# Top

**URL:** https://discuss.elastic.co/top.md?page=701&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 702

---

## [Can i install ELK stack on AIX server?](https://discuss.elastic.co/t/can-i-install-elk-stack-on-aix-server/68854)

<div class="topic-metadata">

**Author:** [@bini](https://discuss.elastic.co/u/bini)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 12:47pm UTC](https://discuss.elastic.co/t/can-i-install-elk-stack-on-aix-server/68854 "2016-12-13T12:47:38Z")

</div>

Hi, Can i install ELK stack on AIX server? i have checked the compatibility matrix of Elasticsearch but i couldn't locate AIX there. Thanks, Bini.

---

## [Filter JSON content in field and parse target with existing mapping](https://discuss.elastic.co/t/filter-json-content-in-field-and-parse-target-with-existing-mapping/132350)

<div class="topic-metadata">

**Author:** [@baba](https://discuss.elastic.co/u/baba)\
**Replies:** 5\
**Last updated:** [May 17, 2018, 4:39pm UTC](https://discuss.elastic.co/t/filter-json-content-in-field-and-parse-target-with-existing-mapping/132350 "2018-05-17T16:39:09Z")

</div>

Hi, I'm trying to filter a second type of messages coming in my input queue. The difference between messages is that in the second type of messages the log is embedded in a JSON as value of the "Message" field. I confi…

---

## [About host field value](https://discuss.elastic.co/t/about-host-field-value/39970)

<div class="topic-metadata">

**Author:** [@miko370](https://discuss.elastic.co/u/miko370)\
**Replies:** 1\
**Last updated:** [January 24, 2016, 5:37pm UTC](https://discuss.elastic.co/t/about-host-field-value/39970 "2016-01-24T17:37:04Z")

</div>

Hi. I am using udp input plugin to listen to syslog messages. The documentation says that the host field is the "The address which logstash will listen on". This is exacly what I need, but instead, host value is the I…

---

## [Elastic LDAP config issues](https://discuss.elastic.co/t/elastic-ldap-config-issues/252880)

<div class="topic-metadata">

**Author:** [@dmartinezz23](https://discuss.elastic.co/u/dmartinezz23)\
**Replies:** 8\
**Last updated:** [October 26, 2020, 4:09pm UTC](https://discuss.elastic.co/t/elastic-ldap-config-issues/252880 "2020-10-26T16:09:39Z")

</div>

Hello, I’m working on setting up Ldap/AD auth. However, I’m not sure what I’m missing here. In terms of logging, I’m not seeing much of anything in Kibana or Elasticsearch at all. Mainly due to the logs getting clobbered…

---

## [Logstashの起動に掛かる時間について](https://discuss.elastic.co/t/logstash/154382)

<div class="topic-metadata">

**Author:** [@drifting\_school](https://discuss.elastic.co/u/drifting_school)\
**Replies:** 4\
**Last updated:** [October 31, 2018, 10:23am UTC](https://discuss.elastic.co/t/logstash/154382 "2018-10-31T10:23:03Z")

</div>

elasticsearchへのログ送信のためにlogstashの導入を検討してます。 ログ解析用confファイルの実装とテスト実行( logstash -f \<confファイルパス\> )のイテレーションでご相談です。 手元のPCでテスト実行( logstash -f \<confファイルパス\> ) を実行すると outputが実行されるまでに15～20秒程度の時間が毎回発生します。 elasticasearchへの送信は行わない動…

---

## [How to parse logs in same order as in log files](https://discuss.elastic.co/t/how-to-parse-logs-in-same-order-as-in-log-files/133982)

<div class="topic-metadata">

**Author:** [@yoga-sara](https://discuss.elastic.co/u/yoga-sara)\
**Replies:** 4\
**Last updated:** [June 8, 2018, 6:25am UTC](https://discuss.elastic.co/t/how-to-parse-logs-in-same-order-as-in-log-files/133982 "2018-06-08T06:25:06Z")

