# Top **URL:** https://discuss.elastic.co/top.md?page=822&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 823 --- ## [Searching on multi-field fields](https://discuss.elastic.co/t/searching-on-multi-field-fields/5618)
**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\ **Replies:** 7\ **Last updated:** [October 21, 2011, 6:33pm UTC](https://discuss.elastic.co/t/searching-on-multi-field-fields/5618 "2011-10-21T18:33:57Z")
Hi, I have an index with a multi-field field using the example in http://www.elasticsearch.org/guide/reference/mapping/multi-field-type.html { "tweet" : { "properties" : { "name" : { … --- ## [X-pack logs index template](https://discuss.elastic.co/t/x-pack-logs-index-template/296916)
**Author:** [@icey7z](https://discuss.elastic.co/u/icey7z)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 4:25pm UTC](https://discuss.elastic.co/t/x-pack-logs-index-template/296916 "2022-02-12T16:25:03Z")
I'm trying to get my cluster to work with x-pack, and my data is stored in indexes under the namespace logs-\*-\*. This is a problem because x-pack creates an index template named logs as { "index\_patterns": \[ … --- ## [Filebeat unable to ship non modified files to logstash](https://discuss.elastic.co/t/filebeat-unable-to-ship-non-modified-files-to-logstash/193955)
**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\ **Replies:** 4\ **Last updated:** [August 9, 2019, 3:30pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-ship-non-modified-files-to-logstash/193955 "2019-08-09T15:30:17Z")
Hello, I configured filebeat.yml to send data to logstash, I just specified where my data are stored and the ip address of my logstash. I have a python script to generate data, if I don't change any line in my data, fi… --- ## [Tuning Attachment Ingest with arrays (get rid of the raw data!)](https://discuss.elastic.co/t/tuning-attachment-ingest-with-arrays-get-rid-of-the-raw-data/72220)
**Author:** [@hogbinj](https://discuss.elastic.co/u/hogbinj)\ **Replies:** 4\ **Last updated:** [January 19, 2017, 10:42pm UTC](https://discuss.elastic.co/t/tuning-attachment-ingest-with-arrays-get-rid-of-the-raw-data/72220 "2017-01-19T22:42:26Z")
I'm using the pipeline in ingest an array of documents PUT \_ingest/pipeline/attachment { "description": "Extract attachment information", "processors": \[ { "foreach": { "field": "attachments", … --- ## [Logstash with Redis](https://discuss.elastic.co/t/logstash-with-redis/29474)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 4\ **Last updated:** [October 8, 2015, 8:27pm UTC](https://discuss.elastic.co/t/logstash-with-redis/29474 "2015-10-08T20:27:13Z")
I have an ELK stack with redis as my queue. Currently I am running one redis instance on my sensors and it reports back to a central redis "cluster". I put cluster in quotes because I don't have it set up as a cluster … --- ## [Failed to start transform](https://discuss.elastic.co/t/failed-to-start-transform/246273)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 8\ **Last updated:** [September 1, 2020, 10:24am UTC](https://discuss.elastic.co/t/failed-to-start-transform/246273 "2020-09-01T10:24:09Z")
Hi I'm trying to start a transform but keep getting errors and turns the cluster's state into red (sooooo... frustrating ) last message on Kinana is "Created transform." Any help will be appreciated (removing the pain… --- ## [Multiple client nodes in dashboard](https://discuss.elastic.co/t/multiple-client-nodes-in-dashboard/104654)
**Author:** [@chirgeo](https://discuss.elastic.co/u/chirgeo)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 4:46pm UTC](https://discuss.elastic.co/t/multiple-client-nodes-in-dashboard/104654 "2017-10-24T16:46:44Z")
Hi. Currently I'm trying to setup ELK for our infrastructure and figuring out whether ELK(especially kibana) fits our needs. Shortly, we have an infrastructure which looks like: frontend node-\>middle node -\> multiple w… --- ## [Logstash-filter-bitflags - a filter plugin for converting bitfields to a map of flag:bool pairs](https://discuss.elastic.co/t/logstash-filter-bitflags-a-filter-plugin-for-converting-bitfields-to-a-map-of-flag-bool-pairs/34863)
