# Top

**URL:** https://discuss.elastic.co/top.md?page=791&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 792

---

## [Elastic-Agent vs Metricbeat standalone](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 4\
**Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270 "2021-02-25T13:48:21Z")

</div>

Hi, Note: Running in Windows Server 2012 I have a couple of questions about the Metricbeat service running under Elastic-Agent: Can modules (for example MSSQL) be activated like the standalone version of Metricbeat? H…

---

## [Script to compare dates](https://discuss.elastic.co/t/script-to-compare-dates/143550)

<div class="topic-metadata">

**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\
**Replies:** 4\
**Last updated:** [August 10, 2018, 7:08am UTC](https://discuss.elastic.co/t/script-to-compare-dates/143550 "2018-08-10T07:08:16Z")

</div>

I would like to compare an elastic search date with a format YYY-MM-DD HH:MM:SS as to compare the results of the past 30 days. So if the given date is equal to NOW()-30D it should give me the result wanted. I have tried …

---

## [Is it possible to include regex in dissect filter?](https://discuss.elastic.co/t/is-it-possible-to-include-regex-in-dissect-filter/138553)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 4\
**Last updated:** [July 4, 2018, 3:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-include-regex-in-dissect-filter/138553 "2018-07-04T15:46:03Z")

</div>

Hi, I am using ELK GA 6.3.0. I am using Logstash to read data from Kafka. I have messages like; 1 0 1707820 142124 198704 511288 0 0 0 144 There is a white space at the beginning of message. There are sp…

---

## [Search by file content](https://discuss.elastic.co/t/search-by-file-content/33138)

<div class="topic-metadata">

**Author:** [@emolla](https://discuss.elastic.co/u/emolla)\
**Replies:** 4\
**Last updated:** [October 28, 2015, 2:04pm UTC](https://discuss.elastic.co/t/search-by-file-content/33138 "2015-10-28T14:04:56Z")

</div>

Hi, I'm trying to implement my first Elasticsearch not get it to work and search for content of a file. I used an example found on the web . First I created the mapping : PUT /attachment\_sample1 { "mappings": { …

---

## [Histogram based on partial matching in Kibana: field not\_analyzed + \_all disabled](https://discuss.elastic.co/t/histogram-based-on-partial-matching-in-kibana-field-not-analyzed--all-disabled/45209)

<div class="topic-metadata">

**Author:** [@alex\_tz](https://discuss.elastic.co/u/alex_tz)\
**Replies:** 5\
**Last updated:** [March 29, 2016, 3:36pm UTC](https://discuss.elastic.co/t/histogram-based-on-partial-matching-in-kibana-field-not-analyzed--all-disabled/45209 "2016-03-29T15:36:45Z")

</div>

Hey folks, I would like to use Kibana to create a histogram of all the different messages that contain a certain substring. For example, the data contains messages like "Your event failed Cause 1", "Your event failed …

---

## [How to create map chart without geo hash](https://discuss.elastic.co/t/how-to-create-map-chart-without-geo-hash/35703)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 5\
**Last updated:** [November 29, 2015, 10:59am UTC](https://discuss.elastic.co/t/how-to-create-map-chart-without-geo-hash/35703 "2015-11-29T10:59:55Z")

</div>

Hi Guys, I have data into elasticsearch, data like State, District, Village but havn't Geohash. Checked in Kibana its not allowed me to developed Map. Kindly guide me how can I developed map chart??? Geo co-ordinates m…

---

## [Kibana stopping due to error](https://discuss.elastic.co/t/kibana-stopping-due-to-error/198968)

<div class="topic-metadata">

**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 1:36pm UTC](https://discuss.elastic.co/t/kibana-stopping-due-to-error/198968 "2019-09-13T13:36:02Z")

</div>

Hi guys, I am using Kibana 7.2.0 and facing the issue of: events.js:174 throw er; // Unhandled 'error' event ^ Error: read ECONNRESET at TCP.onStreamRead (internal/stream\_base\_commons.js:111:27) Emitted 'error' …

