# Top

**URL:** https://discuss.elastic.co/top.md?page=731&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 732

---

## [File-Beat-Kafka-Producer-config](https://discuss.elastic.co/t/file-beat-kafka-producer-config/139175)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 4\
**Last updated:** [July 31, 2018, 5:27am UTC](https://discuss.elastic.co/t/file-beat-kafka-producer-config/139175 "2018-07-31T05:27:09Z")

</div>

Hi All, I am using kafka as Filebeat output . I am seeing below exception while sending data to kafka topic , 2018-07-09T13:54:10+02:00 INFO producer/broker/\[\[0\]\] maximum request accumulated, waiting for space 2018-…

---

## [Elasticsearch 7.7 - all shards failed and task cancelled with channel closed](https://discuss.elastic.co/t/elasticsearch-7-7-all-shards-failed-and-task-cancelled-with-channel-closed/261184)

<div class="topic-metadata">

**Author:** [@jamesp](https://discuss.elastic.co/u/jamesp)\
**Replies:** 5\
**Last updated:** [January 19, 2021, 7:57pm UTC](https://discuss.elastic.co/t/elasticsearch-7-7-all-shards-failed-and-task-cancelled-with-channel-closed/261184 "2021-01-19T19:57:24Z")

</div>

Hello all, I set up a 3 node cluster using the included JRE on Windows 2016 servers with 12 GB RAM (java min/max 6GB) which seemed to be running fine without a lot of traffic. After hooking it up to a search GUI I start…

---

## [JSON data split up (\_jsonparseerror) in logstash-7.2.0-1. Works fine in logstash-7.1.1-1](https://discuss.elastic.co/t/json-data-split-up-jsonparseerror-in-logstash-7-2-0-1-works-fine-in-logstash-7-1-1-1/190624)

<div class="topic-metadata">

**Author:** [@sjaganna](https://discuss.elastic.co/u/sjaganna)\
**Replies:** 5\
**Last updated:** [August 13, 2019, 7:22am UTC](https://discuss.elastic.co/t/json-data-split-up-jsonparseerror-in-logstash-7-2-0-1-works-fine-in-logstash-7-1-1-1/190624 "2019-08-13T07:22:33Z")

</div>

Hello! I've been in the midst of working with the ELK stack for the first time. I'm currently sending data from Metricbeat -\> Logstash -\> an external script (output sent over TCP) -\> Logstash -\> Elasticsearch. However, …

---

## [Get different results when using term with the same args](https://discuss.elastic.co/t/get-different-results-when-using-term-with-the-same-args/77255)

<div class="topic-metadata">

**Author:** [@feiTian](https://discuss.elastic.co/u/feiTian)\
**Replies:** 5\
**Last updated:** [March 6, 2017, 2:29pm UTC](https://discuss.elastic.co/t/get-different-results-when-using-term-with-the-same-args/77255 "2017-03-06T14:29:44Z")

</div>

Hi, I am trying to find out a way do multi-value exact search. But I met a very wired issue. It returns different results if the sequence of args is different. I am using term to filter: {"filter": {"term": {"ContentMa…

---

## [ES 5.1.1 node stuck in endless loop halting the whole cluster](https://discuss.elastic.co/t/es-5-1-1-node-stuck-in-endless-loop-halting-the-whole-cluster/71408)

<div class="topic-metadata">

**Author:** [@AndreCimander](https://discuss.elastic.co/u/AndreCimander)\
**Replies:** 5\
**Last updated:** [January 17, 2017, 4:25pm UTC](https://discuss.elastic.co/t/es-5-1-1-node-stuck-in-endless-loop-halting-the-whole-cluster/71408 "2017-01-17T16:25:20Z")

</div>

Hi everybody, we are seeing cluster hangs caused by single nodes beeing stuck in a 100%-cpu thread loop. The offending node has timeouts for various collectors, yet it is not removed from the cluster and all nodes star…

---

## [Today my master node core dumped](https://discuss.elastic.co/t/today-my-master-node-core-dumped/29056)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 5\
**Last updated:** [September 17, 2015, 9:00pm UTC](https://discuss.elastic.co/t/today-my-master-node-core-dumped/29056 "2015-09-17T21:00:42Z")

