# Top

**URL:** https://discuss.elastic.co/top.md?page=783&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 784

---

## [Stripping text from a JSON file](https://discuss.elastic.co/t/stripping-text-from-a-json-file/79428)

<div class="topic-metadata">

**Author:** [@Toontje](https://discuss.elastic.co/u/Toontje)\
**Replies:** 5\
**Last updated:** [March 22, 2017, 8:08pm UTC](https://discuss.elastic.co/t/stripping-text-from-a-json-file/79428 "2017-03-22T20:08:26Z")

</div>

Hi all! I have a valid JSON structure that is prepended with a fixed string and then a number. Something like: RRR This is the leading string created at 01-01-2017 at 12:34:56: { valid JSON } So there is a f…

---

## [Connect to Elasticsearch with TransportClient](https://discuss.elastic.co/t/connect-to-elasticsearch-with-transportclient/218795)

<div class="topic-metadata">

**Author:** [@Sebastien\_Falquier](https://discuss.elastic.co/u/Sebastien_Falquier)\
**Replies:** 7\
**Last updated:** [June 4, 2020, 6:54pm UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-with-transportclient/218795 "2020-06-04T18:54:18Z")

</div>

Hello, Even if java TransportClient is deprecated, I need to connect on port 9300 to an elasticsearch cluster deployed with ECK operator. Devops team has worked to open port 9300 on quickstart-es-http service so that i…

---

## [HighLevelRestClient (Java) - Client does not shut down after async requests](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836)

<div class="topic-metadata">

**Author:** [@codingchili](https://discuss.elastic.co/u/codingchili)\
**Replies:** 4\
**Last updated:** [October 17, 2021, 10:46am UTC](https://discuss.elastic.co/t/highlevelrestclient-java-client-does-not-shut-down-after-async-requests/286836 "2021-10-17T10:46:30Z")

</div>

Hello, I'm unable to close the threadpool that is backing the HighLevelRestClient. Whenever my framework fails to deploy a part of the application or just for a graceful shutdown, I need the threadpool to shutdown to al…

---

## [Using fuzzy (Levenshtein) in filter](https://discuss.elastic.co/t/using-fuzzy-levenshtein-in-filter/55694)

<div class="topic-metadata">

**Author:** [@Mir\_S](https://discuss.elastic.co/u/Mir_S)\
**Replies:** 4\
**Last updated:** [July 17, 2016, 4:54pm UTC](https://discuss.elastic.co/t/using-fuzzy-levenshtein-in-filter/55694 "2016-07-17T16:54:52Z")

</div>

Hi everybody, I have a short question. Did somebody know how it would be possible to combine regex queries together with fuzzy (Levenshtein) filter? I firstly would like to perform a query using regexp (even that I k…

---

## [Elasticsearch reindex parsing error](https://discuss.elastic.co/t/elasticsearch-reindex-parsing-error/264251)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [February 14, 2021, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-reindex-parsing-error/264251 "2021-02-14T15:27:33Z")

</div>

Hi all, i'm trying to copy data of specified fields from one index to another using reindex. curl -XPOST --header 'Content-Type: application/json' http://localhost:9200/\_reindex -d '{ "source": { "index1": "sunny\_1" …

---

## [Only get 900 netflow events/sec from 4 vCPU LS node](https://discuss.elastic.co/t/only-get-900-netflow-events-sec-from-4-vcpu-ls-node/129928)

<div class="topic-metadata">

**Author:** [@DSM](https://discuss.elastic.co/u/DSM)\
**Replies:** 2\
**Last updated:** [April 28, 2018, 8:07pm UTC](https://discuss.elastic.co/t/only-get-900-netflow-events-sec-from-4-vcpu-ls-node/129928 "2018-04-28T20:07:22Z")

</div>

Hi, I'm using the netflow module \[ELK 6.2.4\] and struggling to squeeze a decent amount flows/events from my LS node. Hoping someone here can see what i may be missing. My (virtualised) setup: 1 x LS VM Node; 8GB RAM (4…

---

## [Heartbeat - how to send respone.status field to kibana to get URL status](https://discuss.elastic.co/t/heartbeat-how-to-send-respone-status-field-to-kibana-to-get-url-status/87140)

