# Top

**URL:** https://discuss.elastic.co/top.md?page=836&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 837

---

## [How to change log directory for Kibana?](https://discuss.elastic.co/t/how-to-change-log-directory-for-kibana/231762)

<div class="topic-metadata">

**Author:** [@Ankit\_Sus](https://discuss.elastic.co/u/Ankit_Sus)\
**Replies:** 1\
**Last updated:** [May 9, 2020, 6:36pm UTC](https://discuss.elastic.co/t/how-to-change-log-directory-for-kibana/231762 "2020-05-09T18:36:20Z")

</div>

I have used logging.dest in my kibana.yml but I don't see logs being generated in this location. I have also created a file "kibana.log" expecting it would write to it but no luck. The file has all the permissions. logg…

---

## [Connection refused when calling CXF Webclient in custom Realm plugin](https://discuss.elastic.co/t/connection-refused-when-calling-cxf-webclient-in-custom-realm-plugin/162854)

<div class="topic-metadata">

**Author:** [@Linc12](https://discuss.elastic.co/u/Linc12)\
**Replies:** 1\
**Last updated:** [January 4, 2019, 9:11am UTC](https://discuss.elastic.co/t/connection-refused-when-calling-cxf-webclient-in-custom-realm-plugin/162854 "2019-01-04T09:11:02Z")

</div>

Hi, I'm building an Elasticsearch plugin and, while it's running, I need to reach an external service in order to retrieve some data to use in the plugin code and my the proper queries. I use org.apache.cxf.jaxrs.clien…

---

## [Custom search](https://discuss.elastic.co/t/custom-search/38591)

<div class="topic-metadata">

**Author:** [@bering](https://discuss.elastic.co/u/bering)\
**Replies:** 1\
**Last updated:** [January 7, 2016, 7:00pm UTC](https://discuss.elastic.co/t/custom-search/38591 "2016-01-07T19:00:45Z")

</div>

Hi, I have created a search in Sense that i would like to use in Kibana it that possible? Search: GET logstash-duplicates-2016.01/\_search { "size": 0, "aggs": { "duplicateNames2": { "terms": { …

---

## [Can we set kafka output topic dynamically in filebeat?](https://discuss.elastic.co/t/can-we-set-kafka-output-topic-dynamically-in-filebeat/137778)

<div class="topic-metadata">

**Author:** [@Jaskirat\_Singh](https://discuss.elastic.co/u/Jaskirat_Singh)\
**Replies:** 6\
**Last updated:** [July 11, 2018, 4:00am UTC](https://discuss.elastic.co/t/can-we-set-kafka-output-topic-dynamically-in-filebeat/137778 "2018-07-11T04:00:23Z")

</div>

Hey all, I am using filebeat to read log files and output them to kafka.My log file contains lines like this: :2018/06/28 10:59:37 {"data":"test message","topic":"account\_4"} and filebeat read it like this: "@timest…

---

## [Logstash with log4j 2.17.1 patch release](https://discuss.elastic.co/t/logstash-with-log4j-2-17-1-patch-release/294195)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 9:09pm UTC](https://discuss.elastic.co/t/logstash-with-log4j-2-17-1-patch-release/294195 "2022-01-12T21:09:49Z")

</div>

Hi Logstash team, The current latest logstash version 7.16.2 is bundled with log4j 2.17.0. Are there any plans to release a new patch version with log4j 2.17.1? Many thanks,

---

## [Authentication failed for an OpenID integration](https://discuss.elastic.co/t/authentication-failed-for-an-openid-integration/220390)

<div class="topic-metadata">

**Author:** [@sencer](https://discuss.elastic.co/u/sencer)\
**Replies:** 2\
**Last updated:** [February 24, 2020, 8:10am UTC](https://discuss.elastic.co/t/authentication-failed-for-an-openid-integration/220390 "2020-02-24T08:10:36Z")

</div>

Hello, I am using OIDC with Elasticsearch and Kibana. My configuration is as follows: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate …

---

## [How to search with full Json query using Java API](https://discuss.elastic.co/t/how-to-search-with-full-json-query-using-java-api/100628)

