# Top

**URL:** https://discuss.elastic.co/top.md?page=809&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 810

---

## [Vertical bar chart with data from elapsed time](https://discuss.elastic.co/t/vertical-bar-chart-with-data-from-elapsed-time/45465)

<div class="topic-metadata">

**Author:** [@pat7](https://discuss.elastic.co/u/pat7)\
**Replies:** 3\
**Last updated:** [March 25, 2016, 10:24pm UTC](https://discuss.elastic.co/t/vertical-bar-chart-with-data-from-elapsed-time/45465 "2016-03-25T22:24:56Z")

</div>

Hi, I installed the plugin elapsed and logstash calculates the time between two Events which is great \[:slight\_smile:\] in kibana I can See the "elapsed\_time" values. Now, I want to create a visualization in kibana wit…

---

## [Array of strings vs string](https://discuss.elastic.co/t/array-of-strings-vs-string/17049)

<div class="topic-metadata">

**Author:** [@Aleh\_Aleshka](https://discuss.elastic.co/u/Aleh_Aleshka)\
**Replies:** 3\
**Last updated:** [April 20, 2014, 11:58am UTC](https://discuss.elastic.co/t/array-of-strings-vs-string/17049 "2014-04-20T11:58:22Z")

</div>

Hi i'd like to have a field in document to which i'm going to append strings and use span\_near queries to search for a specific sequence of strings in it i wonder if that kind of usage makes sense, and if using a…

---

## [Distributed transaction support](https://discuss.elastic.co/t/distributed-transaction-support/3080)

<div class="topic-metadata">

**Author:** [@Samuel\_Yung\_2](https://discuss.elastic.co/u/Samuel_Yung_2)\
**Replies:** 3\
**Last updated:** [July 8, 2010, 2:06pm UTC](https://discuss.elastic.co/t/distributed-transaction-support/3080 "2010-07-08T14:06:12Z")

</div>

Hi, How is the distributed transaction support in ES? Specifically will it support JTA transaction in the near future, much like the current compass implementation does? Rds, Samuel

---

## [How to get grok filter from variable](https://discuss.elastic.co/t/how-to-get-grok-filter-from-variable/118511)

<div class="topic-metadata">

**Author:** [@jfur](https://discuss.elastic.co/u/jfur)\
**Replies:** 2\
**Last updated:** [February 5, 2018, 10:07pm UTC](https://discuss.elastic.co/t/how-to-get-grok-filter-from-variable/118511 "2018-02-05T22:07:13Z")

</div>

I have somewhat of a complex use case where some events have data in their firewall "msg" field that needs to be parsed out (most don't). I have a dictionary file that is parsing out just fine with the kv plugin, but am …

---

## [Logstash communication fails to ES with x-pack with user logstash\_internal](https://discuss.elastic.co/t/logstash-communication-fails-to-es-with-x-pack-with-user-logstash-internal/184182)

<div class="topic-metadata">

**Author:** [@dsmteam](https://discuss.elastic.co/u/dsmteam)\
**Replies:** 2\
**Last updated:** [June 5, 2019, 8:17am UTC](https://discuss.elastic.co/t/logstash-communication-fails-to-es-with-x-pack-with-user-logstash-internal/184182 "2019-06-05T08:17:04Z")

</div>

I'm trying to setup latest ELK stack with x-pack but i'm failing on the last step which is communication between logstash and ES I have put username/password in my output.conf file for logstash and it's properly created…

---

## [3 login attempts to login x-pack security for active directory](https://discuss.elastic.co/t/3-login-attempts-to-login-x-pack-security-for-active-directory/83270)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 1:09pm UTC](https://discuss.elastic.co/t/3-login-attempts-to-login-x-pack-security-for-active-directory/83270 "2017-04-25T13:09:02Z")

</div>

Hello. I would like to get help with configuration for active directory authentication for x-pack security. I was able to login to kibana via active directory authentication, however, it took 3 login attempts . I ha…

---

## [Logstash JDBC input : assigning timestamp column](https://discuss.elastic.co/t/logstash-jdbc-input-assigning-timestamp-column/34677)