<div class="topic-metadata">

**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\
**Replies:** 2\
**Last updated:** [June 6, 2017, 12:50pm UTC](https://discuss.elastic.co/t/heartbeat-how-to-send-respone-status-field-to-kibana-to-get-url-status/87140 "2017-06-06T12:50:57Z")

</div>

I have heartbeat for checking URL availability and data is available in Kibana. I have to create the line graph (trend chart) to see the URL status in the graph. Since there is no direct way, i am trying to use the movi…

---

## [HOW-TO: set the time picker to "This month"](https://discuss.elastic.co/t/how-to-set-the-time-picker-to-this-month/46045)

<div class="topic-metadata">

**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\
**Replies:** 2\
**Last updated:** [April 1, 2016, 6:19pm UTC](https://discuss.elastic.co/t/how-to-set-the-time-picker-to-this-month/46045 "2016-04-01T18:19:21Z")

</div>

Hi guys, If you go to Kibana \> Settings \> Advanced \> time picker it sets the default time filter on the top-right of Kibana UI for example: { "from": "now-24h", "to": "now", "mode": "quick" } Could somebody please he…

---

## [Elastic6.7 \<search\> 'Unknown key for a START\_OBJECT in \[filter\].'](https://discuss.elastic.co/t/elastic6-7-search-unknown-key-for-a-start-object-in-filter/187964)

<div class="topic-metadata">

**Author:** [@9527q](https://discuss.elastic.co/u/9527q)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 5:51am UTC](https://discuss.elastic.co/t/elastic6-7-search-unknown-key-for-a-start-object-in-filter/187964 "2019-06-28T05:51:09Z")

</div>

I'm from Py3 and es6.7 in my macOS. When I try to search and it raise an error. body = { "query": {"match": {"doc.name": s\_key}}, "filter": {"term": {"doc.is\_vaild": True}} } print(es.search(index='crm\_brand', …

---

## [Line chart color change](https://discuss.elastic.co/t/line-chart-color-change/138930)

<div class="topic-metadata">

**Author:** [@Shrikanth\_M](https://discuss.elastic.co/u/Shrikanth_M)\
**Replies:** 1\
**Last updated:** [July 6, 2018, 1:56pm UTC](https://discuss.elastic.co/t/line-chart-color-change/138930 "2018-07-06T13:56:13Z")

</div>

Hi, Can anyone suggest, how can I change the color of Line as below condition, if Performance less then Threshold Point 1 and Threshold Point 2 then the Performance line color should change to Red color. if Performanc…

---

## [Elastic APM Agent asp.net startup hooks dll](https://discuss.elastic.co/t/elastic-apm-agent-asp-net-startup-hooks-dll/286655)

<div class="topic-metadata">

**Author:** [@ryphilli](https://discuss.elastic.co/u/ryphilli)\
**Replies:** 6\
**Last updated:** [October 18, 2021, 7:37pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-asp-net-startup-hooks-dll/286655 "2021-10-18T19:37:40Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Es\_rejected\_execution exception with index failure changing](https://discuss.elastic.co/t/es-rejected-execution-exception-with-index-failure-changing/165375)

<div class="topic-metadata">

**Author:** [@Santi](https://discuss.elastic.co/u/Santi)\
**Replies:** 6\
**Last updated:** [January 23, 2019, 2:26pm UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-with-index-failure-changing/165375 "2019-01-23T14:26:14Z")

</div>

Hello team, After restarting the Elasticsearch service several time, and increasing the thread\_pool.bulk.queue\_size, when I try to interact with Elasticsearch with the following query : q = { "query": { "match\_al…

---

## [No Uptime Monitors found](https://discuss.elastic.co/t/no-uptime-monitors-found/279046)

<div class="topic-metadata">

**Author:** [@Sam\_Sak1](https://discuss.elastic.co/u/Sam_Sak1)\
**Replies:** 8\
**Last updated:** [July 21, 2021, 3:44pm UTC](https://discuss.elastic.co/t/no-uptime-monitors-found/279046 "2021-07-21T15:44:14Z")

