# Top **URL:** https://discuss.elastic.co/top.md?page=654&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 655 --- ## [Kibana with HTTPS](https://discuss.elastic.co/t/kibana-with-https/123746)
**Author:** [@Amandine](https://discuss.elastic.co/u/Amandine)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 10:40am UTC](https://discuss.elastic.co/t/kibana-with-https/123746 "2018-03-19T10:40:56Z")
Hello, I wish that Kibana is accessible in HTTPS. I created a Let's encrypt certificate. I modified the server certificate part and the certification authority part in kibana.yml. I also put https://example.com on the pr… --- ## [Multiline configuration](https://discuss.elastic.co/t/multiline-configuration/57450)
**Author:** [@NekoNova](https://discuss.elastic.co/u/NekoNova)\ **Replies:** 6\ **Last updated:** [August 10, 2016, 11:57am UTC](https://discuss.elastic.co/t/multiline-configuration/57450 "2016-08-10T11:57:30Z")
Hello, I'm currently trying to get our Filebeat to recognize proper rails logging messages, and I'm using the following configuration for the multiline part: multiline: pattern: '^\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}T\[0-9\]… --- ## [Changing the refresh interval on running nodes](https://discuss.elastic.co/t/changing-the-refresh-interval-on-running-nodes/4544)
**Author:** [@Manish\_Pandit](https://discuss.elastic.co/u/Manish_Pandit)\ **Replies:** 6\ **Last updated:** [July 4, 2013, 6:56am UTC](https://discuss.elastic.co/t/changing-the-refresh-interval-on-running-nodes/4544 "2013-07-04T06:56:20Z")
I am seeing the refresh interval of 5 seconds instead of 1 second that I thought was the default. However, I want to change it to 1 second - I was wondering if there is a way to do it without bringing any of the nodes… --- ## [Unable to assign shards - "structure needs cleaning"](https://discuss.elastic.co/t/unable-to-assign-shards-structure-needs-cleaning/118499)
**Author:** [@aleej](https://discuss.elastic.co/u/aleej)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 8:38pm UTC](https://discuss.elastic.co/t/unable-to-assign-shards-structure-needs-cleaning/118499 "2018-02-05T20:38:58Z")
Hi All! Wondering if anyone has suggestions. We've got a cluster that current keeps running into problems with shards being unassigned. Manually allocating the shard fails with the error "structure needs cleaning" (see… --- ## [JLH score calculation](https://discuss.elastic.co/t/jlh-score-calculation/115835)
**Author:** [@Adam4](https://discuss.elastic.co/u/Adam4)\ **Replies:** 3\ **Last updated:** [January 22, 2018, 9:39am UTC](https://discuss.elastic.co/t/jlh-score-calculation/115835 "2018-01-22T09:39:43Z")
I'm trying to manually calculate the jlh score while running a significant term query and I don't get the same score. Steps: query: { "query": { "terms": { "${myFieldName}": \[ "hurricane" \] … --- ## [Different result between java client api and query dsl?](https://discuss.elastic.co/t/different-result-between-java-client-api-and-query-dsl/85216)
**Author:** [@anzhilin](https://discuss.elastic.co/u/anzhilin)\ **Replies:** 3\ **Last updated:** [May 10, 2017, 10:48am UTC](https://discuss.elastic.co/t/different-result-between-java-client-api-and-query-dsl/85216 "2017-05-10T10:48:53Z")
i am using the 2.3.5 version elasticsearch ,this is the whole data: ================================== { "hits": { "total": 4, "max\_score": 1, "hits": \[ { "\_index": "testindex", "\_type": "testtype", "\_id": "AVvxdNN… --- ## [Can't access Kibana after changing password](https://discuss.elastic.co/t/cant-access-kibana-after-changing-password/90701)
