# Top

**URL:** https://discuss.elastic.co/top.md?page=924&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 925

---

## [Does TransportClient need to close?](https://discuss.elastic.co/t/does-transportclient-need-to-close/140124)

<div class="topic-metadata">

**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\
**Replies:** 2\
**Last updated:** [July 19, 2018, 1:00am UTC](https://discuss.elastic.co/t/does-transportclient-need-to-close/140124 "2018-07-19T01:00:52Z")

</div>

I get a client by the following code, Code from : https://www.elastic.co/guide/en/elasticsearch/client/java-api/6.2/transport-client.html // on startup TransportClient client = new PreBuiltTransportClient(Settings.EMP…

---

## [Computation expensive queries](https://discuss.elastic.co/t/computation-expensive-queries/89880)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 2\
**Last updated:** [June 19, 2017, 7:54am UTC](https://discuss.elastic.co/t/computation-expensive-queries/89880 "2017-06-19T07:54:15Z")

</div>

I need to run expensive queries on couple of days' of index, then ES server gives me below error: Data too large, data for \[reused\_arrays\] would be larger than limit of \[2566520832/2.3gb\] "bytes\_wanted": 2608572536, "…

---

## [How to enable system.process.cpu.total.norm.pct?](https://discuss.elastic.co/t/how-to-enable-system-process-cpu-total-norm-pct/122724)

<div class="topic-metadata">

**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\
**Replies:** 1\
**Last updated:** [March 8, 2018, 5:46pm UTC](https://discuss.elastic.co/t/how-to-enable-system-process-cpu-total-norm-pct/122724 "2018-03-08T17:46:44Z")

</div>

Version 6.2.2 I've looked through the docs but can't seem to find how to enable this. We'd like to use this since processes in the dashboard are showing currently at several hundred percent utilization. Update: I've go…

---

## [Is the dependent jars can be upgraded](https://discuss.elastic.co/t/is-the-dependent-jars-can-be-upgraded/268866)

<div class="topic-metadata">

**Author:** [@mohammed\_rizwan](https://discuss.elastic.co/u/mohammed_rizwan)\
**Replies:** 3\
**Last updated:** [April 1, 2021, 6:43am UTC](https://discuss.elastic.co/t/is-the-dependent-jars-can-be-upgraded/268866 "2021-04-01T06:43:54Z")

</div>

Hi team, We are using the elastic search 7.2.0 which depends on snakeyaml version 1.17. Snakeyaml 1.17 has security vulnerabilities and we plan to upgrade it to the latest version 1.28. Is upgrading the dependant snak…

---

## [Engineer Training - Download PDF](https://discuss.elastic.co/t/engineer-training-download-pdf/286337)

<div class="topic-metadata">

**Author:** [@eRDe2021](https://discuss.elastic.co/u/eRDe2021)\
**Replies:** 5\
**Last updated:** [October 12, 2021, 12:23pm UTC](https://discuss.elastic.co/t/engineer-training-download-pdf/286337 "2021-10-12T12:23:14Z")

</div>

Hello, I have finished ES Engineer Training. Where can I find link to download PDF guide? Regards.

---

## [How to show unique value of a field(database column) without fielddata](https://discuss.elastic.co/t/how-to-show-unique-value-of-a-field-database-column-without-fielddata/208374)

<div class="topic-metadata">

**Author:** [@Pinky\_Agarwal](https://discuss.elastic.co/u/Pinky_Agarwal)\
**Replies:** 5\
**Last updated:** [November 26, 2019, 2:08am UTC](https://discuss.elastic.co/t/how-to-show-unique-value-of-a-field-database-column-without-fielddata/208374 "2019-11-26T02:08:12Z")

</div>

I have requirement to get unique values of a text fields . For example i have 1 field having values : Jira Software , Kibana,Bitbucket,Jira software,Solr,Jira software . As an output I want to get the :--- Jira soft…

