# Top **URL:** https://discuss.elastic.co/top.md?page=952&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 953 --- ## [イベントとイベントの間隔をKibanaでグラフ化したい](https://discuss.elastic.co/t/kibana/187126)
**Author:** [@GeneA](https://discuss.elastic.co/u/GeneA)\ **Replies:** 3\ **Last updated:** [June 27, 2019, 8:43am UTC](https://discuss.elastic.co/t/kibana/187126 "2019-06-27T08:43:07Z")
はじめまして。 ある人の行動パターンについて「時間＋イベント」という形でelasticsearchにデータがインデックスされているとします。このデータを用いて ・睡眠時間(就寝と起床の時間の差) ・就業時間(職場着と退社の時間の差) 等、イベントとイベントの時間の差をグラフ化する事はできるでしょうか。 もし出来るとしたら、どのような方法で実現できるでしょうか。 timelionの式で実現できるのか、Visual Builde… --- ## [Performance issue on some requests](https://discuss.elastic.co/t/performance-issue-on-some-requests/77991)
**Author:** [@RVillette](https://discuss.elastic.co/u/RVillette)\ **Replies:** 3\ **Last updated:** [March 13, 2017, 6:07pm UTC](https://discuss.elastic.co/t/performance-issue-on-some-requests/77991 "2017-03-13T18:07:30Z")
Hi, With Elasticsearch 2.2.1, we currently have, in production, a cluster with 3 nodes, and their CPU usage is reaching 80% most of the day. When the CPU usage is too high, our application regularly gets an error messa… --- ## [Can Elastic APM to Monitoring Mobile Application?](https://discuss.elastic.co/t/can-elastic-apm-to-monitoring-mobile-application/270781)
**Author:** [@Helmy\_Me](https://discuss.elastic.co/u/Helmy_Me)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 7:52am UTC](https://discuss.elastic.co/t/can-elastic-apm-to-monitoring-mobile-application/270781 "2021-04-21T07:52:30Z")
Hi All, I'm looking for a document for monitoring mobile applications with elastic APM. but I haven't found it yet. Can I monitor Mobile Application (andorid & Ios) using elastic? Please Advice. Thanks, Helmy --- ## [With 6.5 released, does that mean APM is now available in elastic cloud?](https://discuss.elastic.co/t/with-6-5-released-does-that-mean-apm-is-now-available-in-elastic-cloud/156889)
**Author:** [@Tim\_Heizer](https://discuss.elastic.co/u/Tim_Heizer)\ **Replies:** 1\ **Last updated:** [November 15, 2018, 2:56pm UTC](https://discuss.elastic.co/t/with-6-5-released-does-that-mean-apm-is-now-available-in-elastic-cloud/156889 "2018-11-15T14:56:15Z")
With 6.5 released, does that mean APM is now available in elastic cloud? --- ## [Configuring the logs in apm-server](https://discuss.elastic.co/t/configuring-the-logs-in-apm-server/280730)
**Author:** [@Santhosh\_Reddy](https://discuss.elastic.co/u/Santhosh_Reddy)\ **Replies:** 4\ **Last updated:** [August 9, 2021, 2:47pm UTC](https://discuss.elastic.co/t/configuring-the-logs-in-apm-server/280730 "2021-08-09T14:47:33Z")
Kibana version: 7.13.2 Elasticsearch version: 7.13.2 APM Server version: 7.13.2 APM Agent language and version: node v14.17.3 Browser version: Safari Version 14.1 (16611.1.21.161.6) Description: Server logs are rend… --- ## [How to search parent document without children?](https://discuss.elastic.co/t/how-to-search-parent-document-without-children/261239)
**Author:** [@J\_Kit](https://discuss.elastic.co/u/J_Kit)\ **Replies:** 4\ **Last updated:** [January 16, 2021, 3:16am UTC](https://discuss.elastic.co/t/how-to-search-parent-document-without-children/261239 "2021-01-16T03:16:20Z")
I created parent-child relationship. "my\_join\_field": { "type": "join", "relations": { "parent": "child" } } I tried to search for all parent document with… --- ## [\[SOLVED\] Default view](https://discuss.elastic.co/t/solved-default-view/131004)
**Author:** [@astropanic](https://discuss.elastic.co/u/astropanic)\ **Replies:** 4\ **Last updated:** [May 8, 2018, 2:22pm UTC](https://discuss.elastic.co/t/solved-default-view/131004 "2018-05-08T14:22:58Z")
It is possible to setup a default view (for example my default dashboard) to be visible under the root URL of Kibana instead of the default info page? : Add Data to Kibana. Use these solutions to quickly turn your data… --- ## [Kibana won't start after installing Shield plugin](https://discuss.elastic.co/t/kibana-wont-start-after-installing-shield-plugin/46309)
