# Top **URL:** https://discuss.elastic.co/top.md?page=861&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 862 --- ## [X-pack license couldn't update](https://discuss.elastic.co/t/x-pack-license-couldnt-update/105844)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 5\ **Last updated:** [October 31, 2017, 8:58am UTC](https://discuss.elastic.co/t/x-pack-license-couldnt-update/105844 "2017-10-31T08:58:16Z")
C:\\Users\\infoblox\\Downloads\\curl\>curl -XPUT -u elastic "http://localhost:9200/\_xpack/license" -H "Content-Type: application/json" -d "@C:\\Users\\infoblox\\Downloads\\license.json" Enter host password for user 'elastic': {… --- ## [Local install only copies rb file to local\_gems](https://discuss.elastic.co/t/local-install-only-copies-rb-file-to-local-gems/2054)
**Author:** [@kyunam](https://discuss.elastic.co/u/kyunam)\ **Replies:** 5\ **Last updated:** [June 9, 2015, 7:21am UTC](https://discuss.elastic.co/t/local-install-only-copies-rb-file-to-local-gems/2054 "2015-06-09T07:21:59Z")
I followed "How to write a Logstash input plugin". When installed locally, only rb file is copied to local\_gems/..../logstash-input-something/lib/logstash/something.rb I had to copy manually all other files and folders… --- ## [Boosting score relative to location](https://discuss.elastic.co/t/boosting-score-relative-to-location/13362)
**Author:** [@Mohammady\_Mahdy](https://discuss.elastic.co/u/Mohammady_Mahdy)\ **Replies:** 5\ **Last updated:** [August 30, 2013, 3:04pm UTC](https://discuss.elastic.co/t/boosting-score-relative-to-location/13362 "2013-08-30T15:04:15Z")
Hey all, I have this use case where I am indexing names of people (for a phonebook kind of app) and I try to autocomplete based on name and number, I am doing edge anagrams and it's working fine, the number autoco… --- ## [Recreate index, error 'resource\_already\_exists\_exception'](https://discuss.elastic.co/t/recreate-index-error-resource-already-exists-exception/365105)
**Author:** [@LiJie20190102](https://discuss.elastic.co/u/LiJie20190102)\ **Replies:** 4\ **Last updated:** [August 19, 2024, 7:36am UTC](https://discuss.elastic.co/t/recreate-index-error-resource-already-exists-exception/365105 "2024-08-19T07:36:40Z")
My goal is to quickly clear the index, but I found that the 'delete-by\_query' courier is slow, so I plan to delete it first and then create a new index like before, but I find that errors often occur： --- ## [Visualization with images](https://discuss.elastic.co/t/visualization-with-images/217272)
**Author:** [@mrotmann](https://discuss.elastic.co/u/mrotmann)\ **Replies:** 4\ **Last updated:** [January 30, 2020, 9:06pm UTC](https://discuss.elastic.co/t/visualization-with-images/217272 "2020-01-30T21:06:40Z")
Hello, I want to build simple visualizations that include some sort of images. For example, I have q data from led's going on or off and i want to have images of led's in the respective states for each item showing if i… --- ## [Delete unsupported or deprecated static index settings created with a previous release?](https://discuss.elastic.co/t/delete-unsupported-or-deprecated-static-index-settings-created-with-a-previous-release/190272)
**Author:** [@mkonold](https://discuss.elastic.co/u/mkonold)\ **Replies:** 4\ **Last updated:** [July 24, 2019, 2:29pm UTC](https://discuss.elastic.co/t/delete-unsupported-or-deprecated-static-index-settings-created-with-a-previous-release/190272 "2019-07-24T14:29:00Z")
How to delete static settings from an index if this setting is not supported/known anymore to the running ES version. Indices created with ES 5.2.2 or 5.3.0 have been subject to shrinking with a hot-warm strategy in ord… --- ## [Compare different field values in scripted field](https://discuss.elastic.co/t/compare-different-field-values-in-scripted-field/150868)
**Author:** [@ramji](https://discuss.elastic.co/u/ramji)\ **Replies:** 4\ **Last updated:** [October 5, 2018, 3:54pm UTC](https://discuss.elastic.co/t/compare-different-field-values-in-scripted-field/150868 "2018-10-05T15:54:52Z")
Below is the 1st of the document which contains field name "message" which has value in a form of text. // message Reconciliation for plan 141 - Line 3 is completed Below is the second document which contains … --- ## [\[SOLVED\] Chaining Pipelines Together](https://discuss.elastic.co/t/solved-chaining-pipelines-together/112708)
