# Top **URL:** https://discuss.elastic.co/top.md?page=826&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 827 --- ## [Manage old data based on time](https://discuss.elastic.co/t/manage-old-data-based-on-time/39447)
**Author:** [@edeak](https://discuss.elastic.co/u/edeak)\ **Replies:** 5\ **Last updated:** [January 18, 2016, 4:44pm UTC](https://discuss.elastic.co/t/manage-old-data-based-on-time/39447 "2016-01-18T16:44:59Z")
Hi guys, we are working on a system which working on tons of data but tipically our users search for data from the last 3 days. Tipical other options are the last 7, 14, 30 days and we have an option to custom time int… --- ## [SSL between elasticsearch nodes fails](https://discuss.elastic.co/t/ssl-between-elasticsearch-nodes-fails/67082)
**Author:** [@gmachado](https://discuss.elastic.co/u/gmachado)\ **Replies:** 2\ **Last updated:** [December 2, 2016, 12:03am UTC](https://discuss.elastic.co/t/ssl-between-elasticsearch-nodes-fails/67082 "2016-12-02T00:03:19Z")
I've deployed a 3 nodes elasticsearch 5.0 cluster and the x-pack 5.0 plugin. I've created 3 ssl certificates client-server with the same CA and added this lines elasticsearch.yml file : xpack.ssl.key: … --- ## [Migrating from Graylog to Logstash (SOLVED)](https://discuss.elastic.co/t/migrating-from-graylog-to-logstash-solved/64005)
**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\ **Replies:** 2\ **Last updated:** [October 26, 2016, 4:19pm UTC](https://discuss.elastic.co/t/migrating-from-graylog-to-logstash-solved/64005 "2016-10-26T16:19:52Z")
Hello, At the moment our cluster is composed of: - 4 elasticsearch nodes - 3 graylog instances for the logs processing/extractors - Kibana for the visualization (graph, dashboard) I want to upgrade our elastic nodes … --- ## [TransportClient with username and password](https://discuss.elastic.co/t/transportclient-with-username-and-password/31968)
**Author:** [@paranoiabla](https://discuss.elastic.co/u/paranoiabla)\ **Replies:** 2\ **Last updated:** [October 11, 2015, 2:24pm UTC](https://discuss.elastic.co/t/transportclient-with-username-and-password/31968 "2015-10-11T14:24:38Z")
Hello, I want to create elasticsearch TransportClient with basic authentication. I see that the TransportClient uses InetSocketTransportAddress but this only accepts host and port. However the url I have is this: http:… --- ## [Kibana Query - match and not eixsts on same field in a single query](https://discuss.elastic.co/t/kibana-query-match-and-not-eixsts-on-same-field-in-a-single-query/215765)
**Author:** [@suren-raymond](https://discuss.elastic.co/u/suren-raymond)\ **Replies:** 8\ **Last updated:** [January 21, 2020, 9:28am UTC](https://discuss.elastic.co/t/kibana-query-match-and-not-eixsts-on-same-field-in-a-single-query/215765 "2020-01-21T09:28:12Z")
i've a index document field called "historicalData". Usually it has a value set \[true,false\]. But few documents of an index are not having the above said field "historicalData" at all. Wanted to query the documents with … --- ## [org.apache.lucene.store.AlreadyClosedException: Underlying file changed by an external force](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force/215311)
**Author:** [@rdl](https://discuss.elastic.co/u/rdl)\ **Replies:** 3\ **Last updated:** [January 16, 2020, 2:52pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-underlying-file-changed-by-an-external-force/215311 "2020-01-16T14:52:24Z")
Environment: GlusterFS 6.0 OpenShift 3.11 ES 6 Hi, while deploying sonarqube which in turn uses ES6 in a POD I encounter the following error: 2020.01.16 12:16:19 WARN es\[o.e.c.r.a.AllocationService\] failing shard \[… --- ## [Vega Sankey Diagram](https://discuss.elastic.co/t/vega-sankey-diagram/338149)
**Author:** [@Ranger\_Rick](https://discuss.elastic.co/u/Ranger_Rick)\ **Replies:** 4\ **Last updated:** [July 26, 2023, 4:09pm UTC](https://discuss.elastic.co/t/vega-sankey-diagram/338149 "2023-07-26T16:09:34Z")
Good afternoon! I created some Sankeys to better visualize certain relationships and they mostly work well. Following the example provided here: Sankey Creation resulting in clean graphs but with a slight issue. The da… --- ## [Filebeat Nginx module not dropping events](https://discuss.elastic.co/t/filebeat-nginx-module-not-dropping-events/160797)