**Author:** [@chrowe](https://discuss.elastic.co/u/chrowe)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 4:20pm UTC](https://discuss.elastic.co/t/cant-access-kibana-after-changing-password/90701 "2017-06-27T16:20:00Z")
Running via Docker on Ubuntu 17.04 sudo docker run -d -p 9200:9200 -p 9300:9300 -it -h elasticsearch --name elasticsearch docker.elastic.co/elasticsearch/elasticsearch:5.4.1 sudo docker run -d -p 5601:5601 -h kibana … --- ## [Metricbeat mongodb no reachable servers error](https://discuss.elastic.co/t/metricbeat-mongodb-no-reachable-servers-error/224788)
**Author:** [@Adrian\_Birladeanu](https://discuss.elastic.co/u/Adrian_Birladeanu)\ **Replies:** 0\ **Last updated:** [March 24, 2020, 8:44am UTC](https://discuss.elastic.co/t/metricbeat-mongodb-no-reachable-servers-error/224788 "2020-03-24T08:44:31Z")
Hello. I have a MongoDB replica set with version 4.2.0 running in Kubernetes and I tried to add metricbeat monitoring to a secondary node (metricbeat version 7.6.1). Metricbeat successfully authenticates with a user tha… --- ## [Dm-crypt and search performance](https://discuss.elastic.co/t/dm-crypt-and-search-performance/124206)
**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\ **Replies:** 0\ **Last updated:** [March 16, 2018, 5:26am UTC](https://discuss.elastic.co/t/dm-crypt-and-search-performance/124206 "2018-03-16T05:26:25Z")
We are planning to enable dm-crypt, would like to know whether it will affect search and aggregation performance ? Will dm-crypt encryption affects OS file cache benefits which elasticsearch heavily uses sorting/aggrega… --- ## [Hao to ensure filebeats high availability？](https://discuss.elastic.co/t/hao-to-ensure-filebeats-high-availability/99253)
**Author:** [@gavinage](https://discuss.elastic.co/u/gavinage)\ **Replies:** 0\ **Last updated:** [September 4, 2017, 7:10am UTC](https://discuss.elastic.co/t/hao-to-ensure-filebeats-high-availability/99253 "2017-09-04T07:10:27Z")
hi all, I have a doubt. for example I need collect file A.log and I start up a Filebeat agent,when this agent is down, the result is no collect go on , my question is hao to hao to ensure filebeats high availabil… --- ## [Logstash kafka-input-plugin problem](https://discuss.elastic.co/t/logstash-kafka-input-plugin-problem/68640)
**Author:** [@antimion](https://discuss.elastic.co/u/antimion)\ **Replies:** 0\ **Last updated:** [December 11, 2016, 9:30am UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-problem/68640 "2016-12-11T09:30:47Z")
Hi all, i have a problem with kafka-input, my kafka version is 0.9.0.1 (cloudera distribution), and they need zk\_connect string to connect to the brokers, but in new version zk\_connect changed to bootstrap\_servers. and… --- ## [In Kibana "Discover", when querying the \_score is always 0 for all results](https://discuss.elastic.co/t/in-kibana-discover-when-querying-the-score-is-always-0-for-all-results/155426)
**Author:** [@Aislinn\_Cronin](https://discuss.elastic.co/u/Aislinn_Cronin)\ **Replies:** 5\ **Last updated:** [November 15, 2018, 12:29pm UTC](https://discuss.elastic.co/t/in-kibana-discover-when-querying-the-score-is-always-0-for-all-results/155426 "2018-11-15T12:29:31Z")
When querying an index pattern in the Discover tab, all results have a \_score as 0. However, when querying the same indices in the Kibana console, \_score is not returned as 0. Does anyone know why this is happening? --- ## [Embedding a custom beat in my application](https://discuss.elastic.co/t/embedding-a-custom-beat-in-my-application/124362)