<div class="topic-metadata">

**Author:** [@Chandan\_PR](https://discuss.elastic.co/u/Chandan_PR)\
**Replies:** 2\
**Last updated:** [November 30, 2015, 11:57am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-assigning-timestamp-column/34677 "2015-11-30T11:57:21Z")

</div>

Hi, Using logstash-input-jdbc and logstash-output-elasticsearch plugins I am populating the data from mysql database to elastic search. In the select query I have a column, which is of data type "datetime". When th…

---

## [Issue in Connecting Java Agent](https://discuss.elastic.co/t/issue-in-connecting-java-agent/165839)

<div class="topic-metadata">

**Author:** [@jyoti\_singh](https://discuss.elastic.co/u/jyoti_singh)\
**Replies:** 4\
**Last updated:** [January 26, 2019, 12:20pm UTC](https://discuss.elastic.co/t/issue-in-connecting-java-agent/165839 "2019-01-26T12:20:49Z")

</div>

Hello Team I am using elasticsearch, kibana and APM server provided by elastic cloud but when i am trying to configure java agent I am getting errors. 2019-01-26 11:43:05.988 \[apm-server-healthcheck\] INFO co.elastic.ap…

---

## [Reindex task completed but no response was returned](https://discuss.elastic.co/t/reindex-task-completed-but-no-response-was-returned/157224)

<div class="topic-metadata">

**Author:** [@naoko](https://discuss.elastic.co/u/naoko)\
**Replies:** 4\
**Last updated:** [November 18, 2018, 4:34pm UTC](https://discuss.elastic.co/t/reindex-task-completed-but-no-response-was-returned/157224 "2018-11-18T16:34:37Z")

</div>

I reindex the index that has about 9 million doc \_cat/indices shows 9 million but \_count shows 3.6 million. docs\_deleted count in \_cat/indices shows less than 40k so my first question is why there is so many discrepanc…

---

## [Monitoring our office Cisco router](https://discuss.elastic.co/t/monitoring-our-office-cisco-router/111304)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 5:09pm UTC](https://discuss.elastic.co/t/monitoring-our-office-cisco-router/111304 "2017-12-13T17:09:02Z")

</div>

Hi, Which beats agents can i install on my PC to get metrics/logs of our office router? then view these metrics on Kibana to check the uptime and downtime of our internet

---

## [How to disable attempts to connect to the package registry?](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516)

<div class="topic-metadata">

**Author:** [@fadenb](https://discuss.elastic.co/u/fadenb)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:07pm UTC](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516 "2021-08-12T18:07:04Z")

</div>

Hi, We are operating an Elastic stack in an environment that is intentionally unable to access the outside world/internet. When we browse to our Kibana dashboards, we see that our browsers are trying to fetch /api/flee…

---

## [How to prevent duplicate events which is already pushed into elastic using watcher action?](https://discuss.elastic.co/t/how-to-prevent-duplicate-events-which-is-already-pushed-into-elastic-using-watcher-action/118399)

<div class="topic-metadata">

**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\
**Replies:** 1\
**Last updated:** [February 9, 2018, 11:36pm UTC](https://discuss.elastic.co/t/how-to-prevent-duplicate-events-which-is-already-pushed-into-elastic-using-watcher-action/118399 "2018-02-09T23:36:54Z")

</div>

Hello Folks, I want to prevent duplicate documents from being inserted into new elastic index, using watcher actions. I am not sure whether it is possible or not. Here's the scenario. Watchers, scheduler is set to 15…

---

## [How to compile beats](https://discuss.elastic.co/t/how-to-compile-beats/37805)

<div class="topic-metadata">

**Author:** [@Cory\_Marsh](https://discuss.elastic.co/u/Cory_Marsh)\
**Replies:** 1\
**Last updated:** [December 22, 2015, 11:55pm UTC](https://discuss.elastic.co/t/how-to-compile-beats/37805 "2015-12-22T23:55:31Z")

</div>

TL;DR: Is there a doc or wiki page on how to compile? I'm sure it's something simple and obvious, but I don't even know what to try or what to read at this point So I have been struggling trying to get libbeat to comp…