**Author:** [@bgeels](https://discuss.elastic.co/u/bgeels)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 3:26pm UTC](https://discuss.elastic.co/t/solved-chaining-pipelines-together/112708 "2017-12-21T15:26:17Z")
Hey All, Has anyone tried to chain multiple pipelines together on a single host? I'm trying to send from http-\>A-\>B-\>C-\>logfile. Connecting the pipelines together via the tcp input/output plugins. I have debug level lo… --- ## [Logstash Errors During Lab 4](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759)
**Author:** [@millerjasonklye](https://discuss.elastic.co/u/millerjasonklye)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 2:16pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759 "2017-11-08T14:16:52Z")
Hello, My name is Jason Miller. I recently bought the Elastic Logging Training package. I am following along with the labs and got to the portion of starting Logstash this is the error I receieve within my terminal. I a… --- ## [Filebeat.exe using over 1GB of Memory on Windows](https://discuss.elastic.co/t/filebeat-exe-using-over-1gb-of-memory-on-windows/106775)
**Author:** [@BrianBeaulieu](https://discuss.elastic.co/u/BrianBeaulieu)\ **Replies:** 4\ **Last updated:** [November 8, 2017, 12:24pm UTC](https://discuss.elastic.co/t/filebeat-exe-using-over-1gb-of-memory-on-windows/106775 "2017-11-08T12:24:30Z")
\[2017-11-07 18\_32\_46-Remote Desktop Manager \[RMCO - WebProd\]\] Version 5.6.3 Happened with older 5.x versions as well. Can't attach memory profile text file. Summary at the bottom. Configuration is pretty simple. 3 l… --- ## [How do I return only one result per type?](https://discuss.elastic.co/t/how-do-i-return-only-one-result-per-type/78936)
**Author:** [@coogle](https://discuss.elastic.co/u/coogle)\ **Replies:** 4\ **Last updated:** [March 18, 2017, 6:31am UTC](https://discuss.elastic.co/t/how-do-i-return-only-one-result-per-type/78936 "2017-03-18T06:31:54Z")
Hello, I have a nested mapping as follows: { "fbs": { "mappings": { "institution": { "properties": { "document": { "type": "nested", "properties": { … --- ## [Best way to do a Bulk update with script](https://discuss.elastic.co/t/best-way-to-do-a-bulk-update-with-script/369017)
**Author:** [@Matt\_Shallow](https://discuss.elastic.co/u/Matt_Shallow)\ **Replies:** 6\ **Last updated:** [October 22, 2024, 6:06pm UTC](https://discuss.elastic.co/t/best-way-to-do-a-bulk-update-with-script/369017 "2024-10-22T18:06:49Z")
I have been following a bulk update example to do a bulk update on my index however I get the following error: Validation Failed: 1: can't provide both script and doc; The below code is what is giving the error. var… --- ## [Elastic APM .net agent is not instrumenting methods](https://discuss.elastic.co/t/elastic-apm-net-agent-is-not-instrumenting-methods/228815)
**Author:** [@ramkms6666](https://discuss.elastic.co/u/ramkms6666)\ **Replies:** 6\ **Last updated:** [April 20, 2020, 12:55pm UTC](https://discuss.elastic.co/t/elastic-apm-net-agent-is-not-instrumenting-methods/228815 "2020-04-20T12:55:36Z")
Kibana 7.4.0: Elasticsearch 7.4.0: APM Server version 7.6.2: \*\*APM Agent language and version \*\*: Chrome 80: Original install method from download page 64bit .net agent: \*\*Fresh install \*\* Hi, I just set up Elast… --- ## [Unable to Start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/250625)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 10:36am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/250625 "2020-10-03T10:36:25Z")
OS:- RHEL 7 ES Version: 6.7 ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2020-1… --- ## [How to access ES from hosts other than localhost?](https://discuss.elastic.co/t/how-to-access-es-from-hosts-other-than-localhost/243513)
