# Top **URL:** https://discuss.elastic.co/top.md?page=674&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 675 --- ## [Regex to integer\\float](https://discuss.elastic.co/t/regex-to-integer-float/54333)
**Author:** [@Boris\_Borshevsky](https://discuss.elastic.co/u/Boris_Borshevsky)\ **Replies:** 4\ **Last updated:** [June 23, 2017, 5:25pm UTC](https://discuss.elastic.co/t/regex-to-integer-float/54333 "2017-06-23T17:25:00Z")
Hi, I'm a little new to logstash. I'm trying to figure out if there is a way to convert fields that match specific regex to integer: i thought i could do it with grok but something there is not very clear to me. use c… --- ## [Visualization tied to an absolute date-range](https://discuss.elastic.co/t/visualization-tied-to-an-absolute-date-range/26519)
**Author:** [@bdunbar](https://discuss.elastic.co/u/bdunbar)\ **Replies:** 4\ **Last updated:** [July 30, 2015, 2:25pm UTC](https://discuss.elastic.co/t/visualization-tied-to-an-absolute-date-range/26519 "2015-07-30T14:25:31Z")
I want to create, and save, a visualization tied to an absolute date-range. The object will be to push this to a dashbaord and/or share it as link. The idea is the user can just -look- at it without fiddling with dat… --- ## [Calculate difference in time between two documents in same bucket on Data Table Visualization](https://discuss.elastic.co/t/calculate-difference-in-time-between-two-documents-in-same-bucket-on-data-table-visualization/213870)
**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\ **Replies:** 2\ **Last updated:** [January 7, 2020, 4:43am UTC](https://discuss.elastic.co/t/calculate-difference-in-time-between-two-documents-in-same-bucket-on-data-table-visualization/213870 "2020-01-07T04:43:36Z")
I am struggling to build a Data Table visualization below that captures the timestamp of a prior doc in the same bucket where a field value changed from the current doc, so that I can show the difference in time. For e… --- ## [Time filter is not working](https://discuss.elastic.co/t/time-filter-is-not-working/258000)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 6\ **Last updated:** [December 16, 2020, 10:58pm UTC](https://discuss.elastic.co/t/time-filter-is-not-working/258000 "2020-12-16T22:58:09Z")
Hello, this is our Canvas workpad: As you can see time filter on top of the page does not work correctly regarding the elements presented in the data table. This is the expression of the time filter: This is the… --- ## [Multiline is not displayed in the "Visualize" or "Dashboard" screen](https://discuss.elastic.co/t/multiline-is-not-displayed-in-the-visualize-or-dashboard-screen/216427)
**Author:** [@totopo\_loco](https://discuss.elastic.co/u/totopo_loco)\ **Replies:** 6\ **Last updated:** [February 7, 2020, 11:51pm UTC](https://discuss.elastic.co/t/multiline-is-not-displayed-in-the-visualize-or-dashboard-screen/216427 "2020-02-07T23:51:34Z")
Hello Dear Community, I am having problems to display multi line messages after they were parsed in Kibana 7.5.2. In the visualization and dashboard in Kibana the "message.keyword" is not shown when multi line messag… --- ## [Configuring the default analyzer using the Java API not working](https://discuss.elastic.co/t/configuring-the-default-analyzer-using-the-java-api-not-working/4871)
**Author:** [@Spring\_Ninja](https://discuss.elastic.co/u/Spring_Ninja)\ **Replies:** 6\ **Last updated:** [December 22, 2011, 8:14pm UTC](https://discuss.elastic.co/t/configuring-the-default-analyzer-using-the-java-api-not-working/4871 "2011-12-22T20:14:51Z")
Hi there all... I run ES embedded in my application. Below is the code I use to create the node and client, and configure the default analyzer. Then the code I use to parse a free text query. The analyzer returned… --- ## [Upgrade to 7.8.0 failed](https://discuss.elastic.co/t/upgrade-to-7-8-0-failed/240331)
