# Top

**URL:** https://discuss.elastic.co/top.md?page=842&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 843

---

## [Kibana group by device number and AVG aggregation](https://discuss.elastic.co/t/kibana-group-by-device-number-and-avg-aggregation/89112)

<div class="topic-metadata">

**Author:** [@rpuserh](https://discuss.elastic.co/u/rpuserh)\
**Replies:** 6\
**Last updated:** [June 13, 2017, 8:33pm UTC](https://discuss.elastic.co/t/kibana-group-by-device-number-and-avg-aggregation/89112 "2017-06-13T20:33:45Z")

</div>

Hi, I have devices with unique number (dev\_num) They are sending me data (Number from sensor (sensor\_number)) this number from 0-100 number So i Need Y axis : group devices by device number(dev\_num) and get AVG(sensor…

---

## [Notify slack action -- help with list\_path](https://discuss.elastic.co/t/notify-slack-action-help-with-list-path/77790)

<div class="topic-metadata">

**Author:** [@paolo1](https://discuss.elastic.co/u/paolo1)\
**Replies:** 6\
**Last updated:** [March 16, 2017, 8:02am UTC](https://discuss.elastic.co/t/notify-slack-action-help-with-list-path/77790 "2017-03-16T08:02:09Z")

</div>

Hello, Could someone help with what needs to be entered into "list\_path" ? I'm trying to create a dynamic attachment for Slack based on the cluster health status. "list\_path" is required but isn't fully explained in the…

---

## [Init:ImagePullBackOff error when trying to deploy elasticsearch object to k8s](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571)

<div class="topic-metadata">

**Author:** [@vuqar](https://discuss.elastic.co/u/vuqar)\
**Replies:** 5\
**Last updated:** [July 26, 2022, 3:27pm UTC](https://discuss.elastic.co/t/init-imagepullbackoff-error-when-trying-to-deploy-elasticsearch-object-to-k8s/310571 "2022-07-26T15:27:10Z")

</div>

I am following this ECK quickstart tutorial. For whatever reason I can't deploy elasticsearch object. When I check pod status it says Init:0/2 and after couple minutes it changes to Init:ImagePullBackOff and finally to I…

---

## [Healthy cluster is completely hosed by one node failing](https://discuss.elastic.co/t/healthy-cluster-is-completely-hosed-by-one-node-failing/202434)

<div class="topic-metadata">

**Author:** [@joshuacox](https://discuss.elastic.co/u/joshuacox)\
**Replies:** 5\
**Last updated:** [October 7, 2019, 5:41pm UTC](https://discuss.elastic.co/t/healthy-cluster-is-completely-hosed-by-one-node-failing/202434 "2019-10-07T17:41:56Z")

</div>

Help! I am running a kubernetes cluster with elastic on it and ran into this master\_not\_discovered\_exception error recently. I created the cluster using these steps: # chart.monitaur.net helm repo add elastic http…

---

## [Open Source Curation](https://discuss.elastic.co/t/open-source-curation/114947)

<div class="topic-metadata">

**Author:** [@mike4](https://discuss.elastic.co/u/mike4)\
**Replies:** 5\
**Last updated:** [January 17, 2018, 3:07pm UTC](https://discuss.elastic.co/t/open-source-curation/114947 "2018-01-17T15:07:16Z")

</div>

I'm responsible for curating open source for a project that uses Elasticsearch and Kibana. My specific group requires us to start with source code for the product and ALL dependencies and build the final binaries OFFLIN…

---

## [Cold/Frozen Tiers on on-premise storage](https://discuss.elastic.co/t/cold-frozen-tiers-on-on-premise-storage/295881)

<div class="topic-metadata">

**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\
**Replies:** 2\
**Last updated:** [February 1, 2022, 2:12pm UTC](https://discuss.elastic.co/t/cold-frozen-tiers-on-on-premise-storage/295881 "2022-02-01T14:12:47Z")

</div>

Is anyone using on-premise servers/storage for Cold & Frozen data tiers? It's my understanding that these are the options: • AWS S3 • Google Cloud Storage • Azure Blob Storage • Hadoop Distributed File Store (HDFS) …

