# Top

**URL:** https://discuss.elastic.co/top.md?page=776&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 777

---

## [Kibana 7.17.29, 8.17.8, 8.18.3, 9.0.3 Security Update (ESA-2025-09)](https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-09/379443)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [June 24, 2025, 5:00pm UTC](https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-09/379443 "2025-06-24T17:00:12Z")

</div>

Kibana Heap Corruption via Crafted HTML Page due to Chromium Type Confusion (ESA-2025-09) On March 10, 2025, Google announced CVE-2025-2135, which can lead to heap corruption via a crafted HTML page through a Type Confu…

---

## [How to send Custom Logs Agent to Logstash?](https://discuss.elastic.co/t/how-to-send-custom-logs-agent-to-logstash/293065)

<div class="topic-metadata">

**Author:** [@dannie-ml](https://discuss.elastic.co/u/dannie-ml)\
**Replies:** 8\
**Last updated:** [December 28, 2021, 7:59pm UTC](https://discuss.elastic.co/t/how-to-send-custom-logs-agent-to-logstash/293065 "2021-12-28T19:59:32Z")

</div>

Hi, i integrate it an elastics agent 'custom logs' and in the logs section this is the stream Now i want to parse some information in logstash, ¿how i can send that data to logstash? Please provide me a detail expla…

---

## [Formatdate markdown content](https://discuss.elastic.co/t/formatdate-markdown-content/270585)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 5\
**Last updated:** [April 20, 2021, 4:06pm UTC](https://discuss.elastic.co/t/formatdate-markdown-content/270585 "2021-04-20T16:06:23Z")

</div>

Hi, I have a markdown content in Canvas like this: {{#each rows}} ### {{date}} ### {{/each}} where date is, for example: 2021-04-19T13:25:00+02:00 how can i format this date (d/m/y hh:mm) and set the local timezone? …

---

## [Could not get aggregate filter to... well, aggregate](https://discuss.elastic.co/t/could-not-get-aggregate-filter-to-well-aggregate/165461)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 5\
**Last updated:** [January 24, 2019, 1:27pm UTC](https://discuss.elastic.co/t/could-not-get-aggregate-filter-to-well-aggregate/165461 "2019-01-24T13:27:36Z")

</div>

I have a collection of XML file, each one with one event... Most of them are "parent" events, but some of them are "child" events related to some parent. I'd like to aggregate them, creating a "nfe" field for the parent …

---

## [Bug ES6 JAVA API: Elasticsearch returning all the indices while trying to get only those indices which are associated with specific alias](https://discuss.elastic.co/t/bug-es6-java-api-elasticsearch-returning-all-the-indices-while-trying-to-get-only-those-indices-which-are-associated-with-specific-alias/110914)

<div class="topic-metadata">

**Author:** [@antitech](https://discuss.elastic.co/u/antitech)\
**Replies:** 5\
**Last updated:** [December 12, 2017, 11:39am UTC](https://discuss.elastic.co/t/bug-es6-java-api-elasticsearch-returning-all-the-indices-while-trying-to-get-only-those-indices-which-are-associated-with-specific-alias/110914 "2017-12-12T11:39:19Z")

</div>

I have recently upgraded application from Elastic search 5.3.1 to 6.0. My requirement was to get all the indices which were associated with specific alias. I used below mentioned snippet to fetch all indices associated…

---

## [Query latency spikes and Open search contexts](https://discuss.elastic.co/t/query-latency-spikes-and-open-search-contexts/39172)

<div class="topic-metadata">

**Author:** [@mkelkar](https://discuss.elastic.co/u/mkelkar)\
**Replies:** 5\
**Last updated:** [January 15, 2016, 11:59pm UTC](https://discuss.elastic.co/t/query-latency-spikes-and-open-search-contexts/39172 "2016-01-15T23:59:05Z")

</div>

Hi All, Lately we are seeing latency spikes in production for our queries. We also see a spike in the number of open search contexts ( it shoots to around 2000 from 400 ). We are using ES 1.3.9 and it recovers …

