# Top

**URL:** https://discuss.elastic.co/top.md?page=950&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 951

---

## [Is it possible to have a delta in the Snapshot created?](https://discuss.elastic.co/t/is-it-possible-to-have-a-delta-in-the-snapshot-created/86373)

<div class="topic-metadata">

**Author:** [@Shreyas\_K\_C](https://discuss.elastic.co/u/Shreyas_K_C)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 9:22am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-delta-in-the-snapshot-created/86373 "2017-05-19T09:22:24Z")

</div>

Hi All, My ES Index is a week based index Ex: index-2017-04-01 (Index-Year-Month-Week). I am trying to create Backup Snapshots of that index. Our indices are updated every second. Our Backup API is called once a day. I…

---

## [Current Timestamp in URL query](https://discuss.elastic.co/t/current-timestamp-in-url-query/66489)

<div class="topic-metadata">

**Author:** [@Haribaskar](https://discuss.elastic.co/u/Haribaskar)\
**Replies:** 2\
**Last updated:** [November 18, 2016, 9:36am UTC](https://discuss.elastic.co/t/current-timestamp-in-url-query/66489 "2016-11-18T09:36:32Z")

</div>

Hi, Could someone help me in forming URL query to fetch logs of the past fifteen minutes. Am looking for something like: http://localhost:9200/\_search?q="sql" AND @timestamp:"2016-11-16T17:33:19" Please help me w…

---

## [Can someone tell me how to visualize a delta value in bar chart](https://discuss.elastic.co/t/can-someone-tell-me-how-to-visualize-a-delta-value-in-bar-chart/52557)

<div class="topic-metadata">

**Author:** [@Lori](https://discuss.elastic.co/u/Lori)\
**Replies:** 2\
**Last updated:** [June 14, 2016, 8:27pm UTC](https://discuss.elastic.co/t/can-someone-tell-me-how-to-visualize-a-delta-value-in-bar-chart/52557 "2016-06-14T20:27:10Z")

</div>

Hello, I have 2 values that are stored in a single field - fieldA. I've provided examples of 2 data points -- the 1st is 4 &2 and the 2nd is 8 & 0. I want to create a series that shows the delta between the values -- m…

---

## [Helm Elastic APM](https://discuss.elastic.co/t/helm-elastic-apm/152118)

<div class="topic-metadata">

**Author:** [@Clay\_Gorman](https://discuss.elastic.co/u/Clay_Gorman)\
**Replies:** 5\
**Last updated:** [October 29, 2018, 9:43am UTC](https://discuss.elastic.co/t/helm-elastic-apm/152118 "2018-10-29T09:43:17Z")

</div>

Hey there, I am attempting to use https://github.com/helm/charts/tree/master/stable/apm-server and notice its a daemonset that doesnt appear to expose the 8200 port to the host. I was wondering if anyone has advice on …

---

## [How to implement "immutable indices"?](https://discuss.elastic.co/t/how-to-implement-immutable-indices/323297)

<div class="topic-metadata">

**Author:** [@Shiva\_Subramaniyan](https://discuss.elastic.co/u/Shiva_Subramaniyan)\
**Replies:** 6\
**Last updated:** [January 25, 2023, 7:36pm UTC](https://discuss.elastic.co/t/how-to-implement-immutable-indices/323297 "2023-01-25T19:36:43Z")

</div>

Hi We are using platinum subscription for our "elastic" stack from "elastic.co" and we are informed that they do not support "immutable indices" for our subscription. We are using the elasticsearch version 7.17.5 with o…

---

## [Date filter to yyyy/MM/dd HH:mm:ss format](https://discuss.elastic.co/t/date-filter-to-yyyy-mm-dd-hhss-format/224569)

<div class="topic-metadata">

**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\
**Replies:** 6\
**Last updated:** [March 24, 2020, 4:25pm UTC](https://discuss.elastic.co/t/date-filter-to-yyyy-mm-dd-hhss-format/224569 "2020-03-24T16:25:00Z")

</div>

Hello, I´m trying to parse a date field called "ReceiveTime" which has the following format: ReceiveTime=2020/03/03 16:47:56 i´m using the next filter in Logstash: date { match =\> \[ "ReceiveTime", "yyyy/MM/dd HH:mm:…

