# Top **URL:** https://discuss.elastic.co/top.md?page=867&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 868 --- ## [Help needed to change the password of the default elastic user with puppet module](https://discuss.elastic.co/t/help-needed-to-change-the-password-of-the-default-elastic-user-with-puppet-module/155487)
**Author:** [@clp01](https://discuss.elastic.co/u/clp01)\ **Replies:** 5\ **Last updated:** [November 8, 2018, 2:46am UTC](https://discuss.elastic.co/t/help-needed-to-change-the-password-of-the-default-elastic-user-with-puppet-module/155487 "2018-11-08T02:46:37Z")
Hi! I'm using the puppet module to manage elasticsearch (https://forge.puppet.com/elastic/elasticsearch) and x-pack. I'm not sure of the best way to change the default x-pack username and password from elastic / changem… --- ## [Logstash to Kafka with SASL](https://discuss.elastic.co/t/logstash-to-kafka-with-sasl/78918)
**Author:** [@Markovich](https://discuss.elastic.co/u/Markovich)\ **Replies:** 0\ **Last updated:** [March 16, 2017, 5:58pm UTC](https://discuss.elastic.co/t/logstash-to-kafka-with-sasl/78918 "2017-03-16T17:58:38Z")
Hello everyone! I'm new to logstash! I need to send logs from hdfs-namenode to kafka broker with kerberos. Here is my configs and full log of logstash. Please tell me what's wrong? I think logstash is not using ja… --- ## [Kibana was available (Was degraded)](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [January 13, 2022, 1:55pm UTC](https://discuss.elastic.co/t/kibana-was-available-was-degraded/294193 "2022-01-13T13:55:56Z")
Hello all, I am using version 7.16.2 for my elastic stack. I have a three node cluster implementation. when I updated the stack to 7.16.2, I noticed following in my logs log \[12:00:44.067\] \[info\]\[status\] Kibana is… --- ## [Rally and JDK errors](https://discuss.elastic.co/t/rally-and-jdk-errors/152807)
**Author:** [@Rifat\_Erdem\_Sahin](https://discuss.elastic.co/u/Rifat_Erdem_Sahin)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 8:07am UTC](https://discuss.elastic.co/t/rally-and-jdk-errors/152807 "2018-10-18T08:07:18Z")
I have installed rally into digital ocean and rally is not running Welcome to Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-36-generic x86\_64) Documentation: https://help.ubuntu.com Management: https://landscape.canonic… --- ## [Grok too slow? \[solved\]](https://discuss.elastic.co/t/grok-too-slow-solved/52348)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 2\ **Last updated:** [June 10, 2016, 9:36am UTC](https://discuss.elastic.co/t/grok-too-slow-solved/52348 "2016-06-10T09:36:00Z")
Hi, There was suggested in this thread that my grok might cause issues with the performance of my filebeat/logstash/elasticseach setup. This is my config file // more if \[source\] checks are here // .... … --- ## [Packetbeat & MySQL](https://discuss.elastic.co/t/packetbeat-mysql/54042)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 6\ **Last updated:** [June 28, 2016, 8:46am UTC](https://discuss.elastic.co/t/packetbeat-mysql/54042 "2016-06-28T08:46:23Z")
Hi, I'm running an Ubuntu 14.04 machine in Vagrant / Virtualbox, i spinned up a scotchbox, acting as a LAMP server. Packetbeat 1.2.3 is sending data directly to Elasticsearch. Elasticsearch is successfully receiving da… --- ## [ES 7.7.1 -\> ES 7.12.0 WAND Performance Issue](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854)
