# Top

**URL:** https://discuss.elastic.co/top.md?page=851&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 852

---

## [Alerting Throttling Use Case](https://discuss.elastic.co/t/alerting-throttling-use-case/87823)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 6\
**Last updated:** [June 6, 2017, 8:44pm UTC](https://discuss.elastic.co/t/alerting-throttling-use-case/87823 "2017-06-06T20:44:43Z")

</div>

Hi, So to explain my use case. I have a general watch that alerts me if a set of keywords is found, and if they are, send me an alert. This has been working great, but I'd like to integrate something like throttling to…

---

## [How To Archive Logs in Elasticsearch](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452)

<div class="topic-metadata">

**Author:** [@savetom](https://discuss.elastic.co/u/savetom)\
**Replies:** 1\
**Last updated:** [April 4, 2019, 4:47pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452 "2019-04-04T16:47:58Z")

</div>

Hi Everyone, I am new to elastic stack so please bear with my ignorant questions. Our company has been required to follow a Cybersecurity requirement and one of it's requirement is to have a centralized logging server.…

---

## [Rest API for last 30 days data from elasticsearch](https://discuss.elastic.co/t/rest-api-for-last-30-days-data-from-elasticsearch/262877)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [February 3, 2021, 10:10am UTC](https://discuss.elastic.co/t/rest-api-for-last-30-days-data-from-elasticsearch/262877 "2021-02-03T10:10:17Z")

</div>

Hi All, I am trying to export data from elasticsearch using rest api below is an example which got succeeded, but this will give complete data present in index URL : http://dashboard.iff.com:9200/inctable/\_search/ H…

---

## [Filebeat failed to send message to logstash with SSL enabled](https://discuss.elastic.co/t/filebeat-failed-to-send-message-to-logstash-with-ssl-enabled/58125)

<div class="topic-metadata">

**Author:** [@Zou\_Panxia](https://discuss.elastic.co/u/Zou_Panxia)\
**Replies:** 5\
**Last updated:** [August 17, 2016, 5:08pm UTC](https://discuss.elastic.co/t/filebeat-failed-to-send-message-to-logstash-with-ssl-enabled/58125 "2016-08-17T17:08:03Z")

</div>

I downloaded the latest logstash(2.3.4) and filebeat (1.2.3) for some testing. It works when ssl is not enabled. When it is enabled with ssl, curl verification works as well. However filebeat keeps to report "ERR SSL cli…

---

## [Iterate over array with matched params query DSL aggregations](https://discuss.elastic.co/t/iterate-over-array-with-matched-params-query-dsl-aggregations/170307)

<div class="topic-metadata">

**Author:** [@stephane317](https://discuss.elastic.co/u/stephane317)\
**Replies:** 4\
**Last updated:** [February 28, 2019, 1:28pm UTC](https://discuss.elastic.co/t/iterate-over-array-with-matched-params-query-dsl-aggregations/170307 "2019-02-28T13:28:57Z")

</div>

ES Version: 6.2.2 I'm trying to make a dashboard filtered by office, and get for a specific office (the selected one i get in the my http request) the price associate to this office. Here is my ES mapping "budgets": {…

---

## [Logstash: Problem in date converting](https://discuss.elastic.co/t/logstash-problem-in-date-converting/51050)

<div class="topic-metadata">

**Author:** [@Piyush\_Paritosh](https://discuss.elastic.co/u/Piyush_Paritosh)\
**Replies:** 4\
**Last updated:** [May 29, 2016, 6:37pm UTC](https://discuss.elastic.co/t/logstash-problem-in-date-converting/51050 "2016-05-29T18:37:03Z")

</div>

A line from my logfile: 63001,MAt,1420396131,20-SEP-11 12.12.38.000000 AM,RecordSource,null,Can not be null,null I want to convert --\> 20-SEP-11 12.12.38.000000 AM into date time format and put it into @timestamp f…

---

## [Logstash install and startup error](https://discuss.elastic.co/t/logstash-install-and-startup-error/273208)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 7\
**Last updated:** [May 17, 2021, 7:46pm UTC](https://discuss.elastic.co/t/logstash-install-and-startup-error/273208 "2021-05-17T19:46:19Z")