</div>

Hello! After installing a heartbeat-elastic, I'm not able to see endpoints under "Monitors" in Uptime page. The everything what it show is "No Uptime Monitors found", even though it shows data in "Pings over time" and i…

---

## [Keyword seem to have disappeared](https://discuss.elastic.co/t/keyword-seem-to-have-disappeared/283685)

<div class="topic-metadata">

**Author:** [@Bibas](https://discuss.elastic.co/u/Bibas)\
**Replies:** 5\
**Last updated:** [September 14, 2021, 9:44am UTC](https://discuss.elastic.co/t/keyword-seem-to-have-disappeared/283685 "2021-09-14T09:44:04Z")

</div>

Hello I have logs coming from my application, in those logs, there is a "coType" field that used to be a text that contains a keyword subfield. For a reason that I ignore (I don't think I changed the conf file in month…

---

## [Geo\_point is not getting mapped correctly](https://discuss.elastic.co/t/geo-point-is-not-getting-mapped-correctly/96156)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 5\
**Last updated:** [August 7, 2017, 11:39pm UTC](https://discuss.elastic.co/t/geo-point-is-not-getting-mapped-correctly/96156 "2017-08-07T23:39:56Z")

</div>

Hello, I am not sure if this is the proper place to ask this question. I am parsing my log file with the following grok pattern taken from the logstash documentation as it is: input { beats { # The port to list…

---

## [Vega lite boxplot](https://discuss.elastic.co/t/vega-lite-boxplot/150434)

<div class="topic-metadata">

**Author:** [@andrsuh13](https://discuss.elastic.co/u/andrsuh13)\
**Replies:** 4\
**Last updated:** [October 3, 2018, 9:30am UTC](https://discuss.elastic.co/t/vega-lite-boxplot/150434 "2018-10-03T09:30:26Z")

</div>

Hello! I want to create a box plot that shows how the duration of performing of certain REST endpoint had been distributed in some time period. I would like to have many boxes - one for example for 10 minutes. I push i…

---

## [Min shingle size](https://discuss.elastic.co/t/min-shingle-size/79348)

<div class="topic-metadata">

**Author:** [@vapostolov](https://discuss.elastic.co/u/vapostolov)\
**Replies:** 4\
**Last updated:** [March 23, 2017, 6:21am UTC](https://discuss.elastic.co/t/min-shingle-size/79348 "2017-03-23T06:21:05Z")

</div>

Hello, I am currently researching how to optimize my queries using n-grams. I decided to use Elasticsearch to generate the n-grams, so I set up a trial account. I managed to get n-grams from a sample string, but I got …

---

## [Authentication against Active Directory (referral error)](https://discuss.elastic.co/t/authentication-against-active-directory-referral-error/161566)

<div class="topic-metadata">

**Author:** [@drkbg](https://discuss.elastic.co/u/drkbg)\
**Replies:** 2\
**Last updated:** [December 20, 2018, 2:17pm UTC](https://discuss.elastic.co/t/authentication-against-active-directory-referral-error/161566 "2018-12-20T14:17:26Z")

</div>

Hello, I am using following config to connect to Active Directory but I am getting refferal error. Any ideas what is wrong with my configuration? I am getting following error: Authentication to realm active\_directory …

---

## [How to filter the particular timestamp in KQL field](https://discuss.elastic.co/t/how-to-filter-the-particular-timestamp-in-kql-field/340655)

<div class="topic-metadata">

**Author:** [@sanjeev1895](https://discuss.elastic.co/u/sanjeev1895)\
**Replies:** 1\
**Last updated:** [August 11, 2023, 4:58pm UTC](https://discuss.elastic.co/t/how-to-filter-the-particular-timestamp-in-kql-field/340655 "2023-08-11T16:58:34Z")

</div>

Hi Can anyone tell me the how to search the particular timestamp in KQL. Am I using the below format in logstash filter. time\_stamp 11/Aug/2023:16:31:44 +0000 So how to use this time\_stamp field and grep the log…

---

## [Missing \_meta field in mapping \[doc\] of index\[watches\] & \[.triggered\_watches\]](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410)

