# Top

**URL:** https://discuss.elastic.co/top.md?page=933&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 934

---

## [Are we about to violate the Elastic License 2.0？](https://discuss.elastic.co/t/are-we-about-to-violate-the-elastic-license-2-0/348488)

<div class="topic-metadata">

**Author:** [@Chengbo\_He](https://discuss.elastic.co/u/Chengbo_He)\
**Replies:** 2\
**Last updated:** [December 3, 2023, 2:37pm UTC](https://discuss.elastic.co/t/are-we-about-to-violate-the-elastic-license-2-0/348488 "2023-12-03T14:37:05Z")

</div>

Our team plans to develop a product that is similar to a security situational awareness platform, and we will sell this product to customers as a commodity. However, customers cannot directly interact with Elasticsearch.…

---

## [NEST (C#) How to disable any automatic mapping and ensure only manually coded fields added to index](https://discuss.elastic.co/t/nest-c-how-to-disable-any-automatic-mapping-and-ensure-only-manually-coded-fields-added-to-index/145078)

<div class="topic-metadata">

**Author:** [@ivankarpey](https://discuss.elastic.co/u/ivankarpey)\
**Replies:** 3\
**Last updated:** [August 27, 2018, 11:44am UTC](https://discuss.elastic.co/t/nest-c-how-to-disable-any-automatic-mapping-and-ensure-only-manually-coded-fields-added-to-index/145078 "2018-08-27T11:44:45Z")

</div>

I have a mapping with fluent syntaxis where I carefully set only those fields I need. However when I add document to those index, i still see all fields from the object except thouse, who I manually add to ingore. I do…

---

## [Divide Data and fire query in elasticsearch](https://discuss.elastic.co/t/divide-data-and-fire-query-in-elasticsearch/116231)

<div class="topic-metadata">

**Author:** [@Devanshu\_Sharma](https://discuss.elastic.co/u/Devanshu_Sharma)\
**Replies:** 3\
**Last updated:** [January 22, 2018, 12:53pm UTC](https://discuss.elastic.co/t/divide-data-and-fire-query-in-elasticsearch/116231 "2018-01-22T12:53:39Z")

</div>

HI, I have to two index name is index1 or index2. Both one index1 or index2 have 1000000(10 lac.) data. I want to divide 100000(1 lac.) any one index data and apply query index1 column1 or index2 column2 both to merge…

---

## [Tagging and tracking clarifications](https://discuss.elastic.co/t/tagging-and-tracking-clarifications/112497)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 3\
**Last updated:** [December 19, 2017, 8:37pm UTC](https://discuss.elastic.co/t/tagging-and-tracking-clarifications/112497 "2017-12-19T20:37:32Z")

</div>

G'Day @system, I had a few questions about tagging, which we want to enable, and how it works with tracking. I found this older thread which explains some of it, but I was wondering if you can track a specific tag in a s…

---

## [Kibana exe file](https://discuss.elastic.co/t/kibana-exe-file/68066)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 3\
**Last updated:** [December 5, 2016, 8:58pm UTC](https://discuss.elastic.co/t/kibana-exe-file/68066 "2016-12-05T20:58:46Z")

</div>

I installed and run kibana : kibana-4.6.1-1.x86\_64 To run the kibana I am using the command: sudo systemctl start kibana.service But I am getting the error: Dec 5 17:43:41 eaasrt systemd: Failed at step EXEC spawni…

---

## [Type usage in libbeat/outputs/elasticsearch/client causes issue on OpenSearch 2.0+ engine](https://discuss.elastic.co/t/type-usage-in-libbeat-outputs-elasticsearch-client-causes-issue-on-opensearch-2-0-engine/306166)

<div class="topic-metadata">

**Author:** [@Suraj\_Singh](https://discuss.elastic.co/u/Suraj_Singh)\
**Replies:** 2\
**Last updated:** [June 1, 2022, 9:40pm UTC](https://discuss.elastic.co/t/type-usage-in-libbeat-outputs-elasticsearch-client-causes-issue-on-opensearch-2-0-engine/306166 "2022-06-01T21:40:44Z")

</div>

With \_type removal in OpenSearch 2.0+ (previously deprecated in Elasticsearch 7.x); beat still uses \_type as DocType while building BulkRequest meta data; resulting in illegal\_argument\_exception from OpenSearch engine. E…

