# Top

**URL:** https://discuss.elastic.co/top.md?page=744&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 745

---

## [Kibana : Discover: failed to parse date field \[2018-08-13T14:44:21.253\] with format Invalid date](https://discuss.elastic.co/t/kibana-discover-failed-to-parse-date-field-2018-08-13t1421-253-with-format-invalid-date/145030)

<div class="topic-metadata">

**Author:** [@rkalluri](https://discuss.elastic.co/u/rkalluri)\
**Replies:** 1\
**Last updated:** [August 20, 2018, 5:20am UTC](https://discuss.elastic.co/t/kibana-discover-failed-to-parse-date-field-2018-08-13t1421-253-with-format-invalid-date/145030 "2018-08-20T05:20:14Z")

</div>

I am getting an exception trying to filter on a date\_time field in Kibana. Discover: failed to parse date field \[2018-08-13T14:44:21.253\] with format Invalid date ModificationTimestamp has the following timestamp: "Mo…

---

## [Delete Old Log Files](https://discuss.elastic.co/t/delete-old-log-files/219803)

<div class="topic-metadata">

**Author:** [@areller](https://discuss.elastic.co/u/areller)\
**Replies:** 2\
**Last updated:** [February 18, 2020, 3:45pm UTC](https://discuss.elastic.co/t/delete-old-log-files/219803 "2020-02-18T15:45:04Z")

</div>

I'm using Filebeat on windows server. I write logs from my applications to the following path format: C:\\AppLogs\\{AppName}\\{yyyy}-{MM}-{dd}.txt I need to have the ability to delete old log files. I don't want my drive …

---

## [Es 5.0 - reshard index](https://discuss.elastic.co/t/es-5-0-reshard-index/64854)

<div class="topic-metadata">

**Author:** [@Mikello](https://discuss.elastic.co/u/Mikello)\
**Replies:** 2\
**Last updated:** [November 3, 2016, 12:34pm UTC](https://discuss.elastic.co/t/es-5-0-reshard-index/64854 "2016-11-03T12:34:17Z")

</div>

Hello, is it possible to reshard old index to new using reindex API? My index has 5 shards and i want to change it to 2. I tried diffrent combinations using "number\_of\_shards" but without good result. curl -XPOST '…

---

## [After deleting an index, a new one is created with invalid naming scheme](https://discuss.elastic.co/t/after-deleting-an-index-a-new-one-is-created-with-invalid-naming-scheme/292747)

<div class="topic-metadata">

**Author:** [@mdebord](https://discuss.elastic.co/u/mdebord)\
**Replies:** 6\
**Last updated:** [December 28, 2021, 9:21pm UTC](https://discuss.elastic.co/t/after-deleting-an-index-a-new-one-is-created-with-invalid-naming-scheme/292747 "2021-12-28T21:21:39Z")

</div>

Logstash 7.16.2 Elasticsearch 7.16.2 Summary In a scenario that beat processors are sending to logstash, and logstash has ilm configured, if the working index is deleted, a new one is created (as expected), but the n…

---

## [Discovering dynamic port assignment](https://discuss.elastic.co/t/discovering-dynamic-port-assignment/137328)

<div class="topic-metadata">

**Author:** [@Chris\_White](https://discuss.elastic.co/u/Chris_White)\
**Replies:** 8\
**Last updated:** [June 27, 2018, 5:53am UTC](https://discuss.elastic.co/t/discovering-dynamic-port-assignment/137328 "2018-06-27T05:53:28Z")

</div>

Is there a method by which you can easily / programmatically obtain the HTTP / Transport port number when starting a node using the -Ehttp.port=0 or -Etransport.tcp.port=0 arguments? Specifically, i'm bringing up an ES …

---

## [\[o.e.a.s.TransportSearchAction\] \[node-1\] All shards failed for phase: \[query\]](https://discuss.elastic.co/t/o-e-a-s-transportsearchaction-node-1-all-shards-failed-for-phase-query/157463)

<div class="topic-metadata">

**Author:** [@Joer\_Gates](https://discuss.elastic.co/u/Joer_Gates)\
**Replies:** 7\
**Last updated:** [November 20, 2018, 6:27am UTC](https://discuss.elastic.co/t/o-e-a-s-transportsearchaction-node-1-all-shards-failed-for-phase-query/157463 "2018-11-20T06:27:17Z")

