# Top **URL:** https://discuss.elastic.co/top.md?page=729&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 730 --- ## [Exporting the output of elasticsearch query](https://discuss.elastic.co/t/exporting-the-output-of-elasticsearch-query/60083)
**Author:** [@Varun\_Breja](https://discuss.elastic.co/u/Varun_Breja)\ **Replies:** 1\ **Last updated:** [September 8, 2016, 2:24pm UTC](https://discuss.elastic.co/t/exporting-the-output-of-elasticsearch-query/60083 "2016-09-08T14:24:14Z")
How can we export the output of query running in elasticsearch like any search or update query ? --- ## [Filebeat never releases unupdated logfiles](https://discuss.elastic.co/t/filebeat-never-releases-unupdated-logfiles/102673)
**Author:** [@giakalisn](https://discuss.elastic.co/u/giakalisn)\ **Replies:** 8\ **Last updated:** [October 10, 2017, 10:55am UTC](https://discuss.elastic.co/t/filebeat-never-releases-unupdated-logfiles/102673 "2017-10-10T10:55:32Z")
Sometimes, filebeat keeps old files opened forever. lsof shows us that filebeat is at EOF, but for some unknown reasons it doesn't close the file. I am using latest version of filebeat Here is our setup : close\_inacti… --- ## [Fast Multiple Id Query](https://discuss.elastic.co/t/fast-multiple-id-query/3991)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 3\ **Last updated:** [March 1, 2011, 10:01pm UTC](https://discuss.elastic.co/t/fast-multiple-id-query/3991 "2011-03-01T22:01:34Z")
Hi, I want to create a Join index that will hold the relationship between two other indexes' ids. In order for this to work I will need to do a query that does the following, very quickly using the Java API, once I… --- ## [Conditional setting of values in VEGA (for gantt chart)](https://discuss.elastic.co/t/conditional-setting-of-values-in-vega-for-gantt-chart/266580)
**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\ **Replies:** 4\ **Last updated:** [March 14, 2021, 8:16am UTC](https://discuss.elastic.co/t/conditional-setting-of-values-in-vega-for-gantt-chart/266580 "2021-03-14T08:16:36Z")
I want to create gantt chat display where "end" bar is dependent on the application status. If "status" is "Running" - I want to set endTime to "now()" If "status" is "not Running" - I want to use endTime field from th… --- ## [FileBeat Sending Logs in binary format](https://discuss.elastic.co/t/filebeat-sending-logs-in-binary-format/70745)
**Author:** [@sarank](https://discuss.elastic.co/u/sarank)\ **Replies:** 4\ **Last updated:** [January 17, 2017, 7:12am UTC](https://discuss.elastic.co/t/filebeat-sending-logs-in-binary-format/70745 "2017-01-17T07:12:29Z")
Hi All, I am trying to set-up a centralized log management in my infra, for this I am using Graylog. I am pushing my component logs from clients to the Graylog Server using Filebeat ( Version - 5.1.1 ). I am not sure wh… --- ## [Different results for the same query](https://discuss.elastic.co/t/different-results-for-the-same-query/18181)
**Author:** [@Mathias\_Gawlista](https://discuss.elastic.co/u/Mathias_Gawlista)\ **Replies:** 4\ **Last updated:** [June 19, 2014, 11:59am UTC](https://discuss.elastic.co/t/different-results-for-the-same-query/18181 "2014-06-19T11:59:28Z")
Hi, I've setup Elasticsearch with 1 cluster á 4 nodes. When I call a simple query like the following one multiple times I get different hits in the response: curl -XGET 'http://localhost:9200/index\_name/\_se… --- ## [Remove default fields from logstash output](https://discuss.elastic.co/t/remove-default-fields-from-logstash-output/45576)