**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\ **Replies:** 3\ **Last updated:** [May 14, 2021, 1:39pm UTC](https://discuss.elastic.co/t/es-7-7-1-es-7-12-0-wand-performance-issue/272854 "2021-05-14T13:39:54Z")
Hello, I am upgrading an existing cluster from ES 7.7.1 (lucene 8.5.1) to ES 7.12.0 (lucene 8.8.0) and have hit a massive performance regression in basic match queries utilizing minimum should match. I believe this is… --- ## [Bitcoin Real-time transactions using canvas](https://discuss.elastic.co/t/bitcoin-real-time-transactions-using-canvas/160979)
**Author:** [@shani\_angarkadu](https://discuss.elastic.co/u/shani_angarkadu)\ **Replies:** 3\ **Last updated:** [December 20, 2018, 8:56pm UTC](https://discuss.elastic.co/t/bitcoin-real-time-transactions-using-canvas/160979 "2018-12-20T20:56:18Z")
Not a question, feels like sharing this canvas real-time page created for bitcoin monitoring --- ## [Exiting: error importing Kibana dashboards: fail to import the dashboards in Kibana](https://discuss.elastic.co/t/exiting-error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/342912)
**Author:** [@ELK\_USR1](https://discuss.elastic.co/u/ELK_USR1)\ **Replies:** 3\ **Last updated:** [September 14, 2023, 7:33pm UTC](https://discuss.elastic.co/t/exiting-error-importing-kibana-dashboards-fail-to-import-the-dashboards-in-kibana/342912 "2023-09-14T19:33:55Z")
While running ./kibana setup -e getting below error {"log.level":"error","@timestamp":"2023-09-13T12:47:44.064+0530","log.origin":{"file.name":"instance/beat.go","file.line":1274},"message":"Exiting: error importing Kib… --- ## [Hide or discard a transaction or span](https://discuss.elastic.co/t/hide-or-discard-a-transaction-or-span/199989)
**Author:** [@gregjeanmart](https://discuss.elastic.co/u/gregjeanmart)\ **Replies:** 4\ **Last updated:** [September 19, 2019, 8:55am UTC](https://discuss.elastic.co/t/hide-or-discard-a-transaction-or-span/199989 "2019-09-19T08:55:21Z")
Hey, I have a custom Kafka instrumentation solution which starts a new transaction at reception (KafkaListener interceptor) and correlate it with the producer transaction (see this thread for more info). One of the issu… --- ## [Visualize CSV Data](https://discuss.elastic.co/t/visualize-csv-data/166901)
**Author:** [@andrewjo](https://discuss.elastic.co/u/andrewjo)\ **Replies:** 4\ **Last updated:** [February 7, 2019, 4:47pm UTC](https://discuss.elastic.co/t/visualize-csv-data/166901 "2019-02-07T16:47:37Z")
Hi Team, I would like to ask you, how to generate visualize in kibana with this column and value : Target Address,Total 106.1.6.5,209 114.172.14.110,238 120.12.28.9,89 This source from CSV Files. I try to create s… --- ## [Production Cluster Suddenly Crashed Last Night](https://discuss.elastic.co/t/production-cluster-suddenly-crashed-last-night/24691)
**Author:** [@Yosi\_Haran](https://discuss.elastic.co/u/Yosi_Haran)\ **Replies:** 4\ **Last updated:** [July 2, 2015, 3:05pm UTC](https://discuss.elastic.co/t/production-cluster-suddenly-crashed-last-night/24691 "2015-07-02T15:05:14Z")
Hi Guys, We've been running a production cluster of elasticsearch 1.0.0 with 3 nodes in 3 regions in AWS for about a year now, with about ~5K requests per minute on average. Last night, although there was no traffic sp… --- ## [Function\_score and elasticsearch-php](https://discuss.elastic.co/t/function-score-and-elasticsearch-php/16329)
**Author:** [@Erdal\_Gunyar](https://discuss.elastic.co/u/Erdal_Gunyar)\ **Replies:** 4\ **Last updated:** [March 13, 2014, 1:42pm UTC](https://discuss.elastic.co/t/function-score-and-elasticsearch-php/16329 "2014-03-13T13:42:24Z")
Hi everybody, Does anyone here successfully implemented function\_score with elasticsearch-php? Of course, without passing all the body as a JSON string. I've actually tried but it failed, it looks like it's impo… --- ## [Logstash 2.4 "Flushing buffer at interval" after write a few records to es after start/restart](https://discuss.elastic.co/t/logstash-2-4-flushing-buffer-at-interval-after-write-a-few-records-to-es-after-start-restart/61892)
