# Top

**URL:** https://discuss.elastic.co/top.md?page=884&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 885

---

## [X-Pack Reporting: Dashboard with id 'xxx' not found](https://discuss.elastic.co/t/x-pack-reporting-dashboard-with-id-xxx-not-found/102544)

<div class="topic-metadata">

**Author:** [@sidhant](https://discuss.elastic.co/u/sidhant)\
**Replies:** 5\
**Last updated:** [October 13, 2017, 9:01am UTC](https://discuss.elastic.co/t/x-pack-reporting-dashboard-with-id-xxx-not-found/102544 "2017-10-13T09:01:08Z")

</div>

Hi, We've recently moved to the ELK stack for logs processing, and are now trying to incorporate the reporting functionality. I have created visualizations and added them to dashboards. But when I try to generate a repo…

---

## [ElasticsearchException: could not initialize mac](https://discuss.elastic.co/t/elasticsearchexception-could-not-initialize-mac/94582)

<div class="topic-metadata">

**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\
**Replies:** 5\
**Last updated:** [July 31, 2017, 9:27am UTC](https://discuss.elastic.co/t/elasticsearchexception-could-not-initialize-mac/94582 "2017-07-31T09:27:09Z")

</div>

Hi, I'm trying to start elasticsearch in secure mode with x-pack. I have the following configuration in the elasticsearch.yml #---------------xpack security----------------------- xpack.ssl.key: /…

---

## [Scroll id generation](https://discuss.elastic.co/t/scroll-id-generation/55994)

<div class="topic-metadata">

**Author:** [@anon45667325](https://discuss.elastic.co/u/anon45667325)\
**Replies:** 5\
**Last updated:** [July 21, 2016, 5:26am UTC](https://discuss.elastic.co/t/scroll-id-generation/55994 "2016-07-21T05:26:19Z")

</div>

Hello, Could someone point me where I can find how the scroll id is generated from a scroll request ? I have seen that it is a base64 encoded string but I am not sure how the different values are generated. Thank you ! …

---

## [Parsing winlogbeat message field](https://discuss.elastic.co/t/parsing-winlogbeat-message-field/186879)

<div class="topic-metadata">

**Author:** [@lwilliams](https://discuss.elastic.co/u/lwilliams)\
**Replies:** 2\
**Last updated:** [June 22, 2019, 2:26pm UTC](https://discuss.elastic.co/t/parsing-winlogbeat-message-field/186879 "2019-06-22T14:26:56Z")

</div>

I am struggling a little bit with the learning curve of Elasticsearch; in the first instance I’d just like to index some specific Windows logs for our privilege management solution and graph out a few metrics. I’ve got …

---

## [Elasticsearch throw an exception unknown setting \[path.conf\] when start](https://discuss.elastic.co/t/elasticsearch-throw-an-exception-unknown-setting-path-conf-when-start/178190)

<div class="topic-metadata">

**Author:** [@Yuefeng\_Yang](https://discuss.elastic.co/u/Yuefeng_Yang)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 8:56am UTC](https://discuss.elastic.co/t/elasticsearch-throw-an-exception-unknown-setting-path-conf-when-start/178190 "2019-04-24T08:56:34Z")

</div>

Elasticsearch version : 7.0.0 start cmd : ./bin/elasticsearch -Epath.conf=config/instance1 -p /Users/yf/es/instance1.pid I want to self define config dir with -Epath.conf , but throw an exception "java.lang.IllegalAr…

---

## [How can use a field in jdbc statement of jdbc streaming](https://discuss.elastic.co/t/how-can-use-a-field-in-jdbc-statement-of-jdbc-streaming/169942)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 2\
**Last updated:** [February 27, 2019, 5:01am UTC](https://discuss.elastic.co/t/how-can-use-a-field-in-jdbc-statement-of-jdbc-streaming/169942 "2019-02-27T05:01:21Z")

</div>

hi all, I am using following logstash.conf file: input { jdbc { jdbc\_driver\_library =\> "F:\\driver\\sqljdbc\_6.0\\enu\\jre8\\sqljdbc42.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc…

