# Top **URL:** https://discuss.elastic.co/top.md?page=798&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 799 --- ## [Creating Dashboard with different time range Charts](https://discuss.elastic.co/t/creating-dashboard-with-different-time-range-charts/116532)
**Author:** [@saad](https://discuss.elastic.co/u/saad)\ **Replies:** 1\ **Last updated:** [January 24, 2018, 3:32pm UTC](https://discuss.elastic.co/t/creating-dashboard-with-different-time-range-charts/116532 "2018-01-24T15:32:49Z")
Hi I want to create dashboard with three charts. These charts should visualize data in different time ranges. the first chart should display the last 24hours, the second chart should display data for the last week (7da… --- ## [Field overwrite is not working](https://discuss.elastic.co/t/field-overwrite-is-not-working/107158)
**Author:** [@ou\_snaaksie](https://discuss.elastic.co/u/ou_snaaksie)\ **Replies:** 1\ **Last updated:** [November 10, 2017, 9:13am UTC](https://discuss.elastic.co/t/field-overwrite-is-not-working/107158 "2017-11-10T09:13:32Z")
I want to only keep a certain part of a syslog message as the message. input { udp { port =\> "514" type =\> "syslog-cisco" } tcp { port =\> "514" type =\> "syslog-cisco" } }… --- ## [How do I get statsd to increment a number](https://discuss.elastic.co/t/how-do-i-get-statsd-to-increment-a-number/63826)
**Author:** [@Sam\_Saffron](https://discuss.elastic.co/u/Sam_Saffron)\ **Replies:** 7\ **Last updated:** [October 25, 2016, 9:22am UTC](https://discuss.elastic.co/t/how-do-i-get-statsd-to-increment-a-number/63826 "2016-10-25T09:22:37Z")
I have an output rule for statsd statsd { host =\> "graphite-statsd" port =\> 8125 namespace =\> "" sender =\> "%{backend\_name}" increment =\> \[ "%{http\_st… --- ## [Disable logstash default template creation](https://discuss.elastic.co/t/disable-logstash-default-template-creation/36965)
**Author:** [@jaminvp](https://discuss.elastic.co/u/jaminvp)\ **Replies:** 1\ **Last updated:** [December 13, 2015, 4:46am UTC](https://discuss.elastic.co/t/disable-logstash-default-template-creation/36965 "2015-12-13T04:46:09Z")
Greetings, I have an issue with Logstash constantly creating a template corresponding to one of my indexes, which messes with the parsing of the fields. I have 4 indexes, let's call them "foo","fii","faa","fee". W… --- ## [How can I handling the out of memory error exception?](https://discuss.elastic.co/t/how-can-i-handling-the-out-of-memory-error-exception/10765)
**Author:** [@hoong](https://discuss.elastic.co/u/hoong)\ **Replies:** 2\ **Last updated:** [February 17, 2013, 1:58pm UTC](https://discuss.elastic.co/t/how-can-i-handling-the-out-of-memory-error-exception/10765 "2013-02-17T13:58:36Z")
Hi, ES users!! We're using the Elastic Search to develop web log search engines, our system has 16g memory, and both ES\_MIN\_MEM, and ES\_MAX\_MEM are 8g with \* bootstrap.mlockall=true\* setting. the size of index is… --- ## [How to Properly Use The Roles in values.yaml?](https://discuss.elastic.co/t/how-to-properly-use-the-roles-in-values-yaml/298962)
**Author:** [@lloyd01sanchez12](https://discuss.elastic.co/u/lloyd01sanchez12)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 4:43am UTC](https://discuss.elastic.co/t/how-to-properly-use-the-roles-in-values-yaml/298962 "2022-03-08T04:43:58Z")
Hi Team, I've been having a problem correcting the deprecation warnings related to node.roles: "message": "legacy role settings \[node.data, node.remote\_cluster\_client, node.ingest, node.master, node.ml\] are deprecated,… --- ## [Painless error](https://discuss.elastic.co/t/painless-error/295335)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 4:24pm UTC](https://discuss.elastic.co/t/painless-error/295335 "2022-01-25T16:24:54Z")