---

## [\[BUG\] You can use BulkProcessor with high-level client in 5.6 version](https://discuss.elastic.co/t/bug-you-can-use-bulkprocessor-with-high-level-client-in-5-6-version/123602)

<div class="topic-metadata">

**Author:** [@juanaramis](https://discuss.elastic.co/u/juanaramis)\
**Replies:** 8\
**Last updated:** [March 14, 2018, 4:13pm UTC](https://discuss.elastic.co/t/bug-you-can-use-bulkprocessor-with-high-level-client-in-5-6-version/123602 "2018-03-14T16:13:48Z")

</div>

Hi team, Thanks in advance I try to create a BulkProcessor like https://www.elastic.co/guide/en/elasticsearch/client/java-rest/5.6/java-rest-high-document-bulk.html with the high-level client in the version 5.6 but I…

---

## [Service Not Available - License Not Available](https://discuss.elastic.co/t/service-not-available-license-not-available/291169)

<div class="topic-metadata">

**Author:** [@blissweb](https://discuss.elastic.co/u/blissweb)\
**Replies:** 7\
**Last updated:** [December 8, 2021, 2:31am UTC](https://discuss.elastic.co/t/service-not-available-license-not-available/291169 "2021-12-08T02:31:12Z")

</div>

Hi, Been using the docker version of filebeat, metricbeat, Elasticsearch and kibana. Has been working fine, but after about 24 hours up, it starts showing the message about no license. I'm not using Authentication of …

---

## [Elasticsearch data node and kibana on different machines](https://discuss.elastic.co/t/elasticsearch-data-node-and-kibana-on-different-machines/16774)

<div class="topic-metadata">

**Author:** [@computer\_engineer](https://discuss.elastic.co/u/computer_engineer)\
**Replies:** 2\
**Last updated:** [April 2, 2014, 9:25pm UTC](https://discuss.elastic.co/t/elasticsearch-data-node-and-kibana-on-different-machines/16774 "2014-04-02T21:25:56Z")

</div>

I would like to know what is the best setup to have an elasticsearch data node and kibana server on separate machines. I have setup multiple elasticsearch data nodes and would like to show all dashboards on one s…

---

## [Kibana won't start after 8.2.0 upgrade](https://discuss.elastic.co/t/kibana-wont-start-after-8-2-0-upgrade/304881)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 6\
**Last updated:** [May 18, 2022, 1:52pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-8-2-0-upgrade/304881 "2022-05-18T13:52:04Z")

</div>

I had 8.1.1 running and I upgraded to 8.2.0 this is single node test system. hence I shutdown Elasticsearch and kibana upgrade and start kibana is complaining like this \[2022-05-16T19:33:11.618-05:00\]\[FATAL\]\[root\] Er…

---

## [Filebeat unable to cope with incoming logs](https://discuss.elastic.co/t/filebeat-unable-to-cope-with-incoming-logs/114454)

<div class="topic-metadata">

**Author:** [@No\_Name](https://discuss.elastic.co/u/No_Name)\
**Replies:** 6\
**Last updated:** [January 11, 2018, 12:30pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-cope-with-incoming-logs/114454 "2018-01-11T12:30:16Z")

</div>

Hello, I have a Filebeat which is processing 10-20GB nginx log file. I can't seem to process \>500 ouput/s (in measurement of over a 6hours period) to Logstash. I've read from existing topics to tune with parameters such…

---

## [Problem input file version 2.2.0](https://discuss.elastic.co/t/problem-input-file-version-2-2-0/41802)

<div class="topic-metadata">

**Author:** [@chicco\_95](https://discuss.elastic.co/u/chicco_95)\
**Replies:** 6\
**Last updated:** [February 24, 2016, 8:25am UTC](https://discuss.elastic.co/t/problem-input-file-version-2-2-0/41802 "2016-02-24T08:25:46Z")