---

## [Searckick + Elastick Search Failed to connect to localhost:9200](https://discuss.elastic.co/t/searckick-elastick-search-failed-to-connect-to-localhost-9200/179887)

<div class="topic-metadata">

**Author:** [@fmoudoute](https://discuss.elastic.co/u/fmoudoute)\
**Replies:** 0\
**Last updated:** [May 7, 2019, 5:30am UTC](https://discuss.elastic.co/t/searckick-elastick-search-failed-to-connect-to-localhost-9200/179887 "2019-05-07T05:30:40Z")

</div>

My application was working fine until a few minutes ago, I get the following error: Faraday::ConnectionFailed in Devise::SessionsController#create Failed to open TCP connection to localhost:9200 (Connection refused - co…

---

## [Sending fortinalyzer logs to SIEM](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 5\
**Last updated:** [September 13, 2022, 10:29pm UTC](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149 "2022-09-13T22:29:37Z")

</div>

Hello Community Are the fortianalyzer supported by filebeat? if yes can you help me with its configuration at filebeat level by specifying the part to be addressed? Thanks,

---

## [Reindex error!](https://discuss.elastic.co/t/reindex-error/241125)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 5\
**Last updated:** [July 15, 2020, 7:09am UTC](https://discuss.elastic.co/t/reindex-error/241125 "2020-07-15T07:09:39Z")

</div>

Hello, I use elk version: v 7.7.1 I am using this command to reindex: POST \_reindex { "source": { "index": "logs-gelf-2020.07.06-000057" }, "dest": { "index": "tempconnect5" } } But i get that response: { "er…

---

## [New Node Not Talking to Cluster](https://discuss.elastic.co/t/new-node-not-talking-to-cluster/42737)

<div class="topic-metadata">

**Author:** [@Bradly](https://discuss.elastic.co/u/Bradly)\
**Replies:** 5\
**Last updated:** [February 25, 2016, 8:48pm UTC](https://discuss.elastic.co/t/new-node-not-talking-to-cluster/42737 "2016-02-25T20:48:56Z")

</div>

I added a new node yesterday afternoon and got to a point where it should have been communicating with the cluster but its not. I receive this error on the new node in the elasticsearch.log file: \[2016-02-25 09:33:53…

---

## [Date in runtime fields](https://discuss.elastic.co/t/date-in-runtime-fields/274692)

<div class="topic-metadata">

**Author:** [@IGB042](https://discuss.elastic.co/u/IGB042)\
**Replies:** 0\
**Last updated:** [June 2, 2021, 1:16am UTC](https://discuss.elastic.co/t/date-in-runtime-fields/274692 "2021-06-02T01:16:34Z")

</div>

I currently have an issue with calculating the day of week in a runtime field. My time field is stored in UTC "isotimestamp": \["2021-06-01T23:55:38.726Z"\] and displays correctly according to my TZ (UTC+10) isotimesta…

---

## [Exceptions after upgrading elasticsearch](https://discuss.elastic.co/t/exceptions-after-upgrading-elasticsearch/84680)

<div class="topic-metadata">

**Author:** [@nbrys](https://discuss.elastic.co/u/nbrys)\
**Replies:** 0\
**Last updated:** [May 5, 2017, 9:02am UTC](https://discuss.elastic.co/t/exceptions-after-upgrading-elasticsearch/84680 "2017-05-05T09:02:13Z")

</div>

I got the following exceptions after upgrading elasticsearch to 5.4.0 Caused by: java.lang.IllegalArgumentException: plugin \[ingest-user-agent\] is incompatible with version \[5.4.0\]; was designed for version \[5.3.0\] at…

---

## [Bien indexer et rechercher en français?](https://discuss.elastic.co/t/bien-indexer-et-rechercher-en-francais/40233)

<div class="topic-metadata">

**Author:** [@novolog](https://discuss.elastic.co/u/novolog)\
**Replies:** 3\
**Last updated:** [January 29, 2016, 1:20am UTC](https://discuss.elastic.co/t/bien-indexer-et-rechercher-en-francais/40233 "2016-01-29T01:20:30Z")

</div>

Bonjour tout le monde, Je cherche à mettre en place un text search avec possibilité de filtrer par tags. Le filtrage par tag fonctionne parfaitement, par contre j'ai quelque soucis à obtenir la précision souhaité pour le…