</div>

Good Afternoon; I am new to the ELK tools and am in the midst of a proof of concept using them. I am testing on a Windows 10 Professional box and have been able to install and get running both ElasticSearch and Kibana…

---

## [Authenticate and Segregate Customer Data](https://discuss.elastic.co/t/authenticate-and-segregate-customer-data/146785)

<div class="topic-metadata">

**Author:** [@marksndp](https://discuss.elastic.co/u/marksndp)\
**Replies:** 7\
**Last updated:** [September 7, 2018, 2:00am UTC](https://discuss.elastic.co/t/authenticate-and-segregate-customer-data/146785 "2018-09-07T02:00:41Z")

</div>

If several systems (customers) are shipping logs via Filebeat-Logstash combination to a common Elasticsearch instance, can Elastic Security: Ensure customers are authenticated when the log documents are indexed, and th…

---

## [Index not\_analyzed not working in elasticsearch version 6.1](https://discuss.elastic.co/t/index-not-analyzed-not-working-in-elasticsearch-version-6-1/116368)

<div class="topic-metadata">

**Author:** [@Vishal\_Chaurasia](https://discuss.elastic.co/u/Vishal_Chaurasia)\
**Replies:** 1\
**Last updated:** [January 21, 2018, 7:21am UTC](https://discuss.elastic.co/t/index-not-analyzed-not-working-in-elasticsearch-version-6-1/116368 "2018-01-21T07:21:08Z")

</div>

In elasticsearch 6.1 , while defining mappings explicitly , I want to create field searchable field without analysing for exact matches using term query, example email field. But in elasticsearch index attribute only acc…

---

## [x-pack 설치 후 curl 문의](https://discuss.elastic.co/t/x-pack-curl/113960)

<div class="topic-metadata">

**Author:** [@3d1171c90199bbf3aef1](https://discuss.elastic.co/u/3d1171c90199bbf3aef1)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 12:57pm UTC](https://discuss.elastic.co/t/x-pack-curl/113960 "2018-01-04T12:57:20Z")

</div>

안녕하세요. x-pack을 설치 후 서버(리눅스) curl http://localhost:9200 으로 질의를 날리면 missing authentication token for REST request \<\<-- 일부분임 메시지가 출력됩니다. (포트스맨(postmen)에서 똑같은 현상발생\_ 브라우저에서 ID/PW를 입력하면 정상적으로 출력되는것을 봐서는 인증이 안된것같은데.…

---

## [Not enough master nodes discovered during pinging](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging/102240)

<div class="topic-metadata">

**Author:** [@Joy4fun](https://discuss.elastic.co/u/Joy4fun)\
**Replies:** 1\
**Last updated:** [September 29, 2017, 10:29am UTC](https://discuss.elastic.co/t/not-enough-master-nodes-discovered-during-pinging/102240 "2017-09-29T10:29:58Z")

</div>

I have 3 aws ec2 instances(sink1,sink2,sink3)in us-west-2a, us-west-2b, us-west-2c respectively, each of the instance has only one elasticsearch service (5.6.2)that I tryna start up to form a 3 nodes-cluster. Three mach…

---

## [Failed to execute pipeline PIPELINE DOES NOT EXIST](https://discuss.elastic.co/t/failed-to-execute-pipeline-pipeline-does-not-exist/92500)

<div class="topic-metadata">

**Author:** [@Zachary\_Buckholz](https://discuss.elastic.co/u/Zachary_Buckholz)\
**Replies:** 1\
**Last updated:** [July 10, 2017, 5:48pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-pipeline-does-not-exist/92500 "2017-07-10T17:48:26Z")

</div>

Elastisearch Version: elasticsearch-5.5.0-1.noarch Filebeat Version: filebeat-5.5.0-1.x86\_64 Can anyone please enlighten me on why I am getting the pipeline does not exist error, but when I check it's there? I also use…

