# Top

**URL:** https://discuss.elastic.co/top.md?page=945&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 946

---

## [How to implement a search by multiple fields and support whitespace, symbols, case insensitive](https://discuss.elastic.co/t/how-to-implement-a-search-by-multiple-fields-and-support-whitespace-symbols-case-insensitive/330030)

<div class="topic-metadata">

**Author:** [@Juan\_Manuel](https://discuss.elastic.co/u/Juan_Manuel)\
**Replies:** 4\
**Last updated:** [April 14, 2023, 8:00pm UTC](https://discuss.elastic.co/t/how-to-implement-a-search-by-multiple-fields-and-support-whitespace-symbols-case-insensitive/330030 "2023-04-14T20:00:12Z")

</div>

I have an index with many fields and I want to be able to search by some of them at the same time, and this search should support partial match (in any position), case insensitive, support some symbols. Example of my in…

---

## [FATAL TypeError: Cannot read property 'version' of undefined while starting kibana](https://discuss.elastic.co/t/fatal-typeerror-cannot-read-property-version-of-undefined-while-starting-kibana/210370)

<div class="topic-metadata">

**Author:** [@gapa582](https://discuss.elastic.co/u/gapa582)\
**Replies:** 4\
**Last updated:** [December 4, 2019, 11:09am UTC](https://discuss.elastic.co/t/fatal-typeerror-cannot-read-property-version-of-undefined-while-starting-kibana/210370 "2019-12-04T11:09:12Z")

</div>

After upgrading kibana from v7.4 to v7.5, I keep getting this error "FATAL TypeError: Cannot read property 'version' of undefined" I'm using amazon linux and it was working great before the upgrade

---

## [Kubernetes Operators Fails with Webhook](https://discuss.elastic.co/t/kubernetes-operators-fails-with-webhook/185561)

<div class="topic-metadata">

**Author:** [@Dominik-Robert](https://discuss.elastic.co/u/Dominik-Robert)\
**Replies:** 4\
**Last updated:** [July 12, 2019, 10:46am UTC](https://discuss.elastic.co/t/kubernetes-operators-fails-with-webhook/185561 "2019-07-12T10:46:28Z")

</div>

Hello, I want to use the Kubernetes Operator for my own Cluster. But it fails everytime I deploy the Elasticseach Quickstart. It fails with: Error from server (InternalError): error when creating "STDIN": Internal err…

---

## [Filebeat not harvesting anything in Kubernetes](https://discuss.elastic.co/t/filebeat-not-harvesting-anything-in-kubernetes/177150)

<div class="topic-metadata">

**Author:** [@bbgobie](https://discuss.elastic.co/u/bbgobie)\
**Replies:** 4\
**Last updated:** [April 17, 2019, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-not-harvesting-anything-in-kubernetes/177150 "2019-04-17T14:03:36Z")

</div>

New to filebeats. I had a working configuration on docker, trying to get a simple config working in Kubernetes. Using the deploy sample from 6.6 branch I don't seem to be able to get Filebeats to parse logs or do anyth…

---

## [Mapping being ignored?](https://discuss.elastic.co/t/mapping-being-ignored/33286)

<div class="topic-metadata">

**Author:** [@jsps](https://discuss.elastic.co/u/jsps)\
**Replies:** 4\
**Last updated:** [October 30, 2015, 5:00pm UTC](https://discuss.elastic.co/t/mapping-being-ignored/33286 "2015-10-30T17:00:21Z")

</div>

ES 2.0 I've been trying to apply mapping to an index ( empty index ) but it doesn't seem to persist. I've added sync.json to /config/mappings/\_default it contains: { "sync" :{ "\_timestamp" : { "enab…

---

## [Angular 5 and Kibana Visualization without IFrame](https://discuss.elastic.co/t/angular-5-and-kibana-visualization-without-iframe/138848)

<div class="topic-metadata">

**Author:** [@Benjamin\_Fallar\_III](https://discuss.elastic.co/u/Benjamin_Fallar_III)\
**Replies:** 1\
**Last updated:** [July 6, 2018, 12:47pm UTC](https://discuss.elastic.co/t/angular-5-and-kibana-visualization-without-iframe/138848 "2018-07-06T12:47:44Z")

</div>

I have created some Kibana visualizations and dashboard, and I would like to know if there is any packages or components that I can re-use to embed the visualizations in my Angular 5 application without using IFrames. Th…