**Author:** [@arlen](https://discuss.elastic.co/u/arlen)\ **Replies:** 4\ **Last updated:** [December 28, 2018, 3:54pm UTC](https://discuss.elastic.co/t/filebeat-nginx-module-not-dropping-events/160797 "2018-12-28T15:54:19Z")
I'm trying to exclude some events, started out with a more complex processor, but was never once able to make even a simple condition work. drop\_event, with no condition, does what it's supposed to and drops everything. … --- ## [Download Transactions Data to excel sheet in Elastic APM](https://discuss.elastic.co/t/download-transactions-data-to-excel-sheet-in-elastic-apm/339957)
**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\ **Replies:** 7\ **Last updated:** [August 9, 2023, 6:20pm UTC](https://discuss.elastic.co/t/download-transactions-data-to-excel-sheet-in-elastic-apm/339957 "2023-08-09T18:20:13Z")
hi @basepi , Is there any way can download the TRANSACTIONAL DATA to an excel sheet. --- ## [Advice on self hosted elasticsearch architecture](https://discuss.elastic.co/t/advice-on-self-hosted-elasticsearch-architecture/267962)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 9:36am UTC](https://discuss.elastic.co/t/advice-on-self-hosted-elasticsearch-architecture/267962 "2021-03-22T09:36:35Z")
Hello, We are looking to build a self hosted elasticsearch cluster either on AWS. I have been looking at infrastructure designs for HA ES setup and was wondering at what stage is it worth in migrating to self hosted so… --- ## [Tracking down which pipelines fails to parse](https://discuss.elastic.co/t/tracking-down-which-pipelines-fails-to-parse/181763)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 7\ **Last updated:** [July 4, 2019, 1:59pm UTC](https://discuss.elastic.co/t/tracking-down-which-pipelines-fails-to-parse/181763 "2019-07-04T13:59:01Z")
I underwent a pretty bumpy upgrade process behind me and now that the stack stabilized, I noticed that for some pipelines there were no data parsed. As a lot of information is parsed and I've got a dozen pipelines, it is… --- ## [503 return codes in APM](https://discuss.elastic.co/t/503-return-codes-in-apm/174418)
**Author:** [@mikemadden42](https://discuss.elastic.co/u/mikemadden42)\ **Replies:** 7\ **Last updated:** [March 28, 2019, 10:20pm UTC](https://discuss.elastic.co/t/503-return-codes-in-apm/174418 "2019-03-28T22:20:28Z")
Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): We've started getting 503 return codes in our APM application. The application is written in Node.js. Her… --- ## [Renaming fields wild card logstash](https://discuss.elastic.co/t/renaming-fields-wild-card-logstash/189396)
**Author:** [@Paulo64](https://discuss.elastic.co/u/Paulo64)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 9:00am UTC](https://discuss.elastic.co/t/renaming-fields-wild-card-logstash/189396 "2019-07-09T09:00:08Z")
Hello, From what I have read, there is not yet wild card associated with fields to use with "mutate". In my logstash config, I am doing something like this : filter { mutate { rename =\> \["Site.Equipment.Me… --- ## [Connect to Elastic Cloud with Java Low Level Rest Client](https://discuss.elastic.co/t/connect-to-elastic-cloud-with-java-low-level-rest-client/165801)
**Author:** [@stefan5](https://discuss.elastic.co/u/stefan5)\ **Replies:** 2\ **Last updated:** [January 28, 2019, 11:51pm UTC](https://discuss.elastic.co/t/connect-to-elastic-cloud-with-java-low-level-rest-client/165801 "2019-01-28T23:51:29Z")
I want to connect to my AWS Elasticsearch cloud but it only works for my localhost. When i connect to localhost i type this, and this works: RestClient restClient = RestClient.builder(new HttpHost("localhost", 9200, "h… --- ## [Using token to enrol kibana without a local browser](https://discuss.elastic.co/t/using-token-to-enrol-kibana-without-a-local-browser/302426)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 6\ **Last updated:** [April 17, 2022, 6:53am UTC](https://discuss.elastic.co/t/using-token-to-enrol-kibana-without-a-local-browser/302426 "2022-04-17T06:53:02Z")