**Author:** [@ggrocott](https://discuss.elastic.co/u/ggrocott)\ **Replies:** 8\ **Last updated:** [July 9, 2020, 2:24pm UTC](https://discuss.elastic.co/t/upgrade-to-7-8-0-failed/240331 "2020-07-09T14:24:33Z")
I have just upgraded from 6.8 to 7.8. When I restarted the service, it fails: ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Ac… --- ## [Import OpenVas reports into ELK](https://discuss.elastic.co/t/import-openvas-reports-into-elk/238539)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 3:36pm UTC](https://discuss.elastic.co/t/import-openvas-reports-into-elk/238539 "2020-07-08T15:36:05Z")
Hi, \*Note: Running ELK 6.8.10 Standalone Tested on two Greenbone products 1- GSM CE 6.0.7 2- Source Edition running on Debian 10, with the following components: \*gvm-libs-11.0 \*openvas-7.0 \*gvmd-9.0 \*master (ope… --- ## [Watch curl command using Puppet variables](https://discuss.elastic.co/t/watch-curl-command-using-puppet-variables/59711)
**Author:** [@denton64](https://discuss.elastic.co/u/denton64)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 2:18pm UTC](https://discuss.elastic.co/t/watch-curl-command-using-puppet-variables/59711 "2016-09-08T14:18:18Z")
Hey y'all. Running into another issue. Instead of writing huge curls over and over in puppet, I can variablize it depending on the environment. However, it is not like my variable in the JSON. I have tried numerous corre… --- ## [Recommendations for tracking down slow queries](https://discuss.elastic.co/t/recommendations-for-tracking-down-slow-queries/61649)
**Author:** [@mahdouch](https://discuss.elastic.co/u/mahdouch)\ **Replies:** 3\ **Last updated:** [September 29, 2016, 12:44am UTC](https://discuss.elastic.co/t/recommendations-for-tracking-down-slow-queries/61649 "2016-09-29T00:44:26Z")
We have situations where we see big cpu spikes in our ES cluster. Most of the time, a couple of queries will cause the spike. However since our cluster runs thousands of queries/sec, it's hard to determine which query ca… --- ## [Use index and get value from an array in ruby logstash](https://discuss.elastic.co/t/use-index-and-get-value-from-an-array-in-ruby-logstash/85233)
**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\ **Replies:** 1\ **Last updated:** [May 10, 2017, 11:57am UTC](https://discuss.elastic.co/t/use-index-and-get-value-from-an-array-in-ruby-logstash/85233 "2017-05-10T11:57:45Z")
I have 2 input fields "id" =\> \[ \[0\] "0", \[1\] "3", \[2\] "5", \[3\] "7", \[4\] "9" \], "data" =\> \[ \[0\] "01", \[1\] "03", \[2\] "05", \[3\] "07", \[4\] "09" \], My requirement is that I want to get the index of "id" field where value … --- ## [Grok Help](https://discuss.elastic.co/t/grok-help/50606)
**Author:** [@rhyse](https://discuss.elastic.co/u/rhyse)\ **Replies:** 7\ **Last updated:** [April 14, 2017, 8:24am UTC](https://discuss.elastic.co/t/grok-help/50606 "2017-04-14T08:24:14Z")
Hi I'm new to ELK and Grok, so sorry if this seems to be basic, but I just can't seem to get this to work. Basically I am trying to get a few more Cisco ASA logs parsed (others are essentially being passed as per htt… --- ## [Im a bit confused on JDBC Indexes/document\_types](https://discuss.elastic.co/t/im-a-bit-confused-on-jdbc-indexes-document-types/77852)
**Author:** [@matt40413](https://discuss.elastic.co/u/matt40413)\ **Replies:** 7\ **Last updated:** [March 14, 2017, 8:27pm UTC](https://discuss.elastic.co/t/im-a-bit-confused-on-jdbc-indexes-document-types/77852 "2017-03-14T20:27:03Z")
So im a bit new to this admittedly, and i've been reading at exactly what "indexes" are and it mostly makes sense. However as im just using this with the logstash JDBC plugin I only really am referencing JDBC indexes. W… --- ## [Permissions Driving Me Nuts!](https://discuss.elastic.co/t/permissions-driving-me-nuts/94859)
