# Top **URL:** https://discuss.elastic.co/top.md?page=768&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 769 --- ## [User retention/churn calculation](https://discuss.elastic.co/t/user-retention-churn-calculation/20230)
**Author:** [@Raz\_Lachyani](https://discuss.elastic.co/u/Raz_Lachyani)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 10:08am UTC](https://discuss.elastic.co/t/user-retention-churn-calculation/20230 "2019-05-21T10:08:31Z")
Hi Guys, I need to get user retention from Elasticsearch. My algorithm is: retention\_period = 60 days 1. start\_registrations\_date = today - retention\_period - 30 days 2. end\_registrations\_date = today -reten… --- ## [Minimal filebeat config: syslog -\> file](https://discuss.elastic.co/t/minimal-filebeat-config-syslog-file/138968)
**Author:** [@Magnus\_Therning](https://discuss.elastic.co/u/Magnus_Therning)\ **Replies:** 3\ **Last updated:** [July 9, 2018, 9:07am UTC](https://discuss.elastic.co/t/minimal-filebeat-config-syslog-file/138968 "2018-07-09T09:07:10Z")
In an attempt to walk before running I thought I'd set up a filebeat instance as a syslog server and then use logger to send log messages to it. My Docker Compose configuration for setting up filebeat is filebeat: im… --- ## [Mapper\_parsing\_exception while creating Percentage](https://discuss.elastic.co/t/mapper-parsing-exception-while-creating-percentage/108819)
**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\ **Replies:** 3\ **Last updated:** [November 23, 2017, 8:20am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-while-creating-percentage/108819 "2017-11-23T08:20:32Z")
When i am trying to create a column with format as Percentage it throws an error like this: { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exception", "reason": "No handler for type \[number\] declared on fie… --- ## [Using Kibana in a web app](https://discuss.elastic.co/t/using-kibana-in-a-web-app/54429)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 2:59pm UTC](https://discuss.elastic.co/t/using-kibana-in-a-web-app/54429 "2016-07-01T14:59:16Z")
Is it possible to insert a kibana chart into a custom web app, on a whole different server? I imagine a page with some records on it. Maybe a small section to display some Kibana charts. Anyone try this? --- ## [Another value for system.auth.ssh.event in the system module?](https://discuss.elastic.co/t/another-value-for-system-auth-ssh-event-in-the-system-module/172118)
**Author:** [@swedishmike](https://discuss.elastic.co/u/swedishmike)\ **Replies:** 3\ **Last updated:** [March 14, 2019, 11:11am UTC](https://discuss.elastic.co/t/another-value-for-system-auth-ssh-event-in-the-system-module/172118 "2019-03-14T11:11:26Z")
After hardening my ssh server I am now seeing quite a lot of the following messages: Mar 13 10:16:41 XXXXXXX sshd\[8349\]: Unable to negotiate with X.X.X.X port 58623: no matching key exchange method found. Their offer: d… --- ## [Watcher script error](https://discuss.elastic.co/t/watcher-script-error/93956)
**Author:** [@mmbtenorio](https://discuss.elastic.co/u/mmbtenorio)\ **Replies:** 5\ **Last updated:** [August 2, 2017, 3:45pm UTC](https://discuss.elastic.co/t/watcher-script-error/93956 "2017-08-02T15:45:37Z")
I'm migrating a watch created in ES 2.3 into ES 5.5, it works in ES 2.3, however there's a script error when I tried to run it in ES 5.5 This is the watch: PUT \_xpack/watcher/watch/Duplicate\_Cost\_Invoice\_Watch { "t… --- ## [TAB in grok filter and delete mismatched records](https://discuss.elastic.co/t/tab-in-grok-filter-and-delete-mismatched-records/241767)
**Author:** [@merlock](https://discuss.elastic.co/u/merlock)\ **Replies:** 2\ **Last updated:** [July 19, 2020, 5:49am UTC](https://discuss.elastic.co/t/tab-in-grok-filter-and-delete-mismatched-records/241767 "2020-07-19T05:49:06Z")
hi all, (sorry for my english) hello everyone I have the following problem, the log I'm trying to read comes with tabs and I can't filter correctly. I have tried several options but I cannot read it correctly 100% this… --- ## [Load JSON data to Kibana dynamically](https://discuss.elastic.co/t/load-json-data-to-kibana-dynamically/237385)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 5:07am UTC](https://discuss.elastic.co/t/load-json-data-to-kibana-dynamically/237385 "2020-06-18T05:07:30Z")
