# Top **URL:** https://discuss.elastic.co/top.md?page=903&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 904 --- ## [ElasticSearch: Service start error](https://discuss.elastic.co/t/elasticsearch-service-start-error/184370)
**Author:** [@narendral](https://discuss.elastic.co/u/narendral)\ **Replies:** 0\ **Last updated:** [June 5, 2019, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-service-start-error/184370 "2019-06-05T13:36:04Z")
I'm facing some issue while start elasticsearch service using Linux command line sudo systemctl status elasticsearch.service. Service status saying: elasticsearch\[31315\]: java.security.policy: error adding Entry: elasti… --- ## [Snapshot with s3 not working](https://discuss.elastic.co/t/snapshot-with-s3-not-working/128489)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 0\ **Last updated:** [April 18, 2018, 8:59am UTC](https://discuss.elastic.co/t/snapshot-with-s3-not-working/128489 "2018-04-18T08:59:53Z")
I am trying to set up a SNAPSHOT BACKUP through S3 on my development Elastisearch (on Centos 7.0) for which i fail to create S3 repo on the VM I have S3 been set up as a mountpoint as below and i can access the S3 from… --- ## [Master eligible node won't rejoin cluster after reboot](https://discuss.elastic.co/t/master-eligible-node-wont-rejoin-cluster-after-reboot/234192)
**Author:** [@adrian0](https://discuss.elastic.co/u/adrian0)\ **Replies:** 5\ **Last updated:** [May 25, 2020, 7:08pm UTC](https://discuss.elastic.co/t/master-eligible-node-wont-rejoin-cluster-after-reboot/234192 "2020-05-25T19:08:54Z")
We have a cluster of multiple nodes, of which are 3 dedicated master nodes. I wanted to do a normal rolling package (apt) update/upgrade and reboot, but when I restarted the first eligible master node, it wouldn't join t… --- ## [Elastic APM RUM agent error breaking page](https://discuss.elastic.co/t/elastic-apm-rum-agent-error-breaking-page/186127)
**Author:** [@saviogl](https://discuss.elastic.co/u/saviogl)\ **Replies:** 5\ **Last updated:** [June 20, 2019, 6:36am UTC](https://discuss.elastic.co/t/elastic-apm-rum-agent-error-breaking-page/186127 "2019-06-20T06:36:11Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.0.… --- ## [Transport Client Error both on 5.3.2 and 5.4.0](https://discuss.elastic.co/t/transport-client-error-both-on-5-3-2-and-5-4-0/87378)
**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\ **Replies:** 5\ **Last updated:** [May 29, 2017, 1:21am UTC](https://discuss.elastic.co/t/transport-client-error-both-on-5-3-2-and-5-4-0/87378 "2017-05-29T01:21:04Z")
I keep getting below error both on 5.3.2 and 5.4.0 when using Java Transport Client. occasionally i get valid response, trying 3 node cluster in a single machine. NoNodeAvailableException\[None of the configured nodes a… --- ## [Mapping with type keyword is still analyzed](https://discuss.elastic.co/t/mapping-with-type-keyword-is-still-analyzed/77239)
**Author:** [@birduser](https://discuss.elastic.co/u/birduser)\ **Replies:** 5\ **Last updated:** [March 3, 2017, 12:45pm UTC](https://discuss.elastic.co/t/mapping-with-type-keyword-is-still-analyzed/77239 "2017-03-03T12:45:45Z")
Elasticsearch version: 5.2.2 Plugins installed: \[none\] JVM version: java version "1.8.0\_121" Java(TM) SE Runtime Environment (build 1.8.0\_121-b13) Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed … --- ## [Custom id when inserting a document in existing index](https://discuss.elastic.co/t/custom-id-when-inserting-a-document-in-existing-index/313352)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 12:13pm UTC](https://discuss.elastic.co/t/custom-id-when-inserting-a-document-in-existing-index/313352 "2022-08-31T12:13:02Z")
I am using Dev tools in Kibana to insert a new document in an existing index. But I can't figure out if I can set the \_id field to a custom value. Is there a way to do this? This is what I'm doing now: POST user/\_doc/1… --- ## [How do you migrate Kibana from one environment to another environment?](https://discuss.elastic.co/t/how-do-you-migrate-kibana-from-one-environment-to-another-environment/216350)