</div>

\[2018-11-20T11:25:56,873\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] unexpected error while indexing monitoring document org.elasticsearch.xpack.monitoring.exporter.ExportException: UnavailableShardsException\[\[.monitoring-es-6-20…

---

## [ES can't find ❤️ love ❤️](https://discuss.elastic.co/t/es-cant-find-love/43578)

<div class="topic-metadata">

**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\
**Replies:** 7\
**Last updated:** [March 15, 2016, 1:32pm UTC](https://discuss.elastic.co/t/es-cant-find-love/43578 "2016-03-15T13:32:24Z")

</div>

I'm playing with the strangest bug ever in ES. As I didn't clearly identified the root cause, I'm trying the forum first. My analysis do: a char filter to replace \<3 by ❤ a synonym token filter to extend ❤ to ❤ and…

---

## [Split visualization based on partial string in field](https://discuss.elastic.co/t/split-visualization-based-on-partial-string-in-field/207599)

<div class="topic-metadata">

**Author:** [@dthor823](https://discuss.elastic.co/u/dthor823)\
**Replies:** 1\
**Last updated:** [November 14, 2019, 5:56pm UTC](https://discuss.elastic.co/t/split-visualization-based-on-partial-string-in-field/207599 "2019-11-14T17:56:57Z")

</div>

I have a large index of documents. Each document number either starts with "XXX-", "YYY-", or "ZZZ-" and I would like to, in a horizontal bar chart, have one bar be for "XXX-" documents, the other be for "YYY-" documents…

---

## [Elasticsearch, Logstash and Kibana with Docker Compose](https://discuss.elastic.co/t/elasticsearch-logstash-and-kibana-with-docker-compose/81689)

<div class="topic-metadata">

**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-logstash-and-kibana-with-docker-compose/81689 "2017-04-10T17:22:45Z")

</div>

I am trying to start all 3 apps with docker-compose command using the following docker-compose.yml file: version: '2' services: kibana: image: docker.elastic.co/kibana/kibana:5.3.0 links: - elasticsearch …

---

## [Error when running 7.12.1 on centos 7 in docker](https://discuss.elastic.co/t/error-when-running-7-12-1-on-centos-7-in-docker/271508)

<div class="topic-metadata">

**Author:** [@WiseOwl](https://discuss.elastic.co/u/WiseOwl)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 8:40am UTC](https://discuss.elastic.co/t/error-when-running-7-12-1-on-centos-7-in-docker/271508 "2021-04-30T08:40:28Z")

</div>

Hi, Since the 7.12.1 update ES does not want to start in a docker container, running Centos 7. The systemd output is as such: systemd-entrypoint\[16341\]: \[0.001s\]\[warning\]\[os,container\] Duplicate cpuset controllers dete…

---

## [How to set build-in user password on windows?](https://discuss.elastic.co/t/how-to-set-build-in-user-password-on-windows/111812)

<div class="topic-metadata">

**Author:** [@Lynnic](https://discuss.elastic.co/u/Lynnic)\
**Replies:** 3\
**Last updated:** [December 17, 2017, 9:26pm UTC](https://discuss.elastic.co/t/how-to-set-build-in-user-password-on-windows/111812 "2017-12-17T21:26:29Z")

</div>

I just installed x-pack in Elasticsearch on windows following the document https://www.elastic.co/guide/en/x-pack/6.0/setting-up-authentication.html#bootstrap-elastic-passwords Now I want to set the password when login…

---

## [How to create a simple line chart with temperatures data?](https://discuss.elastic.co/t/how-to-create-a-simple-line-chart-with-temperatures-data/109362)

<div class="topic-metadata">

**Author:** [@Adesfire](https://discuss.elastic.co/u/Adesfire)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 12:42pm UTC](https://discuss.elastic.co/t/how-to-create-a-simple-line-chart-with-temperatures-data/109362 "2017-11-29T12:42:00Z")

</div>

Hi there, I'm rooky in the Elastic universe and I start to understand the basics of how to get, compute (logstash) and store my data (elasticsearch) . So now, I'm trying to work with Kibana to create some charts. My fi…

