# Top **URL:** https://discuss.elastic.co/top.md?page=806&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 807 --- ## [Generate CSV : Date Format](https://discuss.elastic.co/t/generate-csv-date-format/139996)
**Author:** [@gaskaj](https://discuss.elastic.co/u/gaskaj)\ **Replies:** 3\ **Last updated:** [July 17, 2018, 6:55pm UTC](https://discuss.elastic.co/t/generate-csv-date-format/139996 "2018-07-17T18:55:53Z")
If we want the raw date format when you generate the CSV how can we get it to stop formatting the viewable July 13th 2018, 14:35:31.000 vs "CreatedDate": "2018-07-13T15:26:29.000+0000"? How can you simply export the raw … --- ## [ESRE class - Python elasticsearch.BadRequestError](https://discuss.elastic.co/t/esre-class-python-elasticsearch-badrequesterror/379540)
**Author:** [@newbieWill](https://discuss.elastic.co/u/newbieWill)\ **Replies:** 2\ **Last updated:** [July 10, 2025, 11:48pm UTC](https://discuss.elastic.co/t/esre-class-python-elasticsearch-badrequesterror/379540 "2025-07-10T23:48:32Z")
Course: Elasticsearch Relevance Engine (ESRE) Engineer Version: 8.11.1 Question: Python Elasticsearch error Hello, I am trying to work through the ESRE class and am stuck at Lab 3.1-1 When I try to run this code: #t… --- ## [Unable to filter for presence of meta fields](https://discuss.elastic.co/t/unable-to-filter-for-presence-of-meta-fields/176715)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 2\ **Last updated:** [April 15, 2019, 10:59pm UTC](https://discuss.elastic.co/t/unable-to-filter-for-presence-of-meta-fields/176715 "2019-04-15T22:59:54Z")
Hi I'm not sure what this means and how should I go about fixing it? I'm using 6.7.1 The following fields are grayed out t \_id nhqbFGoB7LVKCcAvRMhX t \_index winlogbeat-6.7.1-2019.04.13 # \_score 1 t \_type d… --- ## [How to remove only one character from string using GSUB?](https://discuss.elastic.co/t/how-to-remove-only-one-character-from-string-using-gsub/61962)
**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\ **Replies:** 2\ **Last updated:** [October 3, 2016, 11:30pm UTC](https://discuss.elastic.co/t/how-to-remove-only-one-character-from-string-using-gsub/61962 "2016-10-03T23:30:50Z")
Ok, so the issue I have is I want to remove a character once from a field value, and this specific character that I want to remove appears multiple times in the field value. I don't want to remove this character from all… --- ## [Action index. Failed to execute](https://discuss.elastic.co/t/action-index-failed-to-execute/46203)
**Author:** [@fadi](https://discuss.elastic.co/u/fadi)\ **Replies:** 3\ **Last updated:** [April 4, 2016, 12:34pm UTC](https://discuss.elastic.co/t/action-index-failed-to-execute/46203 "2016-04-04T12:34:42Z")
Hello, Am trying to index from Drupal and its not working (Drupal says indexed successfully but nothing indexed really to logstash). I have found this in elasticsearch.log. Any one knows what is this ? Am using Elast… --- ## [Issues faced during ES upgrade from 1.4.2 to 2.3.2](https://discuss.elastic.co/t/issues-faced-during-es-upgrade-from-1-4-2-to-2-3-2/51951)
**Author:** [@supriya](https://discuss.elastic.co/u/supriya)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 10:01am UTC](https://discuss.elastic.co/t/issues-faced-during-es-upgrade-from-1-4-2-to-2-3-2/51951 "2016-06-24T10:01:35Z")
Hi, We had ElasticSearch with 1.4.2 and had code using TransportClient. We are now trying to upgrade to ES 2.3.2 but I am facing several issues with the jar files. This is the code used to connect to ES server usin… --- ## [Simple query string query returning invalid results](https://discuss.elastic.co/t/simple-query-string-query-returning-invalid-results/43022)