**Author:** [@pkaeding](https://discuss.elastic.co/u/pkaeding)\ **Replies:** 6\ **Last updated:** [March 26, 2018, 7:22am UTC](https://discuss.elastic.co/t/embedding-a-custom-beat-in-my-application/124362 "2018-03-26T07:22:03Z")
I am exploring publishing metrics from my application to ES, and it looks like libbeat might be a good way to do this. However, I'm having trouble seeing how to instantiate a github.com/elastic/beats/libbeat/beat.Beat t… --- ## [Kibana 3 – Not Displaying Historical Logs](https://discuss.elastic.co/t/kibana-3-not-displaying-historical-logs/26883)
**Author:** [@Ben19](https://discuss.elastic.co/u/Ben19)\ **Replies:** 7\ **Last updated:** [August 11, 2015, 8:22am UTC](https://discuss.elastic.co/t/kibana-3-not-displaying-historical-logs/26883 "2015-08-11T08:22:50Z")
Hello, I have an ELK server with the below stack versions: K: 3.1.2 E: 1.4.3 L: 1.4.2 I have an issue where I cannot view historical logs in Kibana, this seems to be random as I was able to view the data on that … --- ## [Ordering nested aggregation](https://discuss.elastic.co/t/ordering-nested-aggregation/44212)
**Author:** [@Ruben\_van\_Vreeland](https://discuss.elastic.co/u/Ruben_van_Vreeland)\ **Replies:** 1\ **Last updated:** [March 15, 2016, 9:33am UTC](https://discuss.elastic.co/t/ordering-nested-aggregation/44212 "2016-03-15T09:33:29Z")
When executing a aggregation using nested objects, I get the following error when sorting on a metric: Sub-path \[nested\] points to non single-bucket aggregation. According to ElasticSearch 2.2 NestedAggregation, a nes… --- ## [Elasticsearch cannot up because /org/freedesktop/PolicyKit1/AuthenticationAgent Blocked](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464)
**Author:** [@kemalkolcuoglu](https://discuss.elastic.co/u/kemalkolcuoglu)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-up-because-org-freedesktop-policykit1-authenticationagent-blocked/277464 "2021-07-01T13:18:11Z")
Hello Everyone, Cluster version: 7.7.0 OS Version: Centos 7.9 Java Version: Java 8 We have an issue with Elasticsearch when we try to up the service. journalctl -xe output: Jun 30 08:59:10 elk-master-2 systemd\[1\]: … --- ## [How to send zen-disco-join after zen-disco-node\_failed](https://discuss.elastic.co/t/how-to-send-zen-disco-join-after-zen-disco-node-failed/12584)
**Author:** [@Jae](https://discuss.elastic.co/u/Jae)\ **Replies:** 4\ **Last updated:** [October 15, 2013, 8:23pm UTC](https://discuss.elastic.co/t/how-to-send-zen-disco-join-after-zen-disco-node-failed/12584 "2013-10-15T20:23:59Z")
Hi I am using internally implemented Discovery module based on Netflix Eureka in EC2. Netflix Eureka is providing discovery service such as Zookeeper but it's more dedicated to discovery service. The serious probl… --- ## [Model data points with multiple timestamps](https://discuss.elastic.co/t/model-data-points-with-multiple-timestamps/134005)
**Author:** [@Erik\_M](https://discuss.elastic.co/u/Erik_M)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 1:58pm UTC](https://discuss.elastic.co/t/model-data-points-with-multiple-timestamps/134005 "2018-06-05T13:58:04Z")
Hey! I have a question regarding modelling, and/or searching, data with multiple timestamps. Structure of the data: The data is a list of licenses, each with two timestamps: Start date (starts) and End date (ends). Du… --- ## [How to apply Function Score in elastic search and remove old score](https://discuss.elastic.co/t/how-to-apply-function-score-in-elastic-search-and-remove-old-score/68429)
**Author:** [@Magapu\_Tatarao](https://discuss.elastic.co/u/Magapu_Tatarao)\ **Replies:** 8\ **Last updated:** [December 15, 2016, 5:53am UTC](https://discuss.elastic.co/t/how-to-apply-function-score-in-elastic-search-and-remove-old-score/68429 "2016-12-15T05:53:03Z")
{ "size": 40, "query": { "function\_score": { "query": { "bool": { "must": \[ { "match": { "in\_search": 1 } }, { "match": { … --- ## [Is it possible to do subqueries?](https://discuss.elastic.co/t/is-it-possible-to-do-subqueries/29006)
