# Top

**URL:** https://discuss.elastic.co/top.md?page=852&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 853

---

## [Mock an APM instance](https://discuss.elastic.co/t/mock-an-apm-instance/224686)

<div class="topic-metadata">

**Author:** [@spark](https://discuss.elastic.co/u/spark)\
**Replies:** 2\
**Last updated:** [March 31, 2020, 2:48pm UTC](https://discuss.elastic.co/t/mock-an-apm-instance/224686 "2020-03-31T14:48:34Z")

</div>

Hey, I'm using Kibana, ElasticSearch and APM in version 7.5.1. My project is a C# project with Elastic.APM in version 1.4.0 installed via nuget. I want to mock the elastic apm instance when doing unit testsing. What …

---

## [Null\_value not working](https://discuss.elastic.co/t/null-value-not-working/166785)

<div class="topic-metadata">

**Author:** [@NoZomIBK](https://discuss.elastic.co/u/NoZomIBK)\
**Replies:** 2\
**Last updated:** [February 6, 2019, 2:26pm UTC](https://discuss.elastic.co/t/null-value-not-working/166785 "2019-02-06T14:26:56Z")

</div>

I have an integer field which may be null and should have the null\_value 0. for testing i prepared an index: curl -H "Content-Type: application/json" -XPUT -d "{"mappings":{"\_doc":{"properties":{"name":{"type":"text"},…

---

## [How to convert "nanocore" to percentage?](https://discuss.elastic.co/t/how-to-convert-nanocore-to-percentage/160085)

<div class="topic-metadata">

**Author:** [@kycfeel](https://discuss.elastic.co/u/kycfeel)\
**Replies:** 2\
**Last updated:** [December 12, 2018, 7:18am UTC](https://discuss.elastic.co/t/how-to-convert-nanocore-to-percentage/160085 "2018-12-12T07:18:03Z")

</div>

Hey there. I built a monitoring environment with metricbeat for kubernetes, and realized the official dashboard is showing container cpu usage as "nanocore". (the visualization is using kubernetes.container.cpu.usag…

---

## [Elasticsearchのスナップショット利用設定について](https://discuss.elastic.co/t/elasticsearch/87419)

<div class="topic-metadata">

**Author:** [@jun1](https://discuss.elastic.co/u/jun1)\
**Replies:** 2\
**Last updated:** [May 29, 2017, 11:36pm UTC](https://discuss.elastic.co/t/elasticsearch/87419 "2017-05-29T23:36:06Z")

</div>

お世話になります Elasticsearchのスナップショットを利用しようとしています。 バージョンはElasticsearch 5.1.2を使用しています。 スナップショット利用のためのリポジトリ登録コマンドを実行すると、 権限不足が原因でテストデータが削除できないと読み取れるエラーが発生し、リポジトリが登録できません。 スナップショットのテストデータが格納されるディレクトリのパーミッション変更を試しましたが、特に結果は変わり…

---

## [Trying to build a table visualization with multiple aggregations](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [March 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288 "2021-03-31T09:28:18Z")

</div>

I want to build a table of alerts from and IDS where the rows are keyed on a term (alert name) then in the first column, the second column I want the alert category then I want then number of unique src IP addresses and …

---

## [POM.xml dependencies](https://discuss.elastic.co/t/pom-xml-dependencies/73181)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 1\
**Last updated:** [January 31, 2017, 10:12am UTC](https://discuss.elastic.co/t/pom-xml-dependencies/73181 "2017-01-31T10:12:31Z")

</div>

Hi all, I run into many many problems with the dependencies of my java client. I want to make a simple client that enters something to the ES here is my code " Settings settings = Settings.builder() .put("cl…

---

## [Syslog not shown in kibana](https://discuss.elastic.co/t/syslog-not-shown-in-kibana/37757)

<div class="topic-metadata">

**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\
**Replies:** 1\
**Last updated:** [December 22, 2015, 3:24pm UTC](https://discuss.elastic.co/t/syslog-not-shown-in-kibana/37757 "2015-12-22T15:24:46Z")

