# Top

**URL:** https://discuss.elastic.co/top.md?page=657&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 658

---

## [How to get data index?](https://discuss.elastic.co/t/how-to-get-data-index/8658)

<div class="topic-metadata">

**Author:** [@Bernd\_Fehling](https://discuss.elastic.co/u/Bernd_Fehling)\
**Replies:** 4\
**Last updated:** [August 7, 2012, 10:05am UTC](https://discuss.elastic.co/t/how-to-get-data-index/8658 "2012-08-07T10:05:36Z")

</div>

After two days of trying back and forth to get any data index from a file I need some help. my mapping is: {"base":{}} my settings are: {"base":{"settings":{"index.number\_of\_shards":"2","index.number\_of\_replicas":"1…

---

## [Possible to add Kibana 5.1 x-pack Graph to Dashboard?](https://discuss.elastic.co/t/possible-to-add-kibana-5-1-x-pack-graph-to-dashboard/72852)

<div class="topic-metadata">

**Author:** [@BrianP](https://discuss.elastic.co/u/BrianP)\
**Replies:** 1\
**Last updated:** [January 26, 2017, 11:42am UTC](https://discuss.elastic.co/t/possible-to-add-kibana-5-1-x-pack-graph-to-dashboard/72852 "2017-01-26T11:42:47Z")

</div>

Please forgive me if this is the wrong forum. I'm trying to find instructions for adding a X-Pack/Graph to any of my existing Dashboards as a static pic, and when clicked bring the user to the X-pack Graph app. Thanks.

---

## [Alias vs \*](https://discuss.elastic.co/t/alias-vs/50070)

<div class="topic-metadata">

**Author:** [@intech](https://discuss.elastic.co/u/intech)\
**Replies:** 8\
**Last updated:** [May 16, 2016, 5:05pm UTC](https://discuss.elastic.co/t/alias-vs/50070 "2016-05-16T17:05:50Z")

</div>

Например, для динамического маппинга с датами, возьмём дефолтный logstash-\*, где \* - это дата. Вот у нас их много, как лучше организовывать работу с ними загнать их все в alias, кстати, там ведь тоже можно использовать \*…

---

## [Tooltip on image or shape - canvas](https://discuss.elastic.co/t/tooltip-on-image-or-shape-canvas/271247)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 7\
**Last updated:** [April 28, 2021, 7:48am UTC](https://discuss.elastic.co/t/tooltip-on-image-or-shape-canvas/271247 "2021-04-28T07:48:45Z")

</div>

Hello, is it possible to add the tooltip (HTML title attribute) to an image or canvas shape? If so, how? Thank you

---

## [How to get parent span id from span](https://discuss.elastic.co/t/how-to-get-parent-span-id-from-span/266430)

<div class="topic-metadata">

**Author:** [@peng\_xing](https://discuss.elastic.co/u/peng_xing)\
**Replies:** 7\
**Last updated:** [March 8, 2021, 8:29am UTC](https://discuss.elastic.co/t/how-to-get-parent-span-id-from-span/266430 "2021-03-08T08:29:32Z")

</div>

I want to get some information from apm SpanContext to log in my logs, but I only can get transcationId, traceId and spanId, how to get the parent span id? The code come from apmlogrus // TraceContext returns a logrus.…

---

## [Create a table of links to dashboards in Kibana](https://discuss.elastic.co/t/create-a-table-of-links-to-dashboards-in-kibana/244486)

<div class="topic-metadata">

**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\
**Replies:** 5\
**Last updated:** [August 11, 2020, 5:56am UTC](https://discuss.elastic.co/t/create-a-table-of-links-to-dashboards-in-kibana/244486 "2020-08-11T05:56:15Z")

</div>

Hi Community, I've a couple of dashboards created in Kibana. I want to create a "table of contents" on the home page dashboard, that will navigate to a new dashboard on its click. I'm using Kibana version 6.3. Can anyon…

---

## [Drop document in ingest pipeline](https://discuss.elastic.co/t/drop-document-in-ingest-pipeline/173394)

<div class="topic-metadata">

**Author:** [@leochavez](https://discuss.elastic.co/u/leochavez)\
**Replies:** 3\
**Last updated:** [March 27, 2019, 6:51am UTC](https://discuss.elastic.co/t/drop-document-in-ingest-pipeline/173394 "2019-03-27T06:51:19Z")