Question is easy (and yes I am new to this painfull stuff), what am I doing wrong? { "docs": \[ { "error": { "root\_cause": \[ { "type": "script\_exception", "reason": "… --- ## [Vue.js components for ElasticSearch](https://discuss.elastic.co/t/vue-js-components-for-elasticsearch/128159)
**Author:** [@TrimA74](https://discuss.elastic.co/u/TrimA74)\ **Replies:** 0\ **Last updated:** [April 16, 2018, 9:55am UTC](https://discuss.elastic.co/t/vue-js-components-for-elasticsearch/128159 "2018-04-16T09:55:32Z")
Hello, there is a new library simplifying building great search UIs for ElasticSearch using Vue.js Check out the repo, feedbacks are much needed Thanks --- ## [Now that support for type has been removed in filebeat 6, how to add filters in logstash config?](https://discuss.elastic.co/t/now-that-support-for-type-has-been-removed-in-filebeat-6-how-to-add-filters-in-logstash-config/109671)
**Author:** [@Vivek\_Menon](https://discuss.elastic.co/u/Vivek_Menon)\ **Replies:** 1\ **Last updated:** [November 30, 2017, 6:20am UTC](https://discuss.elastic.co/t/now-that-support-for-type-has-been-removed-in-filebeat-6-how-to-add-filters-in-logstash-config/109671 "2017-11-30T06:20:21Z")
From what I read, filebeat does not honor document\_type anymore (from version 6 onwards) and all \_type gets hardcoded to doc. I read some people getting around this by adding a field called document\_type. Something like… --- ## [Field Filtering and Basic Math With Painless](https://discuss.elastic.co/t/field-filtering-and-basic-math-with-painless/185452)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [June 12, 2019, 8:37pm UTC](https://discuss.elastic.co/t/field-filtering-and-basic-math-with-painless/185452 "2019-06-12T20:37:39Z")
Configuring a bucket script in TSVB and I want to filter on one field and then do some basic math on another. I've looked at the documentation in the Elasticsearch reference but it's not formatted the same as what Kiban… --- ## [How to store @timestamp in UNIX\_MS instead of ISO date format](https://discuss.elastic.co/t/how-to-store-timestamp-in-unix-ms-instead-of-iso-date-format/165571)
**Author:** [@Krishna\_Sunil](https://discuss.elastic.co/u/Krishna_Sunil)\ **Replies:** 4\ **Last updated:** [February 6, 2019, 8:33pm UTC](https://discuss.elastic.co/t/how-to-store-timestamp-in-unix-ms-instead-of-iso-date-format/165571 "2019-02-06T20:33:33Z")
Currently, @timestamp is in ISO date format. I want to store the same date in epochmilli. Sample code : filter { ruby { code =\> "event.set('epochs', ((event.get('@timestamp').to\_f\*1000).to\_i).to\_s)" } date { remove… --- ## [Unable to start Elastic Search after space issue](https://discuss.elastic.co/t/unable-to-start-elastic-search-after-space-issue/102273)
**Author:** [@alexandernomad](https://discuss.elastic.co/u/alexandernomad)\ **Replies:** 4\ **Last updated:** [October 16, 2017, 1:03pm UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search-after-space-issue/102273 "2017-10-16T13:03:20Z")
Hello, We have had ES running for few months now and noticed recently the E drive on Windows was running really low on space. After adding 100GB to the E drive, tried restarting the service and server multiple times but… --- ## [Flatten Array in Ingest Pipeline with Painless](https://discuss.elastic.co/t/flatten-array-in-ingest-pipeline-with-painless/277383)