**Author:** [@Aj\_t](https://discuss.elastic.co/u/Aj_t)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 11:09am UTC](https://discuss.elastic.co/t/how-to-access-es-from-hosts-other-than-localhost/243513 "2020-08-03T11:09:26Z")
I just have one node where I am running ES and Kibana. In addition to the localhost, I would like to access ES from another host (remote\_ip1) as well. But, I would like to avoid setting the network.host to 0.0.0.0. When … --- ## [Logstash Hangs After Too Many 400's on Bulk Requests to ES](https://discuss.elastic.co/t/logstash-hangs-after-too-many-400s-on-bulk-requests-to-es/237612)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 2:53am UTC](https://discuss.elastic.co/t/logstash-hangs-after-too-many-400s-on-bulk-requests-to-es/237612 "2020-06-19T02:53:35Z")
Intermittently I ran into an issue where Logstash will hang. I think what is happening is that for some reason I start logging "Encountered a returnable error. Will Retry with exponential backoff" and the code is 400. … --- ## [Logstash grok filter ignoring white space delimiter](https://discuss.elastic.co/t/logstash-grok-filter-ignoring-white-space-delimiter/72568)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [January 24, 2017, 5:57am UTC](https://discuss.elastic.co/t/logstash-grok-filter-ignoring-white-space-delimiter/72568 "2017-01-24T05:57:50Z")
Hi, I am using Logstash GA 5.0.0 with Kafka. I am ading a custom parameter "logtype":"mylogs" in kafka input. I have a Kafka message like; ##SEVERE 05-Jan-2017 06:02:25.562 com.memberA.studentB.classCa startup CUSTOM… --- ## [How to aggregate data on elastic sent by logstash](https://discuss.elastic.co/t/how-to-aggregate-data-on-elastic-sent-by-logstash/205140)
**Author:** [@krishna\_bhargav](https://discuss.elastic.co/u/krishna_bhargav)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 12:14pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-on-elastic-sent-by-logstash/205140 "2019-11-06T12:14:30Z")
I am working on below schema, grouping multiple households based on the keyinformation. We could achieve this with the logstash aggregate filter. But this is having performance issue and also cannot run with multiple thr… --- ## [REST API to get the visualization request body](https://discuss.elastic.co/t/rest-api-to-get-the-visualization-request-body/178414)
**Author:** [@Mayuri\_Patole](https://discuss.elastic.co/u/Mayuri_Patole)\ **Replies:** 3\ **Last updated:** [April 26, 2019, 11:02am UTC](https://discuss.elastic.co/t/rest-api-to-get-the-visualization-request-body/178414 "2019-04-26T11:02:11Z")
I want to query the Kibana application and get the Elasticsearch request bodies used to build all the visualizations on a given dashboard. Is there any Rest API available to fetch request bodies of visualization ? --- ## [Hide some dashboards in Kibana with doc level security](https://discuss.elastic.co/t/hide-some-dashboards-in-kibana-with-doc-level-security/150912)
**Author:** [@Rapha](https://discuss.elastic.co/u/Rapha)\ **Replies:** 3\ **Last updated:** [October 4, 2018, 9:52am UTC](https://discuss.elastic.co/t/hide-some-dashboards-in-kibana-with-doc-level-security/150912 "2018-10-04T09:52:48Z")
Hi, I have 3 users using the same Kibana instance, so i would like to use document level security to prevent a user from seeing others users's dashboards. So for "user1" I try to filter the .kibana index on documents w… --- ## [\[HADOOP\] \[Spark\] Problem with encoding of parentId containing backslash](https://discuss.elastic.co/t/hadoop-spark-problem-with-encoding-of-parentid-containing-backslash/21905)
**Author:** [@andrassy](https://discuss.elastic.co/u/andrassy)\ **Replies:** 8\ **Last updated:** [January 30, 2015, 1:21pm UTC](https://discuss.elastic.co/t/hadoop-spark-problem-with-encoding-of-parentid-containing-backslash/21905 "2015-01-30T13:21:26Z")
Hi list, I have an RDD with a field included that contains an ID that I'd like to become the parent document when I execute saveToEs (all authored in scala). Something like this... { "units\_sold": 100, … --- ## [Wildcard query not working](https://discuss.elastic.co/t/wildcard-query-not-working/14568)
