# Top

**URL:** https://discuss.elastic.co/top.md?page=766&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 767

---

## [Re: Filebeat \> Kafka \> Logstash \> ElasticSearch](https://discuss.elastic.co/t/re-filebeat-kafka-logstash-elasticsearch/97888)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 4\
**Last updated:** [August 29, 2017, 3:24am UTC](https://discuss.elastic.co/t/re-filebeat-kafka-logstash-elasticsearch/97888 "2017-08-29T03:24:54Z")

</div>

Anyone here why beats data such as beat name, version etc is not included after indexing in elasticsearch?

---

## [FileBeat not able to read new files](https://discuss.elastic.co/t/filebeat-not-able-to-read-new-files/89650)

<div class="topic-metadata">

**Author:** [@vishalkin](https://discuss.elastic.co/u/vishalkin)\
**Replies:** 4\
**Last updated:** [June 20, 2017, 9:10am UTC](https://discuss.elastic.co/t/filebeat-not-able-to-read-new-files/89650 "2017-06-20T09:10:04Z")

</div>

Filebeat : 5.1.1 ELK stack 5.1.1 I have a filebeat running on my server which has following config. filebeat.prospectors: - input\_type: log # Paths that should be crawled and fetched. Glob based paths. paths: …

---

## [Can't find data when doing simple KQL query ( can see the log in general search)](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034)

<div class="topic-metadata">

**Author:** [@umen](https://discuss.elastic.co/u/umen)\
**Replies:** 3\
**Last updated:** [January 4, 2021, 1:01pm UTC](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034 "2021-01-04T13:01:56Z")

</div>

im using the filebeat-\* index . when i watch the logs in discover i can see logs from the pods when i try to create simple query to get logs by namespace/name/container name i don't get any result i follow this threa…

---

## [Log-stash forwarder in a RHEL5 system](https://discuss.elastic.co/t/log-stash-forwarder-in-a-rhel5-system/24797)

<div class="topic-metadata">

**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\
**Replies:** 3\
**Last updated:** [March 30, 2016, 9:34pm UTC](https://discuss.elastic.co/t/log-stash-forwarder-in-a-rhel5-system/24797 "2016-03-30T21:34:05Z")

</div>

I downloaded and installed Elastic Search, Logstash and Kibana on a RHEL6 system. My components are running on a RHEL5 system. In order to save the CPU utilisation, i am planning to install the log-stash forwarder on RHE…

---

## [Export saved search to csv in kibana oss](https://discuss.elastic.co/t/export-saved-search-to-csv-in-kibana-oss/221592)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 3\
**Last updated:** [March 4, 2020, 5:21am UTC](https://discuss.elastic.co/t/export-saved-search-to-csv-in-kibana-oss/221592 "2020-03-04T05:21:54Z")

</div>

Hi, I am using kibana-oss: 7.0.1. I am able to export a data table visualization to csv format (using the Export Raw/Formatted option at the bottom). I have also added a Saved Search into my dashboard but I am unable t…

---

## [Logs are not displayed in dashboards](https://discuss.elastic.co/t/logs-are-not-displayed-in-dashboards/361962)

<div class="topic-metadata">

**Author:** [@Babouchka](https://discuss.elastic.co/u/Babouchka)\
**Replies:** 7\
**Last updated:** [June 25, 2024, 9:09am UTC](https://discuss.elastic.co/t/logs-are-not-displayed-in-dashboards/361962 "2024-06-25T09:09:41Z")

</div>

Hello everyone ! I have a 3 node cluster (1 with kibana/elasticsearch and 2 with logstash/elasticsearch). On the client side I use Filebeat to send logs. I have ugraded from 8.11 to 8.14.1 and my dashboards no longer d…

---

## [Search API requests returns Error 500 Internal Server Error: An internal server error occurred](https://discuss.elastic.co/t/search-api-requests-returns-error-500-internal-server-error-an-internal-server-error-occurred/352260)

