# Top **URL:** https://discuss.elastic.co/top.md?page=738&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 739 --- ## [Reindex from 2.4 to 6.5 failed on boolean type](https://discuss.elastic.co/t/reindex-from-2-4-to-6-5-failed-on-boolean-type/158846)
**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 8:26am UTC](https://discuss.elastic.co/t/reindex-from-2-4-to-6-5-failed-on-boolean-type/158846 "2018-11-30T08:26:16Z")
In 2.4, a Boolean type supports 0|1|true|false, but seems 6.5 does not support 0|1 any more. So my reindex failed with error "failed to parse field \[claimed\] of type \[boolean\]" reason":"Current token (VALUE\_NUMBER\_INT… --- ## [Too many bloked threads in elasticsearch java client : how to impose thread limit?](https://discuss.elastic.co/t/too-many-bloked-threads-in-elasticsearch-java-client-how-to-impose-thread-limit/2167)
**Author:** [@darshanmehta10](https://discuss.elastic.co/u/darshanmehta10)\ **Replies:** 2\ **Last updated:** [June 11, 2015, 2:08pm UTC](https://discuss.elastic.co/t/too-many-bloked-threads-in-elasticsearch-java-client-how-to-impose-thread-limit/2167 "2015-06-11T14:08:55Z")
We are using elasticsearch 1.4.2 with Spring data. TransportClient object is used to establish connection, execute the query and fetch results (only search requests). Following code closes connection: //There is an ins… --- ## [Profiling\_inferred\_spans\_enabled causes IOException: Input/output error when closing a filestream on a NAS server that uses Windows](https://discuss.elastic.co/t/profiling-inferred-spans-enabled-causes-ioexception-input-output-error-when-closing-a-filestream-on-a-nas-server-that-uses-windows/254911)
**Author:** [@NickWe](https://discuss.elastic.co/u/NickWe)\ **Replies:** 7\ **Last updated:** [January 19, 2021, 7:43am UTC](https://discuss.elastic.co/t/profiling-inferred-spans-enabled-causes-ioexception-input-output-error-when-closing-a-filestream-on-a-nas-server-that-uses-windows/254911 "2021-01-19T07:43:22Z")
Kibana: 7.9 Elasticsearch: 7.9 Java 1.18.1 OS: Linux When profiling\_inferred\_spans\_enabled is enabled java throws the following exception when closing a filestream: java.io.IOException: Input/output error at java.i… --- ## [Docker 1.11 Supported only?](https://discuss.elastic.co/t/docker-1-11-supported-only/72033)
**Author:** [@kitsushadow](https://discuss.elastic.co/u/kitsushadow)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 1:34am UTC](https://discuss.elastic.co/t/docker-1-11-supported-only/72033 "2017-02-07T01:34:18Z")
I work in the Federal space which requires flexibility in the versions of docker that are used. Officially 1.10.2 is the current supported version but we need to be able to test against many versions of docker including … --- ## [Error Installing the Plugin](https://discuss.elastic.co/t/error-installing-the-plugin/226989)
**Author:** [@hlogan](https://discuss.elastic.co/u/hlogan)\ **Replies:** 4\ **Last updated:** [April 8, 2020, 2:58pm UTC](https://discuss.elastic.co/t/error-installing-the-plugin/226989 "2020-04-08T14:58:52Z")
Hi , I am getting error while installing the plugin #bin/logstash-plugin install logstash-input-salesforce Validating logstash-input-salesforce Installing logstash-input-salesforce Plugin version conflict, aborting E… --- ## [Can i have in logstash 2 different inputs with 2 different ports](https://discuss.elastic.co/t/can-i-have-in-logstash-2-different-inputs-with-2-different-ports/225809)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 4\ **Last updated:** [March 31, 2020, 9:07am UTC](https://discuss.elastic.co/t/can-i-have-in-logstash-2-different-inputs-with-2-different-ports/225809 "2020-03-31T09:07:51Z")
