# Top **URL:** https://discuss.elastic.co/top.md?page=793&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 794 --- ## [Error sending logs - Failed to publish events caused by: EOF](https://discuss.elastic.co/t/error-sending-logs-failed-to-publish-events-caused-by-eof/75178)
**Author:** [@reeno](https://discuss.elastic.co/u/reeno)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 8:47am UTC](https://discuss.elastic.co/t/error-sending-logs-failed-to-publish-events-caused-by-eof/75178 "2017-02-16T08:47:38Z")
Hi, Seems a few people have this issue and different things resolve for different users - I have read a lot of topics and tried many things but I am still unable to get my windows eventlogs to elsaticsearh. Note I am … --- ## [How to get rid of nested field and other issues](https://discuss.elastic.co/t/how-to-get-rid-of-nested-field-and-other-issues/264945)
**Author:** [@jkost](https://discuss.elastic.co/u/jkost)\ **Replies:** 6\ **Last updated:** [February 20, 2021, 6:17pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-nested-field-and-other-issues/264945 "2021-02-20T18:17:25Z")
Hallo, I 'm using logstash 7.11 and my data have the following format: { field1: ..., field2: ..., aList: \[ { Id ... }, { fielda1 ... }, { fielda2 ... }, { fielda2 ... }, … --- ## [Output syslog plugin \[Unable to load plugin\]](https://discuss.elastic.co/t/output-syslog-plugin-unable-to-load-plugin/344676)
**Author:** [@ans\_k](https://discuss.elastic.co/u/ans_k)\ **Replies:** 5\ **Last updated:** [October 20, 2023, 6:17pm UTC](https://discuss.elastic.co/t/output-syslog-plugin-unable-to-load-plugin/344676 "2023-10-20T18:17:05Z")
Hello, I followed this documentation : to install offline output syslog plugin in my machine, the plugin is successfully installed, but when i try to call syslog as output in my config file (logstash), i got "Unable … --- ## [Es-hadoop connector advantages over transport API](https://discuss.elastic.co/t/es-hadoop-connector-advantages-over-transport-api/27451)
**Author:** [@yairtheone](https://discuss.elastic.co/u/yairtheone)\ **Replies:** 5\ **Last updated:** [August 18, 2015, 10:01am UTC](https://discuss.elastic.co/t/es-hadoop-connector-advantages-over-transport-api/27451 "2015-08-18T10:01:17Z")
Hi, what are the advantages , if any , to use the es-hadoop connector and not the es client http API (transportclient)? i am currently using the transportclient and think about moving to spark , so is this easily transfe… --- ## [Index River Alternate](https://discuss.elastic.co/t/index-river-alternate/24148)
**Author:** [@ESUser10](https://discuss.elastic.co/u/ESUser10)\ **Replies:** 5\ **Last updated:** [June 23, 2015, 12:00pm UTC](https://discuss.elastic.co/t/index-river-alternate/24148 "2015-06-23T12:00:25Z")
Hi. In Elasticsearch 1.6 River are deprecated. I use the FS-River Plugin in ES 1.3 to indexing a filesystem. The Docu for ES 1.6 write that use the Java API. But I do not know how can with this api to scan a file system … --- ## [Help with this query (combine term and range)](https://discuss.elastic.co/t/help-with-this-query-combine-term-and-range/236431)
**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 6:48am UTC](https://discuss.elastic.co/t/help-with-this-query-combine-term-and-range/236431 "2020-06-10T06:48:55Z")
When I run this query with range I get results: { "query":{ "range":{ "crawled":{ "lt":1591666432 } }, }, "from":0, "size":1 … --- ## [ElasticSearch 2.3.2 CORS](https://discuss.elastic.co/t/elasticsearch-2-3-2-cors/48587)