---

## ["exception":{"stackTrace":"ClusterBlockException\[blocked by: \[FORBIDDEN/4/index closed\];\]\\n\\tat](https://discuss.elastic.co/t/exception-stacktrace-clusterblockexception-blocked-by-forbidden-4-index-closed-n-tat/145483)

<div class="topic-metadata">

**Author:** [@parisha.sethi](https://discuss.elastic.co/u/parisha.sethi)\
**Replies:** 2\
**Last updated:** [August 22, 2018, 10:30am UTC](https://discuss.elastic.co/t/exception-stacktrace-clusterblockexception-blocked-by-forbidden-4-index-closed-n-tat/145483 "2018-08-22T10:30:37Z")

</div>

Hi All, From past one month, at few instances diagnosis services failing at logstash we are getting a strange issue "exception":{"stackTrace":"ClusterBlockException\[blocked by: \[FORBIDDEN/4/index closed\];\]\\n\\tat org.ela…

---

## [Changing all array elements in scripted field](https://discuss.elastic.co/t/changing-all-array-elements-in-scripted-field/82246)

<div class="topic-metadata">

**Author:** [@elad\_sheinfeld](https://discuss.elastic.co/u/elad_sheinfeld)\
**Replies:** 2\
**Last updated:** [April 17, 2017, 10:33pm UTC](https://discuss.elastic.co/t/changing-all-array-elements-in-scripted-field/82246 "2017-04-17T22:33:32Z")

</div>

I'm trying to use Kibana's "index patterns" -\> "scripted fields" to manipulate the values of indexed fields. When using either of the following script I am getting all the elements copied to the new scripted index: doc\['…

---

## [Updating data which are newly added](https://discuss.elastic.co/t/updating-data-which-are-newly-added/80236)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 2\
**Last updated:** [March 28, 2017, 10:23am UTC](https://discuss.elastic.co/t/updating-data-which-are-newly-added/80236 "2017-03-28T10:23:49Z")

</div>

Hi, I am using jdbc connection for fetching data from database. I have single index. Let say Contacts. I am able to fetch data from database. But what i want is when i run logstash for second time it should only add…

---

## [Elasticsearch upgrade from 1.7 to 2.4](https://discuss.elastic.co/t/elasticsearch-upgrade-from-1-7-to-2-4/62999)

<div class="topic-metadata">

**Author:** [@Tarun\_Hasija](https://discuss.elastic.co/u/Tarun_Hasija)\
**Replies:** 2\
**Last updated:** [October 13, 2016, 9:48pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-1-7-to-2-4/62999 "2016-10-13T21:48:16Z")

</div>

Hi On upgrading elasticsearch from 1.7 to 2.4 and setting the network.host to eth4(network interface address) , We see the below Warning messages in the cluster logs . These warning messages are continuously coming u in …

---

## [Logstash test with rspec](https://discuss.elastic.co/t/logstash-test-with-rspec/41478)

<div class="topic-metadata">

**Author:** [@Sabbasth](https://discuss.elastic.co/u/Sabbasth)\
**Replies:** 2\
**Last updated:** [February 12, 2016, 11:07am UTC](https://discuss.elastic.co/t/logstash-test-with-rspec/41478 "2016-02-12T11:07:43Z")

</div>

Hi, I have issues getting fields set during filtering with rspec. I created a post on stackoverflow: Any clue on this strange behavior ?

---

## [Run Elastic Agent and Auditbeat](https://discuss.elastic.co/t/run-elastic-agent-and-auditbeat/298061)

<div class="topic-metadata">

**Author:** [@lethalMango](https://discuss.elastic.co/u/lethalMango)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 4:40pm UTC](https://discuss.elastic.co/t/run-elastic-agent-and-auditbeat/298061 "2022-02-23T16:40:08Z")

</div>

I am upgrading our environment to use Elastic Agent. Currently we use Auditbeat, Winglogbeat and Filebeat. From what I can see Winlog and Filebeat are implemented, Auditbeat (specifically around file integrity monitori…

