# Top

**URL:** https://discuss.elastic.co/top.md?page=841&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 842

---

## [Elasticsearch date range queries with ignore year](https://discuss.elastic.co/t/elasticsearch-date-range-queries-with-ignore-year/46693)

<div class="topic-metadata">

**Author:** [@George](https://discuss.elastic.co/u/George)\
**Replies:** 2\
**Last updated:** [April 7, 2016, 2:35pm UTC](https://discuss.elastic.co/t/elasticsearch-date-range-queries-with-ignore-year/46693 "2016-04-07T14:35:21Z")

</div>

Hello everybody, I have a use case where I need to search in es for a date field. However, this is not only a simple range but I wanna ignore the year. Hence I saw this in the es docu: { "range" : { "…

---

## [Logstash lose connection to ElasticSearch](https://discuss.elastic.co/t/logstash-lose-connection-to-elasticsearch/37071)

<div class="topic-metadata">

**Author:** [@ofer\_peretz](https://discuss.elastic.co/u/ofer_peretz)\
**Replies:** 2\
**Last updated:** [March 3, 2016, 2:49pm UTC](https://discuss.elastic.co/t/logstash-lose-connection-to-elasticsearch/37071 "2016-03-03T14:49:06Z")

</div>

Hi Guys, Recently ive installed new cluster ES-2.1.0 with LS-2.1.1 & RabbitMQ in the middle. Occasionally LS loses connection to ES and post this error: Log from Logstash in DEBUG: Attempted to send a bulk request t…

---

## [WARN in Logs: "cannot compute used memory / swap"](https://discuss.elastic.co/t/warn-in-logs-cannot-compute-used-memory-swap/244417)

<div class="topic-metadata">

**Author:** [@mfloryan](https://discuss.elastic.co/u/mfloryan)\
**Replies:** 1\
**Last updated:** [August 10, 2020, 3:19pm UTC](https://discuss.elastic.co/t/warn-in-logs-cannot-compute-used-memory-swap/244417 "2020-08-10T15:19:59Z")

</div>

Elasticsearch 7.8.1 installed on Debian 10 (buster) running on an OpenVZ host. It's a fresh install and the server has 8GB of memory. The logs are getting filled with the following two entires: cannot compute used mem…

---

## [HTTP\_POLLER Multiple urls (SOLVED) there was a bad URL](https://discuss.elastic.co/t/http-poller-multiple-urls-solved-there-was-a-bad-url/64195)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 1\
**Last updated:** [October 27, 2016, 8:14pm UTC](https://discuss.elastic.co/t/http-poller-multiple-urls-solved-there-was-a-bad-url/64195 "2016-10-27T20:14:30Z")

</div>

Oh Logstash 2.4 this Syntax works "--configtest" , Gives me a thumbs up "OK" but when I run it it but when I run it I get the following. ..... ALSO If I comment out/remote either entry it works fine. Set…

---

## [SIEM Hosts / Networks and Data Not Showing Up](https://discuss.elastic.co/t/siem-hosts-networks-and-data-not-showing-up/219848)

<div class="topic-metadata">

**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\
**Replies:** 4\
**Last updated:** [February 19, 2020, 4:16pm UTC](https://discuss.elastic.co/t/siem-hosts-networks-and-data-not-showing-up/219848 "2020-02-19T16:16:10Z")

</div>

New to SIEM. Confused about functionality or my settings. I have Fortinet and Sonicwall logs going to ES, via syslog to Logstash, then to ES. When I go to Elastic SIEM, under either Hosts or Network pages, I see nothin…

---

## [How can parse log data into individual key=val pair dynamically in logstash?](https://discuss.elastic.co/t/how-can-parse-log-data-into-individual-key-val-pair-dynamically-in-logstash/223317)

<div class="topic-metadata">

**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\
**Replies:** 8\
**Last updated:** [March 16, 2020, 7:14am UTC](https://discuss.elastic.co/t/how-can-parse-log-data-into-individual-key-val-pair-dynamically-in-logstash/223317 "2020-03-16T07:14:26Z")

</div>

My question is how can i separate the log data into individual key=val pair in logstash.This means when i get the log data from beats or file sources it will be in string form so i need that string must be divided separa…