---

## [Logstash output by condition](https://discuss.elastic.co/t/logstash-output-by-condition/338376)

<div class="topic-metadata">

**Author:** [@tbs575](https://discuss.elastic.co/u/tbs575)\
**Replies:** 6\
**Last updated:** [July 17, 2023, 2:19am UTC](https://discuss.elastic.co/t/logstash-output-by-condition/338376 "2023-07-17T02:19:05Z")

</div>

Hi Guys, I setup logstash with influxdb plugin, and can send metric to influxdb successfully. But now I meet question with output by condition. run two filebeat instance onto two pc to capture two different log files, …

---

## [Issue in renaming fieldname which contains dots](https://discuss.elastic.co/t/issue-in-renaming-fieldname-which-contains-dots/151477)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 6\
**Last updated:** [October 15, 2018, 10:51am UTC](https://discuss.elastic.co/t/issue-in-renaming-fieldname-which-contains-dots/151477 "2018-10-15T10:51:46Z")

</div>

Hi All, I have been breaking my head in renaming a field value in logstash and got no solution. Here is my field value result.caller\_id.location.latitude and i'm trying to rename it to lalitude , the renaming filter …

---

## [Possibility of querying all types in elasticsearch-spark instead of the strict index/type es.resource](https://discuss.elastic.co/t/possibility-of-querying-all-types-in-elasticsearch-spark-instead-of-the-strict-index-type-es-resource/31328)

<div class="topic-metadata">

**Author:** [@ryanatmention](https://discuss.elastic.co/u/ryanatmention)\
**Replies:** 6\
**Last updated:** [October 7, 2015, 6:33pm UTC](https://discuss.elastic.co/t/possibility-of-querying-all-types-in-elasticsearch-spark-instead-of-the-strict-index-type-es-resource/31328 "2015-10-07T18:33:16Z")

</div>

I'd like to do a query that takes the result of aggregations and returns it into a dataframe in spark. I don't know if this is feasible over all of the data because after reading the es-hadoop sources it looks like es.re…

---

## [Csp configuration](https://discuss.elastic.co/t/csp-configuration/200052)

<div class="topic-metadata">

**Author:** [@ashu1](https://discuss.elastic.co/u/ashu1)\
**Replies:** 5\
**Last updated:** [September 20, 2019, 7:14am UTC](https://discuss.elastic.co/t/csp-configuration/200052 "2019-09-20T07:14:55Z")

</div>

Hi all...I was asked to do App scan on Kibana and on doing the scan,the generated reports listed out below issues. http://hostname:5601/app/kibana and http://hostname:5601/ui/favicons/manifest.json and http://hostnam…

---

## [Winlogbeat install error](https://discuss.elastic.co/t/winlogbeat-install-error/151691)

<div class="topic-metadata">

**Author:** [@paulc](https://discuss.elastic.co/u/paulc)\
**Replies:** 8\
**Last updated:** [October 17, 2018, 8:07pm UTC](https://discuss.elastic.co/t/winlogbeat-install-error/151691 "2018-10-17T20:07:08Z")

</div>

I've followed the instructions via the winlogbeat guide and tried to take ownership of the .ps1 files but as far as I get is supposedly installing the service and setting the startuptype to automatic but when I try to st…

---

## [Logstash elasticsearch input plugin disable ssl verification](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-disable-ssl-verification/272979)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 2\
**Last updated:** [May 14, 2021, 3:54pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-input-plugin-disable-ssl-verification/272979 "2021-05-14T15:54:19Z")

</div>

Hi Team, I was wondering if we have an option to disable ssl verification for logstash elasticsearch input plugin. Since the stack is deployed with certs created by elasticsearch cert util, just by adding cacert is not…

---

## [Composite aggregation sorting](https://discuss.elastic.co/t/composite-aggregation-sorting/156936)

<div class="topic-metadata">

**Author:** [@csdrane](https://discuss.elastic.co/u/csdrane)\
**Replies:** 2\
**Last updated:** [November 16, 2018, 7:12pm UTC](https://discuss.elastic.co/t/composite-aggregation-sorting/156936 "2018-11-16T19:12:17Z")

</div>

I'm performing a composite aggregation, and then performing a subaggregation (a sum) in each bucket. I am curious if there is any way to sort the resulting buckets array based upon the this sum, rather than the natural …