**Author:** [@fernandomm](https://discuss.elastic.co/u/fernandomm)\ **Replies:** 6\ **Last updated:** [March 1, 2016, 12:57pm UTC](https://discuss.elastic.co/t/simple-query-string-query-returning-invalid-results/43022 "2016-03-01T12:57:29Z")
I'm using the following query: { "query":{ "filtered":{ "query":{ "simple\_query\_string":{ "query":"subject:\\"mystring\\"" } } } } } F… --- ## [Merge two log file using Elasticsearch script](https://discuss.elastic.co/t/merge-two-log-file-using-elasticsearch-script/40621)
**Author:** [@binurajps](https://discuss.elastic.co/u/binurajps)\ **Replies:** 6\ **Last updated:** [February 4, 2016, 8:11am UTC](https://discuss.elastic.co/t/merge-two-log-file-using-elasticsearch-script/40621 "2016-02-04T08:11:02Z")
Hello Team, Please find below scenarios. File 1: Session\_ID : S001 From\_City\_Name : TYO To\_City\_Name : LAX File 2: Session\_ID : S001 Product\_Id : P001 I want to merge these two log file based on the session ID. … --- ## [Format of kibana server.customResponseHeaders](https://discuss.elastic.co/t/format-of-kibana-server-customresponseheaders/108000)
**Author:** [@pcre](https://discuss.elastic.co/u/pcre)\ **Replies:** 1\ **Last updated:** [November 16, 2017, 11:38pm UTC](https://discuss.elastic.co/t/format-of-kibana-server-customresponseheaders/108000 "2017-11-16T23:38:23Z")
What is the header config file format of the server.customResponseHeaders in the kibana config? I need to include a X-XSS-PROTECTION header. --- ## [公式コンテナイメージを使用した際のX-Packの無効化について](https://discuss.elastic.co/t/x-pack/86805)
**Author:** [@tsukapah](https://discuss.elastic.co/u/tsukapah)\ **Replies:** 1\ **Last updated:** [May 23, 2017, 1:16pm UTC](https://discuss.elastic.co/t/x-pack/86805 "2017-05-23T13:16:34Z")
お世話になります。 Elasticの公式レジストリ(docker.elastic.co/elasticsearch/elasticsearch:5.4.0)を使用してElasticsearchを起動してます。 X-Packを全て無効化したいと考えているのですが、 この場合docker run時に与える環境変数は"xpack.security.enabled=false"だけで良いのでしょうか？ X-Packの各パッケージの設定ド… --- ## [Elasticsearch-Logstash Storage and events per second](https://discuss.elastic.co/t/elasticsearch-logstash-storage-and-events-per-second/67367)
**Author:** [@rpoveda](https://discuss.elastic.co/u/rpoveda)\ **Replies:** 1\ **Last updated:** [November 29, 2016, 10:17am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-storage-and-events-per-second/67367 "2016-11-29T10:17:50Z")
I need to answer some questions I have about the behavior of a couple things. Could you please help me? Logstash-Kafka-Logstash. Logstash 1 For systems that don't allow communication with Kafka I have a Logstash t… --- ## [How to search over all fields and return every document containing that search in elasticsearch?](https://discuss.elastic.co/t/how-to-search-over-all-fields-and-return-every-document-containing-that-search-in-elasticsearch/271533)
**Author:** [@Sander\_Marx](https://discuss.elastic.co/u/Sander_Marx)\ **Replies:** 2\ **Last updated:** [April 30, 2021, 1:01am UTC](https://discuss.elastic.co/t/how-to-search-over-all-fields-and-return-every-document-containing-that-search-in-elasticsearch/271533 "2021-04-30T01:01:55Z")
I have a problem regarding searching in elasticsearch. I have a index with multiple documents with several fields. I want to be able to search over all the fields running a query and want it to return all the documents … --- ## [Horizontally scrollable bar chart](https://discuss.elastic.co/t/horizontally-scrollable-bar-chart/75189)