**Author:** [@GV27](https://discuss.elastic.co/u/GV27)\ **Replies:** 2\ **Last updated:** [July 28, 2017, 1:59pm UTC](https://discuss.elastic.co/t/permissions-driving-me-nuts/94859 "2017-07-28T13:59:48Z")
First time LogStash install and I can't get it to run due to permissions issues that I 'm not understanding. Started by complaining about /usr/share/logstash/data not being writable so I fixed that, then ./data/queue s… --- ## [Logstash 2.0.0 released](https://discuss.elastic.co/t/logstash-2-0-0-released/33183)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [October 28, 2015, 7:13pm UTC](https://discuss.elastic.co/t/logstash-2-0-0-released/33183 "2015-10-28T19:13:54Z")
Hey all, today we released Logstash 2.0.0 which works out of the box with Elasticsearch 2.0. Also included are clean shutdown semantics, performance improvements across the board, and Beats support. See more details he… --- ## [Insert json string (logtastsh ) - SOLVED](https://discuss.elastic.co/t/insert-json-string-logtastsh-solved/88926)
**Author:** [@rocavalcante](https://discuss.elastic.co/u/rocavalcante)\ **Replies:** 4\ **Last updated:** [June 12, 2017, 12:40pm UTC](https://discuss.elastic.co/t/insert-json-string-logtastsh-solved/88926 "2017-06-12T12:40:49Z")
Hello, I would like to add a json string in the logstash output, and in the future save the output "call output\_db" in a postgreSQL database, however, I still can not get the initial step of inserting the whole string in… --- ## [The effect of multi-fields and copy\_to on storage size](https://discuss.elastic.co/t/the-effect-of-multi-fields-and-copy-to-on-storage-size/17186)
**Author:** [@Jeremy\_McLain](https://discuss.elastic.co/u/Jeremy_McLain)\ **Replies:** 4\ **Last updated:** [May 12, 2014, 8:20pm UTC](https://discuss.elastic.co/t/the-effect-of-multi-fields-and-copy-to-on-storage-size/17186 "2014-05-12T20:20:24Z")
I want to analyze the same content three different ways and have the ability to return highlighting information in the query results. In order to do highlighting the fields need to be stored. The mapping below contai… --- ## [Multi field aggregation with Elasticsearch-kibana](https://discuss.elastic.co/t/multi-field-aggregation-with-elasticsearch-kibana/105301)
**Author:** [@shethsaam](https://discuss.elastic.co/u/shethsaam)\ **Replies:** 5\ **Last updated:** [October 27, 2017, 6:33pm UTC](https://discuss.elastic.co/t/multi-field-aggregation-with-elasticsearch-kibana/105301 "2017-10-27T18:33:23Z")
With kibana devtools, I am trying to create a query to get unique values from multiple fields into a single bucket. I am using cppy\_to to create a new field and plan to find the unique values with aggregation. I need to … --- ## [How to express Watcher condition on a field which has a numeric key (which has a decimal point in it)?](https://discuss.elastic.co/t/how-to-express-watcher-condition-on-a-field-which-has-a-numeric-key-which-has-a-decimal-point-in-it/37174)
**Author:** [@aliostad](https://discuss.elastic.co/u/aliostad)\ **Replies:** 5\ **Last updated:** [December 16, 2015, 4:54pm UTC](https://discuss.elastic.co/t/how-to-express-watcher-condition-on-a-field-which-has-a-numeric-key-which-has-a-decimal-point-in-it/37174 "2015-12-16T16:54:06Z")
Hi I am trying to set a condition for a watch that looks at a percentile of the response time of the API. The problem is that the field I need to look at in the tree has the value of "90.0" since this is how ES returns p… --- ## [ORA-29263: HTTP protocol error](https://discuss.elastic.co/t/ora-29263-http-protocol-error/95714)