---

## [Kibana threshold based color coding](https://discuss.elastic.co/t/kibana-threshold-based-color-coding/99977)

<div class="topic-metadata">

**Author:** [@pri](https://discuss.elastic.co/u/pri)\
**Replies:** 3\
**Last updated:** [September 12, 2017, 2:28pm UTC](https://discuss.elastic.co/t/kibana-threshold-based-color-coding/99977 "2017-09-12T14:28:41Z")

</div>

Hi, Is there a way to dynamically assign a color to, say a bar in a bar chart depending on the value that it represents? To explain further, if the bar represents the percent of questions answered, is it possible to def…

---

## [Automatic Kibana index backup](https://discuss.elastic.co/t/automatic-kibana-index-backup/70932)

<div class="topic-metadata">

**Author:** [@kay\_kay](https://discuss.elastic.co/u/kay_kay)\
**Replies:** 3\
**Last updated:** [January 10, 2017, 1:48pm UTC](https://discuss.elastic.co/t/automatic-kibana-index-backup/70932 "2017-01-10T13:48:29Z")

</div>

I'm trying to find the way to backup Kibana indexes in automatic manner without creating a snapshot. Is there a way to do that? Something like single command: curl http://es:9200/.kibana/dump\_all?

---

## [Confirm the time range of “now-1d/d” in kibana](https://discuss.elastic.co/t/confirm-the-time-range-of-now-1d-d-in-kibana/228455)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 2\
**Last updated:** [April 23, 2020, 3:24am UTC](https://discuss.elastic.co/t/confirm-the-time-range-of-now-1d-d-in-kibana/228455 "2020-04-23T03:24:21Z")

</div>

Hi, suppose now is 2020-04-17 14:36:36 and I would like to make sure that "now-1d/d" in kibana refers to the time range between 2020-04-16 00:00:00 to 2020-04-16 23:59:59 right?

---

## [Add numeric field](https://discuss.elastic.co/t/add-numeric-field/205685)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 2:35pm UTC](https://discuss.elastic.co/t/add-numeric-field/205685 "2019-10-29T14:35:43Z")

</div>

Hi, i simply want to create a new numeric field. But when using "add-field" command i get systematically a string ! My logstash filter code like : .... mutate { add\_field =\> { "launcher.%{company}" =\> "%{count\_comp}…

---

## [Multiline pattern filebeat](https://discuss.elastic.co/t/multiline-pattern-filebeat/70474)

<div class="topic-metadata">

**Author:** [@muralibala](https://discuss.elastic.co/u/muralibala)\
**Replies:** 6\
**Last updated:** [January 5, 2017, 6:42pm UTC](https://discuss.elastic.co/t/multiline-pattern-filebeat/70474 "2017-01-05T18:42:01Z")

</div>

I have the filebeat prospector setup for a custom log file. The errors are in multiple lines. Ex: ####\<Jan 1, 2017 2:31:53 PM EST\> \<\[ACTIVE\] ExecuteThread: '30' for queue: 'weblogic.kernel.Default (self-tuning)'\> \<\>…

---

## [Filebeat default dashboard is not loading through logstash log injest](https://discuss.elastic.co/t/filebeat-default-dashboard-is-not-loading-through-logstash-log-injest/209388)

<div class="topic-metadata">

**Author:** [@Rmodi](https://discuss.elastic.co/u/Rmodi)\
**Replies:** 5\
**Last updated:** [December 3, 2019, 7:27pm UTC](https://discuss.elastic.co/t/filebeat-default-dashboard-is-not-loading-through-logstash-log-injest/209388 "2019-12-03T19:27:08Z")

</div>

Hi, First, I have injected my filebeat log to elsticsearch by logstash. It shows me the logs in kibana as well, manually I can even created a metric count for login attempts successfully. However, after then I enable t…

---

## [Design options for ingesting syslog data](https://discuss.elastic.co/t/design-options-for-ingesting-syslog-data/228619)

<div class="topic-metadata">

**Author:** [@sera](https://discuss.elastic.co/u/sera)\
**Replies:** 4\
**Last updated:** [April 20, 2020, 6:16am UTC](https://discuss.elastic.co/t/design-options-for-ingesting-syslog-data/228619 "2020-04-20T06:16:20Z")