---

## [Logstash Output to Cloudwatch Configuration](https://discuss.elastic.co/t/logstash-output-to-cloudwatch-configuration/158777)

<div class="topic-metadata">

**Author:** [@xtonehari](https://discuss.elastic.co/u/xtonehari)\
**Replies:** 6\
**Last updated:** [November 29, 2018, 2:46pm UTC](https://discuss.elastic.co/t/logstash-output-to-cloudwatch-configuration/158777 "2018-11-29T14:46:05Z")

</div>

We need to send the logs to CLoudwatch using Logstash. I could not find any site online which shows how to setup and configure in step by step or details. Could you please help on how to configure and send the logs to C…

---

## [Upload GeoJSON files using NEST](https://discuss.elastic.co/t/upload-geojson-files-using-nest/92551)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 6\
**Last updated:** [July 15, 2017, 1:39pm UTC](https://discuss.elastic.co/t/upload-geojson-files-using-nest/92551 "2017-07-15T13:39:39Z")

</div>

Hi, We are in the process of moving our search infrastructure from Azure to Elastic Cloud. We are in a bit of a problem in that we need to know how to upload GeoJsoN files into elastic indexes using the NEST client libra…

---

## [Three node cluster on production](https://discuss.elastic.co/t/three-node-cluster-on-production/52822)

<div class="topic-metadata">

**Author:** [@sohilelasticsearch](https://discuss.elastic.co/u/sohilelasticsearch)\
**Replies:** 6\
**Last updated:** [June 15, 2016, 9:31am UTC](https://discuss.elastic.co/t/three-node-cluster-on-production/52822 "2016-06-15T09:31:20Z")

</div>

Hi , Can anyone help me in setting three node cluster on production? Also which setting I need to add/edit on all three nodes. Thanks, Sohil

---

## [How to use pipelines/processors with autodiscover](https://discuss.elastic.co/t/how-to-use-pipelines-processors-with-autodiscover/156659)

<div class="topic-metadata">

**Author:** [@Denis\_Baryshev](https://discuss.elastic.co/u/Denis_Baryshev)\
**Replies:** 1\
**Last updated:** [November 15, 2018, 3:16pm UTC](https://discuss.elastic.co/t/how-to-use-pipelines-processors-with-autodiscover/156659 "2018-11-15T15:16:41Z")

</div>

Hello I have the following config file, and I'm already pretty lost and I don't know where to direct log-format json logs to my custom "json-message" pipeline or where to use "decode\_json\_fields". Please help filebeat…

---

## [Problem between Spark and Elasticsearch](https://discuss.elastic.co/t/problem-between-spark-and-elasticsearch/51942)

<div class="topic-metadata">

**Author:** [@Vincent\_Vost](https://discuss.elastic.co/u/Vincent_Vost)\
**Replies:** 1\
**Last updated:** [June 6, 2016, 12:56pm UTC](https://discuss.elastic.co/t/problem-between-spark-and-elasticsearch/51942 "2016-06-06T12:56:57Z")

</div>

Hi :slight\_smile: I would like to use Spark with Elasticsearch, but I have some trouble for put everything together I'm running 2 vm. One with elasticsearch and the second with spark. import org.apache.spark.SparkCo…

---

## [Mapping ISO date](https://discuss.elastic.co/t/mapping-iso-date/8414)

<div class="topic-metadata">

**Author:** [@coys](https://discuss.elastic.co/u/coys)\
**Replies:** 1\
**Last updated:** [July 14, 2012, 11:15pm UTC](https://discuss.elastic.co/t/mapping-iso-date/8414 "2012-07-14T23:15:52Z")

</div>

Hello, I have a date stored in mongo as "creationDate" : ISODate("2012-07-13T19:16:28.962Z"). The mapping created for creationDate is as follows "creationDate" : { "type" : "date", "format" : "da…

---

## [Lmenezes/elasticsearch-kopf plugin not recognizable with elasticsearch 5.6.4](https://discuss.elastic.co/t/lmenezes-elasticsearch-kopf-plugin-not-recognizable-with-elasticsearch-5-6-4/106953)