**Author:** [@Mike\_Wurtz](https://discuss.elastic.co/u/Mike_Wurtz)\ **Replies:** 4\ **Last updated:** [April 5, 2016, 12:43am UTC](https://discuss.elastic.co/t/kibana-wont-start-after-installing-shield-plugin/46309 "2016-04-05T00:43:56Z")
After installing the Shield plugin on Kbana 4.4.1 like this: /opt/kibana/bin/kibana plugin --install kibana/shield I restart kibana, and this error shows up in the log: {"type":"log","@timestamp":"2016-04-05T00:22:… --- ## [ECE medium installation example, AWS, runner ip connectivity](https://discuss.elastic.co/t/ece-medium-installation-example-aws-runner-ip-connectivity/206040)
**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\ **Replies:** 6\ **Last updated:** [November 8, 2019, 10:25am UTC](https://discuss.elastic.co/t/ece-medium-installation-example-aws-runner-ip-connectivity/206040 "2019-11-08T10:25:59Z")
I'm installing the second instance (step 3 here: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-topology-example2.html) after the first instance seemed to install without problems. The second instance comp… --- ## [Curator\_cli show\_snapshots doesn't seem to do anything or log output](https://discuss.elastic.co/t/curator-cli-show-snapshots-doesnt-seem-to-do-anything-or-log-output/132995)
**Author:** [@sihil](https://discuss.elastic.co/u/sihil)\ **Replies:** 6\ **Last updated:** [May 23, 2018, 4:09pm UTC](https://discuss.elastic.co/t/curator-cli-show-snapshots-doesnt-seem-to-do-anything-or-log-output/132995 "2018-05-23T16:09:39Z")
I can't help but feel that I'm making a rookie mistake here but can't figure it out. I'm trying to use curator\_cli (version 5.5.3) to list snapshots on an ES cluster (version 6.2.4). It will happily show\_indices and I c… --- ## [JSON parse error, original data now in message field](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/298065)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 2\ **Last updated:** [February 24, 2022, 8:54pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/298065 "2022-02-24T20:54:13Z")
HI, Error I am receiving in logstash logs is : \[2022-02-22T15:19:27,369\]\[ERROR\]\[logstash.codecs.json \] JSON parse error, original data now in message field {:error=\>#\ **Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 2\ **Last updated:** [July 14, 2020, 7:36am UTC](https://discuss.elastic.co/t/filebeat-registry-data-json-is-empty/240709 "2020-07-14T07:36:07Z") I am trying to setup filebeat, but it not harvesting logs at all from the given log file path. After lot of research, I came to know that data.json in registry folder is empty which is why filebeat is unable to read log… --- ## [Cannot Parse error: Lexical error](https://discuss.elastic.co/t/cannot-parse-error-lexical-error/164173)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 2:53pm UTC](https://discuss.elastic.co/t/cannot-parse-error-lexical-error/164173 "2019-01-15T14:53:04Z")
I just upgraded Kibana to version 6.5.3 but the client servers are still using version 6.3. My other services are parsing just fine and the logs for the the new servers i've recently added are in similar format to the re… --- ## [Is case-insensitive sort on keyword aggregation. ES 7.7.0](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-es-7-7-0/268198)
**Author:** [@Cular](https://discuss.elastic.co/u/Cular)\ **Replies:** 3\ **Last updated:** [March 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/is-case-insensitive-sort-on-keyword-aggregation-es-7-7-0/268198 "2021-03-26T16:44:49Z")
I have similar case like here and here2. I am trying to achive alphabetical sorting (case insensitive) with original value from aggregation. Simplified example mapping: PUT test\_data { "mappings": { "prope… --- ## [Filebeat.exe setup](https://discuss.elastic.co/t/filebeat-exe-setup/180920)