**Author:** [@volcano](https://discuss.elastic.co/u/volcano)\ **Replies:** 3\ **Last updated:** [January 24, 2020, 6:59am UTC](https://discuss.elastic.co/t/how-do-you-migrate-kibana-from-one-environment-to-another-environment/216350 "2020-01-24T06:59:56Z")
How do you migrate Kibana graphs , settings , dashboards from one environment to another environment ? I have created Dashboard , Graphs etc In Kibana Dev environment. Now I want to transfer all to Stage environment. … --- ## [Show metric value in Kibana data table visualization](https://discuss.elastic.co/t/show-metric-value-in-kibana-data-table-visualization/124838)
**Author:** [@thormg](https://discuss.elastic.co/u/thormg)\ **Replies:** 3\ **Last updated:** [March 22, 2018, 11:00am UTC](https://discuss.elastic.co/t/show-metric-value-in-kibana-data-table-visualization/124838 "2018-03-22T11:00:20Z")
Hello, I want to show value in a data table no some number. Example : I have list of applications ( a1,a2...a5) as rows and different OS versions ( windows, linux..) as column. each combination will have status as pass… --- ## [Check whether document exists from Python client?](https://discuss.elastic.co/t/check-whether-document-exists-from-python-client/106544)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 0\ **Last updated:** [November 6, 2017, 2:40pm UTC](https://discuss.elastic.co/t/check-whether-document-exists-from-python-client/106544 "2017-11-06T14:40:47Z")
You're supposed to use a HEAD request to check whether a document exists, but I can't find a way of doing this from the Python client? The documentation of Elasticsearch.exists() doesn't say which it uses, but some of … --- ## [Export index template](https://discuss.elastic.co/t/export-index-template/359969)
**Author:** [@alro](https://discuss.elastic.co/u/alro)\ **Replies:** 7\ **Last updated:** [May 22, 2024, 12:55pm UTC](https://discuss.elastic.co/t/export-index-template/359969 "2024-05-22T12:55:47Z")
Hi Community i like to export a changed index template from the "Index Management". The index is a clone of an existing Index and then edited. I now need to have an export of this edited index to replicate/import it on… --- ## [Reindexing Large index](https://discuss.elastic.co/t/reindexing-large-index/278313)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [July 12, 2021, 6:40am UTC](https://discuss.elastic.co/t/reindexing-large-index/278313 "2021-07-12T06:40:48Z")
Earlier we were using ELK stack version 7.11 when we upgrade to 7.13.2 we phase mapping conflict problem although we didn't define mapping for event\_id,thread\_id,z\_elastic\_ecs.event.code GET log-wlb-2021.07.02-00000… --- ## [Unable to write to remote Elasticsearch node with ES Spark](https://discuss.elastic.co/t/unable-to-write-to-remote-elasticsearch-node-with-es-spark/48871)
**Author:** [@Olalekan\_Elesin](https://discuss.elastic.co/u/Olalekan_Elesin)\ **Replies:** 1\ **Last updated:** [May 7, 2016, 5:57am UTC](https://discuss.elastic.co/t/unable-to-write-to-remote-elasticsearch-node-with-es-spark/48871 "2016-05-07T05:57:49Z")
I tried writing to my local version es and it works fine, but when connecting to a remote host, no document is written to the index. Although the index was automatically created. What could be wrong? EsSpark.saveToEs(u… --- ## [Elasticsearch Capacity Planning Help Required](https://discuss.elastic.co/t/elasticsearch-capacity-planning-help-required/205372)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 2\ **Last updated:** [October 27, 2019, 2:30pm UTC](https://discuss.elastic.co/t/elasticsearch-capacity-planning-help-required/205372 "2019-10-27T14:30:10Z")
I am working on a elasticsearch cluster to have following requirements, 2000 TPS 10 kb payload 3 months retention period without summarising 1 year summarised data. I have tried the same with 200tps instead 2000tps in … --- ## [Where Condition in \_SQL](https://discuss.elastic.co/t/where-condition-in-sql/285427)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 4\ **Last updated:** [September 29, 2021, 9:10am UTC](https://discuss.elastic.co/t/where-condition-in-sql/285427 "2021-09-29T09:10:40Z")