</div>

Using 1.6.0 # JRE version: Java(TM) SE Runtime Environment (8.0\_45-b15) (build 1.8.0\_45-b15) # Java VM: Java HotSpot(TM) 64-Bit Server VM (25.45-b02 mixed mode windows-amd64 compressed oops) # Problematic frame: # C \[…

---

## [Filebeat god restart](https://discuss.elastic.co/t/filebeat-god-restart/281723)

<div class="topic-metadata">

**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\
**Replies:** 7\
**Last updated:** [August 19, 2021, 1:21pm UTC](https://discuss.elastic.co/t/filebeat-god-restart/281723 "2021-08-19T13:21:47Z")

</div>

I want to restart an old Filebeat service after modifying its output. This is the result of ps -eaf | grep filebeat: root 6405 1 0 2020 ? 00:00:00 /usr/share/filebeat/bin/filebeat-god -r / -n -p /var/…

---

## [Elasticsearch reindex API is not able to copy the documents](https://discuss.elastic.co/t/elasticsearch-reindex-api-is-not-able-to-copy-the-documents/263121)

<div class="topic-metadata">

**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\
**Replies:** 7\
**Last updated:** [February 4, 2021, 7:21am UTC](https://discuss.elastic.co/t/elasticsearch-reindex-api-is-not-able-to-copy-the-documents/263121 "2021-02-04T07:21:50Z")

</div>

Hi, I am using Elasticsearch 7.8.0. I am trying to copy documents from one index to another using reindex API. I tried 2 cases. Case 1. Only source index is present in the Elasticsearch cluster. Destination index is n…

---

## [Get average of daily count in Kibana Data Table visualization](https://discuss.elastic.co/t/get-average-of-daily-count-in-kibana-data-table-visualization/138744)

<div class="topic-metadata">

**Author:** [@chetang](https://discuss.elastic.co/u/chetang)\
**Replies:** 1\
**Last updated:** [July 5, 2018, 3:05pm UTC](https://discuss.elastic.co/t/get-average-of-daily-count-in-kibana-data-table-visualization/138744 "2018-07-05T15:05:31Z")

</div>

Hi, I want to get average of daily inventory count per category in data table visualization. Below is a simple case where we have an inventory of two categories of items. Blank in out date means it's still in inventor…

---

## [Retention Policy for a single growing index](https://discuss.elastic.co/t/retention-policy-for-a-single-growing-index/121191)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 7\
**Last updated:** [March 1, 2018, 5:24am UTC](https://discuss.elastic.co/t/retention-policy-for-a-single-growing-index/121191 "2018-03-01T05:24:59Z")

</div>

I have a Single index and its growing daily and as i cant use Curator for data retention as it cant delete data from index How should i proceed A help would be really appreciated Regards Shrikant

---

## [This output type currently does not support connectivity to a remote Elasticsearch cluster](https://discuss.elastic.co/t/this-output-type-currently-does-not-support-connectivity-to-a-remote-elasticsearch-cluster/335914)

<div class="topic-metadata">

**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\
**Replies:** 0\
**Last updated:** [June 13, 2023, 8:45pm UTC](https://discuss.elastic.co/t/this-output-type-currently-does-not-support-connectivity-to-a-remote-elasticsearch-cluster/335914 "2023-06-13T20:45:26Z")

</div>

Greetings, I have the following error in fleet that I can't fix. This output type currently does not support connectivity to a remote Elasticsearch cluster. I share the elasticsearch.yml, maybe some configuration is g…

---

## [Adding a custom similarity plugin at index and cluster level in elasticsearch 2.3](https://discuss.elastic.co/t/adding-a-custom-similarity-plugin-at-index-and-cluster-level-in-elasticsearch-2-3/58986)

<div class="topic-metadata">

**Author:** [@tdicken73](https://discuss.elastic.co/u/tdicken73)\
**Replies:** 0\
**Last updated:** [August 25, 2016, 11:13pm UTC](https://discuss.elastic.co/t/adding-a-custom-similarity-plugin-at-index-and-cluster-level-in-elasticsearch-2-3/58986 "2016-08-25T23:13:50Z")