---

## [How can I set the option for ls.cgroup.cpuacct.path.override and ls.cgroup.cpu.path.override in Docker?](https://discuss.elastic.co/t/how-can-i-set-the-option-for-ls-cgroup-cpuacct-path-override-and-ls-cgroup-cpu-path-override-in-docker/158612)

<div class="topic-metadata">

**Author:** [@bluecoffee](https://discuss.elastic.co/u/bluecoffee)\
**Replies:** 2\
**Last updated:** [November 29, 2018, 10:19am UTC](https://discuss.elastic.co/t/how-can-i-set-the-option-for-ls-cgroup-cpuacct-path-override-and-ls-cgroup-cpu-path-override-in-docker/158612 "2018-11-29T10:19:00Z")

</div>

Hi! I'm running Logstash as a docker container. In the debug logs, I get very frequent message like this; logstash\_1 | \[2018-11-28T15:30:32,132\]\[DEBUG\]\[logstash.instrument.periodicpoller.cgroup.cpuacctresource\] File …

---

## [Visualize: Request Timeout after 30000ms - Last 1 Year as Time Range](https://discuss.elastic.co/t/visualize-request-timeout-after-30000ms-last-1-year-as-time-range/103169)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 2\
**Last updated:** [October 11, 2017, 3:31pm UTC](https://discuss.elastic.co/t/visualize-request-timeout-after-30000ms-last-1-year-as-time-range/103169 "2017-10-11T15:31:42Z")

</div>

While using Kibana, I select Last 1 year as Time Range and I'm getting following message: Visualize: Request Timeout after 30000ms I tail'ed elasticsearch logs, however there is no indication of any issue with data (…

---

## [Import Dashboard: fail to set the mapping](https://discuss.elastic.co/t/import-dashboard-fail-to-set-the-mapping/75397)

<div class="topic-metadata">

**Author:** [@JB\_ELK](https://discuss.elastic.co/u/JB_ELK)\
**Replies:** 2\
**Last updated:** [March 12, 2017, 11:36pm UTC](https://discuss.elastic.co/t/import-dashboard-fail-to-set-the-mapping/75397 "2017-03-12T23:36:12Z")

</div>

I have an endpoint host OS running Winlogbeat and a VMworkstation hosting my ELK stack. I am testing and getting the dashboards is the last step I have. Need help with the script import. PS C:\\Program Files\\winlogbea…

---

## [Convert unix timestamp (seconds) to java (milliseconds)](https://discuss.elastic.co/t/convert-unix-timestamp-seconds-to-java-milliseconds/21070)

<div class="topic-metadata">

**Author:** [@nwood888](https://discuss.elastic.co/u/nwood888)\
**Replies:** 2\
**Last updated:** [December 28, 2014, 12:41am UTC](https://discuss.elastic.co/t/convert-unix-timestamp-seconds-to-java-milliseconds/21070 "2014-12-28T00:41:13Z")

</div>

Greetings, My primary data store has a date\_created field stored as a unix timestamp. I've verified that if I multiply that value by 1000 and then index it, Elasticsearch correctly picks the field up as a date. …

---

## [Problem with float in range facet](https://discuss.elastic.co/t/problem-with-float-in-range-facet/15240)

<div class="topic-metadata">

**Author:** [@Jettro\_Coenradie](https://discuss.elastic.co/u/Jettro_Coenradie)\
**Replies:** 2\
**Last updated:** [January 16, 2014, 7:32am UTC](https://discuss.elastic.co/t/problem-with-float-in-range-facet/15240 "2014-01-16T07:32:43Z")

</div>

Hi, I have a float field that I want to use in a range facet. I give one range to the facet like the following query. { "query": { "matchAll": {} }, "facets": { "imageSize": { "range": { …

---

## [K8s Elasticsearch with filebeat is keeping 'not ready' after rebooting](https://discuss.elastic.co/t/k8s-elasticsearch-with-filebeat-is-keeping-not-ready-after-rebooting/253376)

<div class="topic-metadata">

**Author:** [@klaude416](https://discuss.elastic.co/u/klaude416)\
**Replies:** 1\
**Last updated:** [October 28, 2020, 12:42am UTC](https://discuss.elastic.co/t/k8s-elasticsearch-with-filebeat-is-keeping-not-ready-after-rebooting/253376 "2020-10-28T00:42:41Z")