---

## [Upper bounds on the number of indexes in an elastic search cluster](https://discuss.elastic.co/t/upper-bounds-on-the-number-of-indexes-in-an-elastic-search-cluster/19984)

<div class="topic-metadata">

**Author:** [@Todd\_Nine](https://discuss.elastic.co/u/Todd_Nine)\
**Replies:** 5\
**Last updated:** [September 27, 2014, 6:28am UTC](https://discuss.elastic.co/t/upper-bounds-on-the-number-of-indexes-in-an-elastic-search-cluster/19984 "2014-09-27T06:28:44Z")

</div>

Hey guys. We’re building a Multi tenant application, where users create applications within our single server. For our current ES scheme, we're building an index per application. Are there any stress tests or…

---

## [CONTROLS visualization does not show all values](https://discuss.elastic.co/t/controls-visualization-does-not-show-all-values/171444)

<div class="topic-metadata">

**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 9:33am UTC](https://discuss.elastic.co/t/controls-visualization-does-not-show-all-values/171444 "2019-03-08T09:33:34Z")

</div>

Hi All, I have created a CONTROL Visualization and it seems that it does not show all possible value. Upon some Googling I found that a similar question has been asked by someone here.(Not solved) Similiary there is an…

---

## [Flowbeats fails in go build](https://discuss.elastic.co/t/flowbeats-fails-in-go-build/48601)

<div class="topic-metadata">

**Author:** [@tbernhardson](https://discuss.elastic.co/u/tbernhardson)\
**Replies:** 4\
**Last updated:** [April 28, 2016, 10:11pm UTC](https://discuss.elastic.co/t/flowbeats-fails-in-go-build/48601 "2016-04-28T22:11:51Z")

</div>

working on getting flowbeats installed to collect sflow data. working through the install steps listed in github when I get to the step of "go build" it returns: beater/flowbeat.go:52: b.Events undefined (type \*beat.Beat…

---

## [JVM pause,Elasticsearch stop](https://discuss.elastic.co/t/jvm-pause-elasticsearch-stop/49957)

<div class="topic-metadata">

**Author:** [@sanfengzhang](https://discuss.elastic.co/u/sanfengzhang)\
**Replies:** 2\
**Last updated:** [May 13, 2016, 6:16am UTC](https://discuss.elastic.co/t/jvm-pause-elasticsearch-stop/49957 "2016-05-13T06:16:21Z")

</div>

hello: We use Elasticsearch 2.3.2 and run one data nodes in server with 32G RAM and 32 Core CPU. Elasticsearch java heap size is set to 24G and the index is configured to 5 shards with 0 replica. Bulk indexing around tw…

---

## [What is the location for a local image file to be used in a dashboard Markdown widget?](https://discuss.elastic.co/t/what-is-the-location-for-a-local-image-file-to-be-used-in-a-dashboard-markdown-widget/181043)

<div class="topic-metadata">

**Author:** [@jmcclure](https://discuss.elastic.co/u/jmcclure)\
**Replies:** 6\
**Last updated:** [May 14, 2019, 11:43pm UTC](https://discuss.elastic.co/t/what-is-the-location-for-a-local-image-file-to-be-used-in-a-dashboard-markdown-widget/181043 "2019-05-14T23:43:27Z")

</div>

ES stack 6.7.1 CentOS 7.6 I have an image file (PNG) that I want to display at the top of a dashboard. The image cannot be obtained by a URL, but, rather needs to be local in the Kibana deployment. I am using a Markd…

---

## [Http\_poller "error": "Read timed out"](https://discuss.elastic.co/t/http-poller-error-read-timed-out/150899)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 1\
**Last updated:** [October 3, 2018, 3:42pm UTC](https://discuss.elastic.co/t/http-poller-error-read-timed-out/150899 "2018-10-03T15:42:41Z")

</div>

Below works only when limiting return of snapshots to a small number. Curl on the full set of snapshots works fine. It appear request timeout is not helping either. What am I missing? input { http\_poller { urls =\> …

---

## [Ruby filter processes events in incorrect order](https://discuss.elastic.co/t/ruby-filter-processes-events-in-incorrect-order/122369)

