thanks. --- ## [Getting Json from a CSV](https://discuss.elastic.co/t/getting-json-from-a-csv/27800)
**Author:** [@rnigam](https://discuss.elastic.co/u/rnigam)\ **Replies:** 4\ **Last updated:** [August 21, 2015, 10:48am UTC](https://discuss.elastic.co/t/getting-json-from-a-csv/27800 "2015-08-21T10:48:43Z")
Hi, I have a usecase where I have CSV files with a few columns with JSON values. How can I take the get the JSON column and store it in elasticsearch? Thanks a lot! Much appreciate everyone's help. Regards, Raja… --- ## [Can we hide \_source field on Kibana landing page?](https://discuss.elastic.co/t/can-we-hide--source-field-on-kibana-landing-page/48805)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 6\ **Last updated:** [April 29, 2016, 4:15pm UTC](https://discuss.elastic.co/t/can-we-hide--source-field-on-kibana-landing-page/48805 "2016-04-29T16:15:33Z")
Hello, Is there any way so that we don't see \_Source on Kibana discover page and instead we see message field? --- ## [ES instance restart causing shard initialization](https://discuss.elastic.co/t/es-instance-restart-causing-shard-initialization/43721)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 6\ **Last updated:** [March 11, 2016, 10:41pm UTC](https://discuss.elastic.co/t/es-instance-restart-causing-shard-initialization/43721 "2016-03-11T22:41:50Z")
Hello, I am running ES 2.1.2, Logstash 2.2. My cluster is 1 query node, 3 master node, 10 data nodes. I have 16GB allocated to ES. They are all dedicated nodes. My shard allocation is 5, with 1 replica. Data per index … --- ## [Where can I find the "Index Pattern" in the console command?](https://discuss.elastic.co/t/where-can-i-find-the-index-pattern-in-the-console-command/199724)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:44pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-index-pattern-in-the-console-command/199724 "2019-09-17T14:44:51Z")
Hi Where can I find the "Path" in the console to the index patterns? By path I mean something like this: /usr/share/kibana/ By index pattern I mean: humhub-2019.0\* Thank you --- ## [Upgrading from 1.4.x alters terms aggeration](https://discuss.elastic.co/t/upgrading-from-1-4-x-alters-terms-aggeration/24697)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 8\ **Last updated:** [July 1, 2015, 7:11pm UTC](https://discuss.elastic.co/t/upgrading-from-1-4-x-alters-terms-aggeration/24697 "2015-07-01T19:11:57Z")
Upgrading from 1.4.5 to 1.5.x (or 1.6.0) breaks terms aggregation. I tried to make a test-case, but could reproduce the issue with simple data. Anyway, we've got tweets indexed from Twitter streaming API. The mapping i… --- ## [Java API client 8.x with Elasticsearch 7.x](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000)
**Author:** [@YNikolay](https://discuss.elastic.co/u/YNikolay)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:00am UTC](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000 "2022-11-03T09:00:10Z")
Hello, Can the Java API client 8.x be used with Elasticsearch server 7.x? --- ## [Kibana Aggregation renaming term values](https://discuss.elastic.co/t/kibana-aggregation-renaming-term-values/136447)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 4\ **Last updated:** [June 19, 2018, 2:47pm UTC](https://discuss.elastic.co/t/kibana-aggregation-renaming-term-values/136447 "2018-06-19T14:47:31Z")
Hello, I have an aggregation : Grouping SUM(Ammount) By Value and Type \[kibana\_1\] I want to rename Value and use a friendly description \[kibana\_2\] How i can do this using for example a script as a json input, I don'… --- ## [Nested query no longer working in ES 6.0](https://discuss.elastic.co/t/nested-query-no-longer-working-in-es-6-0/109413)
**Author:** [@creaticious](https://discuss.elastic.co/u/creaticious)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 7:21am UTC](https://discuss.elastic.co/t/nested-query-no-longer-working-in-es-6-0/109413 "2017-11-29T07:21:10Z")
Hey guys, we upgraded our system running ES5.4 to ES6.0. We used some nested querys for months that are no longer working after the upgrade...they fail with "...\[nested\] nested object under path \[dates\] is not of neste… --- ## [Can not be imported as a dangling index, as index with same name already exists in cluster metadata](https://discuss.elastic.co/t/can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/71587)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 8:33pm UTC](https://discuss.elastic.co/t/can-not-be-imported-as-a-dangling-index-as-index-with-same-name-already-exists-in-cluster-metadata/71587 "2017-01-17T20:33:50Z")
I found these errors in my elasticsearch.log: can not be imported as a dangling index, as index with same name already exists in cluster metadata --- ## [\[Announcement\] Elastic Cloud now available via the AWS market place](https://discuss.elastic.co/t/announcement-elastic-cloud-now-available-via-the-aws-market-place/80924)
