# Top **URL:** https://discuss.elastic.co/top.md?page=765&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 766 --- ## [Painless support for URI encoding](https://discuss.elastic.co/t/painless-support-for-uri-encoding/108901)
**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\ **Replies:** 2\ **Last updated:** [November 27, 2017, 1:52pm UTC](https://discuss.elastic.co/t/painless-support-for-uri-encoding/108901 "2017-11-27T13:52:00Z")
Hi, I wasn't sure where to post this, since it's specific to the painless language, but given that I'm using thing from Alerting I figured this was the appropriate category. I'm trying to URLencode a string, which shou… --- ## [Configure log4j for logstash using dockerfile](https://discuss.elastic.co/t/configure-log4j-for-logstash-using-dockerfile/55656)
**Author:** [@ssable](https://discuss.elastic.co/u/ssable)\ **Replies:** 2\ **Last updated:** [July 26, 2016, 7:41am UTC](https://discuss.elastic.co/t/configure-log4j-for-logstash-using-dockerfile/55656 "2016-07-26T07:41:32Z")
I recently started working on logstash. I am running it in docker and I want to read its logs using 'docker logs ' command. But I am getting error log4j:WARN No appenders could be found for logger (org.apache.http.clie… --- ## [Best option for persistent volume of an on-premise ECK](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611)
**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:37am UTC](https://discuss.elastic.co/t/best-option-for-persistent-volume-of-an-on-premise-eck/215611 "2020-01-21T10:37:35Z")
We have a cluster with multiple elastic instances deployed on a few servers. We decided to use ECK to manage our cluster. We are looking for the best option for persistent volume for an ECK cluster. We have tried NFS an… --- ## [LogStash Conditional IN (Check values from a List)](https://discuss.elastic.co/t/logstash-conditional-in-check-values-from-a-list/61865)
**Author:** [@ELK\_User](https://discuss.elastic.co/u/ELK_User)\ **Replies:** 1\ **Last updated:** [September 30, 2016, 5:49am UTC](https://discuss.elastic.co/t/logstash-conditional-in-check-values-from-a-list/61865 "2016-09-30T05:49:54Z")
Hi, I am trying to find out if there's a way for me to generate a Conditional IN based output from incoming Apache Log response codes. I want to compare the Codes from a Declared List/Array of Codes My config is; input… --- ## [Best practice for Logging with Filebeat](https://discuss.elastic.co/t/best-practice-for-logging-with-filebeat/131479)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 4\ **Last updated:** [May 11, 2018, 2:10pm UTC](https://discuss.elastic.co/t/best-practice-for-logging-with-filebeat/131479 "2018-05-11T14:10:55Z")
Hi all, I am right now planning a completely new monitoring and logging environment. One part of this belongs to the beats, especially filebeat. I kindly want to know, what the best practices are here right now (ELK 6.… --- ## [Search using result of previous search as parameter](https://discuss.elastic.co/t/search-using-result-of-previous-search-as-parameter/109203)
**Author:** [@ckhalilo](https://discuss.elastic.co/u/ckhalilo)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 10:40am UTC](https://discuss.elastic.co/t/search-using-result-of-previous-search-as-parameter/109203 "2017-11-28T10:40:09Z")
Hi, I need a help please, I have searched many topics and didn't find the answer. I need to pass result of search as parameters like in SQL : SELECT \* FROM Table Where Field\_1 = (SELECT Field\_1 FROM Table WHERE Field\_2… --- ## [A question about dynamic templates](https://discuss.elastic.co/t/a-question-about-dynamic-templates/234544)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 7\ **Last updated:** [June 4, 2020, 11:57pm UTC](https://discuss.elastic.co/t/a-question-about-dynamic-templates/234544 "2020-06-04T23:57:59Z")
Hi, I am trying to find a way to only index fields that pass some naming validation using regex, so i did this: { "dynamic\_templates": \[ { "message\_field": { "path\_match": "message", "mappin… --- ## [Logstash filter issue remove unwanted fields](https://discuss.elastic.co/t/logstash-filter-issue-remove-unwanted-fields/142048)