---

## [C# Create Watches Automatically?](https://discuss.elastic.co/t/c-create-watches-automatically/1325)

<div class="topic-metadata">

**Author:** [@danielmoon](https://discuss.elastic.co/u/danielmoon)\
**Replies:** 3\
**Last updated:** [June 1, 2015, 11:56am UTC](https://discuss.elastic.co/t/c-create-watches-automatically/1325 "2015-06-01T11:56:10Z")

</div>

I would like to have my C# code create a watch. Is this possible during the beta? I'm not seeing anything meant for watches in the v1.5 API

---

## [Can a Kibana Canvas Markdown Element Display a Total of a Column?](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797 "2020-08-20T20:35:01Z")

</div>

I have a Markdown Element on a Kibana canvas with the Expression Syntax: filters group="default" | essql query="SELECT host.hostname, (last(system.memory.actual.used.bytes, \\"@timestamp\\")/1073741824 as m…

---

## [An routing missing exception is obtained when reindex sets the routing value](https://discuss.elastic.co/t/an-routing-missing-exception-is-obtained-when-reindex-sets-the-routing-value/155140)

<div class="topic-metadata">

**Author:** [@lwpk110](https://discuss.elastic.co/u/lwpk110)\
**Replies:** 2\
**Last updated:** [November 5, 2018, 4:14am UTC](https://discuss.elastic.co/t/an-routing-missing-exception-is-obtained-when-reindex-sets-the-routing-value/155140 "2018-11-05T04:14:16Z")

</div>

when i reindex a parent-child relation document from v2.4 to v5.6,i write a script to do it, like this: \_reindex POST { "source": { "index": "report", "type": "user\_mail\_action" }, "dest": { "index": "report\_u…

---

## [Logstash with jdbc mssql-jdbc-6.4.0.jre9 error](https://discuss.elastic.co/t/logstash-with-jdbc-mssql-jdbc-6-4-0-jre9-error/130371)

<div class="topic-metadata">

**Author:** [@sislandtw](https://discuss.elastic.co/u/sislandtw)\
**Replies:** 2\
**Last updated:** [May 4, 2018, 1:22am UTC](https://discuss.elastic.co/t/logstash-with-jdbc-mssql-jdbc-6-4-0-jre9-error/130371 "2018-05-04T01:22:32Z")

</div>

need your help ------------ env -------------------------------------- Logstash connect to MSSQL 2016 DB JDBC = \> mssql-jdbc-6.4.0.jre9， JRE =\> jre1.8.0\_172 windows 10 ----------------- config ---------------------…

---

## [Using several Filebeat agents to send logs into Elasticsearch cluster](https://discuss.elastic.co/t/using-several-filebeat-agents-to-send-logs-into-elasticsearch-cluster/63445)

<div class="topic-metadata">

**Author:** [@Miloslav\_Vavra](https://discuss.elastic.co/u/Miloslav_Vavra)\
**Replies:** 2\
**Last updated:** [October 21, 2016, 6:18am UTC](https://discuss.elastic.co/t/using-several-filebeat-agents-to-send-logs-into-elasticsearch-cluster/63445 "2016-10-21T06:18:47Z")

</div>

Hi, I have a cluster, from which I want to send logs to Elasticsearch and show it in Kibana. My question is - can I install on every server (in the cluster) the Filebeat agent and send the log directly to Elasticsearch…

---

## [\[Filebeat\]\[Checkpoint module\] data stream timestamp field \[@timestamp\] is missing](https://discuss.elastic.co/t/filebeat-checkpoint-module-data-stream-timestamp-field-timestamp-is-missing/309802)

<div class="topic-metadata">

**Author:** [@bbs2web](https://discuss.elastic.co/u/bbs2web)\
**Replies:** 7\
**Last updated:** [July 22, 2022, 9:25am UTC](https://discuss.elastic.co/t/filebeat-checkpoint-module-data-stream-timestamp-field-timestamp-is-missing/309802 "2022-07-22T09:25:49Z")