---

## [Geo\_shape - geo link problems with coordinates](https://discuss.elastic.co/t/geo-shape-geo-link-problems-with-coordinates/179924)

<div class="topic-metadata">

**Author:** [@gofbor](https://discuss.elastic.co/u/gofbor)\
**Replies:** 8\
**Last updated:** [May 8, 2019, 2:35pm UTC](https://discuss.elastic.co/t/geo-shape-geo-link-problems-with-coordinates/179924 "2019-05-08T14:35:40Z")

</div>

Hi, I've got index with geo\_shape type field. I can POST doc via dev\_tool: For example: POST test/doc { "geo\_link" : { "type": "LineString", "coordinates": \[ \[ -87.623177, 41.881832 \], \[ -86.623177, 42.881…

---

## [Filebeat, file truncated on glusterFS](https://discuss.elastic.co/t/filebeat-file-truncated-on-glusterfs/126710)

<div class="topic-metadata">

**Author:** [@swingbit](https://discuss.elastic.co/u/swingbit)\
**Replies:** 8\
**Last updated:** [April 9, 2018, 11:06am UTC](https://discuss.elastic.co/t/filebeat-file-truncated-on-glusterfs/126710 "2018-04-09T11:06:13Z")

</div>

An httpd log file is being stored on a glusterFS partition, never rotated, and read by filebeat (6.2.3). I should also mention that filebeat runs in a docker container, which maps the log file as a volume. This same co…

---

## [Filebeat gcp module keeps getting hash config error when setting up](https://discuss.elastic.co/t/filebeat-gcp-module-keeps-getting-hash-config-error-when-setting-up/273643)

<div class="topic-metadata">

**Author:** [@stevensim226](https://discuss.elastic.co/u/stevensim226)\
**Replies:** 1\
**Last updated:** [May 24, 2021, 8:00am UTC](https://discuss.elastic.co/t/filebeat-gcp-module-keeps-getting-hash-config-error-when-setting-up/273643 "2021-05-24T08:00:39Z")

</div>

According to this docs, I have set up the gcp.yml file as written with the settings intact (firewall and vpcflow is enable: false) But i keep getting this error whenever I run sudo filebeat setup -e 2021-05-21T09:02:25…

---

## [Custom Dashboard APM](https://discuss.elastic.co/t/custom-dashboard-apm/267443)

<div class="topic-metadata">

**Author:** [@Helmy\_Me](https://discuss.elastic.co/u/Helmy_Me)\
**Replies:** 7\
**Last updated:** [March 19, 2021, 11:48am UTC](https://discuss.elastic.co/t/custom-dashboard-apm/267443 "2021-03-19T11:48:07Z")

</div>

Hi, I try to create Custom Dashboard (APM), but I still Confuse to create visuallens (chart) to every single transaction in single Dashboard. example : I want to create Latency (response time) for transaction like Login…

---

## [How to check if pipeline execution completed in Logstash](https://discuss.elastic.co/t/how-to-check-if-pipeline-execution-completed-in-logstash/136870)

<div class="topic-metadata">

**Author:** [@Somnath\_Pal](https://discuss.elastic.co/u/Somnath_Pal)\
**Replies:** 1\
**Last updated:** [June 27, 2018, 6:16am UTC](https://discuss.elastic.co/t/how-to-check-if-pipeline-execution-completed-in-logstash/136870 "2018-06-27T06:16:33Z")

</div>

We are using logstash 6.0 and in log it shows scheduled pipeline running, but how do I know if current run - input - filter - output has completed? Does following input JDBC INFO message with timespent is conclusion for …

---

## [Ignoring unmapped fields in queries](https://discuss.elastic.co/t/ignoring-unmapped-fields-in-queries/12342)

<div class="topic-metadata">

**Author:** [@Klaus\_Brunner](https://discuss.elastic.co/u/Klaus_Brunner)\
**Replies:** 1\
**Last updated:** [June 11, 2013, 8:09am UTC](https://discuss.elastic.co/t/ignoring-unmapped-fields-in-queries/12342 "2013-06-11T08:09:50Z")

</div>

Is there any way to gracefully ignore unmapped fields in queries, instead of failing the query? Background: our data may not always contain certain fields, but our queries will still look for them. It would be nic…