---

## [Ingest node pipeline error](https://discuss.elastic.co/t/ingest-node-pipeline-error/255694)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 12:42pm UTC](https://discuss.elastic.co/t/ingest-node-pipeline-error/255694 "2020-11-17T12:42:46Z")

</div>

I want to set up an ingest node pipeline that will add new field based on host.hostname that is all lower cased. I made something like this But I got this error that I don't understand. 2020-11-17T13:31:41.473+0100 …

---

## [Data from mongodb using logstash via jdbc](https://discuss.elastic.co/t/data-from-mongodb-using-logstash-via-jdbc/235825)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [June 25, 2020, 9:10pm UTC](https://discuss.elastic.co/t/data-from-mongodb-using-logstash-via-jdbc/235825 "2020-06-25T21:10:32Z")

</div>

I am trying to create mongodb-elk connection, read data from mongo and insert in to elk. decided to use jdbc because I can use date and only retrive new data every few minutes here is my jdbc connection setup. it makes …

---

## [ElasticSearch fails on NFS, makes tons of empty directories in nodes](https://discuss.elastic.co/t/elasticsearch-fails-on-nfs-makes-tons-of-empty-directories-in-nodes/6775)

<div class="topic-metadata">

**Author:** [@Gregory\_Rice](https://discuss.elastic.co/u/Gregory_Rice)\
**Replies:** 4\
**Last updated:** [February 26, 2012, 9:57am UTC](https://discuss.elastic.co/t/elasticsearch-fails-on-nfs-makes-tons-of-empty-directories-in-nodes/6775 "2012-02-26T09:57:05Z")

</div>

Hey guys, I've changed data.path to an NFS share mounted on my single-node elasticsearch machine. The monolithic elasticsearch has no problem creating the elasticsearch directory, or the nodes directory, but while …

---

## [Running certgen in silent mode](https://discuss.elastic.co/t/running-certgen-in-silent-mode/70658)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 6\
**Last updated:** [January 9, 2017, 5:27am UTC](https://discuss.elastic.co/t/running-certgen-in-silent-mode/70658 "2017-01-09T05:27:33Z")

</div>

Hi, I am looking for example how to run certgen in silent mode. which flag and how to give the yml file containing the details. Regards, Sharon.

---

## [Comparing the values of two indices(index1 vs forecast\_index)](https://discuss.elastic.co/t/comparing-the-values-of-two-indices-index1-vs-forecast-index/140871)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 7\
**Last updated:** [July 25, 2018, 8:04am UTC](https://discuss.elastic.co/t/comparing-the-values-of-two-indices-index1-vs-forecast-index/140871 "2018-07-25T08:04:57Z")

</div>

Hello! I have created a forecast for a specific product. So, I want to compare the predicted values(forecast\_index) with real values(index1) and then create an alert using watcher. How can I return the data from indic…

---

## [RestHighLevelClient HTTP dependency problem](https://discuss.elastic.co/t/resthighlevelclient-http-dependency-problem/119685)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Blayney](https://discuss.elastic.co/u/Jeffrey_Blayney)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 12:00am UTC](https://discuss.elastic.co/t/resthighlevelclient-http-dependency-problem/119685 "2018-02-14T00:00:55Z")

</div>

Well, the RestHighLevelClient doesn't work either.. Here is the stack trace: Caused by: java.lang.ClassNotFoundException: org.apache.http.conn.util.PublicSuffixMatcherLoader at org.apache.catalina.loader.WebappClassLoa…

---

## [Failed to notify ClusterStateListener on Tribe node](https://discuss.elastic.co/t/failed-to-notify-clusterstatelistener-on-tribe-node/54133)

<div class="topic-metadata">

**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\
**Replies:** 1\
**Last updated:** [March 15, 2017, 12:19am UTC](https://discuss.elastic.co/t/failed-to-notify-clusterstatelistener-on-tribe-node/54133 "2017-03-15T00:19:15Z")

</div>

Hi, I'm trying to connect a tribe node as client to a cluster that has marvel license installed on it. For some reason when I start the tribe, it manages to connect as client to the cluster but I see a weird exception in…