**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\ **Replies:** 7\ **Last updated:** [August 20, 2018, 6:31pm UTC](https://discuss.elastic.co/t/logstash-filter-issue-remove-unwanted-fields/142048 "2018-08-20T18:31:06Z")
hi All I have syslog setup and running ok, now try to use logstash and remove some unecessary logs before i send to ES below output show there is 2 date and stamps : like to remove 1 time stamp to stream line the messa… --- ## [Kibana console showing Elastic Search as “Red” status & all shards failed error](https://discuss.elastic.co/t/kibana-console-showing-elastic-search-as-red-status-all-shards-failed-error/186233)
**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\ **Replies:** 8\ **Last updated:** [June 20, 2019, 7:55am UTC](https://discuss.elastic.co/t/kibana-console-showing-elastic-search-as-red-status-all-shards-failed-error/186233 "2019-06-20T07:55:51Z")
Hi All, I face error when i try to run kibana console from my virtual machine, screenshot attached for ref. Also i checked the logs, i could see below lines which i'm completely not aware . \[2019-06-18T11:19:17,974\]\[… --- ## [Logstash monitoring not working properly](https://discuss.elastic.co/t/logstash-monitoring-not-working-properly/101874)
**Author:** [@Mr.Flakes](https://discuss.elastic.co/u/Mr.Flakes)\ **Replies:** 8\ **Last updated:** [September 26, 2017, 3:39pm UTC](https://discuss.elastic.co/t/logstash-monitoring-not-working-properly/101874 "2017-09-26T15:39:11Z")
Hello, I am not sure which category I should use for this thread but since it is monitoring related I will use X-Pack. So I have 4 Logstash 5.6.1 instances running and 5 Elasticsearch 5.6.1 nodes all running X-Pack 5.6.… --- ## [How do we prevent stack trace from being getting displayed on Kibana?](https://discuss.elastic.co/t/how-do-we-prevent-stack-trace-from-being-getting-displayed-on-kibana/93494)
**Author:** [@iam.xtreme](https://discuss.elastic.co/u/iam.xtreme)\ **Replies:** 3\ **Last updated:** [July 20, 2017, 4:57pm UTC](https://discuss.elastic.co/t/how-do-we-prevent-stack-trace-from-being-getting-displayed-on-kibana/93494 "2017-07-20T16:57:16Z")
If I try to access a kibana API like (localhost:5601/api/timelion/run), I get a stack trace displayed on the Web UI. This exposes the details of kibana installation path. Similarly if there is an error while querying dat… --- ## [Pre\_zone\_adjust\_large\_interval is not working](https://discuss.elastic.co/t/pre-zone-adjust-large-interval-is-not-working/7180)
**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\ **Replies:** 8\ **Last updated:** [April 2, 2012, 5:18pm UTC](https://discuss.elastic.co/t/pre-zone-adjust-large-interval-is-not-working/7180 "2012-04-02T17:18:17Z")
Hi, I try to use "pre\_zone\_adjust\_large\_interval":true with 'date\_histogram' as follows: { "size":0, "facets":{ "rated\_good":{ "date\_histogram":{ "pre\_zone\_adjust\_large\_interval… --- ## [Query with java api and two compare date](https://discuss.elastic.co/t/query-with-java-api-and-two-compare-date/25150)
**Author:** [@mkm](https://discuss.elastic.co/u/mkm)\ **Replies:** 2\ **Last updated:** [July 9, 2015, 10:35am UTC](https://discuss.elastic.co/t/query-with-java-api-and-two-compare-date/25150 "2015-07-09T10:35:32Z")
Hi, we have index with two field firstDate and endDate and i need to execute request that match all documents that endDate gte somedate1value and firstDAte lte somedate2value How can ? write my query? thanks --- ## [Fourier Transform](https://discuss.elastic.co/t/fourier-transform/95619)