---

## [What contributes to APM Failure rate?](https://discuss.elastic.co/t/what-contributes-to-apm-failure-rate/329165)

<div class="topic-metadata">

**Author:** [@Ivan\_Hosea](https://discuss.elastic.co/u/Ivan_Hosea)\
**Replies:** 5\
**Last updated:** [April 11, 2023, 1:30pm UTC](https://discuss.elastic.co/t/what-contributes-to-apm-failure-rate/329165 "2023-04-11T13:30:57Z")

</div>

Hi, I would like to ask what is the failure rate in APM services stands for? I have read the documentation that suggest that the it is based on event.outcome / the status code / and the errors if there are no status cod…

---

## [Kibana index document count increasing even when there are no saved objects](https://discuss.elastic.co/t/kibana-index-document-count-increasing-even-when-there-are-no-saved-objects/247177)

<div class="topic-metadata">

**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\
**Replies:** 5\
**Last updated:** [September 10, 2020, 1:24pm UTC](https://discuss.elastic.co/t/kibana-index-document-count-increasing-even-when-there-are-no-saved-objects/247177 "2020-09-10T13:24:49Z")

</div>

Hi, we recently migrated elk version from 7.0.1 to 7.8.0. In kibana 7.0.1, the document count for kibana index increases when we create any new saved object. But with elk 7.8.0, we observed that the document count of k…

---

## [Logstash keeps trying configuration that's already deleted](https://discuss.elastic.co/t/logstash-keeps-trying-configuration-thats-already-deleted/84470)

<div class="topic-metadata">

**Author:** [@ronakg](https://discuss.elastic.co/u/ronakg)\
**Replies:** 5\
**Last updated:** [May 17, 2017, 5:16am UTC](https://discuss.elastic.co/t/logstash-keeps-trying-configuration-thats-already-deleted/84470 "2017-05-17T05:16:28Z")

</div>

Hi, I'm getting into this issue where logstash keeps trying to send events to a syslog server even after I've deleted the output plugin for syslog server. I've set logstash to look for new config every 10 seconds. Bu…

---

## [Marvel Matching Fields to Dashboards](https://discuss.elastic.co/t/marvel-matching-fields-to-dashboards/78768)

<div class="topic-metadata">

**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\
**Replies:** 5\
**Last updated:** [April 19, 2017, 3:53pm UTC](https://discuss.elastic.co/t/marvel-matching-fields-to-dashboards/78768 "2017-04-19T15:53:20Z")

</div>

Is there documentation somewhere on which fields from the .marvel\* indices match to the dashboards on the Marvel dashboard page (ex. Which field is used to populate "Indexing Rate" and "Search Rate"). I would like to do …

---

## [Indexing and "\_id" question](https://discuss.elastic.co/t/indexing-and--id-question/3392)

<div class="topic-metadata">

**Author:** [@dmcclure1](https://discuss.elastic.co/u/dmcclure1)\
**Replies:** 5\
**Last updated:** [October 1, 2010, 10:27am UTC](https://discuss.elastic.co/t/indexing-and--id-question/3392 "2010-10-01T10:27:31Z")

</div>

If you have an "\_id" field in your source json and try to index it without passing in an id of your own, as in prepareIndex("indexName", "type"), you get an error complaining that the "\_id" generated by elastic does …

---

## [Filter Logs from Firewall](https://discuss.elastic.co/t/filter-logs-from-firewall/172494)

<div class="topic-metadata">

**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\
**Replies:** 3\
**Last updated:** [March 25, 2019, 3:50pm UTC](https://discuss.elastic.co/t/filter-logs-from-firewall/172494 "2019-03-25T15:50:16Z")

</div>

Hello everybody! Im new using ELK, so I have some doubts in some stuff I´m trying to do. I´m sending logs from my Firewall to a Rsyslog server. I was sending logs throught Filebeat,but when I´m visualizing data in Kiba…

---

## [E: Sub-process /usr/bin/dpkg returned an error code (1)](https://discuss.elastic.co/t/e-sub-process-usr-bin-dpkg-returned-an-error-code-1/116380)