</div>

I'm attempting to build my own similarity plugin and use it for the basis of scoring on an index. I have a built similarity plugin that I've dropped in my elasticsearch libs folder. I am adding it to the libs folder beca…

---

## [Output of \`logstash -e 'input { stdin { } } output { stdout {} }'\`](https://discuss.elastic.co/t/output-of-logstash-e-input-stdin-output-stdout/210244)

<div class="topic-metadata">

**Author:** [@Willl](https://discuss.elastic.co/u/Willl)\
**Replies:** 2\
**Last updated:** [December 3, 2019, 9:24pm UTC](https://discuss.elastic.co/t/output-of-logstash-e-input-stdin-output-stdout/210244 "2019-12-03T21:24:08Z")

</div>

Hi Testing a new 7.5.0 setup. Brand new. Logstash doc says test it with logstash -e 'input { stdin { } } output { stdout {} }' and then enter "hello world" after logstash says "pipeline is started" and I should se…

---

## [X-pack security Native authentication is free?](https://discuss.elastic.co/t/x-pack-security-native-authentication-is-free/101000)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 2\
**Last updated:** [September 19, 2017, 9:36am UTC](https://discuss.elastic.co/t/x-pack-security-native-authentication-is-free/101000 "2017-09-19T09:36:20Z")

</div>

I have install x-pack and just want to use authentication security feature for kibana and elasticsearch. What feature of x-pack are free?

---

## [Running embedded elastic search for unit testing: configuration problem](https://discuss.elastic.co/t/running-embedded-elastic-search-for-unit-testing-configuration-problem/9213)

<div class="topic-metadata">

**Author:** [@Paul\_Sanwald](https://discuss.elastic.co/u/Paul_Sanwald)\
**Replies:** 2\
**Last updated:** [October 2, 2012, 6:01pm UTC](https://discuss.elastic.co/t/running-embedded-elastic-search-for-unit-testing-configuration-problem/9213 "2012-10-02T18:01:15Z")

</div>

Hi, I'm trying to run elasticsearch locally inside a unit testing framework, and running into a bit of trouble. The behavior I am seeing is that Get requests work fine, but Search requests for some reason give me …

---

## [Failed to connect AWS ES cluster](https://discuss.elastic.co/t/failed-to-connect-aws-es-cluster/275314)

<div class="topic-metadata">

**Author:** [@richzw](https://discuss.elastic.co/u/richzw)\
**Replies:** 3\
**Last updated:** [June 9, 2021, 6:13am UTC](https://discuss.elastic.co/t/failed-to-connect-aws-es-cluster/275314 "2021-06-09T06:13:58Z")

</div>

Hi We try to connect to AWS ES through file beat, However, the following errors comes up pipeline/output.go:100 Failed to connect to backoff(elasticsearch(https://xxx.us-east-1.es.amazonaws.com:443)): Connection marke…

---

## [{PayloadSenderV2} Failed sending events. Following events were not transferred successfully to the server](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/217184)

<div class="topic-metadata">

**Author:** [@J\_Weeda](https://discuss.elastic.co/u/J_Weeda)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 2:06pm UTC](https://discuss.elastic.co/t/payloadsenderv2-failed-sending-events-following-events-were-not-transferred-successfully-to-the-server/217184 "2020-02-04T14:06:40Z")

</div>

Kibana version : 7.4.0 \[Cloud\] Elasticsearch version : 7.4.0 \[Cloud\] APM Server version : 7.4.0 APM Agent language and version : dotnet 1.2 Browser version : N/A Original install method (e.g. download page, yum…

---

## [Can we able to visualize the data from Nagios to kibana](https://discuss.elastic.co/t/can-we-able-to-visualize-the-data-from-nagios-to-kibana/203866)

<div class="topic-metadata">

**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\
**Replies:** 3\
**Last updated:** [October 17, 2019, 5:30am UTC](https://discuss.elastic.co/t/can-we-able-to-visualize-the-data-from-nagios-to-kibana/203866 "2019-10-17T05:30:56Z")