Hello can i have in logstash input section 2 different inputs with 2 different ports ? input { gelf { port\_udp =\> 5041 use\_udp =\> true }, http{ port\_http =\> 5043 } } In the case that the answer is yes can i al… --- ## [Hit results of watcher always returns the same value](https://discuss.elastic.co/t/hit-results-of-watcher-always-returns-the-same-value/217926)
**Author:** [@Noureddine\_Brahmi](https://discuss.elastic.co/u/Noureddine_Brahmi)\ **Replies:** 4\ **Last updated:** [February 5, 2020, 9:22am UTC](https://discuss.elastic.co/t/hit-results-of-watcher-always-returns-the-same-value/217926 "2020-02-05T09:22:06Z")
I noticed since I upgraded to elasticsearch 7.5, that the hit results of my watcher always return the same value "10000", no matter what condition or query I use in the watcher. I feel like there is come kind of maximum… --- ## [ElasticSearch 2.0, Bool Query with Inner Hits and Parent Query](https://discuss.elastic.co/t/elasticsearch-2-0-bool-query-with-inner-hits-and-parent-query/31706)
**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\ **Replies:** 4\ **Last updated:** [October 20, 2015, 10:35pm UTC](https://discuss.elastic.co/t/elasticsearch-2-0-bool-query-with-inner-hits-and-parent-query/31706 "2015-10-20T22:35:35Z")
I'm currently working on the ElasticSearch 2.0 beta (though this may also happen in previous versions as well), and was wondering if anyone can tell me if the following is intended functionality or a bug; Create test i… --- ## [Spring Data Elastic - FIxing Client Version issue](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524)
**Author:** [@hcaupert](https://discuss.elastic.co/u/hcaupert)\ **Replies:** 3\ **Last updated:** [January 20, 2021, 2:44pm UTC](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524 "2021-01-20T14:44:51Z")
Hi, I am using a 7.3.1 cluster. Using Spring Data Elastic in Spring Boot 2.3 brings a client in version 7.6.2. As seen on this forum I add the version to match my cluster in my pom.xml : \ \ **Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 3\ **Last updated:** [August 27, 2016, 3:34pm UTC](https://discuss.elastic.co/t/grok-filter-for-url-in-squid-log/58820 "2016-08-27T15:34:08Z") My current config is, grok { match =\> { "message" =\> "%{WORD:month}\\s\*%{INT:day} %{INT:tmp1}:%{INT:tmp2}:%{INT:tmp3} %{USERNAME:proxy\_server} %{WORD:squidnm}\[%{INT:proxy\_port}\]:\\s\*%{POSINT:timestamp}.%{WORD:t… --- ## [Encoding utf-8 doesn't honor BOM](https://discuss.elastic.co/t/encoding-utf-8-doesnt-honor-bom/46671)
**Author:** [@prehor](https://discuss.elastic.co/u/prehor)\ **Replies:** 3\ **Last updated:** [April 7, 2016, 4:19pm UTC](https://discuss.elastic.co/t/encoding-utf-8-doesnt-honor-bom/46671 "2016-04-07T16:19:56Z")
Hi, Windows often prepend UTF-8 BOM to text files, which is legal - see Can a UTF-8 data stream contain the BOM character (in UTF-8 form)?. In my case it happens in Exchange 2010 Message Tracking logs. Filebeat must … --- ## [Curator "no indices matched"](https://discuss.elastic.co/t/curator-no-indices-matched/42881)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 5\ **Last updated:** [February 26, 2016, 8:37pm UTC](https://discuss.elastic.co/t/curator-no-indices-matched/42881 "2016-02-26T20:37:49Z")
Topic says it...just installed curator and here's the output: curator delete indices --older-than 90 --time-unit days --timestring '%Y.%m.%d' 2016-02-26 10:45:17,494 INFO Job starting: delete indices 2016-02-26 10… --- ## [NEST: Verify connection with ES?](https://discuss.elastic.co/t/nest-verify-connection-with-es/65266)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 1\ **Last updated:** [November 7, 2016, 9:07pm UTC](https://discuss.elastic.co/t/nest-verify-connection-with-es/65266 "2016-11-07T21:07:48Z")
