# Top **URL:** https://discuss.elastic.co/top.md?page=928&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 929 --- ## [Locked Out of Kibana Superuser Can't Modify Index Settings](https://discuss.elastic.co/t/locked-out-of-kibana-superuser-cant-modify-index-settings/311424)
**Author:** [@bjmaynard01](https://discuss.elastic.co/u/bjmaynard01)\ **Replies:** 5\ **Last updated:** [August 8, 2022, 1:02pm UTC](https://discuss.elastic.co/t/locked-out-of-kibana-superuser-cant-modify-index-settings/311424 "2022-08-08T13:02:33Z")
I have a single node ELK instance that I am using for a pilot, and the .kibana\_security\_session\_1 index has index.blocks.read\_only\_allow\_delete set to true due to running low on disk space. I have tuned the setting to be… --- ## [ElasticSearch pick one product from each category with top score](https://discuss.elastic.co/t/elasticsearch-pick-one-product-from-each-category-with-top-score/283977)
**Author:** [@dilkash\_manghani](https://discuss.elastic.co/u/dilkash_manghani)\ **Replies:** 5\ **Last updated:** [September 16, 2021, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-pick-one-product-from-each-category-with-top-score/283977 "2021-09-16T17:22:51Z")
I am trying to query ES index which contains product information, having product\_id, category\_id and variant\_id fields. Each product belong to certain category and variant: { "product\_id" : "PRODUCT\_12345", "cat… --- ## [Using colour values from within the Document itself](https://discuss.elastic.co/t/using-colour-values-from-within-the-document-itself/273094)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 5\ **Last updated:** [May 21, 2021, 2:47pm UTC](https://discuss.elastic.co/t/using-colour-values-from-within-the-document-itself/273094 "2021-05-21T14:47:50Z")
Hi, I have an index containing multipolygons, it renders very well using Kibana maps. However I would like to colour them. Using the colour-by-value works but only for the first x (based on the color bar chosen. (10 or … --- ## [How to use visualization directive with Kibana plugin](https://discuss.elastic.co/t/how-to-use-visualization-directive-with-kibana-plugin/107476)
**Author:** [@drumn](https://discuss.elastic.co/u/drumn)\ **Replies:** 5\ **Last updated:** [November 15, 2017, 12:13am UTC](https://discuss.elastic.co/t/how-to-use-visualization-directive-with-kibana-plugin/107476 "2017-11-15T00:13:02Z")
I want to run Visualize's sample code using the visualization directive described below with kibana 6.0.0-rc2. Although no error is output to the server console or the browser console, Visualize is not displayed and it… --- ## [ImagePullBackOff error while deploying Elastic via ECK](https://discuss.elastic.co/t/imagepullbackoff-error-while-deploying-elastic-via-eck/316739)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 6:50am UTC](https://discuss.elastic.co/t/imagepullbackoff-error-while-deploying-elastic-via-eck/316739 "2022-10-19T06:50:03Z")
I'm trying to follow the tutorial from this page: , to deploy Elastic on K8s and I get ImagePullbackOff error, pod events below: Events: Type Reason Age From Message … --- ## [How to use watcher to detect if logs are missing](https://discuss.elastic.co/t/how-to-use-watcher-to-detect-if-logs-are-missing/243398)
**Author:** [@ElektroKinetik](https://discuss.elastic.co/u/ElektroKinetik)\ **Replies:** 2\ **Last updated:** [July 31, 2020, 11:26pm UTC](https://discuss.elastic.co/t/how-to-use-watcher-to-detect-if-logs-are-missing/243398 "2020-07-31T23:26:11Z")
Hopefully I'm wording this correctly, here is what I'm trying to do, not sure where to start :wink: I have these 4 servers, each with respective log paths and log files, I want to watch server1 /app1/webappA/logs/mywe… --- ## [Filebeat with MSSQL and utf-16le](https://discuss.elastic.co/t/filebeat-with-mssql-and-utf-16le/210944)