</div>

I'm going through a not very understandable situation. Environment Two dedicated nodes with azure centos 8.2 (2vcpu, 16G ram), not AKS 1 master node, 1 worker node. kubernetes v1.19.3 helm v2.16.12 Helm charts Elasti…

---

## [Java High level client Api Date range](https://discuss.elastic.co/t/java-high-level-client-api-date-range/173472)

<div class="topic-metadata">

**Author:** [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Replies:** 1\
**Last updated:** [March 22, 2019, 11:02am UTC](https://discuss.elastic.co/t/java-high-level-client-api-date-range/173472 "2019-03-22T11:02:11Z")

</div>

I using java High level client Api In that i using range query method to fetch date range data in that i need to normal machine time as input and it need to convert it to json date to fetch data for that what i need to …

---

## [Filebeat output to AWS Kinesis Stream or Firehose](https://discuss.elastic.co/t/filebeat-output-to-aws-kinesis-stream-or-firehose/151005)

<div class="topic-metadata">

**Author:** [@John-Pierre\_Atallah](https://discuss.elastic.co/u/John-Pierre_Atallah)\
**Replies:** 1\
**Last updated:** [October 4, 2018, 9:36am UTC](https://discuss.elastic.co/t/filebeat-output-to-aws-kinesis-stream-or-firehose/151005 "2018-10-04T09:36:49Z")

</div>

Hello friends, I'm looking to utilize a complete AWS services infrastructure to send application logs into AWS's ES domain service. I'm currently using filebeats. However, I don't see the ability to specify a firehose …

---

## [Unable to join the node in a cluster, elasticsearch 8.2](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222)

<div class="topic-metadata">

**Author:** [@Aman\_Kasot](https://discuss.elastic.co/u/Aman_Kasot)\
**Replies:** 4\
**Last updated:** [June 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222 "2022-06-17T15:25:35Z")

</div>

closing connection Netty4TcpChannel{localAddress=/xx.xx.xx.xx:9300, remoteAddress=/xx.xx.xx.xx:port, profile=default} \[2022-06-15T11:51:04,468\]\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[es-master-1\] client did not …

---

## [Error while using amazon\_es](https://discuss.elastic.co/t/error-while-using-amazon-es/179294)

<div class="topic-metadata">

**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\
**Replies:** 4\
**Last updated:** [May 7, 2019, 6:16pm UTC](https://discuss.elastic.co/t/error-while-using-amazon-es/179294 "2019-05-07T18:16:15Z")

</div>

I am running logstash on RHEL with amazon\_es output plugin to send data to aws elastic search but getting this output and i don't see index in kibana. how do i make sure everything is working fine? WARNING: Could not f…

---

## [Default and Marvel Index are throwing Java errors about @timestamp not existing!](https://discuss.elastic.co/t/default-and-marvel-index-are-throwing-java-errors-about-timestamp-not-existing/54591)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [July 5, 2016, 11:53am UTC](https://discuss.elastic.co/t/default-and-marvel-index-are-throwing-java-errors-about-timestamp-not-existing/54591 "2016-07-05T11:53:20Z")

</div>

HI. For the last couple of days both my default and Marvel Indexes are very slow to bring up data (default index takes 1.5minutes to show data initially becuase that is what I have set my Kibana request timeout value to …

---

## [Lumberjack Input Ceasing to Function](https://discuss.elastic.co/t/lumberjack-input-ceasing-to-function/27517)

<div class="topic-metadata">

**Author:** [@davisv](https://discuss.elastic.co/u/davisv)\
**Replies:** 4\
**Last updated:** [October 2, 2015, 5:00pm UTC](https://discuss.elastic.co/t/lumberjack-input-ceasing-to-function/27517 "2015-10-02T17:00:30Z")

</div>

Hello all! I'm running several logstash-forwarder instances on remote servers that connect back to a central ELK machine. Events from all logstash-forwarder instances process fine for the majority of the time but seemi…

---

## [How can I add a open source (free) sentiment filter](https://discuss.elastic.co/t/how-can-i-add-a-open-source-free-sentiment-filter/109684)

<div class="topic-metadata">

**Author:** [@bsongcc](https://discuss.elastic.co/u/bsongcc)\
**Replies:** 6\
**Last updated:** [December 24, 2017, 4:59pm UTC](https://discuss.elastic.co/t/how-can-i-add-a-open-source-free-sentiment-filter/109684 "2017-12-24T16:59:42Z")

</div>

Anybody know if I there's a free/open source sentiment analysis API available for elasticsearch? The Alchemy API used to be the one to go to, but now it's bought by IBM and not in use anymore. Please suggest, thanks!

