# Top

**URL:** https://discuss.elastic.co/top.md?page=922&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 923

---

## [Logstash fails to establish output connection with AWS service domain?](https://discuss.elastic.co/t/logstash-fails-to-establish-output-connection-with-aws-service-domain/104013)

<div class="topic-metadata">

**Author:** [@inian](https://discuss.elastic.co/u/inian)\
**Replies:** 1\
**Last updated:** [October 15, 2017, 2:03pm UTC](https://discuss.elastic.co/t/logstash-fails-to-establish-output-connection-with-aws-service-domain/104013 "2017-10-15T14:03:10Z")

</div>

I setup a Elasticsearch enabled service with AWS. I setup the conf file in logstash local as specified I ran logstash using following command logstash -f logstash-simple.conf Connections gets established for inpu…

---

## [Pruning logs - how to get maxBackupIndex to work?](https://discuss.elastic.co/t/pruning-logs-how-to-get-maxbackupindex-to-work/21301)

<div class="topic-metadata">

**Author:** [@Pauline\_Kelly](https://discuss.elastic.co/u/Pauline_Kelly)\
**Replies:** 1\
**Last updated:** [December 17, 2014, 8:06pm UTC](https://discuss.elastic.co/t/pruning-logs-how-to-get-maxbackupindex-to-work/21301 "2014-12-17T20:06:59Z")

</div>

Elasticsearch isn't pruning the logs, so I found this input to add to logging.yml. However, this isn't working for me. Is there any other workarounds- configs for this file that will work? file: type: dai…

---

## [Ship log continually](https://discuss.elastic.co/t/ship-log-continually/56138)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 5\
**Last updated:** [July 22, 2016, 5:24pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138 "2016-07-22T17:24:07Z")

</div>

Hi, I am trying to ship logs to a different server using a Logstash forwarder and a redis queue...everything is working fine. Logs are shipping. However, I want to continuously ship logs. Currently what i have is, it sh…

---

## [Switching from mvel to groovy with java methods](https://discuss.elastic.co/t/switching-from-mvel-to-groovy-with-java-methods/21182)

<div class="topic-metadata">

**Author:** [@dunaeth](https://discuss.elastic.co/u/dunaeth)\
**Replies:** 5\
**Last updated:** [December 10, 2014, 11:11am UTC](https://discuss.elastic.co/t/switching-from-mvel-to-groovy-with-java-methods/21182 "2014-12-10T11:11:18Z")

</div>

Hi, With ES 1.4, the default scripting language switched from mvel to groovy. We were using script fields in our queries like «String.format('%02d',doc.date.date.monthOfYear)», is there a way to achieve the same…

---

## [Problem in Setting Up my Development Environment - yarn kbn bootstrap failed](https://discuss.elastic.co/t/problem-in-setting-up-my-development-environment-yarn-kbn-bootstrap-failed/141901)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 6\
**Last updated:** [July 31, 2018, 11:35am UTC](https://discuss.elastic.co/t/problem-in-setting-up-my-development-environment-yarn-kbn-bootstrap-failed/141901 "2018-07-31T11:35:37Z")

</div>

Hi, I am trying to setup kibana 6.3.0 development environment and to bootstrap Kibana and install all the dependencies, I've to use this cmd yarn kbn bootstrap. Sadly, I've this message failed \[bootstrap\] failed. I i…

---

## [HDFS snapshot repository plugin for ES 2.1](https://discuss.elastic.co/t/hdfs-snapshot-repository-plugin-for-es-2-1/38087)

<div class="topic-metadata">

**Author:** [@Ramky](https://discuss.elastic.co/u/Ramky)\
**Replies:** 6\
**Last updated:** [January 4, 2016, 4:45am UTC](https://discuss.elastic.co/t/hdfs-snapshot-repository-plugin-for-es-2-1/38087 "2016-01-04T04:45:46Z")

</div>

I need to create snapshot repository on HDFS using ElasticSearch 2.1. Unable to find the plugin/command to install. Please help. Regards Ramky

---

## [Exiting: error loading template: failed to load template: couldn't load template: 400 Bad Request:](https://discuss.elastic.co/t/exiting-error-loading-template-failed-to-load-template-couldnt-load-template-400-bad-request/292423)