**Author:** [@nicjp](https://discuss.elastic.co/u/nicjp)\ **Replies:** 2\ **Last updated:** [July 1, 2021, 10:15am UTC](https://discuss.elastic.co/t/flatten-array-in-ingest-pipeline-with-painless/277383 "2021-07-01T10:15:58Z")
Hi all, I'm working on getting some logs onboarded and I'm having an issue with a field that contains Key/Values inside an array. (For reference please see below) { "redis\_cache\_read\_bytes": 741, "format": "json", … --- ## [Updating dates in Painless](https://discuss.elastic.co/t/updating-dates-in-painless/213784)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 2\ **Last updated:** [January 5, 2020, 9:37pm UTC](https://discuss.elastic.co/t/updating-dates-in-painless/213784 "2020-01-05T21:37:31Z")
Hi there today I was a little bit confused with the documentation about the Painless language. My goal was to use the \_update\_by\_query API to correct the year of some date fields. I was happy to read that... Date field… --- ## [Multi-value field search in java](https://discuss.elastic.co/t/multi-value-field-search-in-java/7824)
**Author:** [@chris123](https://discuss.elastic.co/u/chris123)\ **Replies:** 2\ **Last updated:** [June 19, 2012, 3:58pm UTC](https://discuss.elastic.co/t/multi-value-field-search-in-java/7824 "2012-06-19T15:58:19Z")
I am trying to get search results using java. Using elasticsaerch-0.19.0, java 1.6. I have multiple values in one field. When I run curl query everything is fine (result contains 2 'to' and 2 'from' values): Que… --- ## [Org.elasticsearch.common.inject.CreationException: Guice creation errors:](https://discuss.elastic.co/t/org-elasticsearch-common-inject-creationexception-guice-creation-errors/7732)
**Author:** [@Mohit\_Anchlia](https://discuss.elastic.co/u/Mohit_Anchlia)\ **Replies:** 2\ **Last updated:** [May 17, 2012, 1:16am UTC](https://discuss.elastic.co/t/org-elasticsearch-common-inject-creationexception-guice-creation-errors/7732 "2012-05-17T01:16:47Z")
I am using 19.3 elasticsearch and I am getting this error when I run job to index data. org.elasticsearch.common.inject.CreationException: Guice creation errors: 1) Error injecting constructor, java.lang.NoSuchF… --- ## [Follow\_redirects not implemented in http output plugin for Logstash](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824)
**Author:** [@Sergej-Popov](https://discuss.elastic.co/u/Sergej-Popov)\ **Replies:** 5\ **Last updated:** [October 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824 "2021-10-28T07:04:17Z")
I am having difficult time making logstash http output plugin to forward events to http endpoint which returns 307. (no control over that). Redirect needs to be followed to get to the right URL. Docs specify follow\_red… --- ## [ELK 7.6.0-1 Kibana](https://discuss.elastic.co/t/elk-7-6-0-1-kibana/241378)
**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\ **Replies:** 6\ **Last updated:** [July 27, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elk-7-6-0-1-kibana/241378 "2020-07-27T20:20:43Z")
Hello, For some time I have been occassionally seeing Kibana have an error 500 Internal Server Error. Recently it seems to happen more often. I have tried making changes from suggestions for other threads in this comm… --- ## [Determining the cause of data loss](https://discuss.elastic.co/t/determining-the-cause-of-data-loss/113554)
**Author:** [@oguz](https://discuss.elastic.co/u/oguz)\ **Replies:** 6\ **Last updated:** [January 4, 2018, 10:07am UTC](https://discuss.elastic.co/t/determining-the-cause-of-data-loss/113554 "2018-01-04T10:07:44Z")
Hi All, i'm using jdbc plugin to transfer data from postgres to es. My sample data is 6028 records on postgres. I get different number of records transferred to es each time i try. Sometimes all 6028 records gets transf… --- ## [Dealing with high number of deleted documents](https://discuss.elastic.co/t/dealing-with-high-number-of-deleted-documents/347973)