**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\ **Replies:** 3\ **Last updated:** [August 4, 2017, 7:02am UTC](https://discuss.elastic.co/t/ora-29263-http-protocol-error/95714 "2017-08-04T07:02:19Z")
Hi All, I am having two cluster up and running on a single server. One for 2.4.5 and another for 5.5.0 . While hitting utl\_http request from DB for 5.5.0, we are getting the below error whereas it is working fine for 2… --- ## [Visualisations not working following upgrade to Kibana 7.2 - illegal\_argument\_exception\] \[filters\] cannot be empty](https://discuss.elastic.co/t/visualisations-not-working-following-upgrade-to-kibana-7-2-illegal-argument-exception-filters-cannot-be-empty/187608)
**Author:** [@MagicUK](https://discuss.elastic.co/u/MagicUK)\ **Replies:** 6\ **Last updated:** [July 14, 2019, 10:33pm UTC](https://discuss.elastic.co/t/visualisations-not-working-following-upgrade-to-kibana-7-2-illegal-argument-exception-filters-cannot-be-empty/187608 "2019-07-14T22:33:27Z")
Hi, Today we upgraded two of our ElasticSearch clusters to Kibana 7.2.0 from version 7.1.1. In both clusters some of our Kibana visualisations have now stopped working. Looking in syslog, Kibana is producing errors alo… --- ## [Single input and multiple output](https://discuss.elastic.co/t/single-input-and-multiple-output/122632)
**Author:** [@kalla](https://discuss.elastic.co/u/kalla)\ **Replies:** 2\ **Last updated:** [March 6, 2018, 6:54am UTC](https://discuss.elastic.co/t/single-input-and-multiple-output/122632 "2018-03-06T06:54:14Z")
Hi, It is possible to create multiple index with different column values (In elastic search) with 1 input (beats) ? My logstash.conf is: input { beats { port =\> 5044 } } filter { csv { separator =\> "," … --- ## [Watcher action - Dynamic index creation](https://discuss.elastic.co/t/watcher-action-dynamic-index-creation/101759)
**Author:** [@santhosh](https://discuss.elastic.co/u/santhosh)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 8:39pm UTC](https://discuss.elastic.co/t/watcher-action-dynamic-index-creation/101759 "2017-10-04T20:39:37Z")
I have a watcher that sends output to another index named "newindex". How can I set the dynamic value to target index such as date? Following approach doesn't work. "actions": { "index\_payload": { "index": { … --- ## [Info about CVE-2024-37287](https://discuss.elastic.co/t/info-about-cve-2024-37287/364587)
**Author:** [@lorepas](https://discuss.elastic.co/u/lorepas)\ **Replies:** 7\ **Last updated:** [August 26, 2024, 12:51pm UTC](https://discuss.elastic.co/t/info-about-cve-2024-37287/364587 "2024-08-26T12:51:22Z")
Hi all, I noticed the following security update regarding the CVE-2024-37287. I would like to understand if it could be affected also an on-prem installation of Kibana (v7.17.7) made with rpm, so without docker. I'm a … --- ## [How to change replica for system indices](https://discuss.elastic.co/t/how-to-change-replica-for-system-indices/300415)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 6:08pm UTC](https://discuss.elastic.co/t/how-to-change-replica-for-system-indices/300415 "2022-03-29T18:08:32Z")
Hi all, I wanted to change the number of replicas for Elasticsearch system indices. I know that the forbit it but is there a way to override that to increase the number of indices or replicas for elastic system indices… --- ## [Fmutex hanging issue with elasticsearch + rabbitmq river + large dataset (\>100M records)](https://discuss.elastic.co/t/fmutex-hanging-issue-with-elasticsearch-rabbitmq-river-large-dataset-100m-records/7361)