<div class="topic-metadata">

**Author:** [@mshah](https://discuss.elastic.co/u/mshah)\
**Replies:** 3\
**Last updated:** [January 4, 2022, 12:34am UTC](https://discuss.elastic.co/t/exiting-error-loading-template-failed-to-load-template-couldnt-load-template-400-bad-request/292423 "2022-01-04T00:34:10Z")

</div>

Hi All, I am new to Elastic stack and trying out a PoC to get approval but i am unable to get winlogBeat or File beat working. Tried multiple time and looked around online but not sure where i am missing. I get below e…

---

## [Elasticsearch taking all the memory of the system](https://discuss.elastic.co/t/elasticsearch-taking-all-the-memory-of-the-system/77399)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 3\
**Last updated:** [March 5, 2017, 3:45am UTC](https://discuss.elastic.co/t/elasticsearch-taking-all-the-memory-of-the-system/77399 "2017-03-05T03:45:44Z")

</div>

Hi, I have a dedicated data nodes with 32 gb each ( 3 nodes ) which i recently upgraded from 16 GB as the JVM was taking all the memory. But the system again is hogging up on memory. I have also set the Xms ad Xmx va…

---

## [Marvel 2.1.1](https://discuss.elastic.co/t/marvel-2-1-1/39234)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 3\
**Last updated:** [January 15, 2016, 8:22am UTC](https://discuss.elastic.co/t/marvel-2-1-1/39234 "2016-01-15T08:22:41Z")

</div>

Hi, I've updated the ES from 2.1.0 to 2.1.1 and I install Marvel 2.1.1. I writed http://localhost:9200/\_plugins/marvel-agent but ı have error. My error : {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","r…

---

## [Logstash 2.1 and kafka 0.9](https://discuss.elastic.co/t/logstash-2-1-and-kafka-0-9/35666)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [December 29, 2015, 11:38am UTC](https://discuss.elastic.co/t/logstash-2-1-and-kafka-0-9/35666 "2015-12-29T11:38:26Z")

</div>

Hi, I'm looking at using kafka as a message queue in our elk environment. I have two logstash instances running, the first takes inbound json and outputs to kafka while the second reads from kafka and outputs to elastic…

---

## [Can we have concatenation of multiple fields in "es.mapping.id"](https://discuss.elastic.co/t/can-we-have-concatenation-of-multiple-fields-in-es-mapping-id/133215)

<div class="topic-metadata">

**Author:** [@divyanshi](https://discuss.elastic.co/u/divyanshi)\
**Replies:** 0\
**Last updated:** [May 24, 2018, 7:18pm UTC](https://discuss.elastic.co/t/can-we-have-concatenation-of-multiple-fields-in-es-mapping-id/133215 "2018-05-24T19:18:54Z")

</div>

Can we have concatenation of multiple fields in "es.mapping.id"? If yes how to do that? I am writing to ES using scala spark code and want to create the id with concatenation of two existing fields.

---

## [How to disable geoip usage in 7.16.2](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-16-2/304676)

<div class="topic-metadata">

**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\
**Replies:** 1\
**Last updated:** [May 13, 2022, 1:13pm UTC](https://discuss.elastic.co/t/how-to-disable-geoip-usage-in-7-16-2/304676 "2022-05-13T13:13:56Z")

</div>

Hi, I want to disable the usage of geoip functionality because I have no usage for it. I have a three node cluster, which works fine with one voting only node and two master eligible and data nodes. The Elasticsearch ve…

---

## [No need to set \`xpack.monitoring.collection.enabled\` to true when using metricbeat-based stack monitoring?](https://discuss.elastic.co/t/no-need-to-set-xpack-monitoring-collection-enabled-to-true-when-using-metricbeat-based-stack-monitoring/258237)

<div class="topic-metadata">

**Author:** [@tetsuyasodo](https://discuss.elastic.co/u/tetsuyasodo)\
**Replies:** 4\
**Last updated:** [December 15, 2020, 2:35am UTC](https://discuss.elastic.co/t/no-need-to-set-xpack-monitoring-collection-enabled-to-true-when-using-metricbeat-based-stack-monitoring/258237 "2020-12-15T02:35:26Z")