---

## [Restart elasticsearch with Ansible](https://discuss.elastic.co/t/restart-elasticsearch-with-ansible/137382)

<div class="topic-metadata">

**Author:** [@cedbale](https://discuss.elastic.co/u/cedbale)\
**Replies:** 2\
**Last updated:** [June 27, 2018, 9:10am UTC](https://discuss.elastic.co/t/restart-elasticsearch-with-ansible/137382 "2018-06-27T09:10:52Z")

</div>

Hello everybody, I am using ES Ansible's playbooks (on Debian 9 - I only have a single ES node) to install my environment and i am not able to restart the service after a process kill. I can not found any clear descript…

---

## [Multiple Logstash](https://discuss.elastic.co/t/multiple-logstash/105342)

<div class="topic-metadata">

**Author:** [@santhosh244](https://discuss.elastic.co/u/santhosh244)\
**Replies:** 2\
**Last updated:** [October 30, 2017, 5:29am UTC](https://discuss.elastic.co/t/multiple-logstash/105342 "2017-10-30T05:29:18Z")

</div>

Friends, My Setup: Have 50+ application servers which generates huge logs and filebeat ships them to multiple LS nodes and then gets shipped into 1 ES node\[ 6 node on ES cluster =\> 5 data nodes and 1 client node\] Versi…

---

## [Parse substring in a line in grok](https://discuss.elastic.co/t/parse-substring-in-a-line-in-grok/89024)

<div class="topic-metadata">

**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\
**Replies:** 2\
**Last updated:** [June 12, 2017, 11:46am UTC](https://discuss.elastic.co/t/parse-substring-in-a-line-in-grok/89024 "2017-06-12T11:46:51Z")

</div>

Hello, I've a sample line 'stock\_status': 'IN\_STOCK', 'title\_ar': u"World's Greatest Mum Card" I want to parse the stock\_status value, so I created this grok filter grok{ match =\> \[ "message", "'stock\_status': '%{GR…

---

## [Count filtering visualization](https://discuss.elastic.co/t/count-filtering-visualization/333527)

<div class="topic-metadata">

**Author:** [@clmtb](https://discuss.elastic.co/u/clmtb)\
**Replies:** 7\
**Last updated:** [May 17, 2023, 8:06am UTC](https://discuss.elastic.co/t/count-filtering-visualization/333527 "2023-05-17T08:06:51Z")

</div>

Hi all, I am trying to create a pretty simple visualization in Kibana in TSVB Table, with the count of different fields but with a filter applied. To be more precise, I want to get the count of every values higher than …

---

## [Include Exim main log](https://discuss.elastic.co/t/include-exim-main-log/282243)

<div class="topic-metadata">

**Author:** [@BaseSL](https://discuss.elastic.co/u/BaseSL)\
**Replies:** 7\
**Last updated:** [August 25, 2021, 9:01am UTC](https://discuss.elastic.co/t/include-exim-main-log/282243 "2021-08-25T09:01:22Z")

</div>

Hello, how can I, in the current version, include the Exim log and search entries via Kibana ? About Filebeat I can transfer the log into Kibana, but there the assignment is not correct. So what do I have to set, that …

---

## [Java Apm agent for multiple tomcats](https://discuss.elastic.co/t/java-apm-agent-for-multiple-tomcats/162551)

<div class="topic-metadata">

**Author:** [@Chandan1144](https://discuss.elastic.co/u/Chandan1144)\
**Replies:** 7\
**Last updated:** [January 3, 2019, 9:12am UTC](https://discuss.elastic.co/t/java-apm-agent-for-multiple-tomcats/162551 "2019-01-03T09:12:53Z")

</div>

How to configure multiple tomcats running on same machine to Apm server ? With single tomcat I m able to start APMUI. How to achieve for multiple tomcats

---

## [Elasticsearch multiple nodes - index not working](https://discuss.elastic.co/t/elasticsearch-multiple-nodes-index-not-working/38093)

<div class="topic-metadata">

**Author:** [@JamesRadar](https://discuss.elastic.co/u/JamesRadar)\
**Replies:** 7\
**Last updated:** [December 29, 2015, 8:30pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-nodes-index-not-working/38093 "2015-12-29T20:30:18Z")