**Author:** [@jangochu](https://discuss.elastic.co/u/jangochu)\ **Replies:** 2\ **Last updated:** [September 30, 2016, 7:29am UTC](https://discuss.elastic.co/t/logstash-2-4-flushing-buffer-at-interval-after-write-a-few-records-to-es-after-start-restart/61892 "2016-09-30T07:29:38Z")
Hi,there: I use logstash 2.4.0 to read file log and write to elasticsearch 2.3.3. logstash had been installed as: sudo yum install logstash My es was install and run on another server on port 9200. And the … --- ## [Maintain order of results based on search criteria](https://discuss.elastic.co/t/maintain-order-of-results-based-on-search-criteria/58332)
**Author:** [@hitesh-inbetween](https://discuss.elastic.co/u/hitesh-inbetween)\ **Replies:** 2\ **Last updated:** [August 20, 2016, 7:57am UTC](https://discuss.elastic.co/t/maintain-order-of-results-based-on-search-criteria/58332 "2016-08-20T07:57:58Z")
Hello elasticsearch pioneers, I would like the results to be in the same sequence as the query. To elaborate more about this, consider the following example. : I have documents with ID field, which look somewhat like… --- ## [Add\_field to add a custom hyperlink](https://discuss.elastic.co/t/add-field-to-add-a-custom-hyperlink/36225)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 2\ **Last updated:** [December 3, 2015, 3:39pm UTC](https://discuss.elastic.co/t/add-field-to-add-a-custom-hyperlink/36225 "2015-12-03T15:39:41Z")
Is there any way to add a hyperlink to the data table? A clickable hyperlink? I am concatenating the field called Id, which lives in my document. I can get a url into the document, but it's not clickable, it's just pla… --- ## [How to add Len dashboards to canvas](https://discuss.elastic.co/t/how-to-add-len-dashboards-to-canvas/259494)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 8\ **Last updated:** [December 23, 2020, 4:59pm UTC](https://discuss.elastic.co/t/how-to-add-len-dashboards-to-canvas/259494 "2020-12-23T16:59:15Z")
Hello, I have created a dashboards using Len to display the new users created in my different AD, and the name of the machine where they have been created, I added some filters and the final result look like that: Th… --- ## [Kibana server is not ready yet - kibana 7.5](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-5/213923)
**Author:** [@talsantos](https://discuss.elastic.co/u/talsantos)\ **Replies:** 8\ **Last updated:** [January 23, 2020, 10:40am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-kibana-7-5/213923 "2020-01-23T10:40:05Z")
Hi, I upgrade elasticsearch and kibana from 7.1 to 7.5 version, keeping the previous settings. After restart the services both are running. Whem I call kibana on browser gives the message: "Kibana server is not ready… --- ## [How to upgrade elasticsearch version 5.6.2 to 6.8 without use of X-PACK?](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-version-5-6-2-to-6-8-without-use-of-x-pack/182847)
**Author:** [@savan\_karathiya](https://discuss.elastic.co/u/savan_karathiya)\ **Replies:** 8\ **Last updated:** [May 27, 2019, 7:54am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-version-5-6-2-to-6-8-without-use-of-x-pack/182847 "2019-05-27T07:54:33Z")
I want to upgrade my elasticsearch from version 5.6.2 to 6.8, but I don't want to use X-PACK. So how I can migrate all indices version 5.6.2 to 6.8? --- ## [Was Sie wissen müssen über New Balance Schuhe](https://discuss.elastic.co/t/was-sie-wissen-mussen-uber-new-balance-schuhe/23119)