**Author:** [@Dishant\_18](https://discuss.elastic.co/u/Dishant_18)\ **Replies:** 8\ **Last updated:** [November 25, 2023, 6:15pm UTC](https://discuss.elastic.co/t/dealing-with-high-number-of-deleted-documents/347973 "2023-11-25T18:15:55Z")
Hello everyone! We have an elasticsearch index with 40 shards and 1 replica. We index live email data in this ES index - so the volume of deletes is also high! We have 2 data nodes and 3 master nodes in our cluster. For… --- ## [Scripted Field Unique Count of Sum Value](https://discuss.elastic.co/t/scripted-field-unique-count-of-sum-value/254215)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 8\ **Last updated:** [November 9, 2020, 3:19am UTC](https://discuss.elastic.co/t/scripted-field-unique-count-of-sum-value/254215 "2020-11-09T03:19:48Z")
I need to create visualization metric for count of ID of value is 0 I have imported data to elasticsearch And the data in each ID has multiple lines, I would like to sum value by ID. Then Unique Count is a number whose … --- ## [Filbeat tail\_filter Logs 5.4 Version](https://discuss.elastic.co/t/filbeat-tail-filter-logs-5-4-version/90821)
**Author:** [@Pandiyan\_M](https://discuss.elastic.co/u/Pandiyan_M)\ **Replies:** 8\ **Last updated:** [June 29, 2017, 11:45am UTC](https://discuss.elastic.co/t/filbeat-tail-filter-logs-5-4-version/90821 "2017-06-29T11:45:36Z")
Hi, I have installed filebeat on ubuntu and ELK master is also ubuntu. By following Where in my ELK server input.conf input { beats { host =\> "0.0.0.0" port =\> 5443 type =\> weblog #ssl =\> … --- ## [Very long to load prospectors and start harvesting](https://discuss.elastic.co/t/very-long-to-load-prospectors-and-start-harvesting/86625)
**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\ **Replies:** 8\ **Last updated:** [May 29, 2017, 8:07am UTC](https://discuss.elastic.co/t/very-long-to-load-prospectors-and-start-harvesting/86625 "2017-05-29T08:07:04Z")
Hi all, We are encountering a strange behaviour with filebeat. Let me explain our use case as it is not the typical goal of the filebeat log prospector : We use filebeat with 5 log prospectors. Each prospector obs… --- ## [Mettre à jour / remplacer les données de l'index](https://discuss.elastic.co/t/mettre-a-jour-remplacer-les-donnees-de-lindex/223307)
**Author:** [@dbviz](https://discuss.elastic.co/u/dbviz)\ **Replies:** 7\ **Last updated:** [April 3, 2020, 3:40pm UTC](https://discuss.elastic.co/t/mettre-a-jour-remplacer-les-donnees-de-lindex/223307 "2020-04-03T15:40:09Z")
Bonjour, J'ai une entrée sous logstash par commande. La commande est programmée toutes les 5 minutes qui me renvoi des résultats anciens et de nouvelles données (avec des champs dates, user, webservice). Pour éviter le… --- ## [ElasticSearch using SSIS](https://discuss.elastic.co/t/elasticsearch-using-ssis/98202)
**Author:** [@David\_Thomas](https://discuss.elastic.co/u/David_Thomas)\ **Replies:** 1\ **Last updated:** [August 24, 2017, 1:38pm UTC](https://discuss.elastic.co/t/elasticsearch-using-ssis/98202 "2017-08-24T13:38:14Z")
I am new to elasticsearch, I don’t know how can I load data from SQL Server with elasticsearch? its urgent to me so please recommend me the tutorial to explain how? Thank a lot in advance … --- ## [\[ES 5.0\] Simple Query String - highlight issue](https://discuss.elastic.co/t/es-5-0-simple-query-string-highlight-issue/68752)