<div class="topic-metadata">

**Author:** [@AntonQUT](https://discuss.elastic.co/u/AntonQUT)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 12:16am UTC](https://discuss.elastic.co/t/how-to-search-with-full-json-query-using-java-api/100628 "2017-09-20T00:16:56Z")

</div>

I need to be able to perform searches with the full JSON queries that you would normally use with CURL. How can I do this using the Java API. My current approach is not working: A sample query (which works directly…

---

## [Enable slow logs not working](https://discuss.elastic.co/t/enable-slow-logs-not-working/57120)

<div class="topic-metadata">

**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\
**Replies:** 2\
**Last updated:** [March 14, 2017, 3:34am UTC](https://discuss.elastic.co/t/enable-slow-logs-not-working/57120 "2017-03-14T03:34:24Z")

</div>

Hi, I have referred Elastic search guide for enabling slow logs PUT /\_cluster/settings { "transient" : { "logger.index.search.slowlog" : "DEBUG", "logger.index.indexing.slowlog" : "WARN" } } …

---

## [Special characters in elasticsearch \_id from logstash](https://discuss.elastic.co/t/special-characters-in-elasticsearch-id-from-logstash/150968)

<div class="topic-metadata">

**Author:** [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 8:48am UTC](https://discuss.elastic.co/t/special-characters-in-elasticsearch-id-from-logstash/150968 "2018-10-09T08:48:09Z")

</div>

Hello. I am using Logstash to load data into Elasticsearch. I have chosen to use default "\_id". One of my tools only accepts characters from a range a-z, A-Z, 0-9, -. Sometimes the \_id looks like 1alyPWYB9XD0VZRJa9…

---

## [Copy another field with nanoseconds to elasticsearch/kibana @timestamp field](https://discuss.elastic.co/t/copy-another-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222541)

<div class="topic-metadata">

**Author:** [@savvy](https://discuss.elastic.co/u/savvy)\
**Replies:** 5\
**Last updated:** [March 9, 2020, 7:44pm UTC](https://discuss.elastic.co/t/copy-another-field-with-nanoseconds-to-elasticsearch-kibana-timestamp-field/222541 "2020-03-09T19:44:04Z")

</div>

Hello, My Elasticsearch is version 7.5 I have a\> date type - @timestamp field b\> string type - event\_timestamp field (format: 2020-03-06 20:28:33:232123456 +0000) sent in each event. What I want to achieve: 1st, I …

---

## [Query DSL, multiple filter, dynamic query](https://discuss.elastic.co/t/query-dsl-multiple-filter-dynamic-query/122016)

<div class="topic-metadata">

**Author:** [@DiSiZ](https://discuss.elastic.co/u/DiSiZ)\
**Replies:** 1\
**Last updated:** [March 1, 2018, 3:11pm UTC](https://discuss.elastic.co/t/query-dsl-multiple-filter-dynamic-query/122016 "2018-03-01T15:11:35Z")

</div>

Hey, I have to create dynamic query to be more precise, create multiple filters, here's my code : Filter dynamic creation : var filters = new List\<Func\<QueryContainerDescriptor\<Source\>, QueryContainer\>\>(); for (int i …

---

## [Missing security index, not able to change password](https://discuss.elastic.co/t/missing-security-index-not-able-to-change-password/66188)

<div class="topic-metadata">

**Author:** [@francisca.munhoz](https://discuss.elastic.co/u/francisca.munhoz)\
**Replies:** 1\
**Last updated:** [November 16, 2016, 12:06pm UTC](https://discuss.elastic.co/t/missing-security-index-not-able-to-change-password/66188 "2016-11-16T12:06:38Z")

</div>

Hi guys, I'm new to Elasticsearch, so please forgive my questions if it's too basic. I have a ELK 5.0 cluster running with 1 client node and 3 data/master nodes. I have installed X-pack, but I only activated Monitoring …

---

## [Change parent for children](https://discuss.elastic.co/t/change-parent-for-children/208943)

<div class="topic-metadata">

**Author:** [@Ekaterina\_Nekrasova](https://discuss.elastic.co/u/Ekaterina_Nekrasova)\
**Replies:** 8\
**Last updated:** [November 25, 2019, 11:45am UTC](https://discuss.elastic.co/t/change-parent-for-children/208943 "2019-11-25T11:45:29Z")