Hello Team I am using Elasticsearch version 7.8.0 I am in need of \_SQL ... curl -X POST "localhost:9200/\_sql?format=txt&pretty" -H 'Content-Type: application/json' -d' { "query": "SELECT count(\*) FROM \\"my-index-000… --- ## [Embed Kibana iframe in react app and one time authenticate with aws cognito user for both (react app & kibana)](https://discuss.elastic.co/t/embed-kibana-iframe-in-react-app-and-one-time-authenticate-with-aws-cognito-user-for-both-react-app-kibana/241231)
**Author:** [@Kuppusamy\_k](https://discuss.elastic.co/u/Kuppusamy_k)\ **Replies:** 2\ **Last updated:** [July 16, 2020, 8:42am UTC](https://discuss.elastic.co/t/embed-kibana-iframe-in-react-app-and-one-time-authenticate-with-aws-cognito-user-for-both-react-app-kibana/241231 "2020-07-16T08:42:08Z")
Hi Guys, I have a requirement for my dashboard is to embed kibana iframe into my react application, for that i need to follow up below 2 conditions One time login for react app configured with aws cognito user pool. a… --- ## [Evaluate non-empty list to true in mustache](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 3:43pm UTC](https://discuss.elastic.co/t/evaluate-non-empty-list-to-true-in-mustache/216864 "2020-01-29T15:43:34Z")
Quick question on mustache: Is it possible to evaluate a conditional on a list just once? That is, instead of iterating and applying the template to each element in the array, evaluate it as non-empty and do stuff in it… --- ## [Filebeat incorrect timestamp](https://discuss.elastic.co/t/filebeat-incorrect-timestamp/189009)
**Author:** [@Marct](https://discuss.elastic.co/u/Marct)\ **Replies:** 2\ **Last updated:** [July 6, 2019, 6:00pm UTC](https://discuss.elastic.co/t/filebeat-incorrect-timestamp/189009 "2019-07-06T18:00:33Z")
Hi, Very new to Elastic and all things ELK... I have started a trail instance of Cloud ES on version 7.2.0, I am testing the panw filebeat module to ship my firewall logs to ES. I have followed what I though to be the… --- ## [How to parse data with fixed length but no separators](https://discuss.elastic.co/t/how-to-parse-data-with-fixed-length-but-no-separators/131772)
**Author:** [@tjwang](https://discuss.elastic.co/u/tjwang)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 5:08pm UTC](https://discuss.elastic.co/t/how-to-parse-data-with-fixed-length-but-no-separators/131772 "2018-05-14T17:08:08Z")
My data is a big plain text file with multiple sections with definite lengths but no separators like below "aabb111222Test ABC20080502 ccdd333444Test EFG20080503 ......" The first section has length 4, such as "aabb"… --- ## [No config or log files and folders after reinstallation](https://discuss.elastic.co/t/no-config-or-log-files-and-folders-after-reinstallation/108866)
**Author:** [@ErikvdVen](https://discuss.elastic.co/u/ErikvdVen)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 3:30pm UTC](https://discuss.elastic.co/t/no-config-or-log-files-and-folders-after-reinstallation/108866 "2017-12-05T15:30:55Z")
I tried installing elasticsearch on Ubuntu Desktop 16.04.2 lts. At first, all went fine, installation including creation of configuration and log folders (and symlinks). Except for the part I forgot about installing Java… --- ## [Geopoint type field in template is not recognized after upgrading to Elasticsearch 2.3.1](https://discuss.elastic.co/t/geopoint-type-field-in-template-is-not-recognized-after-upgrading-to-elasticsearch-2-3-1/48686)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 2\ **Last updated:** [April 29, 2016, 10:04pm UTC](https://discuss.elastic.co/t/geopoint-type-field-in-template-is-not-recognized-after-upgrading-to-elasticsearch-2-3-1/48686 "2016-04-29T22:04:40Z")
curl to submit the template curl -XPUT 'http://staging-elkstack:9200/\_template/elkstats\_template' -d ' { "order" : 2, "template": "template\_test\*", "settings": { "number\_of\_shards" : 8, "number\_of\_replicas" : 0 … --- ## [Check if vehicle is driving on water](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 3\ **Last updated:** [October 31, 2019, 7:13pm UTC](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862 "2019-10-31T19:13:25Z")