</div>

I configured my ELK setup with 1 index.It collects logs from 25 machines. The average log event count is 2.5 lacs/3 hrs. Every 5 min 5000 event parsing sometimes it increase. My configuration like Filebeat =\> Logstash =\>…

---

## [Any way to compress output before sending to elasticsearch?](https://discuss.elastic.co/t/any-way-to-compress-output-before-sending-to-elasticsearch/48056)

<div class="topic-metadata">

**Author:** [@rahin88](https://discuss.elastic.co/u/rahin88)\
**Replies:** 3\
**Last updated:** [April 29, 2016, 7:01am UTC](https://discuss.elastic.co/t/any-way-to-compress-output-before-sending-to-elasticsearch/48056 "2016-04-29T07:01:02Z")

</div>

Hi All, Still new to ELK. I have logstash running on my machine generating 1mbps of plain text data(with lot of redundancy of text in logs). Is there a way to encode/compress this output so it consumes less bandwidth a…

---

## [Kibana Line Chart - Dot Position/Size Bug?](https://discuss.elastic.co/t/kibana-line-chart-dot-position-size-bug/132087)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 5\
**Last updated:** [May 17, 2018, 7:59am UTC](https://discuss.elastic.co/t/kibana-line-chart-dot-position-size-bug/132087 "2018-05-17T07:59:55Z")

</div>

Kibana + ES 6.2.2 (Windows) I have a visualisation which shows jobs with their duration in minutes on the y-axis and circles showing how many records were processed. There seems to be a problem however: some of the cir…

---

## [Hourly Shards Elasticsearch/Kibana](https://discuss.elastic.co/t/hourly-shards-elasticsearch-kibana/17908)

<div class="topic-metadata">

**Author:** [@Kellan\_Strong](https://discuss.elastic.co/u/Kellan_Strong)\
**Replies:** 5\
**Last updated:** [June 5, 2014, 11:21pm UTC](https://discuss.elastic.co/t/hourly-shards-elasticsearch-kibana/17908 "2014-06-05T23:21:31Z")

</div>

Hello All, I have a question about hourly sharding with either logstash or fluentd. Since we are, or will be using, a set up called FLEKZ. I am trying to integrate both logstash and fluentd together, which work we…

---

## [Nofile -\> limit for open file under docker container for elasticsearch user](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [March 15, 2022, 6:51pm UTC](https://discuss.elastic.co/t/nofile-limit-for-open-file-under-docker-container-for-elasticsearch-user/299764 "2022-03-15T18:51:46Z")

</div>

Hi I read this post https://discuss.elastic.co/t/docs-nofile-or-nproc/142049/2 regarding construct for nofile vs nproc. Let me describe my case I've provisioned by docker compose service for elasticsearch: ulimits: …

---

## [Getting Kibana to tell me which log entries are the largest](https://discuss.elastic.co/t/getting-kibana-to-tell-me-which-log-entries-are-the-largest/113703)

<div class="topic-metadata">

**Author:** [@lanceblais](https://discuss.elastic.co/u/lanceblais)\
**Replies:** 2\
**Last updated:** [January 3, 2018, 2:51pm UTC](https://discuss.elastic.co/t/getting-kibana-to-tell-me-which-log-entries-are-the-largest/113703 "2018-01-03T14:51:29Z")

</div>

Hello, We log JSON payload entries to Elasticsearch via Heka and use Kibana to visualize those entries. We're getting some large payloads and we want to work on making them smaller, for that, we need an easy way to kno…

---

## [Error(out of memory): running "make update"](https://discuss.elastic.co/t/error-out-of-memory-running-make-update/157597)

<div class="topic-metadata">

**Author:** [@gaetanoziri](https://discuss.elastic.co/u/gaetanoziri)\
**Replies:** 7\
**Last updated:** [November 30, 2018, 3:14pm UTC](https://discuss.elastic.co/t/error-out-of-memory-running-make-update/157597 "2018-11-30T15:14:01Z")

