# Top

**URL:** https://discuss.elastic.co/top.md?page=879&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 880

---

## [Plugin development](https://discuss.elastic.co/t/plugin-development/77303)

<div class="topic-metadata">

**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\
**Replies:** 8\
**Last updated:** [March 3, 2017, 2:57pm UTC](https://discuss.elastic.co/t/plugin-development/77303 "2017-03-03T14:57:22Z")

</div>

Hi, I am using - kibana 5.2.3 elasticsearch 5.2.2 I want to develop kibana plugin, for that I followed elastic tutorial and I am using yeoman generator. But the problem with it is that yoeman has only three kibana ve…

---

## [Exclusion List for Watcher](https://discuss.elastic.co/t/exclusion-list-for-watcher/224953)

<div class="topic-metadata">

**Author:** [@ankitsynX](https://discuss.elastic.co/u/ankitsynX)\
**Replies:** 5\
**Last updated:** [April 24, 2020, 4:10pm UTC](https://discuss.elastic.co/t/exclusion-list-for-watcher/224953 "2020-04-24T16:10:46Z")

</div>

Hi, I am trying to make an index which could be used as a static list of fields with data that will be used as exclusions in watcher alerts. At the moment, I am doing that using exclude in the watcher. But for a large…

---

## [ES Upgrade from 5.6 to 6.8](https://discuss.elastic.co/t/es-upgrade-from-5-6-to-6-8/196873)

<div class="topic-metadata">

**Author:** [@Indu\_Nallithodi](https://discuss.elastic.co/u/Indu_Nallithodi)\
**Replies:** 5\
**Last updated:** [September 2, 2019, 5:02am UTC](https://discuss.elastic.co/t/es-upgrade-from-5-6-to-6-8/196873 "2019-09-02T05:02:40Z")

</div>

After upgrade to 6.8.0 as rolling upgrade:partial update is giving Validation exception /\_update?refresh=true {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[node-02\]\[:9300\]\[indices:data/write/u…

---

## [Getting characters to be stored correctly](https://discuss.elastic.co/t/getting-characters-to-be-stored-correctly/60981)

<div class="topic-metadata">

**Author:** [@Tonni\_Hult](https://discuss.elastic.co/u/Tonni_Hult)\
**Replies:** 5\
**Last updated:** [September 22, 2016, 2:26pm UTC](https://discuss.elastic.co/t/getting-characters-to-be-stored-correctly/60981 "2016-09-22T14:26:31Z")

</div>

Hi I am having a problem to get for exampel chinese characters to be stored correctly in ElasticSearch (we use version 2.3.2). In my index I have a mapping for the field Username that is set like this "Username": {…

---

## [Logstash 2.0 plugin input-relp option ssl](https://discuss.elastic.co/t/logstash-2-0-plugin-input-relp-option-ssl/33393)

<div class="topic-metadata">

**Author:** [@alicia](https://discuss.elastic.co/u/alicia)\
**Replies:** 5\
**Last updated:** [November 4, 2015, 6:45am UTC](https://discuss.elastic.co/t/logstash-2-0-plugin-input-relp-option-ssl/33393 "2015-11-04T06:45:50Z")

</div>

in logstash.log message=\>"SSL Error", :exception=\>#, :backtrace=\>\["org/jruby/ext/openssl/SSLSocket.java:262:in accept'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-openssl-0.9.12-java/lib/jopenssl19/openssl/ssl-in…

---

## [Percentages with kibana](https://discuss.elastic.co/t/percentages-with-kibana/83417)

<div class="topic-metadata">

**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\
**Replies:** 4\
**Last updated:** [April 25, 2017, 4:55pm UTC](https://discuss.elastic.co/t/percentages-with-kibana/83417 "2017-04-25T16:55:32Z")

</div>

Hello everyone, I need help. I work on logs of calls and I extract from these logs 2 values : if they are yes or not passed and I store them in 2 different variables (DAS1 and DAS2). I have mapped it as keyword. Ho…

---

## [User-agent filter does not handle "+" as space in ua-strings from IIS](https://discuss.elastic.co/t/user-agent-filter-does-not-handle-as-space-in-ua-strings-from-iis/51263)

