# Top

**URL:** https://discuss.elastic.co/top.md?page=715&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 716

---

## [Using Kibana as a UI Component](https://discuss.elastic.co/t/using-kibana-as-a-ui-component/22480)

<div class="topic-metadata">

**Author:** [@Toshiyuki\_Hayashi](https://discuss.elastic.co/u/Toshiyuki_Hayashi)\
**Replies:** 2\
**Last updated:** [April 15, 2015, 3:32pm UTC](https://discuss.elastic.co/t/using-kibana-as-a-ui-component/22480 "2015-04-15T15:32:02Z")

</div>

Hi, I'm new to Kibana. I have already a Web UI/Dashboard, then I'd like to integrate Kibana charts with the my web UI as a UI component (Of course the backend is elastic search). Do you guys have any idea how doin…

---

## [Boost throughput of Kafka input](https://discuss.elastic.co/t/boost-throughput-of-kafka-input/261958)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 5\
**Last updated:** [January 27, 2021, 2:19pm UTC](https://discuss.elastic.co/t/boost-throughput-of-kafka-input/261958 "2021-01-27T14:19:38Z")

</div>

Hi, I've tried to look up every available documentation, example, blog post that's available on the net but I couldn't find anything useful on how to speed up ingesting from Kafka. Logstash barely uses any resources (10…

---

## [Elasticsearch Randomly Crashing](https://discuss.elastic.co/t/elasticsearch-randomly-crashing/218679)

<div class="topic-metadata">

**Author:** [@Mike121](https://discuss.elastic.co/u/Mike121)\
**Replies:** 5\
**Last updated:** [February 11, 2020, 1:55pm UTC](https://discuss.elastic.co/t/elasticsearch-randomly-crashing/218679 "2020-02-11T13:55:43Z")

</div>

I'm not sure what the problem is here and I've been trying to search for a solution for days, so maybe someone here can help me out. I'm using Elasticsearch 6. It starts fine, and works fine, except for ever several day…

---

## [Http.content\_type.required: false by default then why asking for content type](https://discuss.elastic.co/t/http-content-type-required-false-by-default-then-why-asking-for-content-type/91710)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 5\
**Last updated:** [July 19, 2017, 10:29pm UTC](https://discuss.elastic.co/t/http-content-type-required-false-by-default-then-why-asking-for-content-type/91710 "2017-07-19T22:29:14Z")

</div>

Hi All, If http.content\_type.required: false by default then why in log file saying "Content type detection for rest requests is deprecated."

---

## [Reading field Values from docvalues using DoubleFieldSource](https://discuss.elastic.co/t/reading-field-values-from-docvalues-using-doublefieldsource/45874)

<div class="topic-metadata">

**Author:** [@rkalhans](https://discuss.elastic.co/u/rkalhans)\
**Replies:** 5\
**Last updated:** [April 28, 2016, 5:33am UTC](https://discuss.elastic.co/t/reading-field-values-from-docvalues-using-doublefieldsource/45874 "2016-04-28T05:33:17Z")

</div>

Hello All, In a custom analyzer plugin I am trying to read a field value using DoubleFieldSource. The problem that i am facing is that this fails with the following error. QueryPhaseExecutionException\[Query Failed …

---

## [Logstash config file and Redis](https://discuss.elastic.co/t/logstash-config-file-and-redis/47530)

<div class="topic-metadata">

**Author:** [@lhorsky1](https://discuss.elastic.co/u/lhorsky1)\
**Replies:** 5\
**Last updated:** [April 19, 2016, 2:59am UTC](https://discuss.elastic.co/t/logstash-config-file-and-redis/47530 "2016-04-19T02:59:55Z")

</div>

Previously, we have been running 6 different logstash processes on each Logstash server (5 shippers and 1 indexer) and 1 Redis process. The shippers each had their own configuration file, listening for data incoming on s…

---

## [@timestamp and logstash-output-mongodb](https://discuss.elastic.co/t/timestamp-and-logstash-output-mongodb/40129)

<div class="topic-metadata">

**Author:** [@sampasei](https://discuss.elastic.co/u/sampasei)\
**Replies:** 5\
**Last updated:** [January 30, 2016, 7:19pm UTC](https://discuss.elastic.co/t/timestamp-and-logstash-output-mongodb/40129 "2016-01-30T19:19:27Z")