---

## [How many old indices I should have for ElasticSearch?](https://discuss.elastic.co/t/how-many-old-indices-i-should-have-for-elasticsearch/31595)

<div class="topic-metadata">

**Author:** [@anujaggarwal](https://discuss.elastic.co/u/anujaggarwal)\
**Replies:** 7\
**Last updated:** [October 5, 2015, 4:29am UTC](https://discuss.elastic.co/t/how-many-old-indices-i-should-have-for-elasticsearch/31595 "2015-10-05T04:29:10Z")

</div>

I am using ElasticSearch with mainly default configuration and noticed recently that my old indices are eating too much space. I believe they are being created automatically because of default configuration since I have …

---

## [Curator while deleting the old snapshots, times out in middle of operation](https://discuss.elastic.co/t/curator-while-deleting-the-old-snapshots-times-out-in-middle-of-operation/124285)

<div class="topic-metadata">

**Author:** [@sujithkumarb](https://discuss.elastic.co/u/sujithkumarb)\
**Replies:** 3\
**Last updated:** [March 20, 2018, 3:44pm UTC](https://discuss.elastic.co/t/curator-while-deleting-the-old-snapshots-times-out-in-middle-of-operation/124285 "2018-03-20T15:44:14Z")

</div>

Hi, We are storing snapshots in a NETAPP S3 bucket and while deleting the old snapshots using curator, it is required to at least 10 min to delete a single snapshot on the NETAPP S3 bucket. We have a lot of older snapsh…

---

## [Matched Queries not always functioning](https://discuss.elastic.co/t/matched-queries-not-always-functioning/97241)

<div class="topic-metadata">

**Author:** [@ddorian43](https://discuss.elastic.co/u/ddorian43)\
**Replies:** 3\
**Last updated:** [August 29, 2017, 10:23am UTC](https://discuss.elastic.co/t/matched-queries-not-always-functioning/97241 "2017-08-29T10:23:21Z")

</div>

Using ES 5.2.0. When I do: {'query': {'bool': {'filter': {'bool': {'should': \[{'bool': {'filter': {'bool': {'should': \[{'term': {'title\_raw': {'value': 'stylebubble', '\_name': 'stylebubble'}}}\], 'must': ({'type': {'val…

---

## [Logstash.inputs.file failed to open](https://discuss.elastic.co/t/logstash-inputs-file-failed-to-open/95749)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 3\
**Last updated:** [August 3, 2017, 10:04pm UTC](https://discuss.elastic.co/t/logstash-inputs-file-failed-to-open/95749 "2017-08-03T22:04:52Z")

</div>

Hi, I am facing an issue where logstash is not able to read my files. I tried granted all permission to the files ( 777 ) and changing the owner from root to logstash and even to my local user which i use to login. I am…

---

## [One file come five times in output](https://discuss.elastic.co/t/one-file-come-five-times-in-output/50938)

<div class="topic-metadata">

**Author:** [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Replies:** 3\
**Last updated:** [May 26, 2016, 7:23am UTC](https://discuss.elastic.co/t/one-file-come-five-times-in-output/50938 "2016-05-26T07:23:20Z")

</div>

HI, I have 10 log files in folder. And i get output: 2016/05/25 12:53:11.061273 output.go:87: DBG output worker: publish 38 events 2016/05/25 12:53:11.267406 publish.go:104: INFO Events sent: 38 2016/05/25 12:53:11.26…

---

## [Logstash SSL configuration invalid SecretKeyFactory not available](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/logstash-ssl-configuration-invalid-secretkeyfactory-not-available/280939 "2021-08-11T11:02:46Z")

</div>

Hi folks, I am facing following error and I am out of options to fix it: \[2021-08-10T14:43:44,743\]\[ERROR\]\[logstash.inputs.beats \]\[test\_pipeline\] SSL configuration invalid {:exception=\>Java::JavaLang::IllegalArgument…

---

## [ARM docker image](https://discuss.elastic.co/t/arm-docker-image/268588)

<div class="topic-metadata">

**Author:** [@Jesper\_Veldhuizen](https://discuss.elastic.co/u/Jesper_Veldhuizen)\
**Replies:** 2\
**Last updated:** [April 1, 2021, 7:53pm UTC](https://discuss.elastic.co/t/arm-docker-image/268588 "2021-04-01T19:53:21Z")