<div class="topic-metadata">

**Author:** [@bradley.bristowstagg](https://discuss.elastic.co/u/bradley.bristowstagg)\
**Replies:** 4\
**Last updated:** [February 28, 2017, 2:07am UTC](https://discuss.elastic.co/t/user-agent-filter-does-not-handle-as-space-in-ua-strings-from-iis/51263 "2017-02-28T02:07:10Z")

</div>

Hey all, I'm using logstash 2.3 to pull in IIS logs into our little ES cluster running on site. Things are going well (albeit slowly) and now I can start to troll through some of our data I'm seeing a LOT of results from…

---

## [Not able to convert json string to json object with filebeat TCP input](https://discuss.elastic.co/t/not-able-to-convert-json-string-to-json-object-with-filebeat-tcp-input/208179)

<div class="topic-metadata">

**Author:** [@vaseem](https://discuss.elastic.co/u/vaseem)\
**Replies:** 3\
**Last updated:** [November 26, 2019, 6:37am UTC](https://discuss.elastic.co/t/not-able-to-convert-json-string-to-json-object-with-filebeat-tcp-input/208179 "2019-11-26T06:37:13Z")

</div>

Hi All, I am sending json string(For example {"key1": "value1", "key2":"value2"}) to filebeat-\>elasticsearch-\>kibana using TCP input in filebeat. However I am getting json string under message field on kibana/elasticsea…

---

## [Error when trying to update the settings](https://discuss.elastic.co/t/error-when-trying-to-update-the-settings/14233)

<div class="topic-metadata">

**Author:** [@rchod](https://discuss.elastic.co/u/rchod)\
**Replies:** 1\
**Last updated:** [November 4, 2013, 1:01pm UTC](https://discuss.elastic.co/t/error-when-trying-to-update-the-settings/14233 "2013-11-04T13:01:51Z")

</div>

hi, i try to execute this commands via a bash script but i get these errors: #!/bin/bash curl -XPOST 'localhost:9200/my\_index/\_close' curl -XPUT 'localhost:9200/my\_index/\_settings' -d '{ "analysis": { …

---

## [Certificate signed by unknown authority](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority/346348)

<div class="topic-metadata">

**Author:** [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Replies:** 6\
**Last updated:** [November 3, 2023, 8:12pm UTC](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority/346348 "2023-11-03T20:12:00Z")

</div>

This is my filebeat.yml file but when I want to check it shows error : filebeat test output elasticsearch: https://172.10.110.29:9200... parse url... OK connection... parse host... OK dns lookup... OK addresses: …

---

## [Logstash prune blacklist\_values](https://discuss.elastic.co/t/logstash-prune-blacklist-values/293266)

<div class="topic-metadata">

**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\
**Replies:** 6\
**Last updated:** [January 4, 2022, 5:38pm UTC](https://discuss.elastic.co/t/logstash-prune-blacklist-values/293266 "2022-01-04T17:38:05Z")

</div>

So the json inputs are not always consistent. For example, one field is usually true/false, but the source occasionally tosses in a "not\_supported" just to be fun. So after some digging, I thought that I could just do: …

---

## [Sankey Flow Chart in Kibana](https://discuss.elastic.co/t/sankey-flow-chart-in-kibana/224549)

<div class="topic-metadata">

**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\
**Replies:** 6\
**Last updated:** [March 24, 2020, 1:16pm UTC](https://discuss.elastic.co/t/sankey-flow-chart-in-kibana/224549 "2020-03-24T13:16:51Z")

</div>

Hi All, Can anyone help me in understanding Sankey diagram in Kibana ? Thanks Sajal

---

## [Elasticsearch Java testing framework and plugins](https://discuss.elastic.co/t/elasticsearch-java-testing-framework-and-plugins/84703)

<div class="topic-metadata">

**Author:** [@joschi](https://discuss.elastic.co/u/joschi)\
**Replies:** 6\
**Last updated:** [May 5, 2017, 2:26pm UTC](https://discuss.elastic.co/t/elasticsearch-java-testing-framework-and-plugins/84703 "2017-05-05T14:26:13Z")

</div>

Hi, how can I run tests within the Elasticsearch Java testing framework which require a plugin (specifically lang-painless)? I want to use Elasticsearch 5.4.0 but couldn't find any artifact of Painless for that versi…