**Author:** [@Mark\_Wade](https://discuss.elastic.co/u/Mark_Wade)\ **Replies:** 3\ **Last updated:** [September 10, 2015, 10:52am UTC](https://discuss.elastic.co/t/is-it-possible-to-do-subqueries/29006 "2015-09-10T10:52:02Z")
I will have an index containing messages, sort of like this: +---------------------------------+ | thread\_id | author\_id | message | +-----------+-----------+---------+ | 1 | 1 | Lorem.. | +-----------+… --- ## [Elasticsearch with JSON-array, causing serialize -error](https://discuss.elastic.co/t/elasticsearch-with-json-array-causing-serialize-error/17102)
**Author:** [@PyrK](https://discuss.elastic.co/u/PyrK)\ **Replies:** 3\ **Last updated:** [March 26, 2015, 8:17am UTC](https://discuss.elastic.co/t/elasticsearch-with-json-array-causing-serialize-error/17102 "2015-03-26T08:17:29Z")
I'm using elasticsearch with mongodb -collection using elmongo. I have a collection (elasticsearch index's point of view json-array), that contains for example field: "random\_point": \[ 0.10007477086037397, 0 \]… --- ## [Clearing out an index](https://discuss.elastic.co/t/clearing-out-an-index/13093)
**Author:** [@Brandon\_Hilkert\_2](https://discuss.elastic.co/u/Brandon_Hilkert_2)\ **Replies:** 4\ **Last updated:** [August 7, 2013, 3:53pm UTC](https://discuss.elastic.co/t/clearing-out-an-index/13093 "2013-08-07T15:53:35Z")
I'm writing a Ruby application and doing some testing with RSpec. As part of the RSpec setup process I'm creating indexes with the string "\_test" appended to the name. After each test, I delete the indexes to ens… --- ## [Status of an indexResponse in JAVA API](https://discuss.elastic.co/t/status-of-an-indexresponse-in-java-api/12664)
**Author:** [@Manoj\_Mohan\_2](https://discuss.elastic.co/u/Manoj_Mohan_2)\ **Replies:** 5\ **Last updated:** [July 4, 2013, 5:24pm UTC](https://discuss.elastic.co/t/status-of-an-indexresponse-in-java-api/12664 "2013-07-04T17:24:19Z")
Hi all, I am using the java api for elasticsearch and was unable to find how to check the status of my index response. If I create a percolator using the following query client.prepareIndex("\_percolator", i… --- ## [Logstash processing twice then 'block\_in\_start\_workers'](https://discuss.elastic.co/t/logstash-processing-twice-then-block-in-start-workers/216080)
**Author:** [@guctum](https://discuss.elastic.co/u/guctum)\ **Replies:** 2\ **Last updated:** [January 23, 2020, 1:58pm UTC](https://discuss.elastic.co/t/logstash-processing-twice-then-block-in-start-workers/216080 "2020-01-23T13:58:33Z")
Using Logstash to get information from Oracle Enterprise Manager, keep getting an error relating to multi\_recieve with 'block in start\_workers' repeating over and over whenever Logstash tries again. I have the below conf… --- ## [Logstash error - Failed to decode CEF payload. Generating failure event with payload in message field](https://discuss.elastic.co/t/logstash-error-failed-to-decode-cef-payload-generating-failure-event-with-payload-in-message-field/265365)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [February 24, 2021, 4:38pm UTC](https://discuss.elastic.co/t/logstash-error-failed-to-decode-cef-payload-generating-failure-event-with-payload-in-message-field/265365 "2021-02-24T16:38:36Z")