**Author:** [@valjohn1647](https://discuss.elastic.co/u/valjohn1647)\ **Replies:** 1\ **Last updated:** [March 28, 2016, 11:04am UTC](https://discuss.elastic.co/t/remove-default-fields-from-logstash-output/45576 "2016-03-28T11:04:41Z")
Hi all Im going to use the logstash to send my logfiles to s3 and later Archie it via Glacier . But my issue was logstash by default add the @timestamp and "host" parameter details to the output log Eg: Inp… --- ## [Elastic webhook output](https://discuss.elastic.co/t/elastic-webhook-output/258546)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [December 14, 2020, 3:15pm UTC](https://discuss.elastic.co/t/elastic-webhook-output/258546 "2020-12-14T15:15:53Z")
Hello, I wanna know please if the webhook in the watcher send output in a JSON format ? cause I am getting some errors in my webhook and I don't know if it's because the output is not in JSON format, or cause I didn't k… --- ## [ML - deleting old indexes in Elasticsearch](https://discuss.elastic.co/t/ml-deleting-old-indexes-in-elasticsearch/165617)
**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\ **Replies:** 2\ **Last updated:** [January 28, 2019, 8:52am UTC](https://discuss.elastic.co/t/ml-deleting-old-indexes-in-elasticsearch/165617 "2019-01-28T08:52:43Z")
Hello, I cannot find any relevant information in the docs, so I decided to ask here. Situation: We have real-time ML job on specific indexes. We are using daily indexes and our oldest index is two years old. What if… --- ## [How to intercept all http request from kibana frontend going to backend through plugin?](https://discuss.elastic.co/t/how-to-intercept-all-http-request-from-kibana-frontend-going-to-backend-through-plugin/147397)
**Author:** [@Parth\_Kalaria](https://discuss.elastic.co/u/Parth_Kalaria)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 9:10am UTC](https://discuss.elastic.co/t/how-to-intercept-all-http-request-from-kibana-frontend-going-to-backend-through-plugin/147397 "2018-09-10T09:10:32Z")
I want to intercept all http request from kibana and add jwtHeader in each of them. I tried writing a plugin in which I'm using $httpProvider.interceptors to intercept and add headers. uiModules .get('kibana', \['angular… --- ## [Incorrect HTTP method for uri](https://discuss.elastic.co/t/incorrect-http-method-for-uri/320931)
**Author:** [@someusername](https://discuss.elastic.co/u/someusername)\ **Replies:** 5\ **Last updated:** [December 11, 2022, 4:07pm UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/320931 "2022-12-11T16:07:53Z")
Hello, I want to connect using the python client but I can't figure out what's wrong. from elasticsearch import Elasticsearch endpoint = 'https://foo.gcp.cloud.es.io:443/search-addresses/\_doc?pipeline=ent-search-gener… --- ## [Is Logstash 5.5 compatible with Java 1.7?](https://discuss.elastic.co/t/is-logstash-5-5-compatible-with-java-1-7/99198)
**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\ **Replies:** 5\ **Last updated:** [September 4, 2017, 4:07pm UTC](https://discuss.elastic.co/t/is-logstash-5-5-compatible-with-java-1-7/99198 "2017-09-04T16:07:02Z")
Hi, I am trying to install Logstash 5.5 on a Linux machine which has Java 1.7. I have gone through some documentation and it says Logstash 5.5 is compatible with Java 1.7. Some say it’s not compatible. Can someone pleas… --- ## [Multiple filebeat to one logstash. How to optimize the configuration](https://discuss.elastic.co/t/multiple-filebeat-to-one-logstash-how-to-optimize-the-configuration/207045)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 3\ **Last updated:** [November 8, 2019, 3:47pm UTC](https://discuss.elastic.co/t/multiple-filebeat-to-one-logstash-how-to-optimize-the-configuration/207045 "2019-11-08T15:47:56Z")