</div>

Hello I got my ELK to work, and i can websruf to the localhost, but i cant send syslog messages to the host. all i get is the message no results found. IM running it on a Debian Linux, and this is a fresh install that …

---

## [6.4 xpack.security.audit.logfile.events.ignore\_filters.\*.realms broken?](https://discuss.elastic.co/t/6-4-xpack-security-audit-logfile-events-ignore-filters-realms-broken/159758)

<div class="topic-metadata">

**Author:** [@mmisztal1980](https://discuss.elastic.co/u/mmisztal1980)\
**Replies:** 8\
**Last updated:** [December 20, 2018, 11:10am UTC](https://discuss.elastic.co/t/6-4-xpack-security-audit-logfile-events-ignore-filters-realms-broken/159758 "2018-12-20T11:10:49Z")

</div>

In our cluster, we have added the following snippet to our elasticsearch.yaml across all nodes: xpack.security.audit.enabled: true xpack.security.audit.outputs: \[ index \] xpack.security.audit.index.events.emit\_request\_b…

---

## [High CPU Pause Time](https://discuss.elastic.co/t/high-cpu-pause-time/54046)

<div class="topic-metadata">

**Author:** [@german23](https://discuss.elastic.co/u/german23)\
**Replies:** 8\
**Last updated:** [June 30, 2016, 1:56pm UTC](https://discuss.elastic.co/t/high-cpu-pause-time/54046 "2016-06-30T13:56:01Z")

</div>

Hi guys, we got a quite strange problem on one of our elasticsearch server - every 20-40sec ES stops using CPU resources and get in a "pause" time - see screenshot below. About the Environment: -64CPU Cores, 256GB R…

---

## [How remove APM application from Kibana UI](https://discuss.elastic.co/t/how-remove-apm-application-from-kibana-ui/201014)

<div class="topic-metadata">

**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Replies:** 3\
**Last updated:** [October 2, 2019, 8:34am UTC](https://discuss.elastic.co/t/how-remove-apm-application-from-kibana-ui/201014 "2019-10-02T08:34:12Z")

</div>

I have two spaces in Kibana (Prod and Stage) but I think APM is global in all spaces right? I can see my java applications that are staging in the production space and viceversa, that's correct? Or can I have staging ap…

---

## [Discover - Limit events returned](https://discuss.elastic.co/t/discover-limit-events-returned/101048)

<div class="topic-metadata">

**Author:** [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 7:41pm UTC](https://discuss.elastic.co/t/discover-limit-events-returned/101048 "2017-09-19T19:41:22Z")

</div>

Is it possible to limit the number of results returned from a discover search? For example I just want the last event indexed for a particular field. I was able to do this in a visualization by taking the max @timestamp …

---

## [Automatic restart of logstash](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 6\
**Last updated:** [May 24, 2021, 9:00pm UTC](https://discuss.elastic.co/t/automatic-restart-of-logstash/273860 "2021-05-24T21:00:31Z")

</div>

I would like the logstash service to restart automatically every Tuesday at 8:00 p.m. What type of configuration can you offer me?

---

## [Daily Indexing (at Midnight)](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867)

<div class="topic-metadata">

**Author:** [@inf](https://discuss.elastic.co/u/inf)\
**Replies:** 6\
**Last updated:** [May 13, 2021, 2:25am UTC](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867 "2021-05-13T02:25:17Z")

</div>

Hi there, As I understand from this GitHub post and this Elastic Discuss post about having a new daily index (at midnight for my case), the solution to it is not Index Lifecycle Management. Instead, it should be using d…

---

## [Scripted field from sql api not working](https://discuss.elastic.co/t/scripted-field-from-sql-api-not-working/253464)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 6\
**Last updated:** [November 16, 2020, 8:08am UTC](https://discuss.elastic.co/t/scripted-field-from-sql-api-not-working/253464 "2020-11-16T08:08:51Z")

