# Top **URL:** https://discuss.elastic.co/top.md?page=792&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 793 --- ## [Problemas con el análisis de archivo xml con logstash](https://discuss.elastic.co/t/problemas-con-el-analisis-de-archivo-xml-con-logstash/50824)
**Author:** [@Lop](https://discuss.elastic.co/u/Lop)\ **Replies:** 4\ **Last updated:** [May 30, 2016, 12:14pm UTC](https://discuss.elastic.co/t/problemas-con-el-analisis-de-archivo-xml-con-logstash/50824 "2016-05-30T12:14:01Z")
Hola a Todos Soy muy novata con ELK y tengo un problema para el que necesitaría vuestra ayuda. Tengo una serie de archivos xml con esta configuración \ \16/05/2016\ \00:00:03\ … --- ## [Session expires very fast](https://discuss.elastic.co/t/session-expires-very-fast/254446)
**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\ **Replies:** 7\ **Last updated:** [November 6, 2020, 1:09pm UTC](https://discuss.elastic.co/t/session-expires-very-fast/254446 "2020-11-06T13:09:54Z")
Ever since I upgraded to version 7.X, my session will expire even though I'm working in Kibana. It could happen anytime for seemingly no reason. Is there some timeout config that is causing this? --- ## [NoSuchMethodError: org.elasticsearch.common.xcontent.XContentBuilder.string()Ljava/lang/String](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-common-xcontent-xcontentbuilder-string-ljava-lang-string/193734)
**Author:** [@Vladimir\_Routine](https://discuss.elastic.co/u/Vladimir_Routine)\ **Replies:** 7\ **Last updated:** [August 5, 2019, 11:20am UTC](https://discuss.elastic.co/t/nosuchmethoderror-org-elasticsearch-common-xcontent-xcontentbuilder-string-ljava-lang-string/193734 "2019-08-05T11:20:59Z")
I am using elasticsearch 6.1.1 alongside spring and I am getting the following error NoSuchMethodError: org.elasticsearch.common.xcontent.XContentBuilder.string()Ljava/lang/String what might be the reason? --- ## [Machine learning API Disabled](https://discuss.elastic.co/t/machine-learning-api-disabled/93605)
**Author:** [@sanketshinde](https://discuss.elastic.co/u/sanketshinde)\ **Replies:** 7\ **Last updated:** [August 7, 2017, 8:41am UTC](https://discuss.elastic.co/t/machine-learning-api-disabled/93605 "2017-08-07T08:41:03Z")
hello Team, I installed the x-pack for a trial period of 30 days. Although there is still a week left before the free license expires, the machine learning APIs are reported to be disabled every time I start ElasticSea… --- ## [Beat.name not populated with logstash output](https://discuss.elastic.co/t/beat-name-not-populated-with-logstash-output/86419)
**Author:** [@christiaanvanaken](https://discuss.elastic.co/u/christiaanvanaken)\ **Replies:** 7\ **Last updated:** [May 24, 2017, 7:47pm UTC](https://discuss.elastic.co/t/beat-name-not-populated-with-logstash-output/86419 "2017-05-24T19:47:02Z")
Data from Metricbeat is send to my central Logstash server and from there the output goes to Elasticsearch. If I do this, the field beat.name is always empty. If I change the Metricbeat configuration to send it to Elasti… --- ## [Logstash and Kibana Visualization: A Simple Flag](https://discuss.elastic.co/t/logstash-and-kibana-visualization-a-simple-flag/64382)
**Author:** [@Mike\_Thoma](https://discuss.elastic.co/u/Mike_Thoma)\ **Replies:** 7\ **Last updated:** [November 1, 2016, 9:18pm UTC](https://discuss.elastic.co/t/logstash-and-kibana-visualization-a-simple-flag/64382 "2016-11-01T21:18:48Z")
WARNING: extreme ELK newbie.... Good afternoon ELK friends, I am extremely new to ELK... and I apologize in advanced if any of my questions seem elementary. What I'm trying to do, is simply visualize in Kibana fro… --- ## [Can't get disk information (Windows) - Metricbeat 7.12.0](https://discuss.elastic.co/t/cant-get-disk-information-windows-metricbeat-7-12-0/270735)