</div>

Hi, I have a little problem. I started multiple nodes on one machine in one cluster. But now if i want to create index. It isn't working. { "settings" : { "index" : { "number\_of\_shard…

---

## [Filebeat sending all the lines in a log file as one single entries instead of different entries](https://discuss.elastic.co/t/filebeat-sending-all-the-lines-in-a-log-file-as-one-single-entries-instead-of-different-entries/278816)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 4\
**Last updated:** [July 23, 2021, 6:48pm UTC](https://discuss.elastic.co/t/filebeat-sending-all-the-lines-in-a-log-file-as-one-single-entries-instead-of-different-entries/278816 "2021-07-23T18:48:19Z")

</div>

I have installed filebeat on a server to ingest the stderr logs for tomcat instance. When I am trying to send those logs to my logstash instance its sending as one event instead of multiple events. How can I fix that? M…

---

## [Strange young GC pauses with ES 1.3 and Java 8](https://discuss.elastic.co/t/strange-young-gc-pauses-with-es-1-3-and-java-8/26593)

<div class="topic-metadata">

**Author:** [@thebearmayor](https://discuss.elastic.co/u/thebearmayor)\
**Replies:** 4\
**Last updated:** [July 20, 2016, 10:48pm UTC](https://discuss.elastic.co/t/strange-young-gc-pauses-with-es-1-3-and-java-8/26593 "2016-07-20T22:48:04Z")

</div>

I'm seeing a strange pattern in my cluster. Every thirty minutes, I see a spike in response times. Matching the times to the GC logs, I see the long responses correlate with long young GC's. Often there will be several G…

---

## [Mapping not analyzed field, but making it not case sensitive](https://discuss.elastic.co/t/mapping-not-analyzed-field-but-making-it-not-case-sensitive/5975)

<div class="topic-metadata">

**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\
**Replies:** 4\
**Last updated:** [July 24, 2012, 7:18pm UTC](https://discuss.elastic.co/t/mapping-not-analyzed-field-but-making-it-not-case-sensitive/5975 "2012-07-24T19:18:40Z")

</div>

Hello, I'm trying to migrate from Solr, but I'm having trouble understanding mapping in ES. I need to have just a plain string field for things like user name or category name. But it could be not case sensetive. So …

---

## [Kibana changing date time field while displaying](https://discuss.elastic.co/t/kibana-changing-date-time-field-while-displaying/96006)

<div class="topic-metadata">

**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\
**Replies:** 3\
**Last updated:** [August 16, 2017, 11:58am UTC](https://discuss.elastic.co/t/kibana-changing-date-time-field-while-displaying/96006 "2017-08-16T11:58:55Z")

</div>

I have an index in elastic search. One of the fields in date time format has this format "“yyyy-MM-dd-HH:mm:ss.SSS”. When we see this index on Kibana, it automatically adds +5.30 hours to date. After searching I know th…

---

## [Cannot get csv data to load into elasticsearch](https://discuss.elastic.co/t/cannot-get-csv-data-to-load-into-elasticsearch/32112)

<div class="topic-metadata">

**Author:** [@Deepak\_Paramanand](https://discuss.elastic.co/u/Deepak_Paramanand)\
**Replies:** 3\
**Last updated:** [October 13, 2015, 8:30pm UTC](https://discuss.elastic.co/t/cannot-get-csv-data-to-load-into-elasticsearch/32112 "2015-10-13T20:30:59Z")

</div>

Hi, I have a CSV file that I want to index into Elasticsearch and I also want to see what has been written to elasticsearch, so I have created a conf file as below: input { file { path =\> \["C:\\Work\\Kodiak\\ATT…

---

## [ICU sorting of terms aggregation with multi-valued fields](https://discuss.elastic.co/t/icu-sorting-of-terms-aggregation-with-multi-valued-fields/297886)

<div class="topic-metadata">

**Author:** [@mhugo](https://discuss.elastic.co/u/mhugo)\
**Replies:** 6\
**Last updated:** [February 24, 2022, 3:35pm UTC](https://discuss.elastic.co/t/icu-sorting-of-terms-aggregation-with-multi-valued-fields/297886 "2022-02-24T15:35:32Z")