<div class="topic-metadata">

**Author:** [@PustyB](https://discuss.elastic.co/u/PustyB)\
**Replies:** 7\
**Last updated:** [February 1, 2024, 9:57am UTC](https://discuss.elastic.co/t/search-api-requests-returns-error-500-internal-server-error-an-internal-server-error-occurred/352260 "2024-02-01T09:57:36Z")

</div>

Hi I have a problem with Enterprise search. I have loaded the index and want to test the search through Search UI. And generally it works fine, but sometimes the error "Internal server error. Please check your applicatio…

---

## [I want add read-only users but they can create short URLs on Kibana](https://discuss.elastic.co/t/i-want-add-read-only-users-but-they-can-create-short-urls-on-kibana/111892)

<div class="topic-metadata">

**Author:** [@serive](https://discuss.elastic.co/u/serive)\
**Replies:** 2\
**Last updated:** [December 16, 2017, 5:31am UTC](https://discuss.elastic.co/t/i-want-add-read-only-users-but-they-can-create-short-urls-on-kibana/111892 "2017-12-16T05:31:08Z")

</div>

If I make readonly user for kibana, readonly user cannot make short URL for kibana. This is not convenient for our use case. Now our business is following case. We service to customer as SaaS. We insert data in elas…

---

## [Get only buckets from one aggregation type and remove the rest](https://discuss.elastic.co/t/get-only-buckets-from-one-aggregation-type-and-remove-the-rest/45954)

<div class="topic-metadata">

**Author:** [@krum](https://discuss.elastic.co/u/krum)\
**Replies:** 2\
**Last updated:** [April 1, 2016, 3:27pm UTC](https://discuss.elastic.co/t/get-only-buckets-from-one-aggregation-type-and-remove-the-rest/45954 "2016-04-01T15:27:08Z")

</div>

Hi, Only buckets from one aggregation are needed ( "SumMaxT" - "sum\_bucket"). Aggregation terms\_H and it’s child MaxT should not be returned. I have tried bucket\_selector but the result is not good - terms aggregations a…

---

## [Visualizing Weighted Average Aggregation in Kibana](https://discuss.elastic.co/t/visualizing-weighted-average-aggregation-in-kibana/269901)

<div class="topic-metadata">

**Author:** [@connersexton](https://discuss.elastic.co/u/connersexton)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 3:55pm UTC](https://discuss.elastic.co/t/visualizing-weighted-average-aggregation-in-kibana/269901 "2021-04-12T15:55:42Z")

</div>

I've read a lot of documentation regarding single-value weighted average aggregation in Kibana, but can't seem to find anything on the actual application of this in a dashboard or visualization. My knowledge of Kibana sy…

---

## [How to detect the state change in the status bar?](https://discuss.elastic.co/t/how-to-detect-the-state-change-in-the-status-bar/58018)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [August 18, 2016, 6:11am UTC](https://discuss.elastic.co/t/how-to-detect-the-state-change-in-the-status-bar/58018 "2016-08-18T06:11:55Z")

</div>

Hi! I would like to ask question regarding to kibana plugin. I am trying to detect the change every time the filter in status bar is changed for dashboard. I wrote the code in the controller as below but the result is…

---

## [FlushNotAllowedEngineException exception during optimize](https://discuss.elastic.co/t/flushnotallowedengineexception-exception-during-optimize/26084)

<div class="topic-metadata">

**Author:** [@Dariusp](https://discuss.elastic.co/u/Dariusp)\
**Replies:** 4\
**Last updated:** [August 11, 2015, 10:46am UTC](https://discuss.elastic.co/t/flushnotallowedengineexception-exception-during-optimize/26084 "2015-08-11T10:46:14Z")

</div>

Hi, I am running 1.5.2 elasticsearch. My strategy to index data is to create new index, push all data, apply settings to index (example number\_of\_replicas, alias). Sometimes I get weird exception in server logs during …

---

## [Fielddata is disabled on text fields by default. Set fielddata=true on \[host.name\] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory. Alternatively use a keyword field instead](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-host-name-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index-note-that-this-can-however-use-significant-memory-alternatively-use-a-keyword-field-instead/176727)

