# Top **URL:** https://discuss.elastic.co/top.md?page=638&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 639 --- ## [Logstash 5.6.3 not working with Java 9](https://discuss.elastic.co/t/logstash-5-6-3-not-working-with-java-9/105830)
**Author:** [@Seyf\_Souissi](https://discuss.elastic.co/u/Seyf_Souissi)\ **Replies:** 1\ **Last updated:** [October 31, 2017, 3:13am UTC](https://discuss.elastic.co/t/logstash-5-6-3-not-working-with-java-9/105830 "2017-10-31T03:13:01Z")
Hi, I'm new to elastic and was trying to get Logstash working on Ubuntu. The JDK installed successfully, elastic and KIbana are working correctly. java -version java version "9.0.1" Java(TM) SE Runtime Environment (bu… --- ## [Kibana timeout](https://discuss.elastic.co/t/kibana-timeout/43712)
**Author:** [@L8apex32](https://discuss.elastic.co/u/L8apex32)\ **Replies:** 1\ **Last updated:** [March 8, 2016, 12:52am UTC](https://discuss.elastic.co/t/kibana-timeout/43712 "2016-03-08T00:52:08Z")
We are getting the message: {"type":"log","@timestamp":"2016-03-07T22:28:17+00:00","tags":\["status","plugin:elasticsearch","error"\],"pid":25493,"name":"plugin:elasticsearch","state":"red","message":"Status changed from… --- ## [How to change time zone from Zulu](https://discuss.elastic.co/t/how-to-change-time-zone-from-zulu/23912)
**Author:** [@elk\_2015](https://discuss.elastic.co/u/elk_2015)\ **Replies:** 4\ **Last updated:** [June 22, 2015, 1:43pm UTC](https://discuss.elastic.co/t/how-to-change-time-zone-from-zulu/23912 "2015-06-22T13:43:48Z")
hi, Below is the source field value in kibana. \_source: “Tue Jun 16 2015 07:00:57 \[0x80e00173\]\[network\]\[error\] : tid(2559): TCP connection attempt refused from 10.255.215.xxx to 10.255.215.xxx port xxxx” should have @tim… --- ## [Regexp pattern not working](https://discuss.elastic.co/t/regexp-pattern-not-working/41812)
**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\ **Replies:** 6\ **Last updated:** [February 16, 2016, 9:53am UTC](https://discuss.elastic.co/t/regexp-pattern-not-working/41812 "2016-02-16T09:53:16Z")
Hi, I'm using this configuration to multiline all logs till a timestamp or an ip is found. I started with timestamp, but it ignores the pattern. filebeat: # List of prospectors to fetch data. prospectors: - pat… --- ## [Count number of times a field has a particular value](https://discuss.elastic.co/t/count-number-of-times-a-field-has-a-particular-value/179854)
**Author:** [@Corey\_F](https://discuss.elastic.co/u/Corey_F)\ **Replies:** 3\ **Last updated:** [May 7, 2019, 7:43pm UTC](https://discuss.elastic.co/t/count-number-of-times-a-field-has-a-particular-value/179854 "2019-05-07T19:43:06Z")
Hi there, I have a query like this: "query": { "multi\_match" : { "fields" : \["form.\*"\], "lenient": true, "query" : "Ineligible" } } This is essentially what I want,… --- ## [Unclear usage of es.read.field.as.array.exclude](https://discuss.elastic.co/t/unclear-usage-of-es-read-field-as-array-exclude/159959)
**Author:** [@markoutso](https://discuss.elastic.co/u/markoutso)\ **Replies:** 2\ **Last updated:** [December 14, 2018, 4:22pm UTC](https://discuss.elastic.co/t/unclear-usage-of-es-read-field-as-array-exclude/159959 "2018-12-14T16:22:42Z")
Hello, I am trying to use the setting es.read.field.as.array.exclude From the name of it, I understand that it must produce the opposite result of es.read.field.as.array.include. es.read.field.as.array.include transfor… --- ## [VMware Syslog Grok Patterns](https://discuss.elastic.co/t/vmware-syslog-grok-patterns/157868)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 2\ **Last updated:** [November 23, 2018, 5:35pm UTC](https://discuss.elastic.co/t/vmware-syslog-grok-patterns/157868 "2018-11-23T17:35:28Z")