Hi all, I have been using ELK for the past few weeks. It is working very well with my logs data and dynamically I am able to update it also. Now I have some JSON data which is being generated every hour as a JSON file. … --- ## [How to auto sign-in users for an embedded Kibana dashboard](https://discuss.elastic.co/t/how-to-auto-sign-in-users-for-an-embedded-kibana-dashboard/127730)
**Author:** [@kenneth](https://discuss.elastic.co/u/kenneth)\ **Replies:** 2\ **Last updated:** [April 15, 2018, 4:48am UTC](https://discuss.elastic.co/t/how-to-auto-sign-in-users-for-an-embedded-kibana-dashboard/127730 "2018-04-15T04:48:22Z")
Hi, I am trying to embed a kibana dashboard in my ASP.Net MVC app. So the most common question would be to auto sign-in the user to Kibana (from the embedded iframe). I know this topic was asked couple of times in the… --- ## [Annotations for code deployments](https://discuss.elastic.co/t/annotations-for-code-deployments/154065)
**Author:** [@devops\_mike](https://discuss.elastic.co/u/devops_mike)\ **Replies:** 6\ **Last updated:** [November 12, 2018, 6:33pm UTC](https://discuss.elastic.co/t/annotations-for-code-deployments/154065 "2018-11-12T18:33:04Z")
I am looking to add annotations to Kibana for when new versions of code are deployed. During a demo today, I saw annotations during a machine learning demo. I had read annotations are only supported for anomaly detection… --- ## [Parsing a Raw JSON file "Invalid Setting for json filter"](https://discuss.elastic.co/t/parsing-a-raw-json-file-invalid-setting-for-json-filter/280735)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 4\ **Last updated:** [August 8, 2021, 7:38pm UTC](https://discuss.elastic.co/t/parsing-a-raw-json-file-invalid-setting-for-json-filter/280735 "2021-08-08T19:38:58Z")
Hi, I am trying to parse a simple raw JSON file but I am getting an error about invalid setting for JSON filter. I am wondering if its the way my filter is setup and the fact that its nested json? \[ERROR\] 2021-08-08 1… --- ## [Monitoring files changes](https://discuss.elastic.co/t/monitoring-files-changes/170552)
**Author:** [@mcoa](https://discuss.elastic.co/u/mcoa)\ **Replies:** 4\ **Last updated:** [March 5, 2019, 12:29pm UTC](https://discuss.elastic.co/t/monitoring-files-changes/170552 "2019-03-05T12:29:25Z")
I use auditbeat for monitoring files and directories and works fine when access to file from "vim, nano, etc" . But if modify from script or cat (redirection) not capture the event. Example: vim /tmp/foo (edit and save… --- ## [Understanding snapshot and restore](https://discuss.elastic.co/t/understanding-snapshot-and-restore/154858)
**Author:** [@juiip](https://discuss.elastic.co/u/juiip)\ **Replies:** 4\ **Last updated:** [November 1, 2018, 12:49pm UTC](https://discuss.elastic.co/t/understanding-snapshot-and-restore/154858 "2018-11-01T12:49:16Z")
Hi, I'm figuring out why taking a snapshot of my cluster is necessary and how to do it: My understanding is that each node within the cluster needs access to the repository location - and to do this I will need to moun… --- ## [Visualize future date in timelion?](https://discuss.elastic.co/t/visualize-future-date-in-timelion/79830)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [March 28, 2017, 7:56am UTC](https://discuss.elastic.co/t/visualize-future-date-in-timelion/79830 "2017-03-28T07:56:19Z")
Hello I am using Kibana to show project KPI state. I know that I could achieve my goal in Linechart which is to draw a line chart of PV line for next 4 month. Since timelion has more flexibility with the chart , I w… --- ## [How can I delete everything except for top N documents?](https://discuss.elastic.co/t/how-can-i-delete-everything-except-for-top-n-documents/35615)