---

## [Label individual instances of logstash through cmdline params](https://discuss.elastic.co/t/label-individual-instances-of-logstash-through-cmdline-params/40513)

<div class="topic-metadata">

**Author:** [@biswajit86](https://discuss.elastic.co/u/biswajit86)\
**Replies:** 6\
**Last updated:** [February 2, 2016, 8:25pm UTC](https://discuss.elastic.co/t/label-individual-instances-of-logstash-through-cmdline-params/40513 "2016-02-02T20:25:26Z")

</div>

is there a way to label individual instances of logstash ? I run multiple logstash instances on a host and it works fine. But when I run topbeat on the host, it identifies that same proc.name for all the instances if t…

---

## [The differences between @timestamp and time in log file](https://discuss.elastic.co/t/the-differences-between-timestamp-and-time-in-log-file/226804)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 2\
**Last updated:** [April 7, 2020, 2:48pm UTC](https://discuss.elastic.co/t/the-differences-between-timestamp-and-time-in-log-file/226804 "2020-04-07T14:48:07Z")

</div>

Hi all I have a question about the @timestamp, i know that @timestamp are what generate by logstash but i dont really know how it work. For ex: i have a server that are config with time that are wrong. It set the date …

---

## [Import data from folder](https://discuss.elastic.co/t/import-data-from-folder/80453)

<div class="topic-metadata">

**Author:** [@Eiriks](https://discuss.elastic.co/u/Eiriks)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 7:10am UTC](https://discuss.elastic.co/t/import-data-from-folder/80453 "2017-03-31T07:10:00Z")

</div>

Hello. This is my first post, and first time using elasticsearch. I've been given an elasticsearch dump, a large tar.gz tar expands to a folder with ~50 subfolders that mostly come in pairs (e.g. one named video along…

---

## [SearchSourceBuilder and SearchRequestBuilder](https://discuss.elastic.co/t/searchsourcebuilder-and-searchrequestbuilder/40239)

<div class="topic-metadata">

**Author:** [@andrely](https://discuss.elastic.co/u/andrely)\
**Replies:** 0\
**Last updated:** [January 27, 2016, 1:26pm UTC](https://discuss.elastic.co/t/searchsourcebuilder-and-searchrequestbuilder/40239 "2016-01-27T13:26:31Z")

</div>

Ayup, we are using the Java API with SearchRequestBuilder for building search queries. I'm now adding JEST as an additional client. The plan is to move the query building to SearchSourceBuilder and then pass that to S…

---

## [Sum results from top\_hits aggregation](https://discuss.elastic.co/t/sum-results-from-top-hits-aggregation/126782)

<div class="topic-metadata">

**Author:** [@alfred.bez](https://discuss.elastic.co/u/alfred.bez)\
**Replies:** 0\
**Last updated:** [April 4, 2018, 4:12pm UTC](https://discuss.elastic.co/t/sum-results-from-top-hits-aggregation/126782 "2018-04-04T16:12:03Z")

</div>

Hi guys, I'm trying to sum data from an top\_hits result and I need some help. First, here's my data: {"clientId":1, "gender": "male", "dateTime":"2017-06-06 17:54:38", "phoneIsValid":1}, {"clientId":1, "gender": "male"…

---

## [Kibana index failing during startup](https://discuss.elastic.co/t/kibana-index-failing-during-startup/77594)

<div class="topic-metadata">

**Author:** [@ggp](https://discuss.elastic.co/u/ggp)\
**Replies:** 1\
**Last updated:** [March 9, 2017, 1:23am UTC](https://discuss.elastic.co/t/kibana-index-failing-during-startup/77594 "2017-03-09T01:23:52Z")

</div>

i am seeing kibana index failing during startup in my kibana.yml file i have kibana.index: "support.kibana" here is the log from kibana, {"type":"log","@timestamp":"2017-03-07T03:39:50Z","tags":\["status","plugin:ki…

---

## [Prefix Preserving IP Anonymization](https://discuss.elastic.co/t/prefix-preserving-ip-anonymization/58709)

<div class="topic-metadata">

**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\
**Replies:** 5\
**Last updated:** [August 29, 2016, 5:27am UTC](https://discuss.elastic.co/t/prefix-preserving-ip-anonymization/58709 "2016-08-29T05:27:34Z")

</div>

Is there any algorithm that preserves prefix property of IP?