<div class="topic-metadata">

**Author:** [@Ali\_znzd](https://discuss.elastic.co/u/Ali_znzd)\
**Replies:** 0\
**Last updated:** [January 21, 2018, 11:02am UTC](https://discuss.elastic.co/t/e-sub-process-usr-bin-dpkg-returned-an-error-code-1/116380 "2018-01-21T11:02:21Z")

</div>

I was trying to uninstall elasticsearch and reinstall it. when I remove it with below command it was showing following error. $ apt-get --purge autoremove elasticsearch Reading package lists... Done Building dependenc…

---

## [Stacked Timeline Visualization](https://discuss.elastic.co/t/stacked-timeline-visualization/69618)

<div class="topic-metadata">

**Author:** [@somedude](https://discuss.elastic.co/u/somedude)\
**Replies:** 3\
**Last updated:** [January 8, 2017, 9:09pm UTC](https://discuss.elastic.co/t/stacked-timeline-visualization/69618 "2017-01-08T21:09:06Z")

</div>

Hi there, I'm porting an application to the elastic stack which uses google timeline charting utility: https://developers.google.com/chart/interactive/docs/gallery/timeline The effect is one which gives the ability t…

---

## [How about Support multi language](https://discuss.elastic.co/t/how-about-support-multi-language/67702)

<div class="topic-metadata">

**Author:** [@yanyumiao](https://discuss.elastic.co/u/yanyumiao)\
**Replies:** 3\
**Last updated:** [December 1, 2016, 5:26pm UTC](https://discuss.elastic.co/t/how-about-support-multi-language/67702 "2016-12-01T17:26:41Z")

</div>

I want to ask about support multi language I want to support chinese, but I don't know if author will do it in futhre so, should I do it now or wait for author do it

---

## [Bulk Index 1000 document json file into ES using curl commands](https://discuss.elastic.co/t/bulk-index-1000-document-json-file-into-es-using-curl-commands/38212)

<div class="topic-metadata">

**Author:** [@Dilip\_Dwivedi](https://discuss.elastic.co/u/Dilip_Dwivedi)\
**Replies:** 3\
**Last updated:** [December 31, 2015, 4:35pm UTC](https://discuss.elastic.co/t/bulk-index-1000-document-json-file-into-es-using-curl-commands/38212 "2015-12-31T16:35:02Z")

</div>

Is there any Bulk API to Index 1000 document json file into ES using curl commands

---

## [No se muestran documentos en un espacio distinto al de por defecto](https://discuss.elastic.co/t/no-se-muestran-documentos-en-un-espacio-distinto-al-de-por-defecto/276387)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 1\
**Last updated:** [June 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/no-se-muestran-documentos-en-un-espacio-distinto-al-de-por-defecto/276387 "2021-06-18T13:35:41Z")

</div>

Buenas tardes! Estoy intentando averiguar por qué ha ocurrido y cómo solucionarlo, pero no consigo dar con la tecla.. Os comento: He creado un espacio adicional en kibana con la intención de crear un dashboard que pudi…

---

## [Non recoverable exception while writing to InfluxDB ERROR](https://discuss.elastic.co/t/non-recoverable-exception-while-writing-to-influxdb-error/176093)

<div class="topic-metadata">

**Author:** [@naveenrt23](https://discuss.elastic.co/u/naveenrt23)\
**Replies:** 4\
**Last updated:** [April 10, 2019, 9:16pm UTC](https://discuss.elastic.co/t/non-recoverable-exception-while-writing-to-influxdb-error/176093 "2019-04-10T21:16:44Z")

</div>

Hi, I am trying to send data from logstash to influxdb through logstash\_output\_influxdb plugin. the plugin version is 5.0.5 and logstash version is 6.2.3. I see the below error : \[2019-04-09T15:09:33,095\]\[WARN \]\[log…

---

## [Bengali\_normalization not found](https://discuss.elastic.co/t/bengali-normalization-not-found/112113)

<div class="topic-metadata">

**Author:** [@amersabagzad](https://discuss.elastic.co/u/amersabagzad)\
**Replies:** 4\
**Last updated:** [December 17, 2017, 2:15pm UTC](https://discuss.elastic.co/t/bengali-normalization-not-found/112113 "2017-12-17T14:15:48Z")