---

## [How to adjust threadpools for elastic search clusters running on ECE](https://discuss.elastic.co/t/how-to-adjust-threadpools-for-elastic-search-clusters-running-on-ece/137468)

<div class="topic-metadata">

**Author:** [@rkalluri](https://discuss.elastic.co/u/rkalluri)\
**Replies:** 2\
**Last updated:** [July 4, 2018, 10:11pm UTC](https://discuss.elastic.co/t/how-to-adjust-threadpools-for-elastic-search-clusters-running-on-ece/137468 "2018-07-04T22:11:27Z")

</div>

How do I configure settings like below for ece managed clusters. thread\_pool.bulk.queue\_size: 100 I am using spark to ingest data into Elastic via the es-spark connector and am running into issues where I am seeing rej…

---

## [Kibana 6.0.0 Json input not working](https://discuss.elastic.co/t/kibana-6-0-0-json-input-not-working/112619)

<div class="topic-metadata">

**Author:** [@gasmi](https://discuss.elastic.co/u/gasmi)\
**Replies:** 2\
**Last updated:** [December 20, 2017, 5:48pm UTC](https://discuss.elastic.co/t/kibana-6-0-0-json-input-not-working/112619 "2017-12-20T17:48:26Z")

</div>

I want to add a line visualization that contains the number of Errors graph. I am trying to use the aggregation "count" with a Json input to count only errors. But this is not working. { "query": { "match": { …

---

## [How to create filebeat index pattern in kibana?](https://discuss.elastic.co/t/how-to-create-filebeat-index-pattern-in-kibana/71172)

<div class="topic-metadata">

**Author:** [@meshsf](https://discuss.elastic.co/u/meshsf)\
**Replies:** 2\
**Last updated:** [January 11, 2017, 8:55am UTC](https://discuss.elastic.co/t/how-to-create-filebeat-index-pattern-in-kibana/71172 "2017-01-11T08:55:52Z")

</div>

I'm currently using ELK stack with filebeat. I'm able to map the apache log file contents to Elasticsearch server in json format. Now I would like to know how to create a index pattern for filebeat in kibana? Followed be…

---

## [Issue with setting up email configuration with Watcher](https://discuss.elastic.co/t/issue-with-setting-up-email-configuration-with-watcher/2406)

<div class="topic-metadata">

**Author:** [@Tanmay\_Deshpande](https://discuss.elastic.co/u/Tanmay_Deshpande)\
**Replies:** 2\
**Last updated:** [June 11, 2015, 11:44am UTC](https://discuss.elastic.co/t/issue-with-setting-up-email-configuration-with-watcher/2406 "2015-06-11T11:44:14Z")

</div>

I am trying Watcher Beta 2 and trying to setup email account which can be used to send email notifications. For that I have selected gmail profile, and have added following things in elasticsearch.yml watcher.actions.e…

---

## [The differences between query and filter?](https://discuss.elastic.co/t/the-differences-between-query-and-filter/27491)

<div class="topic-metadata">

**Author:** [@KennFalcon](https://discuss.elastic.co/u/KennFalcon)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 10:51am UTC](https://discuss.elastic.co/t/the-differences-between-query-and-filter/27491 "2015-08-17T10:51:55Z")

</div>

There are some same points between filter and query when I use Java api. What are the differences between them? When we send the same request, which one can return the response faster?