---

## [Kibana fails to start](https://discuss.elastic.co/t/kibana-fails-to-start/281562)

<div class="topic-metadata">

**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\
**Replies:** 2\
**Last updated:** [August 17, 2021, 5:32am UTC](https://discuss.elastic.co/t/kibana-fails-to-start/281562 "2021-08-17T05:32:46Z")

</div>

Failed to start kibana on centos 8 ElasticSearch version: 7.14 Kibana Version: 7.14 the log file looks like: \[root@localhost kibana\]# tail -10f kibana.log {"type":"log","@timestamp":"2021-08-16T19:51:10+05:30","tags"…

---

## [Controlling elasticsearch \_bulk queue size](https://discuss.elastic.co/t/controlling-elasticsearch--bulk-queue-size/99455)

<div class="topic-metadata">

**Author:** [@Quintus](https://discuss.elastic.co/u/Quintus)\
**Replies:** 8\
**Last updated:** [September 12, 2017, 7:39pm UTC](https://discuss.elastic.co/t/controlling-elasticsearch--bulk-queue-size/99455 "2017-09-12T19:39:26Z")

</div>

I’ve setup elasricsearch on a machine with the following specs: Storage: 500 GB HDD Ram: 8 GB CPU : Intel i7 Quad-Core On the same machine I have an application that listens to netflow data and exports it to elastics…

---

## [Mapping Tenable (Nessus) scan reportitems to ECS vulnerability field set](https://discuss.elastic.co/t/mapping-tenable-nessus-scan-reportitems-to-ecs-vulnerability-field-set/280543)

<div class="topic-metadata">

**Author:** [@Gerry7](https://discuss.elastic.co/u/Gerry7)\
**Replies:** 3\
**Last updated:** [August 12, 2021, 9:54pm UTC](https://discuss.elastic.co/t/mapping-tenable-nessus-scan-reportitems-to-ecs-vulnerability-field-set/280543 "2021-08-12T21:54:41Z")

</div>

We are attempting to map Tenable (Nessus) scan report items to the ECS vulnerability field set. The Tenable scan report may include multiple vulnerability identifiers related to the detected vulnerability where each vuln…

---

## [Issue with bundle.js file in Kibana](https://discuss.elastic.co/t/issue-with-bundle-js-file-in-kibana/136615)

<div class="topic-metadata">

**Author:** [@Subrahmanyam\_Rama\_Ve](https://discuss.elastic.co/u/Subrahmanyam_Rama_Ve)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 7:15pm UTC](https://discuss.elastic.co/t/issue-with-bundle-js-file-in-kibana/136615 "2018-06-21T19:15:02Z")

</div>

For kibana experts: We are facing an issue while modifying Kibana source code to achieve our specific requirement to integrate with our UI. As I understand, modifying the source code should automatically reflect the ch…

---

## [Cluster sometimes dies due to excessive GC activity - query size](https://discuss.elastic.co/t/cluster-sometimes-dies-due-to-excessive-gc-activity-query-size/28612)

<div class="topic-metadata">

**Author:** [@dko](https://discuss.elastic.co/u/dko)\
**Replies:** 3\
**Last updated:** [September 7, 2015, 1:29pm UTC](https://discuss.elastic.co/t/cluster-sometimes-dies-due-to-excessive-gc-activity-query-size/28612 "2015-09-07T13:29:10Z")

</div>

Our cluster sometimes dies due to excessive GC activity when we specify the "size" parameter of our queries to be too high: we have analysed our cache usage (fielddata is a minimum as we have doc\_values activated and non…

---

## [How to update Kibana Advance Settings via API request](https://discuss.elastic.co/t/how-to-update-kibana-advance-settings-via-api-request/337720)

<div class="topic-metadata">

**Author:** [@Nama\_Chintamani\_Illo](https://discuss.elastic.co/u/Nama_Chintamani_Illo)\
**Replies:** 4\
**Last updated:** [July 6, 2023, 4:08pm UTC](https://discuss.elastic.co/t/how-to-update-kibana-advance-settings-via-api-request/337720 "2023-07-06T16:08:47Z")

</div>

I am trying to update the advance settings of a specific space via an API request. I am attempting to change the "metaFields" setting to include the "\_size" field and would like to send the command via an API without h…