**Author:** [@Fritz](https://discuss.elastic.co/u/Fritz)\ **Replies:** 4\ **Last updated:** [November 28, 2015, 3:28am UTC](https://discuss.elastic.co/t/how-can-i-delete-everything-except-for-top-n-documents/35615 "2015-11-28T03:28:20Z")
Hi folks, I'm trying to delete all documents except for the top N sorted by some criteria and can't quite figure out how. I am able to retrieve those documents with a query using sort, from and size. We're using 1.6. … --- ## [Index security in kibana](https://discuss.elastic.co/t/index-security-in-kibana/318428)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [November 10, 2022, 5:02am UTC](https://discuss.elastic.co/t/index-security-in-kibana/318428 "2022-11-10T05:02:06Z")
if the user does not have access to the index, no message is displayed (insufficient privileges). but just doesn't display any data which confuses my users, and they call me saying the data is missing. This is a situa… --- ## [Loading templates/mapping when initializing a elasticsearch server?](https://discuss.elastic.co/t/loading-templates-mapping-when-initializing-a-elasticsearch-server/61172)
**Author:** [@blommis](https://discuss.elastic.co/u/blommis)\ **Replies:** 0\ **Last updated:** [September 21, 2016, 6:53pm UTC](https://discuss.elastic.co/t/loading-templates-mapping-when-initializing-a-elasticsearch-server/61172 "2016-09-21T18:53:44Z")
Hi, I have a project consisting of 3 maven modules, one for specification, one for data node and one for master. The data module consist of a config directory with elasticsearch.yml. This is as well included for the ma… --- ## [Kibana UI takes over 10 seconds on initial load](https://discuss.elastic.co/t/kibana-ui-takes-over-10-seconds-on-initial-load/241662)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 3\ **Last updated:** [July 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/kibana-ui-takes-over-10-seconds-on-initial-load/241662 "2020-07-20T14:32:56Z")
Hey team, long time reader, first time poster. We have a weird issue ever since upgrading to Kibana and elasticsearch 7.7.1. What we'll see is sometimes the UI(doesn't matter on module, could be Discover, Dashboard, Ma… --- ## [Data Limit For Data Table](https://discuss.elastic.co/t/data-limit-for-data-table/201792)
**Author:** [@Sinan\_Kaplan](https://discuss.elastic.co/u/Sinan_Kaplan)\ **Replies:** 3\ **Last updated:** [October 4, 2019, 2:17pm UTC](https://discuss.elastic.co/t/data-limit-for-data-table/201792 "2019-10-04T14:17:45Z")
Why there's a limitation for Data Table Visualization in number of rows it can show and Kibana complains that there is too many rows to show? When i want to show too much row the memory size can't efford this request. Is… --- ## [Logstash-multiple inputs one output problem](https://discuss.elastic.co/t/logstash-multiple-inputs-one-output-problem/138417)
**Author:** [@dnastala](https://discuss.elastic.co/u/dnastala)\ **Replies:** 3\ **Last updated:** [July 4, 2018, 9:59am UTC](https://discuss.elastic.co/t/logstash-multiple-inputs-one-output-problem/138417 "2018-07-04T09:59:39Z")
Hi all, I have a configuration misery to solve. In my current setup I have one logstash server version 5.5.1 that takes two inputs(has to be only one logstash server). One is from lumberjack and the other one is from … --- ## [Upgrade from 5.6 to 6.0. Problem with mapping](https://discuss.elastic.co/t/upgrade-from-5-6-to-6-0-problem-with-mapping/111328)
**Author:** [@Paul\_Letski](https://discuss.elastic.co/u/Paul_Letski)\ **Replies:** 3\ **Last updated:** [December 13, 2017, 7:19am UTC](https://discuss.elastic.co/t/upgrade-from-5-6-to-6-0-problem-with-mapping/111328 "2017-12-13T07:19:31Z")
Hello! I'm using Elastic stack to collect logs from application nodes. My setup is: Filebeat -\> Logstash -\> Elasticsearh. I have upgraded my cluster from version 5.6 to version 6.0. Cluster consists of 5 nodes: 1 maste… --- ## [Cannot bootstrap Transport Client in version 5.4.0](https://discuss.elastic.co/t/cannot-bootstrap-transport-client-in-version-5-4-0/85177)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 3\ **Last updated:** [May 12, 2017, 2:25pm UTC](https://discuss.elastic.co/t/cannot-bootstrap-transport-client-in-version-5-4-0/85177 "2017-05-12T14:25:06Z")