</div>

Hi guys! Is there any news on ARM docker images for Enterprise Search? Or any suggestions on how to run Enterprise Search on a M1 mac? I managed to get the container up and running once (emulation it by 'platform: linux…

---

## [APM - TypeError: Cannot read property 'key' of undefined](https://discuss.elastic.co/t/apm-typeerror-cannot-read-property-key-of-undefined/220811)

<div class="topic-metadata">

**Author:** [@chencivalue](https://discuss.elastic.co/u/chencivalue)\
**Replies:** 2\
**Last updated:** [February 26, 2020, 2:24pm UTC](https://discuss.elastic.co/t/apm-typeerror-cannot-read-property-key-of-undefined/220811 "2020-02-26T14:24:33Z")

</div>

Hello team, We've just upgraded our stack to version 7.6.0 using the official helm charts and when we open the JVMs dashboard in APM, we get the following errors: "message":"TypeError: Cannot read property 'key' of und…

---

## [Error when combining queries using bool](https://discuss.elastic.co/t/error-when-combining-queries-using-bool/120798)

<div class="topic-metadata">

**Author:** [@tgangte](https://discuss.elastic.co/u/tgangte)\
**Replies:** 2\
**Last updated:** [February 21, 2018, 9:45am UTC](https://discuss.elastic.co/t/error-when-combining-queries-using-bool/120798 "2018-02-21T09:45:47Z")

</div>

myindex/\_search?scroll=10m { "size": 5000, "query" : "bool": { "must": \[ { "query\_string" : { "query":" name:bob " } }, { "range":{…

---

## [Filebeat configuration by giving multiple output log-stash host details](https://discuss.elastic.co/t/filebeat-configuration-by-giving-multiple-output-log-stash-host-details/62509)

<div class="topic-metadata">

**Author:** [@srikanth\_ramineni](https://discuss.elastic.co/u/srikanth_ramineni)\
**Replies:** 1\
**Last updated:** [October 7, 2016, 9:57pm UTC](https://discuss.elastic.co/t/filebeat-configuration-by-giving-multiple-output-log-stash-host-details/62509 "2016-10-07T21:57:09Z")

</div>

can we specify two host ids in file beat configuration? If we specify will data will distribute to different servers or same data will go different servers. In filebeat.yml file we have given configuration like below h…

---

## [Create Index\_Pattern through API](https://discuss.elastic.co/t/create-index-pattern-through-api/136148)

<div class="topic-metadata">

**Author:** [@RobotWarden](https://discuss.elastic.co/u/RobotWarden)\
**Replies:** 5\
**Last updated:** [June 19, 2018, 3:26pm UTC](https://discuss.elastic.co/t/create-index-pattern-through-api/136148 "2018-06-19T15:26:03Z")

</div>

I am attempting to create an index pattern through the api or by uploading a dashboard. I am using Kibana version 6.1.0 in a kubernetes cluster. After I import the dashboard I get errors on saying "Could not locate the v…

---

## [Need a clarification regarding filebeat & multiline codec](https://discuss.elastic.co/t/need-a-clarification-regarding-filebeat-multiline-codec/39065)

<div class="topic-metadata">

**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\
**Replies:** 5\
**Last updated:** [January 13, 2016, 9:48am UTC](https://discuss.elastic.co/t/need-a-clarification-regarding-filebeat-multiline-codec/39065 "2016-01-13T09:48:48Z")

</div>

Currently I am running a filebeat instance on one client. The output of filebeat is directed to logstash and a FQDN is entered for logstash hosts. This FQDN can resolve to 3 IP's where 3 instances of logstash are running…

---

## [How does document size affect ElasticSearch performance?](https://discuss.elastic.co/t/how-does-document-size-affect-elasticsearch-performance/260648)

<div class="topic-metadata">

**Author:** [@sanchita.jha](https://discuss.elastic.co/u/sanchita.jha)\
**Replies:** 4\
**Last updated:** [January 11, 2021, 7:26am UTC](https://discuss.elastic.co/t/how-does-document-size-affect-elasticsearch-performance/260648 "2021-01-11T07:26:24Z")