**Author:** [@Nithin\_Devang](https://discuss.elastic.co/u/Nithin_Devang)\ **Replies:** 5\ **Last updated:** [August 11, 2017, 12:27pm UTC](https://discuss.elastic.co/t/fourier-transform/95619 "2017-08-11T12:27:07Z")
Previously I was using mysql and php/google charts to store data and I shifted to elasticsearch. I was using custom php function for fourier transform and display spectral data (chart). Is there anyway I can build a spec… --- ## [Marvel agent error](https://discuss.elastic.co/t/marvel-agent-error/70820)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 5\ **Last updated:** [January 9, 2017, 8:48pm UTC](https://discuss.elastic.co/t/marvel-agent-error/70820 "2017-01-09T20:48:06Z")
Hi Team, From Kibana when i am trying to connect marvel i am getting an error: "Shield: Sorry, you are not authorized to access Marvel" But i disabled shield on all ES nodes and also getting below error on ES master no… --- ## [Kibana compare with yesterday](https://discuss.elastic.co/t/kibana-compare-with-yesterday/51111)
**Author:** [@ivanandrianto95](https://discuss.elastic.co/u/ivanandrianto95)\ **Replies:** 5\ **Last updated:** [May 28, 2016, 5:25pm UTC](https://discuss.elastic.co/t/kibana-compare-with-yesterday/51111 "2016-05-28T17:25:48Z")
In Kibana, how to compare last 0-24 hours with last 24-48 hours in a single chart? --- ## [Missing Elasticsearch Output Running Logstash in Kubernetes](https://discuss.elastic.co/t/missing-elasticsearch-output-running-logstash-in-kubernetes/40798)
**Author:** [@rutschman](https://discuss.elastic.co/u/rutschman)\ **Replies:** 5\ **Last updated:** [February 11, 2016, 12:37am UTC](https://discuss.elastic.co/t/missing-elasticsearch-output-running-logstash-in-kubernetes/40798 "2016-02-11T00:37:33Z")
Hello, I've been running logstash on virtual machines for a bit and am trying to move it to Kubernetes to help scale and better manage configuration. When running logstash in Kubernetes events bound for elasticsearch a… --- ## [Elasticsearch URL not accessible outside of the server publicly](https://discuss.elastic.co/t/elasticsearch-url-not-accessible-outside-of-the-server-publicly/96044)
**Author:** [@Bishwadeep\_Kc](https://discuss.elastic.co/u/Bishwadeep_Kc)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-url-not-accessible-outside-of-the-server-publicly/96044 "2017-08-08T09:21:25Z")
Hi there, I installed elasticsearch following the article on https://www.howtoforge.com/tutorial/how-to-install-elastic-stack-on-ubuntu-16-04/. I manage to run it successfully on my local machine because I was accessing… --- ## [Aggregations without impact of filter in query](https://discuss.elastic.co/t/aggregations-without-impact-of-filter-in-query/25703)
**Author:** [@Kiran\_Sriharsha](https://discuss.elastic.co/u/Kiran_Sriharsha)\ **Replies:** 4\ **Last updated:** [July 16, 2015, 12:19pm UTC](https://discuss.elastic.co/t/aggregations-without-impact-of-filter-in-query/25703 "2015-07-16T12:19:56Z")
Hello I am using ES 1.5.2, Java API. I am working on implemented filterd/faceted/refine search in our product. Left side filters include countries, state, city etc. I want these values to depend only on keywords or que… --- ## [Meaning of CPU Utilization in Monitoring module](https://discuss.elastic.co/t/meaning-of-cpu-utilization-in-monitoring-module/93372)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 3\ **Last updated:** [July 20, 2017, 9:26am UTC](https://discuss.elastic.co/t/meaning-of-cpu-utilization-in-monitoring-module/93372 "2017-07-20T09:26:46Z")
Hi Guys, Quick question, I know that MetricBeats' CPU stats are similar to those from Linux Top where the cpu usage percentage is per single core but was wondering if it is the same case for the CPU Utilization stat th… --- ## [Detach java agent](https://discuss.elastic.co/t/detach-java-agent/186305)
**Author:** [@sandokandias](https://discuss.elastic.co/u/sandokandias)\ **Replies:** 5\ **Last updated:** [July 2, 2019, 1:46pm UTC](https://discuss.elastic.co/t/detach-java-agent/186305 "2019-07-02T13:46:19Z")
Kibana version: 7.1.1 Elasticsearch version: 7.1.1 APM Server version: 7.1.1 APM Agent language and version: Java - 1.7.0 Browser version: n/a Original install method (e.g. download page, yum, deb, from source, etc.… --- ## [Kibana not trusting my elasticsearch/shield CA](https://discuss.elastic.co/t/kibana-not-trusting-my-elasticsearch-shield-ca/44461)