</div>

Hi ! i have the index with two types : Group and Person, where Group is a parent and Person is a child. The persons can change the groups, for example today into Geroup1 i have Person1, Person2 and Person3, and tomorrow…

---

## [Logstash output as CEF data to other server](https://discuss.elastic.co/t/logstash-output-as-cef-data-to-other-server/174456)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 3\
**Last updated:** [March 29, 2019, 6:08pm UTC](https://discuss.elastic.co/t/logstash-output-as-cef-data-to-other-server/174456 "2019-03-29T18:08:01Z")

</div>

Hi there, I have elastic search stack where logstash is accepting data and ingesting in elastic search now I need to have another output configured and forward the data to a third part collector which is accepting in CE…

---

## [How to use Dashboards on another machine?](https://discuss.elastic.co/t/how-to-use-dashboards-on-another-machine/298116)

<div class="topic-metadata">

**Author:** [@VibhutiSaxena](https://discuss.elastic.co/u/VibhutiSaxena)\
**Replies:** 8\
**Last updated:** [February 26, 2022, 12:46am UTC](https://discuss.elastic.co/t/how-to-use-dashboards-on-another-machine/298116 "2022-02-26T00:46:55Z")

</div>

Hello everyone, I am beginner in elastic and kibana. I created dashboards for logs on a machine, exported them in ndjson files and now I want to use these dashboards on another machine .Is it possible to use them on anot…

---

## [Can't add sample data to Kibana](https://discuss.elastic.co/t/cant-add-sample-data-to-kibana/277726)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 3\
**Last updated:** [July 4, 2021, 7:03pm UTC](https://discuss.elastic.co/t/cant-add-sample-data-to-kibana/277726 "2021-07-04T19:03:33Z")

</div>

Hi, I created a new space and trying to add sample data to it. The "Add data" button is disabled for all of the 3 options, and there's a tooltip "Unable to verify dataset status, error: Response Error" How can I sol…

---

## [Hide the credentials in the .conf file](https://discuss.elastic.co/t/hide-the-credentials-in-the-conf-file/201586)

<div class="topic-metadata">

**Author:** [@ErikWarming](https://discuss.elastic.co/u/ErikWarming)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 8:02am UTC](https://discuss.elastic.co/t/hide-the-credentials-in-the-conf-file/201586 "2019-09-30T08:02:54Z")

</div>

I am using jdbc input to pull data from a Microsoft Azure SQL server. In my .conf file USERNAME and PASSWORD is in cleartext. Is there any way to hide those, encrypt them or another way to secure them? This is an examp…

---

## [How to run ES-Hadoop in Jupyter Notebook (Python or Scala)](https://discuss.elastic.co/t/how-to-run-es-hadoop-in-jupyter-notebook-python-or-scala/131456)

<div class="topic-metadata">

**Author:** [@Luan\_Ha\_Thanh](https://discuss.elastic.co/u/Luan_Ha_Thanh)\
**Replies:** 2\
**Last updated:** [June 9, 2018, 12:01am UTC](https://discuss.elastic.co/t/how-to-run-es-hadoop-in-jupyter-notebook-python-or-scala/131456 "2018-06-09T00:01:06Z")

</div>

Hello there, I 'm following this tut to connect Elasticsearch and Spark: I use command: setx PYSPARK\_DRIVER\_PYTHON ipython setx PYSPARK\_DRIVER\_PYTHON\_OPTS notebook pyspark ----driver-class-path /path-to-jar-file... …

---

## [ES-hive query error--EsHiveSplit not found](https://discuss.elastic.co/t/es-hive-query-error-eshivesplit-not-found/66347)

<div class="topic-metadata">

**Author:** [@gzvince](https://discuss.elastic.co/u/gzvince)\
**Replies:** 2\
**Last updated:** [November 19, 2016, 2:08am UTC](https://discuss.elastic.co/t/es-hive-query-error-eshivesplit-not-found/66347 "2016-11-19T02:08:46Z")

</div>

Version of ES: 2.4.1 version of Es-Hadoop jar: 2.4.0 CDH version: 5.8.3 Hello All: I am using Elasticsearch-hadoop jar to connect ES and hive. Following my create table SQL: CREATE EXTERNAL TABLE weather\_observe\_t…