</div>

Planning to increase document size in elastic, from 4KB to ~100KB each. What is the performance impact with document size increase? The new fields will have to be additonality used to calculate/modify final scores of do…

---

## [AJAX request to Elasticsearch from Kibana 7.10](https://discuss.elastic.co/t/ajax-request-to-elasticsearch-from-kibana-7-10/260229)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 4:20pm UTC](https://discuss.elastic.co/t/ajax-request-to-elasticsearch-from-kibana-7-10/260229 "2021-01-06T16:20:48Z")

</div>

In previous version of Kiabana I was able to do ajax post requests to the elasticsearch instance by using the following URL structure: http://localhost:5601/cdp/elasticsearch/\_msearch and pass in my query object data. Th…

---

## [Multi-tenancy with Elastic SIEM detection rules](https://discuss.elastic.co/t/multi-tenancy-with-elastic-siem-detection-rules/244548)

<div class="topic-metadata">

**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\
**Replies:** 4\
**Last updated:** [August 13, 2020, 8:35am UTC](https://discuss.elastic.co/t/multi-tenancy-with-elastic-siem-detection-rules/244548 "2020-08-13T08:35:03Z")

</div>

Hi, Multi-tenancy can be easily gained with ML detection rules using partition field. Just partition based on the field containing customer id. Could this same approach be used with SIEM detection rules? If I have und…

---

## [Why elasticsearch creating the user and group elasticsearch](https://discuss.elastic.co/t/why-elasticsearch-creating-the-user-and-group-elasticsearch/145533)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 4\
**Last updated:** [August 26, 2018, 7:10pm UTC](https://discuss.elastic.co/t/why-elasticsearch-creating-the-user-and-group-elasticsearch/145533 "2018-08-26T19:10:59Z")

</div>

When we are installing elasticsearch in Redhat , then one user and user group is automatically creating by ES named elasticsearch . What is the use of this user elasticsearch . All ES files owners are this user elasti…

---

## [ElasticSearch Crash -- Can't seem to find anything in the log files](https://discuss.elastic.co/t/elasticsearch-crash-cant-seem-to-find-anything-in-the-log-files/11276)

<div class="topic-metadata">

**Author:** [@inZania](https://discuss.elastic.co/u/inZania)\
**Replies:** 4\
**Last updated:** [November 21, 2014, 5:22am UTC](https://discuss.elastic.co/t/elasticsearch-crash-cant-seem-to-find-anything-in-the-log-files/11276 "2014-11-21T05:22:43Z")

</div>

I've had ElasticSearch crash twice on my production servers in the last 24 hours. This has me very concerned; I can't afford to have this kind of instability. I'd really appreciate any insight anyone can provide. \[\[…

---

## [Elasticsearch 6.3 - SearchRequest timeout value in the SearchSource not honored](https://discuss.elastic.co/t/elasticsearch-6-3-searchrequest-timeout-value-in-the-searchsource-not-honored/183592)

<div class="topic-metadata">

**Author:** [@Eric\_Ding](https://discuss.elastic.co/u/Eric_Ding)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 6:34pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-searchrequest-timeout-value-in-the-searchsource-not-honored/183592 "2019-05-30T18:34:14Z")

</div>

Referring this API doc page: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/6.3/java-rest-high-search.html sourceBuilder.timeout(new TimeValue(60, TimeUnit.SECONDS)); "Set an optional timeout that co…

---

## [Sum aggregation precision](https://discuss.elastic.co/t/sum-aggregation-precision/265946)

<div class="topic-metadata">

**Author:** [@DawidS](https://discuss.elastic.co/u/DawidS)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 12:13pm UTC](https://discuss.elastic.co/t/sum-aggregation-precision/265946 "2021-03-02T12:13:33Z")

</div>

Hello, I have a problem with sum fields with 3 decimal places. The Sum of all values is zero, but elastic sum aggregations return a very small number(like -2.837623469531536E-10). I have created a test index and put th…