<div class="topic-metadata">

**Author:** [@ShivaramMysore](https://discuss.elastic.co/u/ShivaramMysore)\
**Replies:** 4\
**Last updated:** [November 10, 2017, 1:44am UTC](https://discuss.elastic.co/t/lmenezes-elasticsearch-kopf-plugin-not-recognizable-with-elasticsearch-5-6-4/106953 "2017-11-10T01:44:01Z")

</div>

Is lmenezes/elasticsearch-kopf/ plugin supported with 5.6.4 ? If not, any recommendation for alternatives? # curl -X GET 'http://localhost:9200' { "name" : "WAVImbK", "cluster\_name" : "elasticsearch…

---

## [Fresh Install if ELK 7.10 floods deprecation log](https://discuss.elastic.co/t/fresh-install-if-elk-7-10-floods-deprecation-log/259972)

<div class="topic-metadata">

**Author:** [@JSylvia007](https://discuss.elastic.co/u/JSylvia007)\
**Replies:** 2\
**Last updated:** [January 11, 2021, 4:20pm UTC](https://discuss.elastic.co/t/fresh-install-if-elk-7-10-floods-deprecation-log/259972 "2021-01-11T16:20:11Z")

</div>

Originally posted here: Fresh Install if ELK 7.10 floods deprecation log and at the recommendation of @DavidTurner creating a new post here... A fresh install of ELK 7.10 fills the deprecation log once Kibana is install…

---

## [Using Grok: How To Parse Multiple Entries With The Same Field Name?](https://discuss.elastic.co/t/using-grok-how-to-parse-multiple-entries-with-the-same-field-name/184819)

<div class="topic-metadata">

**Author:** [@rudyamid](https://discuss.elastic.co/u/rudyamid)\
**Replies:** 2\
**Last updated:** [June 11, 2019, 8:00pm UTC](https://discuss.elastic.co/t/using-grok-how-to-parse-multiple-entries-with-the-same-field-name/184819 "2019-06-11T20:00:27Z")

</div>

I've been searching for a pre-made Grok pattern for Apache's mod\_security error log, and couldn't find any. An example of a log entry: Mon Jun 03 15:07:12.453090 2019\] \[:error\] \[pid 15595\] \[client 192.168.0.254:57318\] …

---

## [DSL query with multiple wildcard and timestamp range - syntax check](https://discuss.elastic.co/t/dsl-query-with-multiple-wildcard-and-timestamp-range-syntax-check/173054)

<div class="topic-metadata">

**Author:** [@shankarps](https://discuss.elastic.co/u/shankarps)\
**Replies:** 2\
**Last updated:** [April 16, 2019, 9:06pm UTC](https://discuss.elastic.co/t/dsl-query-with-multiple-wildcard-and-timestamp-range-syntax-check/173054 "2019-04-16T21:06:27Z")

</div>

I am trying to create a DSL query to search for a text with wild cards. I have the following working API call. http://localhost:9200/\_search?q="Error creating" AND @timestamp:\["2019-03-18T17:01:49Z" TO "2019-03-18T18:00…

---

## [Range filters with query\_String and function score returning zero results](https://discuss.elastic.co/t/range-filters-with-query-string-and-function-score-returning-zero-results/98472)

<div class="topic-metadata">

**Author:** [@asvishen](https://discuss.elastic.co/u/asvishen)\
**Replies:** 0\
**Last updated:** [August 27, 2017, 10:13am UTC](https://discuss.elastic.co/t/range-filters-with-query-string-and-function-score-returning-zero-results/98472 "2017-08-27T10:13:48Z")

</div>

I have been trying to get the function score query to work with range filters and query\_string query. I am using the field\_value\_factor inside the function score as well as the range filters and query\_string. Using the q…

---

## [ELK capabilities to replace traditional monitoring](https://discuss.elastic.co/t/elk-capabilities-to-replace-traditional-monitoring/288445)

<div class="topic-metadata">

**Author:** [@gbeltramelli](https://discuss.elastic.co/u/gbeltramelli)\
**Replies:** 3\
**Last updated:** [November 5, 2021, 1:11am UTC](https://discuss.elastic.co/t/elk-capabilities-to-replace-traditional-monitoring/288445 "2021-11-05T01:11:09Z")

</div>

Hi, I am new to Elastic and in my organization we are thinking of eliminating NAGIOS as a monitoring tool so we are investigating the capabilities that this stack can give us. I have not been able to find how to replace…