</div>

Hi, I am trying to build a custom filebeat module following this guide. As the last step the command make update returns: Error: running "make update" failed with exit code 2 I've no idea what's causing this problem. …

---

## [ES throws 404 File or directory not found](https://discuss.elastic.co/t/es-throws-404-file-or-directory-not-found/144812)

<div class="topic-metadata">

**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\
**Replies:** 6\
**Last updated:** [August 17, 2018, 11:23am UTC](https://discuss.elastic.co/t/es-throws-404-file-or-directory-not-found/144812 "2018-08-17T11:23:58Z")

</div>

Hi, We recently saw a customer report indexing failures with 404 File or directory not found. This is happening in ES version 5.6. Any help here what is contributing to this failure ? Details present in the response …

---

## [Kibana not showing accurate count](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405)

<div class="topic-metadata">

**Author:** [@wdaburu](https://discuss.elastic.co/u/wdaburu)\
**Replies:** 6\
**Last updated:** [March 14, 2018, 12:36am UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405 "2018-03-14T00:36:35Z")

</div>

Hi, im new to this ELK and i hope that the community can guide men on solving this. OK so the data i got is from the xml file input on logstash then transferred to the elasticsearch, in kibana i do the manual index patte…

---

## [Issue of showing GMT event in kibana](https://discuss.elastic.co/t/issue-of-showing-gmt-event-in-kibana/60476)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 6\
**Last updated:** [October 17, 2016, 6:20am UTC](https://discuss.elastic.co/t/issue-of-showing-gmt-event-in-kibana/60476 "2016-10-17T06:20:12Z")

</div>

Hi Team, I have several log event with GMT time period. Initially we are converting the event time while inserting in elasticsearch because the log file is creating in PST server but event time is in GMT. we are using t…

---

## [ElasticSearch 7.0 Cluster Error](https://discuss.elastic.co/t/elasticsearch-7-0-cluster-error/179227)

<div class="topic-metadata">

**Author:** [@dfoley84](https://discuss.elastic.co/u/dfoley84)\
**Replies:** 4\
**Last updated:** [May 1, 2019, 9:42pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-cluster-error/179227 "2019-05-01T21:42:40Z")

</div>

Hi Currently, I am currently configuration a 4 Node cluster with 1 Master and 3 data Nodes within a Cluster When i do a curl http://:9200/\_cat/nodes?v I am getting the following {"error":{"root\_cause":\[{"type":"master\_…

---

## [Create return 409 on non conflict items](https://discuss.elastic.co/t/create-return-409-on-non-conflict-items/34484)

<div class="topic-metadata">

**Author:** [@fastae](https://discuss.elastic.co/u/fastae)\
**Replies:** 4\
**Last updated:** [November 13, 2015, 9:39am UTC](https://discuss.elastic.co/t/create-return-409-on-non-conflict-items/34484 "2015-11-13T09:39:32Z")

</div>

We are storing data from wearable devices to ES, and having a weird situation here. We are 'create'ing the document and we are getting 409(DocumentAlreadyExistsException) when there isn't any existing document at all. …

---

## [Block index creation?](https://discuss.elastic.co/t/block-index-creation/9648)

<div class="topic-metadata">

**Author:** [@Andrej](https://discuss.elastic.co/u/Andrej)\
**Replies:** 4\
**Last updated:** [November 12, 2012, 10:19am UTC](https://discuss.elastic.co/t/block-index-creation/9648 "2012-11-12T10:19:09Z")

</div>

Hi, probably a simple question, I couldnt find anything in the update settings api: I can block writing or reading, but is there a way to allow writing and reading on a cluster but block creation of new indices? I…

---

## [Cluster turning into green state takes long time](https://discuss.elastic.co/t/cluster-turning-into-green-state-takes-long-time/202440)

<div class="topic-metadata">

**Author:** [@AKSHAY\_ARDAK](https://discuss.elastic.co/u/AKSHAY_ARDAK)\
**Replies:** 8\
**Last updated:** [October 7, 2019, 8:59pm UTC](https://discuss.elastic.co/t/cluster-turning-into-green-state-takes-long-time/202440 "2019-10-07T20:59:10Z")