Is there anyway to test connectivity with elasticsearch? if there are no connection to ES NEST will try to index but after a while doesnt raise exception just return invalid result. What is proper way to check connec… --- ## [Grok filter TIMESTAMP\_ISO8601 Logstash not working](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-logstash-not-working/175812)
**Author:** [@hatienkma](https://discuss.elastic.co/u/hatienkma)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 7:12am UTC](https://discuss.elastic.co/t/grok-filter-timestamp-iso8601-logstash-not-working/175812 "2019-04-10T07:12:39Z")
Hello, I have problem and need help. This is my logfile type: 2019-01-28 07:37:25 52.62.158.16 - HTTP 192.168.25.80 443 GET /cpadmin/jquery-ui.min.js - 304 573 197 0 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+Apple… --- ## [Problem installing analysis-icu plugin](https://discuss.elastic.co/t/problem-installing-analysis-icu-plugin/131568)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [May 12, 2018, 8:24pm UTC](https://discuss.elastic.co/t/problem-installing-analysis-icu-plugin/131568 "2018-05-12T20:24:37Z")
running ubuntu 18.04 just installed elasticsearch and kibana and jq analysis-icu-6.2.4.zip located in Download folder tried "sudo bin/elasticsearch-plugin install analysis-icu" as suggested https://www.elastic.co/guid… --- ## [Very large index , delete and recreate replica](https://discuss.elastic.co/t/very-large-index-delete-and-recreate-replica/314608)
**Author:** [@Paul-Ayo](https://discuss.elastic.co/u/Paul-Ayo)\ **Replies:** 8\ **Last updated:** [September 18, 2022, 10:03am UTC](https://discuss.elastic.co/t/very-large-index-delete-and-recreate-replica/314608 "2022-09-18T10:03:26Z")
I have a huge index which i want to split or reindex , the index has one primary and one replica shard both 118gb . I need to create a new index from the current to be able to use ILM as the index name does not fulfill t… --- ## [Как обрабатывать фразу из одинаковых слов?](https://discuss.elastic.co/t/topic/87136)
**Author:** [@klara](https://discuss.elastic.co/u/klara)\ **Replies:** 8\ **Last updated:** [May 30, 2017, 5:26pm UTC](https://discuss.elastic.co/t/topic/87136 "2017-05-30T17:26:23Z")
Задача сделать поиск с запросом из двух одинаковых слов не равносильным поиску из одного. То есть, если ищу пор-пор найти клен-клен, а не клен-дуб . Управлять этим можно с помощью анализаторов и с помощью запросов. Ан… --- ## [100% CPU accross all 8 nodes during query](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545)
**Author:** [@bradley.king](https://discuss.elastic.co/u/bradley.king)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 1:40pm UTC](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545 "2020-03-16T13:40:36Z")
HI everyone We've been trying to get the the bottom of this issue for a few months now with no luck, would really appropriate some support :slight\_smile: The issue When querying our Wazuh Alert indexes we see 100% CPU… --- ## [Java API enforces specifying both min and max in extended bounds unlike RHLC](https://discuss.elastic.co/t/java-api-enforces-specifying-both-min-and-max-in-extended-bounds-unlike-rhlc/329202)