</div>

Hi I need to drop a document in an ingest pipeline , ie to not index it at all, I need to do it filtering the messages by the type of severity and discard them I am testing it in the following way PUT \_ingest/pipel…

---

## [Performing simple math in Kibana for y-axis](https://discuss.elastic.co/t/performing-simple-math-in-kibana-for-y-axis/54538)

<div class="topic-metadata">

**Author:** [@shrewn](https://discuss.elastic.co/u/shrewn)\
**Replies:** 3\
**Last updated:** [July 5, 2016, 3:38pm UTC](https://discuss.elastic.co/t/performing-simple-math-in-kibana-for-y-axis/54538 "2016-07-05T15:38:18Z")

</div>

Documents that I index into kibana have a field, "action" which can either have a string of the action performed or "no-action". My x-axis is a histogram on field "age" in each document (multiple documents can have the…

---

## [How to prevent ES from garbage collecting during several minutes](https://discuss.elastic.co/t/how-to-prevent-es-from-garbage-collecting-during-several-minutes/10880)

<div class="topic-metadata">

**Author:** [@Quentin\_Barbe](https://discuss.elastic.co/u/Quentin_Barbe)\
**Replies:** 6\
**Last updated:** [February 25, 2013, 8:36pm UTC](https://discuss.elastic.co/t/how-to-prevent-es-from-garbage-collecting-during-several-minutes/10880 "2013-02-25T20:36:33Z")

</div>

Hello, We have an elastic search cluster storing logs with the following configuration: - One index per day, we keep only the last 15 days - Each index is ~8Gb (slightly increasing) - The cluster is composed of…

---

## [Kibana crashes - Error loading data](https://discuss.elastic.co/t/kibana-crashes-error-loading-data/222431)

<div class="topic-metadata">

**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\
**Replies:** 4\
**Last updated:** [March 9, 2020, 8:59am UTC](https://discuss.elastic.co/t/kibana-crashes-error-loading-data/222431 "2020-03-09T08:59:35Z")

</div>

Hi everyone, I have an issue with Kibana when I run a search with time range \> 3hrs, is returning Error loading data Request to Elasticsearch failed: {"error":{}} Error: Request to Elasticsearch failed: {"error":{}} …

---

## [How does Metricbeat define "Used Memory"?](https://discuss.elastic.co/t/how-does-metricbeat-define-used-memory/68786)

<div class="topic-metadata">

**Author:** [@coder-98103](https://discuss.elastic.co/u/coder-98103)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 10:30pm UTC](https://discuss.elastic.co/t/how-does-metricbeat-define-used-memory/68786 "2016-12-13T22:30:36Z")

</div>

I am considering using Metricbeat to track my server capacity, but I'm confused by the memory reports. My test server has this output: root@sandbox:/etc/metricbeat# free -m total used fre…

---

## [Quickstart "health" and "phase" are empty](https://discuss.elastic.co/t/quickstart-health-and-phase-are-empty/198164)

<div class="topic-metadata">

**Author:** [@shirishatideal](https://discuss.elastic.co/u/shirishatideal)\
**Replies:** 8\
**Last updated:** [September 12, 2019, 5:23pm UTC](https://discuss.elastic.co/t/quickstart-health-and-phase-are-empty/198164 "2019-09-12T17:23:44Z")

</div>

I am trying ECK but got stuck right at start, $ kubectl get elasticsearch quickstart NAME HEALTH NODES VERSION PHASE AGE quickstart 7.2.0 24m Kubernetes - v1.15.3 Cent…

---

## [How can i get aggregated count of particular errors](https://discuss.elastic.co/t/how-can-i-get-aggregated-count-of-particular-errors/128538)

<div class="topic-metadata">

**Author:** [@Utkarsh\_Tripathi](https://discuss.elastic.co/u/Utkarsh_Tripathi)\
**Replies:** 7\
**Last updated:** [April 23, 2018, 10:01am UTC](https://discuss.elastic.co/t/how-can-i-get-aggregated-count-of-particular-errors/128538 "2018-04-23T10:01:13Z")