**Author:** [@Christian\_SANCHEZ](https://discuss.elastic.co/u/Christian_SANCHEZ)\ **Replies:** 2\ **Last updated:** [December 9, 2019, 1:50pm UTC](https://discuss.elastic.co/t/filebeat-with-mssql-and-utf-16le/210944 "2019-12-09T13:50:23Z")
Hello I am using Stack 7.4.0 on Windows 10 trying to parse my MSSQL logs. When using the filebeat.input as below it works file. Lines are correctly decoded and multiline is correctly handled. filebeat.inputs: - type:… --- ## [What exactly does painless do under the hood of painless script's Array contains method?](https://discuss.elastic.co/t/what-exactly-does-painless-do-under-the-hood-of-painless-scripts-array-contains-method/201592)
**Author:** [@wusongchao](https://discuss.elastic.co/u/wusongchao)\ **Replies:** 2\ **Last updated:** [October 8, 2019, 2:26am UTC](https://discuss.elastic.co/t/what-exactly-does-painless-do-under-the-hood-of-painless-scripts-array-contains-method/201592 "2019-10-08T02:26:53Z")
Suppose that i have a doc mapping field like below { "template": { "mappings":{ "template":{ "properties": { "sth": { "type": "long" … --- ## [Logstash 7 install error Ubuntu 18.04](https://discuss.elastic.co/t/logstash-7-install-error-ubuntu-18-04/176917)
**Author:** [@lolmcbride](https://discuss.elastic.co/u/lolmcbride)\ **Replies:** 2\ **Last updated:** [April 15, 2019, 2:16pm UTC](https://discuss.elastic.co/t/logstash-7-install-error-ubuntu-18-04/176917 "2019-04-15T14:16:14Z")
I'm trying to install the ELK stack on a fresh Ubuntu 18.04 server. Elasticsearch and kibana are now working and I've moved onto Logstash but i get the following error when trying to install using apt. I am following the… --- ## [Custom Fields with Module Config](https://discuss.elastic.co/t/custom-fields-with-module-config/174601)
**Author:** [@mattz](https://discuss.elastic.co/u/mattz)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 6:02pm UTC](https://discuss.elastic.co/t/custom-fields-with-module-config/174601 "2019-04-01T18:02:29Z")
Is it possible to use custom fields within module config file? What is the appropriate hierarchy? For example in apache2 module - module: apache2 access: enabled: true var.paths: \["/var/log/apache2/access.log… --- ## [Custom metadata per index?](https://discuss.elastic.co/t/custom-metadata-per-index/7938)
**Author:** [@Christian\_Aust](https://discuss.elastic.co/u/Christian_Aust)\ **Replies:** 2\ **Last updated:** [June 1, 2012, 8:38am UTC](https://discuss.elastic.co/t/custom-metadata-per-index/7938 "2012-06-01T08:38:10Z")
Hi all, I seem to remember that there was a way to add custom metadata to an index. It's custom because it's not processed nor understood by elastic search nor lucene, just stored in the cluster. Do I remember tha… --- ## [Can't post data](https://discuss.elastic.co/t/cant-post-data/123003)
**Author:** [@shiratsu](https://discuss.elastic.co/u/shiratsu)\ **Replies:** 3\ **Last updated:** [March 8, 2018, 10:20pm UTC](https://discuss.elastic.co/t/cant-post-data/123003 "2018-03-08T22:20:27Z")
Hi there. I have started to use elasticesearch nowadays. then, at first i would like to post data by curl command by following this page. https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html … --- ## [Read receipts /online status](https://discuss.elastic.co/t/read-receipts-online-status/48922)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [May 2, 2016, 6:23am UTC](https://discuss.elastic.co/t/read-receipts-online-status/48922 "2016-05-02T06:23:15Z")
Hi, I wish there is some kind of indication where I can see who is online currently so that I can ping him in urgent need. Also Can we have read receipts for the topic or message in this forum? br, Sunil --- ## [Logstash error - Output](https://discuss.elastic.co/t/logstash-error-output/235840)
**Author:** [@jgonzalez](https://discuss.elastic.co/u/jgonzalez)\ **Replies:** 4\ **Last updated:** [June 5, 2020, 4:58pm UTC](https://discuss.elastic.co/t/logstash-error-output/235840 "2020-06-05T16:58:29Z")
Hello All, I have an error in my logstash config file and i have not able to find it. Please if someone can help me This is the error: \[2020-06-04T15:00:07,633\]\[ERROR\]\[logstash.agent \] Failed to execute act… --- ## [Fetch results based on Timezone](https://discuss.elastic.co/t/fetch-results-based-on-timezone/207039)