</div>

Greetings! Fairly new to Elastic Stack, so am looking for some high level design advice. Regarding syslog input, my requirement is for network devices (Cisco, Juniper, Pulse Secure, etc) to syslog to Logstash, with a fi…

---

## [Consistent colors in a dashboard](https://discuss.elastic.co/t/consistent-colors-in-a-dashboard/205481)

<div class="topic-metadata">

**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\
**Replies:** 4\
**Last updated:** [December 23, 2019, 7:23am UTC](https://discuss.elastic.co/t/consistent-colors-in-a-dashboard/205481 "2019-12-23T07:23:48Z")

</div>

Hi everyone, Let's imagine an index with logs coming from different hosts. I would like to have : a list of the 10 top hosts with a color assigned to each one a donut chart which would allow to see the proportion of …

---

## [Input codec=\>multiline with filter csv not behaving as expected](https://discuss.elastic.co/t/input-codec-multiline-with-filter-csv-not-behaving-as-expected/192545)

<div class="topic-metadata">

**Author:** [@prawsthorne](https://discuss.elastic.co/u/prawsthorne)\
**Replies:** 4\
**Last updated:** [July 28, 2019, 2:58pm UTC](https://discuss.elastic.co/t/input-codec-multiline-with-filter-csv-not-behaving-as-expected/192545 "2019-07-28T14:58:51Z")

</div>

I'm wanting to input a poorly formatted csv file into elasticsearch. The csv file is an indexer-csv from nutch 1.15. The file has rows as follows; http://blackseamap.com/bshome/feed/,Comments on: Black Sea Home,"Comment…

---

## [Configtest passes, but still get error on load](https://discuss.elastic.co/t/configtest-passes-but-still-get-error-on-load/54891)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 4\
**Last updated:** [July 12, 2016, 7:42am UTC](https://discuss.elastic.co/t/configtest-passes-but-still-get-error-on-load/54891 "2016-07-12T07:42:05Z")

</div>

I have a config with translate filter: translate { field =\> "level" dictionary =\> \[ "DEBUG", "DEBUG" "INFO", "INFO" "WARN", "WARN" "ERR", "ERROR" \] fallback =\> "INFO" exact =\> true } The …

---

## [Why is synced flush failing for this index?](https://discuss.elastic.co/t/why-is-synced-flush-failing-for-this-index/219425)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 11:03am UTC](https://discuss.elastic.co/t/why-is-synced-flush-failing-for-this-index/219425 "2020-02-17T11:03:26Z")

</div>

Elasticsearch 6.8.6. The index has ten primary shards and replicas is set to 1. Each shards is ~30GB. The index (and cluster) health is Green. No data is being written to the index. A flushed sync consistently fails on a…

---

## [Elasticsearch relevance score calculation](https://discuss.elastic.co/t/elasticsearch-relevance-score-calculation/172857)

<div class="topic-metadata">

**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\
**Replies:** 2\
**Last updated:** [April 1, 2019, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-relevance-score-calculation/172857 "2019-04-01T17:10:54Z")

</div>

Hi there, I am newbie to Elasticsearch and got lost on how ES calculates the relevance score for the query result. I am using ES v 6.0 and by running the explain API as follows, i got nothing but the following GET /my…

---

## [Kibana UI stuck in loading in kubernetes and ingress setup](https://discuss.elastic.co/t/kibana-ui-stuck-in-loading-in-kubernetes-and-ingress-setup/90326)

<div class="topic-metadata">

**Author:** [@chenww](https://discuss.elastic.co/u/chenww)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 8:09pm UTC](https://discuss.elastic.co/t/kibana-ui-stuck-in-loading-in-kubernetes-and-ingress-setup/90326 "2017-06-21T20:09:03Z")

</div>

versions: Kibana: 4.6.1 ES: 2.4.1 kubernetes: 1.6.4 $ kubectl cluster-info Kubernetes master is running at http://localhost:8080 Elasticsearch is running at http://localhost:8080/api/v1/proxy/namespaces/kube-s…