---

## [Import data from MySQL into ElasticSearch using Lostash to visualize in Kibana](https://discuss.elastic.co/t/import-data-from-mysql-into-elasticsearch-using-lostash-to-visualize-in-kibana/92076)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 5\
**Last updated:** [July 6, 2017, 10:36am UTC](https://discuss.elastic.co/t/import-data-from-mysql-into-elasticsearch-using-lostash-to-visualize-in-kibana/92076 "2017-07-06T10:36:56Z")

</div>

I have to create a dashboard in Kibana by loading data from MySQL Table.I just followed the following steps, 1)Kibana Installed 2)ElasticSearch Installed 3)Logstash Downloaded. What are the next steps which i have to fol…

---

## [Configure app logging in APM](https://discuss.elastic.co/t/configure-app-logging-in-apm/302019)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 8\
**Last updated:** [April 12, 2022, 9:59am UTC](https://discuss.elastic.co/t/configure-app-logging-in-apm/302019 "2022-04-12T09:59:47Z")

</div>

Kibana version: 8.0.0 Elasticsearch version: 8.0.0 APM Server version: 8.0.0 APM Agent language and version: Java & 1.29.0 Browser version: Chrome Original install method (e.g. download page, yum, deb, from source, …

---

## [Restoring snapshot on another machine?](https://discuss.elastic.co/t/restoring-snapshot-on-another-machine/226390)

<div class="topic-metadata">

**Author:** [@Arp](https://discuss.elastic.co/u/Arp)\
**Replies:** 3\
**Last updated:** [April 6, 2020, 11:04am UTC](https://discuss.elastic.co/t/restoring-snapshot-on-another-machine/226390 "2020-04-06T11:04:28Z")

</div>

Hi, I am playing around with elasticsearch. I have three VMs set up. 1 provides a common nfs folder. Every machine has access to it. 2 has a syslog server which sends logs into elasticsearch 3 is supposed to be a mac…

---

## [Parsing additional data in a windows event log](https://discuss.elastic.co/t/parsing-additional-data-in-a-windows-event-log/135157)

<div class="topic-metadata">

**Author:** [@Joshua\_Fenton](https://discuss.elastic.co/u/Joshua_Fenton)\
**Replies:** 3\
**Last updated:** [June 11, 2018, 5:43pm UTC](https://discuss.elastic.co/t/parsing-additional-data-in-a-windows-event-log/135157 "2018-06-11T17:43:06Z")

</div>

I am using a customized SQL audit specification to forward MSSQL logs to the windows security event log. These events come in with the event id of 33205. I would like to take the message field from the logs and parse t…

---

## [How to enable sorting for date fields in Kibana?](https://discuss.elastic.co/t/how-to-enable-sorting-for-date-fields-in-kibana/122146)

<div class="topic-metadata">

**Author:** [@Olexandr](https://discuss.elastic.co/u/Olexandr)\
**Replies:** 3\
**Last updated:** [March 2, 2018, 6:11pm UTC](https://discuss.elastic.co/t/how-to-enable-sorting-for-date-fields-in-kibana/122146 "2018-03-02T18:11:15Z")

</div>

I have an index formatted as follows: PUT news { "mappings": { "article": { "properties": { "pubdate": { "type": "date", "format": "yyyy-MM-dd HH:mm:ssZ" } …

---

## [Error when passing date to data filter](https://discuss.elastic.co/t/error-when-passing-date-to-data-filter/72595)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 8\
**Last updated:** [January 24, 2017, 10:12am UTC](https://discuss.elastic.co/t/error-when-passing-date-to-data-filter/72595 "2017-01-24T10:12:06Z")

</div>

Hi, I am fetching rows from db using logstash jdbc input plugin. I have time entry processingtime in my db like; 03-01-17 03:32:50.006000000 PM and in Logstash, I am using; date { match =\> \[ "processingtime", "dd…

---

## [\[Scaling elastic server\] how much load can elastic search handle?](https://discuss.elastic.co/t/scaling-elastic-server-how-much-load-can-elastic-search-handle/17259)