**Author:** [@Kleber\_Rocha](https://discuss.elastic.co/u/Kleber_Rocha)\ **Replies:** 7\ **Last updated:** [May 3, 2016, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-2-cors/48587 "2016-05-03T06:09:19Z")
I still get this error when trying to use CORS. \[2016-04-27 15:57:16,312\]\[WARN \]\[http.netty \] \[ticket\_node\_1\_data\] Caught exception while handling client http traffic, closing connection \[id: 0x246f9cb0, … --- ## [Server error bound or publishing to a non-loopback during ES start](https://discuss.elastic.co/t/server-error-bound-or-publishing-to-a-non-loopback-during-es-start/78100)
**Author:** [@agrawalsaurabh](https://discuss.elastic.co/u/agrawalsaurabh)\ **Replies:** 4\ **Last updated:** [March 10, 2017, 3:02pm UTC](https://discuss.elastic.co/t/server-error-bound-or-publishing-to-a-non-loopback-during-es-start/78100 "2017-03-10T15:02:50Z")
Hi, I am parsing apache log file using fielbeat/logstash and pushing it to ES. Everything is installed on one server which is LINUX SERVER. When starting ES, we are getting the following error \[2017-03-10T11:22:43,23… --- ## [How to Cleanly Recover After Crash](https://discuss.elastic.co/t/how-to-cleanly-recover-after-crash/18794)
**Author:** [@Didjit](https://discuss.elastic.co/u/Didjit)\ **Replies:** 4\ **Last updated:** [July 25, 2014, 12:57am UTC](https://discuss.elastic.co/t/how-to-cleanly-recover-after-crash/18794 "2014-07-25T00:57:13Z")
I've ran into some issues with Elasticsearch crashing on my windows box (most likely my fault). Anyway, is there clean steps to brute force recover? Something like, delete indexes, issue rebuild, wait ..... I do h… --- ## [Xpack.monitoring.history.duration doesn't work](https://discuss.elastic.co/t/xpack-monitoring-history-duration-doesnt-work/88622)
**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\ **Replies:** 2\ **Last updated:** [June 7, 2017, 10:47pm UTC](https://discuss.elastic.co/t/xpack-monitoring-history-duration-doesnt-work/88622 "2017-06-07T22:47:41Z")
I have following settings in my elasticsearch.yml file. What I need is to keep a 90 days history of monitoring index data so I can look back and compare. # xpack settings xpack.monitoring.history.duration: 90d xpack.m… --- ## [Search for phrase, even with missing letter](https://discuss.elastic.co/t/search-for-phrase-even-with-missing-letter/45985)
**Author:** [@mauricioklein](https://discuss.elastic.co/u/mauricioklein)\ **Replies:** 2\ **Last updated:** [March 31, 2016, 7:11pm UTC](https://discuss.elastic.co/t/search-for-phrase-even-with-missing-letter/45985 "2016-03-31T19:11:06Z")
Hello! I've researched a lot about this, but can't figure out a way to do that. I'm searching for a way to match a phrase, even if the words are not in correct order and if some letter is missing in a word (a typo, f… --- ## [Elasticsearch и kibana](https://discuss.elastic.co/t/elasticsearch-kibana/33851)
**Author:** [@Bdfy1](https://discuss.elastic.co/u/Bdfy1)\ **Replies:** 2\ **Last updated:** [November 5, 2015, 7:14pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana/33851 "2015-11-05T19:14:16Z")
Есть 1 индекс и 2 типа: ( например "car" и "details" - они связаны по соотв полю ). Возможно ли визуализировать это как 1 индекс в kibana ? ( т е чтобы данные для анализа были доступны сразу из 2-х типов ) без объединен… --- ## [Spark SQL: count(\*) fetches all data](https://discuss.elastic.co/t/spark-sql-count-fetches-all-data/47242)
**Author:** [@Preeti\_Raj\_Buchhada](https://discuss.elastic.co/u/Preeti_Raj_Buchhada)\ **Replies:** 1\ **Last updated:** [April 13, 2016, 11:59am UTC](https://discuss.elastic.co/t/spark-sql-count-fetches-all-data/47242 "2016-04-13T11:59:56Z")
Hello, I've got some success working with Spark SQL CLI to access our ES data. Environment: ES: 1.3.2 es-hadoop: elasticsearch-hadoop-2.2.0 Spark: spark-1.4.1-bin-hadoop2.6 The pushdown feature is working great! H… --- ## [Kibana service will not start Exit 126](https://discuss.elastic.co/t/kibana-service-will-not-start-exit-126/295286)