Hi, I have map with vehicles, some times i have an error with position data and i want to check if some of vehicle is not driving on water, if yes get an alert. How can i do it ? --- ## [Compare a stat with previous timeframe](https://discuss.elastic.co/t/compare-a-stat-with-previous-timeframe/118266)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 1\ **Last updated:** [February 5, 2018, 8:09pm UTC](https://discuss.elastic.co/t/compare-a-stat-with-previous-timeframe/118266 "2018-02-05T20:09:26Z")
Hello, I seek a way in Kibana to show data value based on time, and also it's increase vs. day-1. My dataset is complex, but here is a simple example: I have 2 columns: a number and a date. today's number is 50 yeste… --- ## [Collecting Sophos XG logs using the Sophos integration feature](https://discuss.elastic.co/t/collecting-sophos-xg-logs-using-the-sophos-integration-feature/339565)
**Author:** [@TIT](https://discuss.elastic.co/u/TIT)\ **Replies:** 5\ **Last updated:** [July 31, 2023, 5:10pm UTC](https://discuss.elastic.co/t/collecting-sophos-xg-logs-using-the-sophos-integration-feature/339565 "2023-07-31T17:10:00Z")
Hello, I'm currently trying to integrate Sophos XG firewall logs into my ELK stack via the Filebeat Sophos module. My setup involves sending logs directly from my Sophos XG device to Elasticsearch, bypassing Logstash. T… --- ## [How can I import json data from Mysql 5.5 to logstash 1.4.2?](https://discuss.elastic.co/t/how-can-i-import-json-data-from-mysql-5-5-to-logstash-1-4-2/74740)
**Author:** [@pythonl1](https://discuss.elastic.co/u/pythonl1)\ **Replies:** 5\ **Last updated:** [February 13, 2017, 10:20pm UTC](https://discuss.elastic.co/t/how-can-i-import-json-data-from-mysql-5-5-to-logstash-1-4-2/74740 "2017-02-13T22:20:00Z")
Hi, I am using ELK stack on an Ubuntu 14.04 server. The versions of each application is as follows: Elasticsearch: 0.90.13 Logstash: 1.4.2 Kibana: 3.0.1 I have succeeded in establishing connection between the three a… --- ## [FileBeat - Ship only Filtered log lines](https://discuss.elastic.co/t/filebeat-ship-only-filtered-log-lines/35622)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 8:05am UTC](https://discuss.elastic.co/t/filebeat-ship-only-filtered-log-lines/35622 "2016-01-29T08:05:46Z")
Hi Use Case: Real time application transactions logs metrics analysis & monitoring Environment: File Beat (1.0.0-rc2) --\> Log Stash (2.0.0)--\> Elastic Search (2.0.0)--\> Kibana (4.2.1) Description: The Filebeat capture… --- ## [Prevent removal of cookies by kibana server](https://discuss.elastic.co/t/prevent-removal-of-cookies-by-kibana-server/201018)
**Author:** [@kev12](https://discuss.elastic.co/u/kev12)\ **Replies:** 8\ **Last updated:** [October 7, 2019, 2:17pm UTC](https://discuss.elastic.co/t/prevent-removal-of-cookies-by-kibana-server/201018 "2019-10-07T14:17:23Z")
(KIBANA 5.6) I am trying to track a user sessions by utilizing cookies sent from a proxy/middleware server, but i notice that the kibana server is stripping these cookies for almost all requests except /elasticsearch/\_ms… --- ## [Creating a kibana role using Dev Tools](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 3:20pm UTC](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963 "2020-08-31T15:20:50Z")
Hi, I am using ElasticCloud v7.9.0, I use Dev Tools to do the setup on kibana like creating users, indexes,... I want to create a kibana role as well however I get an error: PUT /\_security/role/mytestrole { … --- ## [Tomcat and Elastic Search](https://discuss.elastic.co/t/tomcat-and-elastic-search/7899)
**Author:** [@Rajesh\_Jain](https://discuss.elastic.co/u/Rajesh_Jain)\ **Replies:** 3\ **Last updated:** [May 7, 2014, 7:08am UTC](https://discuss.elastic.co/t/tomcat-and-elastic-search/7899 "2014-05-07T07:08:29Z")
Can I run ES as a webapp within a tomcat container? Thanks Rajesh --- ## [Rally \_bulk error 400 "type is missing"](https://discuss.elastic.co/t/rally-bulk-error-400-type-is-missing/283073)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 6\ **Last updated:** [September 2, 2021, 12:39pm UTC](https://discuss.elastic.co/t/rally-bulk-error-400-type-is-missing/283073 "2021-09-02T12:39:31Z")