<div class="topic-metadata">

**Author:** [@Heckler\_GlobalOperat](https://discuss.elastic.co/u/Heckler_GlobalOperat)\
**Replies:** 7\
**Last updated:** [March 5, 2018, 3:03pm UTC](https://discuss.elastic.co/t/ruby-filter-processes-events-in-incorrect-order/122369 "2018-03-05T15:03:08Z")

</div>

Here is my test configuration I create a simple list of events like below, the events are numbered according to their order of appearance 2016-12-06 07:00:00,251 event1 2016-12-06 07:00:10,651 event2 2016-12-06 07:0…

---

## [Unable to install ingest-geoip](https://discuss.elastic.co/t/unable-to-install-ingest-geoip/114860)

<div class="topic-metadata">

**Author:** [@annk](https://discuss.elastic.co/u/annk)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 4:08pm UTC](https://discuss.elastic.co/t/unable-to-install-ingest-geoip/114860 "2018-01-10T16:08:27Z")

</div>

I am getting this error in filebeat logs after I enabled system module. 2018-01-10T11:18:56Z ERR Failed to connect: Connection marked as failed because the onConnect callback failed: Error loading pipeline for fileset …

---

## [Export & import Scripted fields](https://discuss.elastic.co/t/export-import-scripted-fields/87753)

<div class="topic-metadata">

**Author:** [@magerRV](https://discuss.elastic.co/u/magerRV)\
**Replies:** 1\
**Last updated:** [May 31, 2017, 6:25pm UTC](https://discuss.elastic.co/t/export-import-scripted-fields/87753 "2017-05-31T18:25:48Z")

</div>

I know Scripted Fields are stored as a String in the Index Pattern Objects. For sure I can just copy and paste it when I create a new one but it takes to much time or effort to do it that way. Does anyone know a featur…

---

## [ERROR instance/beat.go:971 Exiting: resource 'filebeat-7.12.0' exists, but it is not an alias](https://discuss.elastic.co/t/error-instance-beat-go-971-exiting-resource-filebeat-7-12-0-exists-but-it-is-not-an-alias/270139)

<div class="topic-metadata">

**Author:** [@thrak](https://discuss.elastic.co/u/thrak)\
**Replies:** 4\
**Last updated:** [April 15, 2021, 2:17pm UTC](https://discuss.elastic.co/t/error-instance-beat-go-971-exiting-resource-filebeat-7-12-0-exists-but-it-is-not-an-alias/270139 "2021-04-15T14:17:05Z")

</div>

Hello, I am in the process of installing filebeats 7.12 on some elastic cluster nodes in my dev environment and when I run: sudo filebeat setup -e On one of my nodes, I receive this error. ERROR instance/beat.go:971…

---

## [Anonymous user to access /\_cluster/health?](https://discuss.elastic.co/t/anonymous-user-to-access-cluster-health/150269)

<div class="topic-metadata">

**Author:** [@malte-behrendt](https://discuss.elastic.co/u/malte-behrendt)\
**Replies:** 2\
**Last updated:** [September 28, 2018, 12:42pm UTC](https://discuss.elastic.co/t/anonymous-user-to-access-cluster-health/150269 "2018-09-28T12:42:59Z")

</div>

Hi everyone, I want to enable anonymous users to access /\_cluster/health. This would allow for automatic health checks without having to distribute a sensitive username/password. But giving anonymous users the privileg…

---

## [Can I specify the filename in logstash-output-s3?](https://discuss.elastic.co/t/can-i-specify-the-filename-in-logstash-output-s3/43091)

<div class="topic-metadata">

**Author:** [@hfuops](https://discuss.elastic.co/u/hfuops)\
**Replies:** 1\
**Last updated:** [March 1, 2016, 9:30pm UTC](https://discuss.elastic.co/t/can-i-specify-the-filename-in-logstash-output-s3/43091 "2016-03-01T21:30:27Z")

</div>

Greetings, because the original name is pretty strange which may be like ls.s3.26facecb-62c1-4d29-8608-0fb8fd327c15.2016-02-26T07.15.part0.txt I want to the files displayed on S3 with a regular name, i.e ${YY}-{MM…