**Author:** [@arimus](https://discuss.elastic.co/u/arimus)\ **Replies:** 7\ **Last updated:** [April 21, 2012, 3:55am UTC](https://discuss.elastic.co/t/fmutex-hanging-issue-with-elasticsearch-rabbitmq-river-large-dataset-100m-records/7361 "2012-04-21T03:55:21Z")
Everything was chugging along, processing about 2k messages/sec and then just hanged. Running strace on the process shows the trace below, which persists even through restarts of elasticsearch. It seems that the is… --- ## [Accessing the inverse index](https://discuss.elastic.co/t/accessing-the-inverse-index/204005)
**Author:** [@ftr](https://discuss.elastic.co/u/ftr)\ **Replies:** 5\ **Last updated:** [October 17, 2019, 3:09pm UTC](https://discuss.elastic.co/t/accessing-the-inverse-index/204005 "2019-10-17T15:09:19Z")
I am currently researching the contents of an index on an old 1.7.1 ES cluster, in relation to GDPR related issues. In other words, I need to know exactly what can be retrieved from the cluster. I have come up against a… --- ## [Ruby code to add entry into an array?](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046)
**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\ **Replies:** 3\ **Last updated:** [February 3, 2021, 5:37pm UTC](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046 "2021-02-03T17:37:10Z")
Hi, I'm using logstash as a method posting tickets into our ticketing system using data from an elasticsearch index. The API for out ticketing system expects all of the custom fields for our ticket to come through as an … --- ## [Elasticsearch graph query not working](https://discuss.elastic.co/t/elasticsearch-graph-query-not-working/51383)
**Author:** [@James\_Crone](https://discuss.elastic.co/u/James_Crone)\ **Replies:** 3\ **Last updated:** [May 31, 2016, 2:19pm UTC](https://discuss.elastic.co/t/elasticsearch-graph-query-not-working/51383 "2016-05-31T14:19:06Z")
i am new in elastic search graph.i have installed successfully but when i try to choose index name,fields etc no data return. Here's my query: { "query": { "query\_string": { "default\_field": "\_al… --- ## [Understanding index vs mapping](https://discuss.elastic.co/t/understanding-index-vs-mapping/51291)
**Author:** [@daveyx](https://discuss.elastic.co/u/daveyx)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 10:15am UTC](https://discuss.elastic.co/t/understanding-index-vs-mapping/51291 "2016-05-30T10:15:10Z")
Hi, i am a bit confused and do not understand what is written here: https://www.elastic.co/guide/en/elasticsearch/reference/current/\_basic\_concepts.html#\_index First question: Is "type" the same as a "mapping" ? Se… --- ## [Plugin call returns "No handler found for uri"](https://discuss.elastic.co/t/plugin-call-returns-no-handler-found-for-uri/14289)
**Author:** [@Luiz\_Henrique\_Zambom](https://discuss.elastic.co/u/Luiz_Henrique_Zambom)\ **Replies:** 4\ **Last updated:** [November 8, 2013, 3:21pm UTC](https://discuss.elastic.co/t/plugin-call-returns-no-handler-found-for-uri/14289 "2013-11-08T15:21:47Z")
Hello: I am trying to develop a simple plugin to count terms in a repository using Lucene and expose the result through a elastic search RestHandler. I successfully went through these plugins tutorial: http… --- ## [Logstash not getting data from fliebeat . Logstash logs are empty](https://discuss.elastic.co/t/logstash-not-getting-data-from-fliebeat-logstash-logs-are-empty/56053)
**Author:** [@ramkrishnayadav](https://discuss.elastic.co/u/ramkrishnayadav)\ **Replies:** 2\ **Last updated:** [July 22, 2016, 3:18am UTC](https://discuss.elastic.co/t/logstash-not-getting-data-from-fliebeat-logstash-logs-are-empty/56053 "2016-07-22T03:18:29Z")
Hello, I am trying to send some logs from filebeat to logstash output. problem is beats is sending the events to the logstash server (I can see in the debug logs ). But log stash does not see anything coming . Even th… --- ## [Transform each array item (nested object) in a new document - Splitting a field before removing it](https://discuss.elastic.co/t/transform-each-array-item-nested-object-in-a-new-document-splitting-a-field-before-removing-it/169851)