<div class="topic-metadata">

**Author:** [@axi](https://discuss.elastic.co/u/axi)\
**Replies:** 1\
**Last updated:** [April 20, 2022, 8:23am UTC](https://discuss.elastic.co/t/missing-meta-field-in-mapping-doc-of-index-watches-triggered-watches/302410 "2022-04-20T08:23:21Z")

</div>

I just updated my cloud elastic stack from 6.8.23 to 7.17.2 using the cloud.elastic.co dashboard and all went well but I have now some WARNs in the log section of the dashboard: \[instance-0000000010\] Missing \_meta field…

---

## [DEPRECATED: CommonName field on X.509 certificates](https://discuss.elastic.co/t/deprecated-commonname-field-on-x-509-certificates/298310)

<div class="topic-metadata">

**Author:** [@ariverol](https://discuss.elastic.co/u/ariverol)\
**Replies:** 1\
**Last updated:** [February 27, 2022, 6:38am UTC](https://discuss.elastic.co/t/deprecated-commonname-field-on-x-509-certificates/298310 "2022-02-27T06:38:00Z")

</div>

Hi, I'm having a problem receiving data from a 7.17.0 filebeat to Logstash. If I run filebeat -e test config I see a warning lscommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as a h…

---

## [Elastic Cloudのkibanaを独自ドメインで公開したい](https://discuss.elastic.co/t/elastic-cloud-kibana/192820)

<div class="topic-metadata">

**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\
**Replies:** 7\
**Last updated:** [August 1, 2019, 2:44am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana/192820 "2019-08-01T02:44:39Z")

</div>

お世話になります。 Elastic CloudのKibanaのURIを独自ドメインで公開したいのですが、 どのような方法がありますでしょうか。 ご教示いただけますと幸いです。

---

## [Iterate over payload in Index action](https://discuss.elastic.co/t/iterate-over-payload-in-index-action/211775)

<div class="topic-metadata">

**Author:** [@Rahul12](https://discuss.elastic.co/u/Rahul12)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 12:14pm UTC](https://discuss.elastic.co/t/iterate-over-payload-in-index-action/211775 "2019-12-17T12:14:37Z")

</div>

Hi, I am trying to iterate over payload result and index multiple rows using watcher index action. Using my watcher I trying to get the list of host for which CPU crossing the threshold limit. I want to index multiple …

---

## [Kibana startup failed on server restart when pid.file is customized](https://discuss.elastic.co/t/kibana-startup-failed-on-server-restart-when-pid-file-is-customized/167403)

<div class="topic-metadata">

**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\
**Replies:** 3\
**Last updated:** [February 19, 2019, 4:40pm UTC](https://discuss.elastic.co/t/kibana-startup-failed-on-server-restart-when-pid-file-is-customized/167403 "2019-02-19T16:40:11Z")

</div>

Environment: Kibana 6.5.1 - CentOS7 - pid.file = /var/run/kibana/kibana.pid The /var/run or /run is used to store volatile runtime data. As a consequence, the /var/run/kibana directory does not exist any more at server …

---

## [Decode JWT token with logstash](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696)

<div class="topic-metadata">

**Author:** [@yossiv](https://discuss.elastic.co/u/yossiv)\
**Replies:** 3\
**Last updated:** [February 16, 2019, 8:23pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696 "2019-02-16T20:23:16Z")

</div>

Hi Guys, i was wondering if there is any way to decode JWT token with logstash? i didnt find anything about this.

---

## [Math & date: ruby & logstash](https://discuss.elastic.co/t/math-date-ruby-logstash/45945)

<div class="topic-metadata">

**Author:** [@garanews](https://discuss.elastic.co/u/garanews)\
**Replies:** 3\
**Last updated:** [April 8, 2016, 7:05am UTC](https://discuss.elastic.co/t/math-date-ruby-logstash/45945 "2016-04-08T07:05:00Z")

</div>

Hello, I have some log files that have rows like this: station1 on 15387 15646 130 Y Values are separated by tab With logstash I would transform the first\_seen and last\_seen in timestamp, because they are the num…

---

## [Webhdfs output plugin does not create new files](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-create-new-files/36538)