---

## [ECK Operator Disable Swap and mlockall:true](https://discuss.elastic.co/t/eck-operator-disable-swap-and-mlockall-true/249645)

<div class="topic-metadata">

**Author:** [@Fikrat\_Karimli](https://discuss.elastic.co/u/Fikrat_Karimli)\
**Replies:** 6\
**Last updated:** [September 28, 2020, 7:14am UTC](https://discuss.elastic.co/t/eck-operator-disable-swap-and-mlockall-true/249645 "2020-09-28T07:14:07Z")

</div>

Hi, I want to disable swapiness and bootstrap.memory\_lock: true but node is failing. Here is my script: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: prod spec: secureSettings: -…

---

## [Null pointer exception in GetRequest for index](https://discuss.elastic.co/t/null-pointer-exception-in-getrequest-for-index/228800)

<div class="topic-metadata">

**Author:** [@vinay123](https://discuss.elastic.co/u/vinay123)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 11:40am UTC](https://discuss.elastic.co/t/null-pointer-exception-in-getrequest-for-index/228800 "2020-04-20T11:40:19Z")

</div>

Hello , i am trying to get index from ES using java , below is the code which i have used, but i am getting null values to getrequest obj ,then its throwing null pointer exception RestHighLevelClient restHighLevelCl…

---

## [Intgration with Hive](https://discuss.elastic.co/t/intgration-with-hive/71709)

<div class="topic-metadata">

**Author:** [@cm\_a](https://discuss.elastic.co/u/cm_a)\
**Replies:** 6\
**Last updated:** [January 19, 2017, 7:03am UTC](https://discuss.elastic.co/t/intgration-with-hive/71709 "2017-01-19T07:03:59Z")

</div>

Hi All, This is regarding error we are getting while inserting data from Hive into cluster with id - cluster ID "bbfd9d". We are trying to insert data from Hive table (external table backed by S3). Previously we had ou…

---

## [How to do upsert in ElasticSearch 5.3.2 using Spark Structured Streaming 2.3.0?](https://discuss.elastic.co/t/how-to-do-upsert-in-elasticsearch-5-3-2-using-spark-structured-streaming-2-3-0/130103)

<div class="topic-metadata">

**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\
**Replies:** 4\
**Last updated:** [May 2, 2018, 6:58pm UTC](https://discuss.elastic.co/t/how-to-do-upsert-in-elasticsearch-5-3-2-using-spark-structured-streaming-2-3-0/130103 "2018-05-02T18:58:02Z")

</div>

Hi, I am wondering How to do upsert in ElasticSearch 5.3.2 using Spark Structured Streaming 2.3.0? other words, I have a streaming dataframe where each row is a json string now I want to write it to elastic search howev…

---

## [How to get Alphabetic Facet (A-Z) on name field in elasticsearch](https://discuss.elastic.co/t/how-to-get-alphabetic-facet-a-z-on-name-field-in-elasticsearch/11346)

<div class="topic-metadata">

**Author:** [@Maaz\_Bin\_Tariq](https://discuss.elastic.co/u/Maaz_Bin_Tariq)\
**Replies:** 4\
**Last updated:** [March 28, 2013, 11:59am UTC](https://discuss.elastic.co/t/how-to-get-alphabetic-facet-a-z-on-name-field-in-elasticsearch/11346 "2013-03-28T11:59:22Z")

</div>

Hi, I have name field in my documents and I want to get facets on the base of alphabets (first letter) instead of full name. For example: If I have docs with following name 1. Maaz 2. John 3. Sarah 4. Symo…

---

## [How to change the stop words list for the TwitterRiver index](https://discuss.elastic.co/t/how-to-change-the-stop-words-list-for-the-twitterriver-index/6879)

<div class="topic-metadata">

**Author:** [@benq](https://discuss.elastic.co/u/benq)\
**Replies:** 4\
**Last updated:** [April 26, 2012, 12:25pm UTC](https://discuss.elastic.co/t/how-to-change-the-stop-words-list-for-the-twitterriver-index/6879 "2012-04-26T12:25:09Z")

</div>

Hi, I am using the TwitterRiver with 0.19. How can I change the stopwords list ? From the documentation, I should be able to provide a custom word list either at index creation, which is not convenient because …