</div>

Hi, I'm trying to ingest CheckPoint native Syslog exports of security gateway (firewall) logs. My understanding is that integration was previously via CEF, which did not pass through sufficient detail, but that the nati…

---

## [Creating processor \[set\_security\_user\] (tag \[null\]) on field \[\_security\] but authentication is not currently enabled](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/306706)

<div class="topic-metadata">

**Author:** [@K\_st\_rs](https://discuss.elastic.co/u/K_st_rs)\
**Replies:** 7\
**Last updated:** [June 27, 2022, 10:38am UTC](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/306706 "2022-06-27T10:38:30Z")

</div>

Logs are filled every 4 minutes with below message on a test server and there is no help on this. I am fairly new to this and wouldn't have edited any files to a big extent. There is another thread on here (discuss.elast…

---

## [Elastic cloud basic setup: Could not open job because no ML nodes with sufficient capacity were found](https://discuss.elastic.co/t/elastic-cloud-basic-setup-could-not-open-job-because-no-ml-nodes-with-sufficient-capacity-were-found/169866)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 1\
**Last updated:** [February 26, 2019, 10:22pm UTC](https://discuss.elastic.co/t/elastic-cloud-basic-setup-could-not-open-job-because-no-ml-nodes-with-sufficient-capacity-were-found/169866 "2019-02-26T22:22:40Z")

</div>

Hello, I am running on a elastic cloud cluster, with 1Gb for the ML node (default) I have 1 job running OK, and when I try to run a second one, I got the following. How can I know the capacity of the ML node? when I a…

---

## [Enterprise-search won't start due to unhandled error: NoMethodError: undefined method \`join' for nil:NilClass](https://discuss.elastic.co/t/enterprise-search-wont-start-due-to-unhandled-error-nomethoderror-undefined-method-join-for-nil-nilclass/279040)

<div class="topic-metadata">

**Author:** [@matp](https://discuss.elastic.co/u/matp)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 10:07am UTC](https://discuss.elastic.co/t/enterprise-search-wont-start-due-to-unhandled-error-nomethoderror-undefined-method-join-for-nil-nilclass/279040 "2021-07-19T10:07:13Z")

</div>

After doing a very basic elasticsearch/enterprise-search install (single server, tarballs, elasticsearch running fine) I can't get enterprise search to start. There is an unhandled error in the logs/journal: NoMethodErr…

---

## [Best practice for empty fields?](https://discuss.elastic.co/t/best-practice-for-empty-fields/132411)

<div class="topic-metadata">

**Author:** [@spynxo](https://discuss.elastic.co/u/spynxo)\
**Replies:** 4\
**Last updated:** [May 24, 2018, 10:39am UTC](https://discuss.elastic.co/t/best-practice-for-empty-fields/132411 "2018-05-24T10:39:30Z")

</div>

Hi All, For empty fields, should I use null or ""? What is the best practice? Are they equivalent? Thanks!

---

## [Creating links to visualizations on dashboard](https://discuss.elastic.co/t/creating-links-to-visualizations-on-dashboard/111335)

<div class="topic-metadata">

**Author:** [@wonnado](https://discuss.elastic.co/u/wonnado)\
**Replies:** 4\
**Last updated:** [December 13, 2017, 1:17pm UTC](https://discuss.elastic.co/t/creating-links-to-visualizations-on-dashboard/111335 "2017-12-13T13:17:19Z")

</div>

Hi! I have many visualizations in my dashboard and I'd like to make table of contents on the top of dashboard using markdown. The question is: how we can point on some visualization in the dashboard?

---

## [Terminal blocked on \[2020-01-24T15:37:25,971\]\[INFO \]\[o.e.c.r.a.AllocationService\] \[LAPTOP-TRA6NOPS\] Cluster health status changed from \[RED\] to \[GREEN\] (reason: \[shards started \[\[.kibana\_task\_manager\_1\]\[0\], \[.kibana\_1\]\[0\]\]\])](https://discuss.elastic.co/t/terminal-blocked-on-2020-01-24t1525-971-info-o-e-c-r-a-allocationservice-laptop-tra6nops-cluster-health-status-changed-from-red-to-green-reason-shards-started-kibana-task-manager-1-0-kibana-1-0/216446)