**Author:** [@anudeep\_k](https://discuss.elastic.co/u/anudeep_k)\ **Replies:** 4\ **Last updated:** [November 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/fetch-results-based-on-timezone/207039 "2019-11-11T12:16:51Z")
Hi, I have a inserted a data in elastic search from my timezone(Asia/Kolkata; +05:30) and converted into UTC.please find the below table for reference. Now I am trying to fetch the data by passing my timezone for whi… --- ## [Query cache: Alternatives to TERM query](https://discuss.elastic.co/t/query-cache-alternatives-to-term-query/180188)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 4\ **Last updated:** [May 10, 2019, 4:43am UTC](https://discuss.elastic.co/t/query-cache-alternatives-to-term-query/180188 "2019-05-10T04:43:09Z")
Hi, I want to take advantage of Query Cache. I have many term queries inside my filters. I have read somewhere that term queries are not cached. What are alternatives for a String data type, that i can use, if i want … --- ## [Error configuration SSL/TLS on Kibana](https://discuss.elastic.co/t/error-configuration-ssl-tls-on-kibana/130635)
**Author:** [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\ **Replies:** 4\ **Last updated:** [May 8, 2018, 4:04pm UTC](https://discuss.elastic.co/t/error-configuration-ssl-tls-on-kibana/130635 "2018-05-08T16:04:05Z")
Hi guys. Sorry if my english is bad; it's not my native language. I am stuck on a small problem almost 3 days and I do not understand why. In fact, I try to set up TLS between the different modules (E L K). The configu… --- ## [Lowercase Token Filter with preserve\_original](https://discuss.elastic.co/t/lowercase-token-filter-with-preserve-original/25999)
**Author:** [@zdeseb](https://discuss.elastic.co/u/zdeseb)\ **Replies:** 4\ **Last updated:** [July 23, 2015, 10:45am UTC](https://discuss.elastic.co/t/lowercase-token-filter-with-preserve-original/25999 "2015-07-23T10:45:30Z")
Is there any way how to apply lowercase token filter and preserve original tokens too? Our goal is to be able to search terms case-insensitive (by Span Term and lowercased text) together with case-sensitive search (by … --- ## [Indexing AVRO Documents](https://discuss.elastic.co/t/indexing-avro-documents/11583)
**Author:** [@kuwar\_sahani\_2](https://discuss.elastic.co/u/kuwar_sahani_2)\ **Replies:** 4\ **Last updated:** [April 15, 2013, 11:56am UTC](https://discuss.elastic.co/t/indexing-avro-documents/11583 "2013-04-15T11:56:04Z")
Hi I have a code to read AVRO that iterates over records and builds the XContentBuilder object from it and indexes it. I have introduced a code for Auto-Classification that accepts the record as XContentBuilder… --- ## [Unable to associate to elasticsearch on kibana](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050)
**Author:** [@KypMon](https://discuss.elastic.co/u/KypMon)\ **Replies:** 1\ **Last updated:** [November 8, 2021, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-associate-to-elasticsearch-on-kibana/288050 "2021-11-08T15:36:42Z")
basically just following this code sample: # Install OLM (Operator Lifecycle Management) kubectl apply -f https://github.com/operator-framework/operator-lifecycle-manager/releases/download/0.16.1/crds.yaml kubectl apply… --- ## [Proactive watchers](https://discuss.elastic.co/t/proactive-watchers/67763)
**Author:** [@Anuraag.Kamath](https://discuss.elastic.co/u/Anuraag.Kamath)\ **Replies:** 8\ **Last updated:** [December 5, 2016, 8:15am UTC](https://discuss.elastic.co/t/proactive-watchers/67763 "2016-12-05T08:15:45Z")
Hi All, Wanted to know if there is a way to make the watcher proactive rather than timer based. Is there a way to achieve the same? By proactive i mean if there is an error the corresponding watcher should get trigge… --- ## [Kibana server is not ready yet error](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error/305313)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 2\ **Last updated:** [May 21, 2022, 11:57am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error/305313 "2022-05-21T11:57:41Z")