</div>

PUT doc\_bn { "settings": { "number\_of\_shards": 1, "number\_of\_replicas": 0, "refresh\_interval": "10s", "analysis": { "filter": { "my\_stop": { "type": "stop", "stopwords"…

---

## [Question on REST Client and Java API](https://discuss.elastic.co/t/question-on-rest-client-and-java-api/96831)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 4\
**Last updated:** [August 16, 2017, 6:57am UTC](https://discuss.elastic.co/t/question-on-rest-client-and-java-api/96831 "2017-08-16T06:57:07Z")

</div>

I am comparing the performance of Elasticsearch REST Client and the Java APIs using Load Runner (using a load of 50 users at a rate of 7 queries/s) Just a quick background on the data indexed. They consist of news/wiki …

---

## [Transport error](https://discuss.elastic.co/t/transport-error/3956)

<div class="topic-metadata">

**Author:** [@lecochien](https://discuss.elastic.co/u/lecochien)\
**Replies:** 4\
**Last updated:** [February 22, 2011, 11:07am UTC](https://discuss.elastic.co/t/transport-error/3956 "2011-02-22T11:07:44Z")

</div>

Hi, I've installed for the first time ES on my server (ubuntu 10.04 64bits) this error occure when i'm trying to start ES : Failed to send ping request over multicast on java.net.MulticastSocket I4ve enbled multicas…

---

## [I get the error during setup of the filebeat](https://discuss.elastic.co/t/i-get-the-error-during-setup-of-the-filebeat/177871)

<div class="topic-metadata">

**Author:** [@Burak\_Cayir](https://discuss.elastic.co/u/Burak_Cayir)\
**Replies:** 3\
**Last updated:** [April 23, 2019, 9:36am UTC](https://discuss.elastic.co/t/i-get-the-error-during-setup-of-the-filebeat/177871 "2019-04-23T09:36:22Z")

</div>

Hello , I installed filebeat 7.0.0 in my ubuntu vm. I did all necessary config. But , when I enter "sudo filebeat setup" command in terminal I get this output : Index setup complete. Loading dashboards (Kibana must be …

---

## [Network View Visualisation](https://discuss.elastic.co/t/network-view-visualisation/170467)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 8\
**Last updated:** [March 18, 2019, 1:07pm UTC](https://discuss.elastic.co/t/network-view-visualisation/170467 "2019-03-18T13:07:59Z")

</div>

Not sure if this should be in the Kibana section, but since this question is about APM, I guess it makes sense to put it in here. In our previous APM tool, AppDynamics, we have a network view visualisation similar to be…

---

## [Graph's group ? should or must?](https://discuss.elastic.co/t/graphs-group-should-or-must/99102)

<div class="topic-metadata">

**Author:** [@peng\_lin](https://discuss.elastic.co/u/peng_lin)\
**Replies:** 8\
**Last updated:** [September 6, 2017, 12:12pm UTC](https://discuss.elastic.co/t/graphs-group-should-or-must/99102 "2017-09-06T12:12:39Z")

</div>

When I use graph ,to group two terms such as A AND B , i think if the conditions are met must have both A AND B the query relation shoud “must” not “should”，but i find the query used should not “must” . Am I…

---

## [XML filter plugin is not working!](https://discuss.elastic.co/t/xml-filter-plugin-is-not-working/76723)

<div class="topic-metadata">

**Author:** [@Ritesh\_Sharma](https://discuss.elastic.co/u/Ritesh_Sharma)\
**Replies:** 3\
**Last updated:** [March 1, 2017, 1:35pm UTC](https://discuss.elastic.co/t/xml-filter-plugin-is-not-working/76723 "2017-03-01T13:35:56Z")

</div>

Hi People , I am pulling some stream of XML files from Kafka topic and trying to fetch one of the element of XML file through Logstash using XML filter plugin but unable to do so ; mentioning details below ; XML bl…

---

## [Extract elasticsearch "index" field from event field](https://discuss.elastic.co/t/extract-elasticsearch-index-field-from-event-field/64503)

<div class="topic-metadata">

**Author:** [@surajs](https://discuss.elastic.co/u/surajs)\
**Replies:** 8\
**Last updated:** [November 8, 2016, 1:34am UTC](https://discuss.elastic.co/t/extract-elasticsearch-index-field-from-event-field/64503 "2016-11-08T01:34:11Z")