I have 10 servers that i have Filebeat installed in. Each server monitors 2 applications, a total of 20 applications. I have one Logstash server which collects all the above logs and passes it to Elasticsearch after fil… --- ## [Elastic search access URL](https://discuss.elastic.co/t/elastic-search-access-url/103499)
**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\ **Replies:** 3\ **Last updated:** [October 12, 2017, 4:40am UTC](https://discuss.elastic.co/t/elastic-search-access-url/103499 "2017-10-12T04:40:55Z")
I Installed Elastic search in Linux machine (houtestdb1), and It's running fine as following URL: curl -X GET 'http://localhost:9200/logstash-test-01/\_search?pretty=1' -d '{}' logstash-test-01 --\> It's index. Now, … --- ## [Found unrecoverable error for ES 6.0](https://discuss.elastic.co/t/found-unrecoverable-error-for-es-6-0/109331)
**Author:** [@winsen684](https://discuss.elastic.co/u/winsen684)\ **Replies:** 7\ **Last updated:** [December 4, 2017, 9:10am UTC](https://discuss.elastic.co/t/found-unrecoverable-error-for-es-6-0/109331 "2017-12-04T09:10:12Z")
Log: 17/11/28 13:52:52 ERROR TaskContextImpl: Error in TaskCompletionListener org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: Found unrecoverable error \[x.x.x.x:9205\] returned Internal Server Error(500) - compoun… --- ## [Create new event in logstash filter](https://discuss.elastic.co/t/create-new-event-in-logstash-filter/24375)
**Author:** [@Andrej\_Kurocenko](https://discuss.elastic.co/u/Andrej_Kurocenko)\ **Replies:** 1\ **Last updated:** [June 26, 2015, 5:02am UTC](https://discuss.elastic.co/t/create-new-event-in-logstash-filter/24375 "2015-06-26T05:02:36Z")
Hello, when processing particular events by filters i would like sometimes to create new event with one attribute same as in original event (and store this new event into other elastic search index for further terms lo… --- ## [How to use keystore in Dockerized logstash?](https://discuss.elastic.co/t/how-to-use-keystore-in-dockerized-logstash/199694)
**Author:** [@furiabhavesh](https://discuss.elastic.co/u/furiabhavesh)\ **Replies:** 2\ **Last updated:** [October 13, 2019, 6:35am UTC](https://discuss.elastic.co/t/how-to-use-keystore-in-dockerized-logstash/199694 "2019-10-13T06:35:07Z")
I am referring this help document to setup logstash 7.3.2 using docker and wanted to pass few environment variables which I further want to access in my input block of the.conf files Eg: docker run -e TCP\_PORT=123... i… --- ## [Doubts about creating indexes based on log timestamps](https://discuss.elastic.co/t/doubts-about-creating-indexes-based-on-log-timestamps/73120)
**Author:** [@lcanas](https://discuss.elastic.co/u/lcanas)\ **Replies:** 4\ **Last updated:** [January 30, 2017, 4:21pm UTC](https://discuss.elastic.co/t/doubts-about-creating-indexes-based-on-log-timestamps/73120 "2017-01-30T16:21:03Z")
Hi guys! during the last days I've been reading documentation in order to get my apache logs imported in different indexes based on the date of the log entries. With the configuration below I got it running with indexe… --- ## [Send an array of string in query and get all the documents in which the field value matching with any of the array element value](https://discuss.elastic.co/t/send-an-array-of-string-in-query-and-get-all-the-documents-in-which-the-field-value-matching-with-any-of-the-array-element-value/222572)
**Author:** [@Praneeth\_Kumar](https://discuss.elastic.co/u/Praneeth_Kumar)\ **Replies:** 1\ **Last updated:** [March 7, 2020, 11:06pm UTC](https://discuss.elastic.co/t/send-an-array-of-string-in-query-and-get-all-the-documents-in-which-the-field-value-matching-with-any-of-the-array-element-value/222572 "2020-03-07T23:06:37Z")
Currently, my documents in my index has data like this { "\_index" : "traffic", "\_type" : "\_doc", "\_id" : "dYY7m3AB\_cmkU5saDRdM", "\_score" : 4.078947, "keyword" : "baby toothp… --- ## [java.lang.VerifyError: class org.elasticsearch.transport.Netty3Plugin overrides final method onModule](https://discuss.elastic.co/t/java-lang-verifyerror-class-org-elasticsearch-transport-netty3plugin-overrides-final-method-onmodule/70409)