---

## [ElasticSearch самостоятельно останавливается](https://discuss.elastic.co/t/elasticsearch/115252)

<div class="topic-metadata">

**Author:** [@Vivaldy](https://discuss.elastic.co/u/Vivaldy)\
**Replies:** 3\
**Last updated:** [January 13, 2018, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch/115252 "2018-01-13T15:01:38Z")

</div>

У меня не выделенный сервер, а VDS. Начал разбираться с поиском и изучать эластиксерч. Собрал на сервере последний релиз 6.1, собирал из deb-пакета. Поначалу было так - запускаю сервис: service elasticsearch start По…

---

## [Synonym behavior with highlighting and multiple terms](https://discuss.elastic.co/t/synonym-behavior-with-highlighting-and-multiple-terms/5695)

<div class="topic-metadata">

**Author:** [@ppearcy](https://discuss.elastic.co/u/ppearcy)\
**Replies:** 3\
**Last updated:** [November 9, 2011, 12:00am UTC](https://discuss.elastic.co/t/synonym-behavior-with-highlighting-and-multiple-terms/5695 "2011-11-09T00:00:51Z")

</div>

Hey, I'm seeing a couple of issues that I have pointed out in this gist: https://gist.github.com/1317149 The first issue that appears to be a bug is that highlighting can be incorrect in the case of multi-term sy…

---

## [Elasticsearch query on specific key](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731)

<div class="topic-metadata">

**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\
**Replies:** 7\
**Last updated:** [May 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731 "2022-05-14T17:44:25Z")

</div>

Suppose I have these 3 docs in Elasticsearch { id: "1", eventName: "ShipmentLoaded" }, { id: "1", eventName: "ShipmentPlanned" }, { id: "2", eventName: "ShipmentLoaded" } I want to retrieve the …

---

## [APM Bug causes null pointer for web requests in .NET 4.6.1](https://discuss.elastic.co/t/apm-bug-causes-null-pointer-for-web-requests-in-net-4-6-1/195923)

<div class="topic-metadata">

**Author:** [@Chris\_Gilligan](https://discuss.elastic.co/u/Chris_Gilligan)\
**Replies:** 7\
**Last updated:** [August 26, 2019, 2:58pm UTC](https://discuss.elastic.co/t/apm-bug-causes-null-pointer-for-web-requests-in-net-4-6-1/195923 "2019-08-26T14:58:45Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version:7.3.0 …

---

## [ClassCastException](https://discuss.elastic.co/t/classcastexception/118764)

<div class="topic-metadata">

**Author:** [@huajing](https://discuss.elastic.co/u/huajing)\
**Replies:** 1\
**Last updated:** [February 7, 2018, 8:37am UTC](https://discuss.elastic.co/t/classcastexception/118764 "2018-02-07T08:37:09Z")

</div>

Hi guys: There is a mistake here about elasticsearch1.7.5 : { "error": "SearchPhaseExecutionException\[Failed to execute phase \[query\], all shards failed; shardFailures {\[EklIxB3jTH2gBt6-sjT6wA\]\[i\_dsrhx\]\[0\]: ClassCastE…

---

## [Filebeat: logstash.pipelining: how does it work?](https://discuss.elastic.co/t/filebeat-logstash-pipelining-how-does-it-work/95921)

<div class="topic-metadata">

**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\
**Replies:** 1\
**Last updated:** [August 7, 2017, 1:23pm UTC](https://discuss.elastic.co/t/filebeat-logstash-pipelining-how-does-it-work/95921 "2017-08-07T13:23:12Z")

</div>

Hello, The documentation being pretty succinct on the topic of logstash.pipelining parameter (and Google searches often return articles related to LS and ES pipelines), I’d like to know how these 3 parameters interact t…

---

## [Convert es (Bucket aggregation) query to java](https://discuss.elastic.co/t/convert-es-bucket-aggregation-query-to-java/315321)

<div class="topic-metadata">

**Author:** [@Shubh](https://discuss.elastic.co/u/Shubh)\
**Replies:** 8\
**Last updated:** [September 29, 2022, 9:15am UTC](https://discuss.elastic.co/t/convert-es-bucket-aggregation-query-to-java/315321 "2022-09-29T09:15:05Z")