**Author:** [@ruivit](https://discuss.elastic.co/u/ruivit)\ **Replies:** 3\ **Last updated:** [May 11, 2021, 8:42am UTC](https://discuss.elastic.co/t/cant-get-disk-information-windows-metricbeat-7-12-0/270735 "2021-05-11T08:42:28Z")
Hi everyone. After a couple of minutes searching and trying out solutions, I still can't get information about the filesystem and fsstat of, for example of the C drive on my Windows Server. Tried the following … --- ## [APM transactions not showing in Kibana after upgrade from 7.5.0 to 7.5.2](https://discuss.elastic.co/t/apm-transactions-not-showing-in-kibana-after-upgrade-from-7-5-0-to-7-5-2/219269)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 3\ **Last updated:** [February 21, 2020, 2:25pm UTC](https://discuss.elastic.co/t/apm-transactions-not-showing-in-kibana-after-upgrade-from-7-5-0-to-7-5-2/219269 "2020-02-21T14:25:57Z")
This is to troubleshoot this issue in GitHub - You can find more information here: https://github.com/elastic/apm/issues/211 Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent lang… --- ## [Timestamp replace not working](https://discuss.elastic.co/t/timestamp-replace-not-working/93350)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 8\ **Last updated:** [July 18, 2017, 7:34am UTC](https://discuss.elastic.co/t/timestamp-replace-not-working/93350 "2017-07-18T07:34:03Z")
Hi, I understand this might be a very common question asked but I couldn't find any answer that addressed my issue. Here it goes. I have a log message as shown below that I am publishing from Filebeats into Logstash. 2… --- ## [How to serialize SearchRequest?](https://discuss.elastic.co/t/how-to-serialize-searchrequest/282793)
**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\ **Replies:** 6\ **Last updated:** [September 1, 2021, 8:33am UTC](https://discuss.elastic.co/t/how-to-serialize-searchrequest/282793 "2021-09-01T08:33:57Z")
Hi, I'm new to elastic search, I need to log SearchRequest and use them later for testing/analysis purpose, what's the best practice to serialize/deserialize a SearchRequest in Java? Thanks! --- ## [Logstash filter basted on log file age](https://discuss.elastic.co/t/logstash-filter-basted-on-log-file-age/241350)
**Author:** [@Bader](https://discuss.elastic.co/u/Bader)\ **Replies:** 6\ **Last updated:** [July 17, 2020, 4:16pm UTC](https://discuss.elastic.co/t/logstash-filter-basted-on-log-file-age/241350 "2020-07-17T16:16:48Z")
Hello. I am running ELK 6.6 on a CentOS 7 box. I have filebeat configured on a Windows machine to forward specific logs to Logstash. The problem I have is that my Logstash filter has a throttling mechanism setup as to … --- ## [Index URLs in Elasticsearch and make them clickable in Kibana](https://discuss.elastic.co/t/index-urls-in-elasticsearch-and-make-them-clickable-in-kibana/208738)
**Author:** [@Steztric](https://discuss.elastic.co/u/Steztric)\ **Replies:** 0\ **Last updated:** [November 20, 2019, 4:20pm UTC](https://discuss.elastic.co/t/index-urls-in-elasticsearch-and-make-them-clickable-in-kibana/208738 "2019-11-20T16:20:18Z")
I am working on a .NET project so I am using NEST. I want to index an object that has a URL property. I want to index it in such a way that Kibana recognises that it is a URL and allows me to click on it to open the URL … --- ## [Custom Realm Set Security permissions](https://discuss.elastic.co/t/custom-realm-set-security-permissions/127482)