<div class="topic-metadata">

**Author:** [@pierrejutard](https://discuss.elastic.co/u/pierrejutard)\
**Replies:** 5\
**Last updated:** [January 24, 2020, 7:12pm UTC](https://discuss.elastic.co/t/terminal-blocked-on-2020-01-24t1525-971-info-o-e-c-r-a-allocationservice-laptop-tra6nops-cluster-health-status-changed-from-red-to-green-reason-shards-started-kibana-task-manager-1-0-kibana-1-0/216446 "2020-01-24T19:12:48Z")

</div>

Hello, i just set up elastic search 7.5.2 on my computer and when runnning on the terminal comand elastic search on windows the terminal stops at this sentence: \[2020-01-24T15:37:25,971\]\[INFO \]\[o.e.c.r.a.AllocationServi…

---

## [Logstash 1.5.1 Twitter Input Connection Refused](https://discuss.elastic.co/t/logstash-1-5-1-twitter-input-connection-refused/24960)

<div class="topic-metadata">

**Author:** [@zWang95](https://discuss.elastic.co/u/zWang95)\
**Replies:** 5\
**Last updated:** [December 12, 2015, 8:30pm UTC](https://discuss.elastic.co/t/logstash-1-5-1-twitter-input-connection-refused/24960 "2015-12-12T20:30:07Z")

</div>

Hi, Getting connection refused error when trying to use Twitter input on Logstash 1.5.1. I would appreciate any help. Thanks. input { twitter { consumer\_key =\> " " consumer\_secret =\> " " oa…

---

## [Version 2.0: using doc values for result list](https://discuss.elastic.co/t/version-2-0-using-doc-values-for-result-list/26295)

<div class="topic-metadata">

**Author:** [@Tzahi](https://discuss.elastic.co/u/Tzahi)\
**Replies:** 5\
**Last updated:** [July 28, 2015, 4:17pm UTC](https://discuss.elastic.co/t/version-2-0-using-doc-values-for-result-list/26295 "2015-07-28T16:17:27Z")

</div>

AFAIK in the current version, query results were always returned from the fields stored in the fdt file. To get values from the doc values (dvd file) you had to use the aggregation framework. AFAIK in the coming versio…

---

## [Kibana logs maximum size](https://discuss.elastic.co/t/kibana-logs-maximum-size/205736)

<div class="topic-metadata">

**Author:** [@akash.gund](https://discuss.elastic.co/u/akash.gund)\
**Replies:** 1\
**Last updated:** [October 29, 2019, 6:28pm UTC](https://discuss.elastic.co/t/kibana-logs-maximum-size/205736 "2019-10-29T18:28:55Z")

</div>

We are using kibana in our elasticsearch stack. We would like to limit the stdout.log size, but cant find any options for doing this in kibana.yml Can someone guide as to how this can be done?

---

## [Search a dot in string with wildcard](https://discuss.elastic.co/t/search-a-dot-in-string-with-wildcard/121823)

<div class="topic-metadata">

**Author:** [@michele](https://discuss.elastic.co/u/michele)\
**Replies:** 1\
**Last updated:** [February 28, 2018, 12:09pm UTC](https://discuss.elastic.co/t/search-a-dot-in-string-with-wildcard/121823 "2018-02-28T12:09:05Z")

</div>

In my index I have: doc1 ==\> field1 = foo 123, field2 = 123 doc2 ==\> field1 = f.o.o 456, field2 = 456 If I do this query, I have returned doc1: { "query":{ "bool":{ "must":\[ {"wildcard":{"field1" : "foo\*"}}…

---

## [Nested vs Parent-Child - index and search side differences](https://discuss.elastic.co/t/nested-vs-parent-child-index-and-search-side-differences/18166)

<div class="topic-metadata">

**Author:** [@Srinivasan\_Ramaswamy](https://discuss.elastic.co/u/Srinivasan_Ramaswamy)\
**Replies:** 1\
**Last updated:** [June 17, 2014, 11:30pm UTC](https://discuss.elastic.co/t/nested-vs-parent-child-index-and-search-side-differences/18166 "2014-06-17T23:30:14Z")