**Author:** [@evert](https://discuss.elastic.co/u/evert)\ **Replies:** 7\ **Last updated:** [December 25, 2016, 10:34pm UTC](https://discuss.elastic.co/t/es-5-0-simple-query-string-highlight-issue/68752 "2016-12-25T22:34:50Z")
I have some pdf file indexed and I am using simplequery\_string\_ in order to use the very nice features of +, -, | etc. So here is my search script: \[ 'stored\_fields' =\> \['name', 'author', 'editor', 'url'\], … --- ## [Unable to install Kibana - Ubuntu 18.04.5 LTS Bionic - unable to locate package kibana](https://discuss.elastic.co/t/unable-to-install-kibana-ubuntu-18-04-5-lts-bionic-unable-to-locate-package-kibana/250247)
**Author:** [@eliteharbinger42](https://discuss.elastic.co/u/eliteharbinger42)\ **Replies:** 3\ **Last updated:** [September 30, 2020, 11:59am UTC](https://discuss.elastic.co/t/unable-to-install-kibana-ubuntu-18-04-5-lts-bionic-unable-to-locate-package-kibana/250247 "2020-09-30T11:59:50Z")
Hi, Am trying to install Kibana but i get the inable to locate package kibana. I was able to install elasticsearch without any issue and followed the notes on adding the repository etc but it fails for Kibana. Ubuntu … --- ## [SSL Certificates Installing in Elasticsearch](https://discuss.elastic.co/t/ssl-certificates-installing-in-elasticsearch/204953)
**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 11:40pm UTC](https://discuss.elastic.co/t/ssl-certificates-installing-in-elasticsearch/204953 "2019-10-24T23:40:43Z")
I want to install SSL certificates in my elastic search and kibana to make them secure. SSL installation setps link This link i have followed and when i start elastic search . When i commented that pki setting in yaml… --- ## [Metricbeat can not connect to elastic](https://discuss.elastic.co/t/metricbeat-can-not-connect-to-elastic/160487)
**Author:** [@lujiao](https://discuss.elastic.co/u/lujiao)\ **Replies:** 2\ **Last updated:** [December 19, 2018, 1:57am UTC](https://discuss.elastic.co/t/metricbeat-can-not-connect-to-elastic/160487 "2018-12-19T01:57:03Z")
Hello I have install elasticsearch and metricbeat,I have config metricbeat’s output to elastic,but when setup meticbeat, it’s connect to elasticsearch was refused,the Errors is shown below: Exiting: Couldn’t connect t… --- ## [Uploading Shakespeare json to index in Kibana](https://discuss.elastic.co/t/uploading-shakespeare-json-to-index-in-kibana/171554)
**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\ **Replies:** 1\ **Last updated:** [March 8, 2019, 11:10pm UTC](https://discuss.elastic.co/t/uploading-shakespeare-json-to-index-in-kibana/171554 "2019-03-08T23:10:36Z")
Hi, I am trying to upload the Shakespeare json into the Shakespeare index I created. From Kibana, I executed: PUT /shakespeare { "mappings": { "doc": { "properties": { "speaker": {"type": "keyword"}, "play\_name":… --- ## [Elasticsearch: “reason”: “failed to find geo\_point field”](https://discuss.elastic.co/t/elasticsearch-reason-failed-to-find-geo-point-field/51883)
**Author:** [@quadrim](https://discuss.elastic.co/u/quadrim)\ **Replies:** 1\ **Last updated:** [June 11, 2016, 5:00pm UTC](https://discuss.elastic.co/t/elasticsearch-reason-failed-to-find-geo-point-field/51883 "2016-06-11T17:00:10Z")
I am trying to sync mysql data (which changes dynamically) with elasticsearch. I am using logstash for the syncing purpose. I need to filter the list of vehicles in the radius of 1KM for the passed geo\_points. While mak… --- ## [maxDocs different between primary and replica shards](https://discuss.elastic.co/t/maxdocs-different-between-primary-and-replica-shards/14630)