**Author:** [@awojcik64](https://discuss.elastic.co/u/awojcik64)\ **Replies:** 0\ **Last updated:** [April 3, 2023, 11:47am UTC](https://discuss.elastic.co/t/java-api-enforces-specifying-both-min-and-max-in-extended-bounds-unlike-rhlc/329202 "2023-04-03T11:47:20Z")
Hello, Edit: tested on dockerized Elasticsearch 7.17.7, 7.17.9, client version is 7.17.9 During migration to Java API client (from rest high level client) I've encountered an inconsistency regarding extended bounds in … --- ## [Elasticsearch 6.1 mvn Dependencies tree. How to find missing and automatically include dependencies](https://discuss.elastic.co/t/elasticsearch-6-1-mvn-dependencies-tree-how-to-find-missing-and-automatically-include-dependencies/115248)
**Author:** [@satyarajp](https://discuss.elastic.co/u/satyarajp)\ **Replies:** 7\ **Last updated:** [January 12, 2018, 1:00pm UTC](https://discuss.elastic.co/t/elasticsearch-6-1-mvn-dependencies-tree-how-to-find-missing-and-automatically-include-dependencies/115248 "2018-01-12T13:00:50Z")
Hi Team, SEVERE: Exception sending context initialized event to listener instance of class kv.complex.web.LifecycleListener java.lang.NoClassDefFoundError: org/apache/lucene/util/Accountable at java.lang.ClassLo… --- ## [No Results Found as soon as Line Chart is Split](https://discuss.elastic.co/t/no-results-found-as-soon-as-line-chart-is-split/69808)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 7\ **Last updated:** [December 23, 2016, 7:21am UTC](https://discuss.elastic.co/t/no-results-found-as-soon-as-line-chart-is-split/69808 "2016-12-23T07:21:19Z")
ES 5.1.1 server and Kibana (Windows 7 64bit). Not sure if this is a Kibana or an Elastic Search issue or my stupidity but I'm trying to make a split line chart and following instructions like this. As soon as I try t… --- ## [Upgrading 1.7 -\> 5.0 with reindex-from-remote and parent/child docs](https://discuss.elastic.co/t/upgrading-1-7-5-0-with-reindex-from-remote-and-parent-child-docs/63463)
**Author:** [@nkw](https://discuss.elastic.co/u/nkw)\ **Replies:** 7\ **Last updated:** [October 26, 2016, 4:36pm UTC](https://discuss.elastic.co/t/upgrading-1-7-5-0-with-reindex-from-remote-and-parent-child-docs/63463 "2016-10-26T16:36:55Z")
I'm attempting to move an index from a 1.7 cluster to a 5.0-rc1 cluster via the reindex-from-remote procedure documented here and here. One type of document reindex works just fine (the parent documents), however a seco… --- ## [Aggregation on a datetime field](https://discuss.elastic.co/t/aggregation-on-a-datetime-field/57101)
**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\ **Replies:** 7\ **Last updated:** [August 3, 2016, 1:08pm UTC](https://discuss.elastic.co/t/aggregation-on-a-datetime-field/57101 "2016-08-03T13:08:11Z")
I'm trying to get aggregated information from a datetime field: Get how many documents are there by month (NOT YEAR/MONTH!, ONLY MONTH): So, a 'groupby(month(datetime\_field))'. Thanks for all. --- ## [Filebeat uses internal dns name of Kafka Broker](https://discuss.elastic.co/t/filebeat-uses-internal-dns-name-of-kafka-broker/115407)
**Author:** [@nsphaniraj](https://discuss.elastic.co/u/nsphaniraj)\ **Replies:** 2\ **Last updated:** [January 15, 2018, 1:50pm UTC](https://discuss.elastic.co/t/filebeat-uses-internal-dns-name-of-kafka-broker/115407 "2018-01-15T13:50:54Z")
Hello, We are trying to harvest csv data using filebeat to Elasticsearch. Data pipeline is set up to stream to Kafka -\> Logstash -\> Elasticsearch. We have a hybrid cloud setup of corporate cloud data center and aws. fi… --- ## [Recommendations to sync data from ElasticSearch to MS SQL](https://discuss.elastic.co/t/recommendations-to-sync-data-from-elasticsearch-to-ms-sql/37236)
**Author:** [@nagavitalp](https://discuss.elastic.co/u/nagavitalp)\ **Replies:** 3\ **Last updated:** [December 18, 2015, 9:12am UTC](https://discuss.elastic.co/t/recommendations-to-sync-data-from-elasticsearch-to-ms-sql/37236 "2015-12-18T09:12:58Z")
Looking for recommendations to sync data from ElasticSearch to MS SQL --- ## [Error log curl: (52) Empty reply from server in v8.8.2](https://discuss.elastic.co/t/error-log-curl-52-empty-reply-from-server-in-v8-8-2/338981)