---

## [Logstash - Grok parse failure](https://discuss.elastic.co/t/logstash-grok-parse-failure/138403)

<div class="topic-metadata">

**Author:** [@Aby](https://discuss.elastic.co/u/Aby)\
**Replies:** 1\
**Last updated:** [July 3, 2018, 4:33pm UTC](https://discuss.elastic.co/t/logstash-grok-parse-failure/138403 "2018-07-03T16:33:05Z")

</div>

Hi - i am trying to parse the below log file: \[2018-05-29 08:04:23,687\] DEBUG - http-outgoing-2845 \<\< HTTP/1.1 500 Internal Server Error {org.apache.synapse.transport.http.headers} \[2018-05-29 08:04:18,037\] DEBUG - h…

---

## [Primary vs. replica shard inconsistencies?](https://discuss.elastic.co/t/primary-vs-replica-shard-inconsistencies/15514)

<div class="topic-metadata">

**Author:** [@xavier1](https://discuss.elastic.co/u/xavier1)\
**Replies:** 7\
**Last updated:** [January 31, 2014, 1:38am UTC](https://discuss.elastic.co/t/primary-vs-replica-shard-inconsistencies/15514 "2014-01-31T01:38:11Z")

</div>

We're currently running ElasticSearch 0.90.5. When doing the same search across different query heads, I'm seeing an inconsistent number of results. However, if I add preference=\_primary (or \_primary\_first) I get the…

---

## [Getting Logstash output cannot be used with Fleet Server integration in Fleet Server Policy. Please create a new ElasticSearch output](https://discuss.elastic.co/t/getting-logstash-output-cannot-be-used-with-fleet-server-integration-in-fleet-server-policy-please-create-a-new-elasticsearch-output/330980)

<div class="topic-metadata">

**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\
**Replies:** 5\
**Last updated:** [May 17, 2023, 2:24pm UTC](https://discuss.elastic.co/t/getting-logstash-output-cannot-be-used-with-fleet-server-integration-in-fleet-server-policy-please-create-a-new-elasticsearch-output/330980 "2023-05-17T14:24:34Z")

</div>

This is pretty straightforward as you can see : I get this after trying to configure a logstash output on Fleet and going through all the steps. I dont know what to do with this error message as it does not make sens…

---

## [Use match keyword with sort](https://discuss.elastic.co/t/use-match-keyword-with-sort/221388)

<div class="topic-metadata">

**Author:** [@nhattaihuynh](https://discuss.elastic.co/u/nhattaihuynh)\
**Replies:** 5\
**Last updated:** [February 28, 2020, 8:56pm UTC](https://discuss.elastic.co/t/use-match-keyword-with-sort/221388 "2020-02-28T20:56:11Z")

</div>

Hi everyone, Right now I'm stuck with keeping old logic sort from MySQL to Elastic. In MySQL, I have a project table with field 'projectName'. When user search project using keyword, I use Match function with Boolean …

---

## [Elasticsearch 7.1.1 not forming a cluster using EC2 auto discovery plugin](https://discuss.elastic.co/t/elasticsearch-7-1-1-not-forming-a-cluster-using-ec2-auto-discovery-plugin/184199)

<div class="topic-metadata">

**Author:** [@Pat\_Humphreys](https://discuss.elastic.co/u/Pat_Humphreys)\
**Replies:** 5\
**Last updated:** [June 5, 2019, 12:43pm UTC](https://discuss.elastic.co/t/elasticsearch-7-1-1-not-forming-a-cluster-using-ec2-auto-discovery-plugin/184199 "2019-06-05T12:43:32Z")

</div>

I have a 3 node cluster which I have setup in AWS using the AWS EC2 discovery plugin, each of the nodes can communicate with each other and autodiscovery finds the other nodes, but they dont form a cluster. I am using a …

---

## [java.lang.IllegalStateException: /usr/share/elasticsearch/lib/elasticsearch-5.1.1.jar requires Elasticsearch 5.1.1, your system: 5.1.2](https://discuss.elastic.co/t/java-lang-illegalstateexception-usr-share-elasticsearch-lib-elasticsearch-5-1-1-jar-requires-elasticsearch-5-1-1-your-system-5-1-2/73104)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 5\
**Last updated:** [January 30, 2017, 8:37pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-usr-share-elasticsearch-lib-elasticsearch-5-1-1-jar-requires-elasticsearch-5-1-1-your-system-5-1-2/73104 "2017-01-30T20:37:55Z")