</div>

In filebeat for Kafka output, we are able to dynamically select the topic-name using data from the an event field using something like %{\[type\]}. In a similar fashion, is it possible to dynamically select the index nam…

---

## [RepositoryMissingException](https://discuss.elastic.co/t/repositorymissingexception/18084)

<div class="topic-metadata">

**Author:** [@Shawn\_Mullen](https://discuss.elastic.co/u/Shawn_Mullen)\
**Replies:** 3\
**Last updated:** [June 13, 2014, 10:55pm UTC](https://discuss.elastic.co/t/repositorymissingexception/18084 "2014-06-13T22:55:11Z")

</div>

I have an ElasticSearch instance running on my local machine. I installed the S3 plugin so I can do backup and restore operation to/from S3. I tried to follow the documentation on how to set this up. I was able to…

---

## [Создание кластера Elasticsearch 7.2 из single-node с сохранением данных](https://discuss.elastic.co/t/elasticsearch-7-2-single-node/253669)

<div class="topic-metadata">

**Author:** [@zuser](https://discuss.elastic.co/u/zuser)\
**Replies:** 6\
**Last updated:** [November 10, 2020, 8:38am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-single-node/253669 "2020-11-10T08:38:27Z")

</div>

Доброго времени суток! Исходная такова, есть elasticsearch 7.2 в режиме single-node, с данными. Необходимо создать географически распределенный отказоустойчивый кластер из 2х мастер/дата нод и одной мастер ноды. Прошу…

---

## [Aggregate data based on some field](https://discuss.elastic.co/t/aggregate-data-based-on-some-field/49399)

<div class="topic-metadata">

**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\
**Replies:** 6\
**Last updated:** [May 9, 2016, 4:50am UTC](https://discuss.elastic.co/t/aggregate-data-based-on-some-field/49399 "2016-05-09T04:50:40Z")

</div>

Hi, Grok pattern (?\\d{0-6}) %{WORD:loglevel} %{BASE10NUM:amount} I have following set of colums col1=cardNUmber,col2=Info,col3=Amount Data are: 123456 Failed 123.40 123456 Failed 1234 123456 Success 1200 123 …

---

## [Logstash cannot consume Filebeat events](https://discuss.elastic.co/t/logstash-cannot-consume-filebeat-events/34453)

<div class="topic-metadata">

**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\
**Replies:** 6\
**Last updated:** [November 16, 2015, 11:56am UTC](https://discuss.elastic.co/t/logstash-cannot-consume-filebeat-events/34453 "2015-11-16T11:56:29Z")

</div>

Hello, I have a log file with 4000 lines and I am trying to consume it with filebeat. Using elasticsearch output, it works. I can retreive 4000 documents in my index. But when I use logstash output, my index only h…

---

## [org.elasticsearch.client.ResponseException while creating index](https://discuss.elastic.co/t/org-elasticsearch-client-responseexception-while-creating-index/332706)

<div class="topic-metadata">

**Author:** [@Keerthy\_Ar](https://discuss.elastic.co/u/Keerthy_Ar)\
**Replies:** 5\
**Last updated:** [May 7, 2023, 6:45pm UTC](https://discuss.elastic.co/t/org-elasticsearch-client-responseexception-while-creating-index/332706 "2023-05-07T18:45:43Z")

</div>

I am trying to create index with High Rest Client, version 7.17.10 String mappingSource = "{"mappings":{"properties":{"name":{"type":"text"},"age":{"type":"integer"}}}}"; CreateIndexRequest request = new CreateIndexReq…

---

## [Filebeat Fortinet module can't run](https://discuss.elastic.co/t/filebeat-fortinet-module-cant-run/258541)

<div class="topic-metadata">

**Author:** [@aloalo2242](https://discuss.elastic.co/u/aloalo2242)\
**Replies:** 5\
**Last updated:** [December 24, 2020, 9:10am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-cant-run/258541 "2020-12-24T09:10:34Z")

</div>

Hi, I'm trying to ship Fortigate300E Log to my Elasticstack with topo: Fortigate syslog port 514 -\> Filebeat (fortinet module) -\> Elasticsearch -\> Kibana. I have 2 question: First, is it possible? And when I run fileb…