**Author:** [@edx](https://discuss.elastic.co/u/edx)\ **Replies:** 1\ **Last updated:** [November 21, 2015, 5:59am UTC](https://discuss.elastic.co/t/logstash-filter-bitflags-a-filter-plugin-for-converting-bitfields-to-a-map-of-flag-bool-pairs/34863 "2015-11-21T05:59:03Z")
I humbly submit my first plugin, which is also my first "project" in Ruby. Please go easy on me \[:smile:\] https://github.com/crashish/logstash-filter-bitflags I wrote this plugin because our data model includes a bi… --- ## [Elastic APM throws error illegal\_state\_exception with reason There are no ingest nodes in this cluster, unable to forward request to an ingest node](https://discuss.elastic.co/t/elastic-apm-throws-error-illegal-state-exception-with-reason-there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/223134)
**Author:** [@Vipin\_Menon](https://discuss.elastic.co/u/Vipin_Menon)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 2:04am UTC](https://discuss.elastic.co/t/elastic-apm-throws-error-illegal-state-exception-with-reason-there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node/223134 "2020-03-12T02:04:49Z")
When I try to run the elastic apm server (oss version) I get the error There are no ingest nodes in this cluster, unable to forward request to an ingest node. on running apm-server setup --pipeline it says pipelines are… --- ## [Kibana architecture](https://discuss.elastic.co/t/kibana-architecture/27317)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 1\ **Last updated:** [August 13, 2015, 10:05am UTC](https://discuss.elastic.co/t/kibana-architecture/27317 "2015-08-13T10:05:20Z")
i want to know more about architecture of kibana .. how does it work at backend ? where can i find it --- ## [Elasticsearch Java Client create query for field with list of values](https://discuss.elastic.co/t/elasticsearch-java-client-create-query-for-field-with-list-of-values/328040)
**Author:** [@tcpeiris](https://discuss.elastic.co/u/tcpeiris)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-create-query-for-field-with-list-of-values/328040 "2023-03-20T13:59:32Z")
String searchText = "TEST"; .query(q -\> q.bool(b -\> b .must(c-\> c .match(t -\> t .field("FI… --- ## [Problem with beats/logstash parsing](https://discuss.elastic.co/t/problem-with-beats-logstash-parsing/43168)
**Author:** [@corey\_jones](https://discuss.elastic.co/u/corey_jones)\ **Replies:** 2\ **Last updated:** [March 2, 2016, 1:33pm UTC](https://discuss.elastic.co/t/problem-with-beats-logstash-parsing/43168 "2016-03-02T13:33:46Z")
Hi guys. I have a server running beats and another server that has a docker container running logstash. Both are at aws. It seems that the connection is being made. From my debug.log from logstash I see this. {:timesta… --- ## [ILM timing - based on index pattern name](https://discuss.elastic.co/t/ilm-timing-based-on-index-pattern-name/208163)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 5\ **Last updated:** [November 16, 2019, 9:25pm UTC](https://discuss.elastic.co/t/ilm-timing-based-on-index-pattern-name/208163 "2019-11-16T21:25:30Z")
I think, ILM is a kind of user-friendly replacement for Curator :slight\_smile: Am I right? That would be great to have all the curator's features in ILM! For instance, I'd like to define a policy to delete old indices,… --- ## [Most used/useful plugins for ElasticSearch](https://discuss.elastic.co/t/most-used-useful-plugins-for-elasticsearch/40562)
**Author:** [@Sundar\_V](https://discuss.elastic.co/u/Sundar_V)\ **Replies:** 5\ **Last updated:** [February 4, 2016, 8:15am UTC](https://discuss.elastic.co/t/most-used-useful-plugins-for-elasticsearch/40562 "2016-02-04T08:15:34Z")
What would be some of the most used/useful plugins of ElasticSearch. I see that some plugins do not yet support 2.x ES. At least for segmentspy, inquisitor I don’t see a 2.x support in their github repos. --- ## [ES Fails Initializing when Index is on NAS](https://discuss.elastic.co/t/es-fails-initializing-when-index-is-on-nas/21116)