---

## [Could Not Index event to Elasticsearch](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/284295)

<div class="topic-metadata">

**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\
**Replies:** 3\
**Last updated:** [September 21, 2021, 8:27am UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch/284295 "2021-09-21T08:27:17Z")

</div>

Hello, I am running Logstash with 11 pipelines for 9 different log types, when I send those logs from Filebeat to Logstash, I tail the Logstash logs and get this error. Nonetheless, in Elasticsearch and Kibana I receive …

---

## [Create Region Map Visualization on Kibana with only Iso Code](https://discuss.elastic.co/t/create-region-map-visualization-on-kibana-with-only-iso-code/239365)

<div class="topic-metadata">

**Author:** [@Fernando1](https://discuss.elastic.co/u/Fernando1)\
**Replies:** 8\
**Last updated:** [July 1, 2020, 8:40pm UTC](https://discuss.elastic.co/t/create-region-map-visualization-on-kibana-with-only-iso-code/239365 "2020-07-01T20:40:08Z")

</div>

Hello!! How is going? I'm trying to build a Map visualization here in kibana. My data only has the iso 2 letters abbreviation code, and I want to do a "region" map, without points, because our data granularity doesn't…

---

## [Uptime UI (and Discover) not showing any data in Heartbeat](https://discuss.elastic.co/t/uptime-ui-and-discover-not-showing-any-data-in-heartbeat/218717)

<div class="topic-metadata">

**Author:** [@shalvah.deimos](https://discuss.elastic.co/u/shalvah.deimos)\
**Replies:** 3\
**Last updated:** [February 20, 2020, 1:53pm UTC](https://discuss.elastic.co/t/uptime-ui-and-discover-not-showing-any-data-in-heartbeat/218717 "2020-02-20T13:53:21Z")

</div>

What I've done: Set up a Docker container running Heartbeat and sending to a remote ES cluster Configured monitors What should be happening I should see my Heartbeat monitors in the Uptime UI What is happening Upti…

---

## [Extracting Data retrieved by Timelion](https://discuss.elastic.co/t/extracting-data-retrieved-by-timelion/126318)

<div class="topic-metadata">

**Author:** [@DeepLearning](https://discuss.elastic.co/u/DeepLearning)\
**Replies:** 3\
**Last updated:** [April 4, 2018, 9:34am UTC](https://discuss.elastic.co/t/extracting-data-retrieved-by-timelion/126318 "2018-04-04T09:34:58Z")

</div>

Hi all, I'm new to ELK and am really enjoying it so far. I'm working on deep learning and am interested in feeding my neural net aggregations of my raw data over some time units (e.g. if I have several days of raw data…

---

## [Tie breaker master node with higher latency](https://discuss.elastic.co/t/tie-breaker-master-node-with-higher-latency/89683)

<div class="topic-metadata">

**Author:** [@alienmind](https://discuss.elastic.co/u/alienmind)\
**Replies:** 3\
**Last updated:** [June 16, 2017, 10:45pm UTC](https://discuss.elastic.co/t/tie-breaker-master-node-with-higher-latency/89683 "2017-06-16T22:45:04Z")

</div>

Hi I know this is not the recommended option, but I have a stretched cluster in two DC's with dedicated master-eligible nodes, and a 3rd DC with just one tie-breaker node. This 3rd datacenter has a higher latency (po…

---

## [Вопросы по организации индексов](https://discuss.elastic.co/t/topic/69714)

<div class="topic-metadata">

**Author:** [@bio](https://discuss.elastic.co/u/bio)\
**Replies:** 3\
**Last updated:** [December 23, 2016, 7:30pm UTC](https://discuss.elastic.co/t/topic/69714 "2016-12-23T19:30:48Z")

</div>

Всем привет! Вопрос №1 - Можно ли как-то связывать вложенные объекты с документами в другом индексе или типе ? Например: Объекты Clients \[ { "id": 1, "name": "client 1", "tags": \[ …

---

## ["fields" key show date-type fields in JSON view](https://discuss.elastic.co/t/fields-key-show-date-type-fields-in-json-view/230744)