**Author:** [@GautamP](https://discuss.elastic.co/u/GautamP)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 6:02am UTC](https://discuss.elastic.co/t/horizontally-scrollable-bar-chart/75189 "2017-02-16T06:02:03Z")
Hi, I have a large no. of jobs which I'm representing on the x-axis with their corresponding times on the y axis. As I keep increasing the size of the buckets, all the jobs become stacked beside one another and become … --- ## [Marvel only shows data from master node](https://discuss.elastic.co/t/marvel-only-shows-data-from-master-node/47354)
**Author:** [@kirnberger](https://discuss.elastic.co/u/kirnberger)\ **Replies:** 5\ **Last updated:** [April 20, 2016, 2:11pm UTC](https://discuss.elastic.co/t/marvel-only-shows-data-from-master-node/47354 "2016-04-20T14:11:57Z")
Hi there, we did an updgrade from ES 2.2.1 -\> ES 2.3.1, Kibana 4.4.2 -\> Kibana 4.5.0 and using the latest Marvel version. Agent is installed on each node (incl. license) and after start of Kibana we only get data from t… --- ## [Kibana 7.17.22 / 8.14.0 Security Update (ESA-2024-17)](https://discuss.elastic.co/t/kibana-7-17-22-8-14-0-security-update-esa-2024-17/361508)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 3:27pm UTC](https://discuss.elastic.co/t/kibana-7-17-22-8-14-0-security-update-esa-2024-17/361508 "2024-06-14T15:27:57Z")
Kibana RCE due to chromium type confusion (ESA-2024-17) On March 26, 2024, a type confusion vulnerability was found in WebAssembly in Google Chrome version prior to 123.0.6312.86 which allows a remote attacker to execut… --- ## [Logstash refuses to bind to port 9600](https://discuss.elastic.co/t/logstash-refuses-to-bind-to-port-9600/284183)
**Author:** [@Dan\_Sputnikk](https://discuss.elastic.co/u/Dan_Sputnikk)\ **Replies:** 3\ **Last updated:** [September 14, 2021, 2:04pm UTC](https://discuss.elastic.co/t/logstash-refuses-to-bind-to-port-9600/284183 "2021-09-14T14:04:20Z")
Hi all, Using Logstash 6. I have: http.host: "0.0.0.0" http.port: 9600-9700 xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.hosts: \["http://10.1.96.89:9200", "http://10.1.96.90:9200", "http://10.1.96.9… --- ## [Configure Kibana with default fields](https://discuss.elastic.co/t/configure-kibana-with-default-fields/282253)
**Author:** [@gba8912](https://discuss.elastic.co/u/gba8912)\ **Replies:** 3\ **Last updated:** [August 23, 2021, 5:14pm UTC](https://discuss.elastic.co/t/configure-kibana-with-default-fields/282253 "2021-08-23T17:14:30Z")
Hi all, I made a grok filter to for logstash that created fields in kinbana. This is great but in discover, I am having to add the fields manually every time i load in. Is there a way to make kibana load in the fields a… --- ## [Use ruby variable in if filter](https://discuss.elastic.co/t/use-ruby-variable-in-if-filter/91251)
**Author:** [@kitz99](https://discuss.elastic.co/u/kitz99)\ **Replies:** 3\ **Last updated:** [June 29, 2017, 9:42am UTC](https://discuss.elastic.co/t/use-ruby-variable-in-if-filter/91251 "2017-06-29T09:42:05Z")
I have this logstash config: input { stdin { } } output { elasticsearch { hosts =\> \["localhost:9200"\] } stdout { codec =\> rubydebug } } filter { ruby { code =\> " @@exists\_pattern = \['/collaboratio… --- ## [Mailtracking problem with a self built dashboard](https://discuss.elastic.co/t/mailtracking-problem-with-a-self-built-dashboard/25012)