**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\ **Replies:** 0\ **Last updated:** [April 10, 2018, 12:46pm UTC](https://discuss.elastic.co/t/custom-realm-set-security-permissions/127482 "2018-04-10T12:46:41Z")
My custom realm x-pack plugin makes an authorization attempt over HTTP to an external user-store. This worked okay in previous versions of x-pack. However, x-pack security permissions may have been re-organized slightly … --- ## [Failed to finalise snapshot with s3 compatible service](https://discuss.elastic.co/t/failed-to-finalise-snapshot-with-s3-compatible-service/52325)
**Author:** [@suryatech](https://discuss.elastic.co/u/suryatech)\ **Replies:** 0\ **Last updated:** [June 9, 2016, 11:58am UTC](https://discuss.elastic.co/t/failed-to-finalise-snapshot-with-s3-compatible-service/52325 "2016-06-09T11:58:36Z")
ES Version: 1.5.2 Cloud AWS Plugin: 2.5.1 I found the following in my logs, \[2016-06-09 17:13:42,589\]\[INFO \]\[snapshots \] \[redacted\] snapshot \[s3\_dev\_backup:v4\_2\] is done \[2016-06-09 17:13:42,910\]\[WARN … --- ## [Elasticsearch snapshot restoration error for system indices](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 5\ **Last updated:** [October 27, 2022, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138 "2022-10-27T08:49:29Z")
Im trying to restore a snapshot(snapshot of entire cluster) and exclude internal indices as recommended in documentation (Restore a snapshot | Elasticsearch Guide \[7.17\] | Elastic ) Although this method is supposed to b… --- ## [Watcher parse an array](https://discuss.elastic.co/t/watcher-parse-an-array/220777)
**Author:** [@cmiscloni](https://discuss.elastic.co/u/cmiscloni)\ **Replies:** 5\ **Last updated:** [February 25, 2020, 9:57am UTC](https://discuss.elastic.co/t/watcher-parse-an-array/220777 "2020-02-25T09:57:25Z")
Hi all, I try to monitor some events with watcher but I can't find the solution to parse the hits of the array below { "watch\_id": "inlined", "node": "\*\*\*\*\*\*\*\*\*\*\*\*\*", "state": "executed", "status": { "state": { "… --- ## [Compare Elasticsearch 2.2.0 vs Elasticsearch 1.5.2](https://discuss.elastic.co/t/compare-elasticsearch-2-2-0-vs-elasticsearch-1-5-2/43729)
**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\ **Replies:** 5\ **Last updated:** [March 8, 2016, 6:56pm UTC](https://discuss.elastic.co/t/compare-elasticsearch-2-2-0-vs-elasticsearch-1-5-2/43729 "2016-03-08T18:56:15Z")
Hi Friends, As I am planning to use Spring Data Elasticsearch, I found that the Spring-data-elasticsearch (1.4.0.BUILD-SNAPSHOT) is compatible with elasticsearch 2.2. But I am not able to apply sparing-data-elasticsear… --- ## ["allocate\_explanation" : "allocation temporarily throttled"](https://discuss.elastic.co/t/allocate-explanation-allocation-temporarily-throttled/276709)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 1:21am UTC](https://discuss.elastic.co/t/allocate-explanation-allocation-temporarily-throttled/276709 "2021-06-23T01:21:10Z")
Hello World! Per Cluster Allocation Explain API | Elasticsearch Guide \[6.8\] | Elastic - I ran and got following: GET /\_cluster/allocation/explain "node\_decision" : "throttled", "deciders" : \[ { … --- ## [Version Conflict Engine Exception : due to simultaneous updates](https://discuss.elastic.co/t/version-conflict-engine-exception-due-to-simultaneous-updates/211244)