---

## [Filebeat: large json log will case OOM killed by k8s](https://discuss.elastic.co/t/filebeat-large-json-log-will-case-oom-killed-by-k8s/140240)

<div class="topic-metadata">

**Author:** [@wklken](https://discuss.elastic.co/u/wklken)\
**Replies:** 3\
**Last updated:** [July 27, 2018, 3:13am UTC](https://discuss.elastic.co/t/filebeat-large-json-log-will-case-oom-killed-by-k8s/140240 "2018-07-27T03:13:47Z")

</div>

Hi, Currently, I met a problem with the json log with max\_bytes limit. filebeat.yml # 100KB max\_bytes: 102400 json.message\_key: message json.add\_error\_key: true then I run it on k8s with memory limit…

---

## [Duplicate entries in elasticsearch with fingerprint and uuid](https://discuss.elastic.co/t/duplicate-entries-in-elasticsearch-with-fingerprint-and-uuid/135909)

<div class="topic-metadata">

**Author:** [@christian\_ha](https://discuss.elastic.co/u/christian_ha)\
**Replies:** 3\
**Last updated:** [June 14, 2018, 6:42pm UTC](https://discuss.elastic.co/t/duplicate-entries-in-elasticsearch-with-fingerprint-and-uuid/135909 "2018-06-14T18:42:54Z")

</div>

Hello together, i try to send syslog data from rsyslod via json to logstash and this is working nearly as expected. Unfortunately i can see every event twice in elasticsearch. First i double checked if logstash send th…

---

## [Keyword Query Does not Work](https://discuss.elastic.co/t/keyword-query-does-not-work/101687)

<div class="topic-metadata">

**Author:** [@Ibrahim\_ozgon](https://discuss.elastic.co/u/Ibrahim_ozgon)\
**Replies:** 3\
**Last updated:** [September 26, 2017, 11:34am UTC](https://discuss.elastic.co/t/keyword-query-does-not-work/101687 "2017-09-26T11:34:39Z")

</div>

Hello everyone, I have a problem with keyword query. I want to filter categoryProperties by key and value. key is"color" and value contains "mavi" But it gives me document it contains key is "color" and value contain…

---

## [Kibana chkconfig startup error](https://discuss.elastic.co/t/kibana-chkconfig-startup-error/75892)

<div class="topic-metadata">

**Author:** [@deepunaren](https://discuss.elastic.co/u/deepunaren)\
**Replies:** 3\
**Last updated:** [February 28, 2017, 5:04pm UTC](https://discuss.elastic.co/t/kibana-chkconfig-startup-error/75892 "2017-02-28T17:04:19Z")

</div>

kibana-5.2.1-linux-x86\_64\]# chkconfig --add kibana kibana-5.2.1-linux-x86\_64\]# service kibana start which: no node in (/sbin:/usr/sbin:/bin:/usr/bin) unable to find usable node.js executable. if I run ./kibana it runs …

---

## [Illegal latitude value 99.8569](https://discuss.elastic.co/t/illegal-latitude-value-99-8569/3806)

<div class="topic-metadata">

**Author:** [@jalano](https://discuss.elastic.co/u/jalano)\
**Replies:** 3\
**Last updated:** [January 19, 2011, 8:52pm UTC](https://discuss.elastic.co/t/illegal-latitude-value-99-8569/3806 "2011-01-19T20:52:31Z")

</div>

I'm getting these errors in my logs, and I don't think I'm sending any bad latitude values; is this a symptom of something else that might be wrong? The value is always the same - 99.8569. \[2011-01-18 15:55:02,317\]\[E…

---

## [Timeout exception when connecting to the Elastic search deployed in K8s cluster](https://discuss.elastic.co/t/timeout-exception-when-connecting-to-the-elastic-search-deployed-in-k8s-cluster/243498)

<div class="topic-metadata">

**Author:** [@vanikr](https://discuss.elastic.co/u/vanikr)\
**Replies:** 5\
**Last updated:** [August 3, 2020, 11:12am UTC](https://discuss.elastic.co/t/timeout-exception-when-connecting-to-the-elastic-search-deployed-in-k8s-cluster/243498 "2020-08-03T11:12:52Z")

</div>

Error 'Exception in thread "main" java.net.ConnectException: Timeout connecting to \[/IP:80\] at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:823) at org.elasticsearch.client.RestClient.perfor…

---

## [Passing data into KIbana iframe state and accessing it via a plugin](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768)

<div class="topic-metadata">

**Author:** [@gurtgurt](https://discuss.elastic.co/u/gurtgurt)\
**Replies:** 5\
**Last updated:** [June 15, 2020, 12:35pm UTC](https://discuss.elastic.co/t/passing-data-into-kibana-iframe-state-and-accessing-it-via-a-plugin/235768 "2020-06-15T12:35:20Z")