**Author:** [@Klaus\_Brunner](https://discuss.elastic.co/u/Klaus_Brunner)\ **Replies:** 4\ **Last updated:** [April 23, 2015, 9:46am UTC](https://discuss.elastic.co/t/maxdocs-different-between-primary-and-replica-shards/14630 "2015-04-23T09:46:22Z")
We're running Elasticsearch (currently 0.90.6) in what I'd call a "replicated" architecture: our indexes are quite small (tens of thousands of documents) and fit easily on a single machine, so we allocate a single s… --- ## [Advanced JSON input](https://discuss.elastic.co/t/advanced-json-input/322366)
**Author:** [@imsudo](https://discuss.elastic.co/u/imsudo)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 2:08am UTC](https://discuss.elastic.co/t/advanced-json-input/322366 "2023-01-19T02:08:05Z")
I have a data table with data, Metrics, aggregation as count. ( as it shows all the log count) see attached image(if avl) i wish to get only the count of 5xx errors (500-599) in downstreamStatus data field using advanc… --- ## [Account authentication settings must use the keystore](https://discuss.elastic.co/t/account-authentication-settings-must-use-the-keystore/189549)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 5\ **Last updated:** [July 11, 2019, 6:14am UTC](https://discuss.elastic.co/t/account-authentication-settings-must-use-the-keystore/189549 "2019-07-11T06:14:44Z")
Hi, I Am trying to update my elasticsearch 6.7.1 to 7.0 assistant suggest me to change account authentication settings must use the keystore From document i got to know i need to do changes as below mentioned \*\*xpa… --- ## [Unavailable\_shards\_exception](https://discuss.elastic.co/t/unavailable-shards-exception/96314)
**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\ **Replies:** 5\ **Last updated:** [September 25, 2017, 12:59pm UTC](https://discuss.elastic.co/t/unavailable-shards-exception/96314 "2017-09-25T12:59:30Z")
Recientemente parte del cluster sufrio power out, coincidente tambien con el vencimiento de la licencia del XPACK. Al reiniciarlo las shards no se asignan automaticamente. La configuracion en “elasticsearch.yml” ya la co… --- ## [Docker-compose for apm quickstart\[ Done\]](https://discuss.elastic.co/t/docker-compose-for-apm-quickstart-done/362329)
**Author:** [@shalk](https://discuss.elastic.co/u/shalk)\ **Replies:** 6\ **Last updated:** [July 9, 2024, 7:59am UTC](https://discuss.elastic.co/t/docker-compose-for-apm-quickstart-done/362329 "2024-07-09T07:59:06Z")
HI, I try to configure the docker-compose , but i can not add apm-server into kibana. So Is there docker-compose.yml for apm quickstart ? Done i have setup with. GitHub - lizozom/docker-elastic-observability-with-ap… --- ## [Possible to Parse Nested XML Data structures and combine parent with child](https://discuss.elastic.co/t/possible-to-parse-nested-xml-data-structures-and-combine-parent-with-child/167854)
**Author:** [@adiefatlady](https://discuss.elastic.co/u/adiefatlady)\ **Replies:** 6\ **Last updated:** [February 11, 2019, 4:25pm UTC](https://discuss.elastic.co/t/possible-to-parse-nested-xml-data-structures-and-combine-parent-with-child/167854 "2019-02-11T16:25:44Z")
I have a nested xml document with multiple parents and children and i want to break this down to effectively be a linear list like... \ \Child 1\ .... \ so i … --- ## [Logstash Logging](https://discuss.elastic.co/t/logstash-logging/92828)