</div>

Hi. I struggle to sort buckets of a terms aggregation based on ICU collation to respect the ordering of accented words. And especially when the text field to sort is indexed with arrays. I started with a simple term ag…

---

## [Kibana refresh interval: customization](https://discuss.elastic.co/t/kibana-refresh-interval-customization/234611)

<div class="topic-metadata">

**Author:** [@Velmurugan\_Baskaran](https://discuss.elastic.co/u/Velmurugan_Baskaran)\
**Replies:** 1\
**Last updated:** [June 1, 2020, 10:56pm UTC](https://discuss.elastic.co/t/kibana-refresh-interval-customization/234611 "2020-06-01T22:56:14Z")

</div>

Kibana dashboard is having default refresh interval as 5 seconds. We want to keep min refresh interval as 1 min and have to disable/remove other options below to that timeline. Please advise is it possible to achieve th…

---

## [How do i convert epoch millis time to date in ES using query?](https://discuss.elastic.co/t/how-do-i-convert-epoch-millis-time-to-date-in-es-using-query/26953)

<div class="topic-metadata">

**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\
**Replies:** 1\
**Last updated:** [August 6, 2015, 9:53am UTC](https://discuss.elastic.co/t/how-do-i-convert-epoch-millis-time-to-date-in-es-using-query/26953 "2015-08-06T09:53:49Z")

</div>

Hi All, I wanted to display the date\_histogram facet in human readable format but it gives me the time in epoch millis , is there any way where i can convert it to normal date in query? Query which i have tried { "…

---

## [\[LogStash::Runner\] runner - Logstash shut down](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/314612)

<div class="topic-metadata">

**Author:** [@Veera\_V](https://discuss.elastic.co/u/Veera_V)\
**Replies:** 2\
**Last updated:** [September 17, 2022, 1:16pm UTC](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/314612 "2022-09-17T13:16:41Z")

</div>

Hi there, I'm trying to connect logstash and Opensearch, but I'm getting error "Logstash::Runner\] runner - Logstash shutdown. Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. …

---

## [Foreach Ingest processor + conditional append processor](https://discuss.elastic.co/t/foreach-ingest-processor-conditional-append-processor/216884)

<div class="topic-metadata">

**Author:** [@Kredit](https://discuss.elastic.co/u/Kredit)\
**Replies:** 2\
**Last updated:** [January 29, 2020, 3:52pm UTC](https://discuss.elastic.co/t/foreach-ingest-processor-conditional-append-processor/216884 "2020-01-29T15:52:00Z")

</div>

I have documents with fields that looks like this (from Jaeger): { "something": "some value", ... "logs": \[ { "fields": \[ { "key": "error", "value": "This is an error message." }, { "k…

---

## [Recreating “kibana\_dashboard\_only\_user” and “kibana\_system” results in errors](https://discuss.elastic.co/t/recreating-kibana-dashboard-only-user-and-kibana-system-results-in-errors/151763)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [October 30, 2018, 2:43pm UTC](https://discuss.elastic.co/t/recreating-kibana-dashboard-only-user-and-kibana-system-results-in-errors/151763 "2018-10-30T14:43:56Z")

</div>

Hi, I want to run a second Kibana instance that uses "kibana-test" instead of ".kibana" so I can separate dashboards. I first tested using the two built in roles above using the default .kibana index and all was workin…

---

## [GeoIP Mapping in ES](https://discuss.elastic.co/t/geoip-mapping-in-es/142803)

<div class="topic-metadata">

**Author:** [@casperhxr](https://discuss.elastic.co/u/casperhxr)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 10:32pm UTC](https://discuss.elastic.co/t/geoip-mapping-in-es/142803 "2018-08-02T22:32:14Z")

</div>

Hello All, I currently have a working ElasticStack 6.3.0. I'm trying to set the mapping for a new GeoIP field. By default when I use the 'geoip' logstash filter everything works fine. I get a field called geoip.location…

---

## [UML diagrams for Eastic stack application](https://discuss.elastic.co/t/uml-diagrams-for-eastic-stack-application/84699)