**Author:** [@Yingkai\_Gao\_2](https://discuss.elastic.co/u/Yingkai_Gao_2)\ **Replies:** 5\ **Last updated:** [December 7, 2014, 5:11pm UTC](https://discuss.elastic.co/t/es-fails-initializing-when-index-is-on-nas/21116 "2014-12-07T17:11:22Z")
I'm using ElasticSearch-1.4.0 on CentOS-5.6. It works well if I set the index path.data on local/NFS. However, if I set the path.data on a NAS folder, the node keep stuck after initializing and plugins loading. I… --- ## [Apparent memory leak after a few days of heavy indexing](https://discuss.elastic.co/t/apparent-memory-leak-after-a-few-days-of-heavy-indexing/12834)
**Author:** [@rafe](https://discuss.elastic.co/u/rafe)\ **Replies:** 5\ **Last updated:** [July 18, 2013, 4:57pm UTC](https://discuss.elastic.co/t/apparent-memory-leak-after-a-few-days-of-heavy-indexing/12834 "2013-07-18T16:57:22Z")
I have a two node cluster. Each node runs with a heap size 16GB. The nodes run on their own boxes and have plenty of CPU to themselves. Currently, the cluster's only workload is indexing at pretty high volume. We are… --- ## [How to add all elements in an array from json objects as fields in logstash](https://discuss.elastic.co/t/how-to-add-all-elements-in-an-array-from-json-objects-as-fields-in-logstash/124549)
**Author:** [@Sunil\_Villuri](https://discuss.elastic.co/u/Sunil_Villuri)\ **Replies:** 6\ **Last updated:** [March 19, 2018, 8:25pm UTC](https://discuss.elastic.co/t/how-to-add-all-elements-in-an-array-from-json-objects-as-fields-in-logstash/124549 "2018-03-19T20:25:57Z")
Sample : "message": \[ "key1" : "value1", "key2" : "value2", "key3" : "value3", "key4" : "value4", "key5" : "value5", "keyn" : "valuen" \] i need to create the Additional Fields from each and every key in the mess… --- ## [6.0.0: NullPointerException at org.elasticsearch.Build.\(Build.java:49)](https://discuss.elastic.co/t/6-0-0-nullpointerexception-at-org-elasticsearch-build-clinit-build-java-49/110142)
**Author:** [@Joel\_Becker](https://discuss.elastic.co/u/Joel_Becker)\ **Replies:** 6\ **Last updated:** [December 7, 2017, 4:23am UTC](https://discuss.elastic.co/t/6-0-0-nullpointerexception-at-org-elasticsearch-build-clinit-build-java-49/110142 "2017-12-07T04:23:14Z")
Hi, I'm trying to use the High Level Java REST client version 6.0.0, in an IntelliJ plugin that I'm developing, but my progress is blocked, because when trying to create an instance of RestHighLevelClient, I get java.la… --- ## [Snapshots not running as scheduled](https://discuss.elastic.co/t/snapshots-not-running-as-scheduled/295714)
**Author:** [@mwise29](https://discuss.elastic.co/u/mwise29)\ **Replies:** 5\ **Last updated:** [February 3, 2022, 2:26pm UTC](https://discuss.elastic.co/t/snapshots-not-running-as-scheduled/295714 "2022-02-03T14:26:50Z")
I configured a snapshot cron schedule and just recently it stopped running. We restarted Elasticsearch and that didn't fix it. We restarted the nodes and that also did not fix it. I re-created the policy and that also… --- ## [How to print input data to logstash-plain.log file?](https://discuss.elastic.co/t/how-to-print-input-data-to-logstash-plain-log-file/314466)
**Author:** [@WonhyeongCho](https://discuss.elastic.co/u/WonhyeongCho)\ **Replies:** 3\ **Last updated:** [September 15, 2022, 4:37am UTC](https://discuss.elastic.co/t/how-to-print-input-data-to-logstash-plain-log-file/314466 "2022-09-15T04:37:49Z")
Hello. I'm using logstash for log collection. I want to write data coming into logstash to a log file. I tried many plugins to write data to log file but it didn't work. And I edit log4j2 settings like logger.logstas… --- ## [Whats the best way to query exact match and full text at the same time?](https://discuss.elastic.co/t/whats-the-best-way-to-query-exact-match-and-full-text-at-the-same-time/166430)
**Author:** [@Drammy](https://discuss.elastic.co/u/Drammy)\ **Replies:** 3\ **Last updated:** [February 1, 2019, 9:55am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-query-exact-match-and-full-text-at-the-same-time/166430 "2019-02-01T09:55:23Z")
Hi all, I had an ES search running on ES 2 that was working as I hoped but since upgrading to ES5 and subsequently to ES 6 the relevance has degraded somewhat (probably due to poor DSL I guess). Its just a shame that i… --- ## [High heap during indexing documents](https://discuss.elastic.co/t/high-heap-during-indexing-documents/75716)