</div>

Hi, Can anyone help me convert this query in java program and how would i get only the aggreagtion result from query. The query is given below. GET /\_search { "size": 0, "query": { "bool": { "filter": \[ …

---

## [Policy inheritance](https://discuss.elastic.co/t/policy-inheritance/326223)

<div class="topic-metadata">

**Author:** [@indyg](https://discuss.elastic.co/u/indyg)\
**Replies:** 5\
**Last updated:** [March 18, 2023, 12:39pm UTC](https://discuss.elastic.co/t/policy-inheritance/326223 "2023-03-18T12:39:07Z")

</div>

As we're rolling out Fleet to our servers, one question I had around agent policies used by the agents was if it's possible for a policy to inherit the integrations of another like a parent-child relationship? For examp…

---

## ["reason":"'?' is not an IP string literal](https://discuss.elastic.co/t/reason-is-not-an-ip-string-literal/211750)

<div class="topic-metadata">

**Author:** [@RoNo](https://discuss.elastic.co/u/RoNo)\
**Replies:** 2\
**Last updated:** [December 13, 2019, 10:14am UTC](https://discuss.elastic.co/t/reason-is-not-an-ip-string-literal/211750 "2019-12-13T10:14:17Z")

</div>

Hello. I am running elkstack with Filebeat with module auditd and using the pipeline filebeat-7.3.0-auditd-log-pipeline a lot of my logs related to docker ends up in the DLQ with the following message. \`{"level":"WAR…

---

## [Nginx reverse proxy for kibana](https://discuss.elastic.co/t/nginx-reverse-proxy-for-kibana/179024)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 2\
**Last updated:** [May 2, 2019, 5:21am UTC](https://discuss.elastic.co/t/nginx-reverse-proxy-for-kibana/179024 "2019-05-02T05:21:12Z")

</div>

I am using this part in nginx config file location ~ ^/kibana(.\*) { rewrite /kibana/(.\*) /$1 break; proxy\_pass http://core-services-local-nginx-ingress-controller.kube-system:80; …

---

## [Logstash can't push data to AWS ES](https://discuss.elastic.co/t/logstash-cant-push-data-to-aws-es/127739)

<div class="topic-metadata">

**Author:** [@samwzm](https://discuss.elastic.co/u/samwzm)\
**Replies:** 2\
**Last updated:** [April 19, 2018, 8:07pm UTC](https://discuss.elastic.co/t/logstash-cant-push-data-to-aws-es/127739 "2018-04-19T20:07:49Z")

</div>

Hi, I config AWS ES for the elasticsearch service. I can use curl or python to load single doc to it without any problem. However, when I tried to upload data through logstash (I use docker image from another EC2), I al…

---

## [ERR Failed to publish events caused by: read tcp 172.16.1.2:46410-\>172.16.0.254:5044: i/o timeout](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-172-16-1-2-46410-172-16-0-254-i-o-timeout/137320)

<div class="topic-metadata">

**Author:** [@mksavic](https://discuss.elastic.co/u/mksavic)\
**Replies:** 5\
**Last updated:** [June 27, 2018, 10:57pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-172-16-1-2-46410-172-16-0-254-i-o-timeout/137320 "2018-06-27T22:57:37Z")

</div>

Hello, I am getting the following error messages in Metricbeat: 2018/06/25 21:45:44.685001 async.go:235: ERR Failed to publish events caused by: read tcp 172.16.1.2:46410-\>172.16.0.254:5044: i/o timeout 2018/06/25 21:4…

---

## [Update without index](https://discuss.elastic.co/t/update-without-index/90749)

<div class="topic-metadata">

**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\
**Replies:** 5\
**Last updated:** [June 26, 2017, 2:39pm UTC](https://discuss.elastic.co/t/update-without-index/90749 "2017-06-26T14:39:17Z")

</div>

Is it possible to update a document without knowing it's index? I have the document id and it's unique between all indexes.