</div>

We are using nagios as monitoring tool which contains several server activities.Can we visualize the same data to kibana

---

## [Spark cannot connect to Elastic Cloud with Shield enabled](https://discuss.elastic.co/t/spark-cannot-connect-to-elastic-cloud-with-shield-enabled/44103)

<div class="topic-metadata">

**Author:** [@Pham\_Khanh](https://discuss.elastic.co/u/Pham_Khanh)\
**Replies:** 3\
**Last updated:** [March 21, 2016, 9:21am UTC](https://discuss.elastic.co/t/spark-cannot-connect-to-elastic-cloud-with-shield-enabled/44103 "2016-03-21T09:21:13Z")

</div>

Hi all, I tried to connect my Spark code with Elastic Cloud without success. Following this post https://www.elastic.co/guide/en/cloud/current/shield.html, I have a configuration as follow: es.http.timeout=5m es.index.au…

---

## [Is JMS output even possible?](https://discuss.elastic.co/t/is-jms-output-even-possible/53177)

<div class="topic-metadata">

**Author:** [@pjoyce](https://discuss.elastic.co/u/pjoyce)\
**Replies:** 3\
**Last updated:** [June 17, 2016, 8:16pm UTC](https://discuss.elastic.co/t/is-jms-output-even-possible/53177 "2016-06-17T20:16:22Z")

</div>

I'm hoping someone here can provide just a basic example of using the logstash-output-jms plugin for logstash. The site itself has no info and I can find no config examples for output anywhere. Is this a valid plugin ? …

---

## [If Else in logstash filter](https://discuss.elastic.co/t/if-else-in-logstash-filter/251019)

<div class="topic-metadata">

**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\
**Replies:** 6\
**Last updated:** [October 6, 2020, 2:53pm UTC](https://discuss.elastic.co/t/if-else-in-logstash-filter/251019 "2020-10-06T14:53:38Z")

</div>

hey Guys, kindly help me to solve this There are two types of messages that i am trying to parse 1. {"Code":"BOSIIF902","Message":"Backup stopped. Error during the backup :: SOAP-ERROR: P","time":1583470627,"userId"…

---

## [Elastic search 6.3.0 SQL query API](https://discuss.elastic.co/t/elastic-search-6-3-0-sql-query-api/138348)

<div class="topic-metadata">

**Author:** [@raghav1107](https://discuss.elastic.co/u/raghav1107)\
**Replies:** 6\
**Last updated:** [July 9, 2018, 7:32am UTC](https://discuss.elastic.co/t/elastic-search-6-3-0-sql-query-api/138348 "2018-07-09T07:32:56Z")

</div>

Hi, It was great to hear that SQL query like API has been introduced into elastic search 6.3.0. I installed elastic search 6.3.0 to try this feature and was able to get the data from elastic search through SQL query API…

---

## [Can some one give real time scenarios on ELK stack?](https://discuss.elastic.co/t/can-some-one-give-real-time-scenarios-on-elk-stack/86496)

<div class="topic-metadata">

**Author:** [@Maha](https://discuss.elastic.co/u/Maha)\
**Replies:** 6\
**Last updated:** [May 28, 2017, 7:25pm UTC](https://discuss.elastic.co/t/can-some-one-give-real-time-scenarios-on-elk-stack/86496 "2017-05-28T19:25:38Z")

</div>

This text will be hidden

---

## [Visualizing aggregates of events](https://discuss.elastic.co/t/visualizing-aggregates-of-events/83311)

<div class="topic-metadata">

**Author:** [@bontchev](https://discuss.elastic.co/u/bontchev)\
**Replies:** 6\
**Last updated:** [May 26, 2017, 12:39pm UTC](https://discuss.elastic.co/t/visualizing-aggregates-of-events/83311 "2017-05-26T12:39:26Z")

</div>

Hello folks, First of all, let me apologize if I've posted this to the wrong forum; I wasn't certain whether it is a Kibana- or a Logstash-related issue. I am running a honeypot (Cowrie) that generates a JSON log of …

---

## [Adding Time Picker option when sharing Dashboard iframe](https://discuss.elastic.co/t/adding-time-picker-option-when-sharing-dashboard-iframe/49859)

<div class="topic-metadata">

**Author:** [@jeremyr](https://discuss.elastic.co/u/jeremyr)\
**Replies:** 1\
**Last updated:** [May 12, 2016, 2:29pm UTC](https://discuss.elastic.co/t/adding-time-picker-option-when-sharing-dashboard-iframe/49859 "2016-05-12T14:29:21Z")

</div>

Hi All, Is there a way to add the Time Picker Option when we export the Dashboard in an iframe for Kibana 4.5? I tried several hacks but nothing works for my part. Thanks for your help. J.