Hey there, I'm trying to import a custom track exported from an old ES version (still using 'type' field) into another ES cluster (same version). This is the error I faced: \[ERROR\] Cannot race. Error in load generato… --- ## [Metricbeat - Max CPU and Memory usage](https://discuss.elastic.co/t/metricbeat-max-cpu-and-memory-usage/242371)
**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\ **Replies:** 6\ **Last updated:** [August 3, 2020, 4:01pm UTC](https://discuss.elastic.co/t/metricbeat-max-cpu-and-memory-usage/242371 "2020-08-03T16:01:07Z")
Hi. Im using metricbeat to send CPU and Memory metrics of my servers to ES. How can i extract in a table the maximum value of mem and cpu usage and the timestamp? Regards Víctor --- ## [Logs are overwritten in the specified index under the same \_id](https://discuss.elastic.co/t/logs-are-overwritten-in-the-specified-index-under-the-same-id/182208)
**Author:** [@madhanbaskar](https://discuss.elastic.co/u/madhanbaskar)\ **Replies:** 6\ **Last updated:** [May 23, 2019, 7:38am UTC](https://discuss.elastic.co/t/logs-are-overwritten-in-the-specified-index-under-the-same-id/182208 "2019-05-23T07:38:17Z")
Hi There, I'm using Logstash - 6.5.1 and elasticsearch - 6.5.1. Below is my Filebeat.yml filebeat.prospectors: type: log paths: var/log/message fields: type: apache\_access tags: \["ApacheAccessLogs"\] type: … --- ## [Unable to configure elastic search apt repository as a remote repository in Artifactory](https://discuss.elastic.co/t/unable-to-configure-elastic-search-apt-repository-as-a-remote-repository-in-artifactory/330286)
**Author:** [@joaobaptista](https://discuss.elastic.co/u/joaobaptista)\ **Replies:** 4\ **Last updated:** [April 24, 2023, 9:00am UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-search-apt-repository-as-a-remote-repository-in-artifactory/330286 "2023-04-24T09:00:57Z")
Hi all, We are trying to configure Elasticsearch apt repository in Artifactory, but it always fails due to a error: "HTTP ERROR 404" We are using the following URL: https://artifacts.elastic.co/packages/8.x/apt The sa… --- ## [Import Kibana Dashboard](https://discuss.elastic.co/t/import-kibana-dashboard/209178)
**Author:** [@111228](https://discuss.elastic.co/u/111228)\ **Replies:** 4\ **Last updated:** [December 3, 2019, 7:14am UTC](https://discuss.elastic.co/t/import-kibana-dashboard/209178 "2019-12-03T07:14:30Z")
Good day Can Somebody tell me how I Can Import Dashboard in Kibana but on another index maybe need some changes in exporting ndjson file ? Now I create the same Dashboard every time on every new index. How can I bac… --- ## [Always green before shutdown, always red after startup](https://discuss.elastic.co/t/always-green-before-shutdown-always-red-after-startup/95635)
**Author:** [@jhaar](https://discuss.elastic.co/u/jhaar)\ **Replies:** 4\ **Last updated:** [August 8, 2017, 4:50am UTC](https://discuss.elastic.co/t/always-green-before-shutdown-always-red-after-startup/95635 "2017-08-08T04:50:19Z")
Hi there We use graylog in front of elasticsearch-2.4.6 and I’ve noticed an oddity. If “the system” is working well and I run curl http://ip.add.ress:9200/\_cluster/health I get back ‘“status”:“green”,…“unassigned\_shar… --- ## [Fingerprinting stack traces](https://discuss.elastic.co/t/fingerprinting-stack-traces/84193)
**Author:** [@Peter\_Becker](https://discuss.elastic.co/u/Peter_Becker)\ **Replies:** 4\ **Last updated:** [May 5, 2017, 5:46am UTC](https://discuss.elastic.co/t/fingerprinting-stack-traces/84193 "2017-05-05T05:46:32Z")
Hi all, could I get some advice as to how I can efficiently fingerprint stack traces using Logstash? I am aware of the fingerprint filter, but it's not quite enough. I also want to ignore everything in the message th… --- ## [What about flexible ports?](https://discuss.elastic.co/t/what-about-flexible-ports/54940)