<div class="topic-metadata">

**Author:** [@Olaf\_Thormaehlen](https://discuss.elastic.co/u/Olaf_Thormaehlen)\
**Replies:** 3\
**Last updated:** [March 14, 2016, 10:16pm UTC](https://discuss.elastic.co/t/webhdfs-output-plugin-does-not-create-new-files/36538 "2016-03-14T22:16:09Z")

</div>

Hi, we have problems writing to hdfs via the webhdfs plugin. It does not create new files but will wirte to a file that does already exist. This prevents using tags like date, time, host and so on. Does someone have …

---

## [Dec 18th, 2025: \[EN\] Using ES|QL with dense\_vector fields](https://discuss.elastic.co/t/dec-18th-2025-en-using-es-ql-with-dense-vector-fields/384024)

<div class="topic-metadata">

**Author:** [@Carlos\_D](https://discuss.elastic.co/u/Carlos_D)\
**Replies:** 0\
**Last updated:** [December 18, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2025-en-using-es-ql-with-dense-vector-fields/384024 "2025-12-18T08:00:18Z")

</div>

Este artículo está disponible en Español. Vector Search with ES|QL Today we're unwrapping one of the most exciting additions to ES|QL: native support for dense vector fields, and the functions to search them: The KNN …

---

## [Watcher / Reporting - Timestamp Not Relative in Saved Search URL Export](https://discuss.elastic.co/t/watcher-reporting-timestamp-not-relative-in-saved-search-url-export/204533)

<div class="topic-metadata">

**Author:** [@tyler\_hilsabeck](https://discuss.elastic.co/u/tyler_hilsabeck)\
**Replies:** 3\
**Last updated:** [October 22, 2019, 5:45pm UTC](https://discuss.elastic.co/t/watcher-reporting-timestamp-not-relative-in-saved-search-url-export/204533 "2019-10-22T17:45:40Z")

</div>

Hi All, When you export a saved search CSV export URL like this: The resulting url looks like this: https://XXXXXX:YYYYY/api/reporting/generate/csv?jobParams=(conflictedTypesFields:!(),fields:!(%27@timestamp%27,src\_…

---

## [Scaling ElasticSearch Vertically](https://discuss.elastic.co/t/scaling-elasticsearch-vertically/39772)

<div class="topic-metadata">

**Author:** [@rahulnadella](https://discuss.elastic.co/u/rahulnadella)\
**Replies:** 3\
**Last updated:** [January 22, 2016, 7:21pm UTC](https://discuss.elastic.co/t/scaling-elasticsearch-vertically/39772 "2016-01-22T19:21:32Z")

</div>

Our team plans to scale our ElasticSearch cluster vertically. I was wondering what optimal configuration of the cluster would be best for us (for instance the number of nodes, number of shards and replicas)? Our cur…

---

## [How to uninstall metricbeat 7.16.2 and install the 6.8.3 version of metricbeat](https://discuss.elastic.co/t/how-to-uninstall-metricbeat-7-16-2-and-install-the-6-8-3-version-of-metricbeat/308256)

<div class="topic-metadata">

**Author:** [@ritesh811](https://discuss.elastic.co/u/ritesh811)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-uninstall-metricbeat-7-16-2-and-install-the-6-8-3-version-of-metricbeat/308256 "2022-06-28T05:56:25Z")

</div>

I had installed metricbeat 7.16.2 using the rpm command and now I want to uninstall it and install the 6.8.3 version. Can someone please help by writing down the steps required for it? Thanks in advance.