---

## [Hiding Dashboards in Kibana](https://discuss.elastic.co/t/hiding-dashboards-in-kibana/220302)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 3\
**Last updated:** [February 21, 2020, 1:29pm UTC](https://discuss.elastic.co/t/hiding-dashboards-in-kibana/220302 "2020-02-21T13:29:50Z")

</div>

Hello All , I am aware that there is way that we can delete the dashboards which are not required . But i am looking for a way that how can we hide these dashboards ? Kindly help.

---

## [Monitoring Exceptions after upgrade 5.4.0 to 5.6.8 to 6.2.3](https://discuss.elastic.co/t/monitoring-exceptions-after-upgrade-5-4-0-to-5-6-8-to-6-2-3/127344)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 3\
**Last updated:** [April 11, 2018, 6:19am UTC](https://discuss.elastic.co/t/monitoring-exceptions-after-upgrade-5-4-0-to-5-6-8-to-6-2-3/127344 "2018-04-11T06:19:28Z")

</div>

I have upgraded elastic-search stack from 5.4.0 to 5.6.8 to 6.2.3 on centos 7 via RPM deployments, with a single node cluster for test purposes. I used the x-pack Upgrade Assistant to re-index certain indices it suggest…

---

## [When I installed x-pack start elasticsearch get java.lang.NullPointerException](https://discuss.elastic.co/t/when-i-installed-x-pack-start-elasticsearch-get-java-lang-nullpointerexception/125564)

<div class="topic-metadata">

**Author:** [@chiyanking](https://discuss.elastic.co/u/chiyanking)\
**Replies:** 3\
**Last updated:** [March 27, 2018, 2:06am UTC](https://discuss.elastic.co/t/when-i-installed-x-pack-start-elasticsearch-get-java-lang-nullpointerexception/125564 "2018-03-27T02:06:12Z")

</div>

\[2018-03-26T16:27:27,351\]\[INFO \]\[o.e.n.Node \] initialized \[2018-03-26T16:27:27,351\]\[INFO \]\[o.e.n.Node \] \[H31VBPK\] starting ... \[2018-03-26T16:27:37,362\]\[ERROR\]\[o.e.x.m.c.s.ShardsCollector\] \[H3…

---

## [How to add optional json field in Logstash](https://discuss.elastic.co/t/how-to-add-optional-json-field-in-logstash/296650)

<div class="topic-metadata">

**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\
**Replies:** 4\
**Last updated:** [February 15, 2022, 5:13pm UTC](https://discuss.elastic.co/t/how-to-add-optional-json-field-in-logstash/296650 "2022-02-15T17:13:47Z")

</div>

Hi, I wrote a Logstash pipeline to modify some fields of json input files. The keys introduction.text, introduction.html and body in json are optional, I don't want to create empty fields in json output files. How to add…

---

## [Contructing JSON array output from logstash](https://discuss.elastic.co/t/contructing-json-array-output-from-logstash/135418)

<div class="topic-metadata">

**Author:** [@Hanciv](https://discuss.elastic.co/u/Hanciv)\
**Replies:** 4\
**Last updated:** [June 11, 2018, 7:55pm UTC](https://discuss.elastic.co/t/contructing-json-array-output-from-logstash/135418 "2018-06-11T19:55:31Z")

</div>

Hi, I am reading a log file where I have key value paired events. I extract the key value fields using KV filter and then construct a JSON manually like the below. "\[application\]\[environment\]" =\> "%{environment}" "\[ap…

---

## [Problem integrating elasticsearch hadoop with Hortonworks sandbox](https://discuss.elastic.co/t/problem-integrating-elasticsearch-hadoop-with-hortonworks-sandbox/52420)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 4\
**Last updated:** [June 13, 2016, 11:06am UTC](https://discuss.elastic.co/t/problem-integrating-elasticsearch-hadoop-with-hortonworks-sandbox/52420 "2016-06-13T11:06:08Z")

</div>

Hi, I'm pretty new to Hadoop, and I'm following this tutorial to try to integrate elasticsearch to Hadoop. Everything went well util I tried to execute below statement: INSERT OVERWRITE TABLE eslogs SELECT s.time, s.ex…