**Author:** [@jackpark](https://discuss.elastic.co/u/jackpark)\ **Replies:** 3\ **Last updated:** [November 24, 2013, 8:10pm UTC](https://discuss.elastic.co/t/wildcard-query-not-working/14568 "2013-11-24T20:10:05Z")
Simple question from a beginner. I store a document that looks like this: {"locator":"CO2.CausalAssociation.ClimateChange", "nameString":"CO2 causes Climate Change", "instanceOf":"AssociationType", "sourceTopi… --- ## [Can I embed HTML code in Kibana?](https://discuss.elastic.co/t/can-i-embed-html-code-in-kibana/94060)
**Author:** [@Helix](https://discuss.elastic.co/u/Helix)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 2:25pm UTC](https://discuss.elastic.co/t/can-i-embed-html-code-in-kibana/94060 "2017-07-21T14:25:08Z")
Hello, I found a Blog Post describing how to embed HTML code in Kibana Version 4 here. Is this still possible in Kibana 5 or is there a different way to do it now? Thank you in advance! --- ## [Drill down graph by clicking on a part of the graph](https://discuss.elastic.co/t/drill-down-graph-by-clicking-on-a-part-of-the-graph/238180)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 5\ **Last updated:** [June 24, 2020, 5:51am UTC](https://discuss.elastic.co/t/drill-down-graph-by-clicking-on-a-part-of-the-graph/238180 "2020-06-24T05:51:42Z")
Hi all, I want to create a drill down graph like, if I have a horizontal bar graph and if I click on any of the bar a new graph should be drilled out with the data related to that bar only. Is it possible to do so? --- ## [Unassigned shards allocation](https://discuss.elastic.co/t/unassigned-shards-allocation/55870)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 5\ **Last updated:** [July 20, 2016, 5:31am UTC](https://discuss.elastic.co/t/unassigned-shards-allocation/55870 "2016-07-20T05:31:25Z")
Hi All, Please suggest how to resolve the unassigned shards - curl http://localhost:9200/\_cluster/health?pretty=true { "cluster\_name" : "ELASTICSEARCH", "status" : "red", "timed\_out" : false, "number\_of\_nodes… --- ## [Simple Watcher Webhook](https://discuss.elastic.co/t/simple-watcher-webhook/201471)
**Author:** [@gytaco](https://discuss.elastic.co/u/gytaco)\ **Replies:** 4\ **Last updated:** [October 9, 2019, 4:30pm UTC](https://discuss.elastic.co/t/simple-watcher-webhook/201471 "2019-10-09T16:30:19Z")
Hi Team I am using Elastic Hosted and trying to create a simple Watcher Webhook alert and I cannot find an example anywhere of using the kibana interface of a simple Webhook using the UI. Can anyone point me in the dire… --- ## [How to achieve high availability of ELK Stack?](https://discuss.elastic.co/t/how-to-achieve-high-availability-of-elk-stack/89326)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [June 14, 2017, 9:55am UTC](https://discuss.elastic.co/t/how-to-achieve-high-availability-of-elk-stack/89326 "2017-06-14T09:55:03Z")
Hi Experts, Sorry if I am asking this question in wrong group. I have Archsight CEF data which I will be ingesting into ES using LS . To achieve HA I have total 8 machines 2-ES, 2-LS(these also have syslog-ng), 2-Kiban… --- ## [Building custom panels in Kibana](https://discuss.elastic.co/t/building-custom-panels-in-kibana/15603)
**Author:** [@Gabe\_Gorelick\_Feldma](https://discuss.elastic.co/u/Gabe_Gorelick_Feldma)\ **Replies:** 4\ **Last updated:** [January 6, 2015, 9:38am UTC](https://discuss.elastic.co/t/building-custom-panels-in-kibana/15603 "2015-01-06T09:38:48Z")
Is there any documentation on implementing custom panels in Kibana? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiv… --- ## [Node not able to join the cluster after enabling x-pack in elastic v6.5](https://discuss.elastic.co/t/node-not-able-to-join-the-cluster-after-enabling-x-pack-in-elastic-v6-5/160031)
**Author:** [@mohamedabdoun](https://discuss.elastic.co/u/mohamedabdoun)\ **Replies:** 2\ **Last updated:** [December 10, 2018, 5:22am UTC](https://discuss.elastic.co/t/node-not-able-to-join-the-cluster-after-enabling-x-pack-in-elastic-v6-5/160031 "2018-12-10T05:22:08Z")
I’m trying to build elasticsearch 6.5 cluster , mcluster consists of 3 nodes , I managed to installed the cluster without x-pack successfully and all 3 nodes appears in \_cat API. However, when I configured x-pack only … --- ## [NEST: Specify type name on mapping](https://discuss.elastic.co/t/nest-specify-type-name-on-mapping/57689)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 2\ **Last updated:** [August 11, 2016, 12:39pm UTC](https://discuss.elastic.co/t/nest-specify-type-name-on-mapping/57689 "2016-08-11T12:39:54Z")