**Author:** [@Lucas\_Porto](https://discuss.elastic.co/u/Lucas_Porto)\ **Replies:** 7\ **Last updated:** [February 25, 2019, 4:43pm UTC](https://discuss.elastic.co/t/transform-each-array-item-nested-object-in-a-new-document-splitting-a-field-before-removing-it/169851 "2019-02-25T16:43:54Z")
Hi all, I have a index with a nested field like this: { "id\_single\_profile": "14e98c40-d5ed-11e8-aa2a-d991a7f7e009", "id\_audience": "3c9b46e4-1b10-4ad4-9a68-ae371034adfe", "activities": \[ … --- ## [Getting Error while Nuxeo Client trying to access Elasticsearch on same host or localhost](https://discuss.elastic.co/t/getting-error-while-nuxeo-client-trying-to-access-elasticsearch-on-same-host-or-localhost/101790)
**Author:** [@mvk786](https://discuss.elastic.co/u/mvk786)\ **Replies:** 7\ **Last updated:** [September 26, 2017, 9:09am UTC](https://discuss.elastic.co/t/getting-error-while-nuxeo-client-trying-to-access-elasticsearch-on-same-host-or-localhost/101790 "2017-09-26T09:09:44Z")
\[2017-09-26 11:43:02,429\]\[INFO \]\[cluster.routing.allocation\] \[nuxeo\] Cluster health status changed from \[RED\] to \[YELLOW\] (reason: \[shards started \[\[.marvel-es-1-2017.09.25\]\[0\], \[.marvel-es-data-1\]\[0\], \[.marvel-es-1-2017… --- ## [Comparing 2 dates that are in different fields](https://discuss.elastic.co/t/comparing-2-dates-that-are-in-different-fields/52379)
**Author:** [@Storm91](https://discuss.elastic.co/u/Storm91)\ **Replies:** 1\ **Last updated:** [June 10, 2016, 12:10am UTC](https://discuss.elastic.co/t/comparing-2-dates-that-are-in-different-fields/52379 "2016-06-10T00:10:32Z")
Hello everyone, I have a file with several fields. I have a field " date.start" and a field "date.end" which contains dates under this format in the json = " 2016-07-01T00:00:00-06:00" I am trying to create a visua… --- ## [How to change app/kibana in kibana 6.8 URL to different name like app/devCustom](https://discuss.elastic.co/t/how-to-change-app-kibana-in-kibana-6-8-url-to-different-name-like-app-devcustom/200870)
**Author:** [@devesh37](https://discuss.elastic.co/u/devesh37)\ **Replies:** 5\ **Last updated:** [October 28, 2019, 11:21am UTC](https://discuss.elastic.co/t/how-to-change-app-kibana-in-kibana-6-8-url-to-different-name-like-app-devcustom/200870 "2019-10-28T11:21:50Z")
I want to change the name of app/kibana in kibana app. I have tried to cahnge the title and id in kibana plugin of src/legacy/core\_plugin/kibana folder. but nothing got changed. Please help me with steps or idea of ch… --- ## [LDAP Authentication - throws BASIC REALM 401 error](https://discuss.elastic.co/t/ldap-authentication-throws-basic-realm-401-error/111703)
**Author:** [@vigneshaj](https://discuss.elastic.co/u/vigneshaj)\ **Replies:** 5\ **Last updated:** [December 18, 2017, 11:31am UTC](https://discuss.elastic.co/t/ldap-authentication-throws-basic-realm-401-error/111703 "2017-12-18T11:31:57Z")
Hi Team I have set the below configuration in elasticsearch.yml for LDAP authentication. Even though there is no basic realm in config, Error returned is from basic security as below. CODE security: authc: realms: … --- ## [Sending mltiple fields per file... possible?](https://discuss.elastic.co/t/sending-mltiple-fields-per-file-possible/586)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 5\ **Last updated:** [May 13, 2015, 10:12am UTC](https://discuss.elastic.co/t/sending-mltiple-fields-per-file-possible/586 "2015-05-13T10:12:25Z")