</div>

Hi Folks, Currently facing issue in the elasticsearch cluster During the upgrade/restart of the nodes in the cluster ,it takes long time to turn the cluster into green state from yellow. I am following the below steps…

---

## [How to troubleshoot Windows Filebeat to logstash](https://discuss.elastic.co/t/how-to-troubleshoot-windows-filebeat-to-logstash/165690)

<div class="topic-metadata">

**Author:** [@Freebird](https://discuss.elastic.co/u/Freebird)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 4:34am UTC](https://discuss.elastic.co/t/how-to-troubleshoot-windows-filebeat-to-logstash/165690 "2019-01-29T04:34:53Z")

</div>

Hi, I'm very new to all this and having problems figuring some basics. I got elastic and kibana running, and then got logstash running and taking stdin and giving me output to stdout. Now I set logstash to (hopefully)…

---

## [Create new index or update existing mapping to dynamic using Java API](https://discuss.elastic.co/t/create-new-index-or-update-existing-mapping-to-dynamic-using-java-api/104996)

<div class="topic-metadata">

**Author:** [@eyasso](https://discuss.elastic.co/u/eyasso)\
**Replies:** 5\
**Last updated:** [October 25, 2017, 8:04am UTC](https://discuss.elastic.co/t/create-new-index-or-update-existing-mapping-to-dynamic-using-java-api/104996 "2017-10-25T08:04:00Z")

</div>

Hello, Is there an option to create new index using High level REST client with mapping set to dynamic? Thanks?

---

## [Cluster has pending tasks. Cannot update cluster settings](https://discuss.elastic.co/t/cluster-has-pending-tasks-cannot-update-cluster-settings/14706)

<div class="topic-metadata">

**Author:** [@Jenny\_Sivapalan](https://discuss.elastic.co/u/Jenny_Sivapalan)\
**Replies:** 5\
**Last updated:** [December 6, 2013, 5:55pm UTC](https://discuss.elastic.co/t/cluster-has-pending-tasks-cannot-update-cluster-settings/14706 "2013-12-06T17:55:58Z")

</div>

Hello, We've managed to get our cluster into a state where it has pending tasks and we unable to update cluster settings. Has anyone else experienced this and be able to help us to remove these tasks? We're thi…

---

## [Newbie question: how to reindex with field value change?](https://discuss.elastic.co/t/newbie-question-how-to-reindex-with-field-value-change/252655)

<div class="topic-metadata">

**Author:** [@Admak](https://discuss.elastic.co/u/Admak)\
**Replies:** 2\
**Last updated:** [October 22, 2020, 8:10am UTC](https://discuss.elastic.co/t/newbie-question-how-to-reindex-with-field-value-change/252655 "2020-10-22T08:10:36Z")

</div>

Hi! First, sorry for the newb question, however 2h of googling proved i'm either unqualified or explicitly trying to do the task wrong way I'm trying to reindex with new mappings, however due to field data type change,…

---

## [Update by query with params](https://discuss.elastic.co/t/update-by-query-with-params/239413)

<div class="topic-metadata">

**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 2:19pm UTC](https://discuss.elastic.co/t/update-by-query-with-params/239413 "2020-07-01T14:19:56Z")

</div>

\[ESK 7.6.2\] We're set country name by phone prefix. if for some reason we hanve't the prefix we're putting "Missing Country Name" string. I built a simple update by query in Kiban dev-tool and it's worked, now I want t…

---

## [Getting error unpacking config data: more than one namespace configured accessing 'output' (source:'/usr/local/etc/filebeat/filebeat.yml')](https://discuss.elastic.co/t/getting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-usr-local-etc-filebeat-filebeat-yml/213346)

<div class="topic-metadata">

**Author:** [@sakshi1234](https://discuss.elastic.co/u/sakshi1234)\
**Replies:** 2\
**Last updated:** [December 31, 2019, 6:19am UTC](https://discuss.elastic.co/t/getting-error-unpacking-config-data-more-than-one-namespace-configured-accessing-output-source-usr-local-etc-filebeat-filebeat-yml/213346 "2019-12-31T06:19:27Z")

