# Top

**URL:** https://discuss.elastic.co/top.md?page=932&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 933

---

## [Node.box\_type in 5.0?](https://discuss.elastic.co/t/node-box-type-in-5-0/64263)

<div class="topic-metadata">

**Author:** [@Marco\_Wesselgren](https://discuss.elastic.co/u/Marco_Wesselgren)\
**Replies:** 2\
**Last updated:** [October 28, 2016, 10:02am UTC](https://discuss.elastic.co/t/node-box-type-in-5-0/64263 "2016-10-28T10:02:43Z")

</div>

Hi, Upgrading from 2.3.4 to 5.0 , solved most of the problems though I can't find any documentation about where to set node.box\_type I just get the following error: at org.elasticsearch.common.settings.SettingsModule…

---

## [Bucket keys for date histogram aggregation don't respect timezone](https://discuss.elastic.co/t/bucket-keys-for-date-histogram-aggregation-dont-respect-timezone/38437)

<div class="topic-metadata">

**Author:** [@jpblair](https://discuss.elastic.co/u/jpblair)\
**Replies:** 2\
**Last updated:** [January 7, 2016, 3:57pm UTC](https://discuss.elastic.co/t/bucket-keys-for-date-histogram-aggregation-dont-respect-timezone/38437 "2016-01-07T15:57:44Z")

</div>

I'm trying to do a date histogram using Spring Data Elasticsearch, allowing a customizable time zone. I'm seeing strange behavior. The doc counts in each bucket change with the time zone, which seems to indicate that t…

---

## [Time out with firewalld on RHEL 7](https://discuss.elastic.co/t/time-out-with-firewalld-on-rhel-7/32799)

<div class="topic-metadata">

**Author:** [@mdconner](https://discuss.elastic.co/u/mdconner)\
**Replies:** 2\
**Last updated:** [October 23, 2015, 5:37pm UTC](https://discuss.elastic.co/t/time-out-with-firewalld-on-rhel-7/32799 "2015-10-23T17:37:49Z")

</div>

Has anyone gotten Elasticsearch to work on Red Hat Linux 7 with firewalld enabled? I always get time out errors with multicast or unicast enabled. Everything works fine when firewalld is disabled (not long term solutio…

---

## [Logstash Output CSV Plugin produces no content in the output file](https://discuss.elastic.co/t/logstash-output-csv-plugin-produces-no-content-in-the-output-file/29078)

<div class="topic-metadata">

**Author:** [@Bill.T](https://discuss.elastic.co/u/Bill.T)\
**Replies:** 0\
**Last updated:** [September 10, 2015, 10:33pm UTC](https://discuss.elastic.co/t/logstash-output-csv-plugin-produces-no-content-in-the-output-file/29078 "2015-09-10T22:33:55Z")

</div>

I am trying to write an output CSV file that contains two of the four columns from an input CSV file. It appears that the input file is correctly parsed and mapped. The output file is created but nothing gets written to…

---

## [ElasticAgent to multiple locations](https://discuss.elastic.co/t/elasticagent-to-multiple-locations/334989)

<div class="topic-metadata">

**Author:** [@willsy](https://discuss.elastic.co/u/willsy)\
**Replies:** 3\
**Last updated:** [June 1, 2023, 3:01pm UTC](https://discuss.elastic.co/t/elasticagent-to-multiple-locations/334989 "2023-06-01T15:01:18Z")

</div>

I'm using the default elastic agents with windows integrations and some linux ones with linux integrations. Is there a way to send the data from these agents to two locations and two ports? a logstash and elasticsearch …

---

## [Java api : bulk refresh](https://discuss.elastic.co/t/java-api-bulk-refresh/3831)

<div class="topic-metadata">

**Author:** [@nel\_taurisson](https://discuss.elastic.co/u/nel_taurisson)\
**Replies:** 3\
**Last updated:** [September 11, 2015, 10:52am UTC](https://discuss.elastic.co/t/java-api-bulk-refresh/3831 "2015-09-11T10:52:40Z")

</div>

Hi, This is my first post here, so first thanks a lot for the wonderfull framework. I'm using java api and I'm wondering if the setRefresh( true ) method on a BulkRequestBuilder should lead for wainting for all t…