<div class="topic-metadata">

**Author:** [@Abrar\_Sheikh](https://discuss.elastic.co/u/Abrar_Sheikh)\
**Replies:** 3\
**Last updated:** [April 29, 2014, 2:11pm UTC](https://discuss.elastic.co/t/scaling-elastic-server-how-much-load-can-elastic-search-handle/17259 "2014-04-29T14:11:21Z")

</div>

Hi, I have a single aws EC2 large instance with 7.5 GB ram and 100 GB harddrive dual core 2.6 GHz. My elastic instance on a average has around 10,000,000 records. I use somewhat complex queries. I am calling elast…

---

## [Using updates with external versioning](https://discuss.elastic.co/t/using-updates-with-external-versioning/15354)

<div class="topic-metadata">

**Author:** [@David\_Klotz](https://discuss.elastic.co/u/David_Klotz)\
**Replies:** 3\
**Last updated:** [January 23, 2014, 9:00am UTC](https://discuss.elastic.co/t/using-updates-with-external-versioning/15354 "2014-01-23T09:00:14Z")

</div>

Hi, I am using the "external" version-type for all my documents (they come from another primary database and I want to keep the versions between them consistent). Am I right in assuming that this basically mea…

---

## [Index Recovery Initial Shards](https://discuss.elastic.co/t/index-recovery-initial-shards/5999)

<div class="topic-metadata">

**Author:** [@jjasinek](https://discuss.elastic.co/u/jjasinek)\
**Replies:** 3\
**Last updated:** [November 30, 2011, 2:55pm UTC](https://discuss.elastic.co/t/index-recovery-initial-shards/5999 "2011-11-30T14:55:16Z")

</div>

I was reading the release notes for .18 and stumbled upon a new feature described under https://github.com/elasticsearch/elasticsearch/issues/1163. Can anyone explain what that setting is for? Thanks, Jason

---

## [How to store big int value in elastic](https://discuss.elastic.co/t/how-to-store-big-int-value-in-elastic/259391)

<div class="topic-metadata">

**Author:** [@AKASH\_DUBEY1](https://discuss.elastic.co/u/AKASH_DUBEY1)\
**Replies:** 4\
**Last updated:** [December 23, 2020, 2:45am UTC](https://discuss.elastic.co/t/how-to-store-big-int-value-in-elastic/259391 "2020-12-23T02:45:24Z")

</div>

what data type should be used for storing the given value =281471798906391 .as it is out of long-range in java. and I have to use the range query on it. I tried using the keyword, double,it works but the range query does…

---

## [APM Agent High CPU Load](https://discuss.elastic.co/t/apm-agent-high-cpu-load/234655)

<div class="topic-metadata">

**Author:** [@niklaskhf](https://discuss.elastic.co/u/niklaskhf)\
**Replies:** 4\
**Last updated:** [May 28, 2020, 8:29am UTC](https://discuss.elastic.co/t/apm-agent-high-cpu-load/234655 "2020-05-28T08:29:39Z")

</div>

I am trying to instrument a SpringBoot application with the Java APM agent. The SpringBoot application runs in a container based on the arm64v8/adoptopenjdk image. The APM agent is attached with the -javaagent method in…

---

## [Logstash does not create index in es](https://discuss.elastic.co/t/logstash-does-not-create-index-in-es/103995)

<div class="topic-metadata">

**Author:** [@Jean-Paul\_Da\_Cunha](https://discuss.elastic.co/u/Jean-Paul_Da_Cunha)\
**Replies:** 4\
**Last updated:** [October 16, 2017, 2:36pm UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-in-es/103995 "2017-10-16T14:36:39Z")

</div>

Hello, Can someone help me solving this index creation issue. I'm currently using logstash and filebeat to send tomcat logs to elasticsearch. Here is my logstash configuration input { beats { port =\> 5044 …