</div>

Reading this document, I'm testing stack monitoring using metricbeat not Legacy collection method. In this stack monitoring document, it says: 1.Enable the collection of monitoring data. Set xpack.monitoring.collec…

---

## [Permission problem when starting logstash with systemd on suse](https://discuss.elastic.co/t/permission-problem-when-starting-logstash-with-systemd-on-suse/370219)

<div class="topic-metadata">

**Author:** [@STOV](https://discuss.elastic.co/u/STOV)\
**Replies:** 8\
**Last updated:** [November 18, 2024, 8:32am UTC](https://discuss.elastic.co/t/permission-problem-when-starting-logstash-with-systemd-on-suse/370219 "2024-11-18T08:32:37Z")

</div>

Hello all, I'm having trouble getting a logstash instance to work sending events to Elasticsearch. I've troubleshooted quite far and narrowed it down to a problem somehow related to permissions but let me get into the s…

---

## [Ingest pipeline date processor - text could not be parsed at index 0](https://discuss.elastic.co/t/ingest-pipeline-date-processor-text-could-not-be-parsed-at-index-0/310374)

<div class="topic-metadata">

**Author:** [@Vladi](https://discuss.elastic.co/u/Vladi)\
**Replies:** 4\
**Last updated:** [July 22, 2022, 2:17pm UTC](https://discuss.elastic.co/t/ingest-pipeline-date-processor-text-could-not-be-parsed-at-index-0/310374 "2022-07-22T14:17:09Z")

</div>

Hi, I am trying to parse the 5 digits date 2022611 with a pattern yyyyMdd. POST /\_ingest/pipeline/\_simulate { "pipeline" : { "description": "\_description", "processors": \[ { "date" : { …

---

## [Kibana multiple line scripts json input](https://discuss.elastic.co/t/kibana-multiple-line-scripts-json-input/248374)

<div class="topic-metadata">

**Author:** [@sambart19](https://discuss.elastic.co/u/sambart19)\
**Replies:** 4\
**Last updated:** [October 8, 2020, 7:21am UTC](https://discuss.elastic.co/t/kibana-multiple-line-scripts-json-input/248374 "2020-10-08T07:21:38Z")

</div>

This is a duplicate of the question here from a different user that never got an answer. I would like to be able to use multiple lines in the json input for a script but the triple quote that is listed in documentation…

---

## [How to create Read Only Kibana dashboards in AWS?](https://discuss.elastic.co/t/how-to-create-read-only-kibana-dashboards-in-aws/193832)

<div class="topic-metadata">

**Author:** [@Nagendra\_Dattatreya](https://discuss.elastic.co/u/Nagendra_Dattatreya)\
**Replies:** 4\
**Last updated:** [August 5, 2019, 5:44pm UTC](https://discuss.elastic.co/t/how-to-create-read-only-kibana-dashboards-in-aws/193832 "2019-08-05T17:44:32Z")

</div>

I am currently using Version 6.7 in AWS Cluster. I want to share readonly dashboards (users should only have access to change time filter) to users. Is there a way to accomplish this?

---

## [Logstash for solr logs](https://discuss.elastic.co/t/logstash-for-solr-logs/34798)

<div class="topic-metadata">

**Author:** [@Maddy](https://discuss.elastic.co/u/Maddy)\
**Replies:** 4\
**Last updated:** [November 18, 2015, 11:08am UTC](https://discuss.elastic.co/t/logstash-for-solr-logs/34798 "2015-11-18T11:08:02Z")

</div>

I am trying to process solr logs using logstash, but the "solr.log" file contains logs from all the collections, i want log of one particular collection. Can someone help?

---

## [Duplicate data in nodes folder](https://discuss.elastic.co/t/duplicate-data-in-nodes-folder/13928)

<div class="topic-metadata">

**Author:** [@MagmaRules](https://discuss.elastic.co/u/MagmaRules)\
**Replies:** 4\
**Last updated:** [October 20, 2013, 10:05pm UTC](https://discuss.elastic.co/t/duplicate-data-in-nodes-folder/13928 "2013-10-20T22:05:10Z")

</div>

Hello, I discovered a problem today in my cluster. Some nodes started complaining that they had no disk space. On Elasticsearch-head i can only account for 100GB of cluster data. On the filesystem on the other h…