---

## [Elastic Observability Training Material - Possible Error](https://discuss.elastic.co/t/elastic-observability-training-material-possible-error/276484)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 1\
**Last updated:** [June 21, 2021, 2:21pm UTC](https://discuss.elastic.co/t/elastic-observability-training-material-possible-error/276484 "2021-06-21T14:21:39Z")

</div>

Hi all, While I was reviewing the course's material in Extracting Data Types (page 181) it shows how to convert a token directly in the tokenizer .. The problem is that date is not a valid data type From the doc: …

---

## [Not getting my geo\_point](https://discuss.elastic.co/t/not-getting-my-geo-point/170525)

<div class="topic-metadata">

**Author:** [@BouchardClaude](https://discuss.elastic.co/u/BouchardClaude)\
**Replies:** 5\
**Last updated:** [March 5, 2019, 4:59pm UTC](https://discuss.elastic.co/t/not-getting-my-geo-point/170525 "2019-03-05T16:59:04Z")

</div>

Hi ! (Previously opened this issue in kibana forum, but I found it look more like ES problem after couple of debugging steps. https://discuss.elastic.co/t/kibana-not-plotting-my-geo-point/170224) so here is my mapping f…

---

## [Por que el numero de documentos en elastic es mayor a lo que tengo indexados?](https://discuss.elastic.co/t/por-que-el-numero-de-documentos-en-elastic-es-mayor-a-lo-que-tengo-indexados/112071)

<div class="topic-metadata">

**Author:** [@pinky.floyano](https://discuss.elastic.co/u/pinky.floyano)\
**Replies:** 5\
**Last updated:** [December 21, 2017, 6:29pm UTC](https://discuss.elastic.co/t/por-que-el-numero-de-documentos-en-elastic-es-mayor-a-lo-que-tengo-indexados/112071 "2017-12-21T18:29:50Z")

</div>

Hola a todos, voy a tratar de ser directo en esta pregunta. Tengo indexados en varios tipos aproximadamente unos 60.000 documentos según yo, pero según el plugin de Elastic-Head, me dice que tengo, docs: 1.818.122 (1.864…

---

## [Aggregate query doesn't return expected results](https://discuss.elastic.co/t/aggregate-query-doesnt-return-expected-results/55543)

<div class="topic-metadata">

**Author:** [@ignaqui](https://discuss.elastic.co/u/ignaqui)\
**Replies:** 5\
**Last updated:** [July 19, 2016, 9:49pm UTC](https://discuss.elastic.co/t/aggregate-query-doesnt-return-expected-results/55543 "2016-07-19T21:49:51Z")

</div>

Guys, Please point me to right direction. I'm trying to create very simple aggregation query, based on tiny array of data. For that I'm using kopf's rest interface. As far as I can understand, this query is not groov…

---

## [Kibana\] Action failed with 'Request timed out' while CREATE\_NEW\_TARGET -\> CREATE\_NEW\_TARGET in docker swarm environment](https://discuss.elastic.co/t/kibana-action-failed-with-request-timed-out-while-create-new-target-create-new-target-in-docker-swarm-environment/307106)

<div class="topic-metadata">

**Author:** [@itsraj](https://discuss.elastic.co/u/itsraj)\
**Replies:** 3\
**Last updated:** [July 11, 2022, 4:12am UTC](https://discuss.elastic.co/t/kibana-action-failed-with-request-timed-out-while-create-new-target-create-new-target-in-docker-swarm-environment/307106 "2022-07-11T04:12:52Z")

</div>

Hi Community, I am trying to deploy Elastic Cluster with 3 nodes on a docker swarm environment with Kibana. All 4 services (3 elastic and 1 kibana) are running fine. Below image for reference. But Kibana is failing …

---

## [Elastic APM Java agent capture response body for Spring Boot application](https://discuss.elastic.co/t/elastic-apm-java-agent-capture-response-body-for-spring-boot-application/264237)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 3\
**Last updated:** [February 14, 2021, 3:19pm UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-capture-response-body-for-spring-boot-application/264237 "2021-02-14T15:19:29Z")

</div>

I was wondering how I can capture a response body for a Spring Boot application using Elastic APM java agent? Is there any way that I can configure the agent to capture all responses or possibly the response object for a…