**Author:** [@Nitin\_gupta](https://discuss.elastic.co/u/Nitin_gupta)\ **Replies:** 6\ **Last updated:** [July 18, 2017, 1:44pm UTC](https://discuss.elastic.co/t/logstash-logging/92828 "2017-07-18T13:44:27Z")
HI , i am trying to enable logging in Logstash . i am using windows version on my desktop Start command logstash.bat -f beats.conf --verbose logstash-5.3.1\\config\\logstash.yml log.level: debug path.logs: C:\\Users\\A… --- ## [Convert duration ms to sec](https://discuss.elastic.co/t/convert-duration-ms-to-sec/288782)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 3\ **Last updated:** [November 10, 2021, 3:24pm UTC](https://discuss.elastic.co/t/convert-duration-ms-to-sec/288782 "2021-11-10T15:24:25Z")
Today i'm searching how to convert a duration field from ms to sec into a line visualization. as i can't change the advanced params or create a scripted field, i'm trying with the "json input" field but i'm not sure it'… --- ## [Override agent.name, or add custom fields to fleet managed agents?](https://discuss.elastic.co/t/override-agent-name-or-add-custom-fields-to-fleet-managed-agents/285073)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 12:37pm UTC](https://discuss.elastic.co/t/override-agent-name-or-add-custom-fields-to-fleet-managed-agents/285073 "2021-09-30T12:37:43Z")
Hi, currently I deploy the \*beats with salt, and in the beats config file, I use to set the name: That name: field then in Elasticsearch/kibana shows up as the agent.name in the indices. This allows me easily to fin… --- ## [An unexpected error occurred! {:error=\>#\](https://discuss.elastic.co/t/an-unexpected-error-occurred-error-argumenterror-setting-hasnt-been-registered/143324)
**Author:** [@Arpit\_Gulati](https://discuss.elastic.co/u/Arpit_Gulati)\ **Replies:** 3\ **Last updated:** [August 8, 2018, 5:37am UTC](https://discuss.elastic.co/t/an-unexpected-error-occurred-error-argumenterror-setting-hasnt-been-registered/143324 "2018-08-08T05:37:04Z")
I update the logstash verion from 2.4.0 to 5.4.0 using a tar file but when I start the logstash using ./bin/logstash -f conf.d/logstash.conf command . I got an error \[FATAL\]\[logstash.runner \] An unexpected erro… --- ## [Snapshot best practices for staging/production scenario](https://discuss.elastic.co/t/snapshot-best-practices-for-staging-production-scenario/29438)
**Author:** [@james\_mtl](https://discuss.elastic.co/u/james_mtl)\ **Replies:** 3\ **Last updated:** [September 18, 2015, 6:54pm UTC](https://discuss.elastic.co/t/snapshot-best-practices-for-staging-production-scenario/29438 "2015-09-18T18:54:19Z")
I have a single-node ES instance which serves as the backend for a web app. Nginx is accessing this node via reverse proxy. Both ES and Nginx are running on the same server. I am trying to set up a staging/production t… --- ## [Kibana is throwing 503 error](https://discuss.elastic.co/t/kibana-is-throwing-503-error/179623)
**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\ **Replies:** 1\ **Last updated:** [May 7, 2019, 7:31am UTC](https://discuss.elastic.co/t/kibana-is-throwing-503-error/179623 "2019-05-07T07:31:34Z")
When i am using curl command to check the kibana status , it says: curl -I http://localhost:5601/status HTTP/1.1 503 Service Unavailable retry-after: 30 content-type: text/html; charset=utf-8 cache-control: no-cache … --- ## [Configure stderr logs](https://discuss.elastic.co/t/configure-stderr-logs/27361)
**Author:** [@NehaSood](https://discuss.elastic.co/u/NehaSood)\ **Replies:** 1\ **Last updated:** [August 14, 2015, 6:02am UTC](https://discuss.elastic.co/t/configure-stderr-logs/27361 "2015-08-14T06:02:27Z")
Hi, I've logstash running on AWS EC2 instances, which I am using to push data to some ElasticSearch instances. Occasionally, I notice a few messages getting lost & not being published to ElasticSearch. I am using a ver… --- ## [Kibana , displaying of hosts takes a lot of time \[ I have only few hosts 6 max\]](https://discuss.elastic.co/t/kibana-displaying-of-hosts-takes-a-lot-of-time-i-have-only-few-hosts-6-max/206004)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 1\ **Last updated:** [November 13, 2019, 10:45am UTC](https://discuss.elastic.co/t/kibana-displaying-of-hosts-takes-a-lot-of-time-i-have-only-few-hosts-6-max/206004 "2019-11-13T10:45:54Z")