---

## [Logstash taking too long to run](https://discuss.elastic.co/t/logstash-taking-too-long-to-run/228536)

<div class="topic-metadata">

**Author:** [@Robert\_Ga](https://discuss.elastic.co/u/Robert_Ga)\
**Replies:** 7\
**Last updated:** [April 20, 2020, 1:24pm UTC](https://discuss.elastic.co/t/logstash-taking-too-long-to-run/228536 "2020-04-20T13:24:29Z")

</div>

Hello everyone, I started to index aprox. 1.000.000 json files into elastic seach using logstash. The logstash config contains some lowercase, renaming operations and if-else statements. I\`m trying to index the data …

---

## [Pin niofs index in memory](https://discuss.elastic.co/t/pin-niofs-index-in-memory/4066)

<div class="topic-metadata">

**Author:** [@jacorob](https://discuss.elastic.co/u/jacorob)\
**Replies:** 7\
**Last updated:** [August 19, 2016, 6:38pm UTC](https://discuss.elastic.co/t/pin-niofs-index-in-memory/4066 "2016-08-19T18:38:08Z")

</div>

I looked through the documentation for an index, but didn't see this mentioned though I easily could have missed it or not understood something. Is it possible to specify that an index should be durable (persisted t…

---

## [How to connect Google Colab to Elasticsearch](https://discuss.elastic.co/t/how-to-connect-google-colab-to-elasticsearch/315618)

<div class="topic-metadata">

**Author:** [@shivang.ahd](https://discuss.elastic.co/u/shivang.ahd)\
**Replies:** 2\
**Last updated:** [October 1, 2022, 6:21pm UTC](https://discuss.elastic.co/t/how-to-connect-google-colab-to-elasticsearch/315618 "2022-10-01T18:21:29Z")

</div>

Hi, How to connect Google Colab to Elasticsearch. I have followed few ways, but getting error for all the ways. One of the code is as below:- !pip install Elasticsearch -q # download elasticsearch !wget https://arti…

---

## [Visualize start and end times](https://discuss.elastic.co/t/visualize-start-and-end-times/143319)

<div class="topic-metadata">

**Author:** [@Arjun](https://discuss.elastic.co/u/Arjun)\
**Replies:** 2\
**Last updated:** [August 8, 2018, 12:42pm UTC](https://discuss.elastic.co/t/visualize-start-and-end-times/143319 "2018-08-08T12:42:32Z")

</div>

Hi, I have set of call records with columns - start\_time, end\_time and number. I want to create any graph with each distinct number on x-axis and y-axis displaying the start to end time . Can someone help me in achiev…

---

## [Add/Remove source in kibana dashboard](https://discuss.elastic.co/t/add-remove-source-in-kibana-dashboard/109700)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 5:49am UTC](https://discuss.elastic.co/t/add-remove-source-in-kibana-dashboard/109700 "2017-12-04T05:49:05Z")

</div>

Hi I have created kibana dashboard from elasticsearch index and the dashboard consists of fields like source IP, destination IP etc. (router events). Now i want to have a controlling features in the dashboard like add/d…

---

## [Kibana Reporting: Max attempts reached (3)](https://discuss.elastic.co/t/kibana-reporting-max-attempts-reached-3/87177)

<div class="topic-metadata">

**Author:** [@raghuchandr](https://discuss.elastic.co/u/raghuchandr)\
**Replies:** 2\
**Last updated:** [May 30, 2017, 5:33pm UTC](https://discuss.elastic.co/t/kibana-reporting-max-attempts-reached-3/87177 "2017-05-30T17:33:39Z")

</div>

Hi Guys, I have recently installed Elastic , Kibana and XPack (All Version 5.4). I have created a simple line graph in visualization. Now when i try to create a Pdf report out of it, i am getting "Max attempts reached …

---

## [How to build a JsonData object (JsonGenerator, etc.) to be used in new elasticsearch java api](https://discuss.elastic.co/t/how-to-build-a-jsondata-object-jsongenerator-etc-to-be-used-in-new-elasticsearch-java-api/310224)