---

## [IS there a maximum field size limit for content when using ingest plugin?](https://discuss.elastic.co/t/is-there-a-maximum-field-size-limit-for-content-when-using-ingest-plugin/113986)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 2\
**Last updated:** [January 4, 2018, 12:57pm UTC](https://discuss.elastic.co/t/is-there-a-maximum-field-size-limit-for-content-when-using-ingest-plugin/113986 "2018-01-04T12:57:51Z")

</div>

Hi, we are using the ingest plugin to index pdf documents. i have like a 100 page 40 mb pdf file, which i uploaded through ingest plugin, and it seems to index only the first 30 pages or so and ignored the rest...is th…

---

## [Kibana single date picker visualization plugin](https://discuss.elastic.co/t/kibana-single-date-picker-visualization-plugin/68748)

<div class="topic-metadata">

**Author:** [@sjivan](https://discuss.elastic.co/u/sjivan)\
**Replies:** 2\
**Last updated:** [December 14, 2016, 1:33am UTC](https://discuss.elastic.co/t/kibana-single-date-picker-visualization-plugin/68748 "2016-12-14T01:33:20Z")

</div>

Hi, I have a requirement to allow the user to easily pick a single date from a date picker and this should effectively apply an absolute range filter for the day from 00:00:00.000 to 23:59:59.999. The Kibana Absolute dat…

---

## [Kibana 7, Visualization without aggregation](https://discuss.elastic.co/t/kibana-7-visualization-without-aggregation/227654)

<div class="topic-metadata">

**Author:** [@agsilvio](https://discuss.elastic.co/u/agsilvio)\
**Replies:** 1\
**Last updated:** [April 13, 2020, 7:59am UTC](https://discuss.elastic.co/t/kibana-7-visualization-without-aggregation/227654 "2020-04-13T07:59:12Z")

</div>

Hello, An age old question, but seemingly not asked for any recent version: Is there any way to have a visualization without aggregation? My goal: I have time series data in ES(7). The date is mapped as such and the Ki…

---

## [How I can send logs from filebeat to Elasticsearch in another GKE](https://discuss.elastic.co/t/how-i-can-send-logs-from-filebeat-to-elasticsearch-in-another-gke/193372)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 11:27am UTC](https://discuss.elastic.co/t/how-i-can-send-logs-from-filebeat-to-elasticsearch-in-another-gke/193372 "2019-08-08T11:27:42Z")

</div>

Hi! I have two GKE clusters in different GCP projects. GKE clusters: 1) GKE-ELASTIC (with kibana and elastic) 2) GKE-APPS (with my microservices) In the GKE-APPs I disabled the gke logging, because I want to redirec…

---

## [Index duplicate documents with the different routing id](https://discuss.elastic.co/t/index-duplicate-documents-with-the-different-routing-id/259124)

<div class="topic-metadata">

**Author:** [@Maksym1](https://discuss.elastic.co/u/Maksym1)\
**Replies:** 6\
**Last updated:** [December 18, 2020, 5:46pm UTC](https://discuss.elastic.co/t/index-duplicate-documents-with-the-different-routing-id/259124 "2020-12-18T17:46:22Z")

</div>

When I try to index two similar documents (in my case, these are customers) with the same id and a different routing id, I get the first document is created, but the second document is updated. As I know, I can index tw…

---

## [Filebeat not picking up CSV properly](https://discuss.elastic.co/t/filebeat-not-picking-up-csv-properly/194931)

<div class="topic-metadata">

**Author:** [@yungnvn](https://discuss.elastic.co/u/yungnvn)\
**Replies:** 6\
**Last updated:** [August 20, 2019, 10:49am UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-csv-properly/194931 "2019-08-20T10:49:33Z")

</div>

I have a filebeat config to pick up a CSV file shown below: paths: - /path/to/CSV multiline.pattern: '^\\d' multiline.negate: true multiline.match: after Here is a sample from the CSV: RTime,Concept,Time,Yest…

---

## [Logstash using default template instead of the one I added](https://discuss.elastic.co/t/logstash-using-default-template-instead-of-the-one-i-added/168904)

<div class="topic-metadata">

**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\
**Replies:** 4\
**Last updated:** [February 22, 2019, 8:10pm UTC](https://discuss.elastic.co/t/logstash-using-default-template-instead-of-the-one-i-added/168904 "2019-02-22T20:10:39Z")

</div>

when booting up logstash, i can't find the template for ES I added and I get: \[2019-02-18T21:24:30,994\]\[INFO \]\[logstash.outputs.elasticsearch\] Using mapping template from {:path=\>nil} \[2019-02-18T21:24:31,009\]\[INFO \]\[…

---

## [Split timestamp to date and time](https://discuss.elastic.co/t/split-timestamp-to-date-and-time/201739)

<div class="topic-metadata">

**Author:** [@mohamad.faisel](https://discuss.elastic.co/u/mohamad.faisel)\
**Replies:** 5\
**Last updated:** [October 4, 2019, 2:59am UTC](https://discuss.elastic.co/t/split-timestamp-to-date-and-time/201739 "2019-10-04T02:59:33Z")

</div>

Hi, How do I split timestamp field and store the result into timestamp\_date and timestamp\_time in logstash. Thank you.