---

## [Birthday in Elasticsearch](https://discuss.elastic.co/t/birthday-in-elasticsearch/132785)

<div class="topic-metadata">

**Author:** [@arpansahoo](https://discuss.elastic.co/u/arpansahoo)\
**Replies:** 2\
**Last updated:** [May 23, 2018, 9:57am UTC](https://discuss.elastic.co/t/birthday-in-elasticsearch/132785 "2018-05-23T09:57:05Z")

</div>

I have a Birthday date-field (format: MMddyyyy||MMdd) in my index. I want to search for exact birthday that a user search for (eg. 03221989) and the upcoming birthdays. I am able to get the exact birthday. But for upcomi…

---

## [Filebeat new timestamp field](https://discuss.elastic.co/t/filebeat-new-timestamp-field/129970)

<div class="topic-metadata">

**Author:** [@Dominik\_Deren](https://discuss.elastic.co/u/Dominik_Deren)\
**Replies:** 2\
**Last updated:** [May 1, 2018, 12:09am UTC](https://discuss.elastic.co/t/filebeat-new-timestamp-field/129970 "2018-05-01T00:09:24Z")

</div>

Hey, I'm pushing logs from my application into Elasticsearch using Filebeat agent installed on my app's machine. Logs that my application generates contain a field called timestamp that contains the datetime string defi…

---

## [Is there a way to get all the tokens in the term vector of an index](https://discuss.elastic.co/t/is-there-a-way-to-get-all-the-tokens-in-the-term-vector-of-an-index/60202)

<div class="topic-metadata">

**Author:** [@tyka](https://discuss.elastic.co/u/tyka)\
**Replies:** 2\
**Last updated:** [September 12, 2016, 6:08pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-all-the-tokens-in-the-term-vector-of-an-index/60202 "2016-09-12T18:08:34Z")

</div>

Hi, I have a set of documents and I stored term vectors of a text field when indexing. Is it possible to get all the tokens stored in the term vectors of all documents? I want to get a vocabulary for my documents and t…

---

## [Using a nested object field in a multi\_match query](https://discuss.elastic.co/t/using-a-nested-object-field-in-a-multi-match-query/19201)

<div class="topic-metadata">

**Author:** [@Mike\_Topper1](https://discuss.elastic.co/u/Mike_Topper1)\
**Replies:** 2\
**Last updated:** [December 30, 2014, 8:54pm UTC](https://discuss.elastic.co/t/using-a-nested-object-field-in-a-multi-match-query/19201 "2014-12-30T20:54:29Z")

</div>

Hello, I'm having trouble coming up with how to supply a field within a nested object in the multi\_match fields list. I'm using the multi\_match query in order to perform query time field boosting, but something lik…

---

## [Confusion in using synonym token filter in elasticsearch 6.x](https://discuss.elastic.co/t/confusion-in-using-synonym-token-filter-in-elasticsearch-6-x/128454)

<div class="topic-metadata">

**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\
**Replies:** 7\
**Last updated:** [April 20, 2018, 3:46am UTC](https://discuss.elastic.co/t/confusion-in-using-synonym-token-filter-in-elasticsearch-6-x/128454 "2018-04-20T03:46:34Z")

</div>

Synonym token in elasticsearch v2.4 supports tokenizer parameter. Hence token filter could have its own tokenizer (here "keyword") different from that is being used in custom analyser (here "whitespace") as in below sett…

---

## [Data cluster failing to connect to monitoring cluster](https://discuss.elastic.co/t/data-cluster-failing-to-connect-to-monitoring-cluster/69091)

<div class="topic-metadata">

**Author:** [@mistermoe](https://discuss.elastic.co/u/mistermoe)\
**Replies:** 1\
**Last updated:** [January 5, 2017, 8:08pm UTC](https://discuss.elastic.co/t/data-cluster-failing-to-connect-to-monitoring-cluster/69091 "2017-01-05T20:08:40Z")

</div>

We're running a 2 node cluster and a separate 1 node monitoring cluster. Both clusters are running elasticsearch v5.0.2. The monitoring node is running Kibana v5.0.2. Everything was working fine for a few days until sudd…