<div class="topic-metadata">

**Author:** [@talalatpixlee](https://discuss.elastic.co/u/talalatpixlee)\
**Replies:** 2\
**Last updated:** [May 5, 2020, 3:26pm UTC](https://discuss.elastic.co/t/fields-key-show-date-type-fields-in-json-view/230744 "2020-05-05T15:26:33Z")

</div>

This is just an inquiry. In the discover view when i try and look at the raw json for a document, I see the keys \_id, \_type, \_index, \_version, \_score and \_source which are all expected. I see an additional field called "…

---

## [Analyse mots à mots](https://discuss.elastic.co/t/analyse-mots-a-mots/139774)

<div class="topic-metadata">

**Author:** [@Yeahmangood](https://discuss.elastic.co/u/Yeahmangood)\
**Replies:** 2\
**Last updated:** [July 18, 2018, 7:01am UTC](https://discuss.elastic.co/t/analyse-mots-a-mots/139774 "2018-07-18T07:01:47Z")

</div>

Bonjour, Cela fait maintenant 1 mois que je récupère en direct des tweets au sujet du festival d'Avignon. J'ai donc crée un dashboard, en utilisant le mapping proposé par kibana pour twitter. Je cherche à présent à cr…

---

## [Painless script error "Unsupported script value"](https://discuss.elastic.co/t/painless-script-error-unsupported-script-value/211087)

<div class="topic-metadata">

**Author:** [@Yacine\_Mourchid](https://discuss.elastic.co/u/Yacine_Mourchid)\
**Replies:** 1\
**Last updated:** [December 9, 2019, 10:11am UTC](https://discuss.elastic.co/t/painless-script-error-unsupported-script-value/211087 "2019-12-09T10:11:55Z")

</div>

Hello, I'm new with kibana, elasticsearch and painles. I try to get my real memory usage of my Redhat server. So I create a scripted field with this painless script : float a; float b; if (doc\['system.memory.actua…

---

## [Ctx.payload.hits.hits in a tabular format within email box](https://discuss.elastic.co/t/ctx-payload-hits-hits-in-a-tabular-format-within-email-box/173976)

<div class="topic-metadata">

**Author:** [@Mariner191](https://discuss.elastic.co/u/Mariner191)\
**Replies:** 1\
**Last updated:** [March 26, 2019, 8:37pm UTC](https://discuss.elastic.co/t/ctx-payload-hits-hits-in-a-tabular-format-within-email-box/173976 "2019-03-26T20:37:28Z")

</div>

Hi there, Following the Jan 20 2018 post, "Include fields in watcher email alert" How to transform payload hits into a table format, making it easy to read for end-users? Running this format as a stand-alone JSON phras…

---

## [Multiline handling for log4net](https://discuss.elastic.co/t/multiline-handling-for-log4net/77700)

<div class="topic-metadata">

**Author:** [@CLLI](https://discuss.elastic.co/u/CLLI)\
**Replies:** 0\
**Last updated:** [March 7, 2017, 4:53pm UTC](https://discuss.elastic.co/t/multiline-handling-for-log4net/77700 "2017-03-07T16:53:42Z")

</div>

Hello there, I am looking at ways of centralizing my logs and the ELK stack is very impressive. While trying to evaluate it I've gotten stuck on the handling of multiline logs. I've googled and read posts from up to a f…

---

## [Geoip filter in logstash with Index Template not creating geo\_point object as expected](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768)

<div class="topic-metadata">

**Author:** [@ehfdub](https://discuss.elastic.co/u/ehfdub)\
**Replies:** 5\
**Last updated:** [October 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768 "2021-10-22T15:34:40Z")

</div>

Hello, I have a geoip in my logstash filter: geoip { source =\> "src\_ip" } and I created an index template via the Kibana DevTools for ALL new indexes: PUT /\_template/my\_template { "order": 0, "template": "\*", …

---

## [ORA-01882: timezone region not found](https://discuss.elastic.co/t/ora-01882-timezone-region-not-found/18977)

<div class="topic-metadata">

**Author:** [@gdragu](https://discuss.elastic.co/u/gdragu)\
**Replies:** 5\
**Last updated:** [July 31, 2014, 9:17am UTC](https://discuss.elastic.co/t/ora-01882-timezone-region-not-found/18977 "2014-07-31T09:17:58Z")