</div>

shed some light on this for me... \[2017-01-28T16:58:41,538\]\[ERROR\]\[o.e.b.Bootstrap \] Exception java.lang.IllegalStateException: /usr/share/elasticsearch/lib/elasticsearch-5.1.1.jar requires Elasticsearch 5.1.1…

---

## [Elasticsearch-security-plugin : Kerberos, NTLM and host/ip based coarse-grained and document level security for elasticsearch](https://discuss.elastic.co/t/elasticsearch-security-plugin-kerberos-ntlm-and-host-ip-based-coarse-grained-and-document-level-security-for-elasticsearch/14477)

<div class="topic-metadata">

**Author:** [@Hendrik](https://discuss.elastic.co/u/Hendrik)\
**Replies:** 5\
**Last updated:** [December 10, 2014, 8:02am UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-kerberos-ntlm-and-host-ip-based-coarse-grained-and-document-level-security-for-elasticsearch/14477 "2014-12-10T08:02:28Z")

</div>

Hi, i am working on Kerberos/NTLM and host/ip based coarse-grained and document level security for elasticsearch (early dev stage but roughly working) https://github.com/salyh/elasticsearch-security-plugin \*Th…

---

## [Standalone apm-server with elasticsearch 8 in docker not able to connect](https://discuss.elastic.co/t/standalone-apm-server-with-elasticsearch-8-in-docker-not-able-to-connect/319892)

<div class="topic-metadata">

**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\
**Replies:** 2\
**Last updated:** [November 28, 2022, 1:45am UTC](https://discuss.elastic.co/t/standalone-apm-server-with-elasticsearch-8-in-docker-not-able-to-connect/319892 "2022-11-28T01:45:18Z")

</div>

Elasticsearch version: 8.5.0 APM Server version: 8.5.2 Original install method (e.g. download page, yum, deb, from source, etc.) and version: docker Fresh install or upgraded from other version?: fresh Setup: Attemp…

---

## [\[Help\] Understanding routing to an index partition](https://discuss.elastic.co/t/help-understanding-routing-to-an-index-partition/293812)

<div class="topic-metadata">

**Author:** [@Radaeld](https://discuss.elastic.co/u/Radaeld)\
**Replies:** 2\
**Last updated:** [January 11, 2022, 9:34pm UTC](https://discuss.elastic.co/t/help-understanding-routing-to-an-index-partition/293812 "2022-01-11T21:34:10Z")

</div>

Hey all I have some questions regarding routing\_partition\_size field. Not sure but upon reading the documentation , this is what i understood: By default, using a routing key will access only 1 primary shard, for inde…

---

## [Error: Cannot find module '@kbn/utils'](https://discuss.elastic.co/t/error-cannot-find-module-kbn-utils/267469)

<div class="topic-metadata">

**Author:** [@Azeem\_Sarwar](https://discuss.elastic.co/u/Azeem_Sarwar)\
**Replies:** 2\
**Last updated:** [March 18, 2021, 10:53am UTC](https://discuss.elastic.co/t/error-cannot-find-module-kbn-utils/267469 "2021-03-18T10:53:09Z")

</div>

while executing command yarn kbn bootstrap I am facing the issue , Error: Cannot find module '@kbn/utils' ----- Complete log is here root@is-OptiPlex-5050:/home/kibana/kibana# yarn kbn bootstrap yarn run v1.22.5 nod…

---

## [How convert Hashmap to JSON string in painless script?](https://discuss.elastic.co/t/how-convert-hashmap-to-json-string-in-painless-script/107994)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 2\
**Last updated:** [November 17, 2017, 5:28am UTC](https://discuss.elastic.co/t/how-convert-hashmap-to-json-string-in-painless-script/107994 "2017-11-17T05:28:26Z")

</div>

Hi, I want to convert a hashmap to a json object or a json string in the painless script. I know I can use the {{#tojson}} to convert it in the mustache. But I need add slash before each double-quote in the output. Is…

---

## [Add a field as a "parent" parameter with add\_field (for geo\_point)](https://discuss.elastic.co/t/add-a-field-as-a-parent-parameter-with-add-field-for-geo-point/55195)

<div class="topic-metadata">

**Author:** [@LouF](https://discuss.elastic.co/u/LouF)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 2:04pm UTC](https://discuss.elastic.co/t/add-a-field-as-a-parent-parameter-with-add-field-for-geo-point/55195 "2016-07-13T14:04:16Z")