Hi forum.... seems this is the first post here!!! OK... By reading blogs and howtos, I'm confident we can make a cluster of servers to send their logs, and setup sending a "type" field, with a value, in order to distin… --- ## [Elastic Cloud on Kubernetes 1.1.0 security update](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-1-1-0-security-update/230221)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [April 28, 2020, 5:23pm UTC](https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-1-1-0-security-update/230221 "2020-04-28T17:23:35Z")
Elastic Cloud on Kubernetes insecure password generation (ESA-2020-03) Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determi… --- ## [Elastic search and IBM Qradar integration](https://discuss.elastic.co/t/elastic-search-and-ibm-qradar-integration/177772)
**Author:** [@John.s](https://discuss.elastic.co/u/John.s)\ **Replies:** 0\ **Last updated:** [April 21, 2019, 6:42pm UTC](https://discuss.elastic.co/t/elastic-search-and-ibm-qradar-integration/177772 "2019-04-21T18:42:26Z")
Hello Team, We are running IBM Qradar as our SIEM solution. But we are planning to add ELK stack as well for dashboard creation and some particular application review. Ours is a distributed environment , We have couple… --- ## [Error calculating CPU time change for docker (filebeat 6.4.2)](https://discuss.elastic.co/t/error-calculating-cpu-time-change-for-docker-filebeat-6-4-2/155279)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 0\ **Last updated:** [November 4, 2018, 1:32am UTC](https://discuss.elastic.co/t/error-calculating-cpu-time-change-for-docker-filebeat-6-4-2/155279 "2018-11-04T01:32:18Z")
Hi, Seeing some errors on metricbeat v6.4.2, on collection and sending of CPU metrics. My configuration is largely the same as what is provided here, other than swapping out appropriate environment config. https://www.… --- ## [Remove \_all enabled false from mapping without reindex](https://discuss.elastic.co/t/remove-all-enabled-false-from-mapping-without-reindex/151209)
**Author:** [@jiri](https://discuss.elastic.co/u/jiri)\ **Replies:** 0\ **Last updated:** [October 5, 2018, 12:44pm UTC](https://discuss.elastic.co/t/remove-all-enabled-false-from-mapping-without-reindex/151209 "2018-10-05T12:44:54Z")
Hi all, we have moved to ES 6.4.1 from ES 5.x where we used \_all: {enabled: false} in mapping. The index is working fine but deprecation log is growing quickly with the messages: \[WARN \]\[o.e.d.i.m.AllFieldMapper \] \[\_al… --- ## [Unavailable\_shards\_exception primary shard is not active](https://discuss.elastic.co/t/unavailable-shards-exception-primary-shard-is-not-active/131029)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 1\ **Last updated:** [May 8, 2018, 4:12pm UTC](https://discuss.elastic.co/t/unavailable-shards-exception-primary-shard-is-not-active/131029 "2018-05-08T16:12:01Z")
One of our logstash servers suddenly essentially sropped processing our logs and started displaying the log entries mentioned in the title. The index in question appears to be ok according to elasticsearch. Both are ve… --- ## [Error in APM PHP agent](https://discuss.elastic.co/t/error-in-apm-php-agent/265999)
**Author:** [@rgb3](https://discuss.elastic.co/u/rgb3)\ **Replies:** 2\ **Last updated:** [March 8, 2021, 10:21pm UTC](https://discuss.elastic.co/t/error-in-apm-php-agent/265999 "2021-03-08T22:21:07Z")
Kibana version: 7.11.1 Elasticsearch version: 7.11.1 APM Server version: 7.11.1 APM Agent language and version: PHP 1.0 beta Browser version: N/A, but Firefox 86.0 Original install method (e.g. download page, yum, d… --- ## [License in Test and Prod environment \[Solved\]](https://discuss.elastic.co/t/license-in-test-and-prod-environment-solved/69452)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 2\ **Last updated:** [January 13, 2017, 7:05pm UTC](https://discuss.elastic.co/t/license-in-test-and-prod-environment-solved/69452 "2017-01-13T19:05:40Z")