</div>

hi, I want to get number of times particular error occured on my server.After parsing logs look as below mentioned. \< { "path" =\> "/home/utkarsh/sample.log2016\_07\_21.txt", "time" =\> "00:00:05,626", "host" =\> "Lapto…

---

## [Transport Client not getting connected 5.6.3 Java API](https://discuss.elastic.co/t/transport-client-not-getting-connected-5-6-3-java-api/111479)

<div class="topic-metadata">

**Author:** [@amathuria](https://discuss.elastic.co/u/amathuria)\
**Replies:** 7\
**Last updated:** [December 13, 2017, 5:58pm UTC](https://discuss.elastic.co/t/transport-client-not-getting-connected-5-6-3-java-api/111479 "2017-12-13T17:58:49Z")

</div>

Continuing the discussion from NoNodeAvailableException, cannot connect Java API and Elasticsearch: Hi, I am new to elasticsearch and I wanted to use the Java APIs in Scala to communicate with my ES cluster (one node)…

---

## [Timelion. Different timefield ranges for each query](https://discuss.elastic.co/t/timelion-different-timefield-ranges-for-each-query/147811)

<div class="topic-metadata">

**Author:** [@Tanatos\_Daniel](https://discuss.elastic.co/u/Tanatos_Daniel)\
**Replies:** 2\
**Last updated:** [September 10, 2018, 9:52pm UTC](https://discuss.elastic.co/t/timelion-different-timefield-ranges-for-each-query/147811 "2018-09-10T21:52:37Z")

</div>

I have these records for 1961-2016 period. I have plotted the data corresponding to the 7th month for the entire period, together with the average aggregation for the same period. Query: .es(q="month:7", index=1961-201…

---

## [Convert number to string](https://discuss.elastic.co/t/convert-number-to-string/113004)

<div class="topic-metadata">

**Author:** [@jali](https://discuss.elastic.co/u/jali)\
**Replies:** 2\
**Last updated:** [December 22, 2017, 8:56pm UTC](https://discuss.elastic.co/t/convert-number-to-string/113004 "2017-12-22T20:56:14Z")

</div>

Hello, I have a number field ('response') with values ranging between 0-2. I need to do scripted field which converts these number to string values. 0=Bad, 1=OK, 2=Excellent. How do I do that? I am trying: if (doc\['re…

---

## [Elasticsearch Immutable Documents in Indexes](https://discuss.elastic.co/t/elasticsearch-immutable-documents-in-indexes/295825)

<div class="topic-metadata">

**Author:** [@nirvanah](https://discuss.elastic.co/u/nirvanah)\
**Replies:** 4\
**Last updated:** [February 1, 2022, 12:11am UTC](https://discuss.elastic.co/t/elasticsearch-immutable-documents-in-indexes/295825 "2022-02-01T00:11:19Z")

</div>

I am using Elastic Stack to store logs of multiple servers. I need to make the logs/document immutable, i.e. Write-once only. There is a compliance requirement to prevent alteration of logs. I am using Elasticsearch 7.10…

---

## [How to convert latitude, longitude to geohash](https://discuss.elastic.co/t/how-to-convert-latitude-longitude-to-geohash/201240)

<div class="topic-metadata">

**Author:** [@sahishnu.patil](https://discuss.elastic.co/u/sahishnu.patil)\
**Replies:** 4\
**Last updated:** [September 26, 2019, 3:28pm UTC](https://discuss.elastic.co/t/how-to-convert-latitude-longitude-to-geohash/201240 "2019-09-26T15:28:04Z")

</div>

While using Coordinate map visualization, Kibana asks for geo\_hash field type. Input data is filtered to get latitude and longitude as separate values as well as in as array. The error - The index pattern access\_log\* …

---

## [Sorting Kibana filters aggregation](https://discuss.elastic.co/t/sorting-kibana-filters-aggregation/52709)

<div class="topic-metadata">

**Author:** [@patrickko](https://discuss.elastic.co/u/patrickko)\
**Replies:** 4\
**Last updated:** [June 15, 2016, 7:32pm UTC](https://discuss.elastic.co/t/sorting-kibana-filters-aggregation/52709 "2016-06-15T19:32:27Z")