</div>

Hi All, I recently started using sql from elasticsearch. i am trying to use below API POST \_sql?format=csv { "query": "SELECT SERVICE\_NAME,Success,count() From"my\_inde" WHERE "@timestamp" \>= NOW() - INTERVAL 3 HOURS…

---

## [How to stop datafeed](https://discuss.elastic.co/t/how-to-stop-datafeed/93167)

<div class="topic-metadata">

**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\
**Replies:** 6\
**Last updated:** [July 17, 2017, 3:17pm UTC](https://discuss.elastic.co/t/how-to-stop-datafeed/93167 "2017-07-17T15:17:05Z")

</div>

Hi, I having issue about datafeed. I can't stop datafeed and delete it. This error in kibana command. error \[10:34:54.287\] \[null\_pointer\_exception\] null :: {"path":"/\_xpack/ml/datafeeds/datafeed-alert-mem/\_stop"…

---

## [Elasticsearch 6.0 bulk write is slower in a cluster but fast in single node setup](https://discuss.elastic.co/t/elasticsearch-6-0-bulk-write-is-slower-in-a-cluster-but-fast-in-single-node-setup/109508)

<div class="topic-metadata">

**Author:** [@scriperdj](https://discuss.elastic.co/u/scriperdj)\
**Replies:** 4\
**Last updated:** [November 29, 2017, 10:47am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-bulk-write-is-slower-in-a-cluster-but-fast-in-single-node-setup/109508 "2017-11-29T10:47:05Z")

</div>

We have a 5 nodes production setup (1 coordinator, 1 master, 3 data nodes). We have setup a Kafka sink to dump messages to an ES index in this cluster. The URL for the sink is pointed to the Coordinator node. Below is m…

---

## [Visualizar campos multi-fields](https://discuss.elastic.co/t/visualizar-campos-multi-fields/107314)

<div class="topic-metadata">

**Author:** [@willypol](https://discuss.elastic.co/u/willypol)\
**Replies:** 4\
**Last updated:** [November 21, 2017, 10:31am UTC](https://discuss.elastic.co/t/visualizar-campos-multi-fields/107314 "2017-11-21T10:31:24Z")

</div>

Hola, me gustaría saber si se pueden mostrar los campos creados como multifield. Me explico: tenfo la siguiente template que me separa una url en params y uri (http://elastic.co/mola/mazo?en=español). Esto me crea un u…

---

## [Auth logs not parsed in filebeat 5.4.0](https://discuss.elastic.co/t/auth-logs-not-parsed-in-filebeat-5-4-0/84707)

<div class="topic-metadata">

**Author:** [@nbrys](https://discuss.elastic.co/u/nbrys)\
**Replies:** 5\
**Last updated:** [June 6, 2017, 8:35am UTC](https://discuss.elastic.co/t/auth-logs-not-parsed-in-filebeat-5-4-0/84707 "2017-06-06T08:35:51Z")

</div>

On my elk server (ubuntu) and source host (ubuntu) i've upgraded the filebeat module to 5.4.0. I send my logs using filebeat to the elasticsearch service (not to logstash). The logs from /var/log/auth.log are inserted in…

---

## [Filtering by Quarter, Day of Month and Week of the Year (w/ TimeZone)](https://discuss.elastic.co/t/filtering-by-quarter-day-of-month-and-week-of-the-year-w-timezone/83976)

<div class="topic-metadata">

**Author:** [@Paulo\_Henrique\_PH](https://discuss.elastic.co/u/Paulo_Henrique_PH)\
**Replies:** 5\
**Last updated:** [May 1, 2017, 12:44am UTC](https://discuss.elastic.co/t/filtering-by-quarter-day-of-month-and-week-of-the-year-w-timezone/83976 "2017-05-01T00:44:28Z")

</div>

Hi all, I've got this requirement in my lap for a while, and I couldn't find how to implement it anywhere. I need to be able to yield an aggregation where it is possible to filter by a given quarter (from 1 to 4). Fo…