**Author:** [@Cherry\_Zhang](https://discuss.elastic.co/u/Cherry_Zhang)\ **Replies:** 1\ **Last updated:** [January 3, 2017, 11:23am UTC](https://discuss.elastic.co/t/java-lang-verifyerror-class-org-elasticsearch-transport-netty3plugin-overrides-final-method-onmodule/70409 "2017-01-03T11:23:06Z")
I've upgrade my transport client from 5.0.0 to 5.1.1, here is my code: Settings settings = Settings.builder() .put("cluster.name", elasticClusterName) .put("client.transport.sniff", true).bui… --- ## [JSON Input Query](https://discuss.elastic.co/t/json-input-query/37249)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 1\ **Last updated:** [February 12, 2016, 5:17am UTC](https://discuss.elastic.co/t/json-input-query/37249 "2016-02-12T05:17:35Z")
How to use JSON input query on Y-axis for Count aggregation? I have field named "success" value having values "Ture/False".. where in want to show the count of only "success=true" Put { "script" : "doc\['success'\].val… --- ## [Visualization on the basis of months](https://discuss.elastic.co/t/visualization-on-the-basis-of-months/204997)
**Author:** [@suraj\_kumar3](https://discuss.elastic.co/u/suraj_kumar3)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 2:39pm UTC](https://discuss.elastic.co/t/visualization-on-the-basis-of-months/204997 "2019-10-25T14:39:22Z")
I want to have a visualization where x axis will represent months and y axis represents cost in that month. but, the file having the data is having separate columns for every months. how to achieve this requirement of d… --- ## [How to search for "logname.log" in kibana?](https://discuss.elastic.co/t/how-to-search-for-logname-log-in-kibana/106354)
**Author:** [@marcuy](https://discuss.elastic.co/u/marcuy)\ **Replies:** 3\ **Last updated:** [November 6, 2017, 9:35pm UTC](https://discuss.elastic.co/t/how-to-search-for-logname-log-in-kibana/106354 "2017-11-06T21:35:50Z")
Hello, I'am adding filebat in many servers to send jboss logs to Logstash \> Elastisearch \> Kibana I need to search for "log name" in kibana, for example "server\_appname.log" but does not works. (beat.version:5.6.3) A… --- ## [Failed to execute action:message=\>"Unable to configure plugins](https://discuss.elastic.co/t/failed-to-execute-action-message-unable-to-configure-plugins/312106)
**Author:** [@Eina\_Zia](https://discuss.elastic.co/u/Eina_Zia)\ **Replies:** 2\ **Last updated:** [August 16, 2022, 3:35am UTC](https://discuss.elastic.co/t/failed-to-execute-action-message-unable-to-configure-plugins/312106 "2022-08-16T03:35:59Z")
Hello everyone1 I am new to logstash and I have been trying for so long to import dataset through logstash. I keep on getting error. This is my recent attempt. Without super user, it is not giving me permission even afte… --- ## [Using Elasticsearch as an input Errors](https://discuss.elastic.co/t/using-elasticsearch-as-an-input-errors/34400)
**Author:** [@andy.barton](https://discuss.elastic.co/u/andy.barton)\ **Replies:** 2\ **Last updated:** [November 1, 2016, 1:44pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-an-input-errors/34400 "2016-11-01T13:44:20Z")
Hopefully someone will be able to help with this as it is driving me mad at the moment! I have successfully managed to load 2.8m records into an elasticsearch cluster using sql server as the source. I am now trying t… --- ## [Cluster locks up if master node filesystem becomes read-only](https://discuss.elastic.co/t/cluster-locks-up-if-master-node-filesystem-becomes-read-only/38245)