---

## [Problem with the river-jdbc sqlite](https://discuss.elastic.co/t/problem-with-the-river-jdbc-sqlite/17159)

<div class="topic-metadata">

**Author:** [@Franck\_B](https://discuss.elastic.co/u/Franck_B)\
**Replies:** 4\
**Last updated:** [June 5, 2014, 11:09am UTC](https://discuss.elastic.co/t/problem-with-the-river-jdbc-sqlite/17159 "2014-06-05T11:09:34Z")

</div>

Hello, I use jdbc-river to feed my ES 0.92 with sqlite datasource . Everything is OK. I wanted to upgrade ES 1.1.1 and there is drama , I have this error: \[ERROR\]\[org.xbib.elasticsearch.river.jdbc.strategy.sim…

---

## [Upgrading indexes from 0.2 to 2.1.1](https://discuss.elastic.co/t/upgrading-indexes-from-0-2-to-2-1-1/38170)

<div class="topic-metadata">

**Author:** [@alexspurling](https://discuss.elastic.co/u/alexspurling)\
**Replies:** 6\
**Last updated:** [May 26, 2016, 3:09pm UTC](https://discuss.elastic.co/t/upgrading-indexes-from-0-2-to-2-1-1/38170 "2016-05-26T15:09:40Z")

</div>

Hi, I am trying to upgrade a local instance of ES from version 0.2 to 2.1.1. Yes I know this is a pretty big jump. This is what happens when you stay out of the loop for a couple of years. As far as I understand, the…

---

## [Error: Unsupported script sort type: date at castSortType](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531)

<div class="topic-metadata">

**Author:** [@balamelangi](https://discuss.elastic.co/u/balamelangi)\
**Replies:** 7\
**Last updated:** [October 6, 2020, 2:02pm UTC](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531 "2020-10-06T14:02:42Z")

</div>

@here I added my scripted field in kibana. SimpleDateFormat f = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss Z"); f.setTimeZone(TimeZone.getTimeZone("America/Chicago")); f.parse(doc\['starttime.keyword'\].value); Even Adde…

---

## [Logstash Data Enrichment with URLHAUS](https://discuss.elastic.co/t/logstash-data-enrichment-with-urlhaus/150756)

<div class="topic-metadata">

**Author:** [@martb](https://discuss.elastic.co/u/martb)\
**Replies:** 7\
**Last updated:** [October 3, 2018, 3:18pm UTC](https://discuss.elastic.co/t/logstash-data-enrichment-with-urlhaus/150756 "2018-10-03T15:18:25Z")

</div>

Hi, After watching the recent elastic threat hunting Webex which mentioned URLHAUS, so I wanted to try to add a lookup to the haus csv data source. Currently in my logstash conf Im connecting to a database which contai…

---

## [Logstash if else](https://discuss.elastic.co/t/logstash-if-else/80672)

<div class="topic-metadata">

**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\
**Replies:** 7\
**Last updated:** [March 30, 2017, 1:06pm UTC](https://discuss.elastic.co/t/logstash-if-else/80672 "2017-03-30T13:06:44Z")

</div>

I am pushing some example lines to check my if else. But Its not working as expected. Here is my configuaration input { stdin{} } filter { if "cdrs" in \[tags\] { json { source =\> "message" } csv { separat…

---

## [Metricbeat, http: server gave HTTP response to HTTPS client](https://discuss.elastic.co/t/metricbeat-http-server-gave-http-response-to-https-client/291835)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 3:33pm UTC](https://discuss.elastic.co/t/metricbeat-http-server-gave-http-response-to-https-client/291835 "2021-12-15T15:33:25Z")

</div>

Hi all, I am trying to activate basic security http in my ELK stack. My Elasticsearch version is 7.16.1. I create Elasticsearch-ssl-http.zip and add related files to config folder of Elasticsearch and kibana. Also I add…

---

## [Remove Harvester From input File(s) - Filebeat](https://discuss.elastic.co/t/remove-harvester-from-input-file-s-filebeat/42179)