**Author:** [@tarunwx](https://discuss.elastic.co/u/tarunwx)\ **Replies:** 0\ **Last updated:** [December 10, 2019, 8:27am UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-due-to-simultaneous-updates/211244 "2019-12-10T08:27:22Z")
I have APIs\[application\] which update documents partially as per the action on the client side. Now the issue that I am facing is "type": "version\_conflict\_engine\_exception", "reason": "\[5dede8546cce890029d8dfa6… --- ## [Elastic Daily Byte(s) Season 5: Search](https://discuss.elastic.co/t/elastic-daily-byte-s-season-5-search/344453)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 3\ **Last updated:** [October 17, 2023, 5:03pm UTC](https://discuss.elastic.co/t/elastic-daily-byte-s-season-5-search/344453 "2023-10-17T17:03:56Z")
:mega: Everyday at 11:45AM (CET - European) during 3 weeks and for only 8 minutes, we are live on YouTube, explaining many things related to text search. It started on Monday with the basics of the Search API, then we c… --- ## [One Master Node removes and adds cluster nodes on regular base](https://discuss.elastic.co/t/one-master-node-removes-and-adds-cluster-nodes-on-regular-base/156700)
**Author:** [@Thomas\_Tomski](https://discuss.elastic.co/u/Thomas_Tomski)\ **Replies:** 2\ **Last updated:** [November 26, 2018, 9:39am UTC](https://discuss.elastic.co/t/one-master-node-removes-and-adds-cluster-nodes-on-regular-base/156700 "2018-11-26T09:39:52Z")
Hello, I have an ELS Cluster running with 8 Data nodes and 3 Master only Nodes. One of these Master nodes remove and adds cluster members on regular base. Here is an extract from the log file: Here, the Node gets rem… --- ## [Can I get the related messages from a Kibana visualization?](https://discuss.elastic.co/t/can-i-get-the-related-messages-from-a-kibana-visualization/101692)
**Author:** [@Dimitry\_Khan](https://discuss.elastic.co/u/Dimitry_Khan)\ **Replies:** 2\ **Last updated:** [September 30, 2017, 1:40pm UTC](https://discuss.elastic.co/t/can-i-get-the-related-messages-from-a-kibana-visualization/101692 "2017-09-30T13:40:17Z")
Wondering if there is a way to get list of the messages (or the JSON documents) related to a Kibana visualization. I understand if I apply the same filter on the "Discover", which is on "Visualization", I can filter the … --- ## [Elasticsearch 7.16.3 Log4j Vulnerability log4j-core-2.11.1.jar still persists](https://discuss.elastic.co/t/elasticsearch-7-16-3-log4j-vulnerability-log4j-core-2-11-1-jar-still-persists/295184)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 10:02pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-3-log4j-vulnerability-log4j-core-2-11-1-jar-still-persists/295184 "2022-02-01T22:02:28Z")
Hi Team, In the wake of recent log4j vulnerability, we have update our production stack to version 7.16.3. Post upgrade, under /usr/share/Elasticsearch/lib/ the log4j-core is of version 2.17.1. However in /etc/elastic… --- ## [Problemas de novato](https://discuss.elastic.co/t/problemas-de-novato/103557)
**Author:** [@davidsoler95](https://discuss.elastic.co/u/davidsoler95)\ **Replies:** 1\ **Last updated:** [October 11, 2017, 3:22pm UTC](https://discuss.elastic.co/t/problemas-de-novato/103557 "2017-10-11T15:22:11Z")
Hola a todos, disculpad nuestra torpeza de novatos. Estamos empezando a usar Kibana para visualizar el resultado de unos logs que tienen este formato \[PRI\]2017-10-03 23:52:14 T2: FPS STATS COV : E=19/M=5923/A=0 (AbdFPS… --- ## [Split multiple lines (using Grok filter) in message so they display as newlines in Kibana](https://discuss.elastic.co/t/split-multiple-lines-using-grok-filter-in-message-so-they-display-as-newlines-in-kibana/136431)