**Author:** [@Geliciano](https://discuss.elastic.co/u/Geliciano)\ **Replies:** 0\ **Last updated:** [April 7, 2015, 3:48am UTC](https://discuss.elastic.co/t/was-sie-wissen-mussen-uber-new-balance-schuhe/23119 "2015-04-07T03:48:09Z")
Eine Person, die an einer schweren Füßen Problemen leidet, müssten Sie die Motion-Control-Serie von New balance outlet deutschland zu verwenden. Jeder von ihnen sind mit Seriennummern, wo niedrige Zahlen sind für Men… --- ## [Is it possible to extract data from SolarWinds in order to setup a ELK project?](https://discuss.elastic.co/t/is-it-possible-to-extract-data-from-solarwinds-in-order-to-setup-a-elk-project/233609)
**Author:** [@Gurkeerat\_Sondhi](https://discuss.elastic.co/u/Gurkeerat_Sondhi)\ **Replies:** 5\ **Last updated:** [May 22, 2020, 12:43am UTC](https://discuss.elastic.co/t/is-it-possible-to-extract-data-from-solarwinds-in-order-to-setup-a-elk-project/233609 "2020-05-22T00:43:25Z")
I have a Solarwinds setup done. I want to extract data from Solarwinds and then push it to Elastic-Search so that I can make a dashboard for it in Kibana. How should I go about it? Should I look into calling the REST Ap… --- ## [Loading a CSV file, basic question](https://discuss.elastic.co/t/loading-a-csv-file-basic-question/38528)
**Author:** [@Christopher\_Curzon](https://discuss.elastic.co/u/Christopher_Curzon)\ **Replies:** 5\ **Last updated:** [January 11, 2016, 6:56pm UTC](https://discuss.elastic.co/t/loading-a-csv-file-basic-question/38528 "2016-01-11T18:56:11Z")
This is my first effort getting logstash to put data into Elasticsearch. So I think I must be missing something fairly obvious. I have a addr.csv file with records in this format: 369|90045|123 ABC ST|LOS ANGELES|CA … --- ## [Org.elasticsearch.client.transport.NoNodeAvailableException using ELB](https://discuss.elastic.co/t/org-elasticsearch-client-transport-nonodeavailableexception-using-elb/11662)
**Author:** [@pm1](https://discuss.elastic.co/u/pm1)\ **Replies:** 5\ **Last updated:** [October 25, 2013, 6:19pm UTC](https://discuss.elastic.co/t/org-elasticsearch-client-transport-nonodeavailableexception-using-elb/11662 "2013-10-25T18:19:44Z")
We have simple test setup in a 2 cluster node with ELB in ec2 environment (0.20.5). Running a simple script to index few documents in elastic search using ELB run into Exception in thread "main" org.elasticsearch.… --- ## [Workplace search vs Elasticsearch](https://discuss.elastic.co/t/workplace-search-vs-elasticsearch/242848)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 7\ **Last updated:** [July 29, 2020, 7:53am UTC](https://discuss.elastic.co/t/workplace-search-vs-elasticsearch/242848 "2020-07-29T07:53:03Z")
Hello Team, I was going through the documentation, as per my understanding workplace search is elasticsearch under the hood, so just couple of queries can we use workplace search connectors to crawl data to elasticse… --- ## [IIS - CSV parsing error](https://discuss.elastic.co/t/iis-csv-parsing-error/79549)
**Author:** [@ronsevet](https://discuss.elastic.co/u/ronsevet)\ **Replies:** 7\ **Last updated:** [March 22, 2017, 2:53pm UTC](https://discuss.elastic.co/t/iis-csv-parsing-error/79549 "2017-03-22T14:53:45Z")
Hi, I've been using Logstash for quite some time and over many of it's versions, we are shipping IIS logs via Filebeat to Logstash (currently 5.2.0) filtering of these logs is done mostly via CSV filter (we tried GROK … --- ## [First day of the week](https://discuss.elastic.co/t/first-day-of-the-week/52628)