I configued the syslog.conf file to get the traffic to elasticsearch(installed in same server). Syslog data traffic is coming as CEF format to logstash. syslog.conf file as bellow: input { tcp { port =\> 5514 type =\>… --- ## [Filebeat ошибка - "Cannot index event publisher.Event"](https://discuss.elastic.co/t/filebeat-cannot-index-event-publisher-event/205843)
**Author:** [@IwanHSKY](https://discuss.elastic.co/u/IwanHSKY)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-cannot-index-event-publisher-event/205843 "2019-10-31T15:01:48Z")
Всем привет, использую ELK Stack запущенный в Docker'e. Пытаюсь отправить логи из Java приложения запущенного в Docker'e. Тестировал 7.4.0, и 7.4.1 версии. Отправляю логи через filebeat сразу в ES. Конфиг filebeat'a … --- ## [How to push .log file to elasticsearch](https://discuss.elastic.co/t/how-to-push-log-file-to-elasticsearch/151246)
**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\ **Replies:** 3\ **Last updated:** [October 5, 2018, 9:18pm UTC](https://discuss.elastic.co/t/how-to-push-log-file-to-elasticsearch/151246 "2018-10-05T21:18:51Z")
Hi all, I have .log file with following content. values separated by \[tab\]. |2018-10-04-00-15-17|10.1.1.100|8080|10.1.1.105|1| |2018-10-04-00-15-20|10.1.1.10|80|10.2.1.15|1| |2018-10-04-00-15-31|10.4.1.20|50560|10.1.… --- ## [Filter kibana charts based on field values](https://discuss.elastic.co/t/filter-kibana-charts-based-on-field-values/819)
**Author:** [@sunilactivity](https://discuss.elastic.co/u/sunilactivity)\ **Replies:** 4\ **Last updated:** [May 18, 2015, 9:27am UTC](https://discuss.elastic.co/t/filter-kibana-charts-based-on-field-values/819 "2015-05-18T09:27:05Z")
I am using kibana 4.0 and elastic search 1.5 I want to exclude a certain set of documents from appearing in my chart if it has a particular field set. eg. This is my set of document. {"Name": "windows2008", "Domain":… --- ## [\[SOLVED\]Prune Filter Question](https://discuss.elastic.co/t/solved-prune-filter-question/193108)
**Author:** [@kolten](https://discuss.elastic.co/u/kolten)\ **Replies:** 7\ **Last updated:** [July 31, 2019, 1:36pm UTC](https://discuss.elastic.co/t/solved-prune-filter-question/193108 "2019-07-31T13:36:50Z")
Hi, I want to prune my logs and only take some fields. Here is my logstash config file but this config didnt work. How can solve this issue? input { beats { port =\> 5044 } } filter { json { source… --- ## [How to authenticate using Active directory & LDAP in ELK](https://discuss.elastic.co/t/how-to-authenticate-using-active-directory-ldap-in-elk/190729)
**Author:** [@Pankaj\_Navneet](https://discuss.elastic.co/u/Pankaj_Navneet)\ **Replies:** 7\ **Last updated:** [July 22, 2019, 11:53am UTC](https://discuss.elastic.co/t/how-to-authenticate-using-active-directory-ldap-in-elk/190729 "2019-07-22T11:53:31Z")
Hi, Can somebody please help me in getting the right configuration to set authentication using Active directory & LDAP? I googled a lot but didn't find the right information to set up the same. So, please ELK professio… --- ## [How to remove Last Character from message](https://discuss.elastic.co/t/how-to-remove-last-character-from-message/153285)
**Author:** [@syedmujtaba88](https://discuss.elastic.co/u/syedmujtaba88)\ **Replies:** 1\ **Last updated:** [October 21, 2018, 4:52pm UTC](https://discuss.elastic.co/t/how-to-remove-last-character-from-message/153285 "2018-10-21T16:52:25Z")
i have a log like below for which i can successfully apply a grok pattern and decode the data to field. #### \ \<\> \<\> \< SOAP- \\> however my requirement is to capture the complete \ … --- ## [Use timepicker value for script](https://discuss.elastic.co/t/use-timepicker-value-for-script/93678)