Hi, I have two virtual machines, one running Elasticsearch, one running kibana. I have generated a token to enrol kibana, but have been unable to apply it. I start kibana and can see the link generated to apply the to… --- ## [Node crashes due to max number of docs exceeded, but ILM should've not let it happen](https://discuss.elastic.co/t/node-crashes-due-to-max-number-of-docs-exceeded-but-ilm-shouldve-not-let-it-happen/201499)
**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\ **Replies:** 6\ **Last updated:** [November 5, 2019, 4:15am UTC](https://discuss.elastic.co/t/node-crashes-due-to-max-number-of-docs-exceeded-but-ilm-shouldve-not-let-it-happen/201499 "2019-11-05T04:15:06Z")
Elasticsearch Version: 7.3.0 Index: metricbeat-7.3.0 (mentioning to note that the data rates have been consistent for the past month) It is noticed that two out of three Elasticsearch nodes (m4.4xlarge) crashed. When … --- ## [LogstashからElastic cloudに接続時に407エラー発生](https://discuss.elastic.co/t/logstash-elastic-cloud-407/204009)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 5\ **Last updated:** [October 21, 2019, 7:12am UTC](https://discuss.elastic.co/t/logstash-elastic-cloud-407/204009 "2019-10-21T07:12:11Z")
LogstashからElastic cloudに対してファイル転送を実施しようとしたところ、407エラーが発生しています。 【エラーメッセージ】 Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"https://elastic:xxxxxx@XXXXX.ap-northeast-1.aws.found.io:9243/",… --- ## [Fatal Error Block in setup after succesfull connection](https://discuss.elastic.co/t/fatal-error-block-in-setup-after-succesfull-connection/255255)
**Author:** [@Kiwito](https://discuss.elastic.co/u/Kiwito)\ **Replies:** 3\ **Last updated:** [November 12, 2020, 11:49pm UTC](https://discuss.elastic.co/t/fatal-error-block-in-setup-after-succesfull-connection/255255 "2020-11-12T23:49:24Z")
Hi there, I have been trying to solve this problem for a day. I couldn't find any solutions. \[2020-11-12T20:07:47,943\]\[INFO \]\[logstash.filters.geoip \]\[main\] Using geoip database {:path=\>"/opt/logstash/vendor/geoi… --- ## [Logstash cant receive log from filebeat](https://discuss.elastic.co/t/logstash-cant-receive-log-from-filebeat/125117)
**Author:** [@zxq209](https://discuss.elastic.co/u/zxq209)\ **Replies:** 3\ **Last updated:** [March 23, 2018, 3:03am UTC](https://discuss.elastic.co/t/logstash-cant-receive-log-from-filebeat/125117 "2018-03-23T03:03:13Z")
I'm using filebeat-6.2.3 ,logstash-6.2.2 filebeat config： filebeat.prospectors: - type: log paths: - /path/to/file/log/\*.log output.logstash: # The Logstash hosts hosts: \["192.168.15.41:5044"\] enabled: tr… --- ## [Problem of plugin logstash-input-imap](https://discuss.elastic.co/t/problem-of-plugin-logstash-input-imap/24155)
**Author:** [@Penny\_Lee](https://discuss.elastic.co/u/Penny_Lee)\ **Replies:** 3\ **Last updated:** [June 25, 2015, 1:36am UTC](https://discuss.elastic.co/t/problem-of-plugin-logstash-input-imap/24155 "2015-06-25T01:36:56Z")
Hi, I was doing the email input to logstash using plugin input imap. \[https://github.com/logstash-plugins/logstash-input-imap\]\[1\] input { imap { type =\> mail … --- ## [Filebeat on windows](https://discuss.elastic.co/t/filebeat-on-windows/124714)
**Author:** [@kanchan\_pingale](https://discuss.elastic.co/u/kanchan_pingale)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 8:55pm UTC](https://discuss.elastic.co/t/filebeat-on-windows/124714 "2018-03-20T20:55:27Z")
hello! My logs are not getting harvested. The command used is: filebeat.exe -e -v -c filebeat.yml The output is: \[filebeat\] And my filebeat.yml is: ###################### Filebeat Configuration Example #############… --- ## [Unable to authenticate with LDAP/AD](https://discuss.elastic.co/t/unable-to-authenticate-with-ldap-ad/40146)
**Author:** [@vrodrigo](https://discuss.elastic.co/u/vrodrigo)\ **Replies:** 1\ **Last updated:** [February 1, 2016, 7:14pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-with-ldap-ad/40146 "2016-02-01T19:14:02Z")
I keep getting a failed auth attempt when trying to authenticate with LDAP. Here is a snippet from the logs \[2016-01-26 11:55:24,039\]\[WARN \]\[shield.authc.ldap \] \[DataGrid-1\] failed LDAP authentication with user … --- ## [Auditbeat test config fails when auditbeat already running](https://discuss.elastic.co/t/auditbeat-test-config-fails-when-auditbeat-already-running/216312)