**Author:** [@craigothy](https://discuss.elastic.co/u/craigothy)\ **Replies:** 6\ **Last updated:** [January 25, 2022, 10:11pm UTC](https://discuss.elastic.co/t/kibana-service-will-not-start-exit-126/295286 "2022-01-25T22:11:12Z")
Upon trying to start kibana 7.16.3 after a fresh successful install on rhel 8, I am getting the following errors. Any ideas on what the cause could be. Thank you so much for any help. \> \[root@attack-range-elastic-server… --- ## [Error: Could not find or load main class Files - Logstash installation failed](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-files-logstash-installation-failed/174473)
**Author:** [@Sikha\_Arun](https://discuss.elastic.co/u/Sikha_Arun)\ **Replies:** 3\ **Last updated:** [March 29, 2019, 1:02pm UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-files-logstash-installation-failed/174473 "2019-03-29T13:02:47Z")
Cannot install logstash on my windows 10 system . Error: Could not find or load main class Files Caused by: java.lang.ClassNotFoundException: Files Logstash.conf file is as follows JAVA\_HOME environment variables… --- ## [DSL sort paramter illegal problem](https://discuss.elastic.co/t/dsl-sort-paramter-illegal-problem/64969)
**Author:** [@Hacksign](https://discuss.elastic.co/u/Hacksign)\ **Replies:** 5\ **Last updated:** [November 7, 2016, 10:27am UTC](https://discuss.elastic.co/t/dsl-sort-paramter-illegal-problem/64969 "2016-11-07T10:27:12Z")
Hi there I'm using elasticsearch-php & upgraded ealsticsearch from 2.3.2 to 5.0.0, and there is something wrong with DSL sort field. PHP code : $dsl = \[ 'from' =\> G('elasticsearch')\['pa… --- ## [Failed to execute operation for shard](https://discuss.elastic.co/t/failed-to-execute-operation-for-shard/46992)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 5\ **Last updated:** [April 13, 2016, 8:26am UTC](https://discuss.elastic.co/t/failed-to-execute-operation-for-shard/46992 "2016-04-13T08:26:56Z")
I am shipping Windows events including auditing events to Elasticsearch using Winlogbeat. It was woking perfect but as soon as I configured two more file servers, their logs are not being reflected in Kibana. I can confi… --- ## [ES not returning expected documents when using sort](https://discuss.elastic.co/t/es-not-returning-expected-documents-when-using-sort/12084)
**Author:** [@Aldo\_Sarmiento](https://discuss.elastic.co/u/Aldo_Sarmiento)\ **Replies:** 5\ **Last updated:** [May 23, 2013, 9:44am UTC](https://discuss.elastic.co/t/es-not-returning-expected-documents-when-using-sort/12084 "2013-05-23T09:44:18Z")
Using a simple {"sort":\[{"first\_name":"asc"}\], "size":20, "from":0}} is returning inconsistent results. When i rebuild the index, everything is returned correctly. However, as soon as i update a document, it no… --- ## [How to view docs.deleted data](https://discuss.elastic.co/t/how-to-view-docs-deleted-data/315459)
**Author:** [@KrishnaCh](https://discuss.elastic.co/u/KrishnaCh)\ **Replies:** 2\ **Last updated:** [September 29, 2022, 2:29pm UTC](https://discuss.elastic.co/t/how-to-view-docs-deleted-data/315459 "2022-09-29T14:29:41Z")
Hi All, In my elastic cluster, I see there are some records in docs.deleted for some of the indices, and I am not sure how to find out who deleted the docs? My 3 node elastic cluster version is 7.16.1 and it is Not an … --- ## [Shards refuse to relocate to different nodes using cluster.routing.allocation.exclude](https://discuss.elastic.co/t/shards-refuse-to-relocate-to-different-nodes-using-cluster-routing-allocation-exclude/185950)