<div class="topic-metadata">

**Author:** [@FardinBehboudi](https://discuss.elastic.co/u/FardinBehboudi)\
**Replies:** 2\
**Last updated:** [May 8, 2017, 9:10am UTC](https://discuss.elastic.co/t/uml-diagrams-for-eastic-stack-application/84699 "2017-05-08T09:10:42Z")

</div>

Hi everybody. I am doing a project as extracting data from oracle DB and indexing in elaticsearch and visualizing them by kibana. my prof asked me to build a class diagram, use case diagram, object diagram, sequence diag…

---

## [Access spark from kibana](https://discuss.elastic.co/t/access-spark-from-kibana/84157)

<div class="topic-metadata">

**Author:** [@Drissi\_Yazami](https://discuss.elastic.co/u/Drissi_Yazami)\
**Replies:** 2\
**Last updated:** [May 1, 2017, 4:03pm UTC](https://discuss.elastic.co/t/access-spark-from-kibana/84157 "2017-05-01T16:03:48Z")

</div>

I am now creating a custom kibana plugin. \*\* What I want to do \*\* I want to submit jobs to Apache spark from using result that were queried from elasticsearch. Is there a way to call spark-submit from the Kibana server…

---

## [Deleting Elasticsearch indices without breaking Kibana visualizations](https://discuss.elastic.co/t/deleting-elasticsearch-indices-without-breaking-kibana-visualizations/249872)

<div class="topic-metadata">

**Author:** [@helenp](https://discuss.elastic.co/u/helenp)\
**Replies:** 5\
**Last updated:** [September 24, 2020, 9:40pm UTC](https://discuss.elastic.co/t/deleting-elasticsearch-indices-without-breaking-kibana-visualizations/249872 "2020-09-24T21:40:57Z")

</div>

Hello, How do you prevent Kibana visualizations from breaking due to deleted indices (as described in this thread)? I deleted some of my indices in Elasticsearch and afterwards saw the missing index pattern error in eac…

---

## [Heartbeat Status logged to /var/log/messages](https://discuss.elastic.co/t/heartbeat-status-logged-to-var-log-messages/105756)

<div class="topic-metadata">

**Author:** [@arun\_prasath1](https://discuss.elastic.co/u/arun_prasath1)\
**Replies:** 5\
**Last updated:** [October 30, 2017, 3:09pm UTC](https://discuss.elastic.co/t/heartbeat-status-logged-to-var-log-messages/105756 "2017-10-30T15:09:15Z")

</div>

Heartbeat is configured in Redhat and status logs for each URL that heartbeat validates sends the log information to /var/log/messages. This file is growing like anything. Is there a way to stop/suppress logging the hear…

---

## [Logstash wildcards in input file path not processing files](https://discuss.elastic.co/t/logstash-wildcards-in-input-file-path-not-processing-files/194921)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 6\
**Last updated:** [August 13, 2019, 3:32pm UTC](https://discuss.elastic.co/t/logstash-wildcards-in-input-file-path-not-processing-files/194921 "2019-08-13T15:32:44Z")

</div>

Hi, i have a logstash configuration like this: file { path =\> "/opt/audit\_logs\_modsec/xx/\*/\*/\*" # path =\> "/opt/audit\_logs\_modsec/xx/20171231/20171231-2358/\*" sincedb\_path =\> "/dev/null" …

---

## [Timeline query on timestamped indices](https://discuss.elastic.co/t/timeline-query-on-timestamped-indices/129328)

<div class="topic-metadata">

**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\
**Replies:** 6\
**Last updated:** [May 3, 2018, 1:39am UTC](https://discuss.elastic.co/t/timeline-query-on-timestamped-indices/129328 "2018-05-03T01:39:33Z")

</div>

Hi, We write data into timestamped indices of the form {prefix}\_{yyyyMMdd}. The "timestamp" field in the documents is used to write into one of these timestamp indices. For a query that spans over longer intervals of t…

---

## [How to add label in Java apm agent](https://discuss.elastic.co/t/how-to-add-label-in-java-apm-agent/210540)

<div class="topic-metadata">

**Author:** [@rijash](https://discuss.elastic.co/u/rijash)\
**Replies:** 4\
**Last updated:** [December 6, 2019, 1:36pm UTC](https://discuss.elastic.co/t/how-to-add-label-in-java-apm-agent/210540 "2019-12-06T13:36:32Z")

</div>

Kibana version: 7.4 Elasticsearch version: 7.4 APM Server version: 7.4 APM Agent language and version: java 1.9.0 Hi, Could you guide to add "label" in java APM agent.