**Author:** [@bblank](https://discuss.elastic.co/u/bblank)\ **Replies:** 5\ **Last updated:** [April 28, 2016, 6:18pm UTC](https://discuss.elastic.co/t/kibana-not-trusting-my-elasticsearch-shield-ca/44461 "2016-04-28T18:18:15Z")
I have Elasticsearch up an running with Shield and SSL using local authentication. The browser on my workstation trusts the site when I go to https://myserver.mydomain.com:9200 I have updated the Kibana.yml file: elas… --- ## [Unable to authenticate user \[elastic\] for REST request \[/\]](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/372371)
**Author:** [@am75](https://discuss.elastic.co/u/am75)\ **Replies:** 7\ **Last updated:** [December 27, 2024, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-for-rest-request/372371 "2024-12-27T15:36:12Z")
I'm trying to deploy Elastic Stack as described here: https://www.elastic.co/blog/getting-started-with-the-elastic-stack-and-docker-compose. Docker images start correctly, but I can't authenticate although the password … --- ## [SESSION\_EXPIRED while login kibana](https://discuss.elastic.co/t/session-expired-while-login-kibana/147511)
**Author:** [@talon](https://discuss.elastic.co/u/talon)\ **Replies:** 1\ **Last updated:** [September 7, 2018, 11:17am UTC](https://discuss.elastic.co/t/session-expired-while-login-kibana/147511 "2018-09-07T11:17:42Z")
HI I faced an issue, when i login the kibana ,after i login , the browser will go to https://sent2-kibana-qa.dsentience.net/logout?next=%2Fapp%2Fkibana%23%2Fhome%3F\_g%3D()&msg=SESSION\_EXPIRED Environment of my ELK two… --- ## [ERR failed to initialize elasticsearch plugin as output](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output/75276)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 4\ **Last updated:** [February 21, 2017, 9:03pm UTC](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output/75276 "2017-02-21T21:03:04Z")
hello can someone help me understand the problem with this Feb 14 12:25:57 localhost.localdomain systemd\[1\]: Started filebeat. Feb 14 12:25:57 localhost.localdomain systemd\[1\]: Starting filebeat... \[ctf@localhost ~\]$… --- ## [How to configure using this force panel?](https://discuss.elastic.co/t/how-to-configure-using-this-force-panel/52528)
**Author:** [@zhaoxiaole](https://discuss.elastic.co/u/zhaoxiaole)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 6:09am UTC](https://discuss.elastic.co/t/how-to-configure-using-this-force-panel/52528 "2016-06-15T06:09:33Z")
I have a question about your advice. I'm using packetbeat-1.0.0 + elasticsearch-1.3.9 + kibana-3.1.2-packetbeat, I want to draw the network topology, but do not know how to configure, and how to achieve the configuration… --- ## [Rolling restart elasticsearch cluster](https://discuss.elastic.co/t/rolling-restart-elasticsearch-cluster/36419)
**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Replies:** 4\ **Last updated:** [December 6, 2015, 6:34pm UTC](https://discuss.elastic.co/t/rolling-restart-elasticsearch-cluster/36419 "2015-12-06T18:34:09Z")
I have an index with 7 primaries and 2 replicas. Each shard is on its own machine. So, there are 21 data nodes. When I have to do rolling restart, currently, I check if shard relocation is complete before I switch ove… --- ## [Logstash with X-Pack](https://discuss.elastic.co/t/logstash-with-x-pack/90230)
**Author:** [@tuanpembual](https://discuss.elastic.co/u/tuanpembual)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 12:36pm UTC](https://discuss.elastic.co/t/logstash-with-x-pack/90230 "2017-06-26T12:36:24Z")
Dear All, I have elk stack with difference machine \[Client - beat\] - \[VM1 - Logstash | 192.168.33.101\] - \[VM2 - ES and Kibana | 192.168.33.102\] I have install x-pack plugin for logstash, es, and kibana. and have succ… --- ## [Freeing up disk space (again)](https://discuss.elastic.co/t/freeing-up-disk-space-again/78484)