</div>

Hi, I have a problem with the geo\_point type. I already applied a template on elasticsearch to transform the data i get into a geo\_point. This data is supposed to be the parameter location. I don't receive it from the …

---

## [Graph and IP type data](https://discuss.elastic.co/t/graph-and-ip-type-data/47309)

<div class="topic-metadata">

**Author:** [@lawndart](https://discuss.elastic.co/u/lawndart)\
**Replies:** 2\
**Last updated:** [April 15, 2016, 5:47pm UTC](https://discuss.elastic.co/t/graph-and-ip-type-data/47309 "2016-04-15T17:47:31Z")

</div>

I am trying to play around with Graph and some net flow data and keep getting a Server Error 500, with the following in the elasticsearch logs: Caused by: java.lang.IllegalArgumentException: failed to parse ip \[\], not …

---

## [Query- or index-time synonym expansion](https://discuss.elastic.co/t/query-or-index-time-synonym-expansion/14811)

<div class="topic-metadata">

**Author:** [@paul1](https://discuss.elastic.co/u/paul1)\
**Replies:** 2\
**Last updated:** [December 12, 2013, 4:37am UTC](https://discuss.elastic.co/t/query-or-index-time-synonym-expansion/14811 "2013-12-12T04:37:52Z")

</div>

Can somebody point me to Query time synonym expansion mapping and index-time synonym expansion mapping . My mapping is as below { "settings": { "analysis": { "analyzer": { "synonym": { …

---

## [Logstash docker container can not connect to the ElasticSearch (non-docker) on another host](https://discuss.elastic.co/t/logstash-docker-container-can-not-connect-to-the-elasticsearch-non-docker-on-another-host/269730)

<div class="topic-metadata">

**Author:** [@kube-elk](https://discuss.elastic.co/u/kube-elk)\
**Replies:** 0\
**Last updated:** [April 9, 2021, 4:03pm UTC](https://discuss.elastic.co/t/logstash-docker-container-can-not-connect-to-the-elasticsearch-non-docker-on-another-host/269730 "2021-04-09T16:03:52Z")

</div>

Hi I have 2 docker containers: filebeat and logstash which I run using docker-compose. I am trying to configure logstash such that it will write index to the Elasticsearch (non-docker) hosted on another node. Here is m…

---

## [Filebeat HAProxy fields mapping not clear, what is the total active time for the HTTP request?](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088)

<div class="topic-metadata">

**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\
**Replies:** 0\
**Last updated:** [March 3, 2021, 10:34am UTC](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088 "2021-03-03T10:34:56Z")

</div>

I am currently looking into the haproxy log files to find out how long requests take. Elastic Filebeat has a detailed page about HAProxy fields. haproxy.total\_waiting\_time\_ms Total time in milliseconds spent waiting i…

---

## [Suggestion: ECE Ansible Role Addition](https://discuss.elastic.co/t/suggestion-ece-ansible-role-addition/215285)

<div class="topic-metadata">

**Author:** [@TWhitehouse](https://discuss.elastic.co/u/TWhitehouse)\
**Replies:** 0\
**Last updated:** [January 16, 2020, 9:46am UTC](https://discuss.elastic.co/t/suggestion-ece-ansible-role-addition/215285 "2020-01-16T09:46:54Z")

</div>

I've used the Ansible role to configure a number of ECE hosts running on RHEL7 I noticed that the docker installation on RHEL7 doesn't include docker-procy, docker-runc, or docker-init (only \*-current e.g docker-proxy-c…

---

## [Kubernetes autodiscover not working](https://discuss.elastic.co/t/kubernetes-autodiscover-not-working/213630)

<div class="topic-metadata">

**Author:** [@kluvi](https://discuss.elastic.co/u/kluvi)\
**Replies:** 0\
**Last updated:** [January 2, 2020, 9:37pm UTC](https://discuss.elastic.co/t/kubernetes-autodiscover-not-working/213630 "2020-01-02T21:37:22Z")

</div>

Hi. I have one Pod with running Heartbeat in our K8s cluster and tried to setup autodiscovery, but without any success... kluvi@kluvi:~$ k log -f deployment/service-monitoring-heartbeat-autodiscover log is DEPRECATED a…

---

## [Does logstash6.4.0 support writing to nfs output](https://discuss.elastic.co/t/does-logstash6-4-0-support-writing-to-nfs-output/171378)