Hi, I've installed Elasticsearch and Kibana on a windows server and I am trying to access the kibana instance on a different machine. I am able to access Elasticsearch however when I try to access Kibana I get an error … --- ## [Unexpected character ('\<' (code 60)) - different behavior - ES cloud](https://discuss.elastic.co/t/unexpected-character-code-60-different-behavior-es-cloud/197535)
**Author:** [@hborda](https://discuss.elastic.co/u/hborda)\ **Replies:** 2\ **Last updated:** [August 30, 2019, 3:24pm UTC](https://discuss.elastic.co/t/unexpected-character-code-60-different-behavior-es-cloud/197535 "2019-08-30T15:24:03Z")
We read most of what have been written about the topic, we tried many permutations and we can't successfully make logstash to work: Here is the console output start ----------------- C:\\Deleteme\\es\_logstash\>C:\\Softwar… --- ## [Connecting Logstash to Microsoft Access DB?](https://discuss.elastic.co/t/connecting-logstash-to-microsoft-access-db/69477)
**Author:** [@chrisrumz](https://discuss.elastic.co/u/chrisrumz)\ **Replies:** 2\ **Last updated:** [January 15, 2017, 5:24pm UTC](https://discuss.elastic.co/t/connecting-logstash-to-microsoft-access-db/69477 "2017-01-15T17:24:29Z")
Is connecting Logstash to a Microsoft Access database possible? I've tried many ways, including adding the Java 7 JDBC-ODBC bridge to my Java 8 install as mentioned in this article: or open-source solutions like "UC… --- ## [Can't parse a CSV file](https://discuss.elastic.co/t/cant-parse-a-csv-file/26362)
**Author:** [@Maruf789](https://discuss.elastic.co/u/Maruf789)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 6:11pm UTC](https://discuss.elastic.co/t/cant-parse-a-csv-file/26362 "2015-07-29T18:11:09Z")
Hi, I have a simple CSV which I want to parse using Logstash and create some simple graphs in Kibana. But for some reason (unknown to me), the CSV file doesn't get parsed and I cannot see the index in Elasticsearch. He… --- ## [Aggregate nested arrays](https://discuss.elastic.co/t/aggregate-nested-arrays/285934)
**Author:** [@Lyes\_Ouchene](https://discuss.elastic.co/u/Lyes_Ouchene)\ **Replies:** 6\ **Last updated:** [October 19, 2021, 9:17pm UTC](https://discuss.elastic.co/t/aggregate-nested-arrays/285934 "2021-10-19T21:17:33Z")
Hello everyone i am new to Elasticsearch, i need help with a use case, I want to create an array inside an array using the aggregate option The desired result is to have a list of services, for each service there will… --- ## [Timelion is rejecting query string that works in dev tools](https://discuss.elastic.co/t/timelion-is-rejecting-query-string-that-works-in-dev-tools/190824)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 6\ **Last updated:** [July 17, 2019, 7:18am UTC](https://discuss.elastic.co/t/timelion-is-rejecting-query-string-that-works-in-dev-tools/190824 "2019-07-17T07:18:02Z")
I am able to get search results using the following query string. GET metricbeat-system-2019.07.16/\_search?q=host.name:elklogstash02.mydc+event.dataset:system.network However, when I use the same in Timelion, it fails. … --- ## [Elasticsearch curator delete disk space](https://discuss.elastic.co/t/elasticsearch-curator-delete-disk-space/187450)
**Author:** [@ohollx](https://discuss.elastic.co/u/ohollx)\ **Replies:** 6\ **Last updated:** [June 27, 2019, 12:48am UTC](https://discuss.elastic.co/t/elasticsearch-curator-delete-disk-space/187450 "2019-06-27T00:48:33Z")
Hi. I'm trying to delete an index automatically using an elastic curator. I think the index is deleted when setting as below, but I do not understand exactly how it works. actions: One: action: delete\_indices optio… --- ## [ELK elasticsearch issues](https://discuss.elastic.co/t/elk-elasticsearch-issues/160494)