**Author:** [@juliann](https://discuss.elastic.co/u/juliann)\ **Replies:** 2\ **Last updated:** [March 15, 2017, 9:37am UTC](https://discuss.elastic.co/t/freeing-up-disk-space-again/78484 "2017-03-15T09:37:08Z")
We store our ES 5.2 data on a separate D drive on a Windows platform (syslog01) - and it has become full. Having Googled and gone through the forum, first I tried deleting some indices using the DELETE method and Postm… --- ## [Filebeat vs Winlogbeat](https://discuss.elastic.co/t/filebeat-vs-winlogbeat/225684)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 9:44pm UTC](https://discuss.elastic.co/t/filebeat-vs-winlogbeat/225684 "2020-03-30T21:44:12Z")
Hi there, Filebeat and Winlogbeat seem to work similarly. Both beats seem to be able to process logs from Windows (in the case of Filebeats, it can also process logs from other OS). My questions would be: 1- Which beat… --- ## [How to return document id from sql query?](https://discuss.elastic.co/t/how-to-return-document-id-from-sql-query/147129)
**Author:** [@hongyuan1306](https://discuss.elastic.co/u/hongyuan1306)\ **Replies:** 1\ **Last updated:** [September 4, 2018, 3:36am UTC](https://discuss.elastic.co/t/how-to-return-document-id-from-sql-query/147129 "2018-09-04T03:36:31Z")
Is there a way to return the document id from the SELECT sql query? I tried to use \_id, but got Unknown column \[\_id\] --- ## [Filebeat 6.1 in Kubernetes - unable to fetch logs from new pods](https://discuss.elastic.co/t/filebeat-6-1-in-kubernetes-unable-to-fetch-logs-from-new-pods/116503)
**Author:** [@thesilence](https://discuss.elastic.co/u/thesilence)\ **Replies:** 6\ **Last updated:** [January 22, 2018, 5:45pm UTC](https://discuss.elastic.co/t/filebeat-6-1-in-kubernetes-unable-to-fetch-logs-from-new-pods/116503 "2018-01-22T17:45:50Z")
Filebeat version: 6.1.2 Kubernetes nodes are running on Google's GKE Kubernetes version: 1.8.5-gke.0 Context We are following the instructions in https://www.elastic.co/guide/en/beats/filebeat/6.1/running-on-kubernet… --- ## [Standard Deviations, Revisited](https://discuss.elastic.co/t/standard-deviations-revisited/225731)
**Author:** [@gardanni](https://discuss.elastic.co/u/gardanni)\ **Replies:** 4\ **Last updated:** [April 1, 2020, 4:45pm UTC](https://discuss.elastic.co/t/standard-deviations-revisited/225731 "2020-04-01T16:45:33Z")
I'm going down one rabbit hole after another. I wonder if someone would offer some input. I have hourly data that I want to aggregate by Date and Count. Based on this data, I want to establish another column showing how … --- ## [Nest ingest a list of attachments](https://discuss.elastic.co/t/nest-ingest-a-list-of-attachments/222360)
**Author:** [@gutospinelli](https://discuss.elastic.co/u/gutospinelli)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 7:37pm UTC](https://discuss.elastic.co/t/nest-ingest-a-list-of-attachments/222360 "2020-03-06T19:37:14Z")
Hi everyone! I am trying to index an object called "News" who has a list of "NewsFiles" using NEST/C# The simplified code for my news class follows: public class News { (...) public List\ Files { get; set; }… --- ## [In flight circuit breaker explanation](https://discuss.elastic.co/t/in-flight-circuit-breaker-explanation/181970)
**Author:** [@ttdata](https://discuss.elastic.co/u/ttdata)\ **Replies:** 7\ **Last updated:** [May 25, 2019, 10:13am UTC](https://discuss.elastic.co/t/in-flight-circuit-breaker-explanation/181970 "2019-05-25T10:13:31Z")
Hello ! I have one question about the circuit breaker "in flight requests" What exactly it means ? For instance i share with you a sreenshot where the circuit break in flight requests increase and while this time i had… --- ## [Drop Down Options in Dashboard](https://discuss.elastic.co/t/drop-down-options-in-dashboard/127556)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 1\ **Last updated:** [April 11, 2018, 1:39pm UTC](https://discuss.elastic.co/t/drop-down-options-in-dashboard/127556 "2018-04-11T13:39:20Z")