<div class="topic-metadata">

**Author:** [@bhoskins7](https://discuss.elastic.co/u/bhoskins7)\
**Replies:** 2\
**Last updated:** [February 19, 2016, 6:44pm UTC](https://discuss.elastic.co/t/remove-harvester-from-input-file-s-filebeat/42179 "2016-02-19T18:44:17Z")

</div>

I would like to re-send input path data to Elasticsearch. The data was initially sent but I deleted the filebeat-\* index and would like to output the log file information to Elasticsearch again. What are the steps/…

---

## [ElasticSearch affected by CVE-2023-44487](https://discuss.elastic.co/t/elasticsearch-affected-by-cve-2023-44487/350190)

<div class="topic-metadata">

**Author:** [@rairanjit](https://discuss.elastic.co/u/rairanjit)\
**Replies:** 0\
**Last updated:** [January 2, 2024, 4:16am UTC](https://discuss.elastic.co/t/elasticsearch-affected-by-cve-2023-44487/350190 "2024-01-02T04:16:42Z")

</div>

Elasticsearch 8.11.3 show that following file in respository-azure folder is affected by CVE-2023-44487. netty-codec-http2-4.1.94.Final.jar Is there a safe way I can remove this from docker images, so that modules load…

---

## [Elasticsearch \[6.2\] doesn't find ampersand](https://discuss.elastic.co/t/elasticsearch-6-2-doesnt-find-ampersand/151098)

<div class="topic-metadata">

**Author:** [@xlbrlx](https://discuss.elastic.co/u/xlbrlx)\
**Replies:** 0\
**Last updated:** [October 4, 2018, 6:45pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-doesnt-find-ampersand/151098 "2018-10-04T18:45:58Z")

</div>

Hi there, I just upgraded my elasticsearch 1.7 to 6.2. Mapping is the same but query doesn't work anymore. Here is my old mapping: "myField": { "type": "string", "index\_options": "offsets", "term\_vector": "with\_po…

---

## [Disable SIEM and Uptime?](https://discuss.elastic.co/t/disable-siem-and-uptime/207130)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 3\
**Last updated:** [November 9, 2019, 5:56pm UTC](https://discuss.elastic.co/t/disable-siem-and-uptime/207130 "2019-11-09T17:56:33Z")

</div>

Are there settings to disable the SIEM and Uptime apps, as is possible with other Kibana apps?

---

## [MYSQL to ELASTICSEARCH multiple tables at once](https://discuss.elastic.co/t/mysql-to-elasticsearch-multiple-tables-at-once/194040)

<div class="topic-metadata">

**Author:** [@Karnish\_Master](https://discuss.elastic.co/u/Karnish_Master)\
**Replies:** 3\
**Last updated:** [August 7, 2019, 10:59am UTC](https://discuss.elastic.co/t/mysql-to-elasticsearch-multiple-tables-at-once/194040 "2019-08-07T10:59:02Z")

</div>

I am porting data from mysql to elastisearch , I am using type =\> "table\_type" in input and output to bifurcate into different tables ,data is going proper for each index however i am getting extra field named type with…

---

## [Logstash stops emitting events when using date filter](https://discuss.elastic.co/t/logstash-stops-emitting-events-when-using-date-filter/42175)

<div class="topic-metadata">

**Author:** [@landreville](https://discuss.elastic.co/u/landreville)\
**Replies:** 3\
**Last updated:** [February 19, 2016, 3:36pm UTC](https://discuss.elastic.co/t/logstash-stops-emitting-events-when-using-date-filter/42175 "2016-02-19T15:36:00Z")

</div>

As soon as I turn on a date filter logstash stops emitting events or elastic search stops accepting them. I'm not sure which, but they do not appear in Kibana. I'm trying to use a timestamp within a log line to use as …

---

## [Elasticsearch for geo-aware Wikipedia / OSM place search?](https://discuss.elastic.co/t/elasticsearch-for-geo-aware-wikipedia-osm-place-search/27499)