---

## [ELK Latest stable Version for Production deployment](https://discuss.elastic.co/t/elk-latest-stable-version-for-production-deployment/177948)

<div class="topic-metadata">

**Author:** [@vivektsb](https://discuss.elastic.co/u/vivektsb)\
**Replies:** 5\
**Last updated:** [May 15, 2019, 3:12pm UTC](https://discuss.elastic.co/t/elk-latest-stable-version-for-production-deployment/177948 "2019-05-15T15:12:27Z")

</div>

Hi, Could you please let us know what is the latest stable Version of ELK for production deployment? Thanks, Vivek

---

## [APM is not getting spans for https requests](https://discuss.elastic.co/t/apm-is-not-getting-spans-for-https-requests/148154)

<div class="topic-metadata">

**Author:** [@Gerardo\_Pivotto](https://discuss.elastic.co/u/Gerardo_Pivotto)\
**Replies:** 5\
**Last updated:** [September 13, 2018, 3:44pm UTC](https://discuss.elastic.co/t/apm-is-not-getting-spans-for-https-requests/148154 "2018-09-13T15:44:30Z")

</div>

Hello, I'm ind of new with Elastic APM, Starting working with it this week. I'm working with elastic-apm-node package, nodejs and express. Package-version:"elastic-apm-node": "^1.12.0" Code: const apm = require('elas…

---

## [Unable to offline install the logstash-filter-translate plugin](https://discuss.elastic.co/t/unable-to-offline-install-the-logstash-filter-translate-plugin/55315)

<div class="topic-metadata">

**Author:** [@Valeriy](https://discuss.elastic.co/u/Valeriy)\
**Replies:** 5\
**Last updated:** [May 7, 2017, 11:27pm UTC](https://discuss.elastic.co/t/unable-to-offline-install-the-logstash-filter-translate-plugin/55315 "2017-05-07T23:27:56Z")

</div>

Hello, I install the plugin it shows this error: bin/plugin install --local /var/lib/user/logstash-filter-translate-2.1.4.gem Validating /var/lib/user/logstash-filter-translate-2.1.4.gem Installing logstash-filter-tran…

---

## [CIDR,subnet relating](https://discuss.elastic.co/t/cidr-subnet-relating/76757)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 8\
**Last updated:** [March 1, 2017, 2:11pm UTC](https://discuss.elastic.co/t/cidr-subnet-relating/76757 "2017-03-01T14:11:21Z")

</div>

Hi All, Will I be able to match my ip address to subnets ,i know we can use CIDR ,but I have around 800 subnets is there any way I can match the ip addresses with that using translate and CIDR together . I want t…

---

## [Using leaflet on custon app plugin](https://discuss.elastic.co/t/using-leaflet-on-custon-app-plugin/47358)

<div class="topic-metadata">

**Author:** [@bigtn](https://discuss.elastic.co/u/bigtn)\
**Replies:** 3\
**Last updated:** [April 15, 2016, 3:24pm UTC](https://discuss.elastic.co/t/using-leaflet-on-custon-app-plugin/47358 "2016-04-15T15:24:49Z")

</div>

hi, im creating a custom app plugin on kibana the idea is to add a map using leaflet this the content of my controller : //leaflet angular.extend($scope, { london: { lat: 51.505, lng: -0.09, …

---

## [APM Java agnet return 400 sending report to elastic and create holes - co.elastic.apm.agent.report.IntakeV2ReportingEventHandler](https://discuss.elastic.co/t/apm-java-agnet-return-400-sending-report-to-elastic-and-create-holes-co-elastic-apm-agent-report-intakev2reportingeventhandler/256536)