---

## [Logstash exits after successfully installing plugin with docker-compose](https://discuss.elastic.co/t/logstash-exits-after-successfully-installing-plugin-with-docker-compose/255456)

<div class="topic-metadata">

**Author:** [@luka.klaric](https://discuss.elastic.co/u/luka.klaric)\
**Replies:** 2\
**Last updated:** [December 1, 2020, 9:50pm UTC](https://discuss.elastic.co/t/logstash-exits-after-successfully-installing-plugin-with-docker-compose/255456 "2020-12-01T21:50:42Z")

</div>

I am trying to run an Elastic stack and I am trying to install a logstash plugin within the docker file. I am getting the message that the plugin is installed successful and right after that the container exits with code…

---

## [How do I disable enterprise search in Kibana 7.9?](https://discuss.elastic.co/t/how-do-i-disable-enterprise-search-in-kibana-7-9/249559)

<div class="topic-metadata">

**Author:** [@Rhonda\_Gregory](https://discuss.elastic.co/u/Rhonda_Gregory)\
**Replies:** 2\
**Last updated:** [September 22, 2020, 7:45pm UTC](https://discuss.elastic.co/t/how-do-i-disable-enterprise-search-in-kibana-7-9/249559 "2020-09-22T19:45:33Z")

</div>

Our elastic/kibana instances reside on an air gapped network so we can not leverage the features of enterprise search. Are there configuration settings for kibana.yml that we can use to disable this feature? We would a…

---

## [How to avoid rounding for currency values?](https://discuss.elastic.co/t/how-to-avoid-rounding-for-currency-values/117535)

<div class="topic-metadata">

**Author:** [@fantast7](https://discuss.elastic.co/u/fantast7)\
**Replies:** 2\
**Last updated:** [November 22, 2018, 3:57pm UTC](https://discuss.elastic.co/t/how-to-avoid-rounding-for-currency-values/117535 "2018-11-22T15:57:17Z")

</div>

I have loaded a JSON document into Elasticsearch with currency values. When I create a visualization with a sum aggregation each value is rounded down before creating the sum. How to avoid this? Sample: 1000 1.99 Sum…

---

## [Geo hash based on country name?](https://discuss.elastic.co/t/geo-hash-based-on-country-name/45631)

<div class="topic-metadata">

**Author:** [@Srinivas\_Chamarthi](https://discuss.elastic.co/u/Srinivas_Chamarthi)\
**Replies:** 2\
**Last updated:** [March 29, 2016, 8:07am UTC](https://discuss.elastic.co/t/geo-hash-based-on-country-name/45631 "2016-03-29T08:07:43Z")

</div>

am trying to create a geomap visualization based on country name field ? is there a way I can define geo hash based on country name which automatically be translated to geo points on the map ? I can actually do it by …

---

## [Complete removal](https://discuss.elastic.co/t/complete-removal/22067)

<div class="topic-metadata">

**Author:** [@Onno](https://discuss.elastic.co/u/Onno)\
**Replies:** 2\
**Last updated:** [February 10, 2015, 8:50pm UTC](https://discuss.elastic.co/t/complete-removal/22067 "2015-02-10T20:50:32Z")

</div>

Something is wrong with my elasticsearch instance. It complains about unassigned shards en cluster health is red. I was wondering if it is possible to do complete removal of Elasticsearch. That way I can easily r…

---

## [Filebeat focus resources on oldest file](https://discuss.elastic.co/t/filebeat-focus-resources-on-oldest-file/79974)

<div class="topic-metadata">

**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Replies:** 5\
**Last updated:** [March 30, 2017, 11:42am UTC](https://discuss.elastic.co/t/filebeat-focus-resources-on-oldest-file/79974 "2017-03-30T11:42:08Z")

</div>

When any part of the ELK stack bottlenecks, then files begin to build up in the filebeat sector. When this happens, filebeat holds the files open even after deletion with file rotates. The problem i see here is that as…