</div>

Maurizio Maltese: Hello there everybody I recently updated to the last version of Logstash, taking it to the 2.2.0. I'm having some issues with the input file plugin. When I run Logstash and insert files that have to …

---

## [Fail to get access token](https://discuss.elastic.co/t/fail-to-get-access-token/101960)

<div class="topic-metadata">

**Author:** [@Wu\_Chun\_Wa](https://discuss.elastic.co/u/Wu_Chun_Wa)\
**Replies:** 4\
**Last updated:** [September 29, 2017, 8:28am UTC](https://discuss.elastic.co/t/fail-to-get-access-token/101960 "2017-09-29T08:28:55Z")

</div>

Hi Sir, i just follow the doc. https://www.elastic.co/guide/en/elasticsearch/reference/5.6/security-api-tokens.html Call the following command POST /\_xpack/security/oauth2/token { "grant\_type" : "password", "usern…

---

## [Kibana error on import visualisation "Could not locate that index-pattern-field"](https://discuss.elastic.co/t/kibana-error-on-import-visualisation-could-not-locate-that-index-pattern-field/119168)

<div class="topic-metadata">

**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\
**Replies:** 1\
**Last updated:** [February 9, 2018, 7:07am UTC](https://discuss.elastic.co/t/kibana-error-on-import-visualisation-could-not-locate-that-index-pattern-field/119168 "2018-02-09T07:07:21Z")

</div>

I had created several visualisations. Today after refreshing index pattern in Management tab all of visualisations are giving me error Could not locate that index-pattern (id: audit-logs-new). This index pattern is alrea…

---

## [Débutante en Elastic search - Problème avec port 9200](https://discuss.elastic.co/t/debutante-en-elastic-search-probleme-avec-port-9200/215897)

<div class="topic-metadata">

**Author:** [@MLaure19](https://discuss.elastic.co/u/MLaure19)\
**Replies:** 5\
**Last updated:** [January 22, 2020, 7:42am UTC](https://discuss.elastic.co/t/debutante-en-elastic-search-probleme-avec-port-9200/215897 "2020-01-22T07:42:27Z")

</div>

Bonjour, Quand je rentre l'adresse suivante : http://127.0.0.1:9200 , J'obtiens les écrans d'erreur suivants et C'est comme si j'avais besoin d'un nom d'utilisateur et d'un mot de passe pour des raisons de sécurit…

---

## [Bulk upload folder of json](https://discuss.elastic.co/t/bulk-upload-folder-of-json/81632)

<div class="topic-metadata">

**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\
**Replies:** 5\
**Last updated:** [April 9, 2017, 2:57am UTC](https://discuss.elastic.co/t/bulk-upload-folder-of-json/81632 "2017-04-09T02:57:39Z")

</div>

Apologies if this is out there, but I can't seem to figure it out. I have a folder called 'data' that consists of 10,000 geo json files. I want to be able to upload the entire folder at once. I've tried curl -XPOST "…

---

## [Remove a Node from elasticsearch Transport client nodes list](https://discuss.elastic.co/t/remove-a-node-from-elasticsearch-transport-client-nodes-list/63349)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 5\
**Last updated:** [October 19, 2016, 6:07pm UTC](https://discuss.elastic.co/t/remove-a-node-from-elasticsearch-transport-client-nodes-list/63349 "2016-10-19T18:07:23Z")

</div>

HI All, The Transport client comes with a cluster sniffing feature which allows it to dynamically add new hosts and remove old ones. When sniffing is enabled, the transport client will connect to the nodes in its inter…

---

## [Install Free License on Marvel 1.3](https://discuss.elastic.co/t/install-free-license-on-marvel-1-3/37326)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 3\
**Last updated:** [February 9, 2016, 7:57pm UTC](https://discuss.elastic.co/t/install-free-license-on-marvel-1-3/37326 "2016-02-09T19:57:04Z")

</div>

Hey guys, we are using Marvel 1.3 with ES 1.7.X and i am quite curious how the installation of the free license in the older version of Marvel should work. We are required to insert an Order Number/Support Quote Refer…