Is there a way to set up a dynamically populated drop down list in a dashboard that when a value is selected applies a filter to all visualizations in that dashboard? --- ## [Filebeat: filebeat.full.yml attribute duplication](https://discuss.elastic.co/t/filebeat-filebeat-full-yml-attribute-duplication/51110)
**Author:** [@Jaren](https://discuss.elastic.co/u/Jaren)\ **Replies:** 7\ **Last updated:** [May 31, 2016, 8:54am UTC](https://discuss.elastic.co/t/filebeat-filebeat-full-yml-attribute-duplication/51110 "2016-05-31T08:54:05Z")
It appears in the filebeat.full.yml that their is some duplication in the below attributes. fields: \* https://github.com/elastic/beats/blob/master/filebeat/filebeat.full.yml#L61 \* https://github.com/elastic/beats/… --- ## [Can anyone guide me to correct autodiscover condition?](https://discuss.elastic.co/t/can-anyone-guide-me-to-correct-autodiscover-condition/310359)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 8\ **Last updated:** [July 28, 2022, 1:07am UTC](https://discuss.elastic.co/t/can-anyone-guide-me-to-correct-autodiscover-condition/310359 "2022-07-28T01:07:00Z")
FB: 7.16.3 I try "- and:" and "and:" both get "missing or invalid condition". filebeat.autodiscover.providers: - type: kubernetes node: ${NODE\_NAME} templates: - condition: and: … --- ## [Unable to plot custom data on Y axis](https://discuss.elastic.co/t/unable-to-plot-custom-data-on-y-axis/229085)
**Author:** [@ishan1](https://discuss.elastic.co/u/ishan1)\ **Replies:** 8\ **Last updated:** [April 24, 2020, 5:03am UTC](https://discuss.elastic.co/t/unable-to-plot-custom-data-on-y-axis/229085 "2020-04-24T05:03:52Z")
I have 1000 lines of data which is in below format and I want to plot a line graph in Kibana with response time on y axis and time on x axis and then plot the data based on Interface name. In below data there is only 1 i… --- ## [Logstash cannot connect to Elasticsearch on kubernetes](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496)
**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:59pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496 "2022-03-28T13:59:52Z")
Hi everyone, i'm having trouble concerning Logstash. So i installed ELK stack on kubernetes using helm. every pod is is running and ready. Elasticsearch and kibana are perfectly fine. the problem is with logstash as yo… --- ## [Bandwidth accounting in Kibana](https://discuss.elastic.co/t/bandwidth-accounting-in-kibana/85090)
**Author:** [@yeci](https://discuss.elastic.co/u/yeci)\ **Replies:** 3\ **Last updated:** [May 15, 2017, 8:55pm UTC](https://discuss.elastic.co/t/bandwidth-accounting-in-kibana/85090 "2017-05-15T20:55:22Z")
We're trying to get a bandwidth accounting solution running where we want to get graphs on how much bandwidth every individual IP address uses. To do this we are using a tool called pmacct-to-elasticsearch that takes the… --- ## [Remove field based on name regex](https://discuss.elastic.co/t/remove-field-based-on-name-regex/62326)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 3\ **Last updated:** [October 6, 2016, 5:33am UTC](https://discuss.elastic.co/t/remove-field-based-on-name-regex/62326 "2016-10-06T05:33:19Z")
This is the data I'm receiving: "mem" =\> { "total" =\> 8201703424, "used" =\> 6293446656, "free" =\> 1908256768, "used\_p" =\> 0.77, "actual\_used" =\> 5523927040, … --- ## [Multiline stacktrace in JSON not parsed by Filebeat/seen in Kibana](https://discuss.elastic.co/t/multiline-stacktrace-in-json-not-parsed-by-filebeat-seen-in-kibana/275502)
**Author:** [@jcklie](https://discuss.elastic.co/u/jcklie)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 9:44pm UTC](https://discuss.elastic.co/t/multiline-stacktrace-in-json-not-parsed-by-filebeat-seen-in-kibana/275502 "2021-06-09T21:44:37Z")
I use JSON Template Layout from Apache log4j to log to jsonl. Then I use Filebeat to ingest this: filebeat.inputs: - type: log enabled: true paths: - /srv/inception-stable/logs/inception-stable.log - /srv/i… --- ## [Existing mapping for \[myfield\] must be of type object but found \[text\]](https://discuss.elastic.co/t/existing-mapping-for-myfield-must-be-of-type-object-but-found-text/97250)