---

## [\#/error/url-overflow in kibana 5.6](https://discuss.elastic.co/t/error-url-overflow-in-kibana-5-6/176609)

<div class="topic-metadata">

**Author:** [@Shivendra\_Prakash\_Sh](https://discuss.elastic.co/u/Shivendra_Prakash_Sh)\
**Replies:** 3\
**Last updated:** [April 16, 2019, 5:36am UTC](https://discuss.elastic.co/t/error-url-overflow-in-kibana-5-6/176609 "2019-04-16T05:36:28Z")

</div>

Kibana version: 5.6 Elasticsearch version: 5.6 Browser version : Edge/IE11 Browser OS version: Win10 When I will try access the kibana through the IE or Edge Browser that time URL-Overflow error shouldn't happen ofte…

---

## [How to check size on an index by field](https://discuss.elastic.co/t/how-to-check-size-on-an-index-by-field/115821)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 3\
**Last updated:** [January 17, 2018, 6:19am UTC](https://discuss.elastic.co/t/how-to-check-size-on-an-index-by-field/115821 "2018-01-17T06:19:16Z")

</div>

hi everyone! is there anyway to check the size in bytes on an index by field? let me say my scenario first. pull down from cloudwatch log \> extract some logs @ lostash \> shipping specific log events only to ES and c…

---

## [Elastic Security Integeration with Huawei firewall](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868)

<div class="topic-metadata">

**Author:** [@Rizwan\_Balouch](https://discuss.elastic.co/u/Rizwan_Balouch)\
**Replies:** 7\
**Last updated:** [January 14, 2022, 10:02am UTC](https://discuss.elastic.co/t/elastic-security-integeration-with-huawei-firewall/293868 "2022-01-14T10:02:59Z")

</div>

any idea about elastic security integration with Huawei firewall ? any workaround as Huawei integration is not listed in elastic security builtin integrations ?

---

## [Problem when log stash is executed as a service (Ubuntu)](https://discuss.elastic.co/t/problem-when-log-stash-is-executed-as-a-service-ubuntu/70837)

<div class="topic-metadata">

**Author:** [@caleneo](https://discuss.elastic.co/u/caleneo)\
**Replies:** 7\
**Last updated:** [February 5, 2017, 2:50pm UTC](https://discuss.elastic.co/t/problem-when-log-stash-is-executed-as-a-service-ubuntu/70837 "2017-02-05T14:50:19Z")

</div>

Hello, I'm having several issues trying to execute it as a service. Using the unzipped files everything is OK but when I copy the configuration file into the conf.d/ directory I get always the same error: \[2017-01-07T0…

---

## [Delete old data from Static index](https://discuss.elastic.co/t/delete-old-data-from-static-index/72671)

<div class="topic-metadata">

**Author:** [@kishorramanan](https://discuss.elastic.co/u/kishorramanan)\
**Replies:** 7\
**Last updated:** [February 1, 2017, 7:28pm UTC](https://discuss.elastic.co/t/delete-old-data-from-static-index/72671 "2017-02-01T19:28:41Z")

</div>

Tools: Elasticsearch: 2.4 Curator: 4.2.3.post1 Index: green open weblogic 5 1 553689832 0 284.5gb 142.1gb green open apache 5 1 293808899 0 140.4gb 70.2gb I would like to retain only last 2 weeks documents fro…

---

## [Conditions on top\_hits results](https://discuss.elastic.co/t/conditions-on-top-hits-results/59065)

<div class="topic-metadata">

**Author:** [@jeffedwards](https://discuss.elastic.co/u/jeffedwards)\
**Replies:** 7\
**Last updated:** [September 6, 2016, 2:50pm UTC](https://discuss.elastic.co/t/conditions-on-top-hits-results/59065 "2016-09-06T14:50:03Z")

</div>

Hello! I've got a series of devices logging status information. I've got an aggregation which breaks down the logs by their device name, and a top\_hits aggregation to get the most recent log entries for each of these d…

---

## [Регулярная ошибка NoShardAvailableAc](https://discuss.elastic.co/t/noshardavailableac/27192)

<div class="topic-metadata">

**Author:** [@MaWr](https://discuss.elastic.co/u/MaWr)\
**Replies:** 7\
**Last updated:** [August 25, 2015, 11:52am UTC](https://discuss.elastic.co/t/noshardavailableac/27192 "2015-08-25T11:52:12Z")