**Author:** [@Warren](https://discuss.elastic.co/u/Warren)\ **Replies:** 3\ **Last updated:** [June 22, 2018, 12:41pm UTC](https://discuss.elastic.co/t/split-multiple-lines-using-grok-filter-in-message-so-they-display-as-newlines-in-kibana/136431 "2018-06-22T12:41:16Z")
So i have a message in Kibana and it looks like this: \[2018-06-07 11:02:33\] testing.ERROR: Class 'App\\Http\\Controllers\\Deal' not found {"exception":"\[object\] (Symfony\\Component\\Debug\\Exception\\FatalThrowableError(code: … --- ## [Logstash JDBC input - no suitable driver](https://discuss.elastic.co/t/logstash-jdbc-input-no-suitable-driver/120701)
**Author:** [@db2oracle](https://discuss.elastic.co/u/db2oracle)\ **Replies:** 3\ **Last updated:** [February 23, 2018, 11:15am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-no-suitable-driver/120701 "2018-02-23T11:15:27Z")
Hi All Does Logstash JDBC plugin ONLY support certain JDBC drivers - and that is fixed in code somehow. Using an input configuration for Mysql - I get past an error relating to no suitable driver - but I am trying to … --- ## [Elasticsearch Default Replica Value](https://discuss.elastic.co/t/elasticsearch-default-replica-value/124593)
**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\ **Replies:** 4\ **Last updated:** [March 19, 2018, 5:09pm UTC](https://discuss.elastic.co/t/elasticsearch-default-replica-value/124593 "2018-03-19T17:09:36Z")
In Elasticsearch 6.2 is there a setting somewhere that assigns a default replica value of "1" somewhere? Our index templates do not assign a replica value, but our indexes are indeed replicated. We would like to know wh… --- ## [How to create an index for Windows Log Event?](https://discuss.elastic.co/t/how-to-create-an-index-for-windows-log-event/43696)
**Author:** [@eso](https://discuss.elastic.co/u/eso)\ **Replies:** 4\ **Last updated:** [March 8, 2016, 6:45am UTC](https://discuss.elastic.co/t/how-to-create-an-index-for-windows-log-event/43696 "2016-03-08T06:45:28Z")
I have a Winlogbeat set up, and I want to set an explicit index for it as follows: output { elasticsearch { if \[type\] == "wineventlog" { hosts =\> \["localhost:9200"\] index =\> "winlogbeat" … --- ## [TraceId and TransactionId stop displaying in Console Appender after running Java application with -javaagent](https://discuss.elastic.co/t/traceid-and-transactionid-stop-displaying-in-console-appender-after-running-java-application-with-javaagent/341323)
**Author:** [@Rishi\_Maharaj](https://discuss.elastic.co/u/Rishi_Maharaj)\ **Replies:** 6\ **Last updated:** [September 7, 2023, 10:49am UTC](https://discuss.elastic.co/t/traceid-and-transactionid-stop-displaying-in-console-appender-after-running-java-application-with-javaagent/341323 "2023-09-07T10:49:01Z")
Version: 7.17 (per local docker-compose Quick start development environment | APM User Guide \[7.17\] | Elastic) Is there anything special in your setup? We were originally using the micrometer-tracing-brave-bridge and ex… --- ## [Elasticsearch Geo queries - Java API](https://discuss.elastic.co/t/elasticsearch-geo-queries-java-api/173501)
**Author:** [@AAHM](https://discuss.elastic.co/u/AAHM)\ **Replies:** 6\ **Last updated:** [April 9, 2019, 8:10am UTC](https://discuss.elastic.co/t/elasticsearch-geo-queries-java-api/173501 "2019-04-09T08:10:38Z")
Hi, We are migrating to ES and need to support different geo queries. We use a geo\_point field type in our mapping. I can see that ES supports geo\_bounding\_box & geo\_distance but I'm trying to figure out whether they ca… --- ## [How to use elasticsearch sliced scroll with multiprocessing in python?](https://discuss.elastic.co/t/how-to-use-elasticsearch-sliced-scroll-with-multiprocessing-in-python/283108)