**Author:** [@uricohen](https://discuss.elastic.co/u/uricohen)\ **Replies:** 0\ **Last updated:** [April 2, 2017, 2:45pm UTC](https://discuss.elastic.co/t/announcement-elastic-cloud-now-available-via-the-aws-market-place/80924 "2017-04-02T14:45:31Z")
Hi all Last November, AWS announced a new marketplace service, called SaaS subscriptions. It enables users to discover and subscribe to a range of SaaS and API products using their AWS account, right from the AWS cons… --- ## [Mapping conflict 4 fields are defined as several types ----](https://discuss.elastic.co/t/mapping-conflict-4-fields-are-defined-as-several-types/323529)
**Author:** [@Swathi12](https://discuss.elastic.co/u/Swathi12)\ **Replies:** 6\ **Last updated:** [January 25, 2023, 4:06pm UTC](https://discuss.elastic.co/t/mapping-conflict-4-fields-are-defined-as-several-types/323529 "2023-01-25T16:06:13Z")
Hello i found this error in Kibana -\> Stack Management Mapping conflict 4 fields are defined as several types (string, integer, etc) across the indices that match this pattern. You may still be able to use these confl… --- ## [Can't figure out source of config error in new filebeat module](https://discuss.elastic.co/t/cant-figure-out-source-of-config-error-in-new-filebeat-module/141102)
**Author:** [@per.fagrell](https://discuss.elastic.co/u/per.fagrell)\ **Replies:** 6\ **Last updated:** [July 24, 2018, 8:32pm UTC](https://discuss.elastic.co/t/cant-figure-out-source-of-config-error-in-new-filebeat-module/141102 "2018-07-24T20:32:20Z")
I've just walked through the documentation on creating a new filebeat module, tested my parser with the simulation API and then copied the files over to a docker container and fired it up. However, when it loads the modu… --- ## [Kibana 5 Visualisations broken after Upgrade to 6](https://discuss.elastic.co/t/kibana-5-visualisations-broken-after-upgrade-to-6/120881)
**Author:** [@af\_andi](https://discuss.elastic.co/u/af_andi)\ **Replies:** 3\ **Last updated:** [February 22, 2018, 6:02pm UTC](https://discuss.elastic.co/t/kibana-5-visualisations-broken-after-upgrade-to-6/120881 "2018-02-22T18:02:18Z")
Hi Guys, i upgraded last week from 5.6 to 6.2 but now almost all of my old visualisations are broken. If i'll click on a individual vis, i'll be redirected to Management-\>Saved Object. There i get the error: There is … --- ## [Testers wanted: \*beat integration with Apache NiFi](https://discuss.elastic.co/t/testers-wanted-beat-integration-with-apache-nifi/73671)
**Author:** [@trixpan](https://discuss.elastic.co/u/trixpan)\ **Replies:** 3\ **Last updated:** [February 3, 2017, 4:07pm UTC](https://discuss.elastic.co/t/testers-wanted-beat-integration-with-apache-nifi/73671 "2017-02-03T16:07:00Z")
Hi there, For those using beats but also using Hadoop or stack I have baked an experimental listener that allows Apache NiFi (which happens to be the base of Hortonworks Dataflow) to accept connections from libbeats ag… --- ## [Logstash Issue: Glob did not work, collector name {:name=\>"ConcurrentMarkSweep"}](https://discuss.elastic.co/t/logstash-issue-glob-did-not-work-collector-name-name-concurrentmarksweep/133964)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 5\ **Last updated:** [May 31, 2018, 6:22am UTC](https://discuss.elastic.co/t/logstash-issue-glob-did-not-work-collector-name-name-concurrentmarksweep/133964 "2018-05-31T06:22:59Z")
Hello, I'm parsing sql logs with logstash version 6.2.3. Windows 10. this is my logstash.conf file. I've used it many times but unfortunately something happend and it stopped working input { file{ path =\> "C:\\Users… --- ## [运行./filebeat -c /etc/filebeat/filebeat.yml --setup -e 提示错误](https://discuss.elastic.co/t/filebeat-c-etc-filebeat-filebeat-yml-setup-e/133591)
**Author:** [@jayshi1985](https://discuss.elastic.co/u/jayshi1985)\ **Replies:** 1\ **Last updated:** [May 28, 2018, 11:12pm UTC](https://discuss.elastic.co/t/filebeat-c-etc-filebeat-filebeat-yml-setup-e/133591 "2018-05-28T23:12:01Z")
如下，运行./filebeat -c /etc/filebeat/filebeat.yml --setup -e，没有找到No directory /usr/share/filebeat/bin/kibana/6，但实际上现在目录路径是/usr/share/filebeat/kibana，这个该如何更改，是否可以直接将kibana目录移到bin下？ root@elk:/usr/share/filebeat/bin# ./filebea… --- ## [The field you gave in the aggregation query existed as two different types in two different indices](https://discuss.elastic.co/t/the-field-you-gave-in-the-aggregation-query-existed-as-two-different-types-in-two-different-indices/193264)