Hi all, I want to collect VMware Syslogs into my ELK. Like expected, the VMware syslog format is not RFC conform and so I got an "\_grokparsefailure\_sysloginput", when using input syslog. So I will change to input udp, … --- ## [Problem setting text field as "not\_analyzed"](https://discuss.elastic.co/t/problem-setting-text-field-as-not-analyzed/90763)
**Author:** [@Matt\_Zalen](https://discuss.elastic.co/u/Matt_Zalen)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 5:12am UTC](https://discuss.elastic.co/t/problem-setting-text-field-as-not-analyzed/90763 "2017-06-26T05:12:07Z")
Hi all, I'm using the latest NEST c# driver with the latest Elasticsearch (5.x), and I'm having the hardest time setting a text field of one of my documents to "not\_analyzed" using fluent mapping. Below is my latest at… --- ## [Filebeat is losing events due to file rotate](https://discuss.elastic.co/t/filebeat-is-losing-events-due-to-file-rotate/52436)
**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 7:54am UTC](https://discuss.elastic.co/t/filebeat-is-losing-events-due-to-file-rotate/52436 "2016-06-15T07:54:50Z")
Hi! I'm opening this topic before opening an issue on github. I hope not made any mistakes, cause it took me quite a long to test it and to report it in here. Thanks in advance for your kind help. Regards Scenario … --- ## [Caused by: java.lang.NoSuchMethodError: org.elasticsearch.transport.client.PreBuiltTransportClient.addPlugins(Ljava/util/Collection;Ljava/util/Collection;)Ljava/util/Collection](https://discuss.elastic.co/t/caused-by-java-lang-nosuchmethoderror-org-elasticsearch-transport-client-prebuilttransportclient-addplugins-ljava-util-collection-ljava-util-collection-ljava-util-collection/91800)
**Author:** [@Chris\_Dimitriou](https://discuss.elastic.co/u/Chris_Dimitriou)\ **Replies:** 1\ **Last updated:** [July 5, 2017, 2:01pm UTC](https://discuss.elastic.co/t/caused-by-java-lang-nosuchmethoderror-org-elasticsearch-transport-client-prebuilttransportclient-addplugins-ljava-util-collection-ljava-util-collection-ljava-util-collection/91800 "2017-07-05T14:01:37Z")
When my app starts i get this exception Caused by: java.lang.NoSuchMethodError: org.elasticsearch.transport.client.PreBuiltTransportClient.addPlugins(Ljava/util/Collection;Ljava/util/Collection;) Ljava/util/Collection… --- ## [Saved object is missing Could not locate that visualization](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/197231)
**Author:** [@akatla](https://discuss.elastic.co/u/akatla)\ **Replies:** 3\ **Last updated:** [August 29, 2019, 12:42pm UTC](https://discuss.elastic.co/t/saved-object-is-missing-could-not-locate-that-visualization/197231 "2019-08-29T12:42:09Z")
Saved object is missing Could not locate that visualization Added sample data but I get this error in Kibana 7.2.0 Elasticsearch is load balanced with 2 nodes (both nodes are master + data ) when I run :9200 \_cat/ind… --- ## [I am making custom esClient in kibana to use API of elasticsearch . i dont wan't to use a kibana's ecClient](https://discuss.elastic.co/t/i-am-making-custom-esclient-in-kibana-to-use-api-of-elasticsearch-i-dont-want-to-use-a-kibanas-ecclient/126381)
**Author:** [@ashutoshningot](https://discuss.elastic.co/u/ashutoshningot)\ **Replies:** 1\ **Last updated:** [April 27, 2018, 1:46pm UTC](https://discuss.elastic.co/t/i-am-making-custom-esclient-in-kibana-to-use-api-of-elasticsearch-i-dont-want-to-use-a-kibanas-ecclient/126381 "2018-04-27T13:46:15Z")
pre-flight request is giving: 200 CORS ERROR: Reson "kbn-version and content-type missing". HOW TO PROCCED? --- ## [Setting up Filebeats with the IIS module to parse IIS logs](https://discuss.elastic.co/t/setting-up-filebeats-with-the-iis-module-to-parse-iis-logs/248978)