---

## [JDBC plugin: Doesn't work when the table name contains a hyphen](https://discuss.elastic.co/t/jdbc-plugin-doesnt-work-when-the-table-name-contains-a-hyphen/160278)

<div class="topic-metadata">

**Author:** [@prodrg](https://discuss.elastic.co/u/prodrg)\
**Replies:** 5\
**Last updated:** [December 12, 2018, 4:57pm UTC](https://discuss.elastic.co/t/jdbc-plugin-doesnt-work-when-the-table-name-contains-a-hyphen/160278 "2018-12-12T16:57:37Z")

</div>

Hi guys, I am using the JDBC plugin and I need to extract info from a Postgresql database. The issue I'm having is that the table I want to grab info has a hyphen on the name, and this is causing a conflict. This is my…

---

## [Kibana : No default index pattern. You must select or create one to continue](https://discuss.elastic.co/t/kibana-no-default-index-pattern-you-must-select-or-create-one-to-continue/127080)

<div class="topic-metadata">

**Author:** [@MARRAKCHI\_Tarik](https://discuss.elastic.co/u/MARRAKCHI_Tarik)\
**Replies:** 1\
**Last updated:** [April 6, 2018, 10:23pm UTC](https://discuss.elastic.co/t/kibana-no-default-index-pattern-you-must-select-or-create-one-to-continue/127080 "2018-04-06T22:23:19Z")

</div>

Hi, I am a beginner in elasticsearch, I installed elasticsearch 6.2.3 and kibana 6.2.3 on a single-node cluster (centos 6.9), I used hortonworks. this is my elasticsearch : I want to connect my hive database with ela…

---

## [Pulling values for properties that have index set to "no"](https://discuss.elastic.co/t/pulling-values-for-properties-that-have-index-set-to-no/61106)

<div class="topic-metadata">

**Author:** [@jdmac](https://discuss.elastic.co/u/jdmac)\
**Replies:** 7\
**Last updated:** [September 23, 2016, 7:42am UTC](https://discuss.elastic.co/t/pulling-values-for-properties-that-have-index-set-to-no/61106 "2016-09-23T07:42:42Z")

</div>

Hi All, Been reading this (https://www.elastic.co/blog/elasticsearch-as-a-time-series-data-store) blog post on the Elastic.co site and I'm puzzled how you'd actually retrieve values stored as "index": "no" When \_s…

---

## [Custom DropDown /Filters in Kibana](https://discuss.elastic.co/t/custom-dropdown-filters-in-kibana/49992)

<div class="topic-metadata">

**Author:** [@gvashistha](https://discuss.elastic.co/u/gvashistha)\
**Replies:** 1\
**Last updated:** [May 14, 2016, 5:39am UTC](https://discuss.elastic.co/t/custom-dropdown-filters-in-kibana/49992 "2016-05-14T05:39:07Z")

</div>

Hi, I am trying to add "Custom filters or Some dropdown" on dashboard of Kibana, similar to the existing time filter on top right corner of the Kibana dashboard. For example if we have filter or dropdown for countr…

---

## [Sorting by .raw fields](https://discuss.elastic.co/t/sorting-by-raw-fields/50076)

<div class="topic-metadata">

**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\
**Replies:** 4\
**Last updated:** [May 17, 2016, 8:30pm UTC](https://discuss.elastic.co/t/sorting-by-raw-fields/50076 "2016-05-17T20:30:02Z")

</div>

Hi guys, I'm trying to sort rows in a discover section in Kibana 4.5/ES 2.3.2. I have a customer\_name field which is analyzed using ngrams, so sorting by it is meaningless. I've added another subfield - customer\_name.r…

---

## [Images in kibana](https://discuss.elastic.co/t/images-in-kibana/152901)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 1\
**Last updated:** [October 17, 2018, 8:57pm UTC](https://discuss.elastic.co/t/images-in-kibana/152901 "2018-10-17T20:57:46Z")

</div>

is it possible to display thumbnails of images in Kibana discover tab.. if yes request guidance from where to start... how to store images in elastic search, in existing index

---

## [Kibana server is not ready yet after upgrade 6.4 to 6.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-after-upgrade-6-4-to-6-5/164488)