</div>

Hi all, i have a record sent from filebeat and received by logstash: after some filtering (with grock) the record is sent to mongodb. The problem is linked to @timestamp field: "@timestamp" : "\\"2016-01-26T14:26:49.333Z…

---

## [How to get size (total) of events send by a host per day](https://discuss.elastic.co/t/how-to-get-size-total-of-events-send-by-a-host-per-day/251912)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 3\
**Last updated:** [October 14, 2020, 6:17pm UTC](https://discuss.elastic.co/t/how-to-get-size-total-of-events-send-by-a-host-per-day/251912 "2020-10-14T18:17:41Z")

</div>

We have been asked different scenarios What is the original size/volume of data send by a particular host? What is the size/volume of data indexed into ES from a particular host For (1) it is actually the size of the …

---

## [Help on Rollover (manually forcing the rollover)](https://discuss.elastic.co/t/help-on-rollover-manually-forcing-the-rollover/234002)

<div class="topic-metadata">

**Author:** [@plymouth78](https://discuss.elastic.co/u/plymouth78)\
**Replies:** 3\
**Last updated:** [May 24, 2020, 6:00pm UTC](https://discuss.elastic.co/t/help-on-rollover-manually-forcing-the-rollover/234002 "2020-05-24T18:00:24Z")

</div>

Hello all, we are using rollover index lifecycle management. This way our indices are being rotated once they hit 50GB. From time to time we are in the need to change something in the index design so that we do these c…

---

## [2.0.0 icu analysis plugin](https://discuss.elastic.co/t/2-0-0-icu-analysis-plugin/34861)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 1\
**Last updated:** [November 18, 2015, 6:13am UTC](https://discuss.elastic.co/t/2-0-0-icu-analysis-plugin/34861 "2015-11-18T06:13:18Z")

</div>

Hi does the icu-analysis plugin come installed by default with ES-2.0.0? Going to github we are instructed to check the new repo, which has no info... I have the following template settings... "order": 0, "template":…

---

## [Elasticsearch AsyncAppender configuration](https://discuss.elastic.co/t/elasticsearch-asyncappender-configuration/22213)

<div class="topic-metadata">

**Author:** [@Mohamed\_Amine\_ABDESS](https://discuss.elastic.co/u/Mohamed_Amine_ABDESS)\
**Replies:** 4\
**Last updated:** [November 9, 2015, 5:31pm UTC](https://discuss.elastic.co/t/elasticsearch-asyncappender-configuration/22213 "2015-11-09T17:31:28Z")

</div>

We've set up elasticsearch logging as described here logging elasticsearch events with logstash and we want to use an AsyncAppender instead of using a SocketAppender directly in order to avoid freeze times wh…

---

## [EsRejectedExecutionException\[rejected execution (queue capacity 50)](https://discuss.elastic.co/t/esrejectedexecutionexception-rejected-execution-queue-capacity-50/15522)

<div class="topic-metadata">

**Author:** [@Ramchandra\_Phadake](https://discuss.elastic.co/u/Ramchandra_Phadake)\
**Replies:** 8\
**Last updated:** [May 30, 2014, 11:24pm UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-rejected-execution-queue-capacity-50/15522 "2014-05-30T23:24:25Z")

</div>

Hi, Recently we migrated from 0.90.1 to 0.90.9. We did change index.codec.bloom.load=false initially but even with true we obsetve same behaviour. Nothing else has changed from indexing code. We are using bulk A…

---

## [Logstash filter out log lines](https://discuss.elastic.co/t/logstash-filter-out-log-lines/302230)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 5\
**Last updated:** [May 4, 2022, 3:11am UTC](https://discuss.elastic.co/t/logstash-filter-out-log-lines/302230 "2022-05-04T03:11:35Z")

</div>

Hi, I have json logs that I want to filter based on the message field. {"@timestamp":"2022-04-05T01:20:50.917+00:00","severity":"INFO","service":"service","pid":"18245","thread":"http-nio-8102-exec-1","class":"class","…

---

## [How can i Pull Data from Solarwinds to Kibana?](https://discuss.elastic.co/t/how-can-i-pull-data-from-solarwinds-to-kibana/145123)

<div class="topic-metadata">

**Author:** [@pezthebasic](https://discuss.elastic.co/u/pezthebasic)\
**Replies:** 3\
**Last updated:** [August 22, 2018, 1:56am UTC](https://discuss.elastic.co/t/how-can-i-pull-data-from-solarwinds-to-kibana/145123 "2018-08-22T01:56:30Z")

</div>

How can i Pull Data from Solarwinds to Display Visualize on Kibana ??