---

## [Kibana (active directory realm) (version 6.2.1)](https://discuss.elastic.co/t/kibana-active-directory-realm-version-6-2-1/120866)

<div class="topic-metadata">

**Author:** [@ezmani](https://discuss.elastic.co/u/ezmani)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 12:44pm UTC](https://discuss.elastic.co/t/kibana-active-directory-realm-version-6-2-1/120866 "2018-02-23T12:44:11Z")

</div>

Team, We are using elastic search version 6.2.1. I've setup elastic/kibana to use the active directory realm. We've ran into strange issue. It doesn't matter what user I use to log in. It keeps logging in as built user …

---

## [Cannot update parameter analyzer from autocomplete to default](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257)

<div class="topic-metadata">

**Author:** [@Luiz\_Firmino](https://discuss.elastic.co/u/Luiz_Firmino)\
**Replies:** 4\
**Last updated:** [July 26, 2021, 11:04pm UTC](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257 "2021-07-26T23:04:21Z")

</div>

Hello all, I have no prior knowledge on ES and I'm trying to make an old code written for elasticsearch 6.5 to work on the 7.3 version. So far I got the code updated and running however I can't understand why during re-…

---

## [Metricbeats](https://discuss.elastic.co/t/metricbeats/116228)

<div class="topic-metadata">

**Author:** [@Ninoslav](https://discuss.elastic.co/u/Ninoslav)\
**Replies:** 4\
**Last updated:** [January 22, 2018, 3:45pm UTC](https://discuss.elastic.co/t/metricbeats/116228 "2018-01-22T15:45:36Z")

</div>

Hi, I have installed metricbeats on server, and configured index, so i have output in kibana... But what ever i do to set up dashboard in kibana fails. If I try to do: setup.dashboards.enabled: true in metricbeat.yml…

---

## [Can the order of filters impact performance?](https://discuss.elastic.co/t/can-the-order-of-filters-impact-performance/8365)

<div class="topic-metadata">

**Author:** [@egaumer](https://discuss.elastic.co/u/egaumer)\
**Replies:** 4\
**Last updated:** [February 13, 2013, 3:17pm UTC](https://discuss.elastic.co/t/can-the-order-of-filters-impact-performance/8365 "2013-02-13T15:17:49Z")

</div>

I've got simple term query with two filters. One filter is a date range filter and the other is a terms filter for handling ACLs. The ACL filter, on average, has about 1000 terms so it's heavy. I suspect that running…

---

## [Encrypt Snapshots before sending to S3](https://discuss.elastic.co/t/encrypt-snapshots-before-sending-to-s3/218351)

<div class="topic-metadata">

**Author:** [@danieln](https://discuss.elastic.co/u/danieln)\
**Replies:** 3\
**Last updated:** [February 7, 2020, 1:59pm UTC](https://discuss.elastic.co/t/encrypt-snapshots-before-sending-to-s3/218351 "2020-02-07T13:59:18Z")

</div>

I wonder if there is any possibility to encrypt snapshots before uploading them to s3 via the repository plugin. According to the documentation only server\_side\_encryption seems to be possible, or am I missing something? …

---

## [High CPU usage of the elastic](https://discuss.elastic.co/t/high-cpu-usage-of-the-elastic/186991)

<div class="topic-metadata">

**Author:** [@Behzad\_Rezaie](https://discuss.elastic.co/u/Behzad_Rezaie)\
**Replies:** 8\
**Last updated:** [June 25, 2019, 8:05am UTC](https://discuss.elastic.co/t/high-cpu-usage-of-the-elastic/186991 "2019-06-25T08:05:47Z")

</div>

Hi pals, I have installed a single node of the elastic on a server with following configuration: OS: Windows Server 2016 Processors: 2 processors of the Intel(R) Xeon CPU E5-2699 v4 @ 2.20GHZ RAM: 32 GB (16 GB dedica…

---

## [Problems with aggregations: Data too large](https://discuss.elastic.co/t/problems-with-aggregations-data-too-large/337591)