Hy, I installed x-pack on my testsystem and gave it the basic license. I should install it in our prodsystem as well. Can I use the same license or should I get a new one? Sorry for asking that silly, but I couldn't … --- ## [Canvas ESSQL current date - 30 days query](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486)
**Author:** [@samgs](https://discuss.elastic.co/u/samgs)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 12:14pm UTC](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486 "2019-08-23T12:14:21Z")
Hello! I'm trying to make a relative date query in elasticsearch SQL. I have this code: SELECT \* FROM index WHERE date \> CURRENT\_DATE - INTERVAL '30' DAY Which seems to be correct. However when I run it, it gives the f… --- ## [About aggregations request with scroll, only the first results can be output?](https://discuss.elastic.co/t/about-aggregations-request-with-scroll-only-the-first-results-can-be-output/117300)
**Author:** [@Pelin\_li](https://discuss.elastic.co/u/Pelin_li)\ **Replies:** 4\ **Last updated:** [January 27, 2018, 1:30pm UTC](https://discuss.elastic.co/t/about-aggregations-request-with-scroll-only-the-first-results-can-be-output/117300 "2018-01-27T13:30:14Z")
Version Elasticsearch: "version" : { "number" : "5.0.0", "build\_hash" : "253032b", "build\_date" : "2016-10-26T05:11:34.737Z", "build\_snapshot" : false, "lucene\_version" : "6.2.0" } Java: openjdk … --- ## [Error with kibana 4.2.0, Elasticsearch 2.0.0 and Logstash 2.0.0](https://discuss.elastic.co/t/error-with-kibana-4-2-0-elasticsearch-2-0-0-and-logstash-2-0-0/34113)
**Author:** [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Replies:** 4\ **Last updated:** [November 9, 2015, 4:23pm UTC](https://discuss.elastic.co/t/error-with-kibana-4-2-0-elasticsearch-2-0-0-and-logstash-2-0-0/34113 "2015-11-09T16:23:55Z")
Hi, I installed recent versions of kibana, elasticsearch and logstash, but when I execute logstash configuration file for my logs, gives me this error: NotImplementedError: stat.st\_dev unsupported or native support f… --- ## ['group by field' in Visual builder Table](https://discuss.elastic.co/t/group-by-field-in-visual-builder-table/141004)
**Author:** [@indijanc](https://discuss.elastic.co/u/indijanc)\ **Replies:** 2\ **Last updated:** [July 25, 2018, 6:02am UTC](https://discuss.elastic.co/t/group-by-field-in-visual-builder-table/141004 "2018-07-25T06:02:47Z")
Hey all, Does anyone know if the table in visual builder allows multiple buckets based on terms? I can use the Group By Field to create the initial bucket but I can't seem to find any options for adding a sub-bucket sim… --- ## [Fatal error: \[config validation of server.uuid\]: must be a valid uuid](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-uuid-must-be-a-valid-uuid/237866)
**Author:** [@pr0b3l](https://discuss.elastic.co/u/pr0b3l)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 8:11am UTC](https://discuss.elastic.co/t/fatal-error-config-validation-of-server-uuid-must-be-a-valid-uuid/237866 "2020-06-22T08:11:06Z")
Hello guys! I setup prod.server (7.6 version all stack): Using Kibana in a production environment | Kibana Guide \[7.6\] | Elastic Settings unique across each Kibana instance: server.uuid server.name server.uuid in … [Previous page](https://discuss.elastic.co/top.md?page=673&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=675&per_page=50&period=all)