---

## [Filebeat selftest failt: missing field 'output.elasticsearch.hosts'](https://discuss.elastic.co/t/filebeat-selftest-failt-missing-field-output-elasticsearch-hosts/337388)

<div class="topic-metadata">

**Author:** [@enp2s6](https://discuss.elastic.co/u/enp2s6)\
**Replies:** 2\
**Last updated:** [July 2, 2023, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-selftest-failt-missing-field-output-elasticsearch-hosts/337388 "2023-07-02T12:56:11Z")

</div>

Hello, I have elasticsearch and Kibana install and minimal security settings enabled. After reboot everything works great. However, I can not connect to Kibana. Log: ERROR instance/beat.go:1027 Exiting: error ini…

---

## [Marvel license expired](https://discuss.elastic.co/t/marvel-license-expired/52564)

<div class="topic-metadata">

**Author:** [@tingking23](https://discuss.elastic.co/u/tingking23)\
**Replies:** 2\
**Last updated:** [June 13, 2016, 6:47am UTC](https://discuss.elastic.co/t/marvel-license-expired/52564 "2016-06-13T06:47:04Z")

</div>

bin/elasticsearch \[2016-06-13 11:50:58,029\]\[INFO \]\[node \] \[Crimson Commando\] version\[2.3.2\], pid\[10277\], build\[b9e4a6a/2016-04-21T16:03:47Z\] \[2016-06-13 11:50:58,029\]\[INFO \]\[node …

---

## [Match phrase prefix query stopped working for multiple terms after 7.10.2](https://discuss.elastic.co/t/match-phrase-prefix-query-stopped-working-for-multiple-terms-after-7-10-2/272293)

<div class="topic-metadata">

**Author:** [@Sleepy\_Panda](https://discuss.elastic.co/u/Sleepy_Panda)\
**Replies:** 3\
**Last updated:** [June 8, 2021, 10:44am UTC](https://discuss.elastic.co/t/match-phrase-prefix-query-stopped-working-for-multiple-terms-after-7-10-2/272293 "2021-06-08T10:44:29Z")

</div>

Issue: search using match\_phrase\_prefix does not return results for queries which consist of multiple terms, e.g. "Additional HTTP". ElasticSearch 7.10.2: document is returned when searching "Additional HTTP" ElasticSe…

---

## [Persist data between log lines with ruby filter](https://discuss.elastic.co/t/persist-data-between-log-lines-with-ruby-filter/206068)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 4\
**Last updated:** [November 13, 2019, 7:16pm UTC](https://discuss.elastic.co/t/persist-data-between-log-lines-with-ruby-filter/206068 "2019-11-13T19:16:19Z")

</div>

What is the best way to persist data between two messages using the ruby filter? For example to include the previous message parsed I can use global variables like this: input { generator { lines =\> \[ "line…

---

## [A single backslash becomes double backslash](https://discuss.elastic.co/t/a-single-backslash-becomes-double-backslash/151202)

<div class="topic-metadata">

**Author:** [@Nww\_Pot\_Fung\_Nng](https://discuss.elastic.co/u/Nww_Pot_Fung_Nng)\
**Replies:** 4\
**Last updated:** [October 6, 2018, 1:24am UTC](https://discuss.elastic.co/t/a-single-backslash-becomes-double-backslash/151202 "2018-10-06T01:24:31Z")

</div>

I have messages which contain computer name under Windows domain. The format will be domain\\computername. However, the message ends up domain\\\\computername in elasticsearch indice. When I do a search, I need to put domai…

---

## [ES 2.3.3 node cannot join the master node](https://discuss.elastic.co/t/es-2-3-3-node-cannot-join-the-master-node/55061)