**Author:** [@HoppeT](https://discuss.elastic.co/u/HoppeT)\ **Replies:** 3\ **Last updated:** [July 8, 2015, 6:32am UTC](https://discuss.elastic.co/t/mailtracking-problem-with-a-self-built-dashboard/25012 "2015-07-08T06:32:33Z")
hey mates, maybe some of you could help me with a problem i'm acutally trying to solve. we're using logstash in combination with logstash-forwarder and elasticsearch to store the data. we're trying to analyze… --- ## [Default Kibana setup logs debug of ES queries to daemon.log](https://discuss.elastic.co/t/default-kibana-setup-logs-debug-of-es-queries-to-daemon-log/81824)
**Author:** [@beatsme](https://discuss.elastic.co/u/beatsme)\ **Replies:** 1\ **Last updated:** [April 10, 2017, 7:04pm UTC](https://discuss.elastic.co/t/default-kibana-setup-logs-debug-of-es-queries-to-daemon-log/81824 "2017-04-10T19:04:45Z")
I have a 5.3.0 Kibana running on Debian 8 from the ES repo. I'm using filebeat to ingest syslog and it seems that every time I'm looking at Kibana it logs "debug" log messages to my daemon.log. This is flooding my Kibana… --- ## [Filtering/querying on script field](https://discuss.elastic.co/t/filtering-querying-on-script-field/21669)
**Author:** [@samatha\_kankipati](https://discuss.elastic.co/u/samatha_kankipati)\ **Replies:** 1\ **Last updated:** [January 16, 2015, 4:22am UTC](https://discuss.elastic.co/t/filtering-querying-on-script-field/21669 "2015-01-16T04:22:04Z")
Is it possible to filter or query on script\_fields. If so, can you provide any example.. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from t… --- ## [Visualize zipcodes on Kibana Maps](https://discuss.elastic.co/t/visualize-zipcodes-on-kibana-maps/251860)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 11:59am UTC](https://discuss.elastic.co/t/visualize-zipcodes-on-kibana-maps/251860 "2020-10-13T11:59:48Z")
Hello everyone, I have csv data with information about users and in particular their zip code. I wanted to know how it was possible to display these zip codes on Kibana Maps knowing that I don't have the longitude and … --- ## [Kibana service start failed](https://discuss.elastic.co/t/kibana-service-start-failed/278566)
**Author:** [@swarali\_vartak](https://discuss.elastic.co/u/swarali_vartak)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 12:55pm UTC](https://discuss.elastic.co/t/kibana-service-start-failed/278566 "2021-07-15T12:55:32Z")
Hi Team, I have standalone server where I downloaded elastic and kibana 7.12.1 in RPM on cent os server After downloading i have install elastic and kibana from below command rpm -i elasticseach-7.12.1-x86\_64.rpm Aft… --- ## [Filebeatでの、収集ログのタグ付けについて](https://discuss.elastic.co/t/filebeat/201375)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [September 30, 2019, 3:23am UTC](https://discuss.elastic.co/t/filebeat/201375 "2019-09-30T03:23:42Z")
filebeatで、複数のログファイルを収集しています。 各ログファイルに、固有のタグをつけたいです。 しかし、現在、kibanaで確認すると どのログにも、「messages, beats\_input\_codec\_plain\_applied」という同じタグが 付き詰まっています。 対処方法を教えていただけないでしょうか？ ■filebeatの設定 paths: - /var/log/filebeat/\*\_filebea… --- ## [How to query empty values of number type and date type fields](https://discuss.elastic.co/t/how-to-query-empty-values-of-number-type-and-date-type-fields/108938)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 2\ **Last updated:** [December 11, 2017, 3:54pm UTC](https://discuss.elastic.co/t/how-to-query-empty-values-of-number-type-and-date-type-fields/108938 "2017-12-11T15:54:25Z")
Hi all..... we have a index having number type field which holds some empty values as well but when we try to filter empty(null) event from kibana discovery we are getting error Discover: \[parsing\_exception\] \[match\] … --- ## [Filebeat - 127.0.0.1:5044: write: connection reset by peer](https://discuss.elastic.co/t/filebeat-127-0-0-1-5044-write-connection-reset-by-peer/84321)