</div>

I searched the forum and internet in general, but i couldn't find clear answers about the differences in scoring. And most of the answers are pretty old. I would like to know all the important current differences/c…

---

## [Use Junit with EsIntegTestCase](https://discuss.elastic.co/t/use-junit-with-esintegtestcase/132061)

<div class="topic-metadata">

**Author:** [@xam](https://discuss.elastic.co/u/xam)\
**Replies:** 3\
**Last updated:** [May 16, 2018, 3:46pm UTC](https://discuss.elastic.co/t/use-junit-with-esintegtestcase/132061 "2018-05-16T15:46:38Z")

</div>

Hi, I want to perform integration test with JUnit. My test class inherits from ESIntegTestCase. But I also want my test resolves Spring bean. For my first try, I used the SpringJUnit4ClassRunner but it failed, as the S…

---

## [Can I increase the maximum attachment size for ingestion?](https://discuss.elastic.co/t/can-i-increase-the-maximum-attachment-size-for-ingestion/103119)

<div class="topic-metadata">

**Author:** [@warpraptor](https://discuss.elastic.co/u/warpraptor)\
**Replies:** 3\
**Last updated:** [October 7, 2017, 5:04pm UTC](https://discuss.elastic.co/t/can-i-increase-the-maximum-attachment-size-for-ingestion/103119 "2017-10-07T17:04:59Z")

</div>

I'm indexing a collection of PDF documents. The ingestion Attachment processing pipeline is working fine, but there are a few of the documents that are rather large (because they contain images, etc.). This seems to ru…

---

## [How to get detail config of type?](https://discuss.elastic.co/t/how-to-get-detail-config-of-type/76932)

<div class="topic-metadata">

**Author:** [@2010](https://discuss.elastic.co/u/2010)\
**Replies:** 3\
**Last updated:** [March 1, 2017, 11:14am UTC](https://discuss.elastic.co/t/how-to-get-detail-config-of-type/76932 "2017-03-01T11:14:29Z")

</div>

If i use the URL (GET /qa/\_mapping) to get field config , i will get this : { "qa": { "mappings": { "questionAndAnswer": { "properties": { "answerCount": { "type": "inte…

---

## [Multiple instances on a machine as different services?](https://discuss.elastic.co/t/multiple-instances-on-a-machine-as-different-services/66223)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [November 24, 2016, 10:41am UTC](https://discuss.elastic.co/t/multiple-instances-on-a-machine-as-different-services/66223 "2016-11-24T10:41:42Z")

</div>

Hi, Currently we are running NLS which is based on an older ELK stack on our system. We would like to migrate smoothly to pure ELK in version 5.0. To avoid a big bang we would like to install ELK 5 in parallel. Tagre…

---

## ['ignore\_outgoing' doesn't work for me](https://discuss.elastic.co/t/ignore-outgoing-doesnt-work-for-me/37201)

<div class="topic-metadata">

**Author:** [@desert\_rose](https://discuss.elastic.co/u/desert_rose)\
**Replies:** 3\
**Last updated:** [December 17, 2015, 7:57pm UTC](https://discuss.elastic.co/t/ignore-outgoing-doesnt-work-for-me/37201 "2015-12-17T19:57:26Z")

</div>

I've uncommented "#ignore\_outgoing: true" line in packetbeat.yml and restarted packetbeat, but I can still see new transactions created by the server where packetbeat installed. Here are some fields of a transaction: …

---

## [Filter\_path in POST Body](https://discuss.elastic.co/t/filter-path-in-post-body/250776)

<div class="topic-metadata">

**Author:** [@Dev-Flo](https://discuss.elastic.co/u/Dev-Flo)\
**Replies:** 2\
**Last updated:** [October 2, 2020, 12:09pm UTC](https://discuss.elastic.co/t/filter-path-in-post-body/250776 "2020-10-02T12:09:57Z")

</div>

Hey, the responses I get from Elastisearch are rather huge. I've found out that it is possible to remove data of responses by using response filtering: Is there any way to put the filter inside a POST body so that I …