---

## [CSV Report Export Times Incorrect](https://discuss.elastic.co/t/csv-report-export-times-incorrect/160226)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 2\
**Last updated:** [December 10, 2018, 11:56pm UTC](https://discuss.elastic.co/t/csv-report-export-times-incorrect/160226 "2018-12-10T23:56:28Z")

</div>

When exporting a saved search to csv, time fields that are epoch seconds are not correct. Example: First, while this is the .csv export in Excel, all cells are formatted as text so this is exactly as it appears in …

---

## [Multiple conditions on compare condition](https://discuss.elastic.co/t/multiple-conditions-on-compare-condition/69329)

<div class="topic-metadata">

**Author:** [@rvalenciano](https://discuss.elastic.co/u/rvalenciano)\
**Replies:** 1\
**Last updated:** [December 20, 2016, 2:08pm UTC](https://discuss.elastic.co/t/multiple-conditions-on-compare-condition/69329 "2016-12-20T14:08:29Z")

</div>

Elasticsearch 2.X Watcher 2.3.4 Is possible to have more than one compare condition in watcher? We are putting scripting as the last solution. Best

---

## [Alerting within Kibana - ES 7.7](https://discuss.elastic.co/t/alerting-within-kibana-es-7-7/237681)

<div class="topic-metadata">

**Author:** [@Sinnott](https://discuss.elastic.co/u/Sinnott)\
**Replies:** 2\
**Last updated:** [June 19, 2020, 8:30am UTC](https://discuss.elastic.co/t/alerting-within-kibana-es-7-7/237681 "2020-06-19T08:30:45Z")

</div>

Hi Elastic Community! I am testing out Alerting from Kibana within Elasticsearch 7.7 (feature currently in Beta). Does anyone know if it is possible to pull specific field information from an Index when an alert, setup…

---

## [How to sort by minimum distance between multiple fields](https://discuss.elastic.co/t/how-to-sort-by-minimum-distance-between-multiple-fields/189635)

<div class="topic-metadata">

**Author:** [@dailydm1227](https://discuss.elastic.co/u/dailydm1227)\
**Replies:** 8\
**Last updated:** [July 15, 2019, 4:54pm UTC](https://discuss.elastic.co/t/how-to-sort-by-minimum-distance-between-multiple-fields/189635 "2019-07-15T16:54:31Z")

</div>

I would like to sort results based on the minimum distance found from a few different geo\_point fields. Here is a basic example: Mapping: { "companies" : { "mappings" : { "\_doc" : { "properties" : …

---

## [How to achive optimal size of indexes for hot/warm/cold architecture](https://discuss.elastic.co/t/how-to-achive-optimal-size-of-indexes-for-hot-warm-cold-architecture/161907)

<div class="topic-metadata">

**Author:** [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Replies:** 8\
**Last updated:** [December 22, 2018, 2:02am UTC](https://discuss.elastic.co/t/how-to-achive-optimal-size-of-indexes-for-hot-warm-cold-architecture/161907 "2018-12-22T02:02:31Z")

</div>

For some time we are using hot/warm/cold data nodes. We are indexing a large number of sources to daily/weekly or monthy indexes with logstash, trying to avoid having small indexes. From https://www.elastic.co/webinars/o…

---

## [Elasticsearch SQL ODBC Driver error of all shards failed](https://discuss.elastic.co/t/elasticsearch-sql-odbc-driver-error-of-all-shards-failed/268448)

<div class="topic-metadata">

**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\
**Replies:** 7\
**Last updated:** [April 7, 2021, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-sql-odbc-driver-error-of-all-shards-failed/268448 "2021-04-07T10:19:18Z")

</div>

I'm using Elasticsearch Odbc as driver between my C++ code and Elasticsearch engine. When firing sql select query, the shards are getting failed. Please help me through this. Thanks in advance.