**Author:** [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Replies:** 2\ **Last updated:** [August 8, 2019, 6:57am UTC](https://discuss.elastic.co/t/the-field-you-gave-in-the-aggregation-query-existed-as-two-different-types-in-two-different-indices/193264 "2019-08-08T06:57:09Z")
Hi, i have running Netflow module in ELK 7.2 and i am getting this error in Kibana when want to see data in Dashboard: \[esaggs\] \> Request to Elasticsearch failed: {"error":{"root\_cause":,"type":"search\_phase\_executio… --- ## [Indexing child docs using bulk api](https://discuss.elastic.co/t/indexing-child-docs-using-bulk-api/10061)
**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\ **Replies:** 2\ **Last updated:** [December 13, 2012, 11:08pm UTC](https://discuss.elastic.co/t/indexing-child-docs-using-bulk-api/10061 "2012-12-13T23:08:50Z")
Hi there, I need to reindex my data, and I am using the parent child relations in my index, and now i need to use the bulk api for reindexing the data. I studied the bulk api http://www.elasticsearch.org/gu… --- ## [Failed to connect to node \[..\], removed from node list](https://discuss.elastic.co/t/failed-to-connect-to-node-removed-from-node-list/6512)
**Author:** [@maik](https://discuss.elastic.co/u/maik)\ **Replies:** 2\ **Last updated:** [February 7, 2012, 6:54am UTC](https://discuss.elastic.co/t/failed-to-connect-to-node-removed-from-node-list/6512 "2012-02-07T06:54:35Z")
Hi, I'm just testing elasticsearch clusters and how to handle node-downtimes in the application. I'm on version 0.18.6, two nodes on the same local machine. Everything works fine tough, searching, filtering etc.… --- ## [Does threshold of 1000 fields per index mean "analyzed fields"?](https://discuss.elastic.co/t/does-threshold-of-1000-fields-per-index-mean-analyzed-fields/95483)
**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\ **Replies:** 7\ **Last updated:** [August 2, 2017, 10:00am UTC](https://discuss.elastic.co/t/does-threshold-of-1000-fields-per-index-mean-analyzed-fields/95483 "2017-08-02T10:00:52Z")
Hi, I have the problem that we regularly run into the threshold of 1000 fields per per index. Can I prevent this from happening by setting just a few fields I really need to analyzed and all others to not\_analyzed? I f… --- ## [Logstash conf file issues (using docker container)](https://discuss.elastic.co/t/logstash-conf-file-issues-using-docker-container/252083)
**Author:** [@saj](https://discuss.elastic.co/u/saj)\ **Replies:** 8\ **Last updated:** [October 15, 2020, 10:36am UTC](https://discuss.elastic.co/t/logstash-conf-file-issues-using-docker-container/252083 "2020-10-15T10:36:07Z")
Hi, I am new to elk stuff, I am running 3 separate docker containers (i.e. elasticsearch, kibana, and logstash). I need to specify my logstash.conf but its not working out using following docker logstash command ( I am… --- ## [Client connection impossible](https://discuss.elastic.co/t/client-connection-impossible/150707)
**Author:** [@mrxrom](https://discuss.elastic.co/u/mrxrom)\ **Replies:** 3\ **Last updated:** [October 2, 2018, 7:40pm UTC](https://discuss.elastic.co/t/client-connection-impossible/150707 "2018-10-02T19:40:04Z")
Hello guys, i have build a java application to manage 3 databases (MySQL, mongoDb and ElasticSearch). evything was designed with databases in a local network and it worked very well. Now we want to put the app on work … --- ## [Disk capacity for elasticsearch](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 4:25pm UTC](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816 "2021-11-22T16:25:37Z")
I want to ship my application log files into Elasticsearch and trying to come-up with a capacity plan for Elasticsearch. Let's say if I have 1 GB log file, how much disk space I need for Elasticsearch to store log conte… --- ## [ILM not deleting indices in data\_stream](https://discuss.elastic.co/t/ilm-not-deleting-indices-in-data-stream/257811)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 5:50pm UTC](https://discuss.elastic.co/t/ilm-not-deleting-indices-in-data-stream/257811 "2020-12-07T17:50:44Z")
Hello! So I've been checking out new features of ELK stack - created a template for data stream and connected a basic ILM policy to it. ILM policy is basically: { "policy": { "phases": { "hot": { … --- ## [Network Topology using Graph](https://discuss.elastic.co/t/network-topology-using-graph/220965)
**Author:** [@l4m4l](https://discuss.elastic.co/u/l4m4l)\ **Replies:** 4\ **Last updated:** [March 1, 2020, 9:40pm UTC](https://discuss.elastic.co/t/network-topology-using-graph/220965 "2020-03-01T21:40:23Z")
Hello all, I have indices that contain .pcap data (imported using tshark and elasticsearch BULK API). I would like to visualise this packet capture as a network topology using graph. I am envisaging that this would go … [Previous page](https://discuss.elastic.co/top.md?page=632&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=634&per_page=50&period=all)