**Author:** [@lindsayshow](https://discuss.elastic.co/u/lindsayshow)\ **Replies:** 4\ **Last updated:** [July 11, 2016, 2:01am UTC](https://discuss.elastic.co/t/what-about-flexible-ports/54940 "2016-07-11T02:01:45Z")
I have developed a new protocol in packetbeat. But in the packetbeat.yml file,I found we must set the ports\[\] item? cause，plugin interface has a function named GetPorts（）. --- ## [Problem with Ingest Attachment Processor Plugin](https://discuss.elastic.co/t/problem-with-ingest-attachment-processor-plugin/105573)
**Author:** [@tomky](https://discuss.elastic.co/u/tomky)\ **Replies:** 7\ **Last updated:** [October 27, 2017, 6:00pm UTC](https://discuss.elastic.co/t/problem-with-ingest-attachment-processor-plugin/105573 "2017-10-27T18:00:13Z")
Hi! I am new to this plugin and need your help. This is what I do: Create index: PUT localhost:9200/myindex And mappings: PUT localhost:9200/myindex/mytype/\_mapping { "messages": { "properties": { "subjec… --- ## [Filebeat Registry - Will I get duplicates if I delete](https://discuss.elastic.co/t/filebeat-registry-will-i-get-duplicates-if-i-delete/229060)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [April 23, 2020, 8:41am UTC](https://discuss.elastic.co/t/filebeat-registry-will-i-get-duplicates-if-i-delete/229060 "2020-04-23T08:41:11Z")
Hi, I've been an idiot. I added a conditional into my Logstash pipelines which, long story short, has caused me to miss around an hour of logging data over about 18 different agents. I've since fixed the issue and data… --- ## [Metricbeat index lifecycle policy (ILM) not rolling over](https://discuss.elastic.co/t/metricbeat-index-lifecycle-policy-ilm-not-rolling-over/207173)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 2:31pm UTC](https://discuss.elastic.co/t/metricbeat-index-lifecycle-policy-ilm-not-rolling-over/207173 "2019-11-21T14:31:30Z")
ECE 2.3 ES and Kibana v7.3.0 I'm having trouble getting an index lifecycle policy to rollover. I currently have an index called metricbeat-7.0.0-2019.10.21-000001 that has an alias of metricbeat-7.0.0. The index has … --- ## [How to compare ctx.payload.hits.total value to last ctx.payload.hits.total](https://discuss.elastic.co/t/how-to-compare-ctx-payload-hits-total-value-to-last-ctx-payload-hits-total/130756)
**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\ **Replies:** 3\ **Last updated:** [May 8, 2018, 7:53am UTC](https://discuss.elastic.co/t/how-to-compare-ctx-payload-hits-total-value-to-last-ctx-payload-hits-total/130756 "2018-05-08T07:53:13Z")
HI @spinscale is their any way of comparing one ctx.payload.hits.total to another ctx.payload.hits.total like current value of ctx.payload.hits.total to last value of ctx.payload.hits.total for a watcher --- ## [Visualization to only process latest documents in a group](https://discuss.elastic.co/t/visualization-to-only-process-latest-documents-in-a-group/127341)
**Author:** [@jaminvp](https://discuss.elastic.co/u/jaminvp)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 11:13pm UTC](https://discuss.elastic.co/t/visualization-to-only-process-latest-documents-in-a-group/127341 "2018-05-04T23:13:38Z")
Greetings, We're trying to create a performance dashboard for our batch processing jobs where we filter out documents that are no longer considered part of the latest run of a job. To accomplish this, we have added a f… --- ## [Unable to start Auditbeat container on Docker](https://discuss.elastic.co/t/unable-to-start-auditbeat-container-on-docker/121481)
**Author:** [@antwan](https://discuss.elastic.co/u/antwan)\ **Replies:** 3\ **Last updated:** [March 1, 2018, 8:54am UTC](https://discuss.elastic.co/t/unable-to-start-auditbeat-container-on-docker/121481 "2018-03-01T08:54:43Z")
I have tried this in both CentOS 7 and RHEL Atomic Host. Using ansible, I use the following, with the params containing valid values: docker\_container: name: auditbeat image: "{{ auditbeat\_image }}:{{ auditbeat\_version … --- ## [Http client did not trust this server's certificate, closing connection](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-closing-connection/357189)