</div>

Hi I've got a pretty basic Kibana plugin that is running on the client side (no server side logic), and I have a Kibana visualization inside of an iframe. In the parent, I have some values that I would like the plugin t…

---

## [Security Analytics Recipes](https://discuss.elastic.co/t/security-analytics-recipes/93591)

<div class="topic-metadata">

**Author:** [@senthil\_blue](https://discuss.elastic.co/u/senthil_blue)\
**Replies:** 5\
**Last updated:** [July 28, 2017, 9:50am UTC](https://discuss.elastic.co/t/security-analytics-recipes/93591 "2017-07-28T09:50:40Z")

</div>

Hi, I am trying to explore the example https://github.com/elastic/examples/blob/master/Machine%20Learning/Security%20Analytics%20Recipes/dns\_data\_exfiltration/EXAMPLE.md for Anomaly detection. However, I can't seem to …

---

## [Permissive mode for Shield?](https://discuss.elastic.co/t/permissive-mode-for-shield/1643)

<div class="topic-metadata">

**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\
**Replies:** 5\
**Last updated:** [June 5, 2015, 9:18am UTC](https://discuss.elastic.co/t/permissive-mode-for-shield/1643 "2015-06-05T09:18:55Z")

</div>

Hi, this is more of a feature request. When evaluating Shield in a setup that's already being used, it would be extremely helpful to be able to disable it, but still see what would be blocked if it was enabled. Like the …

---

## [ES container restart continously \[ error reading control group stats\]](https://discuss.elastic.co/t/es-container-restart-continously-error-reading-control-group-stats/205684)

<div class="topic-metadata">

**Author:** [@mauog](https://discuss.elastic.co/u/mauog)\
**Replies:** 0\
**Last updated:** [October 29, 2019, 1:46pm UTC](https://discuss.elastic.co/t/es-container-restart-continously-error-reading-control-group-stats/205684 "2019-10-29T13:46:39Z")

</div>

Hello, I got an error running a docker container on a Centos Atomic with the image: elasticsearch:7.4.0 the error is: elasticsearch | 13:30:42.549 \[main\] INFO org.elasticsearch.plugins.PluginsService - no plugins …

---

## [Unable to create actions client because the Encrypted Saved Objects plugin is missing encryption key](https://discuss.elastic.co/t/unable-to-create-actions-client-because-the-encrypted-saved-objects-plugin-is-missing-encryption-key/378530)

<div class="topic-metadata">

**Author:** [@felixwong](https://discuss.elastic.co/u/felixwong)\
**Replies:** 4\
**Last updated:** [May 26, 2025, 10:30am UTC](https://discuss.elastic.co/t/unable-to-create-actions-client-because-the-encrypted-saved-objects-plugin-is-missing-encryption-key/378530 "2025-05-26T10:30:58Z")

</div>

This is my first time to launch elastic security . There is a pop up showed Unable to create actions client because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.e…

---

## [Canvas time formats](https://discuss.elastic.co/t/canvas-time-formats/202123)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 4\
**Last updated:** [October 9, 2019, 12:08pm UTC](https://discuss.elastic.co/t/canvas-time-formats/202123 "2019-10-09T12:08:12Z")

</div>

I'm having trouble with some time formats. The time, I collect from ES ("timetal") is in UTC+02, but when I try to format it to my local time, it seems to subtract 2 hours instead of adding them. My SQL query is as fol…

---

## [Have kibana get input from 2 elasticsearch clusters with same indexes](https://discuss.elastic.co/t/have-kibana-get-input-from-2-elasticsearch-clusters-with-same-indexes/130392)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 4\
**Last updated:** [May 11, 2018, 4:00pm UTC](https://discuss.elastic.co/t/have-kibana-get-input-from-2-elasticsearch-clusters-with-same-indexes/130392 "2018-05-11T16:00:03Z")

</div>

Hi, After a successful poc, We want to clusterize our elasticsearch and make ik georedundant. The servers we are getting info from are divided over 2 locations. What I would like to achieve is that , just like now, all …

---

## [Environment filter is not working](https://discuss.elastic.co/t/environment-filter-is-not-working/42040)

<div class="topic-metadata">

**Author:** [@gaurav1424](https://discuss.elastic.co/u/gaurav1424)\
**Replies:** 4\
**Last updated:** [February 18, 2016, 7:01am UTC](https://discuss.elastic.co/t/environment-filter-is-not-working/42040 "2016-02-18T07:01:35Z")