**Author:** [@Prem\_George](https://discuss.elastic.co/u/Prem_George)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 1:36am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-sliced-scroll-with-multiprocessing-in-python/283108 "2021-09-02T01:36:49Z")
I'm pulling data from elastic search using python client scroll id and appending in a dataframe as follows import pandas as pd from elasticsearch import Elasticsearch es = Elasticsearch(\[{'host': 'localhost', 'port': 92… --- ## [Sum network traffic](https://discuss.elastic.co/t/sum-network-traffic/159405)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 7\ **Last updated:** [December 18, 2018, 7:57am UTC](https://discuss.elastic.co/t/sum-network-traffic/159405 "2018-12-18T07:57:06Z")
Hi, Since this issue has been closed by @jsoriano I'm asking for a solution here. I was just trying out Metricbeat to see if I can log outgoing traffic in an LXC container. I couldn't specify other option than the inte… --- ## [Could not locate that index-pattern (id: metricbeat-\*),](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat/159951)
**Author:** [@sluceri](https://discuss.elastic.co/u/sluceri)\ **Replies:** 1\ **Last updated:** [December 12, 2018, 10:40pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-id-metricbeat/159951 "2018-12-12T22:40:06Z")
We are using elk stack for log parsing with filebeat. We are now trying to use metricbeat (version 6.2.4), dashboards () imported with metricbeat setup --dashboards Import is ok but all non experimental views gives fo… --- ## [What are differences between Beats and jdbc plugin?](https://discuss.elastic.co/t/what-are-differences-between-beats-and-jdbc-plugin/70654)
**Author:** [@Viven7512](https://discuss.elastic.co/u/Viven7512)\ **Replies:** 1\ **Last updated:** [January 5, 2017, 2:06pm UTC](https://discuss.elastic.co/t/what-are-differences-between-beats-and-jdbc-plugin/70654 "2017-01-05T14:06:12Z")
Hi everybody , I am a newbie in the ES's wonderful world so please be indulgent. I am thinking about a import and sync strategy for a microsoft sql data source and if I did not misunderstand, I can use the input plugi… --- ## [Configure index template with custom fields](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777)
**Author:** [@Ganapati\_Basimsetti](https://discuss.elastic.co/u/Ganapati_Basimsetti)\ **Replies:** 8\ **Last updated:** [November 13, 2022, 4:00pm UTC](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777 "2022-11-13T16:00:07Z")
Hello Team, I am trying to configure an index template using custom fields with filebeat 8.2.0. I tried various combinations and read through various topics on the forum and the docs, but I couldn't make it work. The e… --- ## [Restoring from snapshot locally "Some repositories contain errors"](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 4:53pm UTC](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299 "2021-02-15T16:53:26Z")
Hi, I have setup a local version of elasticsearch and kibana. I want to restore an index from production to this local version. I have created an s3 "repository" under Stack Management \> Snapshot and Restore. After c… --- ## [Upgrade from 6.7 to 7.1-auth failure](https://discuss.elastic.co/t/upgrade-from-6-7-to-7-1-auth-failure/182015)
**Author:** [@bkasrai](https://discuss.elastic.co/u/bkasrai)\ **Replies:** 5\ **Last updated:** [May 22, 2019, 4:45pm UTC](https://discuss.elastic.co/t/upgrade-from-6-7-to-7-1-auth-failure/182015 "2019-05-22T16:45:28Z")
Good morning-I recently upgraded from 6.6 to 6.7 in preparation for 7.1 upgrade. I was able to resolve all issues that were reported within upgrade assistant. (the biggest being the native realm yml change) During the up… --- ## [If condition working but not else](https://discuss.elastic.co/t/if-condition-working-but-not-else/175385)