**Author:** [@amritihealth](https://discuss.elastic.co/u/amritihealth)\ **Replies:** 6\ **Last updated:** [December 27, 2018, 8:57am UTC](https://discuss.elastic.co/t/elk-elasticsearch-issues/160494 "2018-12-27T08:57:11Z")
Recently moved from 6.5.1 version to 6.5.2 and again back to 6.5.1 . Seems index got corrupted. Cannot get back previous dashboard. Can see below error from Elastic search container, after which kibana container crashes. … --- ## [How to run logstash conf file in background?](https://discuss.elastic.co/t/how-to-run-logstash-conf-file-in-background/137022)
**Author:** [@mamta](https://discuss.elastic.co/u/mamta)\ **Replies:** 6\ **Last updated:** [June 26, 2018, 9:33am UTC](https://discuss.elastic.co/t/how-to-run-logstash-conf-file-in-background/137022 "2018-06-26T09:33:00Z")
Hey, I have installed ELK 5.6.8 on Redhat machine. I am using this to show MySQL database records on kibana. I have kept mysql\_logstash.conf file in /etc/logstash/conf.d directory but still it's not running in the backe… --- ## [Patch log4j vulnerability on Windows](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679)
**Author:** [@Erni](https://discuss.elastic.co/u/Erni)\ **Replies:** 1\ **Last updated:** [December 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/patch-log4j-vulnerability-on-windows/292679 "2021-12-22T14:15:09Z")
Hi, I was following instructions from: Elasticsearch 5.0.0-5.6.10 and 6.0.0-6.3.2: Log4j CVE-2021-44228, CVE-2021-45046 remediation But changed it to powershell commands as I am runnng elasticsearch on Windows: Copy-I… --- ## [Logstash aggregate field and increase count](https://discuss.elastic.co/t/logstash-aggregate-field-and-increase-count/279454)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 6:10pm UTC](https://discuss.elastic.co/t/logstash-aggregate-field-and-increase-count/279454 "2021-07-23T18:10:49Z")
Hello everyone. I am again here. I would like to start thanking every single one one of you for this amazing community. Those days I was testing elasticsearch and logstash and I am just falling in love with how many th… --- ## [No parser for element \[filtered\]](https://discuss.elastic.co/t/no-parser-for-element-filtered/5226)
**Author:** [@Ridvan\_Gyundogan](https://discuss.elastic.co/u/Ridvan_Gyundogan)\ **Replies:** 3\ **Last updated:** [August 24, 2011, 6:17pm UTC](https://discuss.elastic.co/t/no-parser-for-element-filtered/5226 "2011-08-24T18:17:53Z")
Hello, I need a filtered query like described here http://www.elasticsearch.org/guide/reference/query-dsl/filtered-query.html but I get an error saying No parser for element \[filtered\]. This is the gist of my query… --- ## [Rule hits visible in preview, but no alerts triggered](https://discuss.elastic.co/t/rule-hits-visible-in-preview-but-no-alerts-triggered/287457)
**Author:** [@mcreedjr](https://discuss.elastic.co/u/mcreedjr)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 4:10pm UTC](https://discuss.elastic.co/t/rule-hits-visible-in-preview-but-no-alerts-triggered/287457 "2021-10-27T16:10:02Z")
I've imported the default Elastic rules, and duplicated the 'whoami' rule. When I preview the rule, it shows hits, but there are no alerts raised. I feel that I'm missing something super obvious, but I would expect to se… --- ## [Problems trying to register Elasticsearch.NET/NEST in PowerShell](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215)
**Author:** [@syPY45Xb5n7S](https://discuss.elastic.co/u/syPY45Xb5n7S)\ **Replies:** 4\ **Last updated:** [May 13, 2020, 5:32am UTC](https://discuss.elastic.co/t/problems-trying-to-register-elasticsearch-net-nest-in-powershell/232215 "2020-05-13T05:32:12Z")
I've been looking into using elasticsearch.net and nest via powershell instead of re-inventing the wheel with all the different type of web-requests. As dotnet DLLs, it should be possible to use them with PowerShell via A… --- ## [Is cluster backup Incremental?](https://discuss.elastic.co/t/is-cluster-backup-incremental/88546)