<div class="topic-metadata">

**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\
**Replies:** 6\
**Last updated:** [July 6, 2023, 7:13pm UTC](https://discuss.elastic.co/t/problems-with-aggregations-data-too-large/337591 "2023-07-06T19:13:42Z")

</div>

Hi, I have problems when trying to get aggregations. I have a cluster with one node, and I'm trying to interact with an index that contains 534,737,088 documents (around 32 GB). Some aggregations work, and Elasticsearch…

---

## [Date histogram 6 months interval](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526)

<div class="topic-metadata">

**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\
**Replies:** 6\
**Last updated:** [July 14, 2021, 2:34pm UTC](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526 "2021-07-14T14:34:02Z")

</div>

Hello, I just wonder whether I can draw the vertical bar with 6 months interval. I see that it supports other units but I cannot find an example of having half a year interval. Thank you!

---

## [Logstash 1.5.4 stops updating the log](https://discuss.elastic.co/t/logstash-1-5-4-stops-updating-the-log/28320)

<div class="topic-metadata">

**Author:** [@santublr](https://discuss.elastic.co/u/santublr)\
**Replies:** 6\
**Last updated:** [September 1, 2015, 1:37pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-stops-updating-the-log/28320 "2015-09-01T13:37:38Z")

</div>

Hello, I'm new to this tool and after downloading and running the log with a simple config file, the logstash stops updating elasticsearch with the below message (Flushing...) when run with --debug. Also, is there an…

---

## [Suricata with ElasticStack](https://discuss.elastic.co/t/suricata-with-elasticstack/141948)

<div class="topic-metadata">

**Author:** [@DK1206](https://discuss.elastic.co/u/DK1206)\
**Replies:** 1\
**Last updated:** [August 4, 2018, 10:46am UTC](https://discuss.elastic.co/t/suricata-with-elasticstack/141948 "2018-08-04T10:46:27Z")

</div>

Hey guys, OVERVIEW I managed to set up ElasticStack on my Ubuntu VM (my host is Windows). I installed on my host Sysmon and succesfully connected it with winlogbeat. I can now see in Kibana UI Winlogbeat logs - this is…

---

## [Index Last Modified date and time](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756)

<div class="topic-metadata">

**Author:** [@kavirajansakthivel](https://discuss.elastic.co/u/kavirajansakthivel)\
**Replies:** 2\
**Last updated:** [June 21, 2022, 1:46pm UTC](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756 "2022-06-21T13:46:37Z")

</div>

Hi Team, Is there any way to find out the last modified date and time of the particular index ? we are using 7.17 version. Thanks, Kavi

---

## [ElasticSearch suddenly stops](https://discuss.elastic.co/t/elasticsearch-suddenly-stops/106188)

<div class="topic-metadata">

**Author:** [@ImMike](https://discuss.elastic.co/u/ImMike)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-stops/106188 "2017-11-28T15:05:44Z")

</div>

it works 3 or 4 days and then suddenly stop working :frowning: here is the log \[2017-10-31T02:21:34,345\]\[INFO \]\[o.e.c.r.a.DiskThresholdMonitor\] \[loMT4go\] low disk watermark \[85%\] exceeded on \[loMT4goJQc6ws1s0AgTVcg\]\[lo…

---

## [Cluster 3 noeud et load balancer](https://discuss.elastic.co/t/cluster-3-noeud-et-load-balancer/263114)

<div class="topic-metadata">

**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 9:14pm UTC](https://discuss.elastic.co/t/cluster-3-noeud-et-load-balancer/263114 "2021-02-03T21:14:00Z")

</div>

Bonjour, Petite question, j'ai monté un cluster elasticsearch 7.9 licence basic avec 3 noeuds. Mais pour éviter de taper toujours sur le même noeud, j'ai mis en place un bon vieux haproxy pour gérer le load balancing…