**Author:** [@Hyojoung\_Shin](https://discuss.elastic.co/u/Hyojoung_Shin)\ **Replies:** 8\ **Last updated:** [July 21, 2017, 8:19am UTC](https://discuss.elastic.co/t/use-timepicker-value-for-script/93678 "2017-07-21T08:19:32Z")
Hi! Thank you for your works! Can I use timepicker value from kibana dashboard for the script? I used this kind of script before. doc\['date1'\].value-doc\['date'\].value What I want to do is that using timepicker valu… --- ## [Replacing special characters with gsub](https://discuss.elastic.co/t/replacing-special-characters-with-gsub/226098)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [April 1, 2020, 6:17pm UTC](https://discuss.elastic.co/t/replacing-special-characters-with-gsub/226098 "2020-04-01T18:17:32Z")
I'm using gsub and regex to structure a field into json. Unfortunately, I'm having problems with double-quotes being escaped in the output. For example: Field: event Value: 'success': True "event", "'", "\\"", Expec… --- ## [Error: bool query does not support \[must-not\]](https://discuss.elastic.co/t/error-bool-query-does-not-support-must-not/49486)
**Author:** [@eeivin](https://discuss.elastic.co/u/eeivin)\ **Replies:** 2\ **Last updated:** [May 8, 2016, 5:25pm UTC](https://discuss.elastic.co/t/error-bool-query-does-not-support-must-not/49486 "2016-05-08T17:25:25Z")
I get the following error when running the watcher: "status": "failure" "reason": "SearchPhaseExecutionException\[all shards failed\]; nested: QueryParsingException\[bool query does not support \[must-not\]\]; " Would appr… --- ## [Logstash to Logstash Not Working](https://discuss.elastic.co/t/logstash-to-logstash-not-working/72840)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 5\ **Last updated:** [January 26, 2017, 4:46pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-not-working/72840 "2017-01-26T16:46:51Z")
I have a Logstash server with a tcp output configured: output { tcp { host =\> "x.x.x.x" port =\> 12345 codec =\> json } } On a receiving Logstash box, I have a tcp input configured and I am adding a coup… --- ## [How to plot percentile distributions?](https://discuss.elastic.co/t/how-to-plot-percentile-distributions/231303)
**Author:** [@andrzejo](https://discuss.elastic.co/u/andrzejo)\ **Replies:** 3\ **Last updated:** [May 20, 2020, 2:44pm UTC](https://discuss.elastic.co/t/how-to-plot-percentile-distributions/231303 "2020-05-20T14:44:46Z")
I'm trying to create a latency percentile distribution plot, like the one here: https://hdrhistogram.github.io/HdrHistogram/plotFiles.html But I cannot find a good way to do this, any ideas? Details: My source data i… --- ## [400 Bad Request: Cannot set property 'status' of undefined](https://discuss.elastic.co/t/400-bad-request-cannot-set-property-status-of-undefined/48780)
**Author:** [@oncejean](https://discuss.elastic.co/u/oncejean)\ **Replies:** 3\ **Last updated:** [April 29, 2016, 6:02pm UTC](https://discuss.elastic.co/t/400-bad-request-cannot-set-property-status-of-undefined/48780 "2016-04-29T18:02:46Z")
Hello everybody, I'm sure we are not the only facing this issues. Marvel was working like a charm until now. For some unknown reason, we get the following error message: Marvel: Error 400 Bad Request: Cannot set prope… --- ## [How to filter a results set AFTER 'collapse'?](https://discuss.elastic.co/t/how-to-filter-a-results-set-after-collapse/92606)