**Author:** [@shubham9799](https://discuss.elastic.co/u/shubham9799)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 2:46pm UTC](https://discuss.elastic.co/t/is-cluster-backup-incremental/88546 "2017-06-07T14:46:33Z")
Hi, I want to know whether cluster backup is incremental? In document it is written that "index snapshot process" is incremental. So if I am taking snapshot of whole cluster, will it be incremental? Thanks in advance … --- ## [Elasticsearch 5.0.0-alpha1 --\> 5.0.0-alpha5](https://discuss.elastic.co/t/elasticsearch-5-0-0-alpha1-5-0-0-alpha5/59215)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 4\ **Last updated:** [September 2, 2016, 4:26pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-alpha1-5-0-0-alpha5/59215 "2016-09-02T16:26:27Z")
Hello, I have a cluster in 5.0.0-alpha1. Are indexes created with this version compatible 5.0.0-alpha5? can I update without loosing my data? Thank you! --- ## [Elasticsearch wont run](https://discuss.elastic.co/t/elasticsearch-wont-run/290395)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 7\ **Last updated:** [December 1, 2021, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-wont-run/290395 "2021-12-01T06:20:27Z")
Hi dears I have upgraded the Elasticsearch and removed old version and copy all the new Elasticsearch parts in the same directory (upgrading ES 7.6.2 to 7.15.2) Unfortunately when I want to start the service with sysV … --- ## [Поиск по массиву string](https://discuss.elastic.co/t/string/118159)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 7\ **Last updated:** [February 6, 2018, 2:00pm UTC](https://discuss.elastic.co/t/string/118159 "2018-02-06T14:00:38Z")
Добрый день! Мне нужно сделать поиск по фразе, причем поиск должен происходить по нескольким строкам с анализатором. Можно как-нибудь реализовать разделение строк, что бы поиск был как по nested объектам, но таковым не я… --- ## [How to create Markdown widget visualization dynamically on Kibana?](https://discuss.elastic.co/t/how-to-create-markdown-widget-visualization-dynamically-on-kibana/59719)
**Author:** [@pramod\_kumar](https://discuss.elastic.co/u/pramod_kumar)\ **Replies:** 1\ **Last updated:** [September 4, 2016, 4:02pm UTC](https://discuss.elastic.co/t/how-to-create-markdown-widget-visualization-dynamically-on-kibana/59719 "2016-09-04T16:02:54Z")
Hi All, Please can anyone let me know, How to create Markdown widget visualization dynamically on Kibana ?? Scenario: Lets say i have a Main dashboard for sports with fields like sport-name, number of players etc.,an… --- ## [Ingesting Geospatial data with Logstash](https://discuss.elastic.co/t/ingesting-geospatial-data-with-logstash/27154)
**Author:** [@Freddie](https://discuss.elastic.co/u/Freddie)\ **Replies:** 1\ **Last updated:** [August 11, 2015, 12:05am UTC](https://discuss.elastic.co/t/ingesting-geospatial-data-with-logstash/27154 "2015-08-11T00:05:06Z")
Basic logstash conf ... input { jdbc { jdbc\_driver\_library =\> "services/ows/webapps/ows/WEB-INF/lib/postgresql-8.4-701.jdbc3.jar" jdbc\_driver\_class =\> "org.postgresql.Driver" jdbc\_connection\_string =\> "jdb… --- ## [Features for Elastic SIEM](https://discuss.elastic.co/t/features-for-elastic-siem/377521)
**Author:** [@arcsons](https://discuss.elastic.co/u/arcsons)\ **Replies:** 5\ **Last updated:** [February 9, 2026, 5:36am UTC](https://discuss.elastic.co/t/features-for-elastic-siem/377521 "2026-02-09T05:36:08Z")
Hi Elastic Team, I would like to kindly request the support of the Elastic team and the product owner for Security in enabling more features from Wazuh. It would be fantastic to have enhanced capabilities such as Config… --- ## [Curator and Elasticsearch 8](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 3\ **Last updated:** [October 14, 2022, 5:31pm UTC](https://discuss.elastic.co/t/curator-and-elasticsearch-8/316550 "2022-10-14T17:31:53Z")
I noticed today that Version Compatibility | Curator Reference \[5.8\] | Elastic does not list Elasticsearch 8. Elasticsearch curator & ES version 8.x confirms it doesn't work with Elasticsearch 8. So my questions are: … --- ## [Filebeat: problem with logstash/elasticsearch (version 5.3.0)](https://discuss.elastic.co/t/filebeat-problem-with-logstash-elasticsearch-version-5-3-0/80659)