**Author:** [@pheathers](https://discuss.elastic.co/u/pheathers)\ **Replies:** 1\ **Last updated:** [September 18, 2020, 10:05pm UTC](https://discuss.elastic.co/t/setting-up-filebeats-with-the-iis-module-to-parse-iis-logs/248978 "2020-09-18T22:05:31Z")
Hi. I'm trying to setup the Filebeats IIS module (link) so I can display IIS logs (version 10) in the canned Kibana Dashboards, however I get errors in Logstash when parsing the messages preventing them from display cor… --- ## [How do I apply Date Range filter?](https://discuss.elastic.co/t/how-do-i-apply-date-range-filter/62985)
**Author:** [@milincjoshi](https://discuss.elastic.co/u/milincjoshi)\ **Replies:** 1\ **Last updated:** [October 13, 2016, 10:30pm UTC](https://discuss.elastic.co/t/how-do-i-apply-date-range-filter/62985 "2016-10-13T22:30:44Z")
Hi I am using Kibana to filter out the date between specific date range. I have the data in following format. { "\_index": "xyz", "\_type": "logs", "\_score": 1, "\_source": { … --- ## [Customize the legend of visualization](https://discuss.elastic.co/t/customize-the-legend-of-visualization/144863)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 4\ **Last updated:** [August 22, 2018, 3:54pm UTC](https://discuss.elastic.co/t/customize-the-legend-of-visualization/144863 "2018-08-22T15:54:13Z")
Is it possible to add field name (or to customize) the legend of a visualization? I am using Kibana 6.3 --- ## [High approximation error rate of cardinality aggregation for low-cardinality sets?](https://discuss.elastic.co/t/high-approximation-error-rate-of-cardinality-aggregation-for-low-cardinality-sets/49574)
**Author:** [@Fran\_Fabrizio](https://discuss.elastic.co/u/Fran_Fabrizio)\ **Replies:** 4\ **Last updated:** [May 10, 2016, 10:31pm UTC](https://discuss.elastic.co/t/high-approximation-error-rate-of-cardinality-aggregation-for-low-cardinality-sets/49574 "2016-05-10T22:31:36Z")
I've been learning more about how the cardinality aggregation approximates unique counts since this forum helped me pinpoint that as the cause of some errors I was seeing last week. The docs state "Please also note tha… --- ## [Custom "Order By" Aggregation for Kibana Bar Chart](https://discuss.elastic.co/t/custom-order-by-aggregation-for-kibana-bar-chart/218642)
**Author:** [@Jade](https://discuss.elastic.co/u/Jade)\ **Replies:** 3\ **Last updated:** [February 14, 2020, 8:18am UTC](https://discuss.elastic.co/t/custom-order-by-aggregation-for-kibana-bar-chart/218642 "2020-02-14T08:18:48Z")
I have a bar chart and have used split series into 2 time buckets - the past 3 months (now/M-3M to now/M), and 3 months prior to that (now/M-6M to now/M-3M). I would simply like to order the chart by the values of only … --- ## [Elasticsearch - major design flaw with node ID](https://discuss.elastic.co/t/elasticsearch-major-design-flaw-with-node-id/297665)
**Author:** [@Bieniek](https://discuss.elastic.co/u/Bieniek)\ **Replies:** 6\ **Last updated:** [February 20, 2022, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-major-design-flaw-with-node-id/297665 "2022-02-20T09:10:40Z")
Elasticsearch seems to have a major design flaw when it comes to being deployed in a docker swarm (clustered). Each Elasticsearch node is identified by a randomly generated node ID. This node ID is stored in the databa… --- ## [Failed to parse multiple date fields](https://discuss.elastic.co/t/failed-to-parse-multiple-date-fields/63383)