</div>

Hi, When i am running below command: filebeat modules enable logstash i m getting unpacking config data: more than one namespace configured accessing 'output' (source:'/usr/local/etc/filebeat/filebeat.yml') Can some…

---

## [Filter dropdown in discover shows only 10 values](https://discuss.elastic.co/t/filter-dropdown-in-discover-shows-only-10-values/133315)

<div class="topic-metadata">

**Author:** [@aman\_pcs](https://discuss.elastic.co/u/aman_pcs)\
**Replies:** 2\
**Last updated:** [May 25, 2018, 4:52pm UTC](https://discuss.elastic.co/t/filter-dropdown-in-discover-shows-only-10-values/133315 "2018-05-25T16:52:52Z")

</div>

i have an index which has a field which has 11 different values, but when i try to add a filter for that field in the discover tab the drop down shows only 10 values. My field is mapped as a keyword and i have the correc…

---

## [Store Compression](https://discuss.elastic.co/t/store-compression/27590)

<div class="topic-metadata">

**Author:** [@blakeparker](https://discuss.elastic.co/u/blakeparker)\
**Replies:** 2\
**Last updated:** [May 27, 2017, 1:17am UTC](https://discuss.elastic.co/t/store-compression/27590 "2017-05-27T01:17:56Z")

</div>

I have my ES cluster stored on a Pure Storage array. The Pure array has inline dedup and compression and performs best when the data on it is not compressed or encrypted. The ES compression feature is causing issues wi…

---

## [RoutingMissingException](https://discuss.elastic.co/t/routingmissingexception/7661)

<div class="topic-metadata">

**Author:** [@nmz](https://discuss.elastic.co/u/nmz)\
**Replies:** 2\
**Last updated:** [May 14, 2012, 5:37am UTC](https://discuss.elastic.co/t/routingmissingexception/7661 "2012-05-14T05:37:53Z")

</div>

While indexing the document : name I get RoutingMissingException, can any one help? Exception in thread "Main Thread" org.elasticsearch.action.RoutingMissingException: routing is required for \[abc\]/\[name\]/\[A-1401…

---

## [Help to improve Kibana visuals performance](https://discuss.elastic.co/t/help-to-improve-kibana-visuals-performance/111720)

<div class="topic-metadata">

**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 7:46am UTC](https://discuss.elastic.co/t/help-to-improve-kibana-visuals-performance/111720 "2017-12-19T07:46:16Z")

</div>

Hi, We have an ES cluster with 4 nodes - 3 data nodes of which 2 act as master node also and 1 coordinating node on which Kibana is configured. We are loading data into Elasticsearch index from Kafka using confluent el…

---

## [Disable Coord in Bool query with query DSL](https://discuss.elastic.co/t/disable-coord-in-bool-query-with-query-dsl/3099)

<div class="topic-metadata">

**Author:** [@Jacob\_Robertson\_2](https://discuss.elastic.co/u/Jacob_Robertson_2)\
**Replies:** 3\
**Last updated:** [July 14, 2010, 7:09pm UTC](https://discuss.elastic.co/t/disable-coord-in-bool-query-with-query-dsl/3099 "2010-07-14T19:09:15Z")

</div>

I am using a bool query to combine several dis\_max queries. I was getting some results in a rather unexpected order and went to check out the JSON returned by elasticsearch. Much to my surprise, on about half of the d…

---

## [Not able to search POS text in ElasticSearch](https://discuss.elastic.co/t/not-able-to-search-pos-text-in-elasticsearch/131020)

<div class="topic-metadata">

**Author:** [@veerabhadraiah](https://discuss.elastic.co/u/veerabhadraiah)\
**Replies:** 6\
**Last updated:** [May 9, 2018, 12:29pm UTC](https://discuss.elastic.co/t/not-able-to-search-pos-text-in-elasticsearch/131020 "2018-05-09T12:29:07Z")