**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\ **Replies:** 5\ **Last updated:** [April 5, 2019, 7:15am UTC](https://discuss.elastic.co/t/if-condition-working-but-not-else/175385 "2019-04-05T07:15:05Z")
I have a random log file which contain diff data, I have created fields in it using mutate filter, my if conditions are working but not my else conditions working. log line : 90-50-31: ill ill you are You if \[ty\] =~ "Y… --- ## [Watch - Unique count](https://discuss.elastic.co/t/watch-unique-count/122669)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 5\ **Last updated:** [March 15, 2018, 9:03pm UTC](https://discuss.elastic.co/t/watch-unique-count/122669 "2018-03-15T21:03:27Z")
Hi All, Could any one help me to get this watch done. I was trying to execute a watch for the condition,when a unique count of event\_data.TargetUserName has more than 4 entries in 24 hours { "trigger": { "schedule… --- ## [Show searchbar filter in "shared iframe" kibana 5.4](https://discuss.elastic.co/t/show-searchbar-filter-in-shared-iframe-kibana-5-4/87424)
**Author:** [@mdiserio](https://discuss.elastic.co/u/mdiserio)\ **Replies:** 5\ **Last updated:** [June 5, 2017, 8:01am UTC](https://discuss.elastic.co/t/show-searchbar-filter-in-shared-iframe-kibana-5-4/87424 "2017-06-05T08:01:16Z")
Hello, i want to show the filter bar when i'm shared a dashboard, with an iframe. How can i do this? Can i fix modifing the iframe URL? If yes, how can i do it? Thanks --- ## [Type conflict](https://discuss.elastic.co/t/type-conflict/180088)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 1:42pm UTC](https://discuss.elastic.co/t/type-conflict/180088 "2019-05-10T13:42:45Z")
Hi there I got type conflict in kibana when new month started. here is my scenario. I use elapsed filter to get elapsed\_time in logstash. But later I added one grok pattern like %{DATA:elapsed\_time} using same field … --- ## [Dynamically update filebeat filebeat.yml file](https://discuss.elastic.co/t/dynamically-update-filebeat-filebeat-yml-file/144467)
**Author:** [@debayo](https://discuss.elastic.co/u/debayo)\ **Replies:** 3\ **Last updated:** [August 16, 2018, 7:34pm UTC](https://discuss.elastic.co/t/dynamically-update-filebeat-filebeat-yml-file/144467 "2018-08-16T19:34:55Z")
Hello guys kindly take a look at this question on https://stackoverflow.com/questions/51854887/dynamically-update-filebeat-config-yml-file --- ## [IndexOutOfBoundsException in X-Pack 5.3](https://discuss.elastic.co/t/indexoutofboundsexception-in-x-pack-5-3/81709)
**Author:** [@wyukawa](https://discuss.elastic.co/u/wyukawa)\ **Replies:** 3\ **Last updated:** [April 11, 2017, 8:58am UTC](https://discuss.elastic.co/t/indexoutofboundsexception-in-x-pack-5-3/81709 "2017-04-11T08:58:41Z")
Hi, I use X-Pack 5.3. But the following error occurred. \[2017-04-09T09:00:51,252\]\[ERROR\]\[o.e.x.m.c.n.NodeStatsCollector\] \[...\] collector \[node-stats-collector\] failed to collect data java.lang.IndexOutOfBoundsException… --- ## [Dealing with deleted documents](https://discuss.elastic.co/t/dealing-with-deleted-documents/24132)