---

## [Logstash error "Errno::EACCES: Permission denied - NUL" when installing plugin input-syslog](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523)

<div class="topic-metadata">

**Author:** [@CarlosD](https://discuss.elastic.co/u/CarlosD)\
**Replies:** 3\
**Last updated:** [July 8, 2022, 6:04pm UTC](https://discuss.elastic.co/t/logstash-error-errno-permission-denied-nul-when-installing-plugin-input-syslog/308523 "2022-07-08T18:04:39Z")

</div>

Hi, I haven't been able to install logstash-input-syslog I thought this could be solved by following this but it did not solve it I am trying this in a Windows 11 Enterprise Evaluation VM (WINDEV2204EVAL) Attaching t…

---

## [Search in substring](https://discuss.elastic.co/t/search-in-substring/107917)

<div class="topic-metadata">

**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\
**Replies:** 3\
**Last updated:** [November 22, 2017, 10:07am UTC](https://discuss.elastic.co/t/search-in-substring/107917 "2017-11-22T10:07:55Z")

</div>

aaaghh defagee ccacc aaa agh ddgdd rarrgrr bbbaghjj I have these values in Name column. I need to get only strings contains "ag". How can I implement it in elasticsearch? GET /student/\_search { …

---

## [Problems with plugins (Kopf)](https://discuss.elastic.co/t/problems-with-plugins-kopf/23690)

<div class="topic-metadata">

**Author:** [@Invest\_Ict](https://discuss.elastic.co/u/Invest_Ict)\
**Replies:** 3\
**Last updated:** [July 4, 2017, 9:36am UTC](https://discuss.elastic.co/t/problems-with-plugins-kopf/23690 "2017-07-04T09:36:41Z")

</div>

I have some troubles with my indexes, so i wanted to install a plugin named Kopf. So i downloaded the zip file from GIT and placed it on the server. Next thing i do is: \*\[root@havok elasticsearch\]# bin/plugin -ins…

---

## [Elasticsearch, quelques interrogations](https://discuss.elastic.co/t/elasticsearch-quelques-interrogations/25595)

<div class="topic-metadata">

**Author:** [@Mathieu33](https://discuss.elastic.co/u/Mathieu33)\
**Replies:** 3\
**Last updated:** [July 22, 2015, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-quelques-interrogations/25595 "2015-07-22T12:57:02Z")

</div>

Bonjour, j'ai quelques questions sur ElasticSearch à vous poser, je ne parviens pas à trouver de réponses à celles-ci malgré le fait que j'utilise désormais elasticsearch depuis déjà plus de 6 mois et que j'ai déjà sorti…

---

## [Top Hit / last value metrics aggregation doesn't work on Runtime fields](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 7\
**Last updated:** [April 20, 2022, 5:28am UTC](https://discuss.elastic.co/t/top-hit-last-value-metrics-aggregation-doesnt-work-on-runtime-fields/301924 "2022-04-20T05:28:03Z")

</div>

Hello All, I use Kibana version 7.15.2. I'm not able to perform TopHits or last value metrics aggregation on runtime fields. I just see blanks or dashes '-' when I do so. Here is an example: On the kibana\_sample\_data…

---

## [Not stable response time of elastic cluster](https://discuss.elastic.co/t/not-stable-response-time-of-elastic-cluster/190671)

<div class="topic-metadata">

**Author:** [@pa101](https://discuss.elastic.co/u/pa101)\
**Replies:** 7\
**Last updated:** [July 16, 2019, 2:49pm UTC](https://discuss.elastic.co/t/not-stable-response-time-of-elastic-cluster/190671 "2019-07-16T14:49:16Z")

</div>

60 shards 3 nodes elastic cluster, response time is pretty volatile from 20ms to 300ms, how could I make response time shorter and more stable?