</div>

I have created a filters aggregation in Kibana in a data table. For every filter element, I have an associated aggregated count. However, I cannot find a way to sort the data table by the counts for each filter. Is the…

---

## [Using Prometheus remote\_write to send metrics to Elastic cloud](https://discuss.elastic.co/t/using-prometheus-remote-write-to-send-metrics-to-elastic-cloud/317014)

<div class="topic-metadata">

**Author:** [@Maduranga](https://discuss.elastic.co/u/Maduranga)\
**Replies:** 6\
**Last updated:** [October 25, 2022, 1:48am UTC](https://discuss.elastic.co/t/using-prometheus-remote-write-to-send-metrics-to-elastic-cloud/317014 "2022-10-25T01:48:41Z")

</div>

Hello, I have a Prometheus server which is sending currently sending metrics to Grafana using remote\_write. I would like to use our Elastic cloud Kibana to get the Prometheus metrics. Would like advice on how to authe…

---

## [Scripting and dates](https://discuss.elastic.co/t/scripting-and-dates/19698)

<div class="topic-metadata">

**Author:** [@Michael\_Giagnocavo](https://discuss.elastic.co/u/Michael_Giagnocavo)\
**Replies:** 6\
**Last updated:** [September 11, 2014, 3:38am UTC](https://discuss.elastic.co/t/scripting-and-dates/19698 "2014-09-11T03:38:02Z")

</div>

I'm trying to work with dates inside a script. I've got a few questions: 1. How do I reference a script that I have in the scripts directory? Simply POSTing to /index/type/id/\_update with { "script": "scriptname" } do…

---

## [How to use logstash with docker?](https://discuss.elastic.co/t/how-to-use-logstash-with-docker/253638)

<div class="topic-metadata">

**Author:** [@mohhef](https://discuss.elastic.co/u/mohhef)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 9:20pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-with-docker/253638 "2020-10-29T21:20:49Z")

</div>

Hello, My enviroment: Host: windows 10 Containers: linux I am building a spring boot application and I am logging my logs to "C:/elk/spring-boot-elk.log" I want to have a docker setup such that logstash will be abl…

---

## [Using Zuul as reverse proxy](https://discuss.elastic.co/t/using-zuul-as-reverse-proxy/35235)

<div class="topic-metadata">

**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\
**Replies:** 3\
**Last updated:** [February 11, 2017, 6:30pm UTC](https://discuss.elastic.co/t/using-zuul-as-reverse-proxy/35235 "2017-02-11T18:30:44Z")

</div>

Hi, I am trying to use netflix Zuul as a reverse proxy for Kibana. The only thing I get back is a lot of encoded content. Did anyone try to use Zuul with Kibana? thanks.

---

## [Unable to Start Logstash with Elasticsearch - "Attempted to resurrect connection to dead ES instance"](https://discuss.elastic.co/t/unable-to-start-logstash-with-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/281241)

<div class="topic-metadata">

**Author:** [@jdurga](https://discuss.elastic.co/u/jdurga)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 5:46pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-with-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/281241 "2021-08-12T17:46:55Z")

</div>

I've followed these steps: https://github.com/virtualtechmeetup/0003\_howto\_elasticsearch\_kibana\_install\_ubuntu I would like to send Syslog traffic from Logstash to Datadog and Elasticsearch. Really just using Elasticse…

---

## [Elasticsearch 1.7.2 released](https://discuss.elastic.co/t/elasticsearch-1-7-2-released/29247)

<div class="topic-metadata">

**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\
**Replies:** 0\
**Last updated:** [September 14, 2015, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-2-released/29247 "2015-09-14T13:31:58Z")

</div>

Today, we are happy to announce the bug fix release of Elasticsearch 1.7.2, based on Lucene 4.10.4. This is the latest stable release. Users are advised to upgrade if they find themselves affected by any of the bugs whic…

---

## [How to show hostname in watcher text](https://discuss.elastic.co/t/how-to-show-hostname-in-watcher-text/228237)

<div class="topic-metadata">

**Author:** [@sarahpark](https://discuss.elastic.co/u/sarahpark)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 12:32am UTC](https://discuss.elastic.co/t/how-to-show-hostname-in-watcher-text/228237 "2020-04-21T00:32:48Z")