---

## [Data path for multiple nodes on single server](https://discuss.elastic.co/t/data-path-for-multiple-nodes-on-single-server/168569)

<div class="topic-metadata">

**Author:** [@SPR0STO](https://discuss.elastic.co/u/SPR0STO)\
**Replies:** 5\
**Last updated:** [February 15, 2019, 1:54pm UTC](https://discuss.elastic.co/t/data-path-for-multiple-nodes-on-single-server/168569 "2019-02-15T13:54:01Z")

</div>

Hello I want to the up "Elasticsearch" cluster with multiply nodes (3 or more) on a single server. Can I use for all of my data nodes one directory? : path.data: /var/lib/elasticsearch What risks at this case? How n…

---

## [Add @timestamp according to actual syslog date-time](https://discuss.elastic.co/t/add-timestamp-according-to-actual-syslog-date-time/126386)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 5\
**Last updated:** [April 2, 2018, 2:45pm UTC](https://discuss.elastic.co/t/add-timestamp-according-to-actual-syslog-date-time/126386 "2018-04-02T14:45:13Z")

</div>

I am parsing some syslog logs as follows: grok { match =\> { 'message' =\> '%{SYSLOGTIMESTAMP:syslog\_timestamp} %{SYSLOGHOST:syslog\_hostname} %{DATA:syslog\_program}(?:\\\[%{POSINT:syslog\_pid}\\\])?: %{GREEDYDATA:syslog\_…

---

## [Problème pour parser un fichier JSON à l'aide de Logstash](https://discuss.elastic.co/t/probleme-pour-parser-un-fichier-json-a-laide-de-logstash/39851)

<div class="topic-metadata">

**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\
**Replies:** 5\
**Last updated:** [February 17, 2017, 8:49am UTC](https://discuss.elastic.co/t/probleme-pour-parser-un-fichier-json-a-laide-de-logstash/39851 "2017-02-17T08:49:51Z")

</div>

Bonjour à tous ! Étant novice sous ELK, merci d'être gentil avec moi \[:wink:\] Je souhaite parser un fichier JSON sous Logstash pour l'indéxer dans ElasticSearch. Ce fichier est sous la forme suivante: Voici mon i…

---

## [Filebeat,Logstash,Ingest node複数ログの疎通について](https://discuss.elastic.co/t/filebeat-logstash-ingest-node/202095)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 2\
**Last updated:** [October 4, 2019, 12:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-ingest-node/202095 "2019-10-04T00:51:10Z")

</div>

お世話になります。 現在、Filebeat(input logは複数)→Logstash(multiple pipelines)→Elasticsearch(Ingest node)の疎通を試しています。 バージョン…各7.3 ◆データ(定義)遷移 【Filebeat】→【Logstash】→【Ingest node】 access.log→squid\_access.conf→squid\_translate cache.lo…

---

## [.NET NEST ElasticClient LowLevel.IndexAsync Creating Document with Empty Fields](https://discuss.elastic.co/t/net-nest-elasticclient-lowlevel-indexasync-creating-document-with-empty-fields/125996)

<div class="topic-metadata">

**Author:** [@CodeStone](https://discuss.elastic.co/u/CodeStone)\
**Replies:** 2\
**Last updated:** [March 29, 2018, 11:20pm UTC](https://discuss.elastic.co/t/net-nest-elasticclient-lowlevel-indexasync-creating-document-with-empty-fields/125996 "2018-03-29T23:20:08Z")