---

## [Upgrade stopped monitoring](https://discuss.elastic.co/t/upgrade-stopped-monitoring/137880)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 6\
**Last updated:** [July 2, 2019, 6:36pm UTC](https://discuss.elastic.co/t/upgrade-stopped-monitoring/137880 "2019-07-02T18:36:53Z")

</div>

Environment Info We had two clusters with version 6.2.1, where one is dedicated for monitoring. The monitoring cluster was also monitoring logstash (Docker 6.2). We upgraded the monitoring cluster to 6.3 from 6.2.1. R…

---

## [Grok pattern file does not exist](https://discuss.elastic.co/t/grok-pattern-file-does-not-exist/129442)

<div class="topic-metadata">

**Author:** [@goofansu](https://discuss.elastic.co/u/goofansu)\
**Replies:** 6\
**Last updated:** [April 25, 2018, 4:24pm UTC](https://discuss.elastic.co/t/grok-pattern-file-does-not-exist/129442 "2018-04-25T16:24:42Z")

</div>

Hi, I have configured a custom pattern and using patterns\_dir to locate it. But it reports "Grok pattern file does not exist". root@openapply-prod-app:/etc/logstash/conf.d# ls -la total 36 drwxrwxr-x 3 root root 4096 …

---

## [Kibana failing with requestTimeout error](https://discuss.elastic.co/t/kibana-failing-with-requesttimeout-error/189189)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 1\
**Last updated:** [July 12, 2019, 7:25pm UTC](https://discuss.elastic.co/t/kibana-failing-with-requesttimeout-error/189189 "2019-07-12T19:25:20Z")

</div>

Hi, I am using kibana-oss 7.0.1 in kubernetes environment. Elasticsearch pods are taking around 2 minutes to come up and form the cluster. Till then, kibana pod fails with the below error as it is not able to reach El…

---

## [Visualizing time series counting first time a term appears in index](https://discuss.elastic.co/t/visualizing-time-series-counting-first-time-a-term-appears-in-index/158623)

<div class="topic-metadata">

**Author:** [@DigitalMachinist](https://discuss.elastic.co/u/DigitalMachinist)\
**Replies:** 7\
**Last updated:** [November 28, 2018, 7:53pm UTC](https://discuss.elastic.co/t/visualizing-time-series-counting-first-time-a-term-appears-in-index/158623 "2018-11-28T19:53:55Z")

</div>

I'm just spending my first week or so with Kibana and trying to build dashboards to visualize performance indicators that my team is interested in tracking. At the moment, what I'd like to make a line chart time series t…

---

## [Kibana creating indecs not working](https://discuss.elastic.co/t/kibana-creating-indecs-not-working/111144)

<div class="topic-metadata">

**Author:** [@Flaviu](https://discuss.elastic.co/u/Flaviu)\
**Replies:** 7\
**Last updated:** [December 12, 2017, 2:02am UTC](https://discuss.elastic.co/t/kibana-creating-indecs-not-working/111144 "2017-12-12T02:02:14Z")

</div>

Hello, I have a fresh install of ELK + X-pack and for some reason Kibana doesn't want to create index for my data. If I explore this URL http://elasticsearchurl:9200/\_cat/indices I get: green open .security-6 1ACQXZV…

---

## [Error generating report for Dashboard](https://discuss.elastic.co/t/error-generating-report-for-dashboard/105008)

<div class="topic-metadata">

**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\
**Replies:** 7\
**Last updated:** [November 21, 2017, 1:22pm UTC](https://discuss.elastic.co/t/error-generating-report-for-dashboard/105008 "2017-11-21T13:22:19Z")

</div>

Hello, I am facing issues generating PDF report for Dashboards and visualizations. Attached is the error \[Kibana Reporting Error\] System Details: Kibana 5.6.2 (Single Instance) ES: 5.6.2

---

## [Unable to install Endpoint Security on windows server](https://discuss.elastic.co/t/unable-to-install-endpoint-security-on-windows-server/299654)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 4\
**Last updated:** [March 27, 2022, 9:38pm UTC](https://discuss.elastic.co/t/unable-to-install-endpoint-security-on-windows-server/299654 "2022-03-27T21:38:52Z")