---

## [Dynamic scripting doesn't work even though I have enabled it](https://discuss.elastic.co/t/dynamic-scripting-doesnt-work-even-though-i-have-enabled-it/37188)

<div class="topic-metadata">

**Author:** [@cuongvt101](https://discuss.elastic.co/u/cuongvt101)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 6:19pm UTC](https://discuss.elastic.co/t/dynamic-scripting-doesnt-work-even-though-i-have-enabled-it/37188 "2015-12-16T18:19:14Z")

</div>

On my local computer, I enable dynamic scripting by adding either of these to config/elasticsearch.yml: script.disable\_dynamic: false or script.inline: on script.indexed: on and it works. However, on a development ser…

---

## [CSP with Nginx proxy](https://discuss.elastic.co/t/csp-with-nginx-proxy/190319)

<div class="topic-metadata">

**Author:** [@pyjou](https://discuss.elastic.co/u/pyjou)\
**Replies:** 1\
**Last updated:** [July 18, 2019, 3:47pm UTC](https://discuss.elastic.co/t/csp-with-nginx-proxy/190319 "2019-07-18T15:47:43Z")

</div>

When I want to get a maps on my browser. Kibana don't show the map and send this error message : Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-…

---

## [Compatibility .Net client and newer version of ElasticSearch](https://discuss.elastic.co/t/compatibility-net-client-and-newer-version-of-elasticsearch/187809)

<div class="topic-metadata">

**Author:** [@Max-Infra](https://discuss.elastic.co/u/Max-Infra)\
**Replies:** 1\
**Last updated:** [July 1, 2019, 12:48am UTC](https://discuss.elastic.co/t/compatibility-net-client-and-newer-version-of-elasticsearch/187809 "2019-07-01T00:48:49Z")

</div>

Hi, I am currently using ElasticSearch 2.3.x and NEST client v2.5.2. I want to upgrade to ElasticSearch 7.x and therefore upgrade NEST. Unfortunately, my projects are currently targeting the .NET Framework 4.5.2 (and …

---

## [Elasticsearch cluster overloaded](https://discuss.elastic.co/t/elasticsearch-cluster-overloaded/118868)

<div class="topic-metadata">

**Author:** [@fsperling](https://discuss.elastic.co/u/fsperling)\
**Replies:** 1\
**Last updated:** [February 7, 2018, 4:36pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-overloaded/118868 "2018-02-07T16:36:02Z")

</div>

Hi, Our elasticsearch cluster get overloaded from time to time. We see thread\_pool rejections on elasticsearch and logstash has error messages like the below \[logstash.outputs.elasticsearch\] retrying failed action wit…

---

## [Convert existing character encoding in ElasticSearch](https://discuss.elastic.co/t/convert-existing-character-encoding-in-elasticsearch/182240)

<div class="topic-metadata">

**Author:** [@markmevans](https://discuss.elastic.co/u/markmevans)\
**Replies:** 0\
**Last updated:** [May 22, 2019, 1:48pm UTC](https://discuss.elastic.co/t/convert-existing-character-encoding-in-elasticsearch/182240 "2019-05-22T13:48:21Z")

</div>

The was ElasticSearch received JSON from Java was amended from ISO-8891-1 to UTF-8 because we were getting invalid JSON when symbols such as the copyright sign were at the start of a field. However, I now notice that s…

---

## [How to implement Search using Java API Client 8.1](https://discuss.elastic.co/t/how-to-implement-search-using-java-api-client-8-1/301153)

<div class="topic-metadata">

**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\
**Replies:** 2\
**Last updated:** [March 31, 2022, 2:24pm UTC](https://discuss.elastic.co/t/how-to-implement-search-using-java-api-client-8-1/301153 "2022-03-31T14:24:23Z")

</div>

The docs here Elasticsearch Java API Client \[8.1\] | Elastic do not have clear examples of using the Java API Client. Although I can view the docs for all the available classes Overview (java-client 8.1.1 API) but not sur…

[Previous page](https://discuss.elastic.co/top.md?page=850&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=852&per_page=50&period=all)