</div>

Добрый день! Имеется 3 индекса в elastic (пока очень маленькие - суммарное количество элементов ~20000) Данные постепенно добавляются. Регулярно, при обращении к конкретной записи, или при поиске возникает ошибка {…

---

## [Xpack Unable to find cpuacct.usage](https://discuss.elastic.co/t/xpack-unable-to-find-cpuacct-usage/75168)

<div class="topic-metadata">

**Author:** [@sgarap](https://discuss.elastic.co/u/sgarap)\
**Replies:** 2\
**Last updated:** [February 21, 2017, 2:15pm UTC](https://discuss.elastic.co/t/xpack-unable-to-find-cpuacct-usage/75168 "2017-02-21T14:15:31Z")

</div>

Hi, I tried installing X-Pack 5.2.0 to Elasticsearch 5.2.0 using docker and kubernetes. The following exception is being written to log files continuously. The file is actually has read permissions for every user. Is E…

---

## [Logstash S3 input plugin doesn't work](https://discuss.elastic.co/t/logstash-s3-input-plugin-doesnt-work/48298)

<div class="topic-metadata">

**Author:** [@tuxknight](https://discuss.elastic.co/u/tuxknight)\
**Replies:** 2\
**Last updated:** [April 28, 2016, 3:52pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-doesnt-work/48298 "2016-04-28T15:52:24Z")

</div>

This is what I got in logstash.log {:timestamp=\>"2016-04-25T17:26:13.863000+0800", :message=\>"A plugin had an unrecoverable error. Will restart this plugin.\\n Plugin: \<LogStash::Inputs::S3 bucket=\>"xxx-elb-log", acces…

---

## [Question in elastic search to get specific records with specific date and time range](https://discuss.elastic.co/t/question-in-elastic-search-to-get-specific-records-with-specific-date-and-time-range/261217)

<div class="topic-metadata">

**Author:** [@Kin\_Wan](https://discuss.elastic.co/u/Kin_Wan)\
**Replies:** 8\
**Last updated:** [February 6, 2021, 11:32pm UTC](https://discuss.elastic.co/t/question-in-elastic-search-to-get-specific-records-with-specific-date-and-time-range/261217 "2021-02-06T23:32:28Z")

</div>

Hello all, I would like to perform a query to get last weeks records on our log which the record are within Mon-Fri from (19:00-07:00) and Sat from (15:00-00:00) and full day on Sunday. How should I write the query? Than…

---

## [Customize Kibana page](https://discuss.elastic.co/t/customize-kibana-page/116302)

<div class="topic-metadata">

**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\
**Replies:** 8\
**Last updated:** [January 19, 2018, 10:01pm UTC](https://discuss.elastic.co/t/customize-kibana-page/116302 "2018-01-19T22:01:54Z")

</div>

Hi All, Is there a way or work around to hide all icons other than Dashboard? Thanks Sam

---

## [Pie chart top hit metrics doesn't allow sort by timestamp](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937)

<div class="topic-metadata">

**Author:** [@Kayla\_Vo](https://discuss.elastic.co/u/Kayla_Vo)\
**Replies:** 7\
**Last updated:** [July 8, 2020, 3:05am UTC](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937 "2020-07-08T03:05:15Z")

</div>

I am using Amazon Elasticsearch 7.4 to create a pie chart for the last value of each category. The logs look like this: { "@timestamp": 1593750007582, "type": "roommode", "name": "Off", …

---

## [Unable to insert data into ES through spark-submit - works with pyspark](https://discuss.elastic.co/t/unable-to-insert-data-into-es-through-spark-submit-works-with-pyspark/159261)

<div class="topic-metadata">

**Author:** [@rohitgcs](https://discuss.elastic.co/u/rohitgcs)\
**Replies:** 4\
**Last updated:** [January 2, 2019, 4:40pm UTC](https://discuss.elastic.co/t/unable-to-insert-data-into-es-through-spark-submit-works-with-pyspark/159261 "2019-01-02T16:40:39Z")