</div>

here is example: My input file : filter { environment { add\_metadata\_from\_env =\> {"region" =\> "REGION\_ENV"} add\_field =\> \["my\_env", "%{\[@metadata\]\[region\]}"\] } } bash-3.2$ echo $REGION\_ENV amer bash-3.2$ My output…

---

## [Elasticsearch 6.3.1 xpack password enabling shows error](https://discuss.elastic.co/t/elasticsearch-6-3-1-xpack-password-enabling-shows-error/140999)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 1\
**Last updated:** [July 21, 2018, 3:55pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-1-xpack-password-enabling-shows-error/140999 "2018-07-21T15:55:10Z")

</div>

My ELK 6.3.1 working well logs indexed to elasticsearch and these logs are vailable in kibana. Then i am added this line in elasticsearch.yml as last line xpack.security.enabled: true Then tried to create passwords f…

---

## [Elastic Search - Error Detail - Only one usage of each socket address (protocol/network address/port) is normally permitted Error](https://discuss.elastic.co/t/elastic-search-error-detail-only-one-usage-of-each-socket-address-protocol-network-address-port-is-normally-permitted-error/323792)

<div class="topic-metadata">

**Author:** [@ankurpatel](https://discuss.elastic.co/u/ankurpatel)\
**Replies:** 2\
**Last updated:** [January 25, 2023, 5:07am UTC](https://discuss.elastic.co/t/elastic-search-error-detail-only-one-usage-of-each-socket-address-protocol-network-address-port-is-normally-permitted-error/323792 "2023-01-25T05:07:31Z")

</div>

We have got below error in API which access data from Elastic Search. Error generated when web site traffic is high. We have configured Elastic Search on Single Node. We developed API(.NET core) by using NEST (7.15.1 lib…

---

## [Clustered elasticsearch setup (two master nodes)](https://discuss.elastic.co/t/clustered-elasticsearch-setup-two-master-nodes/250383)

<div class="topic-metadata">

**Author:** [@yisaac](https://discuss.elastic.co/u/yisaac)\
**Replies:** 2\
**Last updated:** [October 1, 2020, 1:37am UTC](https://discuss.elastic.co/t/clustered-elasticsearch-setup-two-master-nodes/250383 "2020-10-01T01:37:44Z")

</div>

Hi, We are currently setting up an environment with two elasticsearch instances (clustered servers). Since it's clustered, we need to make sure that data (indexes) are synched between the two instances. We do not have…

---

## [Kibana template dashboards/visualizations](https://discuss.elastic.co/t/kibana-template-dashboards-visualizations/94361)

<div class="topic-metadata">

**Author:** [@pri](https://discuss.elastic.co/u/pri)\
**Replies:** 2\
**Last updated:** [July 24, 2017, 7:18pm UTC](https://discuss.elastic.co/t/kibana-template-dashboards-visualizations/94361 "2017-07-24T19:18:26Z")

</div>

Hi, We have an Elasticsearch index that has data for multiple teams and organizations. When we set-up visualizations, we write filters for filtering by team and org. And then set-up a team level dashboard. The dashboa…

---

## [Error related to ［default\_local\]](https://discuss.elastic.co/t/error-related-to-default-local/72357)

<div class="topic-metadata">

**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Replies:** 2\
**Last updated:** [January 21, 2017, 5:36pm UTC](https://discuss.elastic.co/t/error-related-to-default-local/72357 "2017-01-21T17:36:07Z")

</div>

In my elasticsearch.log, I see this error: exception when exporting documents org.elasticsearch.xpack.monitoring.exporter.ExportException: failed to flush export bulks at org.elasticsearch.xpack.monitoring.exporter.…

---

## [Almost 90-100% CPU usage while doing nothing](https://discuss.elastic.co/t/almost-90-100-cpu-usage-while-doing-nothing/12259)

<div class="topic-metadata">

**Author:** [@shadyabhi](https://discuss.elastic.co/u/shadyabhi)\
**Replies:** 2\
**Last updated:** [June 4, 2013, 4:31pm UTC](https://discuss.elastic.co/t/almost-90-100-cpu-usage-while-doing-nothing/12259 "2013-06-04T16:31:24Z")