**Author:** [@p\_ansell](https://discuss.elastic.co/u/p_ansell)\ **Replies:** 0\ **Last updated:** [January 23, 2020, 8:17pm UTC](https://discuss.elastic.co/t/auditbeat-test-config-fails-when-auditbeat-already-running/216312 "2020-01-23T20:17:53Z")
I want to use the auditbeat test config command to test out new configurations on the servers they need to be deployed to (automatically using ansible template validate, to avoid overwriting configurations with something… --- ## [Can't load installed filter plugin](https://discuss.elastic.co/t/cant-load-installed-filter-plugin/215303)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 0\ **Last updated:** [January 16, 2020, 11:27am UTC](https://discuss.elastic.co/t/cant-load-installed-filter-plugin/215303 "2020-01-16T11:27:44Z")
Hi all, I found logstash-filter-jwt-decode plugin to decode jwt tokens, but I am not able to load it despite successfull installation. Below is what i've done. bash-4.2$ logstash-plugin install logstash-filter-jwt-deco… --- ## [Having multiple logstash instances (more than one server) for reading from same s3 bucket using s3 input plugin](https://discuss.elastic.co/t/having-multiple-logstash-instances-more-than-one-server-for-reading-from-same-s3-bucket-using-s3-input-plugin/194251)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 0\ **Last updated:** [August 7, 2019, 2:01pm UTC](https://discuss.elastic.co/t/having-multiple-logstash-instances-more-than-one-server-for-reading-from-same-s3-bucket-using-s3-input-plugin/194251 "2019-08-07T14:01:57Z")
Would like to run logstash instances on two servers for High availability. Would like to know how to configure logstash to read from the same S3 bucket so that if one logstash server goes down other logstash instance can… --- ## [Normalizing the Huawei firewall logs](https://discuss.elastic.co/t/normalizing-the-huawei-firewall-logs/335861)
**Author:** [@Imad\_TAMELGHAGHET](https://discuss.elastic.co/u/Imad_TAMELGHAGHET)\ **Replies:** 4\ **Last updated:** [June 13, 2023, 3:07pm UTC](https://discuss.elastic.co/t/normalizing-the-huawei-firewall-logs/335861 "2023-06-13T15:07:58Z")
Hello , I am actually working on a ELK SIEM project, and one of the logs sources i am woking with is a Huawei Firewall .Since Huawei firewall logs have differents formats, I would appreciate some suggestions and insight… --- ## [Nginx is giving blank page on routing to Kibana](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695)
**Author:** [@Natarajan](https://discuss.elastic.co/u/Natarajan)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 8:40am UTC](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695 "2020-03-06T08:40:42Z")
We have set up Kibana and Nginx. After making the changes in nginx to route to Kibana, we are getting following error and it is giving blank page. Refused to execute inline script because it violates the following Conte… --- ## [Unable to start Agent ( could not find or load main class .apm.service\_name=DemoApplication )](https://discuss.elastic.co/t/unable-to-start-agent-could-not-find-or-load-main-class-apm-service-name-demoapplication/181811)
**Author:** [@Badem](https://discuss.elastic.co/u/Badem)\ **Replies:** 4\ **Last updated:** [May 20, 2019, 2:17pm UTC](https://discuss.elastic.co/t/unable-to-start-agent-could-not-find-or-load-main-class-apm-service-name-demoapplication/181811 "2019-05-20T14:17:14Z")
Hello, everyone Im currently testing APM with springboot application, and i'm getting error while starting the Agent. \*\* Thank you in advance for your help \*\* Kibana version: 7.0.1 Elasticsearch version: 7.0.1 APM S… --- ## [Filebeat installation in linux](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388)