Hi guys, This code: client.CreateIndex(indexName, s =\> s.Mappings(ms =\> ms .Map\(m =\> m.AutoMap()))); will generate mapping for type with name "nestedMessage": {"mappings":{"nestedMessag… --- ## [Grok parse failure with java logs](https://discuss.elastic.co/t/grok-parse-failure-with-java-logs/43159)
**Author:** [@daniel1](https://discuss.elastic.co/u/daniel1)\ **Replies:** 2\ **Last updated:** [March 2, 2016, 5:29pm UTC](https://discuss.elastic.co/t/grok-parse-failure-with-java-logs/43159 "2016-03-02T17:29:25Z")
I'm having quite a bit of trouble with parsing some java logs. The log output format is the standard java logging format, matching the pattern defined in %{JAVALOGMESSAGE}. The application is running on jboss inside a d… --- ## [Passing requestId in ES logs](https://discuss.elastic.co/t/passing-requestid-in-es-logs/99498)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 3\ **Last updated:** [September 6, 2017, 2:24pm UTC](https://discuss.elastic.co/t/passing-requestid-in-es-logs/99498 "2017-09-06T14:24:51Z")
We use ES in production. We generate our own transactionId / requestId for each request, so that we can trace the query. However, if there is a 400 / 500 error returned by ES (because of client or server error), there is… --- ## [Cant start elasticsearch FailedNodeException](https://discuss.elastic.co/t/cant-start-elasticsearch-failednodeexception/80892)
**Author:** [@Pranil\_Ambule](https://discuss.elastic.co/u/Pranil_Ambule)\ **Replies:** 3\ **Last updated:** [April 1, 2017, 10:59am UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-failednodeexception/80892 "2017-04-01T10:59:33Z")
I use elk stack. Elasticsearch was working fine till yesterday suddenly i got this error.I havent done any updates or any changes. here is the detailed log. logs --- ## [Is Network Traffic (Fleet Integration) the new Packetbeat? - Missing Netfow?](https://discuss.elastic.co/t/is-network-traffic-fleet-integration-the-new-packetbeat-missing-netfow/285636)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 6\ **Last updated:** [October 13, 2021, 3:29pm UTC](https://discuss.elastic.co/t/is-network-traffic-fleet-integration-the-new-packetbeat-missing-netfow/285636 "2021-10-13T15:29:53Z")
Hi Guys, I noticed that the integration didn't create the indices for network flow. Is this a bug or missed configuration? {"type":"security\_exception","reason":"action \[indices:admin/auto\_create\] is unauthorized … --- ## [ERR\_TOO\_MANY\_REDIRECTS 302 with ELK Operator 7.10.0](https://discuss.elastic.co/t/err-too-many-redirects-302-with-elk-operator-7-10-0/259504)
**Author:** [@inforedaster](https://discuss.elastic.co/u/inforedaster)\ **Replies:** 6\ **Last updated:** [December 24, 2020, 5:11pm UTC](https://discuss.elastic.co/t/err-too-many-redirects-302-with-elk-operator-7-10-0/259504 "2020-12-24T17:11:15Z")
hello, i have an Elastick stack elasticsearch and kibana 7.10.0 using elk operator in kubernetes Whene i make the link https://monitoring.cloudapp.azure.com/kibana i have this redirection : https://monitoring.cloudap… --- ## [Trying to load data using Rally into Elastic Search](https://discuss.elastic.co/t/trying-to-load-data-using-rally-into-elastic-search/127875)
**Author:** [@sarba](https://discuss.elastic.co/u/sarba)\ **Replies:** 6\ **Last updated:** [April 16, 2018, 5:41pm UTC](https://discuss.elastic.co/t/trying-to-load-data-using-rally-into-elastic-search/127875 "2018-04-16T17:41:32Z")
Trying to load data using rally into Elastic Search and facing this issue: root@esdb01-cqs01:~/.rally/benchmarks/tracks/default/contactdata# esrally --track=contactdata --target-hosts=esdb01-cqs01.db.us-west-1a.stg1.ebs… --- ## [Lucene index corruption on nodes restart](https://discuss.elastic.co/t/lucene-index-corruption-on-nodes-restart/16544)