---

## [How to send laravel logs to elk server](https://discuss.elastic.co/t/how-to-send-laravel-logs-to-elk-server/243931)

<div class="topic-metadata">

**Author:** [@mycloud2040](https://discuss.elastic.co/u/mycloud2040)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 1:57pm UTC](https://discuss.elastic.co/t/how-to-send-laravel-logs-to-elk-server/243931 "2020-08-06T13:57:56Z")

</div>

Hi , I am new to ELK, can i have any document to send laravel logs to elk. my ELK server running on ubuntu 18.04. and laraval application is running on same ubuntu18.04. Thanks

---

## [Logstash don't send data to elasticsearch](https://discuss.elastic.co/t/logstash-dont-send-data-to-elasticsearch/153200)

<div class="topic-metadata">

**Author:** [@safaa](https://discuss.elastic.co/u/safaa)\
**Replies:** 3\
**Last updated:** [October 20, 2018, 6:28pm UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elasticsearch/153200 "2018-10-20T18:28:09Z")

</div>

I parsed a simple xml file . in first time the logstash parsed the file and sent data to elasticsearch . After that i deleted the index and i tried to parse it again , but logstash do not send data since i have deleted …

---

## [Calculate result count with selectable filters](https://discuss.elastic.co/t/calculate-result-count-with-selectable-filters/98208)

<div class="topic-metadata">

**Author:** [@habtim](https://discuss.elastic.co/u/habtim)\
**Replies:** 3\
**Last updated:** [August 24, 2017, 2:43pm UTC](https://discuss.elastic.co/t/calculate-result-count-with-selectable-filters/98208 "2017-08-24T14:43:57Z")

</div>

Hi everyone, What im currently trying to get to work is the following: We have an results page with on the left some areas with selectable terms for filtering, for example: search query = test total results = 80 Cit…

---

## [Unrecoverable/unexpected badrequest while attempting post](https://discuss.elastic.co/t/unrecoverable-unexpected-badrequest-while-attempting-post/88135)

<div class="topic-metadata">

**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\
**Replies:** 3\
**Last updated:** [June 2, 2017, 9:26pm UTC](https://discuss.elastic.co/t/unrecoverable-unexpected-badrequest-while-attempting-post/88135 "2017-06-02T21:26:14Z")

</div>

I have created a sample application using NEST to index files. It simply reads files from the specified location and does bulk indexing. It converts the files into base64 string (this is our requirement) before indexing. …

---

## [Visualizing fields extracted from logs](https://discuss.elastic.co/t/visualizing-fields-extracted-from-logs/45285)

<div class="topic-metadata">

**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Replies:** 3\
**Last updated:** [March 23, 2016, 11:40pm UTC](https://discuss.elastic.co/t/visualizing-fields-extracted-from-logs/45285 "2016-03-23T23:40:57Z")

</div>

So I have logs successfully coming in from a remote server into elasticsearch through logstash agents and I am trying to visualize it on kibana. In the discover tab I see the fields that I have extracted using grok filt…

---

## [Filebeat not sending single line include\_lines until multiline is added to the configuration, then removed and service is restarted](https://discuss.elastic.co/t/filebeat-not-sending-single-line-include-lines-until-multiline-is-added-to-the-configuration-then-removed-and-service-is-restarted/153463)

<div class="topic-metadata">

**Author:** [@mattsdevop](https://discuss.elastic.co/u/mattsdevop)\
**Replies:** 2\
**Last updated:** [October 25, 2018, 7:12pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-single-line-include-lines-until-multiline-is-added-to-the-configuration-then-removed-and-service-is-restarted/153463 "2018-10-25T19:12:07Z")

</div>

I am facing what appears to be a bug, but wanted to bring it here first in order to confirm this before filing a bug report on github. Overview: I have a filebeat.yml that includes multiline and single line log type sec…

---

## [How does Elasticsearch use Lucene for aggregations?](https://discuss.elastic.co/t/how-does-elasticsearch-use-lucene-for-aggregations/101319)

<div class="topic-metadata">

**Author:** [@wilqor](https://discuss.elastic.co/u/wilqor)\
**Replies:** 2\
**Last updated:** [September 22, 2017, 6:07am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-use-lucene-for-aggregations/101319 "2017-09-22T06:07:03Z")