**Author:** [@vaddanam](https://discuss.elastic.co/u/vaddanam)\ **Replies:** 4\ **Last updated:** [August 7, 2017, 11:56am UTC](https://discuss.elastic.co/t/filebeat-installation-in-linux/95388 "2017-08-07T11:56:41Z")
Hi Team, I installed the filebeat in linux environment using the rpm installation sudo install rpm filename. On observing that the default directory layout data folder “/var/lib/filebeat” and logs folder “/var/log/fileb… --- ## [Calculating page views and downloads for web logs](https://discuss.elastic.co/t/calculating-page-views-and-downloads-for-web-logs/167353)
**Author:** [@Saahithi](https://discuss.elastic.co/u/Saahithi)\ **Replies:** 3\ **Last updated:** [February 21, 2019, 3:45pm UTC](https://discuss.elastic.co/t/calculating-page-views-and-downloads-for-web-logs/167353 "2019-02-21T15:45:46Z")
How to create a dashboard using page views and downloads. First I need to find a way to determine the page views and downloads from a web log file. I don't know if I have to write a function in logstash or if there is a… --- ## [How to add a sum for all columns in a table view](https://discuss.elastic.co/t/how-to-add-a-sum-for-all-columns-in-a-table-view/250888)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 7:00am UTC](https://discuss.elastic.co/t/how-to-add-a-sum-for-all-columns-in-a-table-view/250888 "2020-10-05T07:00:13Z")
Hi all, I need to add a table view in my kibana dashboard with a sum for all columns like Excel. (see the picture. Is there any idea. Best Regards Hamid --- ## [Error reindexing "Field \[\_source\] is defined both as an object and a field."](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518)
**Author:** [@sidgate](https://discuss.elastic.co/u/sidgate)\ **Replies:** 2\ **Last updated:** [March 21, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-reindexing-field-source-is-defined-both-as-an-object-and-a-field/224518 "2020-03-21T14:54:42Z")
I am trying to copy existing index to new index using reindex API /\_reindex?wait\_for\_completion=false { "source": { "index": "articles" }, "dest": { "index": "articles20200321" }, "conflicts"… --- ## [Error starting filebeat reading CA certificate](https://discuss.elastic.co/t/error-starting-filebeat-reading-ca-certificate/147419)
**Author:** [@jabu](https://discuss.elastic.co/u/jabu)\ **Replies:** 2\ **Last updated:** [September 6, 2018, 12:54pm UTC](https://discuss.elastic.co/t/error-starting-filebeat-reading-ca-certificate/147419 "2018-09-06T12:54:59Z")
I'm unable to start filebeat This is the log file 2018-09-05T06:04:27-07:00 INFO Home path: \[/usr/share/filebeat\] Config path: \[/etc/filebeat\] Data path: \[/var/lib/filebeat\] Logs path: \[/var/log/filebeat\] 2018-09-05T06… --- ## [Elasticsearch 6.2.4 Preparing for removal of mapping types](https://discuss.elastic.co/t/elasticsearch-6-2-4-preparing-for-removal-of-mapping-types/134064)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 6\ **Last updated:** [May 31, 2018, 3:26pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-4-preparing-for-removal-of-mapping-types/134064 "2018-05-31T15:26:16Z")
Hi Team, Could you please help to clear a confusion I have with regards to the future removal of mapping types? According to the documenation: the \_default\_ mapping type is deprecated and will be removed in 7.x the p… --- ## [How to install kibana plugins for windows 8. I am using Kibana 6 version](https://discuss.elastic.co/t/how-to-install-kibana-plugins-for-windows-8-i-am-using-kibana-6-version/123969)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 8\ **Last updated:** [March 15, 2018, 5:16pm UTC](https://discuss.elastic.co/t/how-to-install-kibana-plugins-for-windows-8-i-am-using-kibana-6-version/123969 "2018-03-15T17:16:15Z")
I tried looking around. But I couldn't find steps to install the plugins. at the moment I don't have Tilemap visualization. I looked at the following link and couldn't find commands for windows. https://www.elastic.co/… --- ## [Help reviewing filter/input/ouput Packetbeat nor working with LS](https://discuss.elastic.co/t/help-reviewing-filter-input-ouput-packetbeat-nor-working-with-ls/62489)