**Author:** [@wb303](https://discuss.elastic.co/u/wb303)\ **Replies:** 2\ **Last updated:** [May 3, 2017, 4:27pm UTC](https://discuss.elastic.co/t/filebeat-127-0-0-1-5044-write-connection-reset-by-peer/84321 "2017-05-03T16:27:34Z")
For some reason, when I have logstash running locally on the same server as the beat service I get constant connection resets. There is no SSL configured and the only input. There is no firewall running. This is the c… --- ## [Does the Elasticsearch Transport Client for Java API support connection pooling?](https://discuss.elastic.co/t/does-the-elasticsearch-transport-client-for-java-api-support-connection-pooling/37610)
**Author:** [@maheshraju](https://discuss.elastic.co/u/maheshraju)\ **Replies:** 2\ **Last updated:** [December 22, 2015, 1:07am UTC](https://discuss.elastic.co/t/does-the-elasticsearch-transport-client-for-java-api-support-connection-pooling/37610 "2015-12-22T01:07:10Z")
Does the Elasticsearch Transport Client for Java API support connection pooling ? I'm using a Spring boot application(elasticsearch repository) that talks to Elasticsearch. --- ## [Forming Index name for Elasticsearch plugin](https://discuss.elastic.co/t/forming-index-name-for-elasticsearch-plugin/258398)
**Author:** [@s0umen](https://discuss.elastic.co/u/s0umen)\ **Replies:** 6\ **Last updated:** [December 14, 2020, 6:18am UTC](https://discuss.elastic.co/t/forming-index-name-for-elasticsearch-plugin/258398 "2020-12-14T06:18:20Z")
I am sending Linux system logs using filebeat to logstash. my "logstash.conf" file is something like below (within double Line). I am trying to name index dynamically using "type" variable. But when I view it in Kibana… --- ## [Multiple bool-should-match phrase query optimization](https://discuss.elastic.co/t/multiple-bool-should-match-phrase-query-optimization/69495)
**Author:** [@dangnh](https://discuss.elastic.co/u/dangnh)\ **Replies:** 6\ **Last updated:** [January 18, 2017, 8:07am UTC](https://discuss.elastic.co/t/multiple-bool-should-match-phrase-query-optimization/69495 "2017-01-18T08:07:48Z")
Hello all, we are now query elasticsearch to get exactly documents which have ID should match one in the ID array. It's smiliar to the following SQL query: SELECT \* FROM myindex WHERE transaction\_id IN (id1, id2, id3… --- ## [Where is the filebeat event log?](https://discuss.elastic.co/t/where-is-the-filebeat-event-log/371789)
**Author:** [@helloworld4](https://discuss.elastic.co/u/helloworld4)\ **Replies:** 5\ **Last updated:** [January 24, 2025, 7:46pm UTC](https://discuss.elastic.co/t/where-is-the-filebeat-event-log/371789 "2025-01-24T19:46:34Z")
I'm getting this error when some log lines are sent to ES by filebeat: "message":"Cannot index event (status=400): dropping event! Look at the event log to view the event and cause." Where can I find that event log? I'… --- ## [Filebeat not sending to Logstash until it's terminated](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash-until-its-terminated/303565)
**Author:** [@alex\_london](https://discuss.elastic.co/u/alex_london)\ **Replies:** 5\ **Last updated:** [April 30, 2022, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash-until-its-terminated/303565 "2022-04-30T17:07:28Z")
I've just started my Elastic Stack adventure and got myself stuck in what must be the simplest problem, but for the life of me cannot figure it out... My environment: Logstash 8.1.3 in Docker (Ubuntu 20.04) Filebeat 8… --- ## [Logstash failing to send to Kafka](https://discuss.elastic.co/t/logstash-failing-to-send-to-kafka/254104)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 5:36am UTC](https://discuss.elastic.co/t/logstash-failing-to-send-to-kafka/254104 "2020-11-05T05:36:16Z")