**Author:** [@Grigory\_Tukmachev](https://discuss.elastic.co/u/Grigory_Tukmachev)\ **Replies:** 0\ **Last updated:** [July 11, 2017, 8:43am UTC](https://discuss.elastic.co/t/how-to-filter-a-results-set-after-collapse/92606 "2017-07-11T08:43:37Z")
Hello! I am really new in elasticsearch. Please, help me with the search requested build: I push into an 'event' index records on every document status changes, and then, I want to find documents by CURRENT status (cur… --- ## [Logstash jdbc\_default\_timezone issue (bug)](https://discuss.elastic.co/t/logstash-jdbc-default-timezone-issue-bug/97578)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 2\ **Last updated:** [August 21, 2017, 12:24pm UTC](https://discuss.elastic.co/t/logstash-jdbc-default-timezone-issue-bug/97578 "2017-08-21T12:24:38Z")
Hi, I am using the logstash jdbc input but have problems using the jdbc\_default\_timezone. The database I use has timezone Europe/Amsterdam so I thought if I set that as de defaut timezone it would work like a charm. j… --- ## [Parsing McAfee ePO Logs](https://discuss.elastic.co/t/parsing-mcafee-epo-logs/81880)
**Author:** [@julemik](https://discuss.elastic.co/u/julemik)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 1:44pm UTC](https://discuss.elastic.co/t/parsing-mcafee-epo-logs/81880 "2017-04-11T13:44:47Z")
McAfee has recently supported forwarding messages via syslog, and after a bit of groking. I'm left with the meat and potatoes portion of the message that is xml. Here is how I'm parsing it... xml { source =\> "e… --- ## [Exploring beats for Windows EventLog capture](https://discuss.elastic.co/t/exploring-beats-for-windows-eventlog-capture/27417)
**Author:** [@johnpickett](https://discuss.elastic.co/u/johnpickett)\ **Replies:** 2\ **Last updated:** [August 18, 2015, 10:44pm UTC](https://discuss.elastic.co/t/exploring-beats-for-windows-eventlog-capture/27417 "2015-08-18T22:44:32Z")
My organization is working on an ELK implementation project. One area we've experienced difficulties is gathering Windows EventLog data. In the community, the current best option appears to be using a local syslog app … --- ## [Line graph dot size not working](https://discuss.elastic.co/t/line-graph-dot-size-not-working/135772)
**Author:** [@ahazan98](https://discuss.elastic.co/u/ahazan98)\ **Replies:** 7\ **Last updated:** [June 13, 2018, 9:02pm UTC](https://discuss.elastic.co/t/line-graph-dot-size-not-working/135772 "2018-06-13T21:02:46Z")
I am currently working on creating a scatterplot (line graph without the line) showing how many accounts are open in each city, with the dot size respective to the average balance of the users in each city. I am using t… --- ## [Modify date key/key\_as\_string format](https://discuss.elastic.co/t/modify-date-key-key-as-string-format/298557)
**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\ **Replies:** 2\ **Last updated:** [March 2, 2022, 1:25pm UTC](https://discuss.elastic.co/t/modify-date-key-key-as-string-format/298557 "2022-03-02T13:25:24Z")
Is there any way to modify the date format of the key? or provide maybe an additional key field in a format that I like for use later in Vega? Currently sorting by key\_as\_string but it's lengthy { "size": 0, "aggs":… --- ## [Different Kibana Environnement Views : Prohibit and allow Visualization according User authentication with reverse proxy ( Nginx )](https://discuss.elastic.co/t/different-kibana-environnement-views-prohibit-and-allow-visualization-according-user-authentication-with-reverse-proxy-nginx/39684)
**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\ **Replies:** 5\ **Last updated:** [February 11, 2016, 3:06pm UTC](https://discuss.elastic.co/t/different-kibana-environnement-views-prohibit-and-allow-visualization-according-user-authentication-with-reverse-proxy-nginx/39684 "2016-02-11T15:06:37Z")
Hi all, I am a Elasticsearch beginner user \[:slightly\_smiling:\] I use logstash to parse, and i send all data in my ElasticSearch database. Then I use Kibana to exploit them. So it's OK. My question is : How with re… --- ## [Configure Two Instances of Filebeat](https://discuss.elastic.co/t/configure-two-instances-of-filebeat/347841)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 8\ **Last updated:** [December 1, 2023, 12:51pm UTC](https://discuss.elastic.co/t/configure-two-instances-of-filebeat/347841 "2023-12-01T12:51:08Z")