**Author:** [@johndaniels](https://discuss.elastic.co/u/johndaniels)\ **Replies:** 2\ **Last updated:** [June 15, 2019, 5:29pm UTC](https://discuss.elastic.co/t/shards-refuse-to-relocate-to-different-nodes-using-cluster-routing-allocation-exclude/185950 "2019-06-15T17:29:00Z")
Hi, I'm trying to remove a server from our ElasticSearch cluster, and in order to do so, I would like to disable allocation from that server/node, and once all the shards have been moved, to shut the server down. I dis… --- ## [Query\_string with wildcard fields sends "Can't parse boolean value"](https://discuss.elastic.co/t/query-string-with-wildcard-fields-sends-cant-parse-boolean-value/271245)
**Author:** [@CLEMENT\_CAZEAUX](https://discuss.elastic.co/u/CLEMENT_CAZEAUX)\ **Replies:** 7\ **Last updated:** [May 4, 2021, 5:40pm UTC](https://discuss.elastic.co/t/query-string-with-wildcard-fields-sends-cant-parse-boolean-value/271245 "2021-05-04T17:40:41Z")
Hello, Basic query such as the documentation here Query string query | Elasticsearch Guide \[7.9\] | Elastic results in error: I've tested with version 7.9, I'll try next with the current 7.12 GET \_search?error\_trace=… --- ## [Filebeat drop\_event has\_fields condition](https://discuss.elastic.co/t/filebeat-drop-event-has-fields-condition/179139)
**Author:** [@arianmotamedi](https://discuss.elastic.co/u/arianmotamedi)\ **Replies:** 1\ **Last updated:** [May 2, 2019, 6:47am UTC](https://discuss.elastic.co/t/filebeat-drop-event-has-fields-condition/179139 "2019-05-02T06:47:21Z")
I have defined two drop\_event conditions to exclude a subset of logs from making it to elastic: processors: - add\_kubernetes\_metadata: in\_cluster: true namespace: ${POD\_NAMESPACE} - drop\_event: whe… --- ## [Connect Sql Server with Elasticsearch](https://discuss.elastic.co/t/connect-sql-server-with-elasticsearch/107195)
**Author:** [@mayank.gaur](https://discuss.elastic.co/u/mayank.gaur)\ **Replies:** 1\ **Last updated:** [November 10, 2017, 3:38pm UTC](https://discuss.elastic.co/t/connect-sql-server-with-elasticsearch/107195 "2017-11-10T15:38:19Z")
I have installed Elasticsearch on my windows system, but I am not able to find a way to connect with SqlServer. Even please help me out for plugin also. --- ## [How to do bulk insert from Hive to Elasticsearch for better data load performance?](https://discuss.elastic.co/t/how-to-do-bulk-insert-from-hive-to-elasticsearch-for-better-data-load-performance/55008)
**Author:** [@ravi\_yadav](https://discuss.elastic.co/u/ravi_yadav)\ **Replies:** 1\ **Last updated:** [July 11, 2016, 3:19pm UTC](https://discuss.elastic.co/t/how-to-do-bulk-insert-from-hive-to-elasticsearch-for-better-data-load-performance/55008 "2016-07-11T15:19:49Z")
I know that there is a bulk API in ES which can load data from a file, stating that file should have metadata/action before actual data for all the records. However my use case is to load data from Hive to ES which i'm… --- ## [APM UI - Not able to search for child span/transaction labels](https://discuss.elastic.co/t/apm-ui-not-able-to-search-for-child-span-transaction-labels/294081)
**Author:** [@eduhenke](https://discuss.elastic.co/u/eduhenke)\ **Replies:** 4\ **Last updated:** [February 3, 2022, 2:58pm UTC](https://discuss.elastic.co/t/apm-ui-not-able-to-search-for-child-span-transaction-labels/294081 "2022-02-03T14:58:12Z")
Kibana version: 7.15.1 Elasticsearch version: 7.15.1 APM Server version: 7.15.1 APM Agent language and version: Node.JS at 3.26.0 Browser version: Chrome Original install method (e.g. download page, yum, deb, from s… --- ## [Maps - how to export](https://discuss.elastic.co/t/maps-how-to-export/178596)