</div>

Hi, I want to show hostname in watcher text. I made the threshold alert, Kibana UI. Its purpose is alerting the hostname, that using disk size over 80%. I want to make the text like "Disk Usage Warning !! IS-SC-001 is…

---

## [java.security.AccessControlException: access denied ("org.joda.time.JodaTimePermission" "DateTimeZone.setDefault")](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-org-joda-time-jodatimepermission-datetimezone-setdefault/161396)

<div class="topic-metadata">

**Author:** [@poitevinpm](https://discuss.elastic.co/u/poitevinpm)\
**Replies:** 5\
**Last updated:** [December 18, 2018, 8:57pm UTC](https://discuss.elastic.co/t/java-security-accesscontrolexception-access-denied-org-joda-time-jodatimepermission-datetimezone-setdefault/161396 "2018-12-18T20:57:45Z")

</div>

Hi all, hope someone can help me with a permission issue I can't seem to get access for permission: "org.joda.time.JodaTimePermission" "DateTimeZone.setDefault" in the plugin I am developing. I have a plugin-security.p…

---

## [How to test my beat output](https://discuss.elastic.co/t/how-to-test-my-beat-output/55449)

<div class="topic-metadata">

**Author:** [@bklise](https://discuss.elastic.co/u/bklise)\
**Replies:** 8\
**Last updated:** [July 20, 2016, 5:14pm UTC](https://discuss.elastic.co/t/how-to-test-my-beat-output/55449 "2016-07-20T17:14:18Z")

</div>

I notice that the example beats use python to test the output of the beat. I copied the packetbeat example for one test and tried to get mine to run, and I keep getting errors. I aslo do not understand in the README.m…

---

## [Logstash 5.0.0-alpha4 + geoip = Something is wrong with your configuration](https://discuss.elastic.co/t/logstash-5-0-0-alpha4-geoip-something-is-wrong-with-your-configuration/55991)

<div class="topic-metadata">

**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\
**Replies:** 4\
**Last updated:** [August 23, 2016, 7:39am UTC](https://discuss.elastic.co/t/logstash-5-0-0-alpha4-geoip-something-is-wrong-with-your-configuration/55991 "2016-08-23T07:39:13Z")

</div>

Hi I'm experiencing some issues with logstash 5.0.0-alpha4 and geoip plugin. Posting it here before opening any issue in case is my fault. Get to the point. Run logstash container with GeoIP volume: docker run --…

---

## [Metricbeat activemq & jolokia modules error (using HTTP when HTTPS specified)](https://discuss.elastic.co/t/metricbeat-activemq-jolokia-modules-error-using-http-when-https-specified/235992)

<div class="topic-metadata">

**Author:** [@Don-cloud](https://discuss.elastic.co/u/Don-cloud)\
**Replies:** 7\
**Last updated:** [June 6, 2020, 5:37pm UTC](https://discuss.elastic.co/t/metricbeat-activemq-jolokia-modules-error-using-http-when-https-specified/235992 "2020-06-06T17:37:54Z")

</div>

Hi, I have turned on these two modules in activemq server (version 5.15.9). jolokia is enabled by default on HTTPS port. i am seeing that, even after clearly specifying on activemq.yml and jolokia.yml the value of host…

---

## [Is it possible to enable paging in Logstash jdbc input without tracking\_column?](https://discuss.elastic.co/t/is-it-possible-to-enable-paging-in-logstash-jdbc-input-without-tracking-column/134576)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 3\
**Last updated:** [June 11, 2018, 3:29pm UTC](https://discuss.elastic.co/t/is-it-possible-to-enable-paging-in-logstash-jdbc-input-without-tracking-column/134576 "2018-06-11T15:29:26Z")

</div>

Hi, I am using ELK GA 5.0.0. I am using Logstash to fetch rows from my Postgres db like; jdbc { jdbc\_driver\_library =\> "/ELK/Logstash/edb-jdbc17.jar" jdbc\_driver\_class =\> "Java::com.edb.Driver" jdbc\_connection\_strin…