**Author:** [@szarik](https://discuss.elastic.co/u/szarik)\ **Replies:** 3\ **Last updated:** [March 15, 2017, 8:24am UTC](https://discuss.elastic.co/t/high-heap-during-indexing-documents/75716 "2017-03-15T08:24:23Z")
Hello, We are using Elasticsearch to storage messages from our internal messanger. Currently we have around 7 billions messages to import to Elasticsearch. During import we collect additional data from our internal API… --- ## [Elasticsearch: adding a second node to the cluster - \[node-1\] master not discovered yet: have discovered \[{node-1}](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529)
**Author:** [@pauleccm](https://discuss.elastic.co/u/pauleccm)\ **Replies:** 7\ **Last updated:** [July 27, 2020, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-adding-a-second-node-to-the-cluster-node-1-master-not-discovered-yet-have-discovered-node-1/242529 "2020-07-27T10:37:44Z")
I am trying to obtain a two nodes cluster. First node, master (master-1): cluster.name: "admin\_system\_elk" network.host: 0.0.0.0 node.name: "master-1" discovery.seed\_hosts: "localhost:9300" cluster.initial\_master\_nodes… --- ## [Parse out window event logs message](https://discuss.elastic.co/t/parse-out-window-event-logs-message/185296)
**Author:** [@NieruHawic](https://discuss.elastic.co/u/NieruHawic)\ **Replies:** 4\ **Last updated:** [June 12, 2019, 5:38pm UTC](https://discuss.elastic.co/t/parse-out-window-event-logs-message/185296 "2019-06-12T17:38:18Z")
I would like to take the message section from windows event logs and be able to use the different areas to filter. Right now the message comes across as "message": "An attempt was made to access an object.\\n\\nSubject:\\n… --- ## [Edge NGram Token Filterを使用した場合のhighlightについて](https://discuss.elastic.co/t/edge-ngram-token-filter-highlight/166275)
**Author:** [@b18bd8be4bf795b30ee7](https://discuss.elastic.co/u/b18bd8be4bf795b30ee7)\ **Replies:** 4\ **Last updated:** [January 31, 2019, 3:18am UTC](https://discuss.elastic.co/t/edge-ngram-token-filter-highlight/166275 "2019-01-31T03:18:45Z")
Edge NGram Token Filterを使用しています。検索にてHITした箇所にhighlightをつけたいのですが、想定した箇所とは異なる部分がhighlightされており、どうすればよいのか、アドバイスをいただければ幸いです。 Elasticsearch 6.3.0 ●インデックスのmapping PUT /my\_index { "settings" : { "index": { "analys… --- ## [Help optimizing performance for several indices](https://discuss.elastic.co/t/help-optimizing-performance-for-several-indices/42959)
**Author:** [@mrechler](https://discuss.elastic.co/u/mrechler)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 7:13pm UTC](https://discuss.elastic.co/t/help-optimizing-performance-for-several-indices/42959 "2016-03-07T19:13:53Z")
We currently have a 6 node cluster (ES 1.7/16 cores/64GB RAM/1TB RAID 10 15k disks data partition/node) that stores a month of indices, 1 index per day. Each index is getting to be about 50Gb in size. The indices have 3 … --- ## [Vegalite graph scale according to Min,Max of the value](https://discuss.elastic.co/t/vegalite-graph-scale-according-to-min-max-of-the-value/271246)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 2:00pm UTC](https://discuss.elastic.co/t/vegalite-graph-scale-according-to-min-max-of-the-value/271246 "2021-04-26T14:00:53Z")
I have plotted a graph using Vegalite visualization in Kibana as shown below: As it can be seen, Y-axis scale starts from 0 and goes upto 450. Though it covers the Maximum and Min values of Y variable but not efficie… --- ## [Controlling scale on Y-axis](https://discuss.elastic.co/t/controlling-scale-on-y-axis/56593)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 2\ **Last updated:** [August 1, 2016, 4:23am UTC](https://discuss.elastic.co/t/controlling-scale-on-y-axis/56593 "2016-08-01T04:23:56Z")
Please suggest if it is possible to control the scale on y -axis while creating line chart visualization. Problem statement- The data is going beyond 20k and does not contains any entry below 10k so is there any way we … --- ## [APM agent for Java is causing system crashes](https://discuss.elastic.co/t/apm-agent-for-java-is-causing-system-crashes/165211)