<div class="topic-metadata">

**Author:** [@Zyuxing](https://discuss.elastic.co/u/Zyuxing)\
**Replies:** 3\
**Last updated:** [April 13, 2019, 10:44am UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-host-name-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index-note-that-this-can-however-use-significant-memory-alternatively-use-a-keyword-field-instead/176727 "2019-04-13T10:44:34Z")

</div>

I had this problem visiting kibana Infrastructure. I followed the document example: PUT metricbeat - \* / \_mapping { "Properties" : { "Host name" : { "Type" : "text", "Fielddata" : true } } } It happened: Mapp…

---

## [Order of logs with same timestamp](https://discuss.elastic.co/t/order-of-logs-with-same-timestamp/28577)

<div class="topic-metadata">

**Author:** [@JW1](https://discuss.elastic.co/u/JW1)\
**Replies:** 3\
**Last updated:** [September 3, 2015, 5:17am UTC](https://discuss.elastic.co/t/order-of-logs-with-same-timestamp/28577 "2015-09-03T05:17:06Z")

</div>

I'm using logstash to parse my application's log files. Sometimes several events happen at the same time, at least according to their timestamp. But I'd like to be able to see them in their original order in Kibana. Is t…

---

## [Data node using different cluster id](https://discuss.elastic.co/t/data-node-using-different-cluster-id/244991)

<div class="topic-metadata">

**Author:** [@Shambu\_Pujar](https://discuss.elastic.co/u/Shambu_Pujar)\
**Replies:** 5\
**Last updated:** [August 15, 2020, 8:24am UTC](https://discuss.elastic.co/t/data-node-using-different-cluster-id/244991 "2020-08-15T08:24:42Z")

</div>

Hi For some of the maintenance exercise, I had to bring down the master. In that process, I made data node as master as well. Now with new master, I am not able to get data node join master Data node throws following …

---

## [Filebeat OOM](https://discuss.elastic.co/t/filebeat-oom/146736)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 6\
**Last updated:** [September 11, 2018, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-oom/146736 "2018-09-11T19:47:13Z")

</div>

Hi, running filebeat 6.2.2 Today I noticed filebeat was going bonkers... In /var/log/messages I see allot of these... Aug 30 13:30:43 master-0002 kernel: Out of memory: Kill process 19154 (filebeat) score 818 or sacri…

---

## [Не ищет в индексе по половине слова](https://discuss.elastic.co/t/topic/110423)

<div class="topic-metadata">

**Author:** [@Petr\_Sklyarov](https://discuss.elastic.co/u/Petr_Sklyarov)\
**Replies:** 6\
**Last updated:** [December 11, 2017, 10:01am UTC](https://discuss.elastic.co/t/topic/110423 "2017-12-11T10:01:19Z")

</div>

Добрый день! Вопрос возник. В документе есть записи в поле title с значениями "Балтика №0", "Балтика №1" и тд Если подать на поиск слово "балтик" - то находит записи, а если, например, "балти" - то ничего не находит. …

---

## [Filebeat 不释放文件句柄问题？求助](https://discuss.elastic.co/t/filebeat/85982)

<div class="topic-metadata">

**Author:** [@can.zhang](https://discuss.elastic.co/u/can.zhang)\
**Replies:** 2\
**Last updated:** [May 29, 2017, 2:51pm UTC](https://discuss.elastic.co/t/filebeat/85982 "2017-05-29T14:51:29Z")

</div>

我的环境是使用filebeat收集应用日志，上传到logstash-indexer，然后存入ES， filebeat版本是 1.3.1(amd64)，大概的配置是： - paths: - /opt/mateinfo/logs/app/app.log input\_type: log fields: log\_format: wfm\_log4j fields\_under\_root: true ignore\_older: 1m close\_o…

---

## [Disable autosize warning](https://discuss.elastic.co/t/disable-autosize-warning/275127)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 4\
**Last updated:** [June 7, 2021, 10:17am UTC](https://discuss.elastic.co/t/disable-autosize-warning/275127 "2021-06-07T10:17:39Z")

</div>

Kibana version : 7.10 Elasticsearch version : 7.10 APM Server version : 7.10 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se…

---

## [Trying to update documents using NEST in C#](https://discuss.elastic.co/t/trying-to-update-documents-using-nest-in-c/250626)