**Author:** [@Gounlaf](https://discuss.elastic.co/u/Gounlaf)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 12:10pm UTC](https://discuss.elastic.co/t/filebeat-problem-with-logstash-elasticsearch-version-5-3-0/80659 "2017-03-31T12:10:41Z")
Hi, Filebeat service won't start if elasticsearch is not configured. Below my configuration #-------------------------- Elasticsearch output ------------------------------ output.elasticsearch: enabled: false #--… --- ## [Not able to consume input from a kafka-topic](https://discuss.elastic.co/t/not-able-to-consume-input-from-a-kafka-topic/58202)
**Author:** [@sokio](https://discuss.elastic.co/u/sokio)\ **Replies:** 3\ **Last updated:** [August 22, 2016, 3:38pm UTC](https://discuss.elastic.co/t/not-able-to-consume-input-from-a-kafka-topic/58202 "2016-08-22T15:38:15Z")
Hi, I am running logstash 2.3.4. I have kafka- 0.9 as the broker. I also installed the logstash-kafka-input plugin using the matrix given on the github. 0.9 0.9 2.0.0 - 2.3.x 3.x.x using the following command: /o… --- ## [ElasticSearch - Memory and Query Performance](https://discuss.elastic.co/t/elasticsearch-memory-and-query-performance/10209)
**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\ **Replies:** 3\ **Last updated:** [January 3, 2013, 6:40am UTC](https://discuss.elastic.co/t/elasticsearch-memory-and-query-performance/10209 "2013-01-03T06:40:58Z")
Hi, I am evaluating ElasticSearch (ES) for a project and it comes close to the requirements we are looking at. Since I am new to ElasticSearch, I am trying to figure out a couple of things and have multiple questi… --- ## [Question on APM architecture elk 8](https://discuss.elastic.co/t/question-on-apm-architecture-elk-8/299827)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 6:17am UTC](https://discuss.elastic.co/t/question-on-apm-architecture-elk-8/299827 "2022-03-17T06:17:02Z")
Hi, I was going through the elk 8 documentation and noticed that the previous APM server has been changed to legacy and from 8 onwards, we need to migrate it to Fleet APM integration I have few questions on the 8 model… --- ## [ウォッチャーにおいて計算結果をフィールドとして追加する方法](https://discuss.elastic.co/t/topic/188003)
**Author:** [@5f750bbb360aba6ced5f](https://discuss.elastic.co/u/5f750bbb360aba6ced5f)\ **Replies:** 5\ **Last updated:** [July 4, 2019, 12:22pm UTC](https://discuss.elastic.co/t/topic/188003 "2019-07-04T12:22:48Z")
(特定の文字や記号やアルファベットが含まれるとなぜかタイトルがエラーになってしまうため、わかりにくいタイトルになってしまっております。。) ある条件を満たしたユーザのみを抽出し、ドキュメント内のフィールドから算出した結果をさらにフィールドとして追加して、メール送信を行うというWatcherを作成しようとしています。 例としては下記の通り、出力時に"打数","安打"から打率を計算し、フィールドに新たに追加して出力する、というイメージで… --- ## [Can't properly map array of IPv4 from Logstash to ES](https://discuss.elastic.co/t/cant-properly-map-array-of-ipv4-from-logstash-to-es/49349)
**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\ **Replies:** 5\ **Last updated:** [June 14, 2016, 6:46am UTC](https://discuss.elastic.co/t/cant-properly-map-array-of-ipv4-from-logstash-to-es/49349 "2016-06-14T06:46:36Z")
I'm having trouble getting Elasticsearch to accept my array of IPv4 as IPv4 instead of strings. I have a string with many IPs separated by spaces. I can easily turn that field into an array of IPs by using the split fun… --- ## [Error while running wmi input plugin](https://discuss.elastic.co/t/error-while-running-wmi-input-plugin/95494)
**Author:** [@maxf](https://discuss.elastic.co/u/maxf)\ **Replies:** 0\ **Last updated:** [August 2, 2017, 9:31am UTC](https://discuss.elastic.co/t/error-while-running-wmi-input-plugin/95494 "2017-08-02T09:31:49Z")
Hello. Im trying to run wmi input plugin, but i got only errors "Bad file descriptor" My config: input { wmi { query =\> "SELECT \* FROM Win32\_Process" host =\> "hostname" user =\> "DOMAIN\\USER" password =\> "mypassw… [Previous page](https://discuss.elastic.co/top.md?page=927&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=929&per_page=50&period=all)