<div class="topic-metadata">

**Author:** [@Guillain](https://discuss.elastic.co/u/Guillain)\
**Replies:** 3\
**Last updated:** [January 21, 2019, 9:49pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-after-upgrade-6-4-to-6-5/164488 "2019-01-21T21:49:00Z")

</div>

Hi, After have successfuly updated my hot swarm stack from 6.4.2 to 6.5.4, all works fine instead Kibana (rolling upgrade). So I deployed a new instance to install a new Kibana, but same issue :frowning: Kibana start…

---

## [Filebeat 5.3.0 regex parsing regression](https://discuss.elastic.co/t/filebeat-5-3-0-regex-parsing-regression/80887)

<div class="topic-metadata">

**Author:** [@Karl\_Grose](https://discuss.elastic.co/u/Karl_Grose)\
**Replies:** 5\
**Last updated:** [April 3, 2017, 9:49am UTC](https://discuss.elastic.co/t/filebeat-5-3-0-regex-parsing-regression/80887 "2017-04-03T09:49:50Z")

</div>

The following regex pattern: multiline.pattern: '^\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2} ' worked for 5.2.2 but causes a panic with 5.3.0 \[1\]. Using this instead: multiline.pattern: '^\[0-9\]\[0-9\]\[0-9\]\[0-9\]-\[0-9\]\[0-9\]-\[0-9\]\[…

---

## [Logstash 8 @timestamp field format was changed to microseconds percision](https://discuss.elastic.co/t/logstash-8-timestamp-field-format-was-changed-to-microseconds-percision/310852)

<div class="topic-metadata">

**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\
**Replies:** 7\
**Last updated:** [August 1, 2022, 7:23am UTC](https://discuss.elastic.co/t/logstash-8-timestamp-field-format-was-changed-to-microseconds-percision/310852 "2022-08-01T07:23:38Z")

</div>

Hi, I have been using Logstash for a while now and when upgrading to version 8 I can see the @timestamp field format was changed from milliseconds percision to microseconds percision (meaning instead of 2022-07-28T09:46…

---

## [Unable to Access Elasticsearch using http://localhost:9200. Also on the last install page I dont see "open elastic search in the browser"](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538)

<div class="topic-metadata">

**Author:** [@pasta80](https://discuss.elastic.co/u/pasta80)\
**Replies:** 6\
**Last updated:** [July 2, 2020, 10:56am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-using-http-localhost-9200-also-on-the-last-install-page-i-dont-see-open-elastic-search-in-the-browser/239538 "2020-07-02T10:56:44Z")

</div>

Hi, As you can see in my title, i am unable to access elasticsearch after finishing the install using http://localhost:9200. it says this site cant be reached and local host refued to connect. I have already installed j…

---

## [APM No services found](https://discuss.elastic.co/t/apm-no-services-found/161100)

<div class="topic-metadata">

**Author:** [@MishMick](https://discuss.elastic.co/u/MishMick)\
**Replies:** 6\
**Last updated:** [March 13, 2020, 2:27pm UTC](https://discuss.elastic.co/t/apm-no-services-found/161100 "2020-03-13T14:27:48Z")

</div>

I have correctly set up the APM agent and APM server is up and running. However, I can only see the APM Onboarding logs and no APM transaction logs are visible on the Discover tab. My APM server and APM-agent are deploye…

---

## [Elasticsearch cluster scaling from 3 nodes to 5 nodes to open many indices/shards, best practices](https://discuss.elastic.co/t/elasticsearch-cluster-scaling-from-3-nodes-to-5-nodes-to-open-many-indices-shards-best-practices/164988)

<div class="topic-metadata">

**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\
**Replies:** 6\
**Last updated:** [January 31, 2019, 9:47am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-scaling-from-3-nodes-to-5-nodes-to-open-many-indices-shards-best-practices/164988 "2019-01-31T09:47:23Z")

</div>

We are using three node Elasticsearch cluster in AWS Cloud. here are the configurations. Instance Type: M4 4X Large (Three nodes), each node configurations are given below. CPU, 16 cores, RAM 64GB, EBS volumes: 4TB \*…

[Previous page](https://discuss.elastic.co/top.md?page=840&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=842&per_page=50&period=all)