Hi Team, I am parsing Gihthub Log details from Logstash to Kafka and the logstash keeps throwing the below issue. After a certain time, I need to restart logstash to get rid of those warnings. Once initiating the docke… --- ## [Count in other index based on Current Index field](https://discuss.elastic.co/t/count-in-other-index-based-on-current-index-field/209971)
**Author:** [@Vinothkumar\_Ganeshan](https://discuss.elastic.co/u/Vinothkumar_Ganeshan)\ **Replies:** 5\ **Last updated:** [December 2, 2019, 9:31am UTC](https://discuss.elastic.co/t/count-in-other-index-based-on-current-index-field/209971 "2019-12-02T09:31:00Z")
Scenario: Index - 2019-05\*, 2019-06\*, 2019-07\*, 2019-08\*, 2019-09\* I have ID field in all the index which Contains Millions of documents. I want to analyse, how many id appeared in 2019-05\* is repeated in other … --- ## [ECK on IKS with fluentd. How to deal with secrets](https://discuss.elastic.co/t/eck-on-iks-with-fluentd-how-to-deal-with-secrets/195757)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 5\ **Last updated:** [August 25, 2019, 7:28pm UTC](https://discuss.elastic.co/t/eck-on-iks-with-fluentd-how-to-deal-with-secrets/195757 "2019-08-25T19:28:10Z")
Hello, I'm checking Quickstart | Elastic Cloud on Kubernetes \[2.10\] | Elastic and deployed elasticsearch + kibana on IKS with no major issues. Now I'm trying to deploy fluentd with helm chart helm install stable/fluent… --- ## [ES Indexing take huge time](https://discuss.elastic.co/t/es-indexing-take-huge-time/59511)
**Author:** [@v.kumar](https://discuss.elastic.co/u/v.kumar)\ **Replies:** 5\ **Last updated:** [September 1, 2016, 9:09am UTC](https://discuss.elastic.co/t/es-indexing-take-huge-time/59511 "2016-09-01T09:09:21Z")
Hi All, We are using ES 2.1. I am not sure its related to ES or not. I am getting huge no of list part inital like for(Object object: objects) { Result result = compute(objects); list.add(result); } and lis… --- ## [Groovy & Multiple term filters problem](https://discuss.elastic.co/t/groovy-multiple-term-filters-problem/6451)
**Author:** [@Mark\_Johnson](https://discuss.elastic.co/u/Mark_Johnson)\ **Replies:** 5\ **Last updated:** [January 22, 2012, 1:24am UTC](https://discuss.elastic.co/t/groovy-multiple-term-filters-problem/6451 "2012-01-22T01:24:38Z")
Im using Groovy. With the following query below im getting the error (bold). can anyone tell me where I am going wrong with my query, cheers Class java.lang.NullPointerException Message Cannot invoke… --- ## [How do I set the proxy for logstash plugin install on windows?](https://discuss.elastic.co/t/how-do-i-set-the-proxy-for-logstash-plugin-install-on-windows/167041)
**Author:** [@Freebird](https://discuss.elastic.co/u/Freebird)\ **Replies:** 1\ **Last updated:** [February 5, 2019, 4:57am UTC](https://discuss.elastic.co/t/how-do-i-set-the-proxy-for-logstash-plugin-install-on-windows/167041 "2019-02-05T04:57:54Z")
I'm trying to install the elapsed plug-in and keep getting a connection error. Gooogling reveals that logstash doesn't use the browser proxy. The documentation indicates to 'export' the proxy - but that's a unix comman… --- ## [Unable to see Logstash monitoring info in Kibana UI](https://discuss.elastic.co/t/unable-to-see-logstash-monitoring-info-in-kibana-ui/227420)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 7:10pm UTC](https://discuss.elastic.co/t/unable-to-see-logstash-monitoring-info-in-kibana-ui/227420 "2020-04-10T19:10:01Z")