<div class="topic-metadata">

**Author:** [@zsero](https://discuss.elastic.co/u/zsero)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-for-geo-aware-wikipedia-osm-place-search/27499 "2015-08-18T11:48:28Z")

</div>

I would like to implement a search-backend which returns a location-aware search results of all Wikipedia / OSM place names, while recognising place names in all languages. Thus, if you search for "Vienna" or "Wien" fr…

---

## [Kibana Tables colors](https://discuss.elastic.co/t/kibana-tables-colors/297356)

<div class="topic-metadata">

**Author:** [@aaron1](https://discuss.elastic.co/u/aaron1)\
**Replies:** 1\
**Last updated:** [February 17, 2022, 5:04pm UTC](https://discuss.elastic.co/t/kibana-tables-colors/297356 "2022-02-17T17:04:05Z")

</div>

I want to create a table that has severity levels of high medium and low and I want the words High medium and low to be in different colors. Is that possible in Kibana?

---

## [Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set and re-generate this report. Error: Unsupported state or unable to authenticate data](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713)

<div class="topic-metadata">

**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713 "2021-05-11T16:02:59Z")

</div>

Hi, I'm using elastic open source version 7.10.1 in my elastic cluster. xpack.reporting.encryptionKey has configured in kibana.yml I got this error while generating a CSV file using kibana. Also it occurs randomly. …

---

## [Watcher Condition Examples](https://discuss.elastic.co/t/watcher-condition-examples/1432)

<div class="topic-metadata">

**Author:** [@prashant\_sharma](https://discuss.elastic.co/u/prashant_sharma)\
**Replies:** 1\
**Last updated:** [May 28, 2015, 12:53am UTC](https://discuss.elastic.co/t/watcher-condition-examples/1432 "2015-05-28T00:53:48Z")

</div>

Are there any use cases/examples of Watcher Conditions handling with Payload Data?

---

## [More\_like\_this documentation](https://discuss.elastic.co/t/more-like-this-documentation/114477)

<div class="topic-metadata">

**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\
**Replies:** 5\
**Last updated:** [January 9, 2018, 8:25am UTC](https://discuss.elastic.co/t/more-like-this-documentation/114477 "2018-01-09T08:25:47Z")

</div>

I'm a little confused by the documentation at https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-mlt-query.html. One issue is that I'm trying to do a query using other documents as reference for f…

---

## [Logstash stdout going to syslog](https://discuss.elastic.co/t/logstash-stdout-going-to-syslog/73585)

<div class="topic-metadata">

**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\
**Replies:** 5\
**Last updated:** [March 9, 2017, 6:31pm UTC](https://discuss.elastic.co/t/logstash-stdout-going-to-syslog/73585 "2017-03-09T18:31:49Z")

</div>

I have just installed logstash 5.2.0 on a clean Ubuntu 16.04, and my 'metric' filter is now writing its 1-minute document count and rates to syslog instead of logstash.stdout. Is this a change in 5.2.0? With 2.4, it us…

---

## [Bug with logstash-filter-elasticsearch](https://discuss.elastic.co/t/bug-with-logstash-filter-elasticsearch/50161)

<div class="topic-metadata">

**Author:** [@Andrew\_Shved](https://discuss.elastic.co/u/Andrew_Shved)\
**Replies:** 5\
**Last updated:** [May 17, 2016, 9:10pm UTC](https://discuss.elastic.co/t/bug-with-logstash-filter-elasticsearch/50161 "2016-05-17T21:10:28Z")

</div>

I have tried example straight from documentation and it seems to fail as elasticsearch expects " around field names. elasticsearch { hosts =\> \["localhost"\] query =\> "statuscode:200" fields =\> \["c…

---

## [Elasticsearch logstash JDBC giving exception for data type casting float to long and long to float](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-giving-exception-for-data-type-casting-float-to-long-and-long-to-float/140119)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 1\
**Last updated:** [July 16, 2018, 10:01am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-jdbc-giving-exception-for-data-type-casting-float-to-long-and-long-to-float/140119 "2018-07-16T10:01:51Z")