---

## [Rollover Index based on timestamp field](https://discuss.elastic.co/t/rollover-index-based-on-timestamp-field/192229)

<div class="topic-metadata">

**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\
**Replies:** 7\
**Last updated:** [August 9, 2019, 2:54pm UTC](https://discuss.elastic.co/t/rollover-index-based-on-timestamp-field/192229 "2019-08-09T14:54:50Z")

</div>

I need to rollover the index on daily basis. currently I am using curator rollover action (max\_size: 1d) and my index pattern : test-YYYY.MM.DD-1. my cronjob is running every hour once. Our scenario: Index created at 4:…

---

## [Filebeat and truncated files](https://discuss.elastic.co/t/filebeat-and-truncated-files/63054)

<div class="topic-metadata">

**Author:** [@apelsina](https://discuss.elastic.co/u/apelsina)\
**Replies:** 1\
**Last updated:** [October 17, 2016, 11:35am UTC](https://discuss.elastic.co/t/filebeat-and-truncated-files/63054 "2016-10-17T11:35:49Z")

</div>

What strategy should I use for filebeat in case when specific log file is being constantly truncated from the beginning? I use log files which are produced by third-party log system and I cannot maintain it. Produced f…

---

## [ECE not recognizing docker config.json](https://discuss.elastic.co/t/ece-not-recognizing-docker-config-json/211844)

<div class="topic-metadata">

**Author:** [@avarshney](https://discuss.elastic.co/u/avarshney)\
**Replies:** 6\
**Last updated:** [December 19, 2019, 3:01pm UTC](https://discuss.elastic.co/t/ece-not-recognizing-docker-config-json/211844 "2019-12-19T15:01:34Z")

</div>

We have config.json file which has docker registry auth details of our private artifactory registry. However, when we create a new deployment, ECE is not able to find the auth details and tries to connect to the registry…

---

## [How can I change the rows and columns of a table?](https://discuss.elastic.co/t/how-can-i-change-the-rows-and-columns-of-a-table/154961)

<div class="topic-metadata">

**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\
**Replies:** 6\
**Last updated:** [November 1, 2018, 6:00am UTC](https://discuss.elastic.co/t/how-can-i-change-the-rows-and-columns-of-a-table/154961 "2018-11-01T06:00:08Z")

</div>

How can I change the rows and columns of a table?

---

## [Otel agent with apm server is giving error](https://discuss.elastic.co/t/otel-agent-with-apm-server-is-giving-error/284616)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 4\
**Last updated:** [September 20, 2021, 2:31pm UTC](https://discuss.elastic.co/t/otel-agent-with-apm-server-is-giving-error/284616 "2021-09-20T14:31:04Z")

</div>

Hi, I am trying to trace java application with open telemetry java agent 1.16.0 and with APM-server 7.14.1. I have set the below environment variables: set OTEL\_EXPORTER\_OTLP\_ENDPOINT=http://XX.XX.XX.XX:8200/ set OTEL\_…

---

## [Logstash S3転送時にエラー](https://discuss.elastic.co/t/logstash-s3/197746)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 4\
**Last updated:** [September 6, 2019, 6:09am UTC](https://discuss.elastic.co/t/logstash-s3/197746 "2019-09-06T06:09:00Z")

</div>

Logstash→S3に関して質問させて頂きます。 ▼実現したいこと Logstashのoutputプラグインを使ってS3にデータ転送 https://www.elastic.co/guide/en/logstash/current/plugins-outputs-s3.html Logstashバージョン：7.3 config設定値 input { file{ path =\> "XXX/XXX.log…

---

## [Multiple data paths in data node](https://discuss.elastic.co/t/multiple-data-paths-in-data-node/112239)

<div class="topic-metadata">

**Author:** [@Dibyakanta](https://discuss.elastic.co/u/Dibyakanta)\
**Replies:** 4\
**Last updated:** [December 19, 2017, 1:52pm UTC](https://discuss.elastic.co/t/multiple-data-paths-in-data-node/112239 "2017-12-19T13:52:56Z")