**Author:** [@lore6673](https://discuss.elastic.co/u/lore6673)\ **Replies:** 1\ **Last updated:** [June 14, 2016, 7:50pm UTC](https://discuss.elastic.co/t/first-day-of-the-week/52628 "2016-06-14T19:50:25Z")
Hello I'm trying to create a new visualization, vertical bar chart, with time in the x-axis. Here the request Kibana is doing: { "query": { "filtered": { "query": { "query\_string": { "qu… --- ## [ELK for 30k eps - memory problem](https://discuss.elastic.co/t/elk-for-30k-eps-memory-problem/46695)
**Author:** [@em01](https://discuss.elastic.co/u/em01)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 3:03pm UTC](https://discuss.elastic.co/t/elk-for-30k-eps-memory-problem/46695 "2016-04-07T15:03:54Z")
Hi, We are setting an elastic cluster for os logs purpose. We wish the system to collect 30k eps constant and store it for compliance. We see that after days the system stops working, nodes become unavailable, JVM memor… --- ## [How to allow plus, hash dot as keyword in elasticsearch query\_string](https://discuss.elastic.co/t/how-to-allow-plus-hash-dot-as-keyword-in-elasticsearch-query-string/37549)
**Author:** [@Aravinthan\_Asokan](https://discuss.elastic.co/u/Aravinthan_Asokan)\ **Replies:** 0\ **Last updated:** [December 18, 2015, 8:36am UTC](https://discuss.elastic.co/t/how-to-allow-plus-hash-dot-as-keyword-in-elasticsearch-query-string/37549 "2015-12-18T08:36:49Z")
I want to to search C++, C# and .Net using elasticsearch below is the query\_string method i use for searching $keyword = "C++ C#"; //.net developer $params\['body'\]\['query'\]\['query\_string'\] = array("query" =\>$keywor… --- ## [Elastic Stack performance](https://discuss.elastic.co/t/elastic-stack-performance/242653)
**Author:** [@ArousOussema](https://discuss.elastic.co/u/ArousOussema)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 7:05am UTC](https://discuss.elastic.co/t/elastic-stack-performance/242653 "2020-07-28T07:05:41Z")
Greetings, I'm a student at the Hochschule Darmstadt in Germany. I'm currently working on a project for my university, where we’re trying to find a suitable Log management tool for our big data cluster. It will be so h… --- ## [Painless Script in Ingest - Rename Field](https://discuss.elastic.co/t/painless-script-in-ingest-rename-field/292587)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 3\ **Last updated:** [January 6, 2022, 7:55pm UTC](https://discuss.elastic.co/t/painless-script-in-ingest-rename-field/292587 "2022-01-06T19:55:11Z")
Hello there, Using an ingest pipeline, I am trying to uppercase the first char in a fieldname, for all fields under winlog.event\_data: { "script": { "lang": "painless", "source": "ctx.\_source.winlog.e… --- ## [Dutch hunspell doesn't work in 1.7.1?](https://discuss.elastic.co/t/dutch-hunspell-doesnt-work-in-1-7-1/28440)
**Author:** [@Jaap\_Blom](https://discuss.elastic.co/u/Jaap_Blom)\ **Replies:** 3\ **Last updated:** [July 7, 2016, 1:51am UTC](https://discuss.elastic.co/t/dutch-hunspell-doesnt-work-in-1-7-1/28440 "2016-07-07T01:51:34Z")
When I follow the standard procedure of adding a hunspell dictionary for the one for Dutch, I get the following error whenever I start Elasticsearch (for e.g. the en\_US dictionary works fine...): \[2015-09-01 15:58:04,9… --- ## [Packetbeat processing packets but not sending them to Elasticsearch](https://discuss.elastic.co/t/packetbeat-processing-packets-but-not-sending-them-to-elasticsearch/53333)