</div>

Below is a portion of my code, that I've taken from here. I had to make few changes to make it work with the new v6.X of Elasticsearch .NET libraries. I am running this code inside an Azure Function. It runs without any…

---

## [How to remove original message field after parsing using json filter](https://discuss.elastic.co/t/how-to-remove-original-message-field-after-parsing-using-json-filter/272306)

<div class="topic-metadata">

**Author:** [@Sandeep4](https://discuss.elastic.co/u/Sandeep4)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 2:51pm UTC](https://discuss.elastic.co/t/how-to-remove-original-message-field-after-parsing-using-json-filter/272306 "2021-05-06T14:51:50Z")

</div>

First try:- filter { mutate { gsub =\> \[ "message", "^\\w+\`string\`", "" \] } json { source =\> "message" remove\_field =\> "message" } } Second try:- filter { mutate { gsub =\> \[ "message", "^\\w+\`string\`",…

---

## [Importing json](https://discuss.elastic.co/t/importing-json/175047)

<div class="topic-metadata">

**Author:** [@kbkibana](https://discuss.elastic.co/u/kbkibana)\
**Replies:** 1\
**Last updated:** [April 3, 2019, 1:38am UTC](https://discuss.elastic.co/t/importing-json/175047 "2019-04-03T01:38:02Z")

</div>

Hi there, I'm new in elastic search and I was wondering if there is any straightforward way to import JSON file to kibana in order to make virtualization, Do I need to use filebeat? when uploading sample data of Shakes…

---

## [Bad performance with varying bulk size](https://discuss.elastic.co/t/bad-performance-with-varying-bulk-size/63222)

<div class="topic-metadata">

**Author:** [@mcrandy](https://discuss.elastic.co/u/mcrandy)\
**Replies:** 7\
**Last updated:** [October 21, 2016, 5:23pm UTC](https://discuss.elastic.co/t/bad-performance-with-varying-bulk-size/63222 "2016-10-21T17:23:38Z")

</div>

Hi! We're currently having some indexing performance issues with one of our applications using elasticsearch 1.7. We're writing to one index (16 shards, 21 data nodes) with 10 concurrent threads using the Java API. B…

---

## [How to detect network scan using EQL](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466 "2021-03-10T18:34:00Z")

</div>

Hi All, Can anyone please help me setting up a simple correlation rule using EQL that detect if same source.ip attempts more than 50 destination.ip within 15 minutes. I'm unable to write EQL. I've fortigate logs, my c…

---

## [Can't get the Enterprise Search service up with Docker](https://discuss.elastic.co/t/cant-get-the-enterprise-search-service-up-with-docker/263917)

<div class="topic-metadata">

**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\
**Replies:** 4\
**Last updated:** [February 11, 2021, 2:40pm UTC](https://discuss.elastic.co/t/cant-get-the-enterprise-search-service-up-with-docker/263917 "2021-02-11T14:40:38Z")

</div>

I am trying to deploy Elastic Enterprise but when I add the secret key... I mean, I think this needs to be an array because this is what it says here, but I a get this error message: root@localhost:~# docker-compose -f …

---

## [Change Grok in Filebeat (Log Input)](https://discuss.elastic.co/t/change-grok-in-filebeat-log-input/144358)

<div class="topic-metadata">

**Author:** [@lumi](https://discuss.elastic.co/u/lumi)\
**Replies:** 4\
**Last updated:** [August 15, 2018, 2:44pm UTC](https://discuss.elastic.co/t/change-grok-in-filebeat-log-input/144358 "2018-08-15T14:44:53Z")

</div>

Hello I've found the file /usr/share/filebeat/module/system/syslog/ingest/pipeline.json which parses syslog messages. but it parses just the format of Redhat Ubuntu and so on. Format of RHEL: Aug 14 14:20:48 server1 …

---

## [Kibana 4.5 release date](https://discuss.elastic.co/t/kibana-4-5-release-date/31529)

<div class="topic-metadata">

**Author:** [@rgyimesi](https://discuss.elastic.co/u/rgyimesi)\
**Replies:** 4\
**Last updated:** [February 16, 2016, 4:35pm UTC](https://discuss.elastic.co/t/kibana-4-5-release-date/31529 "2016-02-16T16:35:22Z")