**Author:** [@setlem](https://discuss.elastic.co/u/setlem)\ **Replies:** 6\ **Last updated:** [October 20, 2016, 6:21am UTC](https://discuss.elastic.co/t/failed-to-parse-multiple-date-fields/63383 "2016-10-20T06:21:59Z")
Hi, my config file is date is parsing only for LAST\_MODIFIED\_DATE. But not for CREATION\_DATE and SUBMITTED\_DATE Suggest me the way to fix this. Thanks!!!!! --- ## [How to change color for bar chart](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809)
**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\ **Replies:** 2\ **Last updated:** [August 10, 2021, 2:00am UTC](https://discuss.elastic.co/t/how-to-change-color-for-bar-chart/280809 "2021-08-10T02:00:48Z")
Hi team, I want to change the color for each column a color code As image : I used kibana ver 7.13 Thanks --- ## [Filebeat not reading log files from given paths](https://discuss.elastic.co/t/filebeat-not-reading-log-files-from-given-paths/163473)
**Author:** [@yachitha](https://discuss.elastic.co/u/yachitha)\ **Replies:** 2\ **Last updated:** [January 10, 2019, 4:51am UTC](https://discuss.elastic.co/t/filebeat-not-reading-log-files-from-given-paths/163473 "2019-01-10T04:51:59Z")
I have created a docker image with ELK stack by using docker-compose. I have used filebeat to read log files, filebeat gives output to logstash and logstash gives outputs to elasticsearch and then finally elasticsearch g… --- ## [Org.elasticsearch.common.breaker.CircuitBreakingException](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception/42565)
**Author:** [@Antoine\_Brun](https://discuss.elastic.co/u/Antoine_Brun)\ **Replies:** 2\ **Last updated:** [February 28, 2016, 5:42pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception/42565 "2016-02-28T17:42:52Z")
Hello, we are running a ES cluster (v1.7) in a production environment. We are indexing network device syslogs. The syslogs are parsed and indexed and it is possible to search them by date. the mapping for the date pa… --- ## [Logs are not received on the Fleet server](https://discuss.elastic.co/t/logs-are-not-received-on-the-fleet-server/295345)
**Author:** [@b.kaliuzhnyi](https://discuss.elastic.co/u/b.kaliuzhnyi)\ **Replies:** 4\ **Last updated:** [January 26, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logs-are-not-received-on-the-fleet-server/295345 "2022-01-26T15:02:53Z")
The situation is similar to that of the link: https://discuss.elastic.co/t/elastic-agent-error/282706 I have installed two Elastic Agents, one of them as a Fleet server. Their status is Healthy. The fleet server policy… --- ## [Process Monitoring using Topbeat](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746)
**Author:** [@sam281](https://discuss.elastic.co/u/sam281)\ **Replies:** 5\ **Last updated:** [March 16, 2017, 3:43pm UTC](https://discuss.elastic.co/t/process-monitoring-using-topbeat/77746 "2017-03-16T15:43:54Z")
Hi, Can somebody throw some light on how to do process monitoring using topbeat and show it on dashboard highlighting the processes which are not running. Thank you! Sam --- ## [Topbeat does not start for Windows server 2008 R2 Sp1](https://discuss.elastic.co/t/topbeat-does-not-start-for-windows-server-2008-r2-sp1/37301)
**Author:** [@Rishi\_Singhal](https://discuss.elastic.co/u/Rishi_Singhal)\ **Replies:** 5\ **Last updated:** [April 16, 2016, 4:34pm UTC](https://discuss.elastic.co/t/topbeat-does-not-start-for-windows-server-2008-r2-sp1/37301 "2016-04-16T16:34:11Z")
I am trying to start Topbeat (topbeat-1.0.0-windows) on Windows server 2008 R2 Sp1 and I get this error PS C:\\Program Files\\Topbeat\> Start-Service topbeat Start-Service : Service 'topbeat (topbeat)' cannot be started d… --- ## [Why date event in Elasticsearch logs are not in UTC](https://discuss.elastic.co/t/why-date-event-in-elasticsearch-logs-are-not-in-utc/171769)