**Author:** [@antuan](https://discuss.elastic.co/u/antuan)\ **Replies:** 8\ **Last updated:** [February 15, 2019, 7:46am UTC](https://discuss.elastic.co/t/apm-agent-for-java-is-causing-system-crashes/165211 "2019-02-15T07:46:24Z")
The APM-Java is working but at some point Tomcat crashes. A fatal error has been detected by the Java Runtime Environment: Reason to crash: SIGSEGV (0xb) at pc=0x00000005f0673940, pid=8545, tid=140480805185280 Active… --- ## [Watcher: How to convert the execution\_time to epoch time](https://discuss.elastic.co/t/watcher-how-to-convert-the-execution-time-to-epoch-time/105569)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 5\ **Last updated:** [November 16, 2017, 6:18am UTC](https://discuss.elastic.co/t/watcher-how-to-convert-the-execution-time-to-epoch-time/105569 "2017-11-16T06:18:45Z")
How to convert "execution\_time" : "2017-10-27T07:09:14.666Z" of watcher to unix epoch time so that the converted epoch time can be used in the action. --- ## [Perl API call to new() is slow](https://discuss.elastic.co/t/perl-api-call-to-new-is-slow/27841)
**Author:** [@gogators](https://discuss.elastic.co/u/gogators)\ **Replies:** 5\ **Last updated:** [August 26, 2015, 1:29pm UTC](https://discuss.elastic.co/t/perl-api-call-to-new-is-slow/27841 "2015-08-26T13:29:15Z")
I've written a number of Perl clients using the Perl API and have done some profiling. I've found that the call to Search::Elasticsearch::new() can take more than 50% of the total execution time. I'd like to speed this u… --- ## [Kibana Granted document query for multiple filter](https://discuss.elastic.co/t/kibana-granted-document-query-for-multiple-filter/258607)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 3\ **Last updated:** [January 6, 2021, 6:31am UTC](https://discuss.elastic.co/t/kibana-granted-document-query-for-multiple-filter/258607 "2021-01-06T06:31:25Z")
Hello, I have an requirement of creating a role which has limited permission of data in index privileges using granted document query. For example: User1 should be restricted when installation id: 1 and stageid:2 d ma… --- ## [How to change indexing frequency of X-Pack monitoring plugin?](https://discuss.elastic.co/t/how-to-change-indexing-frequency-of-x-pack-monitoring-plugin/65954)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 10:18am UTC](https://discuss.elastic.co/t/how-to-change-indexing-frequency-of-x-pack-monitoring-plugin/65954 "2016-11-14T10:18:17Z")
I have X-Pack installed and I have enabled its monitoring feature. In the indexes, I have seen indexes like .monitoring-kibana-2-2016.11.08, .monitoring-es-2-2016.11.08, .monitoring-data-2 etc. Its consuming a lot of spa… --- ## [Sending Windows logs to Elastic Search or Logstash and viewing Windows event logs in Kibana](https://discuss.elastic.co/t/sending-windows-logs-to-elastic-search-or-logstash-and-viewing-windows-event-logs-in-kibana/176172)
**Author:** [@Pasindu\_Fernando](https://discuss.elastic.co/u/Pasindu_Fernando)\ **Replies:** 0\ **Last updated:** [April 10, 2019, 8:42am UTC](https://discuss.elastic.co/t/sending-windows-logs-to-elastic-search-or-logstash-and-viewing-windows-event-logs-in-kibana/176172 "2019-04-10T08:42:44Z")
Hi, we setup an ELK stack on Windows Server 2016 and it's running smoothly. We have installed Metric Beats on three Servers and they are forwarding the Metrics without nay issue. Now my boss need to view Windows event lo… --- ## [System indices and number of replicas](https://discuss.elastic.co/t/system-indices-and-number-of-replicas/218395)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [February 10, 2020, 8:32pm UTC](https://discuss.elastic.co/t/system-indices-and-number-of-replicas/218395 "2020-02-10T20:32:50Z")
I have a question about the number of replicas for system indices (Elasticsearch 7.5.x). Standard number of shards = 1, number of replicas = 1. Is it possible to change the number of replicas for system indices? For e… --- ## [SNMP Traffic Utilization graph](https://discuss.elastic.co/t/snmp-traffic-utilization-graph/258978)