---

## [ES persistent outages](https://discuss.elastic.co/t/es-persistent-outages/327395)

<div class="topic-metadata">

**Author:** [@orthecreedence](https://discuss.elastic.co/u/orthecreedence)\
**Replies:** 5\
**Last updated:** [March 22, 2023, 4:22pm UTC](https://discuss.elastic.co/t/es-persistent-outages/327395 "2023-03-22T16:22:35Z")

</div>

Hello. We recently upgraded to ES 7.17.9 (8.x is on the radar, but we have a lot of reindexing to do before then) and are having a lot of problems. We're using a fairly stock configuration on EC2. Our setup consists of …

---

## [How to limit the http output from logstash?](https://discuss.elastic.co/t/how-to-limit-the-http-output-from-logstash/130099)

<div class="topic-metadata">

**Author:** [@santoshgupta](https://discuss.elastic.co/u/santoshgupta)\
**Replies:** 5\
**Last updated:** [May 3, 2018, 11:21am UTC](https://discuss.elastic.co/t/how-to-limit-the-http-output-from-logstash/130099 "2018-05-03T11:21:47Z")

</div>

I have a pipeline which uses kafka as i/p and HTTP as o/p. I want to limit the HTTP requests that are sent from logstash o/p. Is there a way to do that?

---

## [Http://stackoverflow.com/questions/41427129/add-field-logstash-after-converting-value-to-json](https://discuss.elastic.co/t/http-stackoverflow-com-questions-41427129-add-field-logstash-after-converting-value-to-json/70426)

<div class="topic-metadata">

**Author:** [@Yatender\_Singh](https://discuss.elastic.co/u/Yatender_Singh)\
**Replies:** 5\
**Last updated:** [January 4, 2017, 10:26am UTC](https://discuss.elastic.co/t/http-stackoverflow-com-questions-41427129-add-field-logstash-after-converting-value-to-json/70426 "2017-01-04T10:26:55Z")

</div>

1 - unable to fetch values inside JSON. 2 - unable to map timestamp from data. For all general issues, please provide the following details for fast resolution: Version:5.1.1 Operating System: Mac Sierra Config File…

---

## [How to Setup custom alerting in kibana for logs](https://discuss.elastic.co/t/how-to-setup-custom-alerting-in-kibana-for-logs/233103)

<div class="topic-metadata">

**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\
**Replies:** 8\
**Last updated:** [June 17, 2020, 8:37am UTC](https://discuss.elastic.co/t/how-to-setup-custom-alerting-in-kibana-for-logs/233103 "2020-06-17T08:37:14Z")

</div>

Hey Guys, I have setup an Alert for my backup Monitoring where in message Field if it says "Network related issue" with a threshold reached it gives me an alert. The alert contains the contents severity and the messag…

---

## [Pass full original timestamp from Zeek log to Elasticsearch](https://discuss.elastic.co/t/pass-full-original-timestamp-from-zeek-log-to-elasticsearch/233944)

<div class="topic-metadata">

**Author:** [@matthewerobison](https://discuss.elastic.co/u/matthewerobison)\
**Replies:** 3\
**Last updated:** [June 3, 2020, 11:37pm UTC](https://discuss.elastic.co/t/pass-full-original-timestamp-from-zeek-log-to-elasticsearch/233944 "2020-06-03T23:37:55Z")

</div>

I have an Elastic cluster setup with a server hosting Zeek and Filebeat. We are manually running PCAP files through Zeek, Filebeat is picking up the logs, and data is being parsed/indexed by Elastic and we can see all t…

---

## [Fail to connect logstash 5.6.0 to Oracle with jdbc input](https://discuss.elastic.co/t/fail-to-connect-logstash-5-6-0-to-oracle-with-jdbc-input/101610)

<div class="topic-metadata">

**Author:** [@Yohann\_Nicolas](https://discuss.elastic.co/u/Yohann_Nicolas)\
**Replies:** 3\
**Last updated:** [September 25, 2017, 9:16am UTC](https://discuss.elastic.co/t/fail-to-connect-logstash-5-6-0-to-oracle-with-jdbc-input/101610 "2017-09-25T09:16:35Z")