---

## [Stack trace is not parsed](https://discuss.elastic.co/t/stack-trace-is-not-parsed/292179)

<div class="topic-metadata">

**Author:** [@Andrew\_Vyhidnyi](https://discuss.elastic.co/u/Andrew_Vyhidnyi)\
**Replies:** 3\
**Last updated:** [December 17, 2021, 9:23am UTC](https://discuss.elastic.co/t/stack-trace-is-not-parsed/292179 "2021-12-17T09:23:02Z")

</div>

Kibana version:7.15.2 Elasticsearch version:7.15.2 APM Server version: 7.15.2 APM Agent language and version: opentelemetry/java 1.9.1 and OLTP exporter Description of the problem including expected versus actual beh…

---

## [System Indices](https://discuss.elastic.co/t/system-indices/186894)

<div class="topic-metadata">

**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\
**Replies:** 3\
**Last updated:** [July 4, 2019, 2:04pm UTC](https://discuss.elastic.co/t/system-indices/186894 "2019-07-04T14:04:14Z")

</div>

Hello, Is there a way to search through all of the fields in system indices? For example .monitoring-es-6-YYYY.MM.DD and fields: cluster\_name cluster\_state.cluster\_uuid etc.

---

## [I/o timeout filebeat when send data to logstash](https://discuss.elastic.co/t/i-o-timeout-filebeat-when-send-data-to-logstash/261412)

<div class="topic-metadata">

**Author:** [@Eti\_Huri](https://discuss.elastic.co/u/Eti_Huri)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 7:49am UTC](https://discuss.elastic.co/t/i-o-timeout-filebeat-when-send-data-to-logstash/261412 "2021-01-20T07:49:27Z")

</div>

Hi all:) I have my logstash vm and my application vm, they don't run in the same subnet I am trying send logs from my vm application to logstash vm this is my filebeat.yml filebeat.inputs: - type: log p…

---

## [Index xxxxx belongs to a version of Kibana](https://discuss.elastic.co/t/index-xxxxx-belongs-to-a-version-of-kibana/175915)

<div class="topic-metadata">

**Author:** [@leobaiano](https://discuss.elastic.co/u/leobaiano)\
**Replies:** 4\
**Last updated:** [April 9, 2019, 6:09pm UTC](https://discuss.elastic.co/t/index-xxxxx-belongs-to-a-version-of-kibana/175915 "2019-04-09T18:09:43Z")

</div>

I'm using docker-kibana and am getting the message: FATAL Error: Index mixpanel belongs to a version of Kibana that can not be automatically migrated. Reset it or use the X-Pack upgrade assistant. Followed by exit code…

---

## [Failed attempts to create a deployment](https://discuss.elastic.co/t/failed-attempts-to-create-a-deployment/155039)

<div class="topic-metadata">

**Author:** [@wpitt13](https://discuss.elastic.co/u/wpitt13)\
**Replies:** 4\
**Last updated:** [November 1, 2018, 4:55pm UTC](https://discuss.elastic.co/t/failed-attempts-to-create-a-deployment/155039 "2018-11-01T16:55:53Z")

</div>

ECE 2.0.0 Failed attempts to create a deployment result in a failed cluster showing in the list of deployments that cannot be removed. The deployment shows the following status: Deployment health issues: Some instanc…

---

## [Could not Perform aggregations :illegal\_argument\_exception](https://discuss.elastic.co/t/could-not-perform-aggregations-illegal-argument-exception/133792)

<div class="topic-metadata">

**Author:** [@Eswar\_123](https://discuss.elastic.co/u/Eswar_123)\
**Replies:** 4\
**Last updated:** [May 30, 2018, 6:21am UTC](https://discuss.elastic.co/t/could-not-perform-aggregations-illegal-argument-exception/133792 "2018-05-30T06:21:29Z")

</div>

I created an index megacorp. PUT 3 documents in it through kibana console. eg.. PUT /megacorp/employee/2 { "first\_name" : "Jane", "last\_name" : "Smith", "age" : 32, "about" : "I like to collect ro…

---

## [Sparse slow NEST Searches](https://discuss.elastic.co/t/sparse-slow-nest-searches/77304)

<div class="topic-metadata">

**Author:** [@Xavi\_Ametller](https://discuss.elastic.co/u/Xavi_Ametller)\
**Replies:** 4\
**Last updated:** [March 19, 2017, 11:45am UTC](https://discuss.elastic.co/t/sparse-slow-nest-searches/77304 "2017-03-19T11:45:52Z")