Following is the error I get. I don't know what am I missing. Like the stack trace mentions, the code fails here: Some help would be super useful. registerAggregation(new AggregationSpec(PercentilesAggregationBuild… --- ## [Logstash fails with error on logstash-core-plugin-api.gemspec](https://discuss.elastic.co/t/logstash-fails-with-error-on-logstash-core-plugin-api-gemspec/226054)
**Author:** [@fionamacd1](https://discuss.elastic.co/u/fionamacd1)\ **Replies:** 1\ **Last updated:** [April 1, 2020, 8:58pm UTC](https://discuss.elastic.co/t/logstash-fails-with-error-on-logstash-core-plugin-api-gemspec/226054 "2020-04-01T20:58:37Z")
Hi, I updated our logstash to use OpenJDK11 and it was working fine for a few days. Then logs files grew too big and disk space got eaten. I removed the extra log files, turned down the log level and still getting this … --- ## [Java API, is a client thread safe?](https://discuss.elastic.co/t/java-api-is-a-client-thread-safe/12288)
**Author:** [@Andrew\_Gaydenko](https://discuss.elastic.co/u/Andrew_Gaydenko)\ **Replies:** 2\ **Last updated:** [June 5, 2013, 8:40pm UTC](https://discuss.elastic.co/t/java-api-is-a-client-thread-safe/12288 "2013-06-05T20:40:54Z")
Is ES client got vianodeBuilder.client(true).clusterName(clusterName).node().client()thread safe (execution listeners are in use)? Can I have the only client for given cluster and given JVM? Is the client guarded aga… --- ## [DSL Query for text in quotes](https://discuss.elastic.co/t/dsl-query-for-text-in-quotes/229556)
**Author:** [@VSP](https://discuss.elastic.co/u/VSP)\ **Replies:** 5\ **Last updated:** [April 25, 2020, 5:53pm UTC](https://discuss.elastic.co/t/dsl-query-for-text-in-quotes/229556 "2020-04-25T17:53:32Z")
Hello, I have a sample message as below in log with several other messages too: {"kind":"user\_test","sts":"2020-04-23 10:26:29","uc":,"rc":"ok","errc":0} I am trying to write a query to find all the messages with a co… --- ## [Timelion - Second part of query ignored](https://discuss.elastic.co/t/timelion-second-part-of-query-ignored/85008)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [May 11, 2017, 8:22am UTC](https://discuss.elastic.co/t/timelion-second-part-of-query-ignored/85008 "2017-05-11T08:22:46Z")
Hi, I'm having a issue with a query that I can't figure out. For some reason the second part of my query is always the same as the first part of my query. $q='vessel\_name:Vessel\_1 AND \*\*netflow.ipv4\_src\_addr\*\*:1.2.3… --- ## [Opentelemetry migration](https://discuss.elastic.co/t/opentelemetry-migration/237696)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 2:40am UTC](https://discuss.elastic.co/t/opentelemetry-migration/237696 "2020-06-23T02:40:22Z")
Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s… --- ## [Kibana server is not ready yet RHEL 8](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-rhel-8/301455)
**Author:** [@ashisharyan](https://discuss.elastic.co/u/ashisharyan)\ **Replies:** 7\ **Last updated:** [April 19, 2022, 5:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-rhel-8/301455 "2022-04-19T17:19:33Z")
Hi , I am installing ELK stack (elasticsearch-7.10.2)on RHEL8 Elasticsearch and Kibana both installed Successfully but when we open Kibana web console it is showing kibana server is not ready yet. Below is Yml files. … --- ## [My GSOC Project Idea](https://discuss.elastic.co/t/my-gsoc-project-idea/223751)
**Author:** [@amansingal](https://discuss.elastic.co/u/amansingal)\ **Replies:** 7\ **Last updated:** [March 23, 2020, 2:40pm UTC](https://discuss.elastic.co/t/my-gsoc-project-idea/223751 "2020-03-23T14:40:18Z")
Hey, I am thinking of adding a feedback/Report issue bot where the user can report the issue or can simply send the suggestion and if the user reports some existing issue then he should receive the StackOverflow or GitH… --- ## [Elasticsearch date range query for range on a date-time field](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759)