<div class="topic-metadata">

**Author:** [@simson](https://discuss.elastic.co/u/simson)\
**Replies:** 0\
**Last updated:** [March 7, 2019, 7:19pm UTC](https://discuss.elastic.co/t/does-logstash6-4-0-support-writing-to-nfs-output/171378 "2019-03-07T19:19:12Z")

</div>

Hi, I was trying to have multipel logstash process write to a logfile mounted via NFS. I was getting null characters on my file as it was getting added through the buffer. I see the following in release notes of logsta…

---

## [Unable to do match query with new Java API client](https://discuss.elastic.co/t/unable-to-do-match-query-with-new-java-api-client/337065)

<div class="topic-metadata">

**Author:** [@p4charu](https://discuss.elastic.co/u/p4charu)\
**Replies:** 4\
**Last updated:** [June 28, 2023, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-do-match-query-with-new-java-api-client/337065 "2023-06-28T14:37:03Z")

</div>

Hello! I am trying to do a match query similar to one below: "query": { "bool": { "must": \[ { "match": { "detected.tag": "chair" } } \] } } } This query gives me expec…

---

## [\[ANNOUNCEMENT\] - FSCrawler 2.8 released](https://discuss.elastic.co/t/announcement-fscrawler-2-8-released/291748)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 4\
**Last updated:** [January 10, 2022, 7:27pm UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-8-released/291748 "2022-01-10T19:27:08Z")

</div>

The FSCrawler team is pleased to announce the FSCrawler 2.8 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.8: wget https://repo1.maven.org/maven2…

---

## [Blue/Green Deployment to 7.7](https://discuss.elastic.co/t/blue-green-deployment-to-7-7/232780)

<div class="topic-metadata">

**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\
**Replies:** 4\
**Last updated:** [May 15, 2020, 10:25am UTC](https://discuss.elastic.co/t/blue-green-deployment-to-7-7/232780 "2020-05-15T10:25:56Z")

</div>

Hi, I'm running a 3 node cluster running 1 shard 2 replica for most indexes. Is it possible to carry out a Blue/Green deployment type upgrade to Elasticsearch whereby I shutdown a node and bring up a brand new node on 7…

---

## [Track Visualization and Dashboard Usage](https://discuss.elastic.co/t/track-visualization-and-dashboard-usage/185714)

<div class="topic-metadata">

**Author:** [@misiakj](https://discuss.elastic.co/u/misiakj)\
**Replies:** 4\
**Last updated:** [June 14, 2019, 10:44pm UTC](https://discuss.elastic.co/t/track-visualization-and-dashboard-usage/185714 "2019-06-14T22:44:22Z")

</div>

Hi All, Is there any way to store/track Kibana Dashboard and visualization view counts and who is viewing them? The best way I can find so far is manually searching the kibana.log for Dashboard/Visualization gets but i…

---

## [(seems) Doesn't read default configuration, logstash.conf](https://discuss.elastic.co/t/seems-doesnt-read-default-configuration-logstash-conf/63169)

<div class="topic-metadata">

**Author:** [@dstjahjono](https://discuss.elastic.co/u/dstjahjono)\
**Replies:** 4\
**Last updated:** [October 18, 2016, 8:14am UTC](https://discuss.elastic.co/t/seems-doesnt-read-default-configuration-logstash-conf/63169 "2016-10-18T08:14:06Z")

</div>

Hi, Newbie here, just installed Logstash, have 2 questions. 1) I follow this step, https://www.elastic.co/guide/en/logstash/5.0/config-examples.html, run in command line and working. \[/opt/logstash\]$ bin/logstash …

---

## [Setting a breakpoint in elasticsearch plugin (IntelliJ comunity edition)](https://discuss.elastic.co/t/setting-a-breakpoint-in-elasticsearch-plugin-intellij-comunity-edition/11295)

<div class="topic-metadata">

**Author:** [@q42jaap](https://discuss.elastic.co/u/q42jaap)\
**Replies:** 4\
**Last updated:** [March 25, 2013, 11:55pm UTC](https://discuss.elastic.co/t/setting-a-breakpoint-in-elasticsearch-plugin-intellij-comunity-edition/11295 "2013-03-25T23:55:29Z")

</div>

Hi, I'm thinking about developing an elasticsearch plugin and I would like to be able to start elasticsearch with my plugin loaded from within IntelliJ. I couldn't find how I should do this. I would also like to…