**Author:** [@apomerenk](https://discuss.elastic.co/u/apomerenk)\ **Replies:** 3\ **Last updated:** [June 20, 2016, 8:04pm UTC](https://discuss.elastic.co/t/packetbeat-processing-packets-but-not-sending-them-to-elasticsearch/53333 "2016-06-20T20:04:49Z")
I am using the ELK stack in an attempt to send a PCAP file down the pipeline to Kibana. I am running Packetbeat with './packetbeat -e -c packetbeat.yml -I test.pcap -d -t "publish". The PCAP file is 306 packets long, and… --- ## [Not able to make elasticsearch work on our website](https://discuss.elastic.co/t/not-able-to-make-elasticsearch-work-on-our-website/39426)
**Author:** [@Warns](https://discuss.elastic.co/u/Warns)\ **Replies:** 6\ **Last updated:** [January 20, 2016, 12:57am UTC](https://discuss.elastic.co/t/not-able-to-make-elasticsearch-work-on-our-website/39426 "2016-01-20T00:57:25Z")
We are trying to set elasticsearch on our website but we are probably missing something in the configs that is preventing it to function on the website even though when we run: curl -XGET "http://localhost:9200/ We g… --- ## [Failed to configure email alerts with gmail](https://discuss.elastic.co/t/failed-to-configure-email-alerts-with-gmail/180316)
**Author:** [@Leon\_Voerman](https://discuss.elastic.co/u/Leon_Voerman)\ **Replies:** 2\ **Last updated:** [May 9, 2019, 2:21pm UTC](https://discuss.elastic.co/t/failed-to-configure-email-alerts-with-gmail/180316 "2019-05-09T14:21:33Z")
Error I get: \[2019-05-09T08:45:12,470\]\[INFO \]\[o.e.p.PluginsService \] \[app\] loaded module \[aggs-matrix-stats\] \[2019-05-09T08:45:12,470\]\[INFO \]\[o.e.p.PluginsService \] \[app\] loaded module \[analysis-common\] \[2019-05… --- ## [Unknown setting 'protocol' for elasticsearch](https://discuss.elastic.co/t/unknown-setting-protocol-for-elasticsearch/174772)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 1:31pm UTC](https://discuss.elastic.co/t/unknown-setting-protocol-for-elasticsearch/174772 "2019-04-01T13:31:32Z")
I have just installed the HTTP Poller plugin, and I am now following the tutorial here. As instructed by the tutorial, I am using this config: input { http\_poller { urls =\> { "localhost" =\> "http://localhos… --- ## [Java.io.IOException: Connection timed out error](https://discuss.elastic.co/t/java-io-ioexception-connection-timed-out-error/22672)
**Author:** [@sunil\_patil](https://discuss.elastic.co/u/sunil_patil)\ **Replies:** 2\ **Last updated:** [March 15, 2015, 11:12pm UTC](https://discuss.elastic.co/t/java-io-ioexception-connection-timed-out-error/22672 "2015-03-15T23:12:20Z")
I using ElasticSearch 1.1.0 server. I have a Java Web Application that connects to ElasticSearch using Transport Client, i am also using elasticsearch 1.1.0 client. When the application starts it is able to connect… --- ## [Elastic Search Error after altering/modifying the elasticsearch.yml file](https://discuss.elastic.co/t/elastic-search-error-after-altering-modifying-the-elasticsearch-yml-file/337031)
**Author:** [@Zu\_kun](https://discuss.elastic.co/u/Zu_kun)\ **Replies:** 4\ **Last updated:** [June 28, 2023, 11:37am UTC](https://discuss.elastic.co/t/elastic-search-error-after-altering-modifying-the-elasticsearch-yml-file/337031 "2023-06-28T11:37:42Z")
Hi, I have installed Elasticsearch version 7.17.7 on ubuntu and I have noticed an issue whenever I alter or modify the elasticsearch.yml file within /etc/elasticsearch, In the elasticsearch.yml file, I want to bind the… --- ## [Want to remove some field from GROK filter](https://discuss.elastic.co/t/want-to-remove-some-field-from-grok-filter/195555)