**Author:** [@Shaiwal\_Sharma](https://discuss.elastic.co/u/Shaiwal_Sharma)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-date-range-query-for-range-on-a-date-time-field/300759 "2022-03-29T08:29:28Z")
I have to get records (training) wherein I have a start\_date, and I have to get all records that have not yet ended. So I don't have an end\_date field, but just the start date, so end\_date is start\_date + 60 days. So wha… --- ## [検索条件を含むDataTableの作成](https://discuss.elastic.co/t/datatable/229402)
**Author:** [@hashimoto](https://discuss.elastic.co/u/hashimoto)\ **Replies:** 4\ **Last updated:** [April 27, 2020, 2:22am UTC](https://discuss.elastic.co/t/datatable/229402 "2020-04-27T02:22:04Z")
DatatableのVisualizationにおいて、特定条件のCountを並べることは可能でしょうか？ Split Rowsで特定フィールドのTermsで行を分け、列の値があるフィールドのそれぞれの値のCountとなる表をイメージしています。 Kibana 6.8.2です。 --- ## [Graph API in ES 5 aplpha](https://discuss.elastic.co/t/graph-api-in-es-5-aplpha/51878)
**Author:** [@anks](https://discuss.elastic.co/u/anks)\ **Replies:** 4\ **Last updated:** [June 6, 2016, 2:37am UTC](https://discuss.elastic.co/t/graph-api-in-es-5-aplpha/51878 "2016-06-06T02:37:22Z")
Dear, Kibana start prompting me for login credentials when I click on graph. Does is it mean it require some kind of license to work further ? Thanks in advance. --- ## [FIlebeat multiline pattern for Elasticsearch logs?](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-elasticsearch-logs/45398)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 4\ **Last updated:** [May 10, 2016, 9:04pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-elasticsearch-logs/45398 "2016-05-10T21:04:33Z")
I managed to puzzle out a multiline filter for Filebeat to parse PostgreSQL CSV replication logs, but I find the docs on multiline pretty lacking in examples. Right now I'm trying to figure out a pattern for merging erro… --- ## [How to visualize statistics on time series data in Kibana](https://discuss.elastic.co/t/how-to-visualize-statistics-on-time-series-data-in-kibana/16033)
**Author:** [@Dave\_Snigier](https://discuss.elastic.co/u/Dave_Snigier)\ **Replies:** 4\ **Last updated:** [November 13, 2014, 9:40am UTC](https://discuss.elastic.co/t/how-to-visualize-statistics-on-time-series-data-in-kibana/16033 "2014-11-13T09:40:39Z")
Howdy everyone, I have events with the following structure in ES: { "\_index": "logstash-2014.02.25", "\_type": "symantecav-logs", "\_id": "\_5Hig6lPTUi2p-palnuplA", "\_score": null, "\_source": { "mess… --- ## [Merge information from two different lines into single event](https://discuss.elastic.co/t/merge-information-from-two-different-lines-into-single-event/77791)
**Author:** [@Tarun\_Kalluri](https://discuss.elastic.co/u/Tarun_Kalluri)\ **Replies:** 2\ **Last updated:** [March 9, 2017, 7:07am UTC](https://discuss.elastic.co/t/merge-information-from-two-different-lines-into-single-event/77791 "2017-03-09T07:07:23Z")
I have a log file which has product id and item sale details on different lines. An example file can be useless info product id: 2455 useless info Customer Name: xyz1 Price : abc1 Profit: efg1 Customer Name: xyz2 Pric… --- ## [JBOSS EAP 6 Admin Audit Logging](https://discuss.elastic.co/t/jboss-eap-6-admin-audit-logging/106254)
**Author:** [@josh\_jacques](https://discuss.elastic.co/u/josh_jacques)\ **Replies:** 8\ **Last updated:** [November 14, 2017, 7:54pm UTC](https://discuss.elastic.co/t/jboss-eap-6-admin-audit-logging/106254 "2017-11-14T19:54:14Z")
I'm looking for a little help here, who am I kidding, I am looking for a lot of help here and if my inquiry has already been asked, I apologize in advance. Looking at the following two log entries, I'd like to take some… --- ## [Sending Extracted Fields to Kibana](https://discuss.elastic.co/t/sending-extracted-fields-to-kibana/25136)