---

## [Rsyslog Para Filebeat através de udp](https://discuss.elastic.co/t/rsyslog-para-filebeat-atraves-de-udp/194269)

<div class="topic-metadata">

**Author:** [@Joao\_Goncalves](https://discuss.elastic.co/u/Joao_Goncalves)\
**Replies:** 6\
**Last updated:** [August 14, 2019, 5:24pm UTC](https://discuss.elastic.co/t/rsyslog-para-filebeat-atraves-de-udp/194269 "2019-08-14T17:24:37Z")

</div>

Boa tarde, Estou a tentar enviar logs através de udp (rsyslog) numa máquina ubuntu (192.168.75.138 pel a porta 5141)para outra máquina (filebeat) debian (192.168.75.177) porém mesmo com o firewall configurado não ha com…

---

## [Indices folder names are random](https://discuss.elastic.co/t/indices-folder-names-are-random/66690)

<div class="topic-metadata">

**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\
**Replies:** 6\
**Last updated:** [November 21, 2016, 9:36am UTC](https://discuss.elastic.co/t/indices-folder-names-are-random/66690 "2016-11-21T09:36:12Z")

</div>

I upgrade my ELK stack from 2.4 to 5.0. after the upgrade all my event log indices are saved as random words. like UcA4wqnpQs2D4AUdBpuRwg U6a2PE9mTduqAGfbDLT22g ZzOUMMSRRPukjy6muHRS2w Before the upgrade it was winlogb…

---

## [Elasticsearch Unreachable \[Manticore::SocketException\] Connection refused](https://discuss.elastic.co/t/elasticsearch-unreachable-manticore-socketexception-connection-refused/185462)

<div class="topic-metadata">

**Author:** [@matejt](https://discuss.elastic.co/u/matejt)\
**Replies:** 1\
**Last updated:** [June 12, 2019, 7:02pm UTC](https://discuss.elastic.co/t/elasticsearch-unreachable-manticore-socketexception-connection-refused/185462 "2019-06-12T19:02:56Z")

</div>

Hi, I have elasticsearch and logstash running on separate servers. Elasticsearch is up and running, and I'm able to issue a curl command from the server where logstash is installed: curl http://my\_ip\_address:9200 and I …

---

## [Reading excel file in logstash](https://discuss.elastic.co/t/reading-excel-file-in-logstash/127634)

<div class="topic-metadata">

**Author:** [@arunvijayam](https://discuss.elastic.co/u/arunvijayam)\
**Replies:** 1\
**Last updated:** [April 11, 2018, 1:20pm UTC](https://discuss.elastic.co/t/reading-excel-file-in-logstash/127634 "2018-04-11T13:20:10Z")

</div>

Can anyone help in reading excel file in logstash and output to mongo db

---

## [How to count log entries based on a filter](https://discuss.elastic.co/t/how-to-count-log-entries-based-on-a-filter/92592)

<div class="topic-metadata">

**Author:** [@Jonathan\_Kosgei](https://discuss.elastic.co/u/Jonathan_Kosgei)\
**Replies:** 1\
**Last updated:** [July 12, 2017, 7:54pm UTC](https://discuss.elastic.co/t/how-to-count-log-entries-based-on-a-filter/92592 "2017-07-12T19:54:51Z")

</div>

I need to be able to count how many requests each user makes to a particular api, each request is logged to logstash and contains the consumerID and the name of the api, I'd like to be able to get a count of how many log…

---

## [Metric count formating](https://discuss.elastic.co/t/metric-count-formating/87508)

<div class="topic-metadata">

**Author:** [@Robert\_Schwerdtner](https://discuss.elastic.co/u/Robert_Schwerdtner)\
**Replies:** 1\
**Last updated:** [May 30, 2017, 9:45am UTC](https://discuss.elastic.co/t/metric-count-formating/87508 "2017-05-30T09:45:55Z")

</div>

Hi is there an easy (or any) way to change the formatting of the count field at the metric visualisation? I get a float with two decimals but i simply need the same number without the decimals. I know that i can change…

---

## [To graphdb or not to graphdb is elasticsearch the answer](https://discuss.elastic.co/t/to-graphdb-or-not-to-graphdb-is-elasticsearch-the-answer/36597)

<div class="topic-metadata">

**Author:** [@Janet69](https://discuss.elastic.co/u/Janet69)\
**Replies:** 1\
**Last updated:** [December 8, 2015, 3:25pm UTC](https://discuss.elastic.co/t/to-graphdb-or-not-to-graphdb-is-elasticsearch-the-answer/36597 "2015-12-08T15:25:26Z")

</div>

Why benefits does Elastic Search offer over graph databases such as neo4j???