---

## [Query ES -combine exists with term query](https://discuss.elastic.co/t/query-es-combine-exists-with-term-query/131945)

<div class="topic-metadata">

**Author:** [@yaara](https://discuss.elastic.co/u/yaara)\
**Replies:** 1\
**Last updated:** [May 15, 2018, 2:06pm UTC](https://discuss.elastic.co/t/query-es-combine-exists-with-term-query/131945 "2018-05-15T14:06:48Z")

</div>

Hi all, I trying to get the latest row that has the field "inventory", but I also want to filter it with specific ip: something like that: GET discovery/hosts/\_search { "\_source": \[ "inventory" \], "query": …

---

## [How to parse different types log files in logstash?](https://discuss.elastic.co/t/how-to-parse-different-types-log-files-in-logstash/60462)

<div class="topic-metadata">

**Author:** [@dvkawa](https://discuss.elastic.co/u/dvkawa)\
**Replies:** 7\
**Last updated:** [September 14, 2016, 12:44pm UTC](https://discuss.elastic.co/t/how-to-parse-different-types-log-files-in-logstash/60462 "2016-09-14T12:44:36Z")

</div>

Hi, I have two different weblogic log files, my conf file looks like below but it doesn't work: input { file { path =\> "D:/\<dir\>/logs/ecomm\_vws02\_app" …

---

## [Okta Integration with elasticsearch](https://discuss.elastic.co/t/okta-integration-with-elasticsearch/233213)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 4\
**Last updated:** [May 19, 2020, 2:41pm UTC](https://discuss.elastic.co/t/okta-integration-with-elasticsearch/233213 "2020-05-19T14:41:12Z")

</div>

Hi All, I'm trying to integrate Okta with elasticsearch in our environment, have configured all the details as per documentation. Now when i hit the kibana url its taking me to Okta page, after entering the credentials…

---

## [Discover tab in Kibana not showing any data](https://discuss.elastic.co/t/discover-tab-in-kibana-not-showing-any-data/160524)

<div class="topic-metadata">

**Author:** [@MishMick](https://discuss.elastic.co/u/MishMick)\
**Replies:** 4\
**Last updated:** [December 18, 2018, 9:45am UTC](https://discuss.elastic.co/t/discover-tab-in-kibana-not-showing-any-data/160524 "2018-12-18T09:45:07Z")

</div>

Data CSS is not getting rendered properly. Checked the console -\> div element with class 'Vislib-chart' not getting rendered properly. What can be the reason? ELK stack version : 6.5.3

---

## [Unable to load csv file into elasticsearch using logstash](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch-using-logstash/59809)

<div class="topic-metadata">

**Author:** [@karthikvalluri85](https://discuss.elastic.co/u/karthikvalluri85)\
**Replies:** 6\
**Last updated:** [September 5, 2016, 5:56pm UTC](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch-using-logstash/59809 "2016-09-05T17:56:54Z")

</div>

hi, I'm using ubuntu as my os. My csv file is present in downloads folder( which i later moved it to opt/logstash folder) and my config file is placed in path etc/logstash/conf.d and is as follows:- input { file { …

---

## [Reporting plugin installation erroe](https://discuss.elastic.co/t/reporting-plugin-installation-erroe/59666)

<div class="topic-metadata">

**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\
**Replies:** 6\
**Last updated:** [September 2, 2016, 4:02pm UTC](https://discuss.elastic.co/t/reporting-plugin-installation-erroe/59666 "2016-09-02T16:02:10Z")

</div>

While installing kibana REPORTING plugin, I go following error: Plugin installation was unsuccessful due to error "unknown export types navbarExtensions, hacks, settingsSections in plugin reporting" Please help me how…

---

## [Help, I can't figure out a basic KQL query for my data](https://discuss.elastic.co/t/help-i-cant-figure-out-a-basic-kql-query-for-my-data/234019)

<div class="topic-metadata">

**Author:** [@syost](https://discuss.elastic.co/u/syost)\
**Replies:** 5\
**Last updated:** [May 26, 2020, 4:43pm UTC](https://discuss.elastic.co/t/help-i-cant-figure-out-a-basic-kql-query-for-my-data/234019 "2020-05-26T16:43:56Z")