**Author:** [@sentinel](https://discuss.elastic.co/u/sentinel)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 5:33am UTC](https://discuss.elastic.co/t/existing-mapping-for-myfield-must-be-of-type-object-but-found-text/97250 "2017-08-18T05:33:54Z")
I am encountering lots of error messages in the elastic logs as I send messages from logstash. What do I have to do to myfield in order to make it an object? “message” =\> “^%{TIMESTAMP\_ISO8601:timestamp},%{NUMBER:tz} \[… --- ## [\[my\_gcs\_repository\] repository type \[gcs\] does not exist](https://discuss.elastic.co/t/my-gcs-repository-repository-type-gcs-does-not-exist/94363)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [July 24, 2017, 4:42pm UTC](https://discuss.elastic.co/t/my-gcs-repository-repository-type-gcs-does-not-exist/94363 "2017-07-24T16:42:35Z")
I'm trying to follow Google Cloud Storage Repository Plugin and while at step: Create a Repository I'm getting following error: # curl -XPUT 'elk:9200/\_snapshot/my\_gcs\_repository?pretty' -H 'Content-Type: application/j… --- ## [Using conditional to find nil values](https://discuss.elastic.co/t/using-conditional-to-find-nil-values/199660)
**Author:** [@Hyperion0](https://discuss.elastic.co/u/Hyperion0)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 11:56am UTC](https://discuss.elastic.co/t/using-conditional-to-find-nil-values/199660 "2019-09-17T11:56:14Z")
I'm writing a config file for logstash to read in a CSV file. Some of the fields are empty some of the time but when they are not empty they have to have data types assigned (integer, bool, etc...), and when I run log s… --- ## [Reverse proxy kibana in node express?](https://discuss.elastic.co/t/reverse-proxy-kibana-in-node-express/33152)
**Author:** [@dansantner](https://discuss.elastic.co/u/dansantner)\ **Replies:** 2\ **Last updated:** [October 31, 2015, 3:01pm UTC](https://discuss.elastic.co/t/reverse-proxy-kibana-in-node-express/33152 "2015-10-31T15:01:40Z")
I'm simply trying to reverse proxy kibana through a node express app. I'm using /kibana/ as the route to get to kibana. It's hanging on the post to elastcisearch/\_mget Any help is appreciated! Here's the proxy … --- ## [Sum aggregation in kibana data table visualization for "other" bucket is always 0](https://discuss.elastic.co/t/sum-aggregation-in-kibana-data-table-visualization-for-other-bucket-is-always-0/241430)
**Author:** [@webstruck](https://discuss.elastic.co/u/webstruck)\ **Replies:** 6\ **Last updated:** [September 7, 2020, 8:38am UTC](https://discuss.elastic.co/t/sum-aggregation-in-kibana-data-table-visualization-for-other-bucket-is-always-0/241430 "2020-09-07T08:38:22Z")
I'm trying to create a data table visualization in ELK 7.8. I have a Terms aggregation with size 5 and checked "Group other values in separate bucket". So it shows Other bucket as row in the table with Count metric. I al… --- ## [Need help with debugging](https://discuss.elastic.co/t/need-help-with-debugging/166449)
**Author:** [@newbieelastic](https://discuss.elastic.co/u/newbieelastic)\ **Replies:** 5\ **Last updated:** [January 31, 2019, 5:08am UTC](https://discuss.elastic.co/t/need-help-with-debugging/166449 "2019-01-31T05:08:46Z")
I am getting a parsing error. Could you see what I could be doing wrong? Thanks! PUT /\_template/flightdata\_template { "index\_patterns": \["flightdata\*"\], "mappings" : { "\_doc" : { "dynamic": "strict", "properties" … --- ## [VEGA Visualizationでy軸に複数の項目をセットしたい。](https://discuss.elastic.co/t/vega-visualization-y/220076)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 12:12am UTC](https://discuss.elastic.co/t/vega-visualization-y/220076 "2020-02-27T00:12:18Z")
お世話になります。 VEGAを用いて散布図を作成しています。 一つのx軸を共通で使用し、y軸に複数の項目をセットしたいのですが、上手くいきません。 やりたいこと 下記のデータ群で、値を x軸: testdate , y軸: value1 でセットする簡単な散布図は作成できました。 Sample data testdate value1 value2 value3 2020-01-03 00:00:00 10 2… [Previous page](https://discuss.elastic.co/top.md?page=764&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=766&per_page=50&period=all)