<div class="topic-metadata">

**Author:** [@adiksl](https://discuss.elastic.co/u/adiksl)\
**Replies:** 1\
**Last updated:** [October 12, 2020, 3:08pm UTC](https://discuss.elastic.co/t/trying-to-update-documents-using-nest-in-c/250626 "2020-10-12T15:08:52Z")

</div>

From within a C# winform application I am writing to elasticsearch which is working successfully. This is fine for my audit process but there is a requirement to write notes data to elasticsearch to enable text searching…

---

## [Unable to perform offline upgrade of logstash plugins](https://discuss.elastic.co/t/unable-to-perform-offline-upgrade-of-logstash-plugins/127881)

<div class="topic-metadata">

**Author:** [@bwmaas](https://discuss.elastic.co/u/bwmaas)\
**Replies:** 7\
**Last updated:** [April 13, 2018, 8:20pm UTC](https://discuss.elastic.co/t/unable-to-perform-offline-upgrade-of-logstash-plugins/127881 "2018-04-13T20:20:20Z")

</div>

I need to upgrade the logstash-input-s3 and logstash-output-s3 plugins on an environment disconnected from the internet. The offline server is running logstash v5.2.2. Per the instructions here I installed logstash v5.2…

---

## [Interaction between Multiple Date Histograms (based on different date fields)](https://discuss.elastic.co/t/interaction-between-multiple-date-histograms-based-on-different-date-fields/109771)

<div class="topic-metadata">

**Author:** [@Albinsson](https://discuss.elastic.co/u/Albinsson)\
**Replies:** 7\
**Last updated:** [January 15, 2018, 3:22pm UTC](https://discuss.elastic.co/t/interaction-between-multiple-date-histograms-based-on-different-date-fields/109771 "2018-01-15T15:22:05Z")

</div>

We've got Twitter data in the form of tweets in ES and I'm building views for analyzing them. Different timelines (histograms with tweet.created\_at) showing tweets over time are used to spot patterns, outliers or strang…

---

## [Multiple Snapshot Repositories show same snapshots. They seem to be interlinked](https://discuss.elastic.co/t/multiple-snapshot-repositories-show-same-snapshots-they-seem-to-be-interlinked/62566)

<div class="topic-metadata">

**Author:** [@Abhishek\_Vaid](https://discuss.elastic.co/u/Abhishek_Vaid)\
**Replies:** 8\
**Last updated:** [October 10, 2016, 9:02pm UTC](https://discuss.elastic.co/t/multiple-snapshot-repositories-show-same-snapshots-they-seem-to-be-interlinked/62566 "2016-10-10T21:02:50Z")

</div>

I have a cluster and I registered multiple repos in it with same type (azure). Let's say repos are repo\_1 repo\_2 repo\_3 The reason I created three different repos is because I have three different types of indices a…

---

## [Exporting to CSV missing values in fields](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389)

<div class="topic-metadata">

**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\
**Replies:** 4\
**Last updated:** [June 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389 "2021-06-30T19:49:28Z")

</div>

Hi All, Wondering if I can get some help. Currently from Kibana I'm running some Discover Reports, I can see all the fields and information in Kibana, however when I export it to CSV, 4 columns out of 6 have no values a…

---

## [Got error at time of bulk insert](https://discuss.elastic.co/t/got-error-at-time-of-bulk-insert/144989)

<div class="topic-metadata">

**Author:** [@dilip1](https://discuss.elastic.co/u/dilip1)\
**Replies:** 4\
**Last updated:** [August 21, 2018, 9:40am UTC](https://discuss.elastic.co/t/got-error-at-time-of-bulk-insert/144989 "2018-08-21T09:40:00Z")

</div>

my url -\> http://localhost:9200/schools/\_bulk post data -\> { "index":{ "\_index":"schools", "\_type":"school", "\_id":"1" } } { "name":"Central School", "description":"CBSE Affiliation", "street":"Nagan", "city":"pa…

---

## [Message format in logstash output plugin](https://discuss.elastic.co/t/message-format-in-logstash-output-plugin/40614)