</div>

Hi Team, I have to create index dynamically using logstash jdbc. I have used sql query in logstash. And my few column contains some decimal and some long values mixed. After starting logstash I am getting exception can…

---

## [Creating a simple line chart](https://discuss.elastic.co/t/creating-a-simple-line-chart/43588)

<div class="topic-metadata">

**Author:** [@slocumro](https://discuss.elastic.co/u/slocumro)\
**Replies:** 1\
**Last updated:** [March 6, 2016, 5:21am UTC](https://discuss.elastic.co/t/creating-a-simple-line-chart/43588 "2016-03-06T05:21:37Z")

</div>

I am attempting to create a simple line graph that displays request latency over time from weblogs. When parsing the weblogs with logstash, the latency value is persisted in a float value as part of the log entry object …

---

## [Kibana Space - Restricting "Default" Space View for custom users](https://discuss.elastic.co/t/kibana-space-restricting-default-space-view-for-custom-users/209126)

<div class="topic-metadata">

**Author:** [@Mauricio\_Borges](https://discuss.elastic.co/u/Mauricio_Borges)\
**Replies:** 4\
**Last updated:** [November 26, 2019, 7:08pm UTC](https://discuss.elastic.co/t/kibana-space-restricting-default-space-view-for-custom-users/209126 "2019-11-26T19:08:40Z")

</div>

Hello team! I have tried create new user, new role, new space, customized what user should View and Access. That's worked fine! However, I'd like new user access only the it's Space and not view Default anymore once l…

---

## [Elasticsearch es-spark too many request](https://discuss.elastic.co/t/elasticsearch-es-spark-too-many-request/199684)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 4\
**Last updated:** [September 20, 2019, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-es-spark-too-many-request/199684 "2019-09-20T14:52:02Z")

</div>

I'm getting continuously org.apache.spark.SparkException: Job aborted due to stage failure: Task 0 in stage 109896.0 failed 4 times, most recent failure: Lost task 0.3 in stage 109896.0 (TID 248952, 10.244.8.28, executo…

---

## [Unable to modify roles or see logstash indices](https://discuss.elastic.co/t/unable-to-modify-roles-or-see-logstash-indices/133601)

<div class="topic-metadata">

**Author:** [@static](https://discuss.elastic.co/u/static)\
**Replies:** 4\
**Last updated:** [June 7, 2018, 8:58pm UTC](https://discuss.elastic.co/t/unable-to-modify-roles-or-see-logstash-indices/133601 "2018-06-07T20:58:57Z")

</div>

Hi all, I'm hoping someone can help, and if so that others who have this issue find this topic in the future. I desperately need help finalizing the x-pack installation / security. I followed all the online documentat…

---

## [Upgrading Kibana to 7.10.2 hangs while migrating](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197)

<div class="topic-metadata">

**Author:** [@IslandMan](https://discuss.elastic.co/u/IslandMan)\
**Replies:** 2\
**Last updated:** [January 26, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrading-kibana-to-7-10-2-hangs-while-migrating/262197 "2021-01-26T13:53:31Z")

</div>

Opening a new thread as suggested by @rudolf. So I've restored .kibana\_\* from a snapshot and started a 7.10.2 kibana server that in turn starts the migration. These are the logs it producses: Jan 26 08:03:50 ip-10-164…

---

## [Unique count \> Count in kibana](https://discuss.elastic.co/t/unique-count-count-in-kibana/164565)

<div class="topic-metadata">

**Author:** [@MrZhangisGood](https://discuss.elastic.co/u/MrZhangisGood)\
**Replies:** 2\
**Last updated:** [January 18, 2019, 2:05am UTC](https://discuss.elastic.co/t/unique-count-count-in-kibana/164565 "2019-01-18T02:05:59Z")

</div>

Hi , I am using elasticsearch 5.4.2 and kibana also 5.4.2 . I want to check distinct counts for a string value field in elasticsearch . Unique count greater than Count Count Unique count