</div>

Hello, I fail to connect my logstash v5.6.0 to an Oracle 12c database. I tried both ojdbc6.jar and ojdbc7.jar I checked that the jdbc\_driver\_class is Java::oracle.jdbc.driver.OracleDriver (with uppercase "J") I am run…

---

## [Self-hosting and license](https://discuss.elastic.co/t/self-hosting-and-license/320767)

<div class="topic-metadata">

**Author:** [@leo\_girault](https://discuss.elastic.co/u/leo_girault)\
**Replies:** 2\
**Last updated:** [December 8, 2022, 4:52pm UTC](https://discuss.elastic.co/t/self-hosting-and-license/320767 "2022-12-08T16:52:21Z")

</div>

Hi there, First I'm sorry if this question has already been answered but I've not been able to find this information neither on official Elasticsearch documentation nor on Discussion / Forums. So far we are using in my…

---

## [How to authenticate Logstash output to a secure Elasticsearch URL (version 5.6.5)](https://discuss.elastic.co/t/how-to-authenticate-logstash-output-to-a-secure-elasticsearch-url-version-5-6-5/122500)

<div class="topic-metadata">

**Author:** [@loganathan001](https://discuss.elastic.co/u/loganathan001)\
**Replies:** 2\
**Last updated:** [March 6, 2018, 8:39am UTC](https://discuss.elastic.co/t/how-to-authenticate-logstash-output-to-a-secure-elasticsearch-url-version-5-6-5/122500 "2018-03-06T08:39:28Z")

</div>

I am using Logstash 5.6.5. So far used elasticsearch (version 5.6.5) output with HTTP protocol and no authentication. Now Elasticsearch is being secured using basic authentication (user/password) and CA certified HTTPS U…

---

## [Masking the password and handling two client IP's in apache\_access log](https://discuss.elastic.co/t/masking-the-password-and-handling-two-client-ips-in-apache-access-log/234927)

<div class="topic-metadata">

**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\
**Replies:** 4\
**Last updated:** [May 29, 2020, 3:44pm UTC](https://discuss.elastic.co/t/masking-the-password-and-handling-two-client-ips-in-apache-access-log/234927 "2020-05-29T15:44:42Z")

</div>

Sometimes, I have standard apache logs starting with a single client IP and sometimes with two client IP's like this which my logstash config does not handle. Shall I use a 3rd pattern in Grok ? 1.2.3.4,5.6.7.8 Also,…

---

## [Best practices to introduce a syslog server between log sources and elasticsearch](https://discuss.elastic.co/t/best-practices-to-introduce-a-syslog-server-between-log-sources-and-elasticsearch/211581)

<div class="topic-metadata">

**Author:** [@jawadak](https://discuss.elastic.co/u/jawadak)\
**Replies:** 4\
**Last updated:** [December 14, 2019, 5:54am UTC](https://discuss.elastic.co/t/best-practices-to-introduce-a-syslog-server-between-log-sources-and-elasticsearch/211581 "2019-12-14T05:54:03Z")

</div>

Hi, I have a requirement to store the raw logs collected from the endpoints. So I am planning to introduce a syslog server between endpoint and elasticsearch. The general deployment would be, Log sources -\> rsyslog/sysl…

---

## [How to send an email using logstash only if your log message has particular string](https://discuss.elastic.co/t/how-to-send-an-email-using-logstash-only-if-your-log-message-has-particular-string/179197)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 4\
**Last updated:** [May 2, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-send-an-email-using-logstash-only-if-your-log-message-has-particular-string/179197 "2019-05-02T07:12:28Z")

</div>

HI , My requirement is to email the logs that match only a particular sub string in a message . By removing the if condition in the below code i am able to receive email notification which means the code is working but…

---

## [Accessing the value of a Cardinality Subaggregation in a Painless script to filter by the value](https://discuss.elastic.co/t/accessing-the-value-of-a-cardinality-subaggregation-in-a-painless-script-to-filter-by-the-value/165778)

<div class="topic-metadata">

**Author:** [@AlexDiru](https://discuss.elastic.co/u/AlexDiru)\
**Replies:** 4\
**Last updated:** [January 25, 2019, 3:09pm UTC](https://discuss.elastic.co/t/accessing-the-value-of-a-cardinality-subaggregation-in-a-painless-script-to-filter-by-the-value/165778 "2019-01-25T15:09:01Z")