</div>

Hi, I have 6 Data Nodes. And I want to use multiple data paths for saving the data of all nodes. So how many paths shall I mention in each node's elasticsearch.yml file? Thanks, Dibyakanta

---

## [Mssql jdbc](https://discuss.elastic.co/t/mssql-jdbc/98339)

<div class="topic-metadata">

**Author:** [@rolandbp](https://discuss.elastic.co/u/rolandbp)\
**Replies:** 4\
**Last updated:** [August 25, 2017, 9:24am UTC](https://discuss.elastic.co/t/mssql-jdbc/98339 "2017-08-25T09:24:10Z")

</div>

Hi, i want push Data from MSQL into Elasticsearch. In Logstash following Input file: input { jdbc { jdbc\_driver\_library =\> "/etc/logstash/jdbc/mssql/sqljdbc\_6.0/enu/jre8/sqljdbc42.jar" jdbc\_driver\_class =\> "com.mic…

---

## [Bug parsing json](https://discuss.elastic.co/t/bug-parsing-json/50921)

<div class="topic-metadata">

**Author:** [@JvonRudno](https://discuss.elastic.co/u/JvonRudno)\
**Replies:** 4\
**Last updated:** [June 2, 2016, 10:17am UTC](https://discuss.elastic.co/t/bug-parsing-json/50921 "2016-06-02T10:17:10Z")

</div>

Hi everybody After search a lot about this problem I get the conclusion that this is a bug for logstash. I have asked in this forum and unfortunately I didn't got any answer, so I decided to give step by step the way …

---

## [Escape character in LDAP DN?](https://discuss.elastic.co/t/escape-character-in-ldap-dn/24124)

<div class="topic-metadata">

**Author:** [@slee](https://discuss.elastic.co/u/slee)\
**Replies:** 4\
**Last updated:** [June 23, 2015, 8:22pm UTC](https://discuss.elastic.co/t/escape-character-in-ldap-dn/24124 "2015-06-23T20:22:19Z")

</div>

Hello, The way our organization organizes the Users in AD causes there to be a , inbetween the last name and the first in the DN. Because of this, when I try to add a user to the role\_mapping.yml file, I get an error th…

---

## [Kibana Visualize - Calculate difference between two metrics](https://discuss.elastic.co/t/kibana-visualize-calculate-difference-between-two-metrics/237466)

<div class="topic-metadata">

**Author:** [@Mayestro\_PW](https://discuss.elastic.co/u/Mayestro_PW)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 12:50pm UTC](https://discuss.elastic.co/t/kibana-visualize-calculate-difference-between-two-metrics/237466 "2020-06-17T12:50:47Z")

</div>

Hello, I'm in the process of making a new data table, which consists of a date bucket and 3 metrics. First metric(A) is Count, second metric(B) is Unique Count, and third(C) I need to be the difference between A and B. …

---

## [Mutate rename filter not working on nested fields](https://discuss.elastic.co/t/mutate-rename-filter-not-working-on-nested-fields/207146)

<div class="topic-metadata">

**Author:** [@Justin\_Doles](https://discuss.elastic.co/u/Justin_Doles)\
**Replies:** 2\
**Last updated:** [November 8, 2019, 7:16pm UTC](https://discuss.elastic.co/t/mutate-rename-filter-not-working-on-nested-fields/207146 "2019-11-08T19:16:28Z")

</div>

I'm likely missing something simple, but I cannot seem to get the rename filter to work with my data. The field I'm attempting to rename is nested. It doesn't error, but it also doesn't do anything. I am able to renam…

---

## [Installing Timelion](https://discuss.elastic.co/t/installing-timelion/34958)

<div class="topic-metadata">

**Author:** [@Kevin\_Ross](https://discuss.elastic.co/u/Kevin_Ross)\
**Replies:** 2\
**Last updated:** [November 19, 2015, 9:14am UTC](https://discuss.elastic.co/t/installing-timelion/34958 "2015-11-19T09:14:29Z")