</div>

Hello, I could not find this information while reading either Elasticsearch Definitive Guide or Elasticsearch Reference, which led me to trying out the Community. I would like to learn how does Elasticsearch perform ag…

---

## [Bulk indexing nested fields and it's effect on queues?](https://discuss.elastic.co/t/bulk-indexing-nested-fields-and-its-effect-on-queues/83905)

<div class="topic-metadata">

**Author:** [@esniff](https://discuss.elastic.co/u/esniff)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 2:51am UTC](https://discuss.elastic.co/t/bulk-indexing-nested-fields-and-its-effect-on-queues/83905 "2017-04-28T02:51:48Z")

</div>

Question, when bulk indexing a document with nested fields, does each nested field(nested doc) take an entry in the bulk\_queue?

---

## [Why is this delete operation reported as success if the document is still there after refresh?](https://discuss.elastic.co/t/why-is-this-delete-operation-reported-as-success-if-the-document-is-still-there-after-refresh/230702)

<div class="topic-metadata">

**Author:** [@Thomas\_Thiebaud](https://discuss.elastic.co/u/Thomas_Thiebaud)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 8:32pm UTC](https://discuss.elastic.co/t/why-is-this-delete-operation-reported-as-success-if-the-document-is-still-there-after-refresh/230702 "2020-05-03T20:32:24Z")

</div>

I'm deleting a bunch a documents in elasticsearch using helpers.streaming\_bulk from the python library for ok, results in helpers.streaming\_bulk( \_es\_session.es\_client, operations, max\_retries=20, raise\_on\_error…

---

## [How can I tell if Auditbeat is grouping syscall messages?](https://discuss.elastic.co/t/how-can-i-tell-if-auditbeat-is-grouping-syscall-messages/121867)

<div class="topic-metadata">

**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\
**Replies:** 7\
**Last updated:** [March 2, 2018, 2:34pm UTC](https://discuss.elastic.co/t/how-can-i-tell-if-auditbeat-is-grouping-syscall-messages/121867 "2018-03-02T14:34:51Z")

</div>

Just a quick question to make sure I'm not missing something. Thanks to @andrewkroh I have my auditbeat working. My understanding of the auditd module in auditbeat is that it groups syscalls together so. for example, a…

---

## [Create and split some fields](https://discuss.elastic.co/t/create-and-split-some-fields/88524)

<div class="topic-metadata">

**Author:** [@Jean-Marc\_Glevarec](https://discuss.elastic.co/u/Jean-Marc_Glevarec)\
**Replies:** 7\
**Last updated:** [June 8, 2017, 7:23am UTC](https://discuss.elastic.co/t/create-and-split-some-fields/88524 "2017-06-08T07:23:45Z")

</div>

Hello, I have some lines in an EAD.stats.log file like that : DocType CNI: # DateEmission = 100% # DateNaissance = 100% # DateValidite = 100% # DepartementDelivrance = 100% # LieuNaissance = 10% # MRZ = 100% # MRZ2 =…

---

## [Assistance Multiplying 2 SQL Variables in Canvas](https://discuss.elastic.co/t/assistance-multiplying-2-sql-variables-in-canvas/289481)

<div class="topic-metadata">

**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Replies:** 5\
**Last updated:** [November 18, 2021, 6:50pm UTC](https://discuss.elastic.co/t/assistance-multiplying-2-sql-variables-in-canvas/289481 "2021-11-18T18:50:42Z")

</div>

Hello I'm trying to multiply 2 variables together in Canvas using tiny math. My Elastic version is 7.9. I started with this as an example (which works fine): filters | demodata | var\_set "val1" value=2 | var\_set "val…

---

## [Authentication issues while xpack security enabling - Elasticsearch version 7.7](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling-elasticsearch-version-7-7/233555)

<div class="topic-metadata">

**Author:** [@tryelk](https://discuss.elastic.co/u/tryelk)\
**Replies:** 6\
**Last updated:** [May 21, 2020, 11:33am UTC](https://discuss.elastic.co/t/authentication-issues-while-xpack-security-enabling-elasticsearch-version-7-7/233555 "2020-05-21T11:33:53Z")