**Author:** [@pavansh](https://discuss.elastic.co/u/pavansh)\ **Replies:** 6\ **Last updated:** [December 18, 2020, 9:00am UTC](https://discuss.elastic.co/t/snmp-traffic-utilization-graph/258978 "2020-12-18T09:00:55Z")
I am using SNMP input Plugin to get IfInOctects and OutOctects Can anyone help me to create a chart to show Inbound/Outbound Traffic in Mbps? --- ## [Logstash http poller- custom header : error](https://discuss.elastic.co/t/logstash-http-poller-custom-header-error/237314)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 6\ **Last updated:** [June 26, 2020, 5:52am UTC](https://discuss.elastic.co/t/logstash-http-poller-custom-header-error/237314 "2020-06-26T05:52:38Z")
I am trying to use an API url to get data from a source. My api has a custom Header for aw-tenant-code, which works well with a curl. Here is my sample data: input { http\_poller { urls =\> { snowsr =\> { … --- ## [How to Use Graph](https://discuss.elastic.co/t/how-to-use-graph/59644)
**Author:** [@OmarBarac](https://discuss.elastic.co/u/OmarBarac)\ **Replies:** 6\ **Last updated:** [September 6, 2016, 8:20am UTC](https://discuss.elastic.co/t/how-to-use-graph/59644 "2016-09-06T08:20:32Z")
Hello, We are using graph extension in Kibana to visualize relation between people, we have the following table in elasticsearch with Person1 as the index : Person1 Person2 Score A B … --- ## [Keytool error: java.io.IOException: Invalid keystore format](https://discuss.elastic.co/t/keytool-error-java-io-ioexception-invalid-keystore-format/328939)
**Author:** [@dr01](https://discuss.elastic.co/u/dr01)\ **Replies:** 2\ **Last updated:** [March 31, 2023, 8:40pm UTC](https://discuss.elastic.co/t/keytool-error-java-io-ioexception-invalid-keystore-format/328939 "2023-03-31T20:40:24Z")
I have Elasticsearch 7.17. Following the generation of new SSL certificates, I have created a new keystore via the command /usr/share/elasticsearch/bin/elasticsearch-keystore create and I'm trying to add the CA cert… --- ## [Kibana service paused](https://discuss.elastic.co/t/kibana-service-paused/87804)
**Author:** [@Lbr1](https://discuss.elastic.co/u/Lbr1)\ **Replies:** 2\ **Last updated:** [May 31, 2017, 10:32pm UTC](https://discuss.elastic.co/t/kibana-service-paused/87804 "2017-05-31T22:32:20Z")
hi guys, good evening, I m using windows 10 and i installed a Elasticsearch 5.4.0 everything went well and when I start the service it is running as expected. But after installing kibana with nssm, and trying to sta… --- ## [Kibana is installed successfully but not working, How to run kibana without xpack](https://discuss.elastic.co/t/kibana-is-installed-successfully-but-not-working-how-to-run-kibana-without-xpack/220637)
**Author:** [@Ayush\_Verma](https://discuss.elastic.co/u/Ayush_Verma)\ **Replies:** 4\ **Last updated:** [February 26, 2020, 8:32am UTC](https://discuss.elastic.co/t/kibana-is-installed-successfully-but-not-working-how-to-run-kibana-without-xpack/220637 "2020-02-26T08:32:51Z")
I Installed elasticsearch 7.3 into 3 GCP server all 3 are master and also data nodes this is working fine, But now I installed kibana 7.3 to one of the server its status is green but when I try to open it from browser th… --- ## [Getting mail from all topics just not the ones I'm following](https://discuss.elastic.co/t/getting-mail-from-all-topics-just-not-the-ones-im-following/84900)
**Author:** [@simmel](https://discuss.elastic.co/u/simmel)\ **Replies:** 4\ **Last updated:** [May 12, 2017, 6:56pm UTC](https://discuss.elastic.co/t/getting-mail-from-all-topics-just-not-the-ones-im-following/84900 "2017-05-12T18:56:13Z")
I recently came back to work and before I left I had unsubscribed to all categories so I received no mail during my absense. Now I'm back and I see that I'm still watching Logstash and Tracking Announcements, Kibana, S… --- ## [Missing Plungin: Install watcher in ELasticsearch](https://discuss.elastic.co/t/missing-plungin-install-watcher-in-elasticsearch/93359)