</div>

Hi, In my data have a text like 'POS1','POS2','POS3' using match criteria am not able search with text like 'POS' Example : { "query":{ "bool":{ "must":\[ { "mult…

---

## [Filebeat 5.x : Dependencies](https://discuss.elastic.co/t/filebeat-5-x-dependencies/47394)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 6\
**Last updated:** [April 25, 2016, 7:51pm UTC](https://discuss.elastic.co/t/filebeat-5-x-dependencies/47394 "2016-04-25T19:51:46Z")

</div>

Hi, Does filebeat 5.0 require a minimum version of logstash? I'm using logstash 2.1.x... Regards, David

---

## [How to add filter on searching data on index using java?](https://discuss.elastic.co/t/how-to-add-filter-on-searching-data-on-index-using-java/6392)

<div class="topic-metadata">

**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\
**Replies:** 6\
**Last updated:** [January 18, 2012, 9:39am UTC](https://discuss.elastic.co/t/how-to-add-filter-on-searching-data-on-index-using-java/6392 "2012-01-18T09:39:40Z")

</div>

Hi I have used following mapping to define custom analyzer at index level used mapping: https://gist.github.com/1619313 I am using following java code to search data: String indexName="test1"; …

---

## [How to configure index to ignore unmapped fields](https://discuss.elastic.co/t/how-to-configure-index-to-ignore-unmapped-fields/223352)

<div class="topic-metadata">

**Author:** [@hemamalini](https://discuss.elastic.co/u/hemamalini)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-configure-index-to-ignore-unmapped-fields/223352 "2020-03-13T16:38:51Z")

</div>

Hi All, I am using elastic search 5.6 for Apache Metron (They support 5.6). Is there any way to configure index to ignore unmapped fields for ES template and index

---

## [Elasticsearch version incompatible with this version of Curator](https://discuss.elastic.co/t/elasticsearch-version-incompatible-with-this-version-of-curator/170289)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 1\
**Last updated:** [February 28, 2019, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-version-incompatible-with-this-version-of-curator/170289 "2019-02-28T11:58:02Z")

</div>

Hello! Im trying to delet indices with Curator and get this error: root@elk:~# /usr/bin/curator --config /etc/curator/config.yml /etc/curator/action.yml 2019-02-28 07:45:21,553 INFO Preparing Action ID: 1, "close"…

---

## [Terms Aggregation of long value](https://discuss.elastic.co/t/terms-aggregation-of-long-value/100223)

<div class="topic-metadata">

**Author:** [@Moshe\_Saada](https://discuss.elastic.co/u/Moshe_Saada)\
**Replies:** 7\
**Last updated:** [September 14, 2017, 2:55pm UTC](https://discuss.elastic.co/t/terms-aggregation-of-long-value/100223 "2017-09-14T14:55:48Z")

</div>

Hi, I've created data table visualization with terms aggregation and I saw the aggregation isn't working on some values, I think it's connected to the long but not sure. For example, the following value is aggregatable…

---

## [No living connections in the connection pool](https://discuss.elastic.co/t/no-living-connections-in-the-connection-pool/63760)

<div class="topic-metadata">

**Author:** [@rpoveda](https://discuss.elastic.co/u/rpoveda)\
**Replies:** 1\
**Last updated:** [October 24, 2016, 2:45pm UTC](https://discuss.elastic.co/t/no-living-connections-in-the-connection-pool/63760 "2016-10-24T14:45:31Z")

</div>

Hi ELK Server (Ubuntu Server 16.04) Nginx /usr/sbin/nginx LISTEN ON: 0.0.0.0:80 Kibana /usr/share/kibana/bin/kibana --version 5.0.0-rc1 LISTEN ON: 127.0.0.1:5601 cat /etc/kibana/kibana.yml ¦ grep -v ^# …