</div>

This is the line I use: .write.options(\*\*es\_write\_conf).mode("append").format("org.elasticsearch.spark.sql").save(esPath) When I run it in a shell launching it with pyspark -jars /usr/lib/spark/jars/elasticsearch-hadoo…

---

## [Build from source but NoClassDefFoundError:ExtendedPluginsClassLoader](https://discuss.elastic.co/t/build-from-source-but-noclassdeffounderror-extendedpluginsclassloader/132912)

<div class="topic-metadata">

**Author:** [@golmic](https://discuss.elastic.co/u/golmic)\
**Replies:** 4\
**Last updated:** [May 30, 2018, 7:58am UTC](https://discuss.elastic.co/t/build-from-source-but-noclassdeffounderror-extendedpluginsclassloader/132912 "2018-05-30T07:58:20Z")

</div>

Elasticsearch version (bin/elasticsearch --version): Version: 6.2.4 Plugins installed: \[\] None JVM version (java -version): java version "10.0.1" 2018-04-17 Java(TM) SE Runtime Environment 18.3 (build 10.0.1+10) J…

---

## [Basic Authentication using RestFilter](https://discuss.elastic.co/t/basic-authentication-using-restfilter/97051)

<div class="topic-metadata">

**Author:** [@arimoham](https://discuss.elastic.co/u/arimoham)\
**Replies:** 4\
**Last updated:** [August 18, 2017, 2:55pm UTC](https://discuss.elastic.co/t/basic-authentication-using-restfilter/97051 "2017-08-18T14:55:10Z")

</div>

I'm trying to implement basic authentication on elasticsearch using RestFilter as given in below post's: and https://qbox.io/blog/secure-elasticsearch-authentication-plugin-tutorial Looks like from version greater t…

---

## [Error in Installing Kibana5 Plugin](https://discuss.elastic.co/t/error-in-installing-kibana5-plugin/80149)

<div class="topic-metadata">

**Author:** [@Harinath](https://discuss.elastic.co/u/Harinath)\
**Replies:** 4\
**Last updated:** [March 29, 2017, 9:34am UTC](https://discuss.elastic.co/t/error-in-installing-kibana5-plugin/80149 "2017-03-29T09:34:47Z")

</div>

I followed the command from Kibana site to install Kibana from local file. $bin/kibana-plugin install file:///home/elastic/ELK5/test/SIP\_APP\_Install\_Test.zip I get the following error Transferring 21523717 bytes...…

---

## [Transport client sniff - AWS](https://discuss.elastic.co/t/transport-client-sniff-aws/4594)

<div class="topic-metadata">

**Author:** [@Pat\_Christopher](https://discuss.elastic.co/u/Pat_Christopher)\
**Replies:** 4\
**Last updated:** [June 10, 2011, 12:43am UTC](https://discuss.elastic.co/t/transport-client-sniff-aws/4594 "2011-06-10T00:43:43Z")

</div>

Hello, Version: 0.16.2, client and server I'm trying to use the transport client's sniff while accessing a cluster. I'm hitting the following two issues: 1. when running with the cluster in the cloud (AWS ec2), …

---

## [Detecting deletes](https://discuss.elastic.co/t/detecting-deletes/255570)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [November 17, 2020, 7:29am UTC](https://discuss.elastic.co/t/detecting-deletes/255570 "2020-11-17T07:29:21Z")

</div>

Hello, I was hoping to find a way to detect deletion of documents in our Elasticsearch audit logs. But I cannot find any reference or event related to me testing deletion of docs with for example: DELETE av-002-2020.10…

---

## [Grok pattern for SYSLOGPROG](https://discuss.elastic.co/t/grok-pattern-for-syslogprog/196515)

<div class="topic-metadata">

**Author:** [@Kragh](https://discuss.elastic.co/u/Kragh)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 12:27pm UTC](https://discuss.elastic.co/t/grok-pattern-for-syslogprog/196515 "2019-08-26T12:27:50Z")

</div>

Hi there, I'm currently looking into Logstash which recieves our logs from the syslog server, which recieves logs from our windows hosts (logged with NXLog, parsed as JSON). Currently I'm having having a issue with the…

[Previous page](https://discuss.elastic.co/top.md?page=835&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=837&per_page=50&period=all)