</div>

I have CloudWatch logs being sent to elasticsearch from functionbeat. There is a filed called "message" that contains all the information I want to perform visualizations on. I've spent an entire day trying to figure out…

---

## [Creating a Logstash filter help](https://discuss.elastic.co/t/creating-a-logstash-filter-help/32794)

<div class="topic-metadata">

**Author:** [@yoram](https://discuss.elastic.co/u/yoram)\
**Replies:** 5\
**Last updated:** [October 23, 2015, 8:03am UTC](https://discuss.elastic.co/t/creating-a-logstash-filter-help/32794 "2015-10-23T08:03:56Z")

</div>

Hi, I am in a process of checking if kibana can be used to help me with my log analysis. I am new to the logstash and elasticsearch technology and will be happy to get help to jump start my tests. I am using syslog to …

---

## [Copy kibana to another server](https://discuss.elastic.co/t/copy-kibana-to-another-server/221051)

<div class="topic-metadata">

**Author:** [@hurryup](https://discuss.elastic.co/u/hurryup)\
**Replies:** 2\
**Last updated:** [February 26, 2020, 6:35pm UTC](https://discuss.elastic.co/t/copy-kibana-to-another-server/221051 "2020-02-26T18:35:54Z")

</div>

Hello. A have a lot of visualisations, index patterns, dashboards in kibana. Is it possible to copy kibana data to another ELK installation ? Thanks.

---

## [\[PHP\] How to ingest my pdf file using PHP ES Client](https://discuss.elastic.co/t/php-how-to-ingest-my-pdf-file-using-php-es-client/64622)

<div class="topic-metadata">

**Author:** [@evert](https://discuss.elastic.co/u/evert)\
**Replies:** 2\
**Last updated:** [November 2, 2016, 8:18pm UTC](https://discuss.elastic.co/t/php-how-to-ingest-my-pdf-file-using-php-es-client/64622 "2016-11-02T20:18:14Z")

</div>

I have updated from ES 2.3 to 5, and in the docs has how to ingest data into ES, but when using processors, with Ingest Attachment, I could not figure it out how should be done. I have created my Pipeline with success …

---

## [How do you build a org chart?](https://discuss.elastic.co/t/how-do-you-build-a-org-chart/60225)

<div class="topic-metadata">

**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\
**Replies:** 2\
**Last updated:** [September 12, 2016, 1:33pm UTC](https://discuss.elastic.co/t/how-do-you-build-a-org-chart/60225 "2016-09-12T13:33:30Z")

</div>

I have the following data : Parent\_id | ID | Company name null 1 Company A 1 2 Company B 2 3 Company C 3 4 Company D 3 5 Company E My goal it is to create…

---

## [Logstash config output regex condition on integer](https://discuss.elastic.co/t/logstash-config-output-regex-condition-on-integer/58909)

<div class="topic-metadata">

**Author:** [@metalcapone](https://discuss.elastic.co/u/metalcapone)\
**Replies:** 2\
**Last updated:** [August 25, 2016, 12:22pm UTC](https://discuss.elastic.co/t/logstash-config-output-regex-condition-on-integer/58909 "2016-08-25T12:22:22Z")

</div>

Hello all! I'm working on indexing IIS logs in ES using Logstash. Here is my config output section, where I try to seperate the http code response (status field) in two indices: output { if \[type\] == "mywebsite" …

---

## [100 daily emails limit?](https://discuss.elastic.co/t/100-daily-emails-limit/46282)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 2\
**Last updated:** [April 4, 2016, 7:16pm UTC](https://discuss.elastic.co/t/100-daily-emails-limit/46282 "2016-04-04T19:16:43Z")

</div>

I received a mail WARNING: you reached the limit of 100 daily emails. Further email notifications will be suppressed. I can not find how to increase the level. Is that possible at all? Why is 100 the limiy?