</div>

Hello, I'm having issues setting up security for a fresh install of ES. The issue is after enabling xpack.security on the elasticsearch.yml and starting the ES service, then executing for example: " curl --insecure …

---

## [Regarding reading files from a directory to which new files are being added continuously after processing all of previous files](https://discuss.elastic.co/t/regarding-reading-files-from-a-directory-to-which-new-files-are-being-added-continuously-after-processing-all-of-previous-files/56861)

<div class="topic-metadata">

**Author:** [@yesyesdhar](https://discuss.elastic.co/u/yesyesdhar)\
**Replies:** 6\
**Last updated:** [August 2, 2016, 11:17am UTC](https://discuss.elastic.co/t/regarding-reading-files-from-a-directory-to-which-new-files-are-being-added-continuously-after-processing-all-of-previous-files/56861 "2016-08-02T11:17:02Z")

</div>

input { file { path =\> "/Users/shashi/CSVFiles/Core2/\*.txt" I know above can be used to read input from multiple files in Core2 directory of type txt. My requirement is that multiple new files are being continuously ad…

---

## [Logstash service stops after few minutes](https://discuss.elastic.co/t/logstash-service-stops-after-few-minutes/35968)

<div class="topic-metadata">

**Author:** [@ananthanaidu](https://discuss.elastic.co/u/ananthanaidu)\
**Replies:** 6\
**Last updated:** [December 1, 2015, 7:26pm UTC](https://discuss.elastic.co/t/logstash-service-stops-after-few-minutes/35968 "2015-12-01T19:26:15Z")

</div>

Hello Greetings, Can some one help us to fix as we start logstash service it stops with in few minutes and logs shows with the below error, {:timestamp=\>"2015-11-30T13:04:07.450000-0600", :message=\>"The error reporte…

---

## [Failed to delete index using curator](https://discuss.elastic.co/t/failed-to-delete-index-using-curator/18664)

<div class="topic-metadata">

**Author:** [@Nikhil\_Mulley](https://discuss.elastic.co/u/Nikhil_Mulley)\
**Replies:** 1\
**Last updated:** [December 17, 2014, 9:32pm UTC](https://discuss.elastic.co/t/failed-to-delete-index-using-curator/18664 "2014-12-17T21:32:39Z")

</div>

I saw these messages in the elasticsearch logs when the curator is failing to attempt the deletion of an old index org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process cluster …

---

## [How to disable filter bar from kibana?](https://discuss.elastic.co/t/how-to-disable-filter-bar-from-kibana/110794)

<div class="topic-metadata">

**Author:** [@Dharmraj](https://discuss.elastic.co/u/Dharmraj)\
**Replies:** 1\
**Last updated:** [December 8, 2017, 10:26pm UTC](https://discuss.elastic.co/t/how-to-disable-filter-bar-from-kibana/110794 "2017-12-08T22:26:34Z")

</div>

i am using kibana in iframe .i donot want filter bar after created chart . (Kibana 6.0.0)

---

## [FilebeatのOutputに複数の定義を設定する](https://discuss.elastic.co/t/filebeat-output/207275)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 2\
**Last updated:** [November 11, 2019, 9:01am UTC](https://discuss.elastic.co/t/filebeat-output/207275 "2019-11-11T09:01:09Z")

</div>

Filebeatを使用してElasticseachにデータを登録したいです。その際、FilebeatからLogstash経由で登録したいものと、直接Elasticseachに登録したいファイルが存在します。その場合、一つのFilebeatで実現することは可能でしょうか？ マニュアルを見ると、Filebeatにて指定できるOutputは1つのみとあります。 やはりFilebeatを2台用意し、Outputの設定をそれぞれLogstas…

---

## [Is the elastic-agent 8.3.3 debian package broken?](https://discuss.elastic.co/t/is-the-elastic-agent-8-3-3-debian-package-broken/311143)

<div class="topic-metadata">

**Author:** [@hanna](https://discuss.elastic.co/u/hanna)\
**Replies:** 3\
**Last updated:** [August 3, 2022, 8:26am UTC](https://discuss.elastic.co/t/is-the-elastic-agent-8-3-3-debian-package-broken/311143 "2022-08-03T08:26:43Z")

</div>

Hello, last friday I updated all of my elastic agents from 8.3.2 to 8.3.3 and unfortunately this broke my elastic-agent installations on Ubuntu. I used the debian package from this link https://artifacts.elastic.co/do…