</div>

We are really interested in the new functionalities coming with Kibana 4.5. Can you give me an estimation about the release date? Thanks in advance, Roland

---

## [How to enable HTTPS for kibana?](https://discuss.elastic.co/t/how-to-enable-https-for-kibana/124226)

<div class="topic-metadata">

**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\
**Replies:** 2\
**Last updated:** [March 17, 2018, 7:25am UTC](https://discuss.elastic.co/t/how-to-enable-https-for-kibana/124226 "2018-03-17T07:25:21Z")

</div>

I am trying to develop a new kibana plugin to protect kibana. The logic is simple, if the user has already authenticated, then the user can see the kibana home page, otherwise, the page will be redirected to my login pag…

---

## [Can we fetch date field in metric in kibana visualization. ? I tried but i failed, is there any alternative?](https://discuss.elastic.co/t/can-we-fetch-date-field-in-metric-in-kibana-visualization-i-tried-but-i-failed-is-there-any-alternative/42974)

<div class="topic-metadata">

**Author:** [@Amitesh\_Gautam](https://discuss.elastic.co/u/Amitesh_Gautam)\
**Replies:** 5\
**Last updated:** [March 2, 2016, 6:18am UTC](https://discuss.elastic.co/t/can-we-fetch-date-field-in-metric-in-kibana-visualization-i-tried-but-i-failed-is-there-any-alternative/42974 "2016-03-02T06:18:38Z")

</div>

I need date field and string filed in metric format. Currently Metric field it is working only for numbers and aggregation functionws

---

## [Force\_merge Thread\_pool](https://discuss.elastic.co/t/force-merge-thread-pool/245108)

<div class="topic-metadata">

**Author:** [@Thek10patil](https://discuss.elastic.co/u/Thek10patil)\
**Replies:** 8\
**Last updated:** [September 3, 2020, 10:40pm UTC](https://discuss.elastic.co/t/force-merge-thread-pool/245108 "2020-09-03T22:40:46Z")

</div>

Hi Everyone, I need to run force\_merge frequently to have max\_num\_segments = 1. It takes lot of time. I want to make force\_merge faster. What are the possible option do I have? I read and found that max size of threads…

---

## [CPU Usage doesn't come for 100%](https://discuss.elastic.co/t/cpu-usage-doesnt-come-for-100/71943)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 3\
**Last updated:** [January 20, 2017, 4:47pm UTC](https://discuss.elastic.co/t/cpu-usage-doesnt-come-for-100/71943 "2017-01-20T16:47:54Z")

</div>

Hi - We are tying to run the Metric beat on a Windows server for every 10 Millie seconds (0.01s). We wanted to know how much Metricbeat service would consume the CPU usage. We ran it for few hours and checked the CPU, s…

---

## [Filebeats not rescanning if Elasticsearch index deleted](https://discuss.elastic.co/t/filebeats-not-rescanning-if-elasticsearch-index-deleted/49972)

<div class="topic-metadata">

**Author:** [@James\_Tighe](https://discuss.elastic.co/u/James_Tighe)\
**Replies:** 3\
**Last updated:** [May 13, 2016, 8:47am UTC](https://discuss.elastic.co/t/filebeats-not-rescanning-if-elasticsearch-index-deleted/49972 "2016-05-13T08:47:38Z")

</div>

Hi People, Apologies if this has been asked, I did search but couldn't find this issue. I am currently testing a build of the ELK stack to monitor some of our servers. I have decided to use Beats for the log shipping…

---

## [Failed to parse field \[data\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-field-data-of-type-text/369325)

<div class="topic-metadata">

**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\
**Replies:** 2\
**Last updated:** [October 28, 2024, 4:19pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-data-of-type-text/369325 "2024-10-28T16:19:00Z")

</div>

Hi i have some issue, i find this error in logstash-plain.log how to solve it? "error"=\>{"type"=\>"document\_parsing\_exception", "reason"=\>"\[1:2532\] failed to parse field \[data\] of type \[text\] in document with id 'f-6ZvJI…