<div class="topic-metadata">

**Author:** [@arek](https://discuss.elastic.co/u/arek)\
**Replies:** 4\
**Last updated:** [July 11, 2016, 10:49am UTC](https://discuss.elastic.co/t/es-2-3-3-node-cannot-join-the-master-node/55061 "2016-07-11T10:49:42Z")

</div>

Hi, I configured simple two-node cluster (for test purposes) with one master node. It's Red Hat servers. Unfortunately second node cannot join to the master node. Here is configuration of master node: cluster.name: elk…

---

## [OpenSearch for elasticsearch.org docs?](https://discuss.elastic.co/t/opensearch-for-elasticsearch-org-docs/16426)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 4\
**Last updated:** [March 19, 2014, 3:34pm UTC](https://discuss.elastic.co/t/opensearch-for-elasticsearch-org-docs/16426 "2014-03-19T15:34:53Z")

</div>

Hi, is there any plan to provide OpenSearch API for Elasticsearch docs soon? It would be really nice if I could search the docs directly from browser URL. Many browsers support that and it is quite fast shortcut t…

---

## [Feature Suggestion Page in Discussion Forums?](https://discuss.elastic.co/t/feature-suggestion-page-in-discussion-forums/158041)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 1\
**Last updated:** [November 24, 2018, 3:13am UTC](https://discuss.elastic.co/t/feature-suggestion-page-in-discussion-forums/158041 "2018-11-24T03:13:23Z")

</div>

I thought I ran across a link or forum page where you could email/input any features that one might think Elastic could use to make their platform better? For instance it would be nice if there was a way to add to close…

---

## [What to do with query inside filter query](https://discuss.elastic.co/t/what-to-do-with-query-inside-filter-query/296246)

<div class="topic-metadata">

**Author:** [@JunyaT](https://discuss.elastic.co/u/JunyaT)\
**Replies:** 3\
**Last updated:** [February 5, 2022, 4:26am UTC](https://discuss.elastic.co/t/what-to-do-with-query-inside-filter-query/296246 "2022-02-05T04:26:24Z")

</div>

Hi, people from Elasticsearch. I have struggles trying to migrate to Elasticsearch 7.11.1 from very old Elasticsearch 1.3. "The original query" below is used in our codebase to be executed against Elasticsearch 1.3 and…

---

## [Filebeat does not read new lines](https://discuss.elastic.co/t/filebeat-does-not-read-new-lines/149140)

<div class="topic-metadata">

**Author:** [@kater](https://discuss.elastic.co/u/kater)\
**Replies:** 2\
**Last updated:** [September 20, 2018, 7:22am UTC](https://discuss.elastic.co/t/filebeat-does-not-read-new-lines/149140 "2018-09-20T07:22:27Z")

</div>

Hello. I'm currently using a 6.4 ELK stack and 6.4 Filebeat on a other server. A squid is running and the access.log get new lines but Filebeat is not able to read it. I even tried to "echo \>\>" the file but Filebeat …

---

## [Date Range filter in data table Kibana 5.4.1](https://discuss.elastic.co/t/date-range-filter-in-data-table-kibana-5-4-1/95017)

<div class="topic-metadata">

**Author:** [@Louie\_Hernandez](https://discuss.elastic.co/u/Louie_Hernandez)\
**Replies:** 5\
**Last updated:** [August 1, 2017, 8:39am UTC](https://discuss.elastic.co/t/date-range-filter-in-data-table-kibana-5-4-1/95017 "2017-08-01T08:39:13Z")

</div>

I have a column in my data table type date, and I want to be able to query said column. When I try to press the magnifying glass “filter value” Kibana gives me an error. I guess what I am trying to ask is how do I creat…

---

## [Filebeat json parser is trying to parse excluded lines](https://discuss.elastic.co/t/filebeat-json-parser-is-trying-to-parse-excluded-lines/304674)

<div class="topic-metadata">

**Author:** [@dosmanak](https://discuss.elastic.co/u/dosmanak)\
**Replies:** 5\
**Last updated:** [June 1, 2022, 8:56am UTC](https://discuss.elastic.co/t/filebeat-json-parser-is-trying-to-parse-excluded-lines/304674 "2022-06-01T08:56:07Z")