**Author:** [@sumansaha](https://discuss.elastic.co/u/sumansaha)\ **Replies:** 4\ **Last updated:** [August 18, 2019, 11:37am UTC](https://discuss.elastic.co/t/want-to-remove-some-field-from-grok-filter/195555 "2019-08-18T11:37:25Z")
I've this log format: QID: 13636 from: 127.0.0.1 qtype: A qclass: IN qname: acep.top. rcode: NXDOMAIN rrcount: 0 policy: 'dns-name.host.sum' I've used this GROK filter : %{WORD:qid}: %{NUMBER:id} %{WORD:from}: %{IP:cl… --- ## [Primary shard is not active, timeout](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/144406)
**Author:** [@he11oworld](https://discuss.elastic.co/u/he11oworld)\ **Replies:** 4\ **Last updated:** [August 24, 2018, 5:48pm UTC](https://discuss.elastic.co/t/primary-shard-is-not-active-timeout/144406 "2018-08-24T17:48:37Z")
Getting this when I run elasticsearch in my minikube, Does anyone know a work around to this? Thanks.\< \[2018-08-14T21:00:34,338\]\[WARN \]\[o.e.x.m.MonitoringService\] \[es-master-5b4dd45bf8-vkjtj\] monitoring execution failed … --- ## [Can't shrink index using Curator](https://discuss.elastic.co/t/cant-shrink-index-using-curator/106860)
**Author:** [@Alberto\_Martinez](https://discuss.elastic.co/u/Alberto_Martinez)\ **Replies:** 4\ **Last updated:** [November 20, 2017, 4:27pm UTC](https://discuss.elastic.co/t/cant-shrink-index-using-curator/106860 "2017-11-20T16:27:58Z")
Hi there, I'm trying to use Curator to remove old data from the main (ingest) data nodes to a "cold" one. I believe that the Curator Shrink action should be able help me with this. The error I'm seeing is: 2017-11-0… --- ## [Get last indexed document id](https://discuss.elastic.co/t/get-last-indexed-document-id/12699)
**Author:** [@Ophir\_Michaeli](https://discuss.elastic.co/u/Ophir_Michaeli)\ **Replies:** 1\ **Last updated:** [July 8, 2013, 12:54pm UTC](https://discuss.elastic.co/t/get-last-indexed-document-id/12699 "2013-07-08T12:54:36Z")
Hi, I have a scenario in which elasticsearch indexing might stop and I need to continue from that point, so I need to query elasticsearch for the last indexed document id. Thanks -- You receiv… --- ## [Curator rollover with max\_size](https://discuss.elastic.co/t/curator-rollover-with-max-size/129966)
**Author:** [@vonpelz](https://discuss.elastic.co/u/vonpelz)\ **Replies:** 5\ **Last updated:** [April 29, 2018, 9:01pm UTC](https://discuss.elastic.co/t/curator-rollover-with-max-size/129966 "2018-04-29T21:01:12Z")
I'd like to use rollover to roll over indices when they get larger than 5GB. I have an index called metricbeat that is constantly being written to. How do I rollover this to, say metricbeat-1, next time metricbeat-2, et… --- ## [Allow url with embed=true and deny for other](https://discuss.elastic.co/t/allow-url-with-embed-true-and-deny-for-other/123597)
**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\ **Replies:** 5\ **Last updated:** [March 12, 2018, 7:02pm UTC](https://discuss.elastic.co/t/allow-url-with-embed-true-and-deny-for-other/123597 "2018-03-12T19:02:52Z")
I have setup website that uses embedded iframes embed=true in url by modifying kibana config file: http://kibana\_url:8005/app/kibana#/dashboard/My-Dashboard#?embed=true But nowI don't want any users to figure out that … --- ## [The timestamp is wrong](https://discuss.elastic.co/t/the-timestamp-is-wrong/117830)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 5\ **Last updated:** [February 13, 2018, 5:34pm UTC](https://discuss.elastic.co/t/the-timestamp-is-wrong/117830 "2018-02-13T17:34:03Z")