---

## [Internationalisation strategy for product catalogue?](https://discuss.elastic.co/t/internationalisation-strategy-for-product-catalogue/63371)

<div class="topic-metadata">

**Author:** [@Lee\_Gee](https://discuss.elastic.co/u/Lee_Gee)\
**Replies:** 7\
**Last updated:** [November 9, 2016, 1:34pm UTC](https://discuss.elastic.co/t/internationalisation-strategy-for-product-catalogue/63371 "2016-11-09T13:34:51Z")

</div>

Imagine a pan-European retailer whose product is the same table, but whose name and description vary with the locale. Synonyms are a must, as is predictive text (presumably using n-grams). If you are familiar with th…

---

## [Cannot drop\_event by system.syslog.program field](https://discuss.elastic.co/t/cannot-drop-event-by-system-syslog-program-field/172371)

<div class="topic-metadata">

**Author:** [@arustleund](https://discuss.elastic.co/u/arustleund)\
**Replies:** 1\
**Last updated:** [March 15, 2019, 2:07pm UTC](https://discuss.elastic.co/t/cannot-drop-event-by-system-syslog-program-field/172371 "2019-03-15T14:07:56Z")

</div>

Version: filebeat-6.6.2-darwin-x86\_64 I am attempting to drop events from Filebeat using a processor. I have the system module enabled and I would like to drop events using conditions matching fields from the system mod…

---

## [Delete elasticsearch template in Windows](https://discuss.elastic.co/t/delete-elasticsearch-template-in-windows/52401)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 4\
**Last updated:** [June 10, 2016, 6:47am UTC](https://discuss.elastic.co/t/delete-elasticsearch-template-in-windows/52401 "2016-06-10T06:47:06Z")

</div>

I am trying to delete elasticsearch template in Windows, however, it keeps giving me error result like this. PS C:\\Users\\Administrator\> curl -XGET localhost:9200/\_template/ Invoke-WebRequest : A parameter cannot be fo…

---

## [Multi-select faceting](https://discuss.elastic.co/t/multi-select-faceting/13178)

<div class="topic-metadata">

**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\
**Replies:** 4\
**Last updated:** [October 14, 2013, 6:28pm UTC](https://discuss.elastic.co/t/multi-select-faceting/13178 "2013-10-14T18:28:44Z")

</div>

Hello, I have created an interactive multi-select faceting example. The example itself uses Elastic.js \[1\] but shows the resulting REST query. This is useful for those of you interested in seeing the various filte…

---

## [400 failed to parse \[pattern\]](https://discuss.elastic.co/t/400-failed-to-parse-pattern/105373)

<div class="topic-metadata">

**Author:** [@madonzy](https://discuss.elastic.co/u/madonzy)\
**Replies:** 1\
**Last updated:** [October 26, 2017, 11:35am UTC](https://discuss.elastic.co/t/400-failed-to-parse-pattern/105373 "2017-10-26T11:35:49Z")

</div>

When I'm trying to migrate by npm data, I'm getting this debug info and error on the end: Elasticsearch INFO: 2017-10-26T08:23:21Z Adding connection to http://localhost:9200/ up : 1507147503759-change-size-color.js…

---

## [How to create dashboard for API status codes](https://discuss.elastic.co/t/how-to-create-dashboard-for-api-status-codes/313091)

<div class="topic-metadata">

**Author:** [@Rajes](https://discuss.elastic.co/u/Rajes)\
**Replies:** 5\
**Last updated:** [August 30, 2022, 11:02am UTC](https://discuss.elastic.co/t/how-to-create-dashboard-for-api-status-codes/313091 "2022-08-30T11:02:07Z")

</div>

Hi Team, I'm new to this Kibana , I want to create a dash board for API status codes like 200 count and 404 count and 404 count , Can anyone help me here. Thanks, Rajes

---

## [Sending cisco switch logs to elasticsearch](https://discuss.elastic.co/t/sending-cisco-switch-logs-to-elasticsearch/346458)

<div class="topic-metadata">

**Author:** [@laale1](https://discuss.elastic.co/u/laale1)\
**Replies:** 2\
**Last updated:** [November 6, 2023, 9:39am UTC](https://discuss.elastic.co/t/sending-cisco-switch-logs-to-elasticsearch/346458 "2023-11-06T09:39:36Z")

</div>

Hello community. I want to send my cisco switches logs to Elasticsearch, and we can't install elastic agent or beats to switches so what are the best ways we can send those logs to the elasticsearch.