**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\ **Replies:** 4\ **Last updated:** [April 28, 2019, 3:58pm UTC](https://discuss.elastic.co/t/maps-how-to-export/178596 "2019-04-28T15:58:55Z")
Hi, The Maps app in 6.7.1 is awesome, so much that it would be great to be able to export maps configuration and import into other clusters. How is this possible in the solution today? Where is the maps configuration sto… --- ## [Float type rounding issues](https://discuss.elastic.co/t/float-type-rounding-issues/321859)
**Author:** [@etnachtman](https://discuss.elastic.co/u/etnachtman)\ **Replies:** 8\ **Last updated:** [December 23, 2022, 3:50am UTC](https://discuss.elastic.co/t/float-type-rounding-issues/321859 "2022-12-23T03:50:30Z")
I am trying to debug a kibana display issue with an index field of type float. When I look at the data in the index directly using dev tools it appears correctly. "balance": 10000.3675 However when I view the value th… --- ## [Does Kibana need the autorisation of 'unsafe-inline' or 'unsafe-eval' to work properly](https://discuss.elastic.co/t/does-kibana-need-the-autorisation-of-unsafe-inline-or-unsafe-eval-to-work-properly/234390)
**Author:** [@Otmane\_Faouzi](https://discuss.elastic.co/u/Otmane_Faouzi)\ **Replies:** 2\ **Last updated:** [May 28, 2020, 2:41pm UTC](https://discuss.elastic.co/t/does-kibana-need-the-autorisation-of-unsafe-inline-or-unsafe-eval-to-work-properly/234390 "2020-05-28T14:41:03Z")
Hi, we are using ELK stack under version. After a scan of our domain on mozilla observatory, the mozilla tool showed us some Recommendation to make the security of our domain better. So we set int our front (Apache HT… --- ## [How to use another field for query if the first does not exist value](https://discuss.elastic.co/t/how-to-use-another-field-for-query-if-the-first-does-not-exist-value/219291)
**Author:** [@adrianog3](https://discuss.elastic.co/u/adrianog3)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 2:45pm UTC](https://discuss.elastic.co/t/how-to-use-another-field-for-query-if-the-first-does-not-exist-value/219291 "2020-02-14T14:45:28Z")
I would like to do a date filter on a field called "last\_update\_date", however, if the value is "null", I should use another field called "creation\_date". Is there any way to do this? The filter for the "last\_update\_dat… --- ## [Drill down on Canvas for Markdown element](https://discuss.elastic.co/t/drill-down-on-canvas-for-markdown-element/178970)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 3\ **Last updated:** [October 11, 2019, 1:09pm UTC](https://discuss.elastic.co/t/drill-down-on-canvas-for-markdown-element/178970 "2019-10-11T13:09:09Z")
Since there was no reply create a new topic. I was looking for a drill-down option on canvas Markdown widget. I don't see an option for drill down. Is it that I can only enable drill down by using Link or I can setup a… --- ## [\[SOLVED\] Mutate string to integer when field type is already integer](https://discuss.elastic.co/t/solved-mutate-string-to-integer-when-field-type-is-already-integer/256825)
**Author:** [@nnet](https://discuss.elastic.co/u/nnet)\ **Replies:** 5\ **Last updated:** [November 27, 2020, 4:29am UTC](https://discuss.elastic.co/t/solved-mutate-string-to-integer-when-field-type-is-already-integer/256825 "2020-11-27T04:29:27Z")
Hi, using ELK 5.6.16 on Ubuntu 16.04. I'm trying to figure out a way to ingest json where a field learn is of type integer. Once in a while an event will come in and that field's value is not an integer but instead a st… --- ## [Main ERROR ESJsonLayout contains an invalid element or a ttribute "esmessagefields"](https://discuss.elastic.co/t/main-error-esjsonlayout-contains-an-invalid-element-or-a-ttribute-esmessagefields/216752)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 5\ **Last updated:** [January 28, 2020, 9:00am UTC](https://discuss.elastic.co/t/main-error-esjsonlayout-contains-an-invalid-element-or-a-ttribute-esmessagefields/216752 "2020-01-28T09:00:36Z")