---

## [SearchError: Internal Server Error in 'Discover'](https://discuss.elastic.co/t/searcherror-internal-server-error-in-discover/212479)

<div class="topic-metadata">

**Author:** [@rdeshmukh](https://discuss.elastic.co/u/rdeshmukh)\
**Replies:** 3\
**Last updated:** [January 6, 2020, 8:51pm UTC](https://discuss.elastic.co/t/searcherror-internal-server-error-in-discover/212479 "2020-01-06T20:51:49Z")

</div>

Hi, I'm facing this issue. I have indexed 200 records. In each record the body has huge amount of text data nearly 1000+ pages. I have tried increasing the heap size upto 16gb in jvm options xms16g and xmx16g. So there …

---

## [\[Easy\] Pie chart of 2 different fields](https://discuss.elastic.co/t/easy-pie-chart-of-2-different-fields/212454)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 3\
**Last updated:** [December 23, 2019, 9:35am UTC](https://discuss.elastic.co/t/easy-pie-chart-of-2-different-fields/212454 "2019-12-23T09:35:45Z")

</div>

I'm clicking around endlessly without any hope. Googling around without any success. I have 2 fields in Elasticsearch with a single value, see: …

---

## [How to print a Field value in a Watch](https://discuss.elastic.co/t/how-to-print-a-field-value-in-a-watch/131669)

<div class="topic-metadata">

**Author:** [@addanuj](https://discuss.elastic.co/u/addanuj)\
**Replies:** 3\
**Last updated:** [May 14, 2018, 9:02am UTC](https://discuss.elastic.co/t/how-to-print-a-field-value-in-a-watch/131669 "2018-05-14T09:02:11Z")

</div>

==================Index output==================================== { "took": 590, "timed\_out": false, "\_shards": { "total": 10, "successful": 9, "skipped": 0, "failed": 0 }, "hits": { "total…

---

## [Referencing time range and filter from Controller](https://discuss.elastic.co/t/referencing-time-range-and-filter-from-controller/57683)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 3\
**Last updated:** [August 31, 2016, 6:47pm UTC](https://discuss.elastic.co/t/referencing-time-range-and-filter-from-controller/57683 "2016-08-31T18:47:37Z")

</div>

Hi! Is is possible to reference the time range and filter values in dashboard panel from the controller of custom plugin ? I am planning to pass two values to the query for elasticsearch in my controller for custom …

---

## [Expunge deleted data?](https://discuss.elastic.co/t/expunge-deleted-data/43139)

<div class="topic-metadata">

**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Replies:** 5\
**Last updated:** [March 5, 2016, 9:34pm UTC](https://discuss.elastic.co/t/expunge-deleted-data/43139 "2016-03-05T21:34:09Z")

</div>

I deleted 6 indices (I used for learning) each is less than 2 MB, a month ago by: $ curl -XDELETE 'http://localhost:9200/logstash-\*' they do not show up when http://127.0.0.1:9200/\_cat/indices but the data folder st…

---

## [Bind Metricbeats to specific ip address](https://discuss.elastic.co/t/bind-metricbeats-to-specific-ip-address/166273)

<div class="topic-metadata">

**Author:** [@cdroescher](https://discuss.elastic.co/u/cdroescher)\
**Replies:** 7\
**Last updated:** [January 30, 2019, 9:07am UTC](https://discuss.elastic.co/t/bind-metricbeats-to-specific-ip-address/166273 "2019-01-30T09:07:24Z")

</div>

Hi everyone, I want to bind Metricbeats to a specific IP-address. Is there a way to do so? For a Elasticsearch node I am able to set it in /etc/elasticsearch/elasticsearch.yml but for Metricbeats I am missing a setting…

---

## [Error: Unsupported/Unknown Elasticsearch version 6.X.X](https://discuss.elastic.co/t/error-unsupported-unknown-elasticsearch-version-6-x-x/164846)

<div class="topic-metadata">

**Author:** [@spagano](https://discuss.elastic.co/u/spagano)\
**Replies:** 1\
**Last updated:** [January 22, 2019, 12:08am UTC](https://discuss.elastic.co/t/error-unsupported-unknown-elasticsearch-version-6-x-x/164846 "2019-01-22T00:08:35Z")