<div class="topic-metadata">

**Author:** [@ldomenella](https://discuss.elastic.co/u/ldomenella)\
**Replies:** 7\
**Last updated:** [December 6, 2020, 11:36am UTC](https://discuss.elastic.co/t/apm-java-agnet-return-400-sending-report-to-elastic-and-create-holes-co-elastic-apm-agent-report-intakev2reportingeventhandler/256536 "2020-12-06T11:36:33Z")

</div>

hi all, testing the java agent on our application we see that with the application under load the agent is not able to send the report to APM server and get HTTP 400 error this is the specific error: co.elastic.apm.ag…

---

## [Multi query support in kibana 4](https://discuss.elastic.co/t/multi-query-support-in-kibana-4/2754)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 1\
**Last updated:** [June 17, 2015, 4:09am UTC](https://discuss.elastic.co/t/multi-query-support-in-kibana-4/2754 "2015-06-17T04:09:57Z")

</div>

Hi All, Can you please explain me how to implement multi queries and mean value in kibana4. multi query is supporting in kibana 3.1.2 but i didn't found mean and multi query feature in kibana4. please explain me how…

---

## [Backup to s3 repo from elasticsearch 6.8.22](https://discuss.elastic.co/t/backup-to-s3-repo-from-elasticsearch-6-8-22/292836)

<div class="topic-metadata">

**Author:** [@zorruch](https://discuss.elastic.co/u/zorruch)\
**Replies:** 2\
**Last updated:** [December 23, 2021, 9:33pm UTC](https://discuss.elastic.co/t/backup-to-s3-repo-from-elasticsearch-6-8-22/292836 "2021-12-23T21:33:05Z")

</div>

hi I am using elasticsearch 6.8.22 with plugin repository-s3 I also use ceph s3 storage running on rook(k8s) I'm trying to set up a snapshot backup for it: I create a repository command: curl -sk -X PUT "https://lo…

---

## [Is it possible to implement a filter in the form of a button in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-implement-a-filter-in-the-form-of-a-button-in-kibana/140185)

<div class="topic-metadata">

**Author:** [@Oksana](https://discuss.elastic.co/u/Oksana)\
**Replies:** 3\
**Last updated:** [July 24, 2018, 1:30pm UTC](https://discuss.elastic.co/t/is-it-possible-to-implement-a-filter-in-the-form-of-a-button-in-kibana/140185 "2018-07-24T13:30:37Z")

</div>

In Kibana, I created a filter. When you hover the mouse cursor over the filter, different buttons are displayed. In order to apply the filter, it is necessary to press the button in the form of a tick. Is it possible …

---

## [Logstash XML Filter - xpath won't select element value](https://discuss.elastic.co/t/logstash-xml-filter-xpath-wont-select-element-value/225564)

<div class="topic-metadata">

**Author:** [@Paul\_Offord](https://discuss.elastic.co/u/Paul_Offord)\
**Replies:** 1\
**Last updated:** [March 29, 2020, 3:56pm UTC](https://discuss.elastic.co/t/logstash-xml-filter-xpath-wont-select-element-value/225564 "2020-03-29T15:56:26Z")

</div>

I am using Logstash 7.6.1 to ingest an XML file that was generated using a standard Microsoft Windows tool call WinInet Trace. Although I am able to ingest the entire XML, I want to generate some hashes from the values …

---

## [Heartbeat HTTP Monitor - GET with JSON Body and Response](https://discuss.elastic.co/t/heartbeat-http-monitor-get-with-json-body-and-response/262168)

<div class="topic-metadata">

**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\
**Replies:** 4\
**Last updated:** [February 22, 2021, 4:43pm UTC](https://discuss.elastic.co/t/heartbeat-http-monitor-get-with-json-body-and-response/262168 "2021-02-22T16:43:12Z")

</div>

Hello! I'm trying to get heartbeat to perform an HTTP GET , while combining a JSON body with the GET request to the page. My goal is to query an elastic index, take the fields and analyze for up/down accordingly. In t…

[Previous page](https://discuss.elastic.co/top.md?page=782&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=784&per_page=50&period=all)