</div>

Problem: I want to use a Script Query in a Filter Aggregation to create a condition based on the values of subaggregations. I have no idea how to access the values of the subaggregations in a Painless script. A few curl…

---

## [子Typeの集約結果を条件に親Typeの検索](https://discuss.elastic.co/t/type-type/40973)

<div class="topic-metadata">

**Author:** [@hirarin](https://discuss.elastic.co/u/hirarin)\
**Replies:** 4\
**Last updated:** [February 9, 2016, 7:43am UTC](https://discuss.elastic.co/t/type-type/40973 "2016-02-09T07:43:05Z")

</div>

お世話になります。 Elasticsearchの2.0がリリースされて、Pipeline Aggregationなどが使えるようになり、 Elasticsearch単体でかなりできることの幅が増えましたね！ 先日2.1がcurrentになっていたのに今日見たら既に2.2になっておりました。。 追いつくのが大変です。。 さて、掲題の件ですが、お知恵をお借りしたく投稿しました。 あるIndex内にTypeが2つあり、それぞれ親子…

---

## [Kibana JSON input](https://discuss.elastic.co/t/kibana-json-input/65952)

<div class="topic-metadata">

**Author:** [@Mohana01](https://discuss.elastic.co/u/Mohana01)\
**Replies:** 1\
**Last updated:** [November 14, 2016, 10:28am UTC](https://discuss.elastic.co/t/kibana-json-input/65952 "2016-11-14T10:28:00Z")

</div>

Hi All, I want to know the usage/options which we can give in advanced input section.i tried with many sites and the following code is working in that iput section.{size :0 } Please help me more on this.

---

## [Winlogbeat 5.3.0 sends the whole content of ForwardedEvents at startup](https://discuss.elastic.co/t/winlogbeat-5-3-0-sends-the-whole-content-of-forwardedevents-at-startup/80596)

<div class="topic-metadata">

**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\
**Replies:** 6\
**Last updated:** [April 4, 2017, 3:06pm UTC](https://discuss.elastic.co/t/winlogbeat-5-3-0-sends-the-whole-content-of-forwardedevents-at-startup/80596 "2017-04-04T15:06:42Z")

</div>

Hello, I have a problem with Winlogbeat 5.3.0: I configured it to push the content of the ForwardedEvents' log in elasticsearch, but each time the service is restarted, Winlogbeat sends the whole content of the Forwa…

---

## [Can't start service it stops (7.7.0)](https://discuss.elastic.co/t/cant-start-service-it-stops-7-7-0/233231)

<div class="topic-metadata">

**Author:** [@Burak\_Tarim](https://discuss.elastic.co/u/Burak_Tarim)\
**Replies:** 2\
**Last updated:** [May 20, 2020, 1:41am UTC](https://discuss.elastic.co/t/cant-start-service-it-stops-7-7-0/233231 "2020-05-20T01:41:43Z")

</div>

I installed it with msi. When i try to start the service it stops immediately... By the way 7.6.2 works perfectly. This is the error text on event logs; Elastic.ProcessHosts.Process.StartupException: Could not evaluat…

---

## [ElasticsearchとKibanaを監視したい](https://discuss.elastic.co/t/elasticsearch-kibana/209206)

<div class="topic-metadata">

**Author:** [@sat1100](https://discuss.elastic.co/u/sat1100)\
**Replies:** 2\
**Last updated:** [November 26, 2019, 1:16am UTC](https://discuss.elastic.co/t/elasticsearch-kibana/209206 "2019-11-26T01:16:16Z")

</div>

ElasticsearchとKibanaのプロセスを監視ツールにて監視したいと考えています。 どのプロセスが起動していて監視をすればいいでしょうか。 psコマンドで表示されたプロセスのみで問題ないでしょうか。 他にもありましたら確認方法等ご教示お願い致します。 環境： RHEL 7.5 Elasticsearch 7.4.1 Kibana 7.4.1

---

## [Kibana 4.2 - Loading Bank (accounts.json) data set gives type is missing error](https://discuss.elastic.co/t/kibana-4-2-loading-bank-accounts-json-data-set-gives-type-is-missing-error/33621)