Hello, I have ES cluster with version 7.4.2. and i have version 7.3.1 also. ES clustering is working fine. But when i am trying to start ES services for version 7.3.1 . I am getting an error: Java HotSpot(TM) 64-Bit… --- ## [How to high level rest client request request nodes stats URGENT!](https://discuss.elastic.co/t/how-to-high-level-rest-client-request-request-nodes-stats-urgent/170324)
**Author:** [@khergner](https://discuss.elastic.co/u/khergner)\ **Replies:** 5\ **Last updated:** [March 1, 2019, 5:53am UTC](https://discuss.elastic.co/t/how-to-high-level-rest-client-request-request-nodes-stats-urgent/170324 "2019-03-01T05:53:28Z")
Hi, I want to use high rest client for metric collector on java. There is a url (http://172.\*\*\*\*:9200//\_nodes/172.28../stats/os). Response about metric data and I read here . How can ı do request? Which can ı use any m… --- ## [Curator and ELK 5.4](https://discuss.elastic.co/t/curator-and-elk-5-4/85687)
**Author:** [@hispeed](https://discuss.elastic.co/u/hispeed)\ **Replies:** 6\ **Last updated:** [May 14, 2017, 7:24pm UTC](https://discuss.elastic.co/t/curator-and-elk-5-4/85687 "2017-05-14T19:24:07Z")
Hi, I have installed curator via RPM package on CentOS 7. I run Elasticsearch 5.4. I want to run curator on it to delete old indices. I have 2 files created. I hope they are correct: ctaction.yml actions: 1: acti… --- ## [Update field on all SIEM detection Rules in one go](https://discuss.elastic.co/t/update-field-on-all-siem-detection-rules-in-one-go/299862)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 5\ **Last updated:** [March 21, 2022, 10:10pm UTC](https://discuss.elastic.co/t/update-field-on-all-siem-detection-rules-in-one-go/299862 "2022-03-21T22:10:29Z")
Hello all, We have created almost 400 + security rule under SIEM tab in Kibana. Now the new requirement come like they need to update one common field present in all the 400 rules. Can any one guide me how to achieve t… --- ## [UDP Input plugin Error: TypeError: can't convert nil into String](https://discuss.elastic.co/t/udp-input-plugin-error-typeerror-cant-convert-nil-into-string/110565)
**Author:** [@akirafei](https://discuss.elastic.co/u/akirafei)\ **Replies:** 6\ **Last updated:** [December 12, 2017, 7:52pm UTC](https://discuss.elastic.co/t/udp-input-plugin-error-typeerror-cant-convert-nil-into-string/110565 "2017-12-12T19:52:45Z")
Once we start sending 200 more messages to UPD input during perf testing, I start seeing below errors and packets get lost. \[2017-12-06T18:46:04,519\]\[ERROR\]\[l.i.udp \] Exception in inputworker {"excepti… --- ## [I want to know the Roles setting for CSV output with Kibana](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649)
**Author:** [@yokoyoko](https://discuss.elastic.co/u/yokoyoko)\ **Replies:** 1\ **Last updated:** [June 16, 2020, 9:43pm UTC](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649 "2020-06-16T21:43:04Z")
I want to create an account dedicated to CSV output from Kibana. To perform the following CSV output operation, What kind of setting should be made in "Management\> Security\> Roles"? ■ CSV output procedure Discover\> … --- ## [Creating an array field with mutate](https://discuss.elastic.co/t/creating-an-array-field-with-mutate/88635)