</div>

Hello, I'm trying to deploy fleet policy that installs endpoint security on windows server, but the agent keep being unhealthy because of endpoint security install failure. try to execute .\\endpoint-security.exe instal…

---

## [Can I define the color of each value in Kibana visualization by assigning it specific RGB?](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401)

<div class="topic-metadata">

**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\
**Replies:** 4\
**Last updated:** [January 26, 2021, 9:44am UTC](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401 "2021-01-26T09:44:34Z")

</div>

hi, I have a data set which includes x and y position of each measurement, and its corresponding RGB. is there a way to Visualize it with Kibana? This is actually a heat map where each point has x and y values, but th…

---

## [Kibana Dark Mode not working properly in 7.2](https://discuss.elastic.co/t/kibana-dark-mode-not-working-properly-in-7-2/188073)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 4\
**Last updated:** [July 16, 2019, 1:29pm UTC](https://discuss.elastic.co/t/kibana-dark-mode-not-working-properly-in-7-2/188073 "2019-07-16T13:29:24Z")

</div>

Hi, Is their anyone also experienced once enabled the Dark Mode it won't worked properly. After I've enabled the dark mode, only the loading became dark but after that it will display the default bright settings again. …

---

## [Using python plugin to create zentity models in elastic](https://discuss.elastic.co/t/using-python-plugin-to-create-zentity-models-in-elastic/180525)

<div class="topic-metadata">

**Author:** [@gioorso](https://discuss.elastic.co/u/gioorso)\
**Replies:** 4\
**Last updated:** [May 20, 2019, 8:20am UTC](https://discuss.elastic.co/t/using-python-plugin-to-create-zentity-models-in-elastic/180525 "2019-05-20T08:20:45Z")

</div>

Hi all, I have come across the zentity plugin for entity resolution in ES, but since I am already using the python plugin, I wanted to ask whether the official python plugin in ES has any functionality to support entity…

---

## [Watcher: Invalid JSON](https://discuss.elastic.co/t/watcher-invalid-json/106855)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 4\
**Last updated:** [November 10, 2017, 9:11am UTC](https://discuss.elastic.co/t/watcher-invalid-json/106855 "2017-11-10T09:11:02Z")

</div>

I am trying to create the following watcher and seeing Invalid JSON error message and not able to create the watcher. { "trigger": { "schedule": { "interval": "200m" } }, "input": { "search": { …

---

## [Es 2.4 , can't add a \_parent field that points to an already existing type](https://discuss.elastic.co/t/es-2-4-cant-add-a--parent-field-that-points-to-an-already-existing-type/91819)

<div class="topic-metadata">

**Author:** [@Miguel\_Michelsongs](https://discuss.elastic.co/u/Miguel_Michelsongs)\
**Replies:** 4\
**Last updated:** [July 26, 2017, 12:47am UTC](https://discuss.elastic.co/t/es-2-4-cant-add-a--parent-field-that-points-to-an-already-existing-type/91819 "2017-07-26T00:47:14Z")

</div>

Hi guys, how are you today ? I have a index with records on type1, And I'm trying to add a new type type2 which has a type1 parent type. i'm receiving the error can't add a \_parent field that points to an already exis…

---

## [How to enable script.groovy on es 5.0.0 alpha2 for ubuntu](https://discuss.elastic.co/t/how-to-enable-script-groovy-on-es-5-0-0-alpha2-for-ubuntu/49846)

<div class="topic-metadata">

**Author:** [@MaxSeleznov](https://discuss.elastic.co/u/MaxSeleznov)\
**Replies:** 4\
**Last updated:** [May 12, 2016, 8:19pm UTC](https://discuss.elastic.co/t/how-to-enable-script-groovy-on-es-5-0-0-alpha2-for-ubuntu/49846 "2016-05-12T20:19:03Z")

</div>

i added lines to config/elasticsearch.yml script.inline: true script.indexed: true restated and got this \* Stopping Elasticsearch Server …

---

## [Kinana 4.2 Release Date](https://discuss.elastic.co/t/kinana-4-2-release-date/23975)

<div class="topic-metadata">

**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\
**Replies:** 4\
**Last updated:** [June 22, 2015, 8:26am UTC](https://discuss.elastic.co/t/kinana-4-2-release-date/23975 "2015-06-22T08:26:06Z")