As per the compatibility matrix, Logstash 5.6.16 is supported with ES and Kibana 6.8.6. However, in my case, while Logstash 5.6.16 is able to push monitoring data to ES 6.8.6, Logstash monitoring details are NOT visible … --- ## [Dynamic alias creation via template](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547)
**Author:** [@Ennui](https://discuss.elastic.co/u/Ennui)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 10:31pm UTC](https://discuss.elastic.co/t/dynamic-alias-creation-via-template/203547 "2019-10-15T22:31:45Z")
Hi, I have indices created by users, where the index name always matches the pattern "xyz.helloworld" (the variable part is xyz) Is there a way to use a template to automatically create an alias xyz for "xyz.helloworld… --- ## [0.19.9 failed to get local cluster state](https://discuss.elastic.co/t/0-19-9-failed-to-get-local-cluster-state/8885)
**Author:** [@Gustavo\_Maia](https://discuss.elastic.co/u/Gustavo_Maia)\ **Replies:** 2\ **Last updated:** [January 5, 2014, 12:48am UTC](https://discuss.elastic.co/t/0-19-9-failed-to-get-local-cluster-state/8885 "2014-01-05T00:48:42Z")
I have one cluster with 12 node (Server), with elasticsearch 0.19.9, and another host with ES client. All the time i have the msg below. 2012-08-29\_18:55:28.32015 \[29 Aug 2012 15:55:28,319\] \[ElasticSearchSea… --- ## [Changing the 1d interval in Visual Builder](https://discuss.elastic.co/t/changing-the-1d-interval-in-visual-builder/87134)
**Author:** [@Addison\_K](https://discuss.elastic.co/u/Addison_K)\ **Replies:** 4\ **Last updated:** [June 2, 2017, 1:07pm UTC](https://discuss.elastic.co/t/changing-the-1d-interval-in-visual-builder/87134 "2017-06-02T13:07:29Z")
I love the new visual builder tool and it has been very helpful but when i set the interval to "1d" it buckets the data in 24 hour periods from 7:00pm - 7:00pm. Its still great for comparing the data to itself but when I… --- ## [What is the best practice to pseudonymize user data?](https://discuss.elastic.co/t/what-is-the-best-practice-to-pseudonymize-user-data/252573)
**Author:** [@elk51211](https://discuss.elastic.co/u/elk51211)\ **Replies:** 5\ **Last updated:** [November 26, 2020, 9:15pm UTC](https://discuss.elastic.co/t/what-is-the-best-practice-to-pseudonymize-user-data/252573 "2020-11-26T21:15:22Z")
What is the recommended approach to deal with logs to be as GDPR compliant as possible? I need to pseudonymize user data. The only resource I found is dated back to march of 2018 in this blog post: https://www.elastic.c… --- ## [IDs query returning incomplete results](https://discuss.elastic.co/t/ids-query-returning-incomplete-results/127934)
**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\ **Replies:** 5\ **Last updated:** [April 18, 2018, 3:01pm UTC](https://discuss.elastic.co/t/ids-query-returning-incomplete-results/127934 "2018-04-18T15:01:36Z")
I have a set of distinct document IDs. I know for sure that these documents exist, because the IDs have been retrieved by some previous queries. Now I'm executing an IDs query for these IDs. However, the first executi… --- ## [How to create a comma separated KQL filter of field values with a colon](https://discuss.elastic.co/t/how-to-create-a-comma-separated-kql-filter-of-field-values-with-a-colon/270487)