</div>

Hello, Is it any possibility to specify a parameter value to java command line behind the JDBC River? I think at a -Duser.timezone=Europe/Istanbul, for exemple. When I try to create a JDBC River for an Oracle d…

---

## [Give privilege to a user to create index pattern](https://discuss.elastic.co/t/give-privilege-to-a-user-to-create-index-pattern/256143)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 10:44am UTC](https://discuss.elastic.co/t/give-privilege-to-a-user-to-create-index-pattern/256143 "2020-11-23T10:44:04Z")

</div>

Hello, How can I give privilege to a user to create index patterns but not having the right to create indices? When I use "manage" privilege then the user has access everywhere. Thank you in advance! /Angelos

---

## [Pattern\_filter for removing dots from a number](https://discuss.elastic.co/t/pattern-filter-for-removing-dots-from-a-number/105575)

<div class="topic-metadata">

**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\
**Replies:** 2\
**Last updated:** [October 27, 2017, 4:43pm UTC](https://discuss.elastic.co/t/pattern-filter-for-removing-dots-from-a-number/105575 "2017-10-27T16:43:34Z")

</div>

Hi everyone, I am using elasticsearch version 5.5.2 . I using GET /\_analyze API to test a pattern\_replace filter. I just need to remove all dots from a number. What I am trying to do is: GET /\_analyze { "char\_fi…

---

## [Meaning of automatic index cleanup](https://discuss.elastic.co/t/meaning-of-automatic-index-cleanup/83217)

<div class="topic-metadata">

**Author:** [@kylegordon](https://discuss.elastic.co/u/kylegordon)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 9:17am UTC](https://discuss.elastic.co/t/meaning-of-automatic-index-cleanup/83217 "2017-04-25T09:17:27Z")

</div>

I have no desire to use automatic cleanup, yet when installing the basic license for x-pack, I am greeted with the message 'Automatic index cleanup is locked to 7 days for clusters with \[BASIC\] license.' I already use …

---

## [Single Sign On with Active Directory](https://discuss.elastic.co/t/single-sign-on-with-active-directory/40421)

<div class="topic-metadata">

**Author:** [@Jackal9301](https://discuss.elastic.co/u/Jackal9301)\
**Replies:** 2\
**Last updated:** [January 29, 2016, 11:57am UTC](https://discuss.elastic.co/t/single-sign-on-with-active-directory/40421 "2016-01-29T11:57:53Z")

</div>

Is there a way I can configure single sign on or pass-through authentication so that kibana does not prompt all of my users for their credentials but pulls them in?

---

## [Changing number of shards and replicas for an existing index?](https://discuss.elastic.co/t/changing-number-of-shards-and-replicas-for-an-existing-index/5195)

<div class="topic-metadata">

**Author:** [@Tony\_Chong](https://discuss.elastic.co/u/Tony_Chong)\
**Replies:** 2\
**Last updated:** [August 19, 2011, 4:37am UTC](https://discuss.elastic.co/t/changing-number-of-shards-and-replicas-for-an-existing-index/5195 "2011-08-19T04:37:06Z")

</div>

I have been doing some research on adding shards and replicas after they have been created. It appears that replicas are no big deal. Use the API, and elasticsearch will distribute copies evenly across your cluster. …

---

## [Graphing Unique and Total Website Hits](https://discuss.elastic.co/t/graphing-unique-and-total-website-hits/155940)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 6\
**Last updated:** [November 8, 2018, 9:42pm UTC](https://discuss.elastic.co/t/graphing-unique-and-total-website-hits/155940 "2018-11-08T21:42:20Z")

</div>

I have some web traffic data that I am ingesting and would like to display a table showing the URL that was visited, the total number of hits (based off IP) and the unique number of hits (again based off IP). I have a t…

---

## [Logstash timestamp with CEST](https://discuss.elastic.co/t/logstash-timestamp-with-cest/136312)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 6\
**Last updated:** [June 18, 2018, 10:49pm UTC](https://discuss.elastic.co/t/logstash-timestamp-with-cest/136312 "2018-06-18T22:49:55Z")