**Author:** [@mahdouch](https://discuss.elastic.co/u/mahdouch)\ **Replies:** 3\ **Last updated:** [June 23, 2015, 9:12pm UTC](https://discuss.elastic.co/t/dealing-with-deleted-documents/24132 "2015-06-23T21:12:03Z")
Hello, I have a production system that is under a high indexing churn (mostly updates/inserts, very infrequent deletes). I have been trying to tweak the system to keep the percentage of deleted document stable. Right n… --- ## [Shards in UNASSIGNED CLUSTER\_RECOVERED even after full restart. How to fix](https://discuss.elastic.co/t/shards-in-unassigned-cluster-recovered-even-after-full-restart-how-to-fix/76392)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 11:49am UTC](https://discuss.elastic.co/t/shards-in-unassigned-cluster-recovered-even-after-full-restart-how-to-fix/76392 "2017-02-24T11:49:04Z")
Hi, I have many shards which are in the state UNASSIGNED CLUSTER\_RECOVERED . How to fix this ? orcl\_es\_defaultindex\_h92cplus 4 p UNASSIGNED CLUSTER\_RECOVERED orcl\_es\_defaultindex\_h92cplus 1 p UNASSIGNED CLUSTER\_RE… --- ## [Unhealthy kibana instance](https://discuss.elastic.co/t/unhealthy-kibana-instance/276725)
**Author:** [@Ashvin\_Bhutekar](https://discuss.elastic.co/u/Ashvin_Bhutekar)\ **Replies:** 4\ **Last updated:** [June 28, 2021, 3:59am UTC](https://discuss.elastic.co/t/unhealthy-kibana-instance/276725 "2021-06-28T03:59:09Z")
Unhealthy deployment, NO kibana instances are running. I am facing this issue after editing configuration in yml file. I changed edits back to the original configurations but still kibana instance is down. --- ## [Cloned/Split Indexes Take Double Disk Space When Increasing Shards](https://discuss.elastic.co/t/cloned-split-indexes-take-double-disk-space-when-increasing-shards/254342)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 1:32pm UTC](https://discuss.elastic.co/t/cloned-split-indexes-take-double-disk-space-when-increasing-shards/254342 "2020-11-05T13:32:43Z")
Currently I have some large index's (100GB - 500GB) that have been allocated 5 shards. I would like to increase these to 10 - 20 shards each. If I use the Split API or Clone API it takes 1-2 minutes for the new index t… --- ## [Not getting logs from filebeat at logstash](https://discuss.elastic.co/t/not-getting-logs-from-filebeat-at-logstash/56402)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 4\ **Last updated:** [July 27, 2016, 2:17pm UTC](https://discuss.elastic.co/t/not-getting-logs-from-filebeat-at-logstash/56402 "2016-07-27T14:17:47Z")
There are some sample apache logs in folder listed in paths, but still they not going to logstash Here is my configuration, filebeat: filebeat: prospectors: - paths: - /home/saurabh/sample-log/\*… --- ## [Kibana user session tracking](https://discuss.elastic.co/t/kibana-user-session-tracking/186226)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 2\ **Last updated:** [June 25, 2019, 12:58pm UTC](https://discuss.elastic.co/t/kibana-user-session-tracking/186226 "2019-06-25T12:58:26Z")
I have three questions. I want to track user actions in Kibana. However, the session ID is changed for each request. (I use Kibana6.7.0) First, The session id seems to be encrypted, is that correct? If so, how shou… --- ## [Solved - Duplicate field data problem and timestamp question](https://discuss.elastic.co/t/solved-duplicate-field-data-problem-and-timestamp-question/136590)
**Author:** [@mikewitters](https://discuss.elastic.co/u/mikewitters)\ **Replies:** 2\ **Last updated:** [June 20, 2018, 11:06am UTC](https://discuss.elastic.co/t/solved-duplicate-field-data-problem-and-timestamp-question/136590 "2018-06-20T11:06:02Z")
I had an invalid date format so it was unable to parse the date given the format I was applying. Timestamp Question: Given the configs and log messages below, how would I go about making the timestamp field in my log m… [Previous page](https://discuss.elastic.co/top.md?page=791&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=793&per_page=50&period=all)