---

## [Sync from mongoDB to elasticsearch](https://discuss.elastic.co/t/sync-from-mongodb-to-elasticsearch/224023)

<div class="topic-metadata">

**Author:** [@deamnguyen](https://discuss.elastic.co/u/deamnguyen)\
**Replies:** 2\
**Last updated:** [March 22, 2020, 4:00pm UTC](https://discuss.elastic.co/t/sync-from-mongodb-to-elasticsearch/224023 "2020-03-22T16:00:22Z")

</div>

Hi all, I have questions about sync data from mongodb to elasticsearch, please give me permission: There are many ways to sync, which one have i used? Logstash, JDBC input plugin =\> Logstash file my config: jdbc …

---

## [Logstash multiple pipelines going into same index](https://discuss.elastic.co/t/logstash-multiple-pipelines-going-into-same-index/128066)

<div class="topic-metadata">

**Author:** [@saargrin](https://discuss.elastic.co/u/saargrin)\
**Replies:** 2\
**Last updated:** [April 15, 2018, 2:08pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipelines-going-into-same-index/128066 "2018-04-15T14:08:35Z")

</div>

Hi i'm trying to set up a centralized syslog for multiple log sources so i have a logstash that has two separate inputs and two separate outputs however for some reason the data from one of the inputs ends up in both …

---

## [Remote Client not able to connect to Elasticsearch Cluster via SSL in place](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 6\
**Last updated:** [May 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766 "2021-05-13T07:52:54Z")

</div>

Hello I am using Elasticsearch version 7.8.0 with 5 node cluster. This cluster has SSL enabled and user auth security enabled too. For inter-commmunication port used is 9300. I am using external client \[ Oracle Golden…

---

## [Elasticsearch failed when i try to setup x-pack](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984)

<div class="topic-metadata">

**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\
**Replies:** 6\
**Last updated:** [June 29, 2020, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-failed-when-i-try-to-setup-x-pack/238984 "2020-06-29T00:30:56Z")

</div>

when i try to setup x-pack in remote server i have some issues (in my local ,it works perfectly) ,but it dosn't in remote sever first : vi /etc/elasticsearch/elasticsearch.yml i add this option: xpack.security.enabl…

---

## [Kibana login without x-pack](https://discuss.elastic.co/t/kibana-login-without-x-pack/192590)

<div class="topic-metadata">

**Author:** [@kenyjeanreyes](https://discuss.elastic.co/u/kenyjeanreyes)\
**Replies:** 1\
**Last updated:** [July 29, 2019, 9:40pm UTC](https://discuss.elastic.co/t/kibana-login-without-x-pack/192590 "2019-07-29T21:40:48Z")

</div>

I am new to Kibana. I have everything doing fine, but i would like to add a login page for authentication of users. I already edited my kibana.yml with the elasticsearch username and password. But how do i get it to pro…

---

## [Issue with logstash event feed](https://discuss.elastic.co/t/issue-with-logstash-event-feed/114692)

<div class="topic-metadata">

**Author:** [@Tal\_Bar\_Or](https://discuss.elastic.co/u/Tal_Bar_Or)\
**Replies:** 7\
**Last updated:** [January 14, 2018, 3:48pm UTC](https://discuss.elastic.co/t/issue-with-logstash-event-feed/114692 "2018-01-14T15:48:42Z")

</div>

Hello, I have Logstash, Elasticsearch (ver 6.1.1 recently updated ) getting the feed from Snort Syslog working for more than 6 months already, until yesterday, suddenly I noticed that I am not getting all alerts anymo…

---

## [No alive nodes found in your cluster all of sudden](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster-all-of-sudden/106193)

<div class="topic-metadata">

**Author:** [@ManishChughAtSmartsh](https://discuss.elastic.co/u/ManishChughAtSmartsh)\
**Replies:** 7\
**Last updated:** [November 3, 2017, 9:47am UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster-all-of-sudden/106193 "2017-11-03T09:47:09Z")

</div>

Hi, I am running into a problem with ES service. Some cron jobs are running on my server and crawling data from other applications. Then the data is indexed in elastic. The problem is Elastic service failed any time, a…

[Previous page](https://discuss.elastic.co/top.md?page=808&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=810&per_page=50&period=all)