---

## [Format yAxis of timelion graph in KB/sec MB/sec, GB/sec](https://discuss.elastic.co/t/format-yaxis-of-timelion-graph-in-kb-sec-mb-sec-gb-sec/65872)

<div class="topic-metadata">

**Author:** [@snelders](https://discuss.elastic.co/u/snelders)\
**Replies:** 2\
**Last updated:** [November 23, 2016, 8:59pm UTC](https://discuss.elastic.co/t/format-yaxis-of-timelion-graph-in-kb-sec-mb-sec-gb-sec/65872 "2016-11-23T20:59:09Z")

</div>

I created a timelion graph of my incoming ethernet traffic on interface eth0. (The interval is set to 1 minute hence the devide(60)): .es(q="metricset.name: network AND system.network.name: eth0", metric=avg:system.ne…

---

## [S3 input missing files](https://discuss.elastic.co/t/s3-input-missing-files/166724)

<div class="topic-metadata">

**Author:** [@JonS](https://discuss.elastic.co/u/JonS)\
**Replies:** 3\
**Last updated:** [February 6, 2019, 9:11am UTC](https://discuss.elastic.co/t/s3-input-missing-files/166724 "2019-02-06T09:11:43Z")

</div>

Hi, we are trying to set up logstash to read ELB logs stored in an S3 bucket. The logs are split over several folders inside the bucket, and we're having some difficultly configuring the input. When reading from a sing…

---

## [How to build logstash into a jar](https://discuss.elastic.co/t/how-to-build-logstash-into-a-jar/29617)

<div class="topic-metadata">

**Author:** [@neutronsharc](https://discuss.elastic.co/u/neutronsharc)\
**Replies:** 2\
**Last updated:** [February 16, 2016, 9:18am UTC](https://discuss.elastic.co/t/how-to-build-logstash-into-a-jar/29617 "2016-02-16T09:18:57Z")

</div>

Hi all, I want to build logstash into a jar, and deploy this jar to my cluster. I found "warble" to be able to build jruby code into jar. I managed to get logstash.jar using warble, but when I run the jar file I got t…

---

## [Grok filter parsing tibco](https://discuss.elastic.co/t/grok-filter-parsing-tibco/43688)

<div class="topic-metadata">

**Author:** [@Sureshkumar](https://discuss.elastic.co/u/Sureshkumar)\
**Replies:** 7\
**Last updated:** [March 7, 2016, 9:29pm UTC](https://discuss.elastic.co/t/grok-filter-parsing-tibco/43688 "2016-03-07T21:29:58Z")

</div>

Currently i am parsing the tibco log using grok filter below is logs 2016 Mar 07 04:01:04:145 GMT -8 BW.TESServices-APPTST-TESTServices-APPTST-P13 User \[BW-User\] - Job-129210119 \[UtilityProcesses/CreateAuditTrail.proces…

---

## [Kibana APM application doesn't show any data](https://discuss.elastic.co/t/kibana-apm-application-doesnt-show-any-data/145949)

<div class="topic-metadata">

**Author:** [@TeroPihlaja](https://discuss.elastic.co/u/TeroPihlaja)\
**Replies:** 3\
**Last updated:** [August 24, 2018, 8:16pm UTC](https://discuss.elastic.co/t/kibana-apm-application-doesnt-show-any-data/145949 "2018-08-24T20:16:09Z")

</div>

Hello, After updating from 6.3.2 to 6.4.0 it seems that the Kibana APM app doesn't show any services. The message is "Looks like you don't have any services with APM installed. Let's add some!" There is definitely data…

---

## [Can we use ElastAlert to monitor ElasticSearch Cluster Status?](https://discuss.elastic.co/t/can-we-use-elastalert-to-monitor-elasticsearch-cluster-status/75472)

<div class="topic-metadata">

**Author:** [@nethis](https://discuss.elastic.co/u/nethis)\
**Replies:** 3\
**Last updated:** [February 18, 2017, 5:36am UTC](https://discuss.elastic.co/t/can-we-use-elastalert-to-monitor-elasticsearch-cluster-status/75472 "2017-02-18T05:36:35Z")

</div>

Can we use ElastAlert to monitor ElasticSearch Cluster Status?? Any help to configure rules for monitoring ElasticSearch Cluster Status?