---

## [Nested query mixed with parent query](https://discuss.elastic.co/t/nested-query-mixed-with-parent-query/165666)

<div class="topic-metadata">

**Author:** [@jenssc](https://discuss.elastic.co/u/jenssc)\
**Replies:** 2\
**Last updated:** [February 2, 2019, 12:11pm UTC](https://discuss.elastic.co/t/nested-query-mixed-with-parent-query/165666 "2019-02-02T12:11:27Z")

</div>

Hi I'm trying to do a nested query in combination with query on fields in the parent. But how do I figure out if a match hits the parent field in the same time as I get an inner hit? Best regards Jens Christiansen

---

## [Global variable?](https://discuss.elastic.co/t/global-variable/96794)

<div class="topic-metadata">

**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\
**Replies:** 3\
**Last updated:** [August 14, 2017, 2:37pm UTC](https://discuss.elastic.co/t/global-variable/96794 "2017-08-14T14:37:41Z")

</div>

Hello, Since logstash deals with a log file line by line, I have a field just in the begining of the file, I want to use it value as a condition for the rest of the file. Is there a method to do it ? Make this variable …

---

## [Help filtering JSON, multiple data formats for records](https://discuss.elastic.co/t/help-filtering-json-multiple-data-formats-for-records/119560)

<div class="topic-metadata">

**Author:** [@jpbruckler](https://discuss.elastic.co/u/jpbruckler)\
**Replies:** 6\
**Last updated:** [February 15, 2018, 1:59pm UTC](https://discuss.elastic.co/t/help-filtering-json-multiple-data-formats-for-records/119560 "2018-02-15T13:59:54Z")

</div>

Full disclosure: I'm a complete noob when it comes to the Elastic Stack. I've hooked up Carbon Black (CB) Response Event Forwarder to logstash/elasticsearch and I'm having some issues with data. I think it's down to th…

---

## [Guaranteed upper bound for near real time search](https://discuss.elastic.co/t/guaranteed-upper-bound-for-near-real-time-search/21454)

<div class="topic-metadata">

**Author:** [@vishrut\_goyal1](https://discuss.elastic.co/u/vishrut_goyal1)\
**Replies:** 6\
**Last updated:** [November 21, 2016, 10:40am UTC](https://discuss.elastic.co/t/guaranteed-upper-bound-for-near-real-time-search/21454 "2016-11-21T10:40:12Z")

</div>

Hello, Although real time searches are not possible in Elasticsearch, but "near real time" are possible by setting "refresh\_interval" to "1s" (1 second). The problem is that even after setting refresh interval to …

---

## [All numbers reported by Metricbeat too high (bug?)](https://discuss.elastic.co/t/all-numbers-reported-by-metricbeat-too-high-bug/56094)

<div class="topic-metadata">

**Author:** [@pkrueger](https://discuss.elastic.co/u/pkrueger)\
**Replies:** 6\
**Last updated:** [October 12, 2016, 8:19pm UTC](https://discuss.elastic.co/t/all-numbers-reported-by-metricbeat-too-high-bug/56094 "2016-10-12T20:19:12Z")

</div>

I was wondering why the numbers reported for free disk space were way too high and went to investigate. Switched on debug log and found this in the log: 2016-07-21T14:33:34+02:00 DBG Publish: { "@timestamp": "2016-…

---

## [Not able to search on indexed fields in Kibana](https://discuss.elastic.co/t/not-able-to-search-on-indexed-fields-in-kibana/50432)

<div class="topic-metadata">

**Author:** [@richag](https://discuss.elastic.co/u/richag)\
**Replies:** 6\
**Last updated:** [May 27, 2016, 9:54pm UTC](https://discuss.elastic.co/t/not-able-to-search-on-indexed-fields-in-kibana/50432 "2016-05-27T21:54:39Z")

</div>

Hi I am using elasticsearch 2.1.2 version and Kibana 4.2.2 version. I had a index in ES using below: curl -XPUT http://localhost:9200/abc/tbl/\_mapping -d'{ "tbl": { "\_timestamp": { "enabled": true }, "\_all": { "…