**Author:** [@Andrey\_Perminov](https://discuss.elastic.co/u/Andrey_Perminov)\ **Replies:** 6\ **Last updated:** [June 18, 2014, 1:55pm UTC](https://discuss.elastic.co/t/lucene-index-corruption-on-nodes-restart/16544 "2014-06-18T13:55:51Z")
We are using a small elasticsearch cluster of three nodes, version 1.0.1. Each node has 7 GB RAM. Our software creates daily indexes for storing it's data. Daily index is something around 5 GB. Unfortunately, for a r… --- ## [Getting SIEM alerts through API](https://discuss.elastic.co/t/getting-siem-alerts-through-api/321603)
**Author:** [@reg\_reginald](https://discuss.elastic.co/u/reg_reginald)\ **Replies:** 4\ **Last updated:** [December 21, 2022, 7:13pm UTC](https://discuss.elastic.co/t/getting-siem-alerts-through-api/321603 "2022-12-21T19:13:21Z")
Hello, Is it possible to get alerts from Kibana SIEM through an api? it seems like \:\/api/detection\_engine/signals could be a way but there's no example with individual alerts, just an aggregation. … --- ## [Day of the week with non UTC timestamps](https://discuss.elastic.co/t/day-of-the-week-with-non-utc-timestamps/291066)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 5:51pm UTC](https://discuss.elastic.co/t/day-of-the-week-with-non-utc-timestamps/291066 "2021-12-06T17:51:46Z")
Hi everyone, I have logs in a dd/MM/YYYY HH:mm:ss format using the CET timezone, and I am trying to extract the Day of the week for CET and not UTC. We used this at first date { match =\> \[ "date", "dd/MM/YYYY HH:mm:… --- ## [Error activating rule…](https://discuss.elastic.co/t/error-activating-rule/248424)
**Author:** [@Akash\_Upadhyay](https://discuss.elastic.co/u/Akash_Upadhyay)\ **Replies:** 8\ **Last updated:** [September 15, 2020, 10:11pm UTC](https://discuss.elastic.co/t/error-activating-rule/248424 "2020-09-15T22:11:49Z")
Hey, I have installed elk using docker. It is up and running fine. But the problem occurs when I try to activate pre-built rules. My docker-compose.yml configurations are: version: '3' services: elasticsearch: … --- ## [Use var\_set in markdown and conditional coloring for markdown](https://discuss.elastic.co/t/use-var-set-in-markdown-and-conditional-coloring-for-markdown/266110)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:59pm UTC](https://discuss.elastic.co/t/use-var-set-in-markdown-and-conditional-coloring-for-markdown/266110 "2021-03-03T19:59:21Z")
I am attempting to do the following: var\_set name="total" value={filters | timefilter column="createDate" from ={string "now-" {var "queryTimeframe"} "h"} to="now" | escount index"queries\*" query="source:test"} | var\_se… --- ## [Retrieving results by using kibanaSavedObjectMeta.searchSourceJSON from a saved search](https://discuss.elastic.co/t/retrieving-results-by-using-kibanasavedobjectmeta-searchsourcejson-from-a-saved-search/189464)
**Author:** [@Lars\_Veelaert](https://discuss.elastic.co/u/Lars_Veelaert)\ **Replies:** 2\ **Last updated:** [July 10, 2019, 8:51am UTC](https://discuss.elastic.co/t/retrieving-results-by-using-kibanasavedobjectmeta-searchsourcejson-from-a-saved-search/189464 "2019-07-10T08:51:07Z")
I have a use-case that demands reading out the API for saved searches in Kibana and retrieving the results. There seems to be no API for Kibana to do this. A defined saved search can be retrieved and in it's json respo… --- ## [Discover: Failed to parse date field in case of milli seconds](https://discuss.elastic.co/t/discover-failed-to-parse-date-field-in-case-of-milli-seconds/185356)
**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 8:36pm UTC](https://discuss.elastic.co/t/discover-failed-to-parse-date-field-in-case-of-milli-seconds/185356 "2019-06-12T20:36:41Z")
I am getting an error when I am trying to use Discover tab. The format of my time\_stamp field is " YYYY-MM-DD'T'hh:mm:ss.SSS ". The data gets parsed in the discovery tab from hours to mins to secs, but fails to show mi… --- ## [Comparing two arbitrary days with each other in a time series](https://discuss.elastic.co/t/comparing-two-arbitrary-days-with-each-other-in-a-time-series/158071)