**Author:** [@Pascal72](https://discuss.elastic.co/u/Pascal72)\ **Replies:** 7\ **Last updated:** [March 14, 2019, 11:01pm UTC](https://discuss.elastic.co/t/why-date-event-in-elasticsearch-logs-are-not-in-utc/171769 "2019-03-14T23:01:41Z")
Hello, I recently upgraded my installation to Elasticsearch 6.1.1 and noticed a slight issue with the indexed data in Kibana. If I choose the 'last 15 min' filter I am not able to see the data. However if I choose 'Tod… --- ## [Aggregation error: Could not find aggregator type in \[aggs\]](https://discuss.elastic.co/t/aggregation-error-could-not-find-aggregator-type-in-aggs/90367)
**Author:** [@xwang1](https://discuss.elastic.co/u/xwang1)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 9:57pm UTC](https://discuss.elastic.co/t/aggregation-error-could-not-find-aggregator-type-in-aggs/90367 "2017-06-21T21:57:45Z")
I am having some trouble with multiple aggregations in elasticsearch. I am trying to first find all documents whose value for "field\_0" is "a\_string" and then aggregate twice on those docs based on the fields "field\_1" a… --- ## [Kibana partial/substring matches are not working](https://discuss.elastic.co/t/kibana-partial-substring-matches-are-not-working/245844)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 1\ **Last updated:** [August 24, 2020, 4:28pm UTC](https://discuss.elastic.co/t/kibana-partial-substring-matches-are-not-working/245844 "2020-08-24T16:28:08Z")
Hi, Setup: Elasticsearch version 7.6.1 field name is log, here is the config in index template: "log": { "type": "text", "fields": { "keyword": { "type": "keyword… --- ## [\[security\_exception\] action \[indices:data/read/search\]](https://discuss.elastic.co/t/security-exception-action-indices-data-read-search/187845)
**Author:** [@Balamurugan\_Sethuram](https://discuss.elastic.co/u/Balamurugan_Sethuram)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 6:01am UTC](https://discuss.elastic.co/t/security-exception-action-indices-data-read-search/187845 "2019-07-01T06:01:37Z")
Hi, I am using elasticsearch 6.8.0. Configured with AD group and getting below error {"message":"action \[indices:data/read/search\] is unauthorized for user \[xxxxxx\]: \[security\_exception\] action \[indices:data/read/sear… --- ## [Parsing Json to Cloudwatch Log Group in Logstash config](https://discuss.elastic.co/t/parsing-json-to-cloudwatch-log-group-in-logstash-config/175275)
**Author:** [@drj](https://discuss.elastic.co/u/drj)\ **Replies:** 6\ **Last updated:** [April 4, 2019, 2:32pm UTC](https://discuss.elastic.co/t/parsing-json-to-cloudwatch-log-group-in-logstash-config/175275 "2019-04-04T14:32:57Z")
I am in the process trying to change my logstash config from grok to json ... Also Is there a way to have all fields injson to become fields over in kibana, rather than the whole json blob being stuck in the message fiel… --- ## [Update mappings without having to delete indexes](https://discuss.elastic.co/t/update-mappings-without-having-to-delete-indexes/241870)
**Author:** [@g30](https://discuss.elastic.co/u/g30)\ **Replies:** 3\ **Last updated:** [July 21, 2020, 11:27pm UTC](https://discuss.elastic.co/t/update-mappings-without-having-to-delete-indexes/241870 "2020-07-21T23:27:22Z")
Hi, We are using elastic search for a file storage api implementation where by files are stored with metadata and the metadata is stored to elastic search. We are having issues at the moment where by when we need to add… --- ## [Kibana起動時にwarningがでます。(windows zip環境)](https://discuss.elastic.co/t/kibana-warning-windows-zip/221828)