<div class="topic-metadata">

**Author:** [@jphartley](https://discuss.elastic.co/u/jphartley)\
**Replies:** 2\
**Last updated:** [November 4, 2015, 11:47am UTC](https://discuss.elastic.co/t/kibana-4-2-loading-bank-accounts-json-data-set-gives-type-is-missing-error/33621 "2015-11-04T11:47:16Z")

</div>

I have been working my way through the Getting Started with Kibana tutorial (https://www.elastic.co/guide/en/kibana/current/getting-started.html) and ran into some issues with loading the Bank dataset into Elasticsearch. …

---

## [How to perform calculation for the unique count document in kibana?](https://discuss.elastic.co/t/how-to-perform-calculation-for-the-unique-count-document-in-kibana/185744)

<div class="topic-metadata">

**Author:** [@June](https://discuss.elastic.co/u/June)\
**Replies:** 3\
**Last updated:** [July 17, 2019, 7:39pm UTC](https://discuss.elastic.co/t/how-to-perform-calculation-for-the-unique-count-document-in-kibana/185744 "2019-07-17T19:39:34Z")

</div>

Greetings! Is there any possibility to do the calculation for the unique count document in kibana? Thanks.

---

## [Splitting multiple arrays in Logstash to create multi events](https://discuss.elastic.co/t/splitting-multiple-arrays-in-logstash-to-create-multi-events/187094)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 3\
**Last updated:** [July 1, 2019, 11:57am UTC](https://discuss.elastic.co/t/splitting-multiple-arrays-in-logstash-to-create-multi-events/187094 "2019-07-01T11:57:37Z")

</div>

Hi all, I have some array fields with different types as following: f1=\[0,1,2,3,4\] f2=\[a1,a2,a3,a4,a5\] f3=\[06/24/2019 06:02:00.000,06/24/2019 07:02:00.000,06/24/2019 08:02:00.000,06/24/2019 09:02:00.000,06/24/2019 05…

---

## [Alerting ignore a specific time period](https://discuss.elastic.co/t/alerting-ignore-a-specific-time-period/82050)

<div class="topic-metadata">

**Author:** [@Ryan\_Groten](https://discuss.elastic.co/u/Ryan_Groten)\
**Replies:** 3\
**Last updated:** [April 12, 2017, 2:40pm UTC](https://discuss.elastic.co/t/alerting-ignore-a-specific-time-period/82050 "2017-04-12T14:40:10Z")

</div>

Is it possible to tell Watcher to either not run or suppress actions during a specific time period daily? For example, I want to run the watch every 30 minutes, but don't execute the action from 6PM - 7PM daily?

---

## [Query\_string, lenient and boolean values](https://discuss.elastic.co/t/query-string-lenient-and-boolean-values/72918)

<div class="topic-metadata">

**Author:** [@pruyne](https://discuss.elastic.co/u/pruyne)\
**Replies:** 0\
**Last updated:** [January 26, 2017, 3:45pm UTC](https://discuss.elastic.co/t/query-string-lenient-and-boolean-values/72918 "2017-01-26T15:45:01Z")

</div>

I'm running on ES 5.1.2 currently, though I've seen this behavior on 2.x versions as well: When I have an index with a mapping containing a boolean datatype, it seems that when executing a query\_string or simple\_query\_…

---

## [Inconsistent paging](https://discuss.elastic.co/t/inconsistent-paging/19315)

<div class="topic-metadata">

**Author:** [@Ron\_Sher](https://discuss.elastic.co/u/Ron_Sher)\
**Replies:** 3\
**Last updated:** [August 25, 2014, 4:10pm UTC](https://discuss.elastic.co/t/inconsistent-paging/19315 "2014-08-25T16:10:43Z")

</div>

Hi, We've noticed a strange behavior in elasticsearch during paging. In one case we use a paging size of 60 and we have 63 documents. So the first page is using size 60 and offset 0. The second page is using size …

---

## [Unable to index documents into Elastic Cloud hosted managed service on GCP using Spark](https://discuss.elastic.co/t/unable-to-index-documents-into-elastic-cloud-hosted-managed-service-on-gcp-using-spark/212135)

<div class="topic-metadata">

**Author:** [@devender2601](https://discuss.elastic.co/u/devender2601)\
**Replies:** 5\
**Last updated:** [January 6, 2020, 5:47pm UTC](https://discuss.elastic.co/t/unable-to-index-documents-into-elastic-cloud-hosted-managed-service-on-gcp-using-spark/212135 "2020-01-06T17:47:33Z")