**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\ **Replies:** 8\ **Last updated:** [October 25, 2016, 6:24pm UTC](https://discuss.elastic.co/t/help-reviewing-filter-input-ouput-packetbeat-nor-working-with-ls/62489 "2016-10-25T18:24:37Z")
Hi there guys, I've been having this issue https://discuss.elastic.co/t/packetbeat-index-not-created-and-no-info-from-kibana/62197/10 , I cannot ingest the data sent by packetbeat into elasticsearch through logstash,… --- ## [How Logstash works during Tomcat Restart?](https://discuss.elastic.co/t/how-logstash-works-during-tomcat-restart/44041)
**Author:** [@ArivazhaganJ](https://discuss.elastic.co/u/ArivazhaganJ)\ **Replies:** 8\ **Last updated:** [March 22, 2016, 4:40am UTC](https://discuss.elastic.co/t/how-logstash-works-during-tomcat-restart/44041 "2016-03-22T04:40:24Z")
I am using logstash 1.5.4. Input plugin is JMX to monitor JVM stats. Output plugin is Elasticsearch and I index the logs directly. My application works on TomcatServer. Whenever I restart Tomcat, as soon as tomcat is… --- ## ['Refresh' setting for a bulk update request](https://discuss.elastic.co/t/refresh-setting-for-a-bulk-update-request/295641)
**Author:** [@Kaushik\_Lingarkar](https://discuss.elastic.co/u/Kaushik_Lingarkar)\ **Replies:** 7\ **Last updated:** [January 31, 2022, 9:22pm UTC](https://discuss.elastic.co/t/refresh-setting-for-a-bulk-update-request/295641 "2022-01-31T21:22:29Z")
Hello all, This is my first post here and thank you for this amazing tool. I am using the Elasticsearch-rest-client and I wanted a clarification with the behaviour of Refresh setting with the Bulk API. Does the 'refre… --- ## [X-pack not generating indices](https://discuss.elastic.co/t/x-pack-not-generating-indices/89128)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 7\ **Last updated:** [June 13, 2017, 5:50am UTC](https://discuss.elastic.co/t/x-pack-not-generating-indices/89128 "2017-06-13T05:50:42Z")
Hi, I installed the X-pack but it is not generating the reporting etc. indices even though I can generate and download reports. My user has superuser rights. I've got a default 5.4.1 installation, no strange setti… --- ## [Kibana not showning data from ES](https://discuss.elastic.co/t/kibana-not-showning-data-from-es/37182)
**Author:** [@Yorko](https://discuss.elastic.co/u/Yorko)\ **Replies:** 7\ **Last updated:** [December 21, 2015, 10:01pm UTC](https://discuss.elastic.co/t/kibana-not-showning-data-from-es/37182 "2015-12-21T22:01:43Z")
Hi, I've used Fscrawler to index some files from the file system to ES and hoped to hook up ES to Kibana to get a visual representation but after defining an index pattern for Kibana it doesn't display anything under t… --- ## [Change path.data to elasticsearch](https://discuss.elastic.co/t/change-path-data-to-elasticsearch/138678)
**Author:** [@arso](https://discuss.elastic.co/u/arso)\ **Replies:** 1\ **Last updated:** [July 13, 2018, 4:21pm UTC](https://discuss.elastic.co/t/change-path-data-to-elasticsearch/138678 "2018-07-13T16:21:31Z")
Hi, I have elasticseach 5.6.10-1 installed on RedHat 7. I want to change path of data to /data (for example) So i changed parameter "path.data" to elasticsearch.yml on /etc/elasticsearch put when i restart elasticsear… --- ## [Empty Buckets in Terms Aggregation when using .keyword](https://discuss.elastic.co/t/empty-buckets-in-terms-aggregation-when-using-keyword/129835)
**Author:** [@YannickWeber](https://discuss.elastic.co/u/YannickWeber)\ **Replies:** 3\ **Last updated:** [April 28, 2018, 9:32am UTC](https://discuss.elastic.co/t/empty-buckets-in-terms-aggregation-when-using-keyword/129835 "2018-04-28T09:32:38Z")
When performing this Query: GET /dnslog/doc/\_search { "size" : 0, "aggs": { "Actions": { "terms": { "field": "Action.keyword", "size": 30 } } } } I get this result on my local … --- ## [Error when trying to load lifecycle policies after updating to 7.9](https://discuss.elastic.co/t/error-when-trying-to-load-lifecycle-policies-after-updating-to-7-9/247271)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 6\ **Last updated:** [October 29, 2020, 8:00pm UTC](https://discuss.elastic.co/t/error-when-trying-to-load-lifecycle-policies-after-updating-to-7-9/247271 "2020-10-29T20:00:24Z")