</div>

Hi, After reading the recent blog post on timelion (https://www.elastic.co/blog/timelion-timeline) I wanted to install it. Now I have installed the Kibana plugin but I can't search data or do anything and I don't get t…

---

## [ElasticSearch as metrics database](https://discuss.elastic.co/t/elasticsearch-as-metrics-database/28820)

<div class="topic-metadata">

**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\
**Replies:** 2\
**Last updated:** [September 9, 2015, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-as-metrics-database/28820 "2015-09-09T04:28:17Z")

</div>

Hello, with the coming ElasticSearch support in Grafana and ES 2.0, ES starts to look interesting as a metrics backend. Is anyone using it already? What kind of performance do you see? I plan on having around 500.000…

---

## [How to run cross cluster search across local and remote indices](https://discuss.elastic.co/t/how-to-run-cross-cluster-search-across-local-and-remote-indices/117997)

<div class="topic-metadata">

**Author:** [@bbailey](https://discuss.elastic.co/u/bbailey)\
**Replies:** 3\
**Last updated:** [February 14, 2018, 10:30pm UTC](https://discuss.elastic.co/t/how-to-run-cross-cluster-search-across-local-and-remote-indices/117997 "2018-02-14T22:30:02Z")

</div>

I am trying to setup my environment so that I can switch from using tribe nodes to use cross cluster search and running in to a few problems After some useful feedback in this forum I have configured my system with kiba…

---

## [Spark push-down query enhancement](https://discuss.elastic.co/t/spark-push-down-query-enhancement/63159)

<div class="topic-metadata">

**Author:** [@aokolnychyi](https://discuss.elastic.co/u/aokolnychyi)\
**Replies:** 3\
**Last updated:** [October 18, 2016, 2:35pm UTC](https://discuss.elastic.co/t/spark-push-down-query-enhancement/63159 "2016-10-18T14:35:12Z")

</div>

Hi, I am creating a data frame by specifying a filter alongside my index and type name. Everything works fine unless I am trying to additionally filter the resulting data frame on Spark side. According to the document…

---

## [Slow bulk indexing](https://discuss.elastic.co/t/slow-bulk-indexing/41761)

<div class="topic-metadata">

**Author:** [@Alexandr\_Dorosh](https://discuss.elastic.co/u/Alexandr_Dorosh)\
**Replies:** 3\
**Last updated:** [February 18, 2016, 9:15am UTC](https://discuss.elastic.co/t/slow-bulk-indexing/41761 "2016-02-18T09:15:17Z")

</div>

Hello I'm having indexing performance problems. I'm using python for bulk operations 1000 documents per bulk tooks about 30 seconds Documents quite small, about 15 fields most of which integers or short strings. Inde…

---

## [Unable to start the elasticsearch.service](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065)

<div class="topic-metadata">

**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\
**Replies:** 5\
**Last updated:** [July 1, 2022, 1:25am UTC](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065 "2022-07-01T01:25:25Z")

</div>

Hello, I'm trying to start my Elasticsearch servcie on RHEL Environment but I'm unable to start it after N days of not monitoring it. With this, I'm unable to access the Kibana dashboard. \[2022-06-24T09:34:05,594\]\[ERRO…

---

## [Elasticsearch Active Directory Configuration Errors- User authentication](https://discuss.elastic.co/t/elasticsearch-active-directory-configuration-errors-user-authentication/259294)

<div class="topic-metadata">

**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\
**Replies:** 5\
**Last updated:** [December 22, 2020, 8:51pm UTC](https://discuss.elastic.co/t/elasticsearch-active-directory-configuration-errors-user-authentication/259294 "2020-12-22T20:51:16Z")

</div>

Hello, I have been stuck on this for a couple of days now. I have tried several options from the forum but I still can't get it to work. Used this documentation https://www.elastic.co/guide/en/elasticsearch/reference/cu…