**Author:** [@Paul\_Maseberg](https://discuss.elastic.co/u/Paul_Maseberg)\ **Replies:** 2\ **Last updated:** [January 2, 2016, 12:51am UTC](https://discuss.elastic.co/t/cluster-locks-up-if-master-node-filesystem-becomes-read-only/38245 "2016-01-02T00:51:04Z")
Have a three node cluster running elasticsearch 2.1.0. The master node is also a data node. The machine that was master had hardware issues and the filesystem became read only. The whole cluster locked up until I killed … --- ## [Kibana Serach (Cheat Sheet)](https://discuss.elastic.co/t/kibana-serach-cheat-sheet/32108)
**Author:** [@cwelber](https://discuss.elastic.co/u/cwelber)\ **Replies:** 2\ **Last updated:** [October 13, 2015, 7:21pm UTC](https://discuss.elastic.co/t/kibana-serach-cheat-sheet/32108 "2015-10-13T19:21:25Z")
Hello everyone, I'm relatively new to Kibana and I'm wondering if anyone has created a Kibana search "Cheat Sheet." Thanks! --- ## [I can't get Elastic and Kibana to work with real certificates](https://discuss.elastic.co/t/i-cant-get-elastic-and-kibana-to-work-with-real-certificates/317282)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 5\ **Last updated:** [October 24, 2022, 5:23am UTC](https://discuss.elastic.co/t/i-cant-get-elastic-and-kibana-to-work-with-real-certificates/317282 "2022-10-24T05:23:35Z")
I can't get Elastic and Kibana to work with real certificates from either Let's encrypt or Comodo. I've thought about it a thousand times, but no matter how much I read and reread, I can't find the error of something as… --- ## [Xml parser with xpath giving wrong result in xml filter plugin](https://discuss.elastic.co/t/xml-parser-with-xpath-giving-wrong-result-in-xml-filter-plugin/97666)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 5\ **Last updated:** [August 24, 2017, 2:33pm UTC](https://discuss.elastic.co/t/xml-parser-with-xpath-giving-wrong-result-in-xml-filter-plugin/97666 "2017-08-24T14:33:07Z")
Hi All i am having a xml filter, which looks like this xml { source =\> "message" target =\> "message\_parsed" add\_tag =\> \["xml\_parsed"\] remove\_namespaces =\> true store\_xml =\> … --- ## [Getting subsequent lines after search string](https://discuss.elastic.co/t/getting-subsequent-lines-after-search-string/38466)
**Author:** [@sreedeep](https://discuss.elastic.co/u/sreedeep)\ **Replies:** 5\ **Last updated:** [January 6, 2016, 7:16am UTC](https://discuss.elastic.co/t/getting-subsequent-lines-after-search-string/38466 "2016-01-06T07:16:29Z")
Hi, I have a requirement in elastic search to display n lines after the search result. So I will search with an expression and when I select the search result, it should display n lines after that. Is there a way t… --- ## [\[ANNOUNCEMENT\] retsbeat released](https://discuss.elastic.co/t/announcement-retsbeat-released/59545)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 3\ **Last updated:** [September 1, 2016, 10:44pm UTC](https://discuss.elastic.co/t/announcement-retsbeat-released/59545 "2016-09-01T22:44:07Z")
The Real Estate Transaction Standard (RETS) is used in the real estate industry to facilitate the exchange of data among real estate actors such as agents, brokers, owners and many more, over the HTTP protocol. « retsbea… --- ## [Stuck with lots of empty indices for every beat version I've ever used](https://discuss.elastic.co/t/stuck-with-lots-of-empty-indices-for-every-beat-version-ive-ever-used/294204)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 6\ **Last updated:** [January 13, 2022, 8:10pm UTC](https://discuss.elastic.co/t/stuck-with-lots-of-empty-indices-for-every-beat-version-ive-ever-used/294204 "2022-01-13T20:10:14Z")