**Author:** [@Ridwan\_Satrio\_Hadiku](https://discuss.elastic.co/u/Ridwan_Satrio_Hadiku)\ **Replies:** 2\ **Last updated:** [September 4, 2023, 8:39am UTC](https://discuss.elastic.co/t/error-log-curl-52-empty-reply-from-server-in-v8-8-2/338981 "2023-09-04T08:39:45Z")
Hello, can anyone help me? I found error log curl: (52) Empty reply from server when entering command curl -X GET Even though when referring to the problem of: I have followed the instructions and still get the sa… --- ## [Newbie question: Timelion metric/split](https://discuss.elastic.co/t/newbie-question-timelion-metric-split/125769)
**Author:** [@Julzor](https://discuss.elastic.co/u/Julzor)\ **Replies:** 2\ **Last updated:** [March 28, 2018, 6:30am UTC](https://discuss.elastic.co/t/newbie-question-timelion-metric-split/125769 "2018-03-28T06:30:03Z")
Hi, I'm new to Kibana and i'am struggling on a -maybe- simple thing. I have this Timelion graph' : .\*\*es(index="netflow-\*", metric="sum:netflow.bytes", split="netflow.src\_port\_name:10", kibana=true)\*\*.scale\_interval(1… --- ## [Aggregation の指定方法とレスポンスフォーマットについて](https://discuss.elastic.co/t/aggregation/53752)
**Author:** [@holidayworking](https://discuss.elastic.co/u/holidayworking)\ **Replies:** 2\ **Last updated:** [June 27, 2016, 7:10am UTC](https://discuss.elastic.co/t/aggregation/53752 "2016-06-27T07:10:57Z")
初めまして。 Aggregation の指定方法とレスポンスフォーマットについて質問をさせて下さい。 経緯 下記のようなインデックスがあります。 curl -XGET localhost:9200/reviews/\_mapping?pretty { "reviews" : { "mappings" : { "review" : { "properties" : { … --- ## [How to get Percentage from count of records](https://discuss.elastic.co/t/how-to-get-percentage-from-count-of-records/353902)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 5\ **Last updated:** [February 27, 2024, 6:57am UTC](https://discuss.elastic.co/t/how-to-get-percentage-from-count-of-records/353902 "2024-02-27T06:57:00Z")
Hi there, I'm using Elastic and kibana v7.17, and I want to get the percentage from each term in my table. look at this picture below as you can see there are many counts of records of each term on the right side, ho… --- ## [Elasticsearch Watcher for multiple hosts](https://discuss.elastic.co/t/elasticsearch-watcher-for-multiple-hosts/173077)
**Author:** [@Nishant\_Suman](https://discuss.elastic.co/u/Nishant_Suman)\ **Replies:** 4\ **Last updated:** [March 21, 2019, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-watcher-for-multiple-hosts/173077 "2019-03-21T06:49:43Z")
Hi, I am new to the elastic stack and trying to set up some basic alerts based on server metrics. The stack that I have configured will be used as a centralized logging system. Right now I am setting up watcher for each… --- ## [Not able to run plugin install logstash-input-beats in Windows](https://discuss.elastic.co/t/not-able-to-run-plugin-install-logstash-input-beats-in-windows/41502)
**Author:** [@jayaram](https://discuss.elastic.co/u/jayaram)\ **Replies:** 4\ **Last updated:** [May 13, 2016, 5:59pm UTC](https://discuss.elastic.co/t/not-able-to-run-plugin-install-logstash-input-beats-in-windows/41502 "2016-05-13T17:59:51Z")
Hello, I am trying to setup the Beats--\>Logstash--\>Elasticsearch--\>Kibana for all type of beats\[Filebeat, Topbeat, Packetbeat and WinLogbeat\] In https://www.elastic.co/guide/en/beats/libbeat/current/getting-star… --- ## [Problem installing plugin](https://discuss.elastic.co/t/problem-installing-plugin/78373)