<div class="topic-metadata">

**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\
**Replies:** 3\
**Last updated:** [July 21, 2022, 2:29pm UTC](https://discuss.elastic.co/t/how-to-build-a-jsondata-object-jsongenerator-etc-to-be-used-in-new-elasticsearch-java-api/310224 "2022-07-21T14:29:53Z")

</div>

Anybody here encountered RHLC XContentBuilder? How is it in migrating to new ElasticSearch java API client?... Particular implementation is when creating an index. In RHLC, we use XContentBuilder to get information fr…

---

## [Hide inaccessible menu points in Kibana left navigation bar](https://discuss.elastic.co/t/hide-inaccessible-menu-points-in-kibana-left-navigation-bar/71124)

<div class="topic-metadata">

**Author:** [@maenu](https://discuss.elastic.co/u/maenu)\
**Replies:** 3\
**Last updated:** [January 12, 2017, 10:48am UTC](https://discuss.elastic.co/t/hide-inaccessible-menu-points-in-kibana-left-navigation-bar/71124 "2017-01-12T10:48:35Z")

</div>

Hi I created an x-pack user with no cluster permissions ('cluster privileges') but only permissions for a single index (and role kibana\_user). When the user logs in in Kibana, he can see inaccessible menu points suc…

---

## [Calculating percentage of Top10 in all population with pie chart](https://discuss.elastic.co/t/calculating-percentage-of-top10-in-all-population-with-pie-chart/65626)

<div class="topic-metadata">

**Author:** [@TSimkevicius](https://discuss.elastic.co/u/TSimkevicius)\
**Replies:** 3\
**Last updated:** [November 14, 2016, 3:45pm UTC](https://discuss.elastic.co/t/calculating-percentage-of-top10-in-all-population-with-pie-chart/65626 "2016-11-14T15:45:31Z")

</div>

Hello everyone. I'm quite new with kibana, so I can not think of a way to calculate percentage of Top10 industries in all population. Because now I am getting results like these 10 industries are all population, and it …

---

## [Java API - boost field on query](https://discuss.elastic.co/t/java-api-boost-field-on-query/4156)

<div class="topic-metadata">

**Author:** [@mbro](https://discuss.elastic.co/u/mbro)\
**Replies:** 3\
**Last updated:** [March 25, 2011, 7:02pm UTC](https://discuss.elastic.co/t/java-api-boost-field-on-query/4156 "2011-03-25T19:02:36Z")

</div>

It's not clear to me how I can boost a specific field on the query using the Java API. Basically, I'd like to do a query string search across all fields and boost one of the fields so that if the search string is fou…

---

## [Send some extra fields with filebeat apache2 and system module](https://discuss.elastic.co/t/send-some-extra-fields-with-filebeat-apache2-and-system-module/151244)

<div class="topic-metadata">

**Author:** [@cleverrocks](https://discuss.elastic.co/u/cleverrocks)\
**Replies:** 4\
**Last updated:** [October 9, 2018, 12:14pm UTC](https://discuss.elastic.co/t/send-some-extra-fields-with-filebeat-apache2-and-system-module/151244 "2018-10-09T12:14:49Z")

</div>

I am using the filebeat modules apache2 and system for logging. Below is my configuration. filebeat.modules: - module: system syslog: enabled: true var.paths: \["path/syslog"\] auth: enabled: true var.…

---

## [Is that possible to use certificates signed by openssl instead of elasticsearch-certutil?](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724)

<div class="topic-metadata">

**Author:** [@v\_melnyk](https://discuss.elastic.co/u/v_melnyk)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 10:51am UTC](https://discuss.elastic.co/t/is-that-possible-to-use-certificates-signed-by-openssl-instead-of-elasticsearch-certutil/291724 "2021-12-14T10:51:06Z")

</div>

Hello, I'd like to sign the nodes' certificates by openssl (instead of Elasticsearch-certutil). Is that ever possible? When I have a PKCS12 keystore made by Elasticsearch-certutil, everything works like a charm. Here's…

[Previous page](https://discuss.elastic.co/top.md?page=883&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=885&per_page=50&period=all)