**Author:** [@abhinavtyagi](https://discuss.elastic.co/u/abhinavtyagi)\ **Replies:** 5\ **Last updated:** [November 21, 2024, 11:24am UTC](https://discuss.elastic.co/t/http-client-did-not-trust-this-servers-certificate-closing-connection/357189 "2024-11-21T11:24:43Z")
I am trying to sync MySQL with Elasticsearch and using version 8.13.2. I followed the docs for setup. But getting below error in my Elasticsearch logs: {"@timestamp":"2024-04-11T07:52:04.039Z", "log.level": "WARN", "m… --- ## [SAML SSO - Associate the roles to the user (not groups)](https://discuss.elastic.co/t/saml-sso-associate-the-roles-to-the-user-not-groups/154810)
**Author:** [@bruno.henriques](https://discuss.elastic.co/u/bruno.henriques)\ **Replies:** 5\ **Last updated:** [October 31, 2018, 1:15pm UTC](https://discuss.elastic.co/t/saml-sso-associate-the-roles-to-the-user-not-groups/154810 "2018-10-31T13:15:01Z")
Hello, I have set up a IdP (simplesamlphp.org) with a User with the following attributes: 'email' =\> 'user1@system.com' 'User.fullname' =\> 'User 1' 'User.roles' =\> array('admin') And have setup elasticsearch's SAML s… --- ## [My use case : Joining indices?](https://discuss.elastic.co/t/my-use-case-joining-indices/308476)
**Author:** [@Vincent\_Enjalbert](https://discuss.elastic.co/u/Vincent_Enjalbert)\ **Replies:** 4\ **Last updated:** [June 30, 2022, 7:21am UTC](https://discuss.elastic.co/t/my-use-case-joining-indices/308476 "2022-06-30T07:21:45Z")
Hi there, I have an issue, and I'm considering using ES to solve it. I will try to simplify the use case at maximum (context = ecommerce) : I have currently two tables in my mysql database. One is a product table. T… --- ## [Is it possible to draw smoothed lines on Timelion line chart similar as Kibana visualization module?](https://discuss.elastic.co/t/is-it-possible-to-draw-smoothed-lines-on-timelion-line-chart-similar-as-kibana-visualization-module/193217)
**Author:** [@jabravoa](https://discuss.elastic.co/u/jabravoa)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 5:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-draw-smoothed-lines-on-timelion-line-chart-similar-as-kibana-visualization-module/193217 "2019-08-07T17:50:49Z")
Hello. In Kibana I can draw a line chart and choose the line mode from a list of options: Straight, smoothed, stepped. Is it possible to draw smoothed lines on Timelion line chart similar as Kibana visualization module? … --- ## [Filebeat tags not applied, if JSON event already has a tags field?](https://discuss.elastic.co/t/filebeat-tags-not-applied-if-json-event-already-has-a-tags-field/102974)
**Author:** [@uschtwill](https://discuss.elastic.co/u/uschtwill)\ **Replies:** 6\ **Last updated:** [October 13, 2017, 3:07pm UTC](https://discuss.elastic.co/t/filebeat-tags-not-applied-if-json-event-already-has-a-tags-field/102974 "2017-10-13T15:07:50Z")
I have spent quite some time trying to add some tags to Kibana logs yesterday - futilely. The Kibana logs are in JSON and already contain a "tags" field. The way it looks, Filebeat (maybe beats in general?) chooses not … --- ## [CPU utilization has been increased by 40% in ES 2.1.1 when compared with ES 1.6](https://discuss.elastic.co/t/cpu-utilization-has-been-increased-by-40-in-es-2-1-1-when-compared-with-es-1-6/42808)
**Author:** [@anjith.p](https://discuss.elastic.co/u/anjith.p)\ **Replies:** 6\ **Last updated:** [May 7, 2016, 3:03am UTC](https://discuss.elastic.co/t/cpu-utilization-has-been-increased-by-40-in-es-2-1-1-when-compared-with-es-1-6/42808 "2016-05-07T03:03:38Z")
We have observed that the CPU utilization in 2.1.1(while indexing is in progress) is 40% more compared with 1.6;we have made sure that the dataset is same in both the cases. A quick profiling has pointed out that ES bulk… --- ## [Kibana Shields](https://discuss.elastic.co/t/kibana-shields/25052)
**Author:** [@Hamza\_Chtioui](https://discuss.elastic.co/u/Hamza_Chtioui)\ **Replies:** 6\ **Last updated:** [July 9, 2015, 3:08pm UTC](https://discuss.elastic.co/t/kibana-shields/25052 "2015-07-09T15:08:20Z")
Hello, I'm trying to create authentication page before accessing Kibana index page, then access kibana's fonctionnalities (get, delete, update dashboards...) depending on wich role the user have. I looked on the "Kib… [Previous page](https://discuss.elastic.co/top.md?page=902&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=904&per_page=50&period=all)