**Author:** [@Lazypete](https://discuss.elastic.co/u/Lazypete)\ **Replies:** 2\ **Last updated:** [March 13, 2017, 6:09pm UTC](https://discuss.elastic.co/t/problem-installing-plugin/78373 "2017-03-13T18:09:32Z")
I just installed logstash from the latest tar.gz file 5.2.2 is the version number. I have searched the forum and seen this eror come up a few time but no solution were proposed. So I installed logstash and I need 2 p… --- ## [\[SOLVED\] Get the real date](https://discuss.elastic.co/t/solved-get-the-real-date/75212)
**Author:** [@Romain\_PZK](https://discuss.elastic.co/u/Romain_PZK)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 10:07am UTC](https://discuss.elastic.co/t/solved-get-the-real-date/75212 "2017-02-16T10:07:00Z")
Hello, I have a logstash running well, but I don't understand how to get the real date instead of the timestamp. I have read this doc Date filter plugin | Logstash Reference \[8.11\] | Elastic The is my config file : … --- ## [クラスターのノード台数について](https://discuss.elastic.co/t/topic/71703)
**Author:** [@hirarin](https://discuss.elastic.co/u/hirarin)\ **Replies:** 2\ **Last updated:** [February 1, 2017, 3:20am UTC](https://discuss.elastic.co/t/topic/71703 "2017-02-01T03:20:41Z")
お世話になっております。 クラスターのノード台数を増やすことによる、副作用などはあったりしますでしょうか。 もちろん各ノードのリソースによるところとは思いますが、例えば各ノード間の死活監視が増えることにより、 検索性能に影響が出るなど。。 基本的にノードを増やすこと自体は問題ない認識ではおりますが、 すでに既知の課題や問題などがあれば知っておきたいなと思った次第です。 漠然とした質問で恐縮ですが、もし知見がおありの方、経験さ… --- ## [Logstash: per-pipeline logfiles](https://discuss.elastic.co/t/logstash-per-pipeline-logfiles/195379)
**Author:** [@barnetta](https://discuss.elastic.co/u/barnetta)\ **Replies:** 3\ **Last updated:** [March 17, 2020, 3:39pm UTC](https://discuss.elastic.co/t/logstash-per-pipeline-logfiles/195379 "2020-03-17T15:39:40Z")
I have a Logstash development environment with multiple pipelines. From time to time, I accidentally introduce an error into the config. In such a case, I would find it very useful to have a per-pipeline logfile, in addi… --- ## [Logstash not able to connect to elasticsearch docker host](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elasticsearch-docker-host/200866)
**Author:** [@akapit](https://discuss.elastic.co/u/akapit)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 1:47pm UTC](https://discuss.elastic.co/t/logstash-not-able-to-connect-to-elasticsearch-docker-host/200866 "2019-09-25T13:47:34Z")
Hi I have deployed ELK in a Docker swarm. Elasticsearch and kibana are in the same node, when logstash is in another one. The issue is as follows, logstash is not able to connect to elasticsearch using the docker host… --- ## [\_dataparsefailure in tags](https://discuss.elastic.co/t/dataparsefailure-in-tags/200824)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 8\ **Last updated:** [September 24, 2019, 2:00pm UTC](https://discuss.elastic.co/t/dataparsefailure-in-tags/200824 "2019-09-24T14:00:10Z")
Hello, I think this issue is very common but I am still searching for a solution. I have this log line : Mar 9 02:20:42 dvgospxi1 (squid-1): 09/Mar/2017:02:20:42 +0100 - TCP\_DENIED 403 10.117.56.12:47151 3529 GET htt… --- ## [How Do I create Rate Of Change Graphs in Kibana?](https://discuss.elastic.co/t/how-do-i-create-rate-of-change-graphs-in-kibana/191343)
**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\ **Replies:** 3\ **Last updated:** [July 22, 2019, 3:59pm UTC](https://discuss.elastic.co/t/how-do-i-create-rate-of-change-graphs-in-kibana/191343 "2019-07-22T15:59:10Z")
Good Morning, Please I would like to know how I can implement Rate of change Visualisations over time in Kibana. I would like to create a visualisation showing the rate of change of student enrollment on the Y axis … --- ## [Where can I get Metricbeat sample dashboard for Kibana 5?](https://discuss.elastic.co/t/where-can-i-get-metricbeat-sample-dashboard-for-kibana-5/64799)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 11:38am UTC](https://discuss.elastic.co/t/where-can-i-get-metricbeat-sample-dashboard-for-kibana-5/64799 "2016-11-09T11:38:04Z")