---

## [Grok Parse Failure - Logger](https://discuss.elastic.co/t/grok-parse-failure-logger/110674)

<div class="topic-metadata">

**Author:** [@Rebelpyr7](https://discuss.elastic.co/u/Rebelpyr7)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 2:35pm UTC](https://discuss.elastic.co/t/grok-parse-failure-logger/110674 "2017-12-07T14:35:18Z")

</div>

Ok so the baseline of the log that I am trying to parse is the results of a command line speed test. I am using the logger command to export the results to my ELK server. I've done the leg work and gotten a pattern to wo…

---

## [How to configure the output section in logstash conf make copy of logs on my local disk](https://discuss.elastic.co/t/how-to-configure-the-output-section-in-logstash-conf-make-copy-of-logs-on-my-local-disk/109383)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 6\
**Last updated:** [November 29, 2017, 1:00pm UTC](https://discuss.elastic.co/t/how-to-configure-the-output-section-in-logstash-conf-make-copy-of-logs-on-my-local-disk/109383 "2017-11-29T13:00:41Z")

</div>

Hi, How can i get copy or output of parsed logs in logstash on my local disk? Our Case: We are thinking not just send logs to Elasticsearch by logstash also to have output from logs on our disk, then we have backup/ar…

---

## [Удаление типа](https://discuss.elastic.co/t/topic/41393)

<div class="topic-metadata">

**Author:** [@stanleer](https://discuss.elastic.co/u/stanleer)\
**Replies:** 6\
**Last updated:** [March 20, 2017, 3:38pm UTC](https://discuss.elastic.co/t/topic/41393 "2017-03-20T15:38:19Z")

</div>

Пытаюсь удалить тип как описано в документации https://www.elastic.co/guide/en/elasticsearch/reference/1.4/indices-delete-mapping.html curl -XDELETE 'http://10.10.0.9:9200/geo/street' выдает No handler found for u…

---

## [Creating Kibana visualization using json](https://discuss.elastic.co/t/creating-kibana-visualization-using-json/123463)

<div class="topic-metadata">

**Author:** [@Sungsu\_Kim](https://discuss.elastic.co/u/Sungsu_Kim)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 12:20am UTC](https://discuss.elastic.co/t/creating-kibana-visualization-using-json/123463 "2018-04-03T00:20:49Z")

</div>

Hi, I asked same question to elasticsearch community, but there is no reply. This topic is related to both Kibana and Elasticsearch So I'm asking same question here. I had created visualization by using elasticsearch…

---

## [Error in Elasticseach logs](https://discuss.elastic.co/t/error-in-elasticseach-logs/118419)

<div class="topic-metadata">

**Author:** [@Kaouther\_Mechri](https://discuss.elastic.co/u/Kaouther_Mechri)\
**Replies:** 5\
**Last updated:** [February 5, 2018, 11:41am UTC](https://discuss.elastic.co/t/error-in-elasticseach-logs/118419 "2018-02-05T11:41:35Z")

</div>

Hello , When I access to dashbord in Kibana I have this message in elasticsearch logs . did you encouter such problems ? thanks Sc2w4wt3q-7cZg\]: Failed to execute \[SearchRequest{searchType=QUERY\_THEN\_FETCH, indices=…

---

## [Kibana + ES with Custom Realm](https://discuss.elastic.co/t/kibana-es-with-custom-realm/95215)

<div class="topic-metadata">

**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\
**Replies:** 8\
**Last updated:** [August 1, 2017, 1:28pm UTC](https://discuss.elastic.co/t/kibana-es-with-custom-realm/95215 "2017-08-01T13:28:08Z")

</div>

We have ES with custom realm that is accepting saml token and setting up user/roles based on the token. Kibana with out x-pack works well as it passes on the saml toke in Authorization header to ES and it works really f…

---

## [How to force kibana to optimize after updating plugins](https://discuss.elastic.co/t/how-to-force-kibana-to-optimize-after-updating-plugins/140080)

<div class="topic-metadata">

**Author:** [@bamboo2222](https://discuss.elastic.co/u/bamboo2222)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 12:01am UTC](https://discuss.elastic.co/t/how-to-force-kibana-to-optimize-after-updating-plugins/140080 "2018-07-18T00:01:08Z")

</div>

Hi, I'm developing kibana plugins in Win10. It's strange that every time I update the folder "kibana/src/plugins", and then restart the kibana, the optimization step doesn't execute automatically. Can anyone give me some…