</div>

Hi, we are really interested in the new functionalities coming with kibana 4.2. Is there a set release date? Thanks, Isaac

---

## [Metricbeat failing to pick some mount points under system.filesystem.mount\_point](https://discuss.elastic.co/t/metricbeat-failing-to-pick-some-mount-points-under-system-filesystem-mount-point/142526)

<div class="topic-metadata">

**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 7:07am UTC](https://discuss.elastic.co/t/metricbeat-failing-to-pick-some-mount-points-under-system-filesystem-mount-point/142526 "2018-08-02T07:07:26Z")

</div>

I am running metricbeat 6.3.0, below is my metricbeat.yml file: #========================== Modules configuration ============================ metricbeat.modules: #------------------------------- System Module -------…

---

## [Trouble accessing Lucene \_source values](https://discuss.elastic.co/t/trouble-accessing-lucene-source-values/102493)

<div class="topic-metadata">

**Author:** [@taylorgaw](https://discuss.elastic.co/u/taylorgaw)\
**Replies:** 0\
**Last updated:** [October 2, 2017, 11:19pm UTC](https://discuss.elastic.co/t/trouble-accessing-lucene-source-values/102493 "2017-10-02T23:19:04Z")

</div>

I'm building out integration tests for my ES5.5 plugin that I wrote which pulls values from a document and generates a score based on those values. Here's what I have to build out my test cluster: public void prepESClsu…

---

## [Questions about ES Performance optimization, can anyone help me?](https://discuss.elastic.co/t/questions-about-es-performance-optimization-can-anyone-help-me/94312)

<div class="topic-metadata">

**Author:** [@xiaodong.hu](https://discuss.elastic.co/u/xiaodong.hu)\
**Replies:** 0\
**Last updated:** [July 24, 2017, 10:59am UTC](https://discuss.elastic.co/t/questions-about-es-performance-optimization-can-anyone-help-me/94312 "2017-07-24T10:59:59Z")

</div>

Hello, I'm testing indexing performance about es. under these conditions : ES 5.4.0 , a single node cluster. -Xmx17179869184 -XX:MaxDirectMemorySize=17179869184 use \_bulk api, 500docs per request. 20 clients…

---

## [Logstash imap input plugin. Want to trash mail. Error: undefined local variable or method \`id\_set'](https://discuss.elastic.co/t/logstash-imap-input-plugin-want-to-trash-mail-error-undefined-local-variable-or-method-id-set/66502)

<div class="topic-metadata">

**Author:** [@kjellgrb](https://discuss.elastic.co/u/kjellgrb)\
**Replies:** 0\
**Last updated:** [November 18, 2016, 7:58am UTC](https://discuss.elastic.co/t/logstash-imap-input-plugin-want-to-trash-mail-error-undefined-local-variable-or-method-id-set/66502 "2016-11-18T07:58:38Z")

</div>

Hi I want the IMAP plugin to delete mail. I found undocumented settings delete =\> true expunge =\> true But then I get Plugin: "xxxxxx", password=\>, user=\>"xxxxxx", secure=\>false, type=\>"imap", delete=\>true, exp…

---

## [Зачем нужен Payload?](https://discuss.elastic.co/t/payload/183840)

<div class="topic-metadata">

**Author:** [@grefon](https://discuss.elastic.co/u/grefon)\
**Replies:** 5\
**Last updated:** [June 10, 2019, 6:13pm UTC](https://discuss.elastic.co/t/payload/183840 "2019-06-10T18:13:12Z")

</div>

В документации описан плагин "Delimited Payload Token Filter": https://www.elastic.co/guide/en/elasticsearch/reference/7.0/analysis-delimited-payload-tokenfilter.html Зачем он нужен и какая от него польза? Можно ли ка…

---

## [Max size for markdown widget?](https://discuss.elastic.co/t/max-size-for-markdown-widget/43715)

<div class="topic-metadata">

**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\
**Replies:** 5\
**Last updated:** [March 8, 2016, 5:45pm UTC](https://discuss.elastic.co/t/max-size-for-markdown-widget/43715 "2016-03-08T17:45:29Z")

</div>

Whenever I add a few too many links to a markdown widget I get the following fatal error: 10 $digest() iterations reached. Aborting! Is this expected behavior?