</div>

Hi everyone, We are using ElasticSearch Nest client to build an API with Dot Net Core to run queries towards an ElasticSearch cluster. Most of the times, we run the same type of query with a filter that's provided as p…

---

## [Missing documents](https://discuss.elastic.co/t/missing-documents/9655)

<div class="topic-metadata">

**Author:** [@TheOutlander\_2](https://discuss.elastic.co/u/TheOutlander_2)\
**Replies:** 4\
**Last updated:** [November 20, 2012, 11:09pm UTC](https://discuss.elastic.co/t/missing-documents/9655 "2012-11-20T23:09:23Z")

</div>

I'm still in the process of reproducing the problem, so I don't have too many details. However, I wanted to ask if anyone has faced an issue with missing documents? One of our .NET web services makes 2000 inserts …

---

## [Grok command to parse Spring boot logs](https://discuss.elastic.co/t/grok-command-to-parse-spring-boot-logs/182636)

<div class="topic-metadata">

**Author:** [@Dheeraj\_K\_Chaitanya](https://discuss.elastic.co/u/Dheeraj_K_Chaitanya)\
**Replies:** 1\
**Last updated:** [May 24, 2019, 1:15pm UTC](https://discuss.elastic.co/t/grok-command-to-parse-spring-boot-logs/182636 "2019-05-24T13:15:00Z")

</div>

Hi, My log looks like this " 2019-05-24 12:41:19.174 DEBUG 12528 --- \[http-nio-8888-exec-2\] c.c.b.c.BankApplicationController : AccountMaster \[accountId=1355, accountType=Savings, accountBalance=500.0, accountOp…

---

## [Help with parsing Kaspersky logs](https://discuss.elastic.co/t/help-with-parsing-kaspersky-logs/115329)

<div class="topic-metadata">

**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 4:22pm UTC](https://discuss.elastic.co/t/help-with-parsing-kaspersky-logs/115329 "2018-01-12T16:22:34Z")

</div>

Not sure if this should be asked here or maybe Kibana so please let me know if this isn't the right place..... I've written a grok pattern using a Grok debugger tool and the tool gives me the proper named fields but whe…

---

## [There are no use of timeout for search?](https://discuss.elastic.co/t/there-are-no-use-of-timeout-for-search/75446)

<div class="topic-metadata">

**Author:** [@famoss](https://discuss.elastic.co/u/famoss)\
**Replies:** 1\
**Last updated:** [February 17, 2017, 12:51pm UTC](https://discuss.elastic.co/t/there-are-no-use-of-timeout-for-search/75446 "2017-02-17T12:51:36Z")

</div>

I set the search timeout by 1s,but there is no use. url:http://xxx:9200/flume-\*/detail/\_search?timeout=1s resp:"took": 40356, "timed\_out": true, "\_shards": { "total": 495, "successful": 495, …

---

## [Elastic agent not sending data stream](https://discuss.elastic.co/t/elastic-agent-not-sending-data-stream/286893)

<div class="topic-metadata">

**Author:** [@AdE\_GoD](https://discuss.elastic.co/u/AdE_GoD)\
**Replies:** 2\
**Last updated:** [October 23, 2021, 2:58pm UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-data-stream/286893 "2021-10-23T14:58:31Z")

</div>

Hi everyone, I've been wanting to try elastic-agent for quite some time now so I booted up a machine and tried to configure everything, but I've encountered an error that for the love of me I simply cannot fix. I have …

---

## [Beatsで収集したログをそのままlogstashに送信できない](https://discuss.elastic.co/t/beats-logstash/297840)

<div class="topic-metadata">

**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\
**Replies:** 6\
**Last updated:** [February 28, 2022, 4:48am UTC](https://discuss.elastic.co/t/beats-logstash/297840 "2022-02-28T04:48:51Z")