---

## [Connection Refused on localhost](https://discuss.elastic.co/t/connection-refused-on-localhost/85624)

<div class="topic-metadata">

**Author:** [@dodegaard](https://discuss.elastic.co/u/dodegaard)\
**Replies:** 2\
**Last updated:** [May 15, 2017, 11:08am UTC](https://discuss.elastic.co/t/connection-refused-on-localhost/85624 "2017-05-15T11:08:57Z")

</div>

I have setup latest bits of Elastic, Logstash, Kibana and Filebeat all on my local machine (OSX 10.12.3) and am getting a "Connection Refused" when filebeat tries to publish them. I have done a successful telnet when lo…

---

## [Suddenly need to add track\_scores to queries](https://discuss.elastic.co/t/suddenly-need-to-add-track-scores-to-queries/53914)

<div class="topic-metadata">

**Author:** [@arustad](https://discuss.elastic.co/u/arustad)\
**Replies:** 2\
**Last updated:** [June 29, 2016, 2:48pm UTC](https://discuss.elastic.co/t/suddenly-need-to-add-track-scores-to-queries/53914 "2016-06-29T14:48:33Z")

</div>

Cluster: 2c4be5 Hello support! We've been developing against 2.3.3 locally and recently created and deployed our application to your Cloud Service (cluster: 2c4be5, v2.3.3). What I've noticed is that our queries seem…

---

## [How to move data from cold to warm tier](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 7\
**Last updated:** [August 12, 2022, 6:35am UTC](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767 "2022-08-12T06:35:22Z")

</div>

Hi I need to remove cold data tiers, then in this action I thought about shifting data tier from cold to warm? How I can handle such case?

---

## [Operations on "doc\_count"](https://discuss.elastic.co/t/operations-on-doc-count/61969)

<div class="topic-metadata">

**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\
**Replies:** 0\
**Last updated:** [September 30, 2016, 10:19pm UTC](https://discuss.elastic.co/t/operations-on-doc-count/61969 "2016-09-30T22:19:56Z")

</div>

I have an issue that is not unlike this request... Apply a simple math operation to doc\_count We have events rolling in, we look at them and check for certain features. We mark them with a sort of classification sch…

---

## [Getting 403 since Update to 7.10.0](https://discuss.elastic.co/t/getting-403-since-update-to-7-10-0/255989)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 2\
**Last updated:** [November 19, 2020, 5:40pm UTC](https://discuss.elastic.co/t/getting-403-since-update-to-7-10-0/255989 "2020-11-19T17:40:34Z")

</div>

Hi I get ah 403 since we updated to 7.10.0 in the apm transaction view: I am logged in with the elastic user. So I should have all rights. is there some new permission i need to update? Thanks

---

## [View where metric aggregation is done on a substring of a certain field](https://discuss.elastic.co/t/view-where-metric-aggregation-is-done-on-a-substring-of-a-certain-field/210519)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 4\
**Last updated:** [December 6, 2019, 2:41pm UTC](https://discuss.elastic.co/t/view-where-metric-aggregation-is-done-on-a-substring-of-a-certain-field/210519 "2019-12-06T14:41:27Z")

</div>

Hello, I have an index with some documents that are like: The service was completed in 2.5 seconds The service was completed in 1.7 seconds The service was completed in 3.2 seconds ... I want to build a view that w…

---

## [Error creating runner from config: reading docker input config: missing field accessing 'containers.ids.0'](https://discuss.elastic.co/t/error-creating-runner-from-config-reading-docker-input-config-missing-field-accessing-containers-ids-0/158589)

<div class="topic-metadata">

**Author:** [@farodin91](https://discuss.elastic.co/u/farodin91)\
**Replies:** 4\
**Last updated:** [December 3, 2018, 7:34am UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-reading-docker-input-config-missing-field-accessing-containers-ids-0/158589 "2018-12-03T07:34:48Z")

</div>

I have the same bug for docker container instead of kubernetes pods Filebeat (6.4.2) autodiscover on Kubernetes. Missing field accessing 'containers.ids.0' Please include configurations and logs if available. 2018-11-2…

[Previous page](https://discuss.elastic.co/top.md?page=730&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=732&per_page=50&period=all)