**Author:** [@Aditi\_Wadekar](https://discuss.elastic.co/u/Aditi_Wadekar)\ **Replies:** 1\ **Last updated:** [July 17, 2017, 8:50am UTC](https://discuss.elastic.co/t/missing-plungin-install-watcher-in-elasticsearch/93359 "2017-07-17T08:50:13Z")
Currently, I'm using elastisearch version 5.5. Trying to install watchers in it. Referred below document for information https://www.elastic.co/guide/en/watcher/current/installing-watcher.html cd /usr/share/elasticsear… --- ## [Elasticsearch and CORS](https://discuss.elastic.co/t/elasticsearch-and-cors/92403)
**Author:** [@Jackson\_Pollock](https://discuss.elastic.co/u/Jackson_Pollock)\ **Replies:** 1\ **Last updated:** [July 11, 2017, 3:18am UTC](https://discuss.elastic.co/t/elasticsearch-and-cors/92403 "2017-07-11T03:18:34Z")
Great explanation on CORS here: https://discuss.elastic.co/t/enable-cors-elasticsearch-5-1-1/68783 But I don't seem able to get this to work in any config so reaching out for some help. I'm running the angular.js ex… --- ## [New Java API Client GetResponse](https://discuss.elastic.co/t/new-java-api-client-getresponse/340287)
**Author:** [@toddcarv](https://discuss.elastic.co/u/toddcarv)\ **Replies:** 8\ **Last updated:** [August 8, 2023, 12:35pm UTC](https://discuss.elastic.co/t/new-java-api-client-getresponse/340287 "2023-08-08T12:35:40Z")
The HLRC provided getSourceAsMap in GetResponse. I'm trying to get the source as a map. How do I do this with the new client? Thanks. --- ## [ES 7.0 New Date Format](https://discuss.elastic.co/t/es-7-0-new-date-format/219413)
**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\ **Replies:** 3\ **Last updated:** [February 18, 2020, 10:40am UTC](https://discuss.elastic.co/t/es-7-0-new-date-format/219413 "2020-02-18T10:40:28Z")
We are currently upgrading from ES 6.8.2 to 7.0.0. We have date fields in our documents that are stored with the format yyyy-MM-dd'T'HH:mm:ss.SSSZ However, since in ES 7.0 uses java.util.time instead of Joda based time… --- ## [Tricky Multiline pattern/configuration](https://discuss.elastic.co/t/tricky-multiline-pattern-configuration/102450)
**Author:** [@sbuch](https://discuss.elastic.co/u/sbuch)\ **Replies:** 8\ **Last updated:** [October 6, 2017, 10:11am UTC](https://discuss.elastic.co/t/tricky-multiline-pattern-configuration/102450 "2017-10-06T10:11:59Z")
Hi I have a very tricky situation with two types of multiline messages in one file and of course no application support to change it :slight\_smile: Example 1: 20170930 14:20:01.003 message 1 line 1 message 1 line 2 201… --- ## [Logstash-output-elasticsearch error retry Individual action](https://discuss.elastic.co/t/logstash-output-elasticsearch-error-retry-individual-action/76718)
**Author:** [@jamal](https://discuss.elastic.co/u/jamal)\ **Replies:** 3\ **Last updated:** [March 2, 2017, 7:18am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error-retry-individual-action/76718 "2017-03-02T07:18:47Z")
I am using twitter-input to fetch data from twitter and ouput-elasticsearch to store it in elasticsearch and I am using logstash 5.2.1 in Ubuntu OS when I run it through the following error \> \[2017-03-02T08:18:45,576… --- ## ["Extracting" Data from a Message](https://discuss.elastic.co/t/extracting-data-from-a-message/31795)
**Author:** [@just5guy](https://discuss.elastic.co/u/just5guy)\ **Replies:** 3\ **Last updated:** [October 9, 2015, 4:02pm UTC](https://discuss.elastic.co/t/extracting-data-from-a-message/31795 "2015-10-09T16:02:31Z")
So I am coming from Splunk, currently using Graylog, and trying to set up the ELK Stack to analyze power usage. I have my Energy Monitor sending messages to the server properly. Here are a couple lines for an example: … --- ## [Stack monitoring: self vs metricbeat monitoring](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:27pm UTC](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858 "2020-09-17T12:27:06Z")
Dear all, I have an ELK 7.9.1 platform. When I go to Kibana --\> Stack Monitoring, I can see Elasticsearcxj, Kibana and Beats with SELF MONITORING, but I have the option to change to METRICBEAT MONITORING using this beat… [Previous page](https://discuss.elastic.co/top.md?page=821&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=823&per_page=50&period=all)