**Author:** [@Henrik\_Ossipoff\_Hans](https://discuss.elastic.co/u/Henrik_Ossipoff_Hans)\ **Replies:** 2\ **Last updated:** [December 2, 2018, 8:20am UTC](https://discuss.elastic.co/t/comparing-two-arbitrary-days-with-each-other-in-a-time-series/158071 "2018-12-02T08:20:35Z")
Say I have an index with a dataset of all purchases done on an e-commerce site. For Black Friday, which falls on a different date of the month each year, I want to be able to compare how sales are this year compared to l… --- ## [SOAP web services Elasticsearch](https://discuss.elastic.co/t/soap-web-services-elasticsearch/129985)
**Author:** [@Patricie](https://discuss.elastic.co/u/Patricie)\ **Replies:** 2\ **Last updated:** [May 2, 2018, 9:30am UTC](https://discuss.elastic.co/t/soap-web-services-elasticsearch/129985 "2018-05-02T09:30:03Z")
I'm new to Elasticsearch and I want to know if it is a suitable solution for our team. We need to log our SOAP requests and responses (they're in XML format). We work with .NET on the server side (we're just maintaining… --- ## [Logstash | Pipeline - Hexadecimal to ASCII Converter](https://discuss.elastic.co/t/logstash-pipeline-hexadecimal-to-ascii-converter/223155)
**Author:** [@deeshu](https://discuss.elastic.co/u/deeshu)\ **Replies:** 4\ **Last updated:** [March 13, 2020, 8:54am UTC](https://discuss.elastic.co/t/logstash-pipeline-hexadecimal-to-ascii-converter/223155 "2020-03-13T08:54:21Z")
Hi experts, I am trying to parse some events from Auditd, the values have been extracted but the commands executed are coming in hexadecimal format. Can anyone help how to convert it to ASCII in a logstash pipeline. B… --- ## [Shield and Active Directory Integration](https://discuss.elastic.co/t/shield-and-active-directory-integration/28197)
**Author:** [@stefltr](https://discuss.elastic.co/u/stefltr)\ **Replies:** 4\ **Last updated:** [August 31, 2015, 12:47pm UTC](https://discuss.elastic.co/t/shield-and-active-directory-integration/28197 "2015-08-31T12:47:43Z")
I currently have an ES instance running and have been trying to integrate Shield access with my company's AD. At this point in time, Shield currently authenticates any user in our AD domain. My question is: is it po… --- ## [Topbeat json event, fieldname when sending to logstash](https://discuss.elastic.co/t/topbeat-json-event-fieldname-when-sending-to-logstash/55836)
**Author:** [@Arjun\_Agarwal](https://discuss.elastic.co/u/Arjun_Agarwal)\ **Replies:** 5\ **Last updated:** [July 19, 2016, 1:57pm UTC](https://discuss.elastic.co/t/topbeat-json-event-fieldname-when-sending-to-logstash/55836 "2016-07-19T13:57:38Z")
Plzz.. do let me know the name of the field which store the complete json event generated by topbeat when we are sending data from topbeat to logstash ?? or How can we store and get json events generated by topbeat in a … --- ## [Escaping characters in a JSON query?](https://discuss.elastic.co/t/escaping-characters-in-a-json-query/4815)
**Author:** [@drv\_](https://discuss.elastic.co/u/drv_)\ **Replies:** 1\ **Last updated:** [July 8, 2011, 7:33am UTC](https://discuss.elastic.co/t/escaping-characters-in-a-json-query/4815 "2011-07-08T07:33:12Z")
Hi all, I've been having difficulty creating a JSON query to find fields that have multiple colons ':' in the query string. Multiple colons results in a query parse failure, the console log shows Caused by: org.apach… --- ## [Logstash mapping wrong field types](https://discuss.elastic.co/t/logstash-mapping-wrong-field-types/252460)
**Author:** [@JFC](https://discuss.elastic.co/u/JFC)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 9:22pm UTC](https://discuss.elastic.co/t/logstash-mapping-wrong-field-types/252460 "2020-10-19T21:22:48Z")
Hi , I'm new to logstash and ELK stack. So apologies in advance if this question sounds obvious. Problem: I have fields that are being detected as strings by Kibana even after the template.json file explicitly maps the… [Previous page](https://discuss.elastic.co/top.md?page=860&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=862&per_page=50&period=all)