</div>

filebeat log is filled with errors "Error decoding JSON: invalid character" filebeat.yml --- filebeat.inputs: - type: filestream id: 0 paths: - '/data/mixed\_json\_plain.log' exclude\_lines: \[ "^PLAIN"…

---

## [Kibana is showing only one record on the discover dash board](https://discuss.elastic.co/t/kibana-is-showing-only-one-record-on-the-discover-dash-board/195109)

<div class="topic-metadata">

**Author:** [@Arun\_Soman](https://discuss.elastic.co/u/Arun_Soman)\
**Replies:** 6\
**Last updated:** [August 15, 2019, 7:32pm UTC](https://discuss.elastic.co/t/kibana-is-showing-only-one-record-on-the-discover-dash-board/195109 "2019-08-15T19:32:36Z")

</div>

In my kibana discover dash board it is only showing one record. And the record is updating every time when I have data from file beat. also my \_id value is %{logstash\_checksum} I am using bitnami filebeat -logstash- …

---

## [Mappings.\_default\_.dynamic\_templates doesn't show up in resulting mapping](https://discuss.elastic.co/t/mappings--default--dynamic-templates-doesnt-show-up-in-resulting-mapping/59030)

<div class="topic-metadata">

**Author:** [@Carsten\_Germer](https://discuss.elastic.co/u/Carsten_Germer)\
**Replies:** 6\
**Last updated:** [February 14, 2017, 3:49pm UTC](https://discuss.elastic.co/t/mappings--default--dynamic-templates-doesnt-show-up-in-resulting-mapping/59030 "2017-02-14T15:49:30Z")

</div>

Hi everyone, Using ES 2.3 I create an index with default dynamic templates, just like in the examples. PUT /myindex { "mappings": { "\_default\_": { "dynamic\_templates": \[ { …

---

## [Missing fields while Indexing Tomcat access logs data in elasticsearch](https://discuss.elastic.co/t/missing-fields-while-indexing-tomcat-access-logs-data-in-elasticsearch/45580)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 6\
**Last updated:** [March 29, 2016, 1:54pm UTC](https://discuss.elastic.co/t/missing-fields-while-indexing-tomcat-access-logs-data-in-elasticsearch/45580 "2016-03-29T13:54:37Z")

</div>

I have localhost\_access\_log.2016-03-23.txt file which I am trying to index in elasticsearch via logstash. Above file looks as follows:- 0:0:0:0:0:0:0:1 - - \[23/Mar/2016:12:20:46 +0530\] "GET / HTTP/1.1" 200 11444 0:0:0…

---

## [Harvester not started for new files in configured paths](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332)

<div class="topic-metadata">

**Author:** [@dchsueh](https://discuss.elastic.co/u/dchsueh)\
**Replies:** 7\
**Last updated:** [April 18, 2022, 3:19pm UTC](https://discuss.elastic.co/t/harvester-not-started-for-new-files-in-configured-paths/294332 "2022-04-18T15:19:48Z")

</div>

Hello, I have a problem I've verified in filebeat 6.8.3, 7.5.1, and 7.16.3 I have a filebeat.yml filebeat.inputs, type log, with three configured paths with \*\* in the middle portions, something like - /var/log/a/b/\*…

---

## [How to query like mysql?](https://discuss.elastic.co/t/how-to-query-like-mysql/60873)

<div class="topic-metadata">

**Author:** [@arsenepark](https://discuss.elastic.co/u/arsenepark)\
**Replies:** 2\
**Last updated:** [September 19, 2016, 3:34pm UTC](https://discuss.elastic.co/t/how-to-query-like-mysql/60873 "2016-09-19T15:34:35Z")

</div>

hey, there, I have the following data: { "my\_key": "hello world" } now, I have 2 requirements: 1. I want to search exactly the string : "hello world", like mysql "=" 2. I want to search "llo wor", li…

---

## [TransportClient thread safe?](https://discuss.elastic.co/t/transportclient-thread-safe/12366)

<div class="topic-metadata">

**Author:** [@vinh](https://discuss.elastic.co/u/vinh)\
**Replies:** 2\
**Last updated:** [June 12, 2013, 5:09am UTC](https://discuss.elastic.co/t/transportclient-thread-safe/12366 "2013-06-12T05:09:55Z")