Hello, I run a small 2-node cluster with a kitchen sink of beats and elastic agents on approx. 20 hosts. Nevertheless, I have a ton of indices and I'm hitting the cluster.max\_shards\_per\_node. There is not much data in … --- ## [How to put Kibana Dashboard PNG inline in the body of automated email using Watcher?](https://discuss.elastic.co/t/how-to-put-kibana-dashboard-png-inline-in-the-body-of-automated-email-using-watcher/227978)
**Author:** [@qualispec](https://discuss.elastic.co/u/qualispec)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 2:05am UTC](https://discuss.elastic.co/t/how-to-put-kibana-dashboard-png-inline-in-the-body-of-automated-email-using-watcher/227978 "2020-04-15T02:05:56Z")
I am using Kibana 7.5.0. I am trying to use Watcher to send automated emails of Kibana Dashboards on a schedule. I've read this documentation: https://www.elastic.co/guide/en/elasticsearch/reference/current/actions-ema… --- ## [Kibana server is not ready yet in v 7.2](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-v-7-2/192889)
**Author:** [@nuwan](https://discuss.elastic.co/u/nuwan)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 1:26pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-v-7-2/192889 "2019-07-30T13:26:16Z")
when I try to access kibana from the following URL I got "Kibana server is not ready yet" http://172.24.36.204:5601/ kibana.log {"type":"log","@timestamp":"2019-07-30T12:10:52Z","tags":\["reporting","browser-driver","e… --- ## [Node is in cluster but shards are unassigned](https://discuss.elastic.co/t/node-is-in-cluster-but-shards-are-unassigned/88916)
**Author:** [@Kumar\_Narottam](https://discuss.elastic.co/u/Kumar_Narottam)\ **Replies:** 7\ **Last updated:** [June 14, 2017, 11:00am UTC](https://discuss.elastic.co/t/node-is-in-cluster-but-shards-are-unassigned/88916 "2017-06-14T11:00:48Z")
We had a heap memory limit exceeded error today. I will detail in chronological order Information: Elastic version : 5.2 Number of node: 5 Total Shards : 37 Total Primary : 16 Total Replica : 21 No of index : 4 H… --- ## [Logstash 8.0 is adding extra field](https://discuss.elastic.co/t/logstash-8-0-is-adding-extra-field/297594)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 3\ **Last updated:** [March 4, 2022, 3:50pm UTC](https://discuss.elastic.co/t/logstash-8-0-is-adding-extra-field/297594 "2022-03-04T15:50:19Z")
logstash consuming JSON messages from Kafka and indexing them into Elasticsearch. we found that logstash version 8.0 is adding the additional field event with the value of the actual message. could you please let me kno… --- ## [Filebeat with Logstash failed to create Index](https://discuss.elastic.co/t/filebeat-with-logstash-failed-to-create-index/271561)
**Author:** [@madhug](https://discuss.elastic.co/u/madhug)\ **Replies:** 8\ **Last updated:** [April 29, 2021, 11:10pm UTC](https://discuss.elastic.co/t/filebeat-with-logstash-failed-to-create-index/271561 "2021-04-29T23:10:32Z")
Hi , I am new to ELK stack started exploring the tool. First I had setup ELK stack without filebeat everything is working fine. Wanted to explore the Filebeat after installing and configuring I do not see index create… --- ## [System/load not registered in Windows](https://discuss.elastic.co/t/system-load-not-registered-in-windows/137624)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 4:44pm UTC](https://discuss.elastic.co/t/system-load-not-registered-in-windows/137624 "2018-06-27T16:44:27Z")
I am getting the error "metricset 'system/load' is not registered, metricset not found". I know that on Windows the system/load metricset is not supported. It is commented out in my metricbeat.yml file: #==============… --- ## [How to get labels on pie chart visualization](https://discuss.elastic.co/t/how-to-get-labels-on-pie-chart-visualization/104495)