</div>

Hi all, I came across a issue today in a 2 node cluster where both nodes were occupying around 100% CPU usage for no reason. No indexing is happening and no search queries are being executed. Hot threads output a…

---

## [What is GA for Enterprise Search?](https://discuss.elastic.co/t/what-is-ga-for-enterprise-search/200986)

<div class="topic-metadata">

**Author:** [@Pierre\_ALLYNDREE](https://discuss.elastic.co/u/Pierre_ALLYNDREE)\
**Replies:** 2\
**Last updated:** [December 5, 2019, 8:56am UTC](https://discuss.elastic.co/t/what-is-ga-for-enterprise-search/200986 "2019-12-05T08:56:13Z")

</div>

When is GA ? Thanks

---

## [Attempting to Visualize Max Concurrent Users](https://discuss.elastic.co/t/attempting-to-visualize-max-concurrent-users/123208)

<div class="topic-metadata">

**Author:** [@rohus24](https://discuss.elastic.co/u/rohus24)\
**Replies:** 3\
**Last updated:** [March 13, 2018, 11:54am UTC](https://discuss.elastic.co/t/attempting-to-visualize-max-concurrent-users/123208 "2018-03-13T11:54:47Z")

</div>

Hello, I'm currently trying to visualize max concurrent users from my application. There exists a separate log file for this purpose with the following nomenclature: 09-Mar-2018 12:24:31,0 09-Mar-2018 12:25:31,0 09-M…

---

## [APM Dependencies tab is empty, but data present in Service map tab](https://discuss.elastic.co/t/apm-dependencies-tab-is-empty-but-data-present-in-service-map-tab/311233)

<div class="topic-metadata">

**Author:** [@Offout](https://discuss.elastic.co/u/Offout)\
**Replies:** 6\
**Last updated:** [August 26, 2022, 4:32am UTC](https://discuss.elastic.co/t/apm-dependencies-tab-is-empty-but-data-present-in-service-map-tab/311233 "2022-08-26T04:32:12Z")

</div>

Kibana version: 8.2.3 Elasticsearch version: 8.2.3 APM Server version: 8.2.3 APM Agent language and version: PHP 1.5.2 Browser version: Chrome 103, CLI Original install method (e.g. download page, yum, deb, fro…

---

## [Manually upload Winlogbeat ndjson files to Elasticsearch](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046)

<div class="topic-metadata">

**Author:** [@fl33t](https://discuss.elastic.co/u/fl33t)\
**Replies:** 6\
**Last updated:** [June 13, 2022, 2:54am UTC](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046 "2022-06-13T02:54:39Z")

</div>

Greetings and salutations. I'm looking for a way to manually upload locally generated Winlogbeat (8.1.3) ndjson files to my Elastic stack as the beat has to work offline and cannot connect directly to either ES or Logsta…

---

## [Unable to parse IIS logs](https://discuss.elastic.co/t/unable-to-parse-iis-logs/157073)

<div class="topic-metadata">

**Author:** [@JacovanZyl](https://discuss.elastic.co/u/JacovanZyl)\
**Replies:** 6\
**Last updated:** [December 5, 2018, 11:31am UTC](https://discuss.elastic.co/t/unable-to-parse-iis-logs/157073 "2018-12-05T11:31:36Z")

</div>

Hi there I am having some difficulty parsing IIS logs into the discrete fields. The following tags keeps showing up: "tags": \[ "beats\_input\_codec\_plain\_applied", "\_grokparsefailure", "\_geoip\_lookup\_failure" If …

---

## [Scripts/import\_dashboard doesn't exist](https://discuss.elastic.co/t/scripts-import-dashboard-doesnt-exist/100367)

<div class="topic-metadata">

**Author:** [@KnechtionsCoding](https://discuss.elastic.co/u/KnechtionsCoding)\
**Replies:** 6\
**Last updated:** [September 13, 2017, 6:20pm UTC](https://discuss.elastic.co/t/scripts-import-dashboard-doesnt-exist/100367 "2017-09-13T18:20:34Z")

</div>

I just installed heartbeat on an elk server to test. I'm trying to import the dashboards, however while I can find the dashboards themselves I cannot find the /scripts/import\_dashboards. The docs here: Import Dashboards …

[Previous page](https://discuss.elastic.co/top.md?page=932&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=934&per_page=50&period=all)