---

## [Changing mappings of some group of ids without affecting other documents](https://discuss.elastic.co/t/changing-mappings-of-some-group-of-ids-without-affecting-other-documents/25410)

<div class="topic-metadata">

**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\
**Replies:** 8\
**Last updated:** [July 13, 2015, 8:23am UTC](https://discuss.elastic.co/t/changing-mappings-of-some-group-of-ids-without-affecting-other-documents/25410 "2015-07-13T08:23:30Z")

</div>

I have document sets that have their own ids. Each document set has some documents that have their ids. I am trying to figure out a way to update the mapping of all documents of a set without affecting the mappings of th…

---

## [Endpoint Agent and Proxy Issues](https://discuss.elastic.co/t/endpoint-agent-and-proxy-issues/330977)

<div class="topic-metadata">

**Author:** [@jad3675](https://discuss.elastic.co/u/jad3675)\
**Replies:** 6\
**Last updated:** [May 4, 2023, 11:52am UTC](https://discuss.elastic.co/t/endpoint-agent-and-proxy-issues/330977 "2023-05-04T11:52:56Z")

</div>

Windows Server 2019 Elastic 8.6 Our environment has some devices that can only communicate with our Elastic cluster via a proxy. The elastic agent is setup with the environment registry keys (HKLM\\SYSTEM\\CurrentControl…

---

## [Syslog to elastic stack on kubernetes/openshift](https://discuss.elastic.co/t/syslog-to-elastic-stack-on-kubernetes-openshift/326068)

<div class="topic-metadata">

**Author:** [@splitmessage88](https://discuss.elastic.co/u/splitmessage88)\
**Replies:** 6\
**Last updated:** [February 27, 2023, 7:52am UTC](https://discuss.elastic.co/t/syslog-to-elastic-stack-on-kubernetes-openshift/326068 "2023-02-27T07:52:52Z")

</div>

Hi, We are almost in production and have one final function left, and it's fleet & elastic agent deployment so we can receive syslog from external source. For example CiscoFTD, Palo Alto etc. I have followed the docume…

---

## [Ingestion rate](https://discuss.elastic.co/t/ingestion-rate/213838)

<div class="topic-metadata">

**Author:** [@pugdummy](https://discuss.elastic.co/u/pugdummy)\
**Replies:** 6\
**Last updated:** [January 7, 2020, 9:04am UTC](https://discuss.elastic.co/t/ingestion-rate/213838 "2020-01-07T09:04:44Z")

</div>

Hello, I am new with Elastic. How can I know the ingestion rate?

---

## [Need help with Java API](https://discuss.elastic.co/t/need-help-with-java-api/18768)

<div class="topic-metadata">

**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\
**Replies:** 6\
**Last updated:** [July 22, 2014, 8:39pm UTC](https://discuss.elastic.co/t/need-help-with-java-api/18768 "2014-07-22T20:39:40Z")

</div>

I am trying to get started with the Java API, using the excellent tutorial found here: http://www.slideshare.net/dadoonet/hands-on-lab-elasticsearch But I am still having a lot of trouble. Below is a sample…

---

## [Heartbeat using Docker hints](https://discuss.elastic.co/t/heartbeat-using-docker-hints/227768)

<div class="topic-metadata">

**Author:** [@nedim](https://discuss.elastic.co/u/nedim)\
**Replies:** 7\
**Last updated:** [April 22, 2020, 1:21am UTC](https://discuss.elastic.co/t/heartbeat-using-docker-hints/227768 "2020-04-22T01:21:44Z")

</div>

I am trying to setup heartbeat using hints/labels and I am getting the following error \`\`\` 2020-04-11T06:02:38.483Z WARN \[hints.builder\] hints/monitors.go:195 unable to frame a host from input host: %shost.my.domain.io …

[Previous page](https://discuss.elastic.co/top.md?page=923&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=925&per_page=50&period=all)