</div>

Can one instance of TransportClient be shared across a set of clients threads? For example, if I have several objects which need to index messages to ES, can they share the same TransportClient? -- You received thi…

---

## [Curl: (7) Failed to connect to 172.16.128.208 port 9200: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-172-16-128-208-port-9200-connection-refused/258067)

<div class="topic-metadata">

**Author:** [@danker00](https://discuss.elastic.co/u/danker00)\
**Replies:** 3\
**Last updated:** [December 9, 2020, 9:01pm UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-172-16-128-208-port-9200-connection-refused/258067 "2020-12-09T21:01:02Z")

</div>

Hi Everyone, I am installing elasticsearch on a VM (vmware workstation - NIC: bridged) Host machine (Windows Server) I am getting an error after trying to curl to the IP address of the machine running elasticsearch. I w…

---

## [Removing whitespace from column in csv import](https://discuss.elastic.co/t/removing-whitespace-from-column-in-csv-import/92702)

<div class="topic-metadata">

**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\
**Replies:** 3\
**Last updated:** [July 12, 2017, 2:10pm UTC](https://discuss.elastic.co/t/removing-whitespace-from-column-in-csv-import/92702 "2017-07-12T14:10:18Z")

</div>

I am trying to ingest csv file into ES. The csv file contains undetermined column names in header. I would to eliminate white space from column names. Since I don't know the column names I can't manually supply column na…

---

## [Disable cache?](https://discuss.elastic.co/t/disable-cache/6995)

<div class="topic-metadata">

**Author:** [@Andrej](https://discuss.elastic.co/u/Andrej)\
**Replies:** 3\
**Last updated:** [March 27, 2012, 1:16pm UTC](https://discuss.elastic.co/t/disable-cache/6995 "2012-03-27T13:16:30Z")

</div>

Hi, I have a very simple question: is there a way to disable caching or other runtime optimizations for tests? We are comparing several query types, but this is a tough job with caching enabled. Thanks! Andrej

---

## [Kibana 5.0.2 released with a fix for improper authentication](https://discuss.elastic.co/t/kibana-5-0-2-released-with-a-fix-for-improper-authentication/67527)

<div class="topic-metadata">

**Author:** [@Court](https://discuss.elastic.co/u/Court)\
**Replies:** 0\
**Last updated:** [November 29, 2016, 5:14pm UTC](https://discuss.elastic.co/t/kibana-5-0-2-released-with-a-fix-for-improper-authentication/67527 "2016-11-29T17:14:19Z")

</div>

With X-Pack installed, operations in the Advanced Settings panel of the Management tab and operations from the short URL service were performed as the "Kibana Server" user regardless of the user that is currently authent…

---

## [Http-poller input-plugin "Connection timed out: connect"](https://discuss.elastic.co/t/http-poller-input-plugin-connection-timed-out-connect/121024)

<div class="topic-metadata">

**Author:** [@priti](https://discuss.elastic.co/u/priti)\
**Replies:** 6\
**Last updated:** [February 27, 2018, 1:32pm UTC](https://discuss.elastic.co/t/http-poller-input-plugin-connection-timed-out-connect/121024 "2018-02-27T13:32:26Z")

</div>

Hi, When i am hitting URL from my local machine it is giving 200 response but same http\_poller input when i tried to run from server, I am getting "Connection timed out: connect" error. Please help me to solve this issu…

---

## [Winlogbeat ignores registry file with forwarded events](https://discuss.elastic.co/t/winlogbeat-ignores-registry-file-with-forwarded-events/76601)

<div class="topic-metadata">

**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Replies:** 6\
**Last updated:** [March 7, 2017, 6:19am UTC](https://discuss.elastic.co/t/winlogbeat-ignores-registry-file-with-forwarded-events/76601 "2017-03-07T06:19:25Z")

</div>

Hi there I think I discovered a bug and wanted the community's opinion before I submit an issue on GitHub. First, this only happens with forwarded events. I haven't been able to reproduce with locally generated event…

---

## [Can't connect to Kibana API with CURL. I keep receiving {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/cant-connect-to-kibana-api-with-curl-i-keep-receiving-statuscode-404-error-not-found-message-not-found/324804)