---

## [Using elasticsearch-py client to import dashboards](https://discuss.elastic.co/t/using-elasticsearch-py-client-to-import-dashboards/117477)

<div class="topic-metadata">

**Author:** [@mksavic](https://discuss.elastic.co/u/mksavic)\
**Replies:** 4\
**Last updated:** [January 30, 2018, 4:22pm UTC](https://discuss.elastic.co/t/using-elasticsearch-py-client-to-import-dashboards/117477 "2018-01-30T16:22:05Z")

</div>

Hello, I am trying to import a dashboard via the elasticsearch api with elastic search-py. I have a sample dashboard from https://demo.elastic.co/ (the http one). I have exported it and it looks like this: \[ { "…

---

## [Grok patterns : creating new field](https://discuss.elastic.co/t/grok-patterns-creating-new-field/83576)

<div class="topic-metadata">

**Author:** [@Sylfaen](https://discuss.elastic.co/u/Sylfaen)\
**Replies:** 4\
**Last updated:** [April 25, 2017, 2:58pm UTC](https://discuss.elastic.co/t/grok-patterns-creating-new-field/83576 "2017-04-25T14:58:57Z")

</div>

Hello ! I was wondering if it is possible to embed the content of a field to a new "structured field" ? For example, from a JDBC entry, I've got a column named message which contains informations with the following for…

---

## [Custom Sort in BAR Charts](https://discuss.elastic.co/t/custom-sort-in-bar-charts/241225)

<div class="topic-metadata">

**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\
**Replies:** 3\
**Last updated:** [July 22, 2020, 4:41am UTC](https://discuss.elastic.co/t/custom-sort-in-bar-charts/241225 "2020-07-22T04:41:21Z")

</div>

As title suggest, I'm trying to understand if there any ways to sort bars charts, Say if I have Critical, High, Medium & Low and if I try alphabetical descending or ascending I'm not achieving this order. Any help would…

---

## [Help with index template format for date with 6 millis](https://discuss.elastic.co/t/help-with-index-template-format-for-date-with-6-millis/149450)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 3\
**Last updated:** [September 21, 2018, 5:41pm UTC](https://discuss.elastic.co/t/help-with-index-template-format-for-date-with-6-millis/149450 "2018-09-21T17:41:36Z")

</div>

I have a time field that has dates like: 2018-09-21T08:10:22.441223-0400 and I tried to create my template with the following: "format" : "YYYY-MM-dd'T'HH:mm:ss.SSSSSS-Z" "format" : "YYYY-MM-ddTHH:mm:ss.SSSSSS-Z" "f…

---

## [Elasticsearch cluster unable to recover (unavailable\_shards\_exception)](https://discuss.elastic.co/t/elasticsearch-cluster-unable-to-recover-unavailable-shards-exception/127049)

<div class="topic-metadata">

**Author:** [@Vincenzo\_Buonagura](https://discuss.elastic.co/u/Vincenzo_Buonagura)\
**Replies:** 3\
**Last updated:** [May 4, 2018, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-unable-to-recover-unavailable-shards-exception/127049 "2018-05-04T17:40:29Z")

</div>

Hi all, we are using the ELK stack to have realtime log in our complex platform. During the night we had an issue with Logstash that was not able to write in Elasticsearch because one of the shards was unable to recove…

---

## [Reuse of mappings](https://discuss.elastic.co/t/reuse-of-mappings/39516)

<div class="topic-metadata">

**Author:** [@bryan\_rasmussen](https://discuss.elastic.co/u/bryan_rasmussen)\
**Replies:** 3\
**Last updated:** [January 6, 2017, 8:09pm UTC](https://discuss.elastic.co/t/reuse-of-mappings/39516 "2017-01-06T20:09:05Z")