**Author:** [@sushmithak](https://discuss.elastic.co/u/sushmithak)\ **Replies:** 8\ **Last updated:** [July 8, 2015, 12:51pm UTC](https://discuss.elastic.co/t/sending-extracted-fields-to-kibana/25136 "2015-07-08T12:51:21Z")
Hi, i have modified the logstash configuration file to extract some fields. The extracted fields are dispalying in logstash.stdout file but are not showing in kibana. my configuration file is like this: filter { … --- ## [Reponse from Kibana 7.6.0 UI is very slow in Firefox Web Browser](https://discuss.elastic.co/t/reponse-from-kibana-7-6-0-ui-is-very-slow-in-firefox-web-browser/227680)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 8:36am UTC](https://discuss.elastic.co/t/reponse-from-kibana-7-6-0-ui-is-very-slow-in-firefox-web-browser/227680 "2020-04-16T08:36:46Z")
Hello, I am working with 6.3.2 Elastic stack components. I created new Log Management based on Elastic Stack 7.6.0 and Kibana is very slow with comparison 6.3.2 version. Server settings On ES nodes isn't any load. Data… --- ## [Template Creation for type geo\_point in logstash](https://discuss.elastic.co/t/template-creation-for-type-geo-point-in-logstash/100967)
**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\ **Replies:** 5\ **Last updated:** [September 20, 2017, 12:38am UTC](https://discuss.elastic.co/t/template-creation-for-type-geo-point-in-logstash/100967 "2017-09-20T00:38:27Z")
Hi, I have a csv file which contains Latitude\_(A),Longitude\_(A),Latitude\_(B),Longitude\_(B) fields. I want to use this data to put on coordinate map in Kibana. I tried with following configuration: mutate { convert =\> … --- ## [Document size and compression algorithm for document](https://discuss.elastic.co/t/document-size-and-compression-algorithm-for-document/98925)
**Author:** [@Cong\_Wang](https://discuss.elastic.co/u/Cong_Wang)\ **Replies:** 5\ **Last updated:** [August 31, 2017, 5:56am UTC](https://discuss.elastic.co/t/document-size-and-compression-algorithm-for-document/98925 "2017-08-31T05:56:07Z")
Hello, I would like to find out the estimate size of each document in my index. I use “GET /\_nodes/stats” to list the “merges” section which has the following 2 numbers I am interested in. “total\_docs”: 3277526192, “t… --- ## [Where to get curator\_cli?](https://discuss.elastic.co/t/where-to-get-curator-cli/96687)
**Author:** [@marksarnold](https://discuss.elastic.co/u/marksarnold)\ **Replies:** 5\ **Last updated:** [August 11, 2017, 9:15pm UTC](https://discuss.elastic.co/t/where-to-get-curator-cli/96687 "2017-08-11T21:15:18Z")
Hello, I installed curator from the APT repo as per https://www.elastic.co/guide/en/elasticsearch/client/curator/current/apt-repository.html After the installation, I have the curator binary in /usr/bin, but there is n… --- ## [Kibana timeout during discover. Elasticsearch error: collector \[node\_stats\] timed out when collecting data](https://discuss.elastic.co/t/kibana-timeout-during-discover-elasticsearch-error-collector-node-stats-timed-out-when-collecting-data/198666)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 2\ **Last updated:** [September 10, 2019, 8:01pm UTC](https://discuss.elastic.co/t/kibana-timeout-during-discover-elasticsearch-error-collector-node-stats-timed-out-when-collecting-data/198666 "2019-09-10T20:01:09Z")
Hello, I have problems ( errors below) to discover indexes in kibana, some indexes loads after 2nd attempt like dev.k8s-2019.09.09 (900Mb) , some indexes are more problematic with discovering in kibana like dev.k8s.app… --- ## [Elasicsearch alerts on Icinga](https://discuss.elastic.co/t/elasicsearch-alerts-on-icinga/22760)
**Author:** [@Yarden\_Bar](https://discuss.elastic.co/u/Yarden_Bar)\ **Replies:** 2\ **Last updated:** [March 22, 2015, 2:39pm UTC](https://discuss.elastic.co/t/elasicsearch-alerts-on-icinga/22760 "2015-03-22T14:39:07Z")
Hello good people, We have an ELK setup for our nginx / postfix etc logs. it's great. Now we'd like to be able to alert based on various criteria. icinga is great, we just installed it to play with. is there … --- ## [Parsing message field from CEF logs](https://discuss.elastic.co/t/parsing-message-field-from-cef-logs/298392)