**Author:** [@nileshgattani](https://discuss.elastic.co/u/nileshgattani)\ **Replies:** 1\ **Last updated:** [June 8, 2017, 7:45pm UTC](https://discuss.elastic.co/t/creating-an-array-field-with-mutate/88635 "2017-06-08T19:45:16Z")
Hi, I am writing logstash filters for log parsing, and at one step I am using elasticsearch input plugin. The elastic search input plugin expects hosts as an array. Now, I am trying to access the hosts values as fi… --- ## [Sort Elasticsearch output in Logstash](https://discuss.elastic.co/t/sort-elasticsearch-output-in-logstash/250723)
**Author:** [@Nikopoulos](https://discuss.elastic.co/u/Nikopoulos)\ **Replies:** 0\ **Last updated:** [October 1, 2020, 4:53pm UTC](https://discuss.elastic.co/t/sort-elasticsearch-output-in-logstash/250723 "2020-10-01T16:53:16Z")
I have 2 logstash pipelines. The first one uploads log lines in elasticsearch using csv filter. These are the columns \[timestamp,machine,application\]. The other pipeline gets data from elasticsearch, sorts them by timest… --- ## [(Docker) Kibana displaying Kibana did not load properly. Check the server output for more information](https://discuss.elastic.co/t/docker-kibana-displaying-kibana-did-not-load-properly-check-the-server-output-for-more-information/67370)
**Author:** [@Brandon\_Mcgrath](https://discuss.elastic.co/u/Brandon_Mcgrath)\ **Replies:** 2\ **Last updated:** [November 28, 2016, 4:21pm UTC](https://discuss.elastic.co/t/docker-kibana-displaying-kibana-did-not-load-properly-check-the-server-output-for-more-information/67370 "2016-11-28T16:21:22Z")
Hi! This morning I installed Elasticsearch and Kibana 5 and it worked first time. After it was up for a few minutes i got the error message: Kibana did not load properly. Check the server output for more information. … --- ## [Create graph with percentage](https://discuss.elastic.co/t/create-graph-with-percentage/47347)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 2\ **Last updated:** [April 14, 2016, 5:57am UTC](https://discuss.elastic.co/t/create-graph-with-percentage/47347 "2016-04-14T05:57:06Z")
Hi , My kibana version is kibana-4.4.2. I want to create a chart (Pai /Vertival/Other ...) that will show the percentage per status for each day. So i can separate the chart by days but how can I show the values for e… --- ## [Install logstash as a service via Powershell](https://discuss.elastic.co/t/install-logstash-as-a-service-via-powershell/34900)
**Author:** [@pedrovac](https://discuss.elastic.co/u/pedrovac)\ **Replies:** 2\ **Last updated:** [November 19, 2015, 1:05am UTC](https://discuss.elastic.co/t/install-logstash-as-a-service-via-powershell/34900 "2015-11-19T01:05:34Z")
Hello. I have a problem. I'm trying to install Logstash as a service in Windows OS via Powershell. I have run.bat file to start logstash: logstash.bat agent -f logstash.conf My PS command looks like: New-Service -… --- ## [Not find java in JAVA\_HOME or bundled for elasticsearch](https://discuss.elastic.co/t/not-find-java-in-java-home-or-bundled-for-elasticsearch/208779)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 3\ **Last updated:** [December 17, 2019, 2:00am UTC](https://discuss.elastic.co/t/not-find-java-in-java-home-or-bundled-for-elasticsearch/208779 "2019-12-17T02:00:55Z")
D:\\ESQELK\\elasticsearch-7.2.0-windows-x86\_64\\elasticsearch-7.2.0\\bin\>elasticsearch "could not find java in JAVA\_HOME or bundled at D:\\ESQELK\\elasticsearch-7.2.0-windows-x86\_64\\elasticsearch-7.2.0\\jdk" and JAVA\_HOME is s… --- ## [Logstash Error with JDBC plugin](https://discuss.elastic.co/t/logstash-error-with-jdbc-plugin/189429)