---

## [Surfacing Index Field Values in Kibana Alerts](https://discuss.elastic.co/t/surfacing-index-field-values-in-kibana-alerts/301903)

<div class="topic-metadata">

**Author:** [@Matt\_Jones](https://discuss.elastic.co/u/Matt_Jones)\
**Replies:** 1\
**Last updated:** [April 10, 2022, 8:03pm UTC](https://discuss.elastic.co/t/surfacing-index-field-values-in-kibana-alerts/301903 "2022-04-10T20:03:15Z")

</div>

Hi, I'm setting up Kibana alerts in using a number of connectors (e.g. Email and MS Teams) and alerting on matches against an Elasticsearch query. Alerts are working fine....However, what I cannot figure out is how to …

---

## [Shard Failed- The data you are seeing might be incomplete or wrong](https://discuss.elastic.co/t/shard-failed-the-data-you-are-seeing-might-be-incomplete-or-wrong/288670)

<div class="topic-metadata">

**Author:** [@ptanguturi](https://discuss.elastic.co/u/ptanguturi)\
**Replies:** 1\
**Last updated:** [November 15, 2021, 5:08pm UTC](https://discuss.elastic.co/t/shard-failed-the-data-you-are-seeing-might-be-incomplete-or-wrong/288670 "2021-11-15T17:08:17Z")

</div>

I am getting below error message. not sure what when wrong and didn't make any changes to index. script\_exception at shard 0index default-2021.11node weAPTkoJTm6njIweWotMLw Type script\_exception Reason runtime error …

---

## [Logical OR between query context and filter context with Elasticsearch 2.x](https://discuss.elastic.co/t/logical-or-between-query-context-and-filter-context-with-elasticsearch-2-x/43745)

<div class="topic-metadata">

**Author:** [@fabioang](https://discuss.elastic.co/u/fabioang)\
**Replies:** 7\
**Last updated:** [March 10, 2016, 3:58pm UTC](https://discuss.elastic.co/t/logical-or-between-query-context-and-filter-context-with-elasticsearch-2-x/43745 "2016-03-10T15:58:50Z")

</div>

Let's say I have an index with the following mapping: PUT my\_index { "mappings": { "my\_type": { "properties": { "full\_text": { "type": "string" }, "exact\_value": { …

---

## [Winlogbeat ignores CA certificates in windows certificate store?](https://discuss.elastic.co/t/winlogbeat-ignores-ca-certificates-in-windows-certificate-store/48209)

<div class="topic-metadata">

**Author:** [@JPvRiel](https://discuss.elastic.co/u/JPvRiel)\
**Replies:** 1\
**Last updated:** [April 26, 2016, 1:01am UTC](https://discuss.elastic.co/t/winlogbeat-ignores-ca-certificates-in-windows-certificate-store/48209 "2016-04-26T01:01:47Z")

</div>

My first concern is winlogbeat doesn't notify of any TLS or Certificate Errors, even when I set the log level to 'info'. This is poor form! 2016-04-22T22:34:11+02:00 INFO winlogbeat sucessfully setup. Start running. 20…

---

## [How to disable auto instrumentation for APM FPM Agent?](https://discuss.elastic.co/t/how-to-disable-auto-instrumentation-for-apm-fpm-agent/276548)

<div class="topic-metadata">

**Author:** [@BatJakub](https://discuss.elastic.co/u/BatJakub)\
**Replies:** 0\
**Last updated:** [June 21, 2021, 1:59pm UTC](https://discuss.elastic.co/t/how-to-disable-auto-instrumentation-for-apm-fpm-agent/276548 "2021-06-21T13:59:02Z")

</div>

Hello, Installed latest (1.1) php apm module. It's working as expected, sending data to apm servers and it is possible to visualize the data. But now we would like to customize our transactions and log in different way.…

---

## [Run Filebeats as Non-Root User](https://discuss.elastic.co/t/run-filebeats-as-non-root-user/198374)

<div class="topic-metadata">

**Author:** [@thps](https://discuss.elastic.co/u/thps)\
**Replies:** 2\
**Last updated:** [September 9, 2019, 9:40am UTC](https://discuss.elastic.co/t/run-filebeats-as-non-root-user/198374 "2019-09-09T09:40:44Z")