<div class="topic-metadata">

**Author:** [@Piotrek](https://discuss.elastic.co/u/Piotrek)\
**Replies:** 4\
**Last updated:** [February 7, 2023, 1:17pm UTC](https://discuss.elastic.co/t/cant-connect-to-kibana-api-with-curl-i-keep-receiving-statuscode-404-error-not-found-message-not-found/324804 "2023-02-07T13:17:06Z")

</div>

I'm trying to connect to Kibana API via CURL: curl -X "GET" "http://\<my-elastic-host\>:5601/status" --user \<my-username\> --noproxy '\*' -H 'kbn-xsrf: true' But all I receive is: {"statusCode":404,"error":"Not Found",…

---

## [Metricbeat kubernetes module can't connect to kubelet](https://discuss.elastic.co/t/metricbeat-kubernetes-module-cant-connect-to-kubelet/161939)

<div class="topic-metadata">

**Author:** [@dnutels](https://discuss.elastic.co/u/dnutels)\
**Replies:** 2\
**Last updated:** [December 29, 2018, 3:49am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module-cant-connect-to-kubelet/161939 "2018-12-29T03:49:17Z")

</div>

Hi. We have a setup, where Metricbeat is deployed as a DaemonSet on a Kubernetes cluster (spefcifically -- AWS EKS). All seems to be functioning properly, but the kubelet connection. To clarify, the following module: …

---

## [How to avoid data loss in logstash?](https://discuss.elastic.co/t/how-to-avoid-data-loss-in-logstash/149582)

<div class="topic-metadata">

**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\
**Replies:** 5\
**Last updated:** [September 27, 2018, 2:35pm UTC](https://discuss.elastic.co/t/how-to-avoid-data-loss-in-logstash/149582 "2018-09-27T14:35:24Z")

</div>

Hi All, I observed there are data loss in my elasticsearch cluster, I am comparing the log count from two log monitoring tools,one is ELK and another a third party vendor. I have verified syslog configuration in all ne…

---

## [Elastic search on t2.micro (Amazon WS)](https://discuss.elastic.co/t/elastic-search-on-t2-micro-amazon-ws/22237)

<div class="topic-metadata">

**Author:** [@Seung\_Chan\_Lim](https://discuss.elastic.co/u/Seung_Chan_Lim)\
**Replies:** 5\
**Last updated:** [February 19, 2015, 10:24pm UTC](https://discuss.elastic.co/t/elastic-search-on-t2-micro-amazon-ws/22237 "2015-02-19T22:24:56Z")

</div>

I'm trying to see if I can get elastic search (ES) 1.3.8 working with couchbase (CB) 3.0.2 on a t2.micro (Amazon WS) t2.micro has 1 gig of RAM, which isn't a lot, but I'm only doing test development on this with n…

---

## [Error when do sql query from table name with special character](https://discuss.elastic.co/t/error-when-do-sql-query-from-table-name-with-special-character/193383)

<div class="topic-metadata">

**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\
**Replies:** 1\
**Last updated:** [August 2, 2019, 10:12am UTC](https://discuss.elastic.co/t/error-when-do-sql-query-from-table-name-with-special-character/193383 "2019-08-02T10:12:05Z")

</div>

I am on Kibana and Elasticsearch 6.8. And I am trying to use sql from dev tools. Our tables name are all like 'stores.us\_returnattempt' which contains some special characters like . or \_. I got below error. "error":…

---

## [Java.lang.ClassNotFoundException: org.elasticsearch.transport.RemoteTransportException](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-transport-remotetransportexception/19097)

<div class="topic-metadata">

**Author:** [@Earle\_Nietzel](https://discuss.elastic.co/u/Earle_Nietzel)\
**Replies:** 2\
**Last updated:** [August 6, 2014, 3:04pm UTC](https://discuss.elastic.co/t/java-lang-classnotfoundexception-org-elasticsearch-transport-remotetransportexception/19097 "2014-08-06T15:04:33Z")

</div>

Using elasticsearch embedded in tomcat 7 where we have custom classloader that shares spring application beans with many webapps. The API's to these implementations are in shared but the implementations are in a sepa…