<div class="topic-metadata">

**Author:** [@bharath\_meka](https://discuss.elastic.co/u/bharath_meka)\
**Replies:** 2\
**Last updated:** [February 2, 2016, 11:13am UTC](https://discuss.elastic.co/t/message-format-in-logstash-output-plugin/40614 "2016-02-02T11:13:28Z")

</div>

Hi, We have a custom logstash output plugin to post some messages to Slack. If I use a static message like "Testing from logstash", we are able to post it. But if I use logstash variables like %{message} or any other cu…

---

## [Health Check on FileBeats Instance from AWS NLB](https://discuss.elastic.co/t/health-check-on-filebeats-instance-from-aws-nlb/269371)

<div class="topic-metadata">

**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 9:50pm UTC](https://discuss.elastic.co/t/health-check-on-filebeats-instance-from-aws-nlb/269371 "2021-04-06T21:50:15Z")

</div>

Hi All, Could you please help with the below NLB configuration in AWS in-front of FileBeat Instance? When I tried to created the setup, the Target Group always shows unhealthy - Health checks failed. Requirement: 1. D…

---

## [First query is slow even if I use "loading:eager"](https://discuss.elastic.co/t/first-query-is-slow-even-if-i-use-loading-eager/63374)

<div class="topic-metadata">

**Author:** [@avion](https://discuss.elastic.co/u/avion)\
**Replies:** 0\
**Last updated:** [October 19, 2016, 10:45am UTC](https://discuss.elastic.co/t/first-query-is-slow-even-if-i-use-loading-eager/63374 "2016-10-19T10:45:09Z")

</div>

I'm using this kind of mapping (well, it's a shortener version in order to make the question easier) on a children-parent relationship where item is the parent and user\_items is the children. curl -XPUT 'localhos…

---

## [Elastic Agent Enrollment Errors](https://discuss.elastic.co/t/elastic-agent-enrollment-errors/298203)

<div class="topic-metadata">

**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\
**Replies:** 5\
**Last updated:** [February 25, 2022, 9:52am UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-errors/298203 "2022-02-25T09:52:40Z")

</div>

Hello, I am having some problems enrolling linux and windows agent into Elastic Fleet services. This is the message I am getting: sudo ./elastic-agent enroll -f --fleet-server-es=https://172.16.100.6:8220 --fleet-serve…

---

## [Logstash JMS Input Plugin](https://discuss.elastic.co/t/logstash-jms-input-plugin/45035)

<div class="topic-metadata">

**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\
**Replies:** 5\
**Last updated:** [March 23, 2016, 6:16pm UTC](https://discuss.elastic.co/t/logstash-jms-input-plugin/45035 "2016-03-23T18:16:00Z")

</div>

Does Logstash-Input-Jms plugin need a specific version of Logstash? I am using Logstash 1.4.2. And I'm struggling to get this plugin to work. Can anyone help me with the configuration? I copied jms.rb into /lib/logst…

---

## [Filebeat to send logs to Logstash and ES](https://discuss.elastic.co/t/filebeat-to-send-logs-to-logstash-and-es/199092)

<div class="topic-metadata">

**Author:** [@Ghaith\_Haddad](https://discuss.elastic.co/u/Ghaith_Haddad)\
**Replies:** 6\
**Last updated:** [September 24, 2019, 11:19am UTC](https://discuss.elastic.co/t/filebeat-to-send-logs-to-logstash-and-es/199092 "2019-09-24T11:19:41Z")

</div>

Hello everyone, So i have filebeat configured in an apache server AWS EC2 instance and another EC2 instance which has logstash and elasticsearch. i can send log files to the ec2 instance to logstash but i can only displ…

---

## [Does Logstash parse Word Documents?](https://discuss.elastic.co/t/does-logstash-parse-word-documents/77488)

<div class="topic-metadata">

**Author:** [@rlv\_praveen](https://discuss.elastic.co/u/rlv_praveen)\
**Replies:** 6\
**Last updated:** [March 6, 2017, 2:15pm UTC](https://discuss.elastic.co/t/does-logstash-parse-word-documents/77488 "2017-03-06T14:15:06Z")