</div>

Hi folks, i´m trying to run Filebeat as a non root user on RHEL 7.5. What have i done: chown for /etc/filebeat , /var/log/filebeat ,/usr/share/filebeat and /var/lib/filebeat. The user is now owner of this directo…

---

## [Logstash on Docker for AWS ECS](https://discuss.elastic.co/t/logstash-on-docker-for-aws-ecs/158719)

<div class="topic-metadata">

**Author:** [@patrick007](https://discuss.elastic.co/u/patrick007)\
**Replies:** 2\
**Last updated:** [December 3, 2018, 3:21am UTC](https://discuss.elastic.co/t/logstash-on-docker-for-aws-ecs/158719 "2018-12-03T03:21:08Z")

</div>

I want to create a docker image of Logstash make configuration changes in the container I am not able to find how can I set pipeline and config file for Logstash

---

## [Start up logstash](https://discuss.elastic.co/t/start-up-logstash/130852)

<div class="topic-metadata">

**Author:** [@MrNerd](https://discuss.elastic.co/u/MrNerd)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 3:12pm UTC](https://discuss.elastic.co/t/start-up-logstash/130852 "2018-05-07T15:12:59Z")

</div>

Hy there! I have already install logstash 6.2 version and try to start it and it shows an error root@Logstash:~# service logstash status -l ● logstash.service - logstash Loaded: loaded (/etc/systemd/system/logstash.…

---

## [Trouble setting up kibana basic authentication](https://discuss.elastic.co/t/trouble-setting-up-kibana-basic-authentication/282578)

<div class="topic-metadata">

**Author:** [@PeterH32](https://discuss.elastic.co/u/PeterH32)\
**Replies:** 4\
**Last updated:** [August 27, 2021, 9:45am UTC](https://discuss.elastic.co/t/trouble-setting-up-kibana-basic-authentication/282578 "2021-08-27T09:45:01Z")

</div>

I'm trying to setup a simple elastic stack. I have kibana running and two elasticsearch nodes, which seems to be working fine. The elasticsearch nodes are setup with basic auth, however, I can't get the kibana part of i…

---

## [Elastic-Agent not providing data-stream](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433)

<div class="topic-metadata">

**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\
**Replies:** 3\
**Last updated:** [March 15, 2021, 10:33am UTC](https://discuss.elastic.co/t/elastic-agent-not-providing-data-stream/259433 "2021-03-15T10:33:25Z")

</div>

I have a docker with xpac enabled. I documented what I did here: https://github.com/cwobuzz/Setting-up-Docker-Elastic-Kibana-Running-Sysmon-And-Agent/blob/master/.README.md I have agent successfully installed. However …

---

## [SSL configured in Beat but ES gives io.netty.handler.ssl.NotSslRecordException](https://discuss.elastic.co/t/ssl-configured-in-beat-but-es-gives-io-netty-handler-ssl-notsslrecordexception/115421)

<div class="topic-metadata">

**Author:** [@Flaviu](https://discuss.elastic.co/u/Flaviu)\
**Replies:** 3\
**Last updated:** [January 19, 2018, 9:02pm UTC](https://discuss.elastic.co/t/ssl-configured-in-beat-but-es-gives-io-netty-handler-ssl-notsslrecordexception/115421 "2018-01-19T21:02:06Z")

</div>

Hello, I see every ~10 seconds the following elasticsearch error message: \[2018-01-13T22:38:41,877\]\[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[QNk3RNV\] caught exception while handling client http traffic, …

---

## [Display data as metric percentage of document count](https://discuss.elastic.co/t/display-data-as-metric-percentage-of-document-count/215508)

<div class="topic-metadata">

**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\
**Replies:** 8\
**Last updated:** [January 18, 2020, 8:40am UTC](https://discuss.elastic.co/t/display-data-as-metric-percentage-of-document-count/215508 "2020-01-18T08:40:19Z")

</div>

Hi, I want to display the increment between the counts of document in the same index with, of course, different period. So for example I want to calculate the increment between the total count of the last month and the …

[Previous page](https://discuss.elastic.co/top.md?page=656&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=658&per_page=50&period=all)