---

## [Is it possible to create proxy server between elasticsearch and kibana?](https://discuss.elastic.co/t/is-it-possible-to-create-proxy-server-between-elasticsearch-and-kibana/212529)

<div class="topic-metadata">

**Author:** [@Burak\_Cayir](https://discuss.elastic.co/u/Burak_Cayir)\
**Replies:** 4\
**Last updated:** [December 22, 2019, 11:20am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-proxy-server-between-elasticsearch-and-kibana/212529 "2019-12-22T11:20:43Z")

</div>

Hey , I am using a i-frame that show to user kibana dashboard. This i-frame is in my web application. When user view this page in browser , user can see request url from network tab. If user copy the url and paste anoth…

---

## [Modules.go Filebeat 5.6 - CentOS](https://discuss.elastic.co/t/modules-go-filebeat-5-6-centos/109721)

<div class="topic-metadata">

**Author:** [@lara](https://discuss.elastic.co/u/lara)\
**Replies:** 4\
**Last updated:** [December 1, 2017, 9:21am UTC](https://discuss.elastic.co/t/modules-go-filebeat-5-6-centos/109721 "2017-12-01T09:21:35Z")

</div>

Error in loading the modules. Filebeat 5.6 + CentOS ----error context----- 2017/11/30 09:21:42.132800 beat.go:297: INFO Home path: \[/usr/share/filebeat/bin\] Config path: \[/etc/filebeat\] Data path: \[/usr/share/filebeat…

---

## [Marvel 2 HTTP content length exceeded 104857600 bytes](https://discuss.elastic.co/t/marvel-2-http-content-length-exceeded-104857600-bytes/35138)

<div class="topic-metadata">

**Author:** [@kaem2111](https://discuss.elastic.co/u/kaem2111)\
**Replies:** 4\
**Last updated:** [November 30, 2015, 11:02am UTC](https://discuss.elastic.co/t/marvel-2-http-content-length-exceeded-104857600-bytes/35138 "2015-11-30T11:02:48Z")

</div>

Hello team I am using ES 2.0.0 + Marvel 2.0.0. Probably after some heavy indexing I am getting the periodical error in ES-log: \[2015-11-20 10:35:45,199\]\[WARN \]\[shield.transport.netty \] \[by0kmh\] Caught exception …

---

## [ERROR: "Unable to change your Space" occurred but no logs](https://discuss.elastic.co/t/error-unable-to-change-your-space-occurred-but-no-logs/232995)

<div class="topic-metadata">

**Author:** [@liu78778](https://discuss.elastic.co/u/liu78778)\
**Replies:** 8\
**Last updated:** [June 7, 2020, 12:19pm UTC](https://discuss.elastic.co/t/error-unable-to-change-your-space-occurred-but-no-logs/232995 "2020-06-07T12:19:01Z")

</div>

Kibana version : 7.4.2 Elasticsearch version : 7.4.2 Server OS version : CentOS Linux release 7.4.1708 (Core) Browser version : Chrome 80.0.3987.132 Browser OS version : Windows 10.0.18363 Original install meth…

---

## [Continuous transform missing some documents, but they show in /\_preview](https://discuss.elastic.co/t/continuous-transform-missing-some-documents-but-they-show-in-preview/237614)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 7\
**Last updated:** [July 3, 2020, 3:01pm UTC](https://discuss.elastic.co/t/continuous-transform-missing-some-documents-but-they-show-in-preview/237614 "2020-07-03T15:01:16Z")

</div>

I received 2 new documents earlier within a short time frame. Neither of these msgs were updated in my transform output that is running in continuous mode. However, if I run the same transform in the console with /\_pre…

---

## [Kibana - intersection of two data sets on map](https://discuss.elastic.co/t/kibana-intersection-of-two-data-sets-on-map/277911)

<div class="topic-metadata">

**Author:** [@leonidbionic](https://discuss.elastic.co/u/leonidbionic)\
**Replies:** 4\
**Last updated:** [July 11, 2021, 9:34am UTC](https://discuss.elastic.co/t/kibana-intersection-of-two-data-sets-on-map/277911 "2021-07-11T09:34:38Z")