</div>

Hi All, I have a requirement in which i need to parse the WORD documents. Does logstash supports the parsing of word files. Is there any plugin available for that. Please help me whether i can do this or not? Thanks …

---

## [Script Field with Nested Objects](https://discuss.elastic.co/t/script-field-with-nested-objects/307191)

<div class="topic-metadata">

**Author:** [@LisaJ](https://discuss.elastic.co/u/LisaJ)\
**Replies:** 2\
**Last updated:** [June 14, 2022, 10:10pm UTC](https://discuss.elastic.co/t/script-field-with-nested-objects/307191 "2022-06-14T22:10:46Z")

</div>

Hi -- I am hoping someone can help me (or let me know that ES doesn't do this so I can stop trying!). We're using ES 7.7.0. I have data where there are multiple items within an object -- as an example, each document rep…

---

## [Logstash 2.1.1 Fresh ELK Install Errors](https://discuss.elastic.co/t/logstash-2-1-1-fresh-elk-install-errors/38370)

<div class="topic-metadata">

**Author:** [@ninjada](https://discuss.elastic.co/u/ninjada)\
**Replies:** 2\
**Last updated:** [January 7, 2016, 3:12am UTC](https://discuss.elastic.co/t/logstash-2-1-1-fresh-elk-install-errors/38370 "2016-01-07T03:12:24Z")

</div>

Hi Guys, Presently updating my ELK stack a few versions behind to new servers running the latest versions. At first I got some error: you might need to reinstall the gem which depends on the missing jar or in case th…

---

## [Kibana server is not ready yet ubuntu](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866)

<div class="topic-metadata">

**Author:** [@Nur\_Amin\_Sifat](https://discuss.elastic.co/u/Nur_Amin_Sifat)\
**Replies:** 3\
**Last updated:** [June 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866 "2021-06-24T13:33:28Z")

</div>

Browser show this kibana server is not ready yet ubuntu

---

## [High CPU Usage and Load on Data Nodes](https://discuss.elastic.co/t/high-cpu-usage-and-load-on-data-nodes/206945)

<div class="topic-metadata">

**Author:** [@sunilsaini314](https://discuss.elastic.co/u/sunilsaini314)\
**Replies:** 3\
**Last updated:** [November 16, 2019, 11:29am UTC](https://discuss.elastic.co/t/high-cpu-usage-and-load-on-data-nodes/206945 "2019-11-16T11:29:57Z")

</div>

We have 5 nodes cluster -- 3 Master Nodes - 2 Cores, 4 GB RAM - 2 GB Heap 2 Data Nodes - 2 Cores, 16 GB RAM - 8 GB Heap Total Number of primary Shards - Data Nodes are constantly having high CPU(~90%-95%) and load av…

---

## [Aggregate ElasticSearch data and visualize into Gantt chart](https://discuss.elastic.co/t/aggregate-elasticsearch-data-and-visualize-into-gantt-chart/168717)

<div class="topic-metadata">

**Author:** [@ozmhsh](https://discuss.elastic.co/u/ozmhsh)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 10:57pm UTC](https://discuss.elastic.co/t/aggregate-elasticsearch-data-and-visualize-into-gantt-chart/168717 "2019-02-19T22:57:08Z")

</div>

First of all, I think this question is related to Kibana, let me know if I am wrong:-) My question is that I want to aggregate my ElasticSearch Index data and then visualize it into the Gantt chart, I don't know if I am…

---

## [Spring data elastic-search integration failing with Caused by: java.lang.NoSuchMethodError: org.elasticsearch.common.settings.Settings$Builder.put(\[Ljava/lang/Object;)Lorg/elasticsearch/common/settings/Settings$Builder;](https://discuss.elastic.co/t/spring-data-elastic-search-integration-failing-with-caused-by-java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/161418)

<div class="topic-metadata">

**Author:** [@vijaymohan](https://discuss.elastic.co/u/vijaymohan)\
**Replies:** 3\
**Last updated:** [December 19, 2018, 6:23pm UTC](https://discuss.elastic.co/t/spring-data-elastic-search-integration-failing-with-caused-by-java-lang-nosuchmethoderror-org-elasticsearch-common-settings-settings-builder-put-ljava-lang-object-lorg-elasticsearch-common-settings-settings-builder/161418 "2018-12-19T18:23:13Z")