Hi Team, I had requirement like, need to run two instances of filebeat and both instances will load data to a particular Index. Is it possible to achieve the same if yes could you please let us know how we can do the s… --- ## [Pattern Cisco-ASA syslog message : Grokparsefailure](https://discuss.elastic.co/t/pattern-cisco-asa-syslog-message-grokparsefailure/166233)
**Author:** [@uncoveredmind](https://discuss.elastic.co/u/uncoveredmind)\ **Replies:** 3\ **Last updated:** [January 31, 2019, 6:27am UTC](https://discuss.elastic.co/t/pattern-cisco-asa-syslog-message-grokparsefailure/166233 "2019-01-31T06:27:51Z")
I used a cisco-asa pattern to filter my syslog message but i don't know why I keep getting tags:\_grokparsefailure Message: Device chooses cipher ECDHE-RSA-AES256-GCM-SHA384 for the SSL session with client INTERNET:1.2.3… --- ## [Aggregation always returns 0 with values smaller than .1](https://discuss.elastic.co/t/aggregation-always-returns-0-with-values-smaller-than-1/43424)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 3\ **Last updated:** [March 7, 2016, 1:53pm UTC](https://discuss.elastic.co/t/aggregation-always-returns-0-with-values-smaller-than-1/43424 "2016-03-07T13:53:45Z")
Is there a way to adjust aggregation precision thresholds? If I run an aggregation on a value that is smaller than 0.1 it always returns 0. I would like it to not return 0. For example if I run a max, sum or avg on th… --- ## [Dashboard auto refresh memory usage](https://discuss.elastic.co/t/dashboard-auto-refresh-memory-usage/31426)
**Author:** [@procke](https://discuss.elastic.co/u/procke)\ **Replies:** 8\ **Last updated:** [October 5, 2015, 1:01pm UTC](https://discuss.elastic.co/t/dashboard-auto-refresh-memory-usage/31426 "2015-10-05T13:01:40Z")
When I turn on auto-refresh on any of my dashboards the memory usage just keeps growing. This happens in IE and Chrome and eventually things go bad. Is this a known problem, or is it something I am causing with the typ… --- ## [Can Kibana read timestamp field saved as millis?](https://discuss.elastic.co/t/can-kibana-read-timestamp-field-saved-as-millis/143070)
**Author:** [@anna10](https://discuss.elastic.co/u/anna10)\ **Replies:** 4\ **Last updated:** [August 8, 2018, 6:27am UTC](https://discuss.elastic.co/t/can-kibana-read-timestamp-field-saved-as-millis/143070 "2018-08-08T06:27:28Z")
My documents stored in ElasticSearch have a "timestamp" field that is stored as a millis (https://currentmillis.com/) number. I would like to view time-series data in Kibana, but Timelion doesn't work properly, presumab… --- ## [Getting sample apache logs into Kibana](https://discuss.elastic.co/t/getting-sample-apache-logs-into-kibana/45264)
**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\ **Replies:** 4\ **Last updated:** [April 13, 2016, 3:18pm UTC](https://discuss.elastic.co/t/getting-sample-apache-logs-into-kibana/45264 "2016-04-13T15:18:10Z")
Hello everyone I'm currently building an ELK stack and what I want to do is use a previous Apache log file to ingest into the ELK server for demo purposes. One idea I had was to make the log locally available and … [Previous page](https://discuss.elastic.co/top.md?page=653&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=655&per_page=50&period=all)