**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 8:05am UTC](https://discuss.elastic.co/t/how-to-get-labels-on-pie-chart-visualization/104495 "2017-10-24T08:05:59Z")
I have just started working with Kibana and I wondering if there is a way to add labels to the actual parts of a pie chart visualization. Right now I can hover over the pie pieces and see what the pie represents, but I w… --- ## [Search widget for embed mode](https://discuss.elastic.co/t/search-widget-for-embed-mode/124055)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 2\ **Last updated:** [March 16, 2018, 5:37pm UTC](https://discuss.elastic.co/t/search-widget-for-embed-mode/124055 "2018-03-16T17:37:37Z")
Hi there, when sharing a dashboard with stakeholders, you have the option to go for the embed mode. The search bar in gone tho, which is somehow limiting the search experience. To mitigate that, I have created a simpl… --- ## [If then else not working in FileBeat processor](https://discuss.elastic.co/t/if-then-else-not-working-in-filebeat-processor/295560)
**Author:** [@ziv1](https://discuss.elastic.co/u/ziv1)\ **Replies:** 1\ **Last updated:** [January 27, 2022, 12:28pm UTC](https://discuss.elastic.co/t/if-then-else-not-working-in-filebeat-processor/295560 "2022-01-27T12:28:00Z")
I'm trying to setup some processors in a filebeat.yml to process some logs before sending to ELK. An important part of the processing is determining the "level" of the event, which is not always included in the line in … --- ## [Plugin:elasticsearch@5.1.2 Authentication Exception](https://discuss.elastic.co/t/plugin-elasticsearch-5-1-2-authentication-exception/72111)
**Author:** [@antwanvanderstap](https://discuss.elastic.co/u/antwanvanderstap)\ **Replies:** 1\ **Last updated:** [January 19, 2017, 6:42am UTC](https://discuss.elastic.co/t/plugin-elasticsearch-5-1-2-authentication-exception/72111 "2017-01-19T06:42:15Z")
Not looking to be spoon fed a solution ... more a pointer to some kind of debugging I can perform .... The error "plugin:elasticsearch@5.1.2 Authentication Exception" is driving me bananas and I have tried different use… --- ## [High cpu usage 100% on elastic search servers](https://discuss.elastic.co/t/high-cpu-usage-100-on-elastic-search-servers/260442)
**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\ **Replies:** 5\ **Last updated:** [January 11, 2021, 1:41pm UTC](https://discuss.elastic.co/t/high-cpu-usage-100-on-elastic-search-servers/260442 "2021-01-11T13:41:12Z")
Hello, I've a problem with elastic search that it use100% of CPU; with ES 7.9.3.: 3 nodes. 6 CPU(s) -Xms8g -Xmx8g Kibana run slowly and nodes states is yellow ! Thanks for helping Regards, Rali --- ## [Translate plugin doesn't work](https://discuss.elastic.co/t/translate-plugin-doesnt-work/54034)
**Author:** [@Alexey\_Khudyakov](https://discuss.elastic.co/u/Alexey_Khudyakov)\ **Replies:** 5\ **Last updated:** [August 5, 2016, 7:06pm UTC](https://discuss.elastic.co/t/translate-plugin-doesnt-work/54034 "2016-08-05T19:06:17Z")
Dear community, I tried to add descriptions of network protocols but unfortunately it doesn't work :frowning: Here is the part of logstash's config file #Protocol friendly naming translate { field =\> "\[… --- ## [Exception: java.lang.ThreadDeath thrown from the UncaughtExceptionHandler in logstash.err](https://discuss.elastic.co/t/exception-java-lang-threaddeath-thrown-from-the-uncaughtexceptionhandler-in-logstash-err/40010)