Hello, after updating from elastic stack 7.4 to 7.9 when I try to go into the lifecycle policies page I receive the error: 400: Bad Request. \[illegal\_argument\_exception\] duration cannot be negative, was given \[-11930239… --- ## [Filebeat not shipping logs from specific host](https://discuss.elastic.co/t/filebeat-not-shipping-logs-from-specific-host/70962)
**Author:** [@Rahul\_Ghanate](https://discuss.elastic.co/u/Rahul_Ghanate)\ **Replies:** 6\ **Last updated:** [January 11, 2017, 6:43am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-from-specific-host/70962 "2017-01-11T06:43:05Z")
Filebeat is not shipping logs from specific hosts, whereas everything is identical compared to another hosts where it is successfully shipping the logs. I have 3 hosts from where filebeat is shipping logs to logstash se… --- ## [How to set up elasticsearch to run on the web?](https://discuss.elastic.co/t/how-to-set-up-elasticsearch-to-run-on-the-web/44904)
**Author:** [@jhwhite](https://discuss.elastic.co/u/jhwhite)\ **Replies:** 5\ **Last updated:** [March 22, 2016, 6:41am UTC](https://discuss.elastic.co/t/how-to-set-up-elasticsearch-to-run-on-the-web/44904 "2016-03-22T06:41:56Z")
I wrote a search app locally and everything is running fine. It's just an angular front end hitting the elasticsearch. I installed elasticsearch on my digitalocean droplet running Ubuntu 14.04 apache. I have a domain f… --- ## [How can I merge onw ElasticSearch database into another?](https://discuss.elastic.co/t/how-can-i-merge-onw-elasticsearch-database-into-another/12798)
**Author:** [@Raymond\_Wang](https://discuss.elastic.co/u/Raymond_Wang)\ **Replies:** 5\ **Last updated:** [July 16, 2013, 8:28am UTC](https://discuss.elastic.co/t/how-can-i-merge-onw-elasticsearch-database-into-another/12798 "2013-07-16T08:28:32Z")
I have two ES instance deployed, and the two instance have some data in common. I wanna to merge the two database into one. So, is there a tool that can help me? any help would be appreciated. -- You re… --- ## [Ruby plugin getting 'undefined method'](https://discuss.elastic.co/t/ruby-plugin-getting-undefined-method/75888)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 2:58pm UTC](https://discuss.elastic.co/t/ruby-plugin-getting-undefined-method/75888 "2017-02-21T14:58:21Z")
Hi, I was wondering if anyone knew why I'm getting this exception for the following ruby code. It seems to not recognize the gsub method. Do I have to initialize it in order for LS to understand it? ruby… --- ## [Kafka output security/encryption](https://discuss.elastic.co/t/kafka-output-security-encryption/25810)
**Author:** [@Win\_Wang](https://discuss.elastic.co/u/Win_Wang)\ **Replies:** 4\ **Last updated:** [July 19, 2015, 1:10pm UTC](https://discuss.elastic.co/t/kafka-output-security-encryption/25810 "2015-07-19T13:10:26Z")
Does anyone know if the kafka output uses ssl/tls security or can be encrypted without filters? --- ## [Visualization of the most frequent words](https://discuss.elastic.co/t/visualization-of-the-most-frequent-words/295494)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 3\ **Last updated:** [January 26, 2022, 6:54pm UTC](https://discuss.elastic.co/t/visualization-of-the-most-frequent-words/295494 "2022-01-26T18:54:13Z")
Hello ! i am new to kibana and elastic My need is to display the most used words in a text type field on several documents. Is it possible to do this with kibana and elastic? If so, how is this possible? With scripted … --- ## [Filebeat miss metadata of docker container when container stops](https://discuss.elastic.co/t/filebeat-miss-metadata-of-docker-container-when-container-stops/98037)
**Author:** [@dengqingpei](https://discuss.elastic.co/u/dengqingpei)\ **Replies:** 2\ **Last updated:** [August 24, 2017, 3:03am UTC](https://discuss.elastic.co/t/filebeat-miss-metadata-of-docker-container-when-container-stops/98037 "2017-08-24T03:03:12Z")
I am trying filebeat 6.0 beta container to collect container's stdout/stderr log. Every thing works as expected but a small problem. First, let me make a brief description about my deployment. I deploy my spring boot a… [Previous page](https://discuss.elastic.co/top.md?page=825&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=827&per_page=50&period=all)