</div>

I am upgrading elastic 2.x to 6.x. I have to update the spring data dependency as well to do the elastic upgrade. (Using elastic cloud managed service with x-pack-transport) Here is my dependencies: spring-data-elastic…

---

## [Kibana ELB \> Not Loading Kibana EC2 on port 5601](https://discuss.elastic.co/t/kibana-elb-not-loading-kibana-ec2-on-port-5601/118108)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 3\
**Last updated:** [February 2, 2018, 3:29pm UTC](https://discuss.elastic.co/t/kibana-elb-not-loading-kibana-ec2-on-port-5601/118108 "2018-02-02T15:29:09Z")

</div>

Am trying to connect my Kibana ELB to Kibana EC2 Instances. My Kibana EC2 are running behind SG taht allows INbOUND access to 5601 from the ELB Security Groups. My Kibana ELB is running behind SG taht allows OUTBOUND …

---

## [Logstash/Grok Parsing CSV with columns including Semicolons and escaped doublequotes](https://discuss.elastic.co/t/logstash-grok-parsing-csv-with-columns-including-semicolons-and-escaped-doublequotes/77612)

<div class="topic-metadata">

**Author:** [@ChrisGeorg](https://discuss.elastic.co/u/ChrisGeorg)\
**Replies:** 3\
**Last updated:** [March 7, 2017, 12:08pm UTC](https://discuss.elastic.co/t/logstash-grok-parsing-csv-with-columns-including-semicolons-and-escaped-doublequotes/77612 "2017-03-07T12:08:35Z")

</div>

Hi all, I am trying to write a grok parser for a log in CSV format. The different columns are separated by semicolons and each column is included in double quotes.here is an example: "2017-03-07T08:07:39.585Z";"WARN";"…

---

## [How to read the file from linux machine in logstash](https://discuss.elastic.co/t/how-to-read-the-file-from-linux-machine-in-logstash/57691)

<div class="topic-metadata">

**Author:** [@AnantPatil](https://discuss.elastic.co/u/AnantPatil)\
**Replies:** 3\
**Last updated:** [August 10, 2016, 12:16pm UTC](https://discuss.elastic.co/t/how-to-read-the-file-from-linux-machine-in-logstash/57691 "2016-08-10T12:16:48Z")

</div>

For reading the file from window machine I am using the following input filter and able to read the file from remote machine and writing to elasticsearch similarly I want to read the file from linux machine. input { fi…

---

## [Unable to start filebeat for apache logs](https://discuss.elastic.co/t/unable-to-start-filebeat-for-apache-logs/268094)

<div class="topic-metadata">

**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\
**Replies:** 7\
**Last updated:** [March 24, 2021, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-for-apache-logs/268094 "2021-03-24T14:08:08Z")

</div>

i am not able to get solution for error saying "Exiting: Failed to start crawler: creating module reloader failed: 1 error: invalid config: yaml: line 13: could not fin d expected ':'" following is my apache.yml file #…

---

## [How to get Metric from Transaction Page - APM](https://discuss.elastic.co/t/how-to-get-metric-from-transaction-page-apm/326651)

<div class="topic-metadata">

**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\
**Replies:** 2\
**Last updated:** [March 1, 2023, 4:02am UTC](https://discuss.elastic.co/t/how-to-get-metric-from-transaction-page-apm/326651 "2023-03-01T04:02:19Z")

</div>

I want to create a dashboard from the metrics on the transaction page. How and what metrics are used? I use elasticsearch and kibana 8.5.3 and using java appilication

---

## [Replace index alias when a new index created](https://discuss.elastic.co/t/replace-index-alias-when-a-new-index-created/200990)

<div class="topic-metadata">

**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\
**Replies:** 4\
**Last updated:** [September 25, 2019, 9:44am UTC](https://discuss.elastic.co/t/replace-index-alias-when-a-new-index-created/200990 "2019-09-25T09:44:31Z")