**Author:** [@knm](https://discuss.elastic.co/u/knm)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 2:42am UTC](https://discuss.elastic.co/t/kibana-warning-windows-zip/221828 "2020-03-06T02:42:49Z")
kibana7.6.0起動時に下記のようなwarningがでます。 (windows環境) log \[07:55:13.383\] \[warning\]\[config\]\[encryptedSavedObjects\]\[plugins\] Generating a random key for xpack.encryptedSavedObjects.encryptionKey. To be able to decrypt encrypt… --- ## [Sync up changes from mongodb to elasticsearch](https://discuss.elastic.co/t/sync-up-changes-from-mongodb-to-elasticsearch/66194)
**Author:** [@sonpv1](https://discuss.elastic.co/u/sonpv1)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 6:53am UTC](https://discuss.elastic.co/t/sync-up-changes-from-mongodb-to-elasticsearch/66194 "2016-11-17T06:53:51Z")
Hi experts, I'm working on syncing up data from mongodb including changes to ES. Could you please help me to provide me with your idea. Thank you so much! --- ## [Oops! SearchPhaseExecutionException\[Failed to execute phase \[query\], all shards failed\]](https://discuss.elastic.co/t/oops-searchphaseexecutionexception-failed-to-execute-phase-query-all-shards-failed/21565)
**Author:** [@Taylor\_Wood](https://discuss.elastic.co/u/Taylor_Wood)\ **Replies:** 4\ **Last updated:** [March 13, 2015, 5:57pm UTC](https://discuss.elastic.co/t/oops-searchphaseexecutionexception-failed-to-execute-phase-query-all-shards-failed/21565 "2015-03-13T17:57:58Z")
History: I have been testing ELK stack for a few months now off and on. For months now I have had it logging correctly with no major issues. I picked this back up this week and everything was logging perfectly wit… --- ## [Performance considerations Grok/plugins vs Ruby script](https://discuss.elastic.co/t/performance-considerations-grok-plugins-vs-ruby-script/145002)
**Author:** [@mbreest](https://discuss.elastic.co/u/mbreest)\ **Replies:** 0\ **Last updated:** [August 18, 2018, 11:25am UTC](https://discuss.elastic.co/t/performance-considerations-grok-plugins-vs-ruby-script/145002 "2018-08-18T11:25:24Z")
Hi folks, does anyone have experience regarding the performance of grok/plugins vs. Ruby scripts (https://www.elastic.co/guide/en/logstash/current/plugins-filters-ruby.html) and can share some insights on that. I did no… --- ## [Recommendations for syslog ingestion?](https://discuss.elastic.co/t/recommendations-for-syslog-ingestion/223557)
**Author:** [@\_finack](https://discuss.elastic.co/u/_finack)\ **Replies:** 3\ **Last updated:** [March 30, 2020, 1:46pm UTC](https://discuss.elastic.co/t/recommendations-for-syslog-ingestion/223557 "2020-03-30T13:46:22Z")
We have many applications where we would like to ingest their log data into Elastic Stack; however, the log shipping mechanism is syslog (BSD, CEF, or RFC 5424). Our use case is SIEM & threat hunting. Here are options I… --- ## [Failed to push trace data via OTLP exporter: rpc error: code = Unavailable desc = connection closed](https://discuss.elastic.co/t/failed-to-push-trace-data-via-otlp-exporter-rpc-error-code-unavailable-desc-connection-closed/286126)