---

## [Multiple hosts per monitor confuses certificate validation since 7.17.0](https://discuss.elastic.co/t/multiple-hosts-per-monitor-confuses-certificate-validation-since-7-17-0/296062)

<div class="topic-metadata">

**Author:** [@PayBas](https://discuss.elastic.co/u/PayBas)\
**Replies:** 7\
**Last updated:** [February 9, 2022, 2:09pm UTC](https://discuss.elastic.co/t/multiple-hosts-per-monitor-confuses-certificate-validation-since-7-17-0/296062 "2022-02-09T14:09:46Z")

</div>

Since upgrading Heartbeat to 7.17.0 all my monitors have gone haywire. It seems that if you define multiple hosts per monitor like so: - type: http id: cicd name: CI/CD hosts: - https://a.corp.internal - …

---

## [How to save wildcard query as filter to pin in Kibana?](https://discuss.elastic.co/t/how-to-save-wildcard-query-as-filter-to-pin-in-kibana/119184)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [February 12, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-save-wildcard-query-as-filter-to-pin-in-kibana/119184 "2018-02-12T15:18:59Z")

</div>

Hi, I am using ELK GA5.0.0. I have a field field\_a in my index. I run the following query; field\_a:qwe\* My intention is to display entries having field\_a entries qwe001, qwe002, qwe003 etc. Also, I would like to displ…

---

## [Filebeat is not sending logs to ELastic search](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elastic-search/247745)

<div class="topic-metadata">

**Author:** [@Raman\_Sawhney](https://discuss.elastic.co/u/Raman_Sawhney)\
**Replies:** 8\
**Last updated:** [September 10, 2020, 10:44pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elastic-search/247745 "2020-09-10T22:44:02Z")

</div>

Hello Team, We have an issue where filebeat is not sending some logs to elasticsearch so we can see it on kibana. The error we have received for the same is as below. Entity Too Large\\u003c/title\\u003e\\u003c/head\\u003…

---

## [Filebeat -\> logstash -\> rabbitmq -\> logstash -\> elasticsearch](https://discuss.elastic.co/t/filebeat-logstash-rabbitmq-logstash-elasticsearch/197695)

<div class="topic-metadata">

**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\
**Replies:** 8\
**Last updated:** [September 2, 2019, 4:06pm UTC](https://discuss.elastic.co/t/filebeat-logstash-rabbitmq-logstash-elasticsearch/197695 "2019-09-02T16:06:55Z")

</div>

Hello All, I have a configuration described in the subject line and also here. Logs are shipped by filebeat to a logstash which then outputs it to a rabbitmq. All is well with this part, I can intercept messages in ra…

---

## [Problem with elastic output plugin](https://discuss.elastic.co/t/problem-with-elastic-output-plugin/113003)

<div class="topic-metadata">

**Author:** [@Matias\_Cabre](https://discuss.elastic.co/u/Matias_Cabre)\
**Replies:** 3\
**Last updated:** [December 28, 2017, 8:00pm UTC](https://discuss.elastic.co/t/problem-with-elastic-output-plugin/113003 "2017-12-28T20:00:15Z")

</div>

Hi guys, how are you ? I have a problem with logstash and elastic output plugin, I'm sending a file to this logstash conf with json records on it, and i want to put them in elastic, this is my conf input{ std…

---

## [":error\_message=\>"undefined method \`sanitized'"](https://discuss.elastic.co/t/error-message-undefined-method-sanitized/104088)

<div class="topic-metadata">

**Author:** [@hyderNBK117](https://discuss.elastic.co/u/hyderNBK117)\
**Replies:** 3\
**Last updated:** [October 31, 2017, 2:29pm UTC](https://discuss.elastic.co/t/error-message-undefined-method-sanitized/104088 "2017-10-31T14:29:50Z")

</div>

Hi, My Elastic Stack solution works fine until, seemingly at random, logstash instances starts to log this exception and stops inputting into the elastic search cluster. \[2017-10-16T13:00:57,215\]\[ERROR\]\[logstash.output…