</div>

Hi, I saw the same problem on too many places. I have Hortonworks 2.6.4, Hadoop 2.7.3.2.6.4.0-91, Hive 1.2.1000.2.6.4.0-91, and, on the same host, I have installed Elasticsearch 6.4.3. Then, I do the following by com…

---

## [Transform free bytes into GB in ES watch for hard disk utilisation](https://discuss.elastic.co/t/transform-free-bytes-into-gb-in-es-watch-for-hard-disk-utilisation/143162)

<div class="topic-metadata">

**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\
**Replies:** 7\
**Last updated:** [August 8, 2018, 9:31am UTC](https://discuss.elastic.co/t/transform-free-bytes-into-gb-in-es-watch-for-hard-disk-utilisation/143162 "2018-08-08T09:31:31Z")

</div>

In my scenario i want to simply transform free bytes of Hard disk into GB(wrt to .monitoring-es-6\* index). Doing this operation in groovy was a bit easy. But wrt to v5.6 of ES i need to use java 8 to do so. Applieng map…

---

## [Store Data in a temporary Variable](https://discuss.elastic.co/t/store-data-in-a-temporary-variable/39056)

<div class="topic-metadata">

**Author:** [@shabinhashim](https://discuss.elastic.co/u/shabinhashim)\
**Replies:** 1\
**Last updated:** [January 13, 2016, 7:34am UTC](https://discuss.elastic.co/t/store-data-in-a-temporary-variable/39056 "2016-01-13T07:34:53Z")

</div>

HI All, I have the below filter in logstash if(\[orderstatuscode\]=="1"){ mutate{ add\_field =\> \["status","Accept"\] } } else if(\[orderstatuscode\]=="2"){ mutate{ ad…

---

## [App Search on Elastic Cloud (out of the box) seems slow: 800ms ~ 1200ms](https://discuss.elastic.co/t/app-search-on-elastic-cloud-out-of-the-box-seems-slow-800ms-1200ms/283176)

<div class="topic-metadata">

**Author:** [@markn](https://discuss.elastic.co/u/markn)\
**Replies:** 4\
**Last updated:** [October 6, 2021, 6:48am UTC](https://discuss.elastic.co/t/app-search-on-elastic-cloud-out-of-the-box-seems-slow-800ms-1200ms/283176 "2021-10-06T06:48:09Z")

</div>

Hi, We have an AppSearch deployment running on Elastic Cloud Azure Netherlands. From here we use the crawler to crawl "https://www.unive.nl". The crawler is configured to crawl by use of the sitemap with a crawl depth o…

---

## [Logstash ssl configuration for workspace search](https://discuss.elastic.co/t/logstash-ssl-configuration-for-workspace-search/329739)

<div class="topic-metadata">

**Author:** [@Gunbay\_Park](https://discuss.elastic.co/u/Gunbay_Park)\
**Replies:** 6\
**Last updated:** [April 14, 2023, 1:38am UTC](https://discuss.elastic.co/t/logstash-ssl-configuration-for-workspace-search/329739 "2023-04-14T01:38:53Z")

</div>

hi, I set kibana and workplace search ssl and loaded index to workplace search by logstash. Then error message occurred about ssl certification. elasticsearch has phrase like below, but could't find about workplace s…

---

## [Logstash only receiving DNS log while ignoring DHCP using filebeat](https://discuss.elastic.co/t/logstash-only-receiving-dns-log-while-ignoring-dhcp-using-filebeat/225422)

<div class="topic-metadata">

**Author:** [@data101](https://discuss.elastic.co/u/data101)\
**Replies:** 6\
**Last updated:** [March 27, 2020, 5:30pm UTC](https://discuss.elastic.co/t/logstash-only-receiving-dns-log-while-ignoring-dhcp-using-filebeat/225422 "2020-03-27T17:30:42Z")

</div>

Hello, I am trying to ship windows server DNS and DHCP logs to my testing ELK environment (Ubuntu). I can see Filebeat is sending the logs but for some reason logstash is only receiving dns logs, not dhcp. I am using la…

[Previous page](https://discuss.elastic.co/top.md?page=921&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=923&per_page=50&period=all)