---

## [Filter for field contains value in Dashboard](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 5\
**Last updated:** [February 7, 2022, 3:29am UTC](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398 "2022-02-07T03:29:29Z")

</div>

Hi All, I'm using 7.16.2 version. I want to ask if there is a possibility to filter the dashboard by field that contain certain string? Thanks, Shay

---

## [Optimize Elastic Search Settings For Search Speed](https://discuss.elastic.co/t/optimize-elastic-search-settings-for-search-speed/108248)

<div class="topic-metadata">

**Author:** [@wpearson4](https://discuss.elastic.co/u/wpearson4)\
**Replies:** 5\
**Last updated:** [November 27, 2017, 8:29am UTC](https://discuss.elastic.co/t/optimize-elastic-search-settings-for-search-speed/108248 "2017-11-27T08:29:39Z")

</div>

I am in the process of rebuilding my search stack. I was running in Elastic Cloud and I am now using dedicated hardware. My new setup consist of the following: 2 Data/Master Nodes with the following configuration • P…

---

## [Scripted field with curl](https://discuss.elastic.co/t/scripted-field-with-curl/106837)

<div class="topic-metadata">

**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\
**Replies:** 5\
**Last updated:** [November 8, 2017, 4:01pm UTC](https://discuss.elastic.co/t/scripted-field-with-curl/106837 "2017-11-08T16:01:08Z")

</div>

Is it possible to add a scripted filed to an index with curl or in the Kibana console? If yes please post a link or give an example.

---

## [FileBeat availability](https://discuss.elastic.co/t/filebeat-availability/24634)

<div class="topic-metadata">

**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\
**Replies:** 2\
**Last updated:** [September 11, 2015, 11:31am UTC](https://discuss.elastic.co/t/filebeat-availability/24634 "2015-09-11T11:31:28Z")

</div>

Continuing the discussion from About the Beats category: FileBeat doesn't exist yet. It will be the successor of the logstash-forwarder and our plan is to start from that code base and improved on it. So you can start …

---

## [Highlighting for top hits aggregations](https://discuss.elastic.co/t/highlighting-for-top-hits-aggregations/41344)

<div class="topic-metadata">

**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Replies:** 1\
**Last updated:** [February 10, 2016, 4:50am UTC](https://discuss.elastic.co/t/highlighting-for-top-hits-aggregations/41344 "2016-02-10T04:50:08Z")

</div>

According to the documentation for top hits aggregations (ES 2.1), there is support for highlighting of the hits returned. Is there an example of how to implement this? I've tried the following (bucket agg combined wit…

---

## [How to Run Elasticsearch from source code or IDE](https://discuss.elastic.co/t/how-to-run-elasticsearch-from-source-code-or-ide/205693)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 0\
**Last updated:** [October 29, 2019, 2:45pm UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-from-source-code-or-ide/205693 "2019-10-29T14:45:00Z")

</div>

Hi I am trying to run the Elasticsearch from the source code in Idea. I have gone through the below blog trying to do the same The problem with this is that I am unable to change any settings in the elasticsearch.yml…

---

## [Beats 1.1.1 release](https://discuss.elastic.co/t/beats-1-1-1-release/41548)

<div class="topic-metadata">

**Author:** [@tudor](https://discuss.elastic.co/u/tudor)\
**Replies:** 0\
**Last updated:** [February 11, 2016, 7:10pm UTC](https://discuss.elastic.co/t/beats-1-1-1-release/41548 "2016-02-11T19:10:41Z")

</div>

We've just published a patch released for Beats. Release notes here: https://www.elastic.co/guide/en/beats/libbeat/current/release-notes.html#release-notes-1.1.1 Download link here: https://www.elastic.co/downloads/bea…

[Previous page](https://discuss.elastic.co/top.md?page=700&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=702&per_page=50&period=all)