\[image\] I would like to have a dashboard like the image, which I found here https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-sample-dashboards.html I have metricbeat 5 and it is creating indexes in … --- ## [Logstash builds Recv-Q for minute long pauses](https://discuss.elastic.co/t/logstash-builds-recv-q-for-minute-long-pauses/38422)
**Author:** [@ggriffith](https://discuss.elastic.co/u/ggriffith)\ **Replies:** 5\ **Last updated:** [January 13, 2016, 7:14pm UTC](https://discuss.elastic.co/t/logstash-builds-recv-q-for-minute-long-pauses/38422 "2016-01-13T19:14:51Z")
Hello, We are sending syslog data over the wire using stunnel to encrypt, and when it gets to the logstash server (on Ubuntu 14.04), we periodically build up a big Recv-Q as the data moves out of the server-side stunne… --- ## [About "Encryption at rest" using x-pack trial](https://discuss.elastic.co/t/about-encryption-at-rest-using-x-pack-trial/102931)
**Author:** [@KanakoNakai](https://discuss.elastic.co/u/KanakoNakai)\ **Replies:** 2\ **Last updated:** [October 6, 2017, 4:26am UTC](https://discuss.elastic.co/t/about-encryption-at-rest-using-x-pack-trial/102931 "2017-10-06T04:26:51Z")
we are planing to subscribe PLATINUM support, so I investigating security feature using x-pack trial. x-pack security provide "Encryption at rest support" but I could not find any kind of this setting information in Ela… --- ## [Filebeat, SMTP headers, and multiline flush\_pattern (filebeat 6 beta 1)](https://discuss.elastic.co/t/filebeat-smtp-headers-and-multiline-flush-pattern-filebeat-6-beta-1/93508)
**Author:** [@bjorn](https://discuss.elastic.co/u/bjorn)\ **Replies:** 4\ **Last updated:** [July 19, 2017, 2:04pm UTC](https://discuss.elastic.co/t/filebeat-smtp-headers-and-multiline-flush-pattern-filebeat-6-beta-1/93508 "2017-07-19T14:04:18Z")
I'd like to extract the SMTP headers from my honeypot's logs, using multiline. I was hoping to be able to carve out the headers only, using flush\_pattern. Below is an example email: From user@example.com Tue Jul 18 00… --- ## [Grok Filter does not work with a newLine](https://discuss.elastic.co/t/grok-filter-does-not-work-with-a-newline/38951)
**Author:** [@golauty](https://discuss.elastic.co/u/golauty)\ **Replies:** 4\ **Last updated:** [January 12, 2016, 11:50am UTC](https://discuss.elastic.co/t/grok-filter-does-not-work-with-a-newline/38951 "2016-01-12T11:50:25Z")
I have following event in Logstash: "message": "\[The variable 'number' was not bound while trying to expand attribute 'text' with value '$(value)'.\]\\n2016-01-12 08:30:09,983 \[exec\]\[TestCase\] \ **Author:** [@prashant.bajpai](https://discuss.elastic.co/u/prashant.bajpai)\ **Replies:** 3\ **Last updated:** [March 29, 2017, 9:03am UTC](https://discuss.elastic.co/t/how-to-avoid-some-aggregation-data-if-not-needed/80420 "2017-03-29T09:03:09Z") Hi, I have below aggregation: "aggregations" : { "level1" : { "terms" : { "field" : "country", "size" : 0, }, "aggregations" : { "orderAggs" : { "terms" : { … --- ## [Duplicate rows](https://discuss.elastic.co/t/duplicate-rows/76546)