---

## [Nested geo-point mapping and querying](https://discuss.elastic.co/t/nested-geo-point-mapping-and-querying/9392)

<div class="topic-metadata">

**Author:** [@fmarchand](https://discuss.elastic.co/u/fmarchand)\
**Replies:** 3\
**Last updated:** [October 17, 2012, 2:54pm UTC](https://discuss.elastic.co/t/nested-geo-point-mapping-and-querying/9392 "2012-10-17T14:54:48Z")

</div>

I have indexed document in my elastic search. Here is the mapping : { "offers": { "offer": { "properties": { "company": { "dynamic": "true", "properties": { "id": { "type": "string" }, "name": { "type": "st…

---

## [Round off a aggregated numeric value to few decimal places](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 5:49pm UTC](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316 "2021-10-21T17:49:31Z")

</div>

Hi Team, I am aggregating a numeric field which contains the response time data. When i try to find the avg value it is giving me a very long number(\>10 digitis after the decimal point). Could you please help in roundin…

---

## [Uncaught ChunkLoadError: Loading chunk 2 failed. (error: http://localhost:5601/nrd/9007199254740991/bundles/plugin/data/data.chunk.2.js)](https://discuss.elastic.co/t/uncaught-chunkloaderror-loading-chunk-2-failed-error-http-localhost-5601-nrd-9007199254740991-bundles-plugin-data-data-chunk-2-js/273720)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 2\
**Last updated:** [May 24, 2021, 12:41pm UTC](https://discuss.elastic.co/t/uncaught-chunkloaderror-loading-chunk-2-failed-error-http-localhost-5601-nrd-9007199254740991-bundles-plugin-data-data-chunk-2-js/273720 "2021-05-24T12:41:09Z")

</div>

Hi Team I am trying to run kibana development v7.10.2. But when navigating to http://localhost:5601/nrd/app/visualize#/edit/9886b410-4c8b-11e8-b3d7-01146121b73d?\_g=(filters:!(),refreshInterval:(pause:!t,value:0),time…

---

## [IIS Log Data - Aggregating multiple web requests up to individual page requests](https://discuss.elastic.co/t/iis-log-data-aggregating-multiple-web-requests-up-to-individual-page-requests/96504)

<div class="topic-metadata">

**Author:** [@Patrick\_Stevens](https://discuss.elastic.co/u/Patrick_Stevens)\
**Replies:** 2\
**Last updated:** [August 17, 2017, 12:12am UTC](https://discuss.elastic.co/t/iis-log-data-aggregating-multiple-web-requests-up-to-individual-page-requests/96504 "2017-08-17T00:12:28Z")

</div>

Hi all, I’m working with a web application where each page request by a user can result in 5+ web requests (each with its own line in a IIS log) to load all the components of the page. Therefore to get the actual page lo…

---

## [Timelion graph on integer field values](https://discuss.elastic.co/t/timelion-graph-on-integer-field-values/46522)

<div class="topic-metadata">

**Author:** [@vikalp](https://discuss.elastic.co/u/vikalp)\
**Replies:** 2\
**Last updated:** [April 8, 2016, 4:44am UTC](https://discuss.elastic.co/t/timelion-graph-on-integer-field-values/46522 "2016-04-08T04:44:13Z")

</div>

Hi, I am saving aggregated data to a different index in ES for comparison on old stats. I am able to draw line chart in kibana by avg ( for a integer field ) at y axis , now i want to compare it with say last wee…

---

## [Jumping between dashboards via markdown (preserve filters)](https://discuss.elastic.co/t/jumping-between-dashboards-via-markdown-preserve-filters/40616)

<div class="topic-metadata">

**Author:** [@Krdoor](https://discuss.elastic.co/u/Krdoor)\
**Replies:** 2\
**Last updated:** [February 2, 2016, 9:59am UTC](https://discuss.elastic.co/t/jumping-between-dashboards-via-markdown-preserve-filters/40616 "2016-02-02T09:59:58Z")

</div>

Hello community, I have a question regarding jumping between dashboards via the markdown widget. I created lots of nice dashboards for our company in kibana, and on every dashboards I have the same navigation markdown …