---

## [ElasticSearch XPack - PKI Realm authentication defaults to native authentication](https://discuss.elastic.co/t/elasticsearch-xpack-pki-realm-authentication-defaults-to-native-authentication/228906)

<div class="topic-metadata">

**Author:** [@AbrahamPFdez](https://discuss.elastic.co/u/AbrahamPFdez)\
**Replies:** 3\
**Last updated:** [April 27, 2020, 7:20pm UTC](https://discuss.elastic.co/t/elasticsearch-xpack-pki-realm-authentication-defaults-to-native-authentication/228906 "2020-04-27T19:20:00Z")

</div>

Hi, I am using ES version 7.6.2. I'm trying to set up a PKI authentication in my ES cluster, my elasticsearch.yml looks like this. Although the transport security configuration is not relevant, I post it anyway: # Tran…

---

## [Integrating elastic search with sonarqube](https://discuss.elastic.co/t/integrating-elastic-search-with-sonarqube/148975)

<div class="topic-metadata">

**Author:** [@Farmer](https://discuss.elastic.co/u/Farmer)\
**Replies:** 0\
**Last updated:** [September 18, 2018, 12:21pm UTC](https://discuss.elastic.co/t/integrating-elastic-search-with-sonarqube/148975 "2018-09-18T12:21:09Z")

</div>

Event: Starting sonarqube Error message in sonarqube console & sonar.log: "Waiting for Elasticsearch to be up and running" Actions performed: 1. Started elastic search by running "elasticsearch.bat" in the "elasticse…

---

## [How to \_update a non existing field](https://discuss.elastic.co/t/how-to--update-a-non-existing-field/7349)

<div class="topic-metadata">

**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\
**Replies:** 3\
**Last updated:** [April 19, 2012, 2:32pm UTC](https://discuss.elastic.co/t/how-to--update-a-non-existing-field/7349 "2012-04-19T14:32:29Z")

</div>

Using ElasticSearch as a DB I'm looking for a way to \_update a field that doesn't exist. I don't want to set the field to 0 when first indexed because I don't know the field names for other reasons. I assume I can'…

---

## [Generate a Detection when new document is indexed](https://discuss.elastic.co/t/generate-a-detection-when-new-document-is-indexed/268140)

<div class="topic-metadata">

**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\
**Replies:** 7\
**Last updated:** [April 9, 2021, 6:02pm UTC](https://discuss.elastic.co/t/generate-a-detection-when-new-document-is-indexed/268140 "2021-04-09T18:02:16Z")

</div>

Hi Community, I'm trying to generate a detection over time with Elastic SIEM. Giving more context, I'm indexing, through Logstash, data from an API rest, so every half an hour I receive new data. Mostly, is repeated dat…

---

## [Failed to index Bulk Items Error in ES Logs](https://discuss.elastic.co/t/failed-to-index-bulk-items-error-in-es-logs/29364)

<div class="topic-metadata">

**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\
**Replies:** 1\
**Last updated:** [September 18, 2015, 4:05am UTC](https://discuss.elastic.co/t/failed-to-index-bulk-items-error-in-es-logs/29364 "2015-09-18T04:05:40Z")

</div>

Hi, I am seeing quite a few warnings in my logstash saying "Failed action with response of 400, dropping action". In elasticsearch log I am seeing corresponding error as failed to execute bulk item (index) index. Thi…

---

## [Visualizing data from ESA's Gaia mission in Kibana](https://discuss.elastic.co/t/visualizing-data-from-esas-gaia-mission-in-kibana/131616)

<div class="topic-metadata">

**Author:** [@Marcel-Jan](https://discuss.elastic.co/u/Marcel-Jan)\
**Replies:** 1\
**Last updated:** [May 13, 2018, 12:57pm UTC](https://discuss.elastic.co/t/visualizing-data-from-esas-gaia-mission-in-kibana/131616 "2018-05-13T12:57:29Z")

</div>

So recently I've been trying to get astronomical data in Elasticsearch with Logstash to visualize it with Kibnana. I've asked some questions here before to get it done. And I'm happy to say I got it working. I promissed …

[Previous page](https://discuss.elastic.co/top.md?page=714&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=716&per_page=50&period=all)