**Author:** [@aahanchate](https://discuss.elastic.co/u/aahanchate)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 2:52pm UTC](https://discuss.elastic.co/t/failed-to-push-trace-data-via-otlp-exporter-rpc-error-code-unavailable-desc-connection-closed/286126 "2021-10-07T14:52:09Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Kibana 4.1: overlap different time ranges in one visualization?](https://discuss.elastic.co/t/kibana-4-1-overlap-different-time-ranges-in-one-visualization/69250)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 9:00pm UTC](https://discuss.elastic.co/t/kibana-4-1-overlap-different-time-ranges-in-one-visualization/69250 "2016-12-29T21:00:59Z")
Hi all, we are using kibana to visualize processing times, etc. When we run load tests we want to compare the results (graph) easily to our baseline. My current workaround is to render both time ranges with the same… --- ## [Rally - Cannot run benchmark, rally is not setup to build from sources](https://discuss.elastic.co/t/rally-cannot-run-benchmark-rally-is-not-setup-to-build-from-sources/56147)
**Author:** [@elastico123](https://discuss.elastic.co/u/elastico123)\ **Replies:** 4\ **Last updated:** [July 22, 2016, 8:56am UTC](https://discuss.elastic.co/t/rally-cannot-run-benchmark-rally-is-not-setup-to-build-from-sources/56147 "2016-07-22T08:56:33Z")
Hello, I have following problem after executing esrally. The log output: 2016-07-22 05:57:00,637 root ERROR Rally is not configured to build from sources Traceback (most recent call last): File "/usr/lib/python3.4/si… --- ## [Elasticsearch high cpu usage while searching](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-while-searching/50832)
**Author:** [@vikas.saini](https://discuss.elastic.co/u/vikas.saini)\ **Replies:** 4\ **Last updated:** [May 25, 2016, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage-while-searching/50832 "2016-05-25T08:53:26Z")
This is my output of hot threads ! cpu usage is 100 % please suggest something ::: \[Mad Dog Rassitano\]\[2dJw-2L7QCaMF2aFWwvVHQ\]\[bladem610\]\[inet\[/127.0.0.1:9300\]\] Hot threads at 2016-05-24T09:42:51.992Z, interval=500… --- ## [Exiting : data path locked by another beat](https://discuss.elastic.co/t/exiting-data-path-locked-by-another-beat/223344)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 8:52am UTC](https://discuss.elastic.co/t/exiting-data-path-locked-by-another-beat/223344 "2020-03-13T08:52:26Z")
Hi , I have upgraded the beats to 7.6.1 and i am experiencing an issue when starting the beat. It keeps failing with a message that the data path is already locked by another beat, there is only one instance of the be… --- ## [Geoip distance query](https://discuss.elastic.co/t/geoip-distance-query/114983)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 6\ **Last updated:** [January 11, 2018, 3:07pm UTC](https://discuss.elastic.co/t/geoip-distance-query/114983 "2018-01-11T15:07:34Z")
Hello all, Ive been taking a look at the geoip distance query and it seems to be working fine. However, I'm looking for help to only return the results that are not within my distance query. So in this case, any results… --- ## [I would like to concatenate date and time fields with logstash](https://discuss.elastic.co/t/i-would-like-to-concatenate-date-and-time-fields-with-logstash/275992)
**Author:** [@sudo-ranjith](https://discuss.elastic.co/u/sudo-ranjith)\ **Replies:** 2\ **Last updated:** [June 15, 2021, 2:05pm UTC](https://discuss.elastic.co/t/i-would-like-to-concatenate-date-and-time-fields-with-logstash/275992 "2021-06-15T14:05:52Z")
Hi There, I have two fields date and time("10/26/20","09:30:53"). My Grok patterns are "%{DATA:date}","%{DATA:time}" I would like to concatenate these two fields as datetime, Could you please help me on the same. --- ## [.har files into ELK stack](https://discuss.elastic.co/t/har-files-into-elk-stack/32296)