**Author:** [@Sergey.k](https://discuss.elastic.co/u/Sergey.k)\ **Replies:** 0\ **Last updated:** [January 25, 2016, 10:30am UTC](https://discuss.elastic.co/t/exception-java-lang-threaddeath-thrown-from-the-uncaughtexceptionhandler-in-logstash-err/40010 "2016-01-25T10:30:15Z")
HI. I have a exceptions in logstash.err file Exception: java.lang.ThreadDeath thrown from the UncaughtExceptionHandler in thread "Thread-482" This topic is similar to https://discuss.elastic.co/t/exception-java-lang-t… --- ## [Can't see Suricata events in Kibana](https://discuss.elastic.co/t/cant-see-suricata-events-in-kibana/171516)
**Author:** [@thoarau](https://discuss.elastic.co/u/thoarau)\ **Replies:** 1\ **Last updated:** [March 10, 2019, 2:54am UTC](https://discuss.elastic.co/t/cant-see-suricata-events-in-kibana/171516 "2019-03-10T02:54:57Z")
I'm trying to send Suricata event to the ELK stack . I have the ELK stack on a server and on an other server I have Suricata and Filebeat. I activated the filebeat suricata module and Filebeat send event from eve.json fi… --- ## [How can I rerank query results by using Euclidean distance on fields have datatype is vector in elasticsearch?](https://discuss.elastic.co/t/how-can-i-rerank-query-results-by-using-euclidean-distance-on-fields-have-datatype-is-vector-in-elasticsearch/191319)
**Author:** [@gia\_huy](https://discuss.elastic.co/u/gia_huy)\ **Replies:** 1\ **Last updated:** [July 23, 2019, 2:26pm UTC](https://discuss.elastic.co/t/how-can-i-rerank-query-results-by-using-euclidean-distance-on-fields-have-datatype-is-vector-in-elasticsearch/191319 "2019-07-23T14:26:05Z")
I have a question about Elasticsearch. Namely, I have some data about embedding vectors (dense vector) and their corresponding string tokens from a algorithm using K-Means to map them from high-dimensionality vector spac… --- ## [Permissions on index types](https://discuss.elastic.co/t/permissions-on-index-types/49109)
**Author:** [@Bobby\_Pilot](https://discuss.elastic.co/u/Bobby_Pilot)\ **Replies:** 0\ **Last updated:** [May 3, 2016, 9:23pm UTC](https://discuss.elastic.co/t/permissions-on-index-types/49109 "2016-05-03T21:23:58Z")
The current documentation shows how to configure permissions for a given index (or index pattern). If field level security is being used, it must assume the fields are for all types within that index... I need to be able… --- ## [Kibana 6.6.2 fails with Unable to revive connection: https://sample-elasticsearch.elasticsearch:9200/](https://discuss.elastic.co/t/kibana-6-6-2-fails-with-unable-to-revive-connection-https-sample-elasticsearch-elasticsearch-9200/204640)
**Author:** [@Bharath\_venkat](https://discuss.elastic.co/u/Bharath_venkat)\ **Replies:** 8\ **Last updated:** [October 24, 2019, 5:04am UTC](https://discuss.elastic.co/t/kibana-6-6-2-fails-with-unable-to-revive-connection-https-sample-elasticsearch-elasticsearch-9200/204640 "2019-10-24T05:04:18Z")
Hi , I am trying to create SAML SSO authentication and secure elk with TLS/SSL on kubernetes . Following the post . Kibana is unable to connect to elasticsearch. I could successfully deploy elasticsearch with x-pack tl… --- ## [Use logcheck ignore rules](https://discuss.elastic.co/t/use-logcheck-ignore-rules/51149)
**Author:** [@quimnuss](https://discuss.elastic.co/u/quimnuss)\ **Replies:** 5\ **Last updated:** [May 30, 2016, 1:45pm UTC](https://discuss.elastic.co/t/use-logcheck-ignore-rules/51149 "2016-05-30T13:45:06Z")
I've started using ELK yesterday, moving from logcheck and I would like to re-use the ignore rules of logcheck and some custom I had added. I currently have two servers providing logs throught filebeat to logstash, who t… [Previous page](https://discuss.elastic.co/top.md?page=728&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=730&per_page=50&period=all)