Hi All, My kibana interaces displays the status of the machines very very slow, I do not have much hosts, 6 hosts for tesing purpose and it is taking too much time to display, I have added the screen shot for reference … --- ## [Kibana Visualize log data as defined in module in filebeat](https://discuss.elastic.co/t/kibana-visualize-log-data-as-defined-in-module-in-filebeat/93657)
**Author:** [@sarvana\_manikandan](https://discuss.elastic.co/u/sarvana_manikandan)\ **Replies:** 4\ **Last updated:** [July 21, 2017, 6:25am UTC](https://discuss.elastic.co/t/kibana-visualize-log-data-as-defined-in-module-in-filebeat/93657 "2017-07-21T06:25:55Z")
I confifured filebeat to send logs to elasticsearch. I am facing issue in kibana visualizations. I define a pattern in filebeat module and I want to see logs in Discover tab grouped by fields defined in the filebeat modu… --- ## [How to disable routing in parent and child mapping for Elasticsearch?](https://discuss.elastic.co/t/how-to-disable-routing-in-parent-and-child-mapping-for-elasticsearch/10166)
**Author:** [@Jonathan\_Moo](https://discuss.elastic.co/u/Jonathan_Moo)\ **Replies:** 4\ **Last updated:** [December 24, 2012, 5:40pm UTC](https://discuss.elastic.co/t/how-to-disable-routing-in-parent-and-child-mapping-for-elasticsearch/10166 "2012-12-24T17:40:07Z")
I have explicitly disabled routing for my Elasticsearch(ES) mapping: { "chow-clfg": { "\_parent": { "type": "chow-demo" }, "\_routing": { "required": false }, "\_id": { "path": "clfg" }… --- ## [Automate re-index process](https://discuss.elastic.co/t/automate-re-index-process/293876)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 3:46pm UTC](https://discuss.elastic.co/t/automate-re-index-process/293876 "2022-03-02T15:46:26Z")
We are using: elastic operator 1.8 Elasticsearch 7.15.2 Current problem: we have 2 shards for every index and 7 data/masters nodes on Elasticsearch (impossible to scale it by license number), we need to retain 6 days … --- ## [ILM policy is notworking](https://discuss.elastic.co/t/ilm-policy-is-notworking/267891)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 12:07am UTC](https://discuss.elastic.co/t/ilm-policy-is-notworking/267891 "2021-03-23T00:07:34Z")
I'm using ES 7.1... here is my ILM policy: GET \_ilm/policy/el\_metric\_policy { "el\_metric\_policy" : { "version" : 1, "modified\_date" : "2021-03-20T15:53:20.941Z", "policy" : { "phases" : { "h… --- ## [Pass the schedule dynamically to logstash config file](https://discuss.elastic.co/t/pass-the-schedule-dynamically-to-logstash-config-file/254351)
**Author:** [@Shanmuka\_Chowdary](https://discuss.elastic.co/u/Shanmuka_Chowdary)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 9:17am UTC](https://discuss.elastic.co/t/pass-the-schedule-dynamically-to-logstash-config-file/254351 "2020-11-05T09:17:31Z")
I'm Indexing data from mssql using logstash with schedule like below jdbc { jdbc\_driver\_library =\> "C:\\Program Files\\Microsoft JDBC Driver 4.2 for SQL Server\\sqljdbc\_4.2\\enu\\jre8\\sqljdbc42.jar" … [Previous page](https://discuss.elastic.co/top.md?page=797&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=799&per_page=50&period=all)