</div>

Hi all I have a timestamp in the log which has the follwing format ",xxxxxxx,Thu May 31 09:40:46 CEST 2018,yyyyyy...." I tried to have the config ... ... filter { if (\[path\] =~ /log/) { csv { columns =\> \[ "even…

---

## [Unable to access 'path.data' (/data/db/elasticsearch)](https://discuss.elastic.co/t/unable-to-access-path-data-data-db-elasticsearch/352302)

<div class="topic-metadata">

**Author:** [@daniela09](https://discuss.elastic.co/u/daniela09)\
**Replies:** 4\
**Last updated:** [February 5, 2024, 1:36pm UTC](https://discuss.elastic.co/t/unable-to-access-path-data-data-db-elasticsearch/352302 "2024-02-05T13:36:32Z")

</div>

This is my Statefulset for Elasticsearch spec: podManagementPolicy: OrderedReady replicas: 3 revisionHistoryLimit: 10 selector: matchLabels: app: elasticsearch serviceName: elasticsearch-data templ…

---

## [Logstash multiple pipelines failure with persistent queues](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520)

<div class="topic-metadata">

**Author:** [@proton](https://discuss.elastic.co/u/proton)\
**Replies:** 4\
**Last updated:** [February 7, 2022, 10:01pm UTC](https://discuss.elastic.co/t/logstash-multiple-pipelines-failure-with-persistent-queues/296520 "2022-02-07T22:01:15Z")

</div>

Hello! I need some help understanding pipeline to pipeline communication in logstash. I'm reading the output isolator pattern documentation and it says below: If any of the persistent queues of the downstream pipelines…

---

## [Can we disable Kibana Version Mismatch alert](https://discuss.elastic.co/t/can-we-disable-kibana-version-mismatch-alert/171220)

<div class="topic-metadata">

**Author:** [@smani](https://discuss.elastic.co/u/smani)\
**Replies:** 4\
**Last updated:** [March 7, 2019, 8:52pm UTC](https://discuss.elastic.co/t/can-we-disable-kibana-version-mismatch-alert/171220 "2019-03-07T20:52:35Z")

</div>

I have two kibana instance in a cluster with different versions and receiving cluster alerts on "Kibana Version Mismatch". using Xpack monitoring. Is there any way to disable this specific alert from cluster alert. Than…

---

## [Kibana Development Environment error](https://discuss.elastic.co/t/kibana-development-environment-error/162911)

<div class="topic-metadata">

**Author:** [@TrumanDu](https://discuss.elastic.co/u/TrumanDu)\
**Replies:** 4\
**Last updated:** [January 5, 2019, 12:49pm UTC](https://discuss.elastic.co/t/kibana-development-environment-error/162911 "2019-01-05T12:49:24Z")

</div>

kibana 6.5.4 yarn kbn bootstrap error. @kbn/config-schema: $ yarn build @kbn/datemath: $ yarn build --quiet @kbn/system-loader: $ yarn build @kbn/config-schema: $ tsc @kbn/datemath: $ babel src --out-dir target --copy-…

---

## [Kibana Data discovery query highlighter missing](https://discuss.elastic.co/t/kibana-data-discovery-query-highlighter-missing/89317)

<div class="topic-metadata">

**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\
**Replies:** 7\
**Last updated:** [July 10, 2017, 8:31pm UTC](https://discuss.elastic.co/t/kibana-data-discovery-query-highlighter-missing/89317 "2017-07-10T20:31:54Z")

</div>

Hi Team, I'm using ELK stack 5.4 version and beats 5.4 version in our dev environmnet. We can see initially when we search with a query in data discovery in kibana UI, the results used to come and those would be highli…

---

## [Segfault when starting filebeat on RHEL5.5](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258)

<div class="topic-metadata">

**Author:** [@jkpaye](https://discuss.elastic.co/u/jkpaye)\
**Replies:** 1\
**Last updated:** [January 14, 2016, 8:51pm UTC](https://discuss.elastic.co/t/segfault-when-starting-filebeat-on-rhel5-5/39258 "2016-01-14T20:51:38Z")

</div>

Having issues getting filebeat to run on RHEL5.5. Running kernel 2.6.18-238. Any ideas? strace -f /usr/bin/filebeat -c /etc/filebeat/filebeat.yml -e figtest execve("/usr/bin/filebeat", \["/usr/bin/filebeat", "-c", "/…