</div>

I have a couple of types of documents that are essentially the same - so as I read this https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html Fields with: the same name in the same index in di…

---

## [This webpage is not available ERR\_CONNECTION\_REFUSED](https://discuss.elastic.co/t/this-webpage-is-not-available-err-connection-refused/31175)

<div class="topic-metadata">

**Author:** [@syakirharis](https://discuss.elastic.co/u/syakirharis)\
**Replies:** 3\
**Last updated:** [September 28, 2015, 8:31am UTC](https://discuss.elastic.co/t/this-webpage-is-not-available-err-connection-refused/31175 "2015-09-28T08:31:07Z")

</div>

cannot access kibana and marvel http://103.18.3.245:5601 http://103.18.3.245:9200/\_plugin/marvel/kibana/index.html I am using google chrome.

---

## [FScrawler not parsing jpg in PDF](https://discuss.elastic.co/t/fscrawler-not-parsing-jpg-in-pdf/221975)

<div class="topic-metadata">

**Author:** [@freesinger](https://discuss.elastic.co/u/freesinger)\
**Replies:** 7\
**Last updated:** [March 4, 2020, 5:16pm UTC](https://discuss.elastic.co/t/fscrawler-not-parsing-jpg-in-pdf/221975 "2020-03-04T17:16:27Z")

</div>

Hi,@dadoonet I'm using fscrawler to index my stuff into ES and I find that fscrawler can't parse jpg in PDF though pdf\_strategy: "ocr\_and\_text" has been set. My settings on ocr are listed below: ocr: language: "e…

---

## [Remove a character with gsub](https://discuss.elastic.co/t/remove-a-character-with-gsub/207570)

<div class="topic-metadata">

**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\
**Replies:** 7\
**Last updated:** [November 12, 2019, 10:59pm UTC](https://discuss.elastic.co/t/remove-a-character-with-gsub/207570 "2019-11-12T22:59:11Z")

</div>

Hello there Im generating new field based on this entry a serial number and a status 34401910175945 ,ON The with this regular expression (?\<serial\_number\>.\*\[0-9\])\\s(?\<my\_status\>\[^,\].\\w+) I get { "serial\_number": …

---

## [Create Kibana vizualiation based on keywords matched from message column](https://discuss.elastic.co/t/create-kibana-vizualiation-based-on-keywords-matched-from-message-column/202145)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 7\
**Last updated:** [October 7, 2019, 6:45pm UTC](https://discuss.elastic.co/t/create-kibana-vizualiation-based-on-keywords-matched-from-message-column/202145 "2019-10-07T18:45:25Z")

</div>

I know it's very easy to create visualizations based on predefined columns, but I wonder what is the proper way to create visualization based on some words from messages? Please share any useful guidance or tip about thi…

---

## [POST SQL query using Python requests - not working](https://discuss.elastic.co/t/post-sql-query-using-python-requests-not-working/185851)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 1\
**Last updated:** [June 14, 2019, 12:52pm UTC](https://discuss.elastic.co/t/post-sql-query-using-python-requests-not-working/185851 "2019-06-14T12:52:30Z")

</div>

Hi, I'm trying run below SQL query which works in Kibana console: POST /\_sql?format=csv { "query": "DESCRIBE \\"as-log-metrics-2019.06.14\\" " } using Python and requests module: json\_data = {"query": "DESCRIBE \\…

---

## [How to test UDP input for logstash](https://discuss.elastic.co/t/how-to-test-udp-input-for-logstash/117309)

<div class="topic-metadata">

**Author:** [@some7](https://discuss.elastic.co/u/some7)\
**Replies:** 1\
**Last updated:** [January 27, 2018, 4:34pm UTC](https://discuss.elastic.co/t/how-to-test-udp-input-for-logstash/117309 "2018-01-27T16:34:41Z")

</div>

I want to send messages into logstash listening on localhost UDP port to test that it works. I'm on linux and would like to use ncat, how can I do it? Maybe it's wrong but echo test | ncat -v -u localhost 5999 has an err…

---

## [Can I hide the label of the vertical bar chart?](https://discuss.elastic.co/t/can-i-hide-the-label-of-the-vertical-bar-chart/35635)

<div class="topic-metadata">

**Author:** [@kitchanw1209](https://discuss.elastic.co/u/kitchanw1209)\
**Replies:** 1\
**Last updated:** [December 1, 2015, 7:01am UTC](https://discuss.elastic.co/t/can-i-hide-the-label-of-the-vertical-bar-chart/35635 "2015-12-01T07:01:38Z")

</div>

I have made a vertical bar chart in kibana, but I found the text in x-axis label is too long and rotated. I can't find any option to hide it. How to hide it? Thanks!!!