</div>

hello All, we create indices based on index templates, where corresponding aliases are configured, e.g.: { "order": 0, "version": 1, "index\_patterns": \[ "docs-app-\*" \], "aliases": { "docs-app" : {} …

---

## [Unable to load Configuration file into Logstash](https://discuss.elastic.co/t/unable-to-load-configuration-file-into-logstash/149403)

<div class="topic-metadata">

**Author:** [@Divya\_Boggavarapu](https://discuss.elastic.co/u/Divya_Boggavarapu)\
**Replies:** 4\
**Last updated:** [September 21, 2018, 10:24am UTC](https://discuss.elastic.co/t/unable-to-load-configuration-file-into-logstash/149403 "2018-09-21T10:24:14Z")

</div>

I'm trying to load basic configuration file into logstash but logstash doesn't seem to load the files and it's showing error as Sending Logstash logs to D:/elk/logstash-6.4.1/logs which is now configured via log4j2.prop…

---

## [ElasticSearch Freezes on Start](https://discuss.elastic.co/t/elasticsearch-freezes-on-start/103388)

<div class="topic-metadata">

**Author:** [@kelevra](https://discuss.elastic.co/u/kelevra)\
**Replies:** 4\
**Last updated:** [October 23, 2017, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-freezes-on-start/103388 "2017-10-23T08:29:50Z")

</div>

Hi, I am trying to open elasticsearch with bin/elasticsearch it loads some modules and when it comes to x-pack it completely freezes the computer so I need to force-restart it. I followed the instructions here: https://…

---

## [Marvel.agent.exporter.http could not connect to any configurd elasticsearch instances](https://discuss.elastic.co/t/marvel-agent-exporter-http-could-not-connect-to-any-configurd-elasticsearch-instances/68414)

<div class="topic-metadata">

**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\
**Replies:** 4\
**Last updated:** [December 13, 2016, 7:51am UTC](https://discuss.elastic.co/t/marvel-agent-exporter-http-could-not-connect-to-any-configurd-elasticsearch-instances/68414 "2016-12-13T07:51:31Z")

</div>

I have elasticsearch prod cluster of two nodes(es-prod). I created another cluster for monitoring those elastic nodes(es-mon). Thus, I configured the marvel agent for monitoring cluster as explained here: monitoring-clus…

---

## [Upcoming changes to category layouts](https://discuss.elastic.co/t/upcoming-changes-to-category-layouts/235243)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 1\
**Last updated:** [June 4, 2020, 1:42am UTC](https://discuss.elastic.co/t/upcoming-changes-to-category-layouts/235243 "2020-06-04T01:42:03Z")

</div>

G'Day y'all, This week we will be making changes to the current layout of these forums. The largest single change will be the removal of the individual Beats categories, which will be converted into tags under a single…

---

## [Watcher Filter](https://discuss.elastic.co/t/watcher-filter/110695)

<div class="topic-metadata">

**Author:** [@Samau4ka](https://discuss.elastic.co/u/Samau4ka)\
**Replies:** 5\
**Last updated:** [December 11, 2017, 1:10pm UTC](https://discuss.elastic.co/t/watcher-filter/110695 "2017-12-11T13:10:41Z")

</div>

Hi everyone, is there somewhere A filter function for the Watcher Agent in X-pack. I wont him to count all faild logins so he can send me a email if its count over 10 trys in 15min.

---

## [ES aliases in kibana](https://discuss.elastic.co/t/es-aliases-in-kibana/22182)

<div class="topic-metadata">

**Author:** [@krisss](https://discuss.elastic.co/u/krisss)\
**Replies:** 5\
**Last updated:** [February 16, 2015, 10:44am UTC](https://discuss.elastic.co/t/es-aliases-in-kibana/22182 "2015-02-16T10:44:29Z")

</div>

Hello, Do you know whether it is possible for Kibana to query ES index aliases? The only solution I found is by rewrite rule in ngnix. I want to create predefined search terms for users. -- You received this …

[Previous page](https://discuss.elastic.co/top.md?page=765&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=767&per_page=50&period=all)