</div>

I have a index named 'request' with the below schema - \`\`\` "id": "160c6273-8462-4830-9a51-dabf2e292ebb", "username": "bob\_dylan", "date": "Jul 6, 2021 @ 12:00:00.000", "location": { "lat": 48.8, "lon": 2.35 }\`\`\`…

---

## [Remove old document versions](https://discuss.elastic.co/t/remove-old-document-versions/133126)

<div class="topic-metadata">

**Author:** [@atom](https://discuss.elastic.co/u/atom)\
**Replies:** 2\
**Last updated:** [May 24, 2018, 4:04pm UTC](https://discuss.elastic.co/t/remove-old-document-versions/133126 "2018-05-24T16:04:52Z")

</div>

Hi, i am currently writing a script which makes use of update by query. I am trying to remove a field in all indices and documents older than 7 days. I can see in Kibana that it is working. But i think the information…

---

## [\_delete\_by\_query returns "Gateway Timeout"](https://discuss.elastic.co/t/delete-by-query-returns-gateway-timeout/108648)

<div class="topic-metadata">

**Author:** [@sanditech](https://discuss.elastic.co/u/sanditech)\
**Replies:** 2\
**Last updated:** [November 22, 2017, 8:49am UTC](https://discuss.elastic.co/t/delete-by-query-returns-gateway-timeout/108648 "2017-11-22T08:49:36Z")

</div>

Hi, I am sending my logs to elasticsearch (v5.6) and want to discard logs that are older than 'x' days. I tried to run \_delete\_by\_query to achieve so. There is Kibana (v5.6.1) interface through which I access the data…

---

## [Please help: Create new beats](https://discuss.elastic.co/t/please-help-create-new-beats/163560)

<div class="topic-metadata">

**Author:** [@rafaelbattesti](https://discuss.elastic.co/u/rafaelbattesti)\
**Replies:** 3\
**Last updated:** [January 16, 2019, 10:01pm UTC](https://discuss.elastic.co/t/please-help-create-new-beats/163560 "2019-01-16T22:01:49Z")

</div>

Hello elastic community. I am starting off a project around Beats and trying to first setup my environment. I followed the steps on: https://www.elastic.co/guide/en/beats/devguide/master/new-beat.html But the result w…

---

## [How to insert data into ElasticSearch from a json file using Java Bulk API?](https://discuss.elastic.co/t/how-to-insert-data-into-elasticsearch-from-a-json-file-using-java-bulk-api/90853)

<div class="topic-metadata">

**Author:** [@kaushah](https://discuss.elastic.co/u/kaushah)\
**Replies:** 1\
**Last updated:** [June 26, 2017, 4:43pm UTC](https://discuss.elastic.co/t/how-to-insert-data-into-elasticsearch-from-a-json-file-using-java-bulk-api/90853 "2017-06-26T16:43:57Z")

</div>

I have been looking for a definite answer but couldn't find one. The java bulk api example given expects us to write individual docs into index/type/id. How to use it to insert data directly from json file? My json fi…

---

## [Information regarding elasticsearch.in.sh file](https://discuss.elastic.co/t/information-regarding-elasticsearch-in-sh-file/876)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 1\
**Last updated:** [May 19, 2015, 7:47am UTC](https://discuss.elastic.co/t/information-regarding-elasticsearch-in-sh-file/876 "2015-05-19T07:47:36Z")

</div>

Hi All, I used rpm installation for elasticsearch.Now i want to enable heap dump file in certain path.but please explain me what is the advantage of elasticsearch.in.sh file in bin folder.i am starting es using /etc…

---

## [Chinese Characters in Grok](https://discuss.elastic.co/t/chinese-characters-in-grok/40314)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 6\
**Last updated:** [February 11, 2016, 7:10am UTC](https://discuss.elastic.co/t/chinese-characters-in-grok/40314 "2016-02-11T07:10:39Z")

</div>

I have a log that is in Chinese. An example will be 2016-01-20T17:27:22+08:00 Server1 日志类型:电脑操作, 用户:user12 I have created a grok pattern for parsing this log. I verified it in https://grokdebug.herokuapp.com/ The …

[Previous page](https://discuss.elastic.co/top.md?page=743&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=745&per_page=50&period=all)