**Author:** [@LouisP](https://discuss.elastic.co/u/LouisP)\ **Replies:** 3\ **Last updated:** [July 16, 2019, 1:23pm UTC](https://discuss.elastic.co/t/logstash-error-with-jdbc-plugin/189429 "2019-07-16T13:23:46Z")
Hi, I used logstash with elasticsearch for a few days now, everything was working fine: with logstash, I was querying a MySQL table and indexing it in elasticsearch to visualize it in Kibana. Then, logstash stopped worki… --- ## [Fatal Error: "trying to auto create mapping, but dynamic mapping is disabled"](https://discuss.elastic.co/t/fatal-error-trying-to-auto-create-mapping-but-dynamic-mapping-is-disabled/91166)
**Author:** [@pmdaly](https://discuss.elastic.co/u/pmdaly)\ **Replies:** 3\ **Last updated:** [July 6, 2017, 3:51pm UTC](https://discuss.elastic.co/t/fatal-error-trying-to-auto-create-mapping-but-dynamic-mapping-is-disabled/91166 "2017-07-06T15:51:43Z")
I tried searching for the error but couldn't find one similar. I'm using Kibana 4.1 and the elastic search server I'm trying to connect to is 1.7.5 . The full error is below Kibana: Request to Elasticsearch failed: "T… --- ## [Painless Script with date: hour\_minute\_second](https://discuss.elastic.co/t/painless-script-with-date-hour-minute-second/109974)
**Author:** [@fpillo](https://discuss.elastic.co/u/fpillo)\ **Replies:** 1\ **Last updated:** [December 2, 2017, 10:04pm UTC](https://discuss.elastic.co/t/painless-script-with-date-hour-minute-second/109974 "2017-12-02T22:04:50Z")
Hi guys, I have date field with the following format: "start": { "type": "date", "format": "hour\_minute\_second" } Trying to get the field value in a script field using: "doc\['start'\].value" it re… --- ## [How to exclude system indices from all mapping list](https://discuss.elastic.co/t/how-to-exclude-system-indices-from-all-mapping-list/310409)
**Author:** [@DineshNaik](https://discuss.elastic.co/u/DineshNaik)\ **Replies:** 5\ **Last updated:** [July 25, 2022, 12:14pm UTC](https://discuss.elastic.co/t/how-to-exclude-system-indices-from-all-mapping-list/310409 "2022-07-25T12:14:59Z")
Is it possible to not have the special index details in the all mapping result from elastic. for ex. .kibana\_1 index mapping ? curl -XGET "http://localhost:9200/\_mapping" this gives below output: { "plan-index" : { … --- ## [Trying to extract Lucene from Kibana](https://discuss.elastic.co/t/trying-to-extract-lucene-from-kibana/290382)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 5\ **Last updated:** [November 29, 2021, 7:42pm UTC](https://discuss.elastic.co/t/trying-to-extract-lucene-from-kibana/290382 "2021-11-29T19:42:17Z")
Dear all =) When I write KQL in the search bar, while having Google Chrome debugging open, I see a request to bsearch is made with a cryptic response such as eJxEjl1rgzAUhv9Lrr2oijdCb8Za2MB0pnGFj ... == I suppose the… --- ## [Packetbeat on MIPS](https://discuss.elastic.co/t/packetbeat-on-mips/66997)
**Author:** [@tetsuto](https://discuss.elastic.co/u/tetsuto)\ **Replies:** 5\ **Last updated:** [November 28, 2016, 3:20pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997 "2016-11-28T15:20:03Z")
Hi, I'm trying to get Packetbeat up and running on a MIPS device (and open-wrt router). Just wondering if anyone had managed to cross compile to mips before? It would seem that go does crosscompile to MIPs as does li… --- ## [Request Entity Too Large when index file json has size large 100mb](https://discuss.elastic.co/t/request-entity-too-large-when-index-file-json-has-size-large-100mb/202760)
**Author:** [@Vo\_Van\_Huy](https://discuss.elastic.co/u/Vo_Van_Huy)\ **Replies:** 4\ **Last updated:** [October 9, 2019, 8:19am UTC](https://discuss.elastic.co/t/request-entity-too-large-when-index-file-json-has-size-large-100mb/202760 "2019-10-09T08:19:10Z")
How to index file json has size large 100mb with fscrawler and elastic. I use fscrawler 2.6 and elastic 6.8.0. [Previous page](https://discuss.elastic.co/top.md?page=792&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=794&per_page=50&period=all)