---

## [Best way to ingest JSON files?](https://discuss.elastic.co/t/best-way-to-ingest-json-files/39136)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 5\
**Last updated:** [January 13, 2016, 7:42pm UTC](https://discuss.elastic.co/t/best-way-to-ingest-json-files/39136 "2016-01-13T19:42:53Z")

</div>

I have 300 files to ingest. Each is pretty-printed JSON and contains one event. I tried using the file input and the multiline codec: input{ file{ path =\> "/tmp/ID\*.json" start\_position =\> "beginnin…

---

## [Can date ingest processor process a String to extract a Date from it](https://discuss.elastic.co/t/can-date-ingest-processor-process-a-string-to-extract-a-date-from-it/111493)

<div class="topic-metadata">

**Author:** [@Augustus1995](https://discuss.elastic.co/u/Augustus1995)\
**Replies:** 5\
**Last updated:** [December 13, 2017, 11:23am UTC](https://discuss.elastic.co/t/can-date-ingest-processor-process-a-string-to-extract-a-date-from-it/111493 "2017-12-13T11:23:37Z")

</div>

Hi guys I find a question about Can date ingest processor process a String to extract a Date from it. And i follow the guide and use Date Processor, but my log message is complex 2017-12-13 11:10:30.000 \[pool-10-thre…

---

## [Filter by attribute possible values dictionary](https://discuss.elastic.co/t/filter-by-attribute-possible-values-dictionary/95278)

<div class="topic-metadata">

**Author:** [@James.Gray](https://discuss.elastic.co/u/James.Gray)\
**Replies:** 1\
**Last updated:** [November 24, 2017, 9:42pm UTC](https://discuss.elastic.co/t/filter-by-attribute-possible-values-dictionary/95278 "2017-11-24T21:42:52Z")

</div>

Hello ES team et all, We’re looking to replace our simple search (C# Entity Framework calls) with a more advanced search function. We have been using the EF solution for anything doing internal lookups for our eCommerce…

---

## [Kibana 5.5 Metric changes](https://discuss.elastic.co/t/kibana-5-5-metric-changes/93714)

<div class="topic-metadata">

**Author:** [@hio77](https://discuss.elastic.co/u/hio77)\
**Replies:** 2\
**Last updated:** [July 19, 2017, 9:08am UTC](https://discuss.elastic.co/t/kibana-5-5-metric-changes/93714 "2017-07-19T09:08:03Z")

</div>

Looking for a bit of advice here, previously on Kibana 5.4.4 Metric visualizations would overflow to the next line. This appears to have been changed in Kibana 5.5 with the message "Some labels were hidden due to size c…

---

## [Got stuck in Kibana Saved object migration](https://discuss.elastic.co/t/got-stuck-in-kibana-saved-object-migration/234178)

<div class="topic-metadata">

**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\
**Replies:** 2\
**Last updated:** [May 28, 2020, 2:29pm UTC](https://discuss.elastic.co/t/got-stuck-in-kibana-saved-object-migration/234178 "2020-05-28T14:29:49Z")

</div>

Hi Team Got stuck in Kibana Saved object migration error. Getting following error while starting Kibana insance: log \[15:32:53.967\] \[info\]\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible w…

---

## [FilebeatからLogstashへのデータ転送で connection reset by peer を解消したい](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/211739)

<div class="topic-metadata">

**Author:** [@sat1100](https://discuss.elastic.co/u/sat1100)\
**Replies:** 2\
**Last updated:** [December 13, 2019, 9:42am UTC](https://discuss.elastic.co/t/filebeat-logstash-connection-reset-by-peer/211739 "2019-12-13T09:42:49Z")

</div>

filebeatからデータを送った時に、ログで「write: connection reset by peer」と表示されますが、 データは送られておりKibanaで確認できている状態です。 logstashには以下のように設定しておりますが、解消するにはどのように対処すればいいかご教示お願いします。 input { beats { port =\> 5044 } }

[Previous page](https://discuss.elastic.co/top.md?page=790&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=792&per_page=50&period=all)