**Author:** [@philippconcur](https://discuss.elastic.co/u/philippconcur)\ **Replies:** 1\ **Last updated:** [November 25, 2015, 8:19am UTC](https://discuss.elastic.co/t/har-files-into-elk-stack/32296 "2015-11-25T08:19:22Z")
Has anyone had any success trending/visualizing .HAR (httparchive) files in Kibana? Har files seem to be in json format, hoping there is a shortcut there but just guessing. I am pretty new to to the ELK stack. Curious … --- ## [Remove time chart from Discover in Kibana](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860)
**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 6:36am UTC](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860 "2020-09-17T06:36:17Z")
We're using Kibana 7.2.0 and we'd very much like to remove the bar chart at the top of the Discover section (see below) but we couldn't find the setting for it. Thanks! --- ## [Filebeat didn't drop some of the fields](https://discuss.elastic.co/t/filebeat-didnt-drop-some-of-the-fields/86545)
**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\ **Replies:** 1\ **Last updated:** [May 22, 2017, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-didnt-drop-some-of-the-fields/86545 "2017-05-22T13:17:55Z")
I am trying to drop some not needed fields with Filebeat: filebeat.yml: filebeat.prospectors: - input\_type: log paths: - /var/log/app1.log fields: app\_name: app1 fields\_under\_root: true processors: - d… --- ## [Is it possible for document mappings to be inherited](https://discuss.elastic.co/t/is-it-possible-for-document-mappings-to-be-inherited/17643)
**Author:** [@Ben\_George](https://discuss.elastic.co/u/Ben_George)\ **Replies:** 3\ **Last updated:** [May 22, 2014, 5:45pm UTC](https://discuss.elastic.co/t/is-it-possible-for-document-mappings-to-be-inherited/17643 "2014-05-22T17:45:37Z")
I have a document type with some complicated field mappings, and another with same mappings plus one extra field. So question: is there a way to inherit field mappings ? What options do I have so I don't copy pas… --- ## [How to visualise cpu usage out of 100%](https://discuss.elastic.co/t/how-to-visualise-cpu-usage-out-of-100/141179)
**Author:** [@mitom](https://discuss.elastic.co/u/mitom)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 10:52am UTC](https://discuss.elastic.co/t/how-to-visualise-cpu-usage-out-of-100/141179 "2018-07-25T10:52:44Z")
Hi, While trialing the elastic stack I noticed that some of my servers report above 100% cpu usage. After looking around I concluded this is because the scale for some reason is not 0-100%, but 0-cpu\_cores\*100% (which h… --- ## [Cacheing iFramed Kibana static content](https://discuss.elastic.co/t/cacheing-iframed-kibana-static-content/44204)
**Author:** [@net](https://discuss.elastic.co/u/net)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 7:19pm UTC](https://discuss.elastic.co/t/cacheing-iframed-kibana-static-content/44204 "2016-03-21T19:19:45Z")
Hi, I'm looking for a way to speed up loading the kibana dashboard. On my site I let the users click a checkbox which will change the dashboard url and refresh the embedded dashboard. I'm looking through files that ar… --- ## [Get first N values, then aggregate](https://discuss.elastic.co/t/get-first-n-values-then-aggregate/151950)
**Author:** [@moisesjbc](https://discuss.elastic.co/u/moisesjbc)\ **Replies:** 8\ **Last updated:** [October 15, 2018, 1:25pm UTC](https://discuss.elastic.co/t/get-first-n-values-then-aggregate/151950 "2018-10-15T13:25:37Z")
Good night I have test documents like the following: PUT /megacorp/employees/1 { "text": "text1", "number": 1 } PUT /megacorp/employees/2 { "text": "text1", "number": 2 } PUT /megacorp/employees/3 { "text":… [Previous page](https://discuss.elastic.co/top.md?page=637&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=639&per_page=50&period=all)