---

## [Cannot connect node to cluster](https://discuss.elastic.co/t/cannot-connect-node-to-cluster/230924)

<div class="topic-metadata">

**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\
**Replies:** 3\
**Last updated:** [May 4, 2020, 11:00pm UTC](https://discuss.elastic.co/t/cannot-connect-node-to-cluster/230924 "2020-05-04T23:00:00Z")

</div>

I have set up 2 nodes. Both are in the same machine (VM). The first node is in my host os (windows server 2016) and the second node is in the docker container. The nodes work well individually, but, failed to be in the …

---

## [Unable to create client connection to Elasticsearch. Error: TransportError(401, u'security\_exception', u'missing authentication credentials for REST request \[/\]')](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-error-transporterror-401-usecurity-exception-umissing-authentication-credentials-for-rest-request/196740)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 3\
**Last updated:** [August 26, 2019, 1:28pm UTC](https://discuss.elastic.co/t/unable-to-create-client-connection-to-elasticsearch-error-transporterror-401-usecurity-exception-umissing-authentication-credentials-for-rest-request/196740 "2019-08-26T13:28:04Z")

</div>

Hi, i am using elk stack with version 7.1.0 with x-pack and i want to snapshot the index using curator and when im executing the curator im getting the following errors : ig ./curator.yml --dry-run 2019-08-26 15:02:25…

---

## [Bulk Indexing not working \[resolved\]](https://discuss.elastic.co/t/bulk-indexing-not-working-resolved/31935)

<div class="topic-metadata">

**Author:** [@Phrozyn](https://discuss.elastic.co/u/Phrozyn)\
**Replies:** 3\
**Last updated:** [October 10, 2015, 8:36pm UTC](https://discuss.elastic.co/t/bulk-indexing-not-working-resolved/31935 "2015-10-10T20:36:50Z")

</div>

Hi! I've created mappings and have imported data successfully. However when I go to elasticsearch using /\_plugin/head/ on the browser tab and click on the index or it's types I created - nothing populates in the righ…

---

## [Providing transport addresses through yml file](https://discuss.elastic.co/t/providing-transport-addresses-through-yml-file/8068)

<div class="topic-metadata">

**Author:** [@Ashish\_Nigam](https://discuss.elastic.co/u/Ashish_Nigam)\
**Replies:** 3\
**Last updated:** [June 14, 2012, 9:35pm UTC](https://discuss.elastic.co/t/providing-transport-addresses-through-yml-file/8068 "2012-06-14T21:35:58Z")

</div>

Hi, I know we can create TransportClient with something like - new TransportClient(settings).addTransportAddress(new InetSocketTransportAddress(host, port)); But here, I have to explicitly provide host and port info in…

---

## [Convert String to date and replace @timestamp](https://discuss.elastic.co/t/convert-string-to-date-and-replace-timestamp/211455)

<div class="topic-metadata">

**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\
**Replies:** 2\
**Last updated:** [December 11, 2019, 1:27pm UTC](https://discuss.elastic.co/t/convert-string-to-date-and-replace-timestamp/211455 "2019-12-11T13:27:15Z")

</div>

Hi all I have a custom field msg.message.timestamp which have the date in the format yyyy-MM-ddThh:mm:ss.nnnZ format eg. 2019-12-11T10:17:54.961Z I would like to use this as @timestamp. I tied a couple of things wit…

---

## [How many master nodes on a three node cluster on elasticsearch?](https://discuss.elastic.co/t/how-many-master-nodes-on-a-three-node-cluster-on-elasticsearch/41616)

<div class="topic-metadata">

**Author:** [@i5513](https://discuss.elastic.co/u/i5513)\
**Replies:** 2\
**Last updated:** [February 12, 2016, 4:05pm UTC](https://discuss.elastic.co/t/how-many-master-nodes-on-a-three-node-cluster-on-elasticsearch/41616 "2016-02-12T16:05:17Z")

</div>

Hello, At Elasticsearch Resiliency Status | Elastic I can read: In Elasticsearch, we actively promote the use of dedicated master nodes in critical clusters to make sure that there are 3 nodes whose only role is to …

[Previous page](https://discuss.elastic.co/top.md?page=949&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=951&per_page=50&period=all)