I found that the data write into ES doesn't match my real time . it's later about 10 minutes. this is my logsatsh config: input{ udp{ host =\> "120.127.160.91" port =\> 5556 codec =\> netflow } } filter{ } … --- ## [How to ensure load balancing?](https://discuss.elastic.co/t/how-to-ensure-load-balancing/281020)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 1:51pm UTC](https://discuss.elastic.co/t/how-to-ensure-load-balancing/281020 "2021-08-17T13:51:10Z")
Hello! I report metric data through "openTelemetry". Is the connection between "openTelemetry" and "APM" maintained for a long time (not disconnected)? In this case, how to do rolling upgrade and dynamic expansion of AP… --- ## [Logstash filter cipher - static\_iv instead of random iv does NOT WORK](https://discuss.elastic.co/t/logstash-filter-cipher-static-iv-instead-of-random-iv-does-not-work/126116)
**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\ **Replies:** 3\ **Last updated:** [March 29, 2018, 8:50pm UTC](https://discuss.elastic.co/t/logstash-filter-cipher-static-iv-instead-of-random-iv-does-not-work/126116 "2018-03-29T20:50:06Z")
Dear community member, I use logstash-filter-cipher to encrypt my "message" field; the confituration works pretty well the "message" is well crypt BUT the encryption is base on "iv\_random" therefore the same "string" is… --- ## [How dynamic can Kibana be? Visualizing Graphs on the fly?](https://discuss.elastic.co/t/how-dynamic-can-kibana-be-visualizing-graphs-on-the-fly/105599)
**Author:** [@Schizo](https://discuss.elastic.co/u/Schizo)\ **Replies:** 3\ **Last updated:** [October 27, 2017, 9:35pm UTC](https://discuss.elastic.co/t/how-dynamic-can-kibana-be-visualizing-graphs-on-the-fly/105599 "2017-10-27T21:35:40Z")
I've started using Kibana, liked it but i might eventually move away from it as i don't see that i can accomplish the following: I have a dataset with keywoards and numbers on it and based on a URL query or any option t… --- ## [Kibana .raw in 5.0.0 alpha3](https://discuss.elastic.co/t/kibana-raw-in-5-0-0-alpha3/53758)
**Author:** [@PilatusB4](https://discuss.elastic.co/u/PilatusB4)\ **Replies:** 3\ **Last updated:** [August 4, 2016, 7:12am UTC](https://discuss.elastic.co/t/kibana-raw-in-5-0-0-alpha3/53758 "2016-08-04T07:12:27Z")
In my mappings i used .raw fields creating the mapping is ok but it does not work in kibana but it seems it has been replaced by .keyword is it true, i mean is it the right name to use to define "not analyzed" field ? --- ## [Simple Metric Aggregation to Determine Delta Values in Kibana](https://discuss.elastic.co/t/simple-metric-aggregation-to-determine-delta-values-in-kibana/50376)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [May 23, 2016, 3:50am UTC](https://discuss.elastic.co/t/simple-metric-aggregation-to-determine-delta-values-in-kibana/50376 "2016-05-23T03:50:27Z")
I am passing network metrics to my ELK stack. Some data is presented in counters; always incrementing the bits sent, for example. However, I need to display the rate of change in these counters over a fixed sampling peri… --- ## [Painless validation returning null giving exception](https://discuss.elastic.co/t/painless-validation-returning-null-giving-exception/189861)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 2\ **Last updated:** [July 11, 2019, 1:19pm UTC](https://discuss.elastic.co/t/painless-validation-returning-null-giving-exception/189861 "2019-07-11T13:19:01Z")
Hello everyone, I'm building a painless script for a scripted field, but when I do a check for null using size() (the validation method recommended for Kibana 7.1.0), I'm getting exception error: Request to Elasticsear… [Previous page](https://discuss.elastic.co/top.md?page=866&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=868&per_page=50&period=all)