**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\ **Replies:** 4\ **Last updated:** [March 8, 2022, 8:54am UTC](https://discuss.elastic.co/t/parsing-message-field-from-cef-logs/298392 "2022-03-08T08:54:45Z")
Hello all! I am really new to this whole Elasticsearch field. I have come across problem. I have built my Elastic SIEM laboratory and I have logs from on of my other products - Secret Server. I\`m receiving the logs just… --- ## [Filebeat configuration for multi line option (regex required)](https://discuss.elastic.co/t/filebeat-configuration-for-multi-line-option-regex-required/189798)
**Author:** [@amr.abdelfattah](https://discuss.elastic.co/u/amr.abdelfattah)\ **Replies:** 7\ **Last updated:** [July 17, 2019, 11:32am UTC](https://discuss.elastic.co/t/filebeat-configuration-for-multi-line-option-regex-required/189798 "2019-07-17T11:32:02Z")
Kindly i need your urgent advise to configure filebeat to process below log: 2019-07-02 16:00:00.037 \[SUBSCRIBER\_PROFILE-1157917705-d73442b7-8d07-4aee-a850-09aa51ff37e2\] Inquiry Item \[com.etisalat.oms.inquiry.actions.Vo… --- ## [Отказоустойчивый кластер из 3 нод](https://discuss.elastic.co/t/topic/285349)
**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\ **Replies:** 6\ **Last updated:** [September 30, 2021, 6:39am UTC](https://discuss.elastic.co/t/topic/285349 "2021-09-30T06:39:44Z")
Добрый день. Сделал кластер из 3 нод (1 мастер, остальные дата ноды). С подключенным грейлогом (на 2 нодах, стоит грейлог), третья пустая. При падении одной ноды падает весь кластер. Подскажите, как это исправить? --- ## [Logstash to logstash with SSL and lumberjack plugin](https://discuss.elastic.co/t/logstash-to-logstash-with-ssl-and-lumberjack-plugin/184223)
**Author:** [@Shawcs](https://discuss.elastic.co/u/Shawcs)\ **Replies:** 0\ **Last updated:** [June 4, 2019, 3:42pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-with-ssl-and-lumberjack-plugin/184223 "2019-06-04T15:42:45Z")
Hi, I try to send data from logstash to another logstash. I followed this doc ofc https://www.elastic.co/guide/en/logstash/6.6/ls-to-ls.html but it didn't work. here is my configuration: On the recieving server: beats… --- ## [Dealing with indexing spikes](https://discuss.elastic.co/t/dealing-with-indexing-spikes/45548)
**Author:** [@jonatanzafar59](https://discuss.elastic.co/u/jonatanzafar59)\ **Replies:** 3\ **Last updated:** [March 31, 2016, 10:09am UTC](https://discuss.elastic.co/t/dealing-with-indexing-spikes/45548 "2016-03-31T10:09:54Z")
Hi, We have an application that 3 times a day indexes 100K-200K documents per node in 2 minutes, which causes huge spikes in GC time and pressure on the cluster. I tried 1MB bulks (will try to raise it), resizing th… --- ## [Diff query between two documents](https://discuss.elastic.co/t/diff-query-between-two-documents/156887)
**Author:** [@elastic\_guy](https://discuss.elastic.co/u/elastic_guy)\ **Replies:** 2\ **Last updated:** [November 18, 2018, 1:16pm UTC](https://discuss.elastic.co/t/diff-query-between-two-documents/156887 "2018-11-18T13:16:42Z")
Hi, say I have a type that is modeled in the following way: document { id: x, nested\_object: \[ {objects}, {objects}... \] } I am looking for a way to execute a diff query between two documents of this type, so t… --- ## [Logstash not giving output log events on console](https://discuss.elastic.co/t/logstash-not-giving-output-log-events-on-console/137421)
**Author:** [@Shweta\_Priyadarshani](https://discuss.elastic.co/u/Shweta_Priyadarshani)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 9:23am UTC](https://discuss.elastic.co/t/logstash-not-giving-output-log-events-on-console/137421 "2018-06-27T09:23:44Z")
Hi Everyone, I am new to logstash. I am trying to run a logstash config file but facing a problem as discussed on the link : Lateron in the post its mentioned that the issue got resolved as "It turns out my first log… [Previous page](https://discuss.elastic.co/top.md?page=767&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=769&per_page=50&period=all)