---

## [Configuring packetbeat to monitor traffic from remote server](https://discuss.elastic.co/t/configuring-packetbeat-to-monitor-traffic-from-remote-server/54361)

<div class="topic-metadata">

**Author:** [@rresol](https://discuss.elastic.co/u/rresol)\
**Replies:** 3\
**Last updated:** [July 1, 2016, 9:10am UTC](https://discuss.elastic.co/t/configuring-packetbeat-to-monitor-traffic-from-remote-server/54361 "2016-07-01T09:10:43Z")

</div>

Hello everyone I am new to packetbeat . I wanted to monitor traffic on a remote host whose ip address is 192.168.0.122 . How should I configure so that I can monitor the traffic on ports 80 and 27017. Here is my configur…

---

## [403 from kibana when searching closed indices](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038)

<div class="topic-metadata">

**Author:** [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\
**Replies:** 3\
**Last updated:** [April 1, 2015, 11:31pm UTC](https://discuss.elastic.co/t/403-from-kibana-when-searching-closed-indices/23038 "2015-04-01T23:31:34Z")

</div>

Hi all, Am using the standard ELK stack and am having an issue with kibana currently. I close one of my indices (e.g. logstash-2015.03.30). When i do a search in kibana for data involving that index, i get a 40…

---

## [Duplicate fields in sorting - ELASTIC 6.0](https://discuss.elastic.co/t/duplicate-fields-in-sorting-elastic-6-0/111825)

<div class="topic-metadata">

**Author:** [@Jose\_Victor\_da\_Silva](https://discuss.elastic.co/u/Jose_Victor_da_Silva)\
**Replies:** 1\
**Last updated:** [December 15, 2017, 10:59am UTC](https://discuss.elastic.co/t/duplicate-fields-in-sorting-elastic-6-0/111825 "2017-12-15T10:59:16Z")

</div>

Before version 6.0 of the elastic, it was possible to send fields in the repeated ordering that was not released exception, after the update, every time there is a repeated field, an exception is thrown, preventing the q…

---

## [Elastic user password change in kubernetes secret](https://discuss.elastic.co/t/elastic-user-password-change-in-kubernetes-secret/329328)

<div class="topic-metadata">

**Author:** [@basavarajvn0513](https://discuss.elastic.co/u/basavarajvn0513)\
**Replies:** 2\
**Last updated:** [April 12, 2023, 9:18am UTC](https://discuss.elastic.co/t/elastic-user-password-change-in-kubernetes-secret/329328 "2023-04-12T09:18:19Z")

</div>

I have elasticsearch ,kiabana,logstash,filebeat in kuberentes. All use the same elasatic username and password as ENV variables from the secret .yaml. I want to change the password for the elastic user . After I change …

---

## [Date range in query, yet all indices that match pattern are searched](https://discuss.elastic.co/t/date-range-in-query-yet-all-indices-that-match-pattern-are-searched/195919)

<div class="topic-metadata">

**Author:** [@benpolzin](https://discuss.elastic.co/u/benpolzin)\
**Replies:** 2\
**Last updated:** [September 20, 2019, 1:48am UTC](https://discuss.elastic.co/t/date-range-in-query-yet-all-indices-that-match-pattern-are-searched/195919 "2019-09-20T01:48:22Z")

</div>

Description of the problem including expected versus actual behavior : Queries time out in Kibana due to what appears to be a problem where the time picker is ignored and all indices matching the index pattern are querie…

---

## [Elasticsearch node http certificate expiration error](https://discuss.elastic.co/t/elasticsearch-node-http-certificate-expiration-error/373228)

<div class="topic-metadata">

**Author:** [@jack\_a](https://discuss.elastic.co/u/jack_a)\
**Replies:** 5\
**Last updated:** [January 25, 2025, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-node-http-certificate-expiration-error/373228 "2025-01-25T12:50:37Z")

</div>

While i try to connects the kibana to elasticsearch i get the following error in the kibana's logs and when i try to load the kibana i get the Kibana server is not ready yet. : \[ERROR\]\[elasticsearch-service\] Unable to …

[Previous page](https://discuss.elastic.co/top.md?page=944&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=946&per_page=50&period=all)