**Author:** [@DanielV](https://discuss.elastic.co/u/DanielV)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 3:30pm UTC](https://discuss.elastic.co/t/how-to-create-a-comma-separated-kql-filter-of-field-values-with-a-colon/270487 "2021-04-19T15:30:28Z")
One of the fields of the index I'm querying is 'sessionid' , it also has a sessionid.keyword field variant. Values contain a colon. Examples: 136:11 99:5 What I'm trying to accomplish is a filter in the KQL-query bar… --- ## [Winlogbeat test config got both error and Config OK](https://discuss.elastic.co/t/winlogbeat-test-config-got-both-error-and-config-ok/130885)
**Author:** [@Nickname\_Yu](https://discuss.elastic.co/u/Nickname_Yu)\ **Replies:** 3\ **Last updated:** [May 8, 2018, 8:26am UTC](https://discuss.elastic.co/t/winlogbeat-test-config-got-both-error-and-config-ok/130885 "2018-05-08T08:26:23Z")
I'm installing Winlogbeat on a windows server 2016 DC. When I run winlogbeat test config, it gave both error and Config OK. Is it OK or Error then. winlogbeat.yml file as below winlogbeat.event\_logs: name: Application … --- ## [Monitor HTTPS(SSL) url's](https://discuss.elastic.co/t/monitor-https-ssl-urls/82301)
**Author:** [@suvitt](https://discuss.elastic.co/u/suvitt)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 9:24am UTC](https://discuss.elastic.co/t/monitor-https-ssl-urls/82301 "2017-04-20T09:24:14Z")
Hi, I am trying to monitor the ssl urls and for some reason I seem to have issues getting it to work. heartbeat.monitors: - type: http ##Sample rest api urls: \["http://localhost:8725/api/XXX/YYY"\] check.request.… --- ## [Timelion page is blank](https://discuss.elastic.co/t/timelion-page-is-blank/65279)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 3\ **Last updated:** [November 8, 2016, 5:54pm UTC](https://discuss.elastic.co/t/timelion-page-is-blank/65279 "2016-11-08T17:54:26Z")
Having now upgraded to ES 5.0, Kibana 5.0, and X-Pack 5.0, I see that my Timelion page is blank. What must I do to see data there? Thank you! --- ## [Stuck pending tasks](https://discuss.elastic.co/t/stuck-pending-tasks/43541)
**Author:** [@jasonw](https://discuss.elastic.co/u/jasonw)\ **Replies:** 3\ **Last updated:** [March 4, 2016, 11:56pm UTC](https://discuss.elastic.co/t/stuck-pending-tasks/43541 "2016-03-04T23:56:27Z")
About 10 minutes after setting cluster.routing.allocation.disk.threshold\_enabled to true, over 4,000 tasks (see below for example) got queued up and they seem to be stuck. About once every 30 minutes the top 1 or 2 tasks… --- ## [Input files with dynamic filename](https://discuss.elastic.co/t/input-files-with-dynamic-filename/42695)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [March 2, 2016, 5:35am UTC](https://discuss.elastic.co/t/input-files-with-dynamic-filename/42695 "2016-03-02T05:35:44Z")
Hi, We have some files in our systems, which has dynamic file names, date time appended. Example, server\_201602025 etc. FIle created today will neither be archived to some other location nor it will be appended any new … --- ## [Slow query for large size values](https://discuss.elastic.co/t/slow-query-for-large-size-values/188719)
**Author:** [@Victor\_Guimaraes](https://discuss.elastic.co/u/Victor_Guimaraes)\ **Replies:** 5\ **Last updated:** [July 3, 2019, 3:27pm UTC](https://discuss.elastic.co/t/slow-query-for-large-size-values/188719 "2019-07-03T15:27:29Z")
Hello, I have an ElasticSearch 6.4 index with 5 shards, 1 replica for each shard and 1.5 billions of documents. I use Elastic from textual search, getting the result's ids andusing then to query on MongoDB. We need ge… [Previous page](https://discuss.elastic.co/top.md?page=805&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=807&per_page=50&period=all)