---

## [Does elasticsearch 6.4 perform a search on a replica that is out-of-sync/stale?](https://discuss.elastic.co/t/does-elasticsearch-6-4-perform-a-search-on-a-replica-that-is-out-of-sync-stale/153755)

<div class="topic-metadata">

**Author:** [@ashprakasan](https://discuss.elastic.co/u/ashprakasan)\
**Replies:** 4\
**Last updated:** [October 25, 2018, 6:33am UTC](https://discuss.elastic.co/t/does-elasticsearch-6-4-perform-a-search-on-a-replica-that-is-out-of-sync-stale/153755 "2018-10-25T06:33:55Z")

</div>

We are building an application where we want consistency over availability (in ES store). By consistency, I mean when we perform a search operation, the result should contain all the data that was indexed before this sea…

---

## [The final mapping would have more than 1 type Error - Intermittent](https://discuss.elastic.co/t/the-final-mapping-would-have-more-than-1-type-error-intermittent/125370)

<div class="topic-metadata">

**Author:** [@sahadevgd](https://discuss.elastic.co/u/sahadevgd)\
**Replies:** 2\
**Last updated:** [March 26, 2018, 7:28am UTC](https://discuss.elastic.co/t/the-final-mapping-would-have-more-than-1-type-error-intermittent/125370 "2018-03-26T07:28:02Z")

</div>

Hi Team, I am currently observing the below error. Strangely, it worked for the first time, later on I had to an additional field (Tag) to my data and that was the only change I have done and now i get the mapping error…

---

## [Streaming a large file](https://discuss.elastic.co/t/streaming-a-large-file/111957)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 2\
**Last updated:** [December 15, 2017, 2:53pm UTC](https://discuss.elastic.co/t/streaming-a-large-file/111957 "2017-12-15T14:53:44Z")

</div>

hi, we are using ElasticSearch 5.6 and NEST, we are also using the ingest attachment plugin to do full-text content search of various documents like pdf, word etc. For large files, potentially above 100 MB in size, how …

---

## [Out of memory error in elasticsearch](https://discuss.elastic.co/t/out-of-memory-error-in-elasticsearch/273785)

<div class="topic-metadata">

**Author:** [@jake\_JJ](https://discuss.elastic.co/u/jake_JJ)\
**Replies:** 1\
**Last updated:** [May 24, 2021, 6:39am UTC](https://discuss.elastic.co/t/out-of-memory-error-in-elasticsearch/273785 "2021-05-24T06:39:05Z")

</div>

jvm.options ################################################################ ## ## JVM configuration ## ################################################################ ## ## WARNING: DO NOT EDIT THIS FILE. If you wa…

---

## [Date range filter for document with multiple dates](https://discuss.elastic.co/t/date-range-filter-for-document-with-multiple-dates/90037)

<div class="topic-metadata">

**Author:** [@HritikJain](https://discuss.elastic.co/u/HritikJain)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 6:28am UTC](https://discuss.elastic.co/t/date-range-filter-for-document-with-multiple-dates/90037 "2017-06-20T06:28:04Z")

</div>

Hello Guys, I am working with Event type of system. Where we have multiple dates for the same event like: And the values are comma separated, like: 2017-06-03,2017-06-05,2017-06-07 and the data map is: { "mappings…

---

## [Apm-agent-java resets connection to server in couple of seconds](https://discuss.elastic.co/t/apm-agent-java-resets-connection-to-server-in-couple-of-seconds/238227)

<div class="topic-metadata">

**Author:** [@lavr](https://discuss.elastic.co/u/lavr)\
**Replies:** 3\
**Last updated:** [June 23, 2020, 1:04pm UTC](https://discuss.elastic.co/t/apm-agent-java-resets-connection-to-server-in-couple-of-seconds/238227 "2020-06-23T13:04:47Z")

</div>

Hi! I have APM Server instance, it works fine, getting metrics from some java and python agents, showing perfect graphs. Now I'm trying to add agent to another tomcat application and here is problem. Agent successful…

[Previous page](https://discuss.elastic.co/top.md?page=851&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=853&per_page=50&period=all)