</div>

Hi, I am trying to insert documents in the index after reading documents from GCP storage. My Elasticsearch flavour on GCP is elastic cloud service hosted by elastic. for this, I am using version 7.5.0. and my Gradle d…

---

## [Grok parse exception](https://discuss.elastic.co/t/grok-parse-exception/51039)

<div class="topic-metadata">

**Author:** [@Sandhya\_Rathinapandi](https://discuss.elastic.co/u/Sandhya_Rathinapandi)\
**Replies:** 5\
**Last updated:** [May 27, 2016, 11:19am UTC](https://discuss.elastic.co/t/grok-parse-exception/51039 "2016-05-27T11:19:58Z")

</div>

Hi I am trying to convert the response time in seconds using the below ruby code in the filter segment. code =\> "event\['responsetime'\] = (event\['responsetime'\].to\_f / 1000000) This was throwing grok parse …

---

## [Default Index Pattern (logstash-yyyy.MM.dd) Failing](https://discuss.elastic.co/t/default-index-pattern-logstash-yyyy-mm-dd-failing/315195)

<div class="topic-metadata">

**Author:** [@scriner](https://discuss.elastic.co/u/scriner)\
**Replies:** 7\
**Last updated:** [September 27, 2022, 1:33pm UTC](https://discuss.elastic.co/t/default-index-pattern-logstash-yyyy-mm-dd-failing/315195 "2022-09-27T13:33:43Z")

</div>

Hi all. We are using the following pipeline config file to ship syslogs to Logstash: input { tcp { port =\> 1514 codec =\> "json" type =\> "syslog" } udp { port =\> 1514 codec =\> "json" type =\> …

---

## [Recreation of Index Patterns, Lost Visualizations](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468)

<div class="topic-metadata">

**Author:** [@chaitanya1127](https://discuss.elastic.co/u/chaitanya1127)\
**Replies:** 7\
**Last updated:** [August 25, 2020, 8:35pm UTC](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468 "2020-08-25T20:35:57Z")

</div>

Hi, I found a lot of topics on this forum on this subject but I was not able to figure out how to solve the problem. I recreated index patterns as they got deleted. I do not see any visualizations or Dashboards which w…

---

## [Cumulative sum on daily basis](https://discuss.elastic.co/t/cumulative-sum-on-daily-basis/217168)

<div class="topic-metadata">

**Author:** [@Purushoth\_Kumar](https://discuss.elastic.co/u/Purushoth_Kumar)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 4:55pm UTC](https://discuss.elastic.co/t/cumulative-sum-on-daily-basis/217168 "2020-01-31T16:55:11Z")

</div>

Hi I have a use case where I need to plot cumulative sum of status code count vs time. But what I except that the cumulative sum will reset to 0 at the day starting (00:00:00). For example, let say I have 10 count at…

---

## [Twitter plugin not working](https://discuss.elastic.co/t/twitter-plugin-not-working/179908)

<div class="topic-metadata">

**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\
**Replies:** 7\
**Last updated:** [May 20, 2019, 6:36am UTC](https://discuss.elastic.co/t/twitter-plugin-not-working/179908 "2019-05-20T06:36:53Z")

</div>

i have shipped the data from twitter using a config file but facing below issue when trying running same config file in logstash 6.7 on another system \[ERROR\]\[logstash.plugins.registry\] Tried to load a plugin's code, bu…

---

## [Can't connect to node](https://discuss.elastic.co/t/cant-connect-to-node/63673)

<div class="topic-metadata">

**Author:** [@mattj83](https://discuss.elastic.co/u/mattj83)\
**Replies:** 1\
**Last updated:** [October 23, 2016, 1:34am UTC](https://discuss.elastic.co/t/cant-connect-to-node/63673 "2016-10-23T01:34:03Z")

</div>

I have a cluster with 5 ES nodes. I am getting the following errors in these node. I am not sure what is causing this and hoping that some one can help. Thanks in advance. \[2016-10-22 22:21:35,155\]\[WARN \]\[cluster.se…

[Previous page](https://discuss.elastic.co/top.md?page=878&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=880&per_page=50&period=all)