**Author:** [@Muthu\_Jayakumar](https://discuss.elastic.co/u/Muthu_Jayakumar)\ **Replies:** 3\ **Last updated:** [February 27, 2017, 4:40pm UTC](https://discuss.elastic.co/t/duplicate-rows/76546 "2017-02-27T16:40:24Z")
While using Spark DataFrame API to write to elastic search, I noticed that duplicate rows are being written in certain situations. Meaning, at different times the same data of DataFrame does not write duplicate rows into… --- ## [Elasticsearch directory traversal vulnerability CVE-2015-5531](https://discuss.elastic.co/t/elasticsearch-directory-traversal-vulnerability-cve-2015-5531/25737)
**Author:** [@KevinKluge](https://discuss.elastic.co/u/KevinKluge)\ **Replies:** 0\ **Last updated:** [July 16, 2015, 5:31pm UTC](https://discuss.elastic.co/t/elasticsearch-directory-traversal-vulnerability-cve-2015-5531/25737 "2015-07-16T17:31:51Z")
Summary Elasticsearch versions from 1.0.0 to 1.6.0 are vulnerable to a directory traversal attack that allows an attacker to retrieve files that are readable by the Elasticsearch JVM process. We have been assigned CV… --- ## [A lot of 'Courier Fetch: 42 of 155 shards failed.' - EsRejectedExecutionException](https://discuss.elastic.co/t/a-lot-of-courier-fetch-42-of-155-shards-failed-esrejectedexecutionexception/38188)
**Author:** [@thomas.dotreppe](https://discuss.elastic.co/u/thomas.dotreppe)\ **Replies:** 6\ **Last updated:** [July 25, 2016, 1:46pm UTC](https://discuss.elastic.co/t/a-lot-of-courier-fetch-42-of-155-shards-failed-esrejectedexecutionexception/38188 "2016-07-25T13:46:48Z")
I have been getting a lot of those warnings lately in Kibana (4.3.1) when I'm just watching a dashboard over a period of 30 days with 13 visualizations on it (no error/warning are produced when searching for the last 7 d… --- ## [Cannot change jna file directory from /tmp to new dir || elasticsearch 6.2.3 ver](https://discuss.elastic.co/t/cannot-change-jna-file-directory-from-tmp-to-new-dir-elasticsearch-6-2-3-ver/125919)
**Author:** [@pradeep2](https://discuss.elastic.co/u/pradeep2)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 11:39am UTC](https://discuss.elastic.co/t/cannot-change-jna-file-directory-from-tmp-to-new-dir-elasticsearch-6-2-3-ver/125919 "2018-03-28T11:39:09Z")
Hi I have installed latest elasticsearch 6.2.3 ver on linux machine, i can able to start the elastic with out any errors in logs. When i verify the /tmp directory , i could see lot of directories creating with elastics… --- ## [Filebeat prevents python rotating log from rotating files in windows os](https://discuss.elastic.co/t/filebeat-prevents-python-rotating-log-from-rotating-files-in-windows-os/96450)
**Author:** [@Dima\_Shechtman](https://discuss.elastic.co/u/Dima_Shechtman)\ **Replies:** 8\ **Last updated:** [August 13, 2017, 6:44am UTC](https://discuss.elastic.co/t/filebeat-prevents-python-rotating-log-from-rotating-files-in-windows-os/96450 "2017-08-13T06:44:06Z")
Environment: win 10 python 2.7 filebeat 5.1.1 My application writes logs with Rotating log handler. When I start Filebeat I start getting the following exceptions from logging lib. Traceback (most recent call last): … --- ## [Negative key value for date\_histogram in epoch\_milli](https://discuss.elastic.co/t/negative-key-value-for-date-histogram-in-epoch-milli/215953)
**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\ **Replies:** 7\ **Last updated:** [February 5, 2020, 7:22pm UTC](https://discuss.elastic.co/t/negative-key-value-for-date-histogram-in-epoch-milli/215953 "2020-02-05T19:22:04Z")
Hi ES Dev Team, One of the breaking changes in version 7.0 documentation says that negative epoch timestamps are no longer supported. In our application, we use negative epoch timestamps as a lot of our documents have … [Previous page](https://discuss.elastic.co/top.md?page=737&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=739&per_page=50&period=all)