---

## [Issue with output elasticsearch running on ECK "HostUnreachableError"](https://discuss.elastic.co/t/issue-with-output-elasticsearch-running-on-eck-hostunreachableerror/223109)

<div class="topic-metadata">

**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\
**Replies:** 4\
**Last updated:** [March 17, 2020, 4:41pm UTC](https://discuss.elastic.co/t/issue-with-output-elasticsearch-running-on-eck-hostunreachableerror/223109 "2020-03-17T16:41:08Z")

</div>

Hi there ! So first of all, thank your for reading my post. I have already browsed the existing topics on discuss about that kind of issue and that is what I have tried without any success: Setup ssl\_certificate\_veri…

---

## [Count occurences of a field excludig a pattern](https://discuss.elastic.co/t/count-occurences-of-a-field-excludig-a-pattern/65054)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 4\
**Last updated:** [November 4, 2016, 9:03pm UTC](https://discuss.elastic.co/t/count-occurences-of-a-field-excludig-a-pattern/65054 "2016-11-04T21:03:24Z")

</div>

Hi, having some occurences of a field like this (it's part of a SIP message): \<sip:john.doe@kibana.co\>;tag=446463957-1474248204740 \<sip:mark.grey@elastic.co\>;tag=48768q74638634376 \<sip:rose.mary@logstash.co\>;tag=098974…

---

## [Snapshot/restore metadata file access](https://discuss.elastic.co/t/snapshot-restore-metadata-file-access/37581)

<div class="topic-metadata">

**Author:** [@Swedeski](https://discuss.elastic.co/u/Swedeski)\
**Replies:** 4\
**Last updated:** [December 21, 2015, 12:26pm UTC](https://discuss.elastic.co/t/snapshot-restore-metadata-file-access/37581 "2015-12-21T12:26:15Z")

</div>

Hello - I have two clusters set up with dedicated master nodes and data nodes. With cluster A running in one data center and cluster B running in another data center. There is NAS storage mounted to the master and da…

---

## [ES 7.3 - Delete by Query - Deletes more than match clause](https://discuss.elastic.co/t/es-7-3-delete-by-query-deletes-more-than-match-clause/217544)

<div class="topic-metadata">

**Author:** [@u3432](https://discuss.elastic.co/u/u3432)\
**Replies:** 6\
**Last updated:** [February 2, 2020, 11:48pm UTC](https://discuss.elastic.co/t/es-7-3-delete-by-query-deletes-more-than-match-clause/217544 "2020-02-02T23:48:39Z")

</div>

Hi all, I am using Elastic Stack to process some logs. There are some logs I dont need so decided to delete them. I deleted them using delete by query and setting the match for log.file.path. Here is the curl setup I us…

---

## [Interval timestamp visualization vertical histogram](https://discuss.elastic.co/t/interval-timestamp-visualization-vertical-histogram/191404)

<div class="topic-metadata">

**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\
**Replies:** 6\
**Last updated:** [July 23, 2019, 2:57pm UTC](https://discuss.elastic.co/t/interval-timestamp-visualization-vertical-histogram/191404 "2019-07-23T14:57:03Z")

</div>

Hello, I have an event\_count field which is NUMBER:int, and I want to see it for a period of 1 week for example. But I want to use an interval of eight hours which is easy at this point with the interval field, but not…

---

## [使用logstash5.0.1启动时kafka-input报错](https://discuss.elastic.co/t/logstash5-0-1-kafka-input/67297)

<div class="topic-metadata">

**Author:** [@forsaken527](https://discuss.elastic.co/u/forsaken527)\
**Replies:** 0\
**Last updated:** [November 28, 2016, 2:55am UTC](https://discuss.elastic.co/t/logstash5-0-1-kafka-input/67297 "2016-11-28T02:55:00Z")

</div>

kafka\_0.10.0.1 logstash-5.0.1 java version "1.8.0\_111" os centos-6.5 \[2016-11-28T10:28:38,662\]\[INFO \]\[org.apache.kafka.common.utils.AppInfoParser\] Kafka version : 0.10.0.1 \[2016-11-28T10:28:38,663\]\[INFO \]\[org.apache.ka…