---

## [Terms aggregation bucket sort order based on scripted metric aggregation](https://discuss.elastic.co/t/terms-aggregation-bucket-sort-order-based-on-scripted-metric-aggregation/426)

<div class="topic-metadata">

**Author:** [@vb3](https://discuss.elastic.co/u/vb3)\
**Replies:** 1\
**Last updated:** [May 8, 2015, 11:28pm UTC](https://discuss.elastic.co/t/terms-aggregation-bucket-sort-order-based-on-scripted-metric-aggregation/426 "2015-05-08T23:28:22Z")

</div>

Similar to this question's solution: http://stackoverflow.com/questions/28320062/elasticsearch-aggregation-bucket-sort-order I am trying to do the following query: { "aggs": { "agg1": { "terms":…

---

## [Creating Secrets in Elastic Fleet](https://discuss.elastic.co/t/creating-secrets-in-elastic-fleet/352116)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 4\
**Last updated:** [January 31, 2024, 4:01pm UTC](https://discuss.elastic.co/t/creating-secrets-in-elastic-fleet/352116 "2024-01-31T16:01:56Z")

</div>

I'm using Elastic Cloud v8.12.0. Documentation for Fleet gives instructions on how to use a Fleet secret in an integration policy, but how to I actually CREATE one? I can't find the information in the documentation. E…

---

## [Kibana plugin: embedded visualization error](https://discuss.elastic.co/t/kibana-plugin-embedded-visualization-error/138991)

<div class="topic-metadata">

**Author:** [@aapu](https://discuss.elastic.co/u/aapu)\
**Replies:** 5\
**Last updated:** [August 6, 2018, 4:37pm UTC](https://discuss.elastic.co/t/kibana-plugin-embedded-visualization-error/138991 "2018-08-06T16:37:59Z")

</div>

Hello, Based on Peter Pišljar's example (https://www.elastic.co/blog/developing-new-kibana-visualizations), I'm trying to embed a visualization inside my kibana plugin. My controller looks like this: app.controller('T…

---

## [Logstash can not find plugin after i install it successfully](https://discuss.elastic.co/t/logstash-can-not-find-plugin-after-i-install-it-successfully/97595)

<div class="topic-metadata">

**Author:** [@LiangxiongZhu](https://discuss.elastic.co/u/LiangxiongZhu)\
**Replies:** 2\
**Last updated:** [August 18, 2017, 2:13pm UTC](https://discuss.elastic.co/t/logstash-can-not-find-plugin-after-i-install-it-successfully/97595 "2017-08-18T14:13:49Z")

</div>

i would like to extend logstash-input-jdbc so i download it to my local directory. and then i do following things. rename the directory from logstash-input-jdbc to logstash-input-ias\_person rename lib/logstash/inpu…

---

## [Heartbeat returns wrong x.509 information (tls.server.x509)](https://discuss.elastic.co/t/heartbeat-returns-wrong-x-509-information-tls-server-x509/251484)

<div class="topic-metadata">

**Author:** [@fik](https://discuss.elastic.co/u/fik)\
**Replies:** 3\
**Last updated:** [October 13, 2020, 9:25am UTC](https://discuss.elastic.co/t/heartbeat-returns-wrong-x-509-information-tls-server-x509/251484 "2020-10-13T09:25:52Z")

</div>

We have bunch of apps monitored via HTTP endpoints. However, for one of them, heartbeat writes wrong to data to elasticsearch. Data in tls.server.x509 contains old outdated certificate, however it was changed many month…

[Previous page](https://discuss.elastic.co/top.md?page=841&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=843&per_page=50&period=all)