</div>

filebeat,winlogbeatで収集したログを、logstashがインストールされているログ管理サーバに送信して、ログの管理を行いたいです。 filebeat,winlogbeatで収集したログを、logstashに受信できたと思ったのですが、生ログではなく、ログの情報（該当ログファイルのパス、ログファイルの作成日時等）が送られてきます。 filebeat,winlogbeatで収集したログを、生ログのままlogstashに…

---

## [Logstash conditional output](https://discuss.elastic.co/t/logstash-conditional-output/264826)

<div class="topic-metadata">

**Author:** [@petegriggs](https://discuss.elastic.co/u/petegriggs)\
**Replies:** 6\
**Last updated:** [February 22, 2021, 12:54am UTC](https://discuss.elastic.co/t/logstash-conditional-output/264826 "2021-02-22T00:54:11Z")

</div>

Hello, Looking to use logstash to host multiple syslog listeners to start to aggregate logs from different vendors and then forward on for now to another syslog server. The question is whether we can set the syslog out…

---

## [Failed to load plugin class \[org.elasticsearch.xpack.XPackPlugin\] ELASTICSEARCH](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-elasticsearch/110381)

<div class="topic-metadata">

**Author:** [@yakiza](https://discuss.elastic.co/u/yakiza)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:00pm UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-xpackplugin-elasticsearch/110381 "2017-12-05T16:00:42Z")

</div>

HEllo i have just installed x-pack on elasticsearch ,kibana, logstash and once i start elasticsearch i get this, any clues? thanks in advance Blockquote\[2017-12-05T15:00:29,194\]\[INFO \]\[o.e.n.Node \] init…

---

## [Dissect filter special character "\\" "\<"](https://discuss.elastic.co/t/dissect-filter-special-character/163571)

<div class="topic-metadata">

**Author:** [@Necus](https://discuss.elastic.co/u/Necus)\
**Replies:** 3\
**Last updated:** [January 9, 2019, 7:35pm UTC](https://discuss.elastic.co/t/dissect-filter-special-character/163571 "2019-01-09T19:35:32Z")

</div>

Hi, I'm trying to use the best of dissect, unfortunately i have encounter small problem with special characters like "" or "\<" For example: \<14\>Jan 9 15:36:03 and domain\_name\\username When i'm parsing this log wit…

---

## [Custom X-axis visual range](https://discuss.elastic.co/t/custom-x-axis-visual-range/63598)

<div class="topic-metadata">

**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\
**Replies:** 3\
**Last updated:** [October 21, 2016, 5:44pm UTC](https://discuss.elastic.co/t/custom-x-axis-visual-range/63598 "2016-10-21T17:44:09Z")

</div>

Hi, i have this graph here: as you can see, there are a lot of values (1001), so the X-axis gets pretty loaded visually. Is it possible to change the interval of values that appear in the x-axis without changing the …

---

## [Disable fleet setting](https://discuss.elastic.co/t/disable-fleet-setting/323526)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [January 31, 2023, 3:04pm UTC](https://discuss.elastic.co/t/disable-fleet-setting/323526 "2023-01-31T15:04:24Z")

</div>

I have following in my configuration xpack.fleet.agents.enabled: false but log on kibana shows this. why is it still does fleet setup. Am I missing something. \[2023-01-19T14:16:08.293+00:00\]\[INFO \]\[status\] Kibana is n…

---

## [Inclusion of ingest timestamp in elasticsearch index](https://discuss.elastic.co/t/inclusion-of-ingest-timestamp-in-elasticsearch-index/122740)

<div class="topic-metadata">

**Author:** [@Pratheek](https://discuss.elastic.co/u/Pratheek)\
**Replies:** 4\
**Last updated:** [March 7, 2018, 4:17pm UTC](https://discuss.elastic.co/t/inclusion-of-ingest-timestamp-in-elasticsearch-index/122740 "2018-03-07T16:17:05Z")

</div>

I have come across ,including ingest timestamp value of a record to an ES index,but not clear on that.Can anyone help me out on adding the ingest timestamp to the index. Regards, Pratheek

[Previous page](https://discuss.elastic.co/top.md?page=775&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=777&per_page=50&period=all)