---

## [High Seach/Query Latency during Indexing Jobs](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615)

<div class="topic-metadata">

**Author:** [@vishnu\_teja](https://discuss.elastic.co/u/vishnu_teja)\
**Replies:** 7\
**Last updated:** [December 8, 2022, 4:47am UTC](https://discuss.elastic.co/t/high-seach-query-latency-during-indexing-jobs/320615 "2022-12-08T04:47:07Z")

</div>

Hi Everyone, We are recently facing issues with high latency in our Elastic Search Cluster, especially during Ingestion/Indexing in cluster. We run a batchJob which calls the update API of ES, so it will either update t…

---

## [Unable to connect | 502 Bad Gateway on Enterprise Search](https://discuss.elastic.co/t/unable-to-connect-502-bad-gateway-on-enterprise-search/303355)

<div class="topic-metadata">

**Author:** [@auasad](https://discuss.elastic.co/u/auasad)\
**Replies:** 1\
**Last updated:** [May 3, 2022, 6:30pm UTC](https://discuss.elastic.co/t/unable-to-connect-502-bad-gateway-on-enterprise-search/303355 "2022-05-03T18:30:42Z")

</div>

Hello community, this morning I was trying to setup Enterprise Search(Appsearch) with docker, following the URL, https://www.elastic.co/guide/en/enterprise-search/8.1/docker.html, nothing changed just copied and pasted t…

---

## [Not able see data in Kibana? Is Logstash pushing to ES](https://discuss.elastic.co/t/not-able-see-data-in-kibana-is-logstash-pushing-to-es/130534)

<div class="topic-metadata">

**Author:** [@kevivek](https://discuss.elastic.co/u/kevivek)\
**Replies:** 7\
**Last updated:** [May 4, 2018, 3:36pm UTC](https://discuss.elastic.co/t/not-able-see-data-in-kibana-is-logstash-pushing-to-es/130534 "2018-05-04T15:36:27Z")

</div>

I am new to ELK and working on the whole stack Below are my configs: vivsingh@blr-lvg2e:/etc/logstash/conf.d$ ls filter.conf input.conf output.conf vivsingh@blr-lvg2e:/etc/logstash/conf.d$ cat input.conf output.con…

---

## [Calculate time length between two logs using timestamp?](https://discuss.elastic.co/t/calculate-time-length-between-two-logs-using-timestamp/24816)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 1\
**Last updated:** [July 2, 2015, 11:31pm UTC](https://discuss.elastic.co/t/calculate-time-length-between-two-logs-using-timestamp/24816 "2015-07-02T23:31:41Z")

</div>

Hi!!! I wonder does Logstash provides option to calculate time length between two logs using timestamp? Something like this log2.timestamp - log1.timestamp.

---

## [Byzantium OPNSense beats install](https://discuss.elastic.co/t/byzantium-opnsense-beats-install/358568)

<div class="topic-metadata">

**Author:** [@Ali\_A](https://discuss.elastic.co/u/Ali_A)\
**Replies:** 3\
**Last updated:** [May 18, 2024, 9:12pm UTC](https://discuss.elastic.co/t/byzantium-opnsense-beats-install/358568 "2024-05-18T21:12:10Z")

</div>

I am installing beats through the documentation on gitlab kali purple documentation wiki beats dependencies, everything is working well till the installation of filebeat, as mentioned in the documentation after the make …

---

## [Multiline POSIX regexp pattern - mindmelting not working java stack trace pattern](https://discuss.elastic.co/t/multiline-posix-regexp-pattern-mindmelting-not-working-java-stack-trace-pattern/46686)

<div class="topic-metadata">

**Author:** [@dsa](https://discuss.elastic.co/u/dsa)\
**Replies:** 5\
**Last updated:** [April 8, 2016, 7:39am UTC](https://discuss.elastic.co/t/multiline-posix-regexp-pattern-mindmelting-not-working-java-stack-trace-pattern/46686 "2016-04-08T07:39:50Z")

</div>

Hey Folks, im currently on the horizon of make a switch from: logstash 1.4.x using lumberjack as shipper =\> logstash 2.x and filebeat as shipper so i try to catch JAVA Stack traces as one message with filebeat mult…

[Previous page](https://discuss.elastic.co/top.md?page=931&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=933&per_page=50&period=all)