**Author:** [@pavansai](https://discuss.elastic.co/u/pavansai)\ **Replies:** 3\ **Last updated:** [May 14, 2019, 6:58am UTC](https://discuss.elastic.co/t/filebeat-exe-setup/180920 "2019-05-14T06:58:48Z")
PS C:\\Program Files\\Filebeat\> .\\filebeat.exe setup Index setup complete. Loading dashboards (Kibana must be running and reachable) Exiting: Failed to import dashboard: Failed to load directory C:\\Program Files\\Filebea… --- ## [Stalling thread info jdbc](https://discuss.elastic.co/t/stalling-thread-info-jdbc/164624)
**Author:** [@Chivolta](https://discuss.elastic.co/u/Chivolta)\ **Replies:** 3\ **Last updated:** [January 18, 2019, 12:59pm UTC](https://discuss.elastic.co/t/stalling-thread-info-jdbc/164624 "2019-01-18T12:59:41Z")
Hello, Whenever i try to make some changes in my configs, i get: \[2019-01-17T09:04:25,959\]\[INFO \]\[logstash.pipelineaction.reload\] Reloading pipeline {"pipeline.id"=&g\`t;:main} \[2019-01-17T09:04:31,144\]\[WARN \]\[logstas… --- ## [How to remove many fields by script?](https://discuss.elastic.co/t/how-to-remove-many-fields-by-script/128992)
**Author:** [@mh20](https://discuss.elastic.co/u/mh20)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 12:43pm UTC](https://discuss.elastic.co/t/how-to-remove-many-fields-by-script/128992 "2018-04-24T12:43:07Z")
Hi, I'm using script below to remove multiple fields from elasticsearch: "script" : "ctx.\_source.remove('new\_field1'); ctx.\_source.remove('new\_field2')" When there are many fields that should be removed, this exception… --- ## [Performance of doc\_values field vs analysed field](https://discuss.elastic.co/t/performance-of-doc-values-field-vs-analysed-field/99445)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 3\ **Last updated:** [September 20, 2017, 9:31am UTC](https://discuss.elastic.co/t/performance-of-doc-values-field-vs-analysed-field/99445 "2017-09-20T09:31:56Z")
Hi! We have an elasticsearch that contains over half a billion documents that each have a url field that stores a URL. The url field mapping currently has the settings: { index: not\_analyzed doc\_values: true … --- ## [Elasticsearch Problem： bin/plugin install license](https://discuss.elastic.co/t/elasticsearch-problem-bin-plugin-install-license/57305)
**Author:** [@cycwll](https://discuss.elastic.co/u/cycwll)\ **Replies:** 3\ **Last updated:** [August 5, 2016, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch-problem-bin-plugin-install-license/57305 "2016-08-05T08:46:35Z")
\[root@PHP plugins\]# ../bin/plugin install file:/usr/share/elasticsearch/plugins/license-2.3.4.zip -\> Installing from file:/usr/share/elasticsearch/plugins/license-2.3.4.zip... Trying file:/usr/share/elasticsearch/plugin… --- ## [Multiline filter - Missing logs](https://discuss.elastic.co/t/multiline-filter-missing-logs/27061)
**Author:** [@pgarcia](https://discuss.elastic.co/u/pgarcia)\ **Replies:** 3\ **Last updated:** [August 18, 2015, 1:54pm UTC](https://discuss.elastic.co/t/multiline-filter-missing-logs/27061 "2015-08-18T13:54:18Z")
Hi, I am trying to configure an ELK Stack with multiple lines. The layout is: Logstash Forwarder --\> Logstash --\> Elasticsearch --\> Kibana Some of our logs will be multiline so I want ELK to merge those entries int… --- ## [Kibana SIEM display problem just spinning no error](https://discuss.elastic.co/t/kibana-siem-display-problem-just-spinning-no-error/228488)
**Author:** [@Bartekk](https://discuss.elastic.co/u/Bartekk)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 2:18pm UTC](https://discuss.elastic.co/t/kibana-siem-display-problem-just-spinning-no-error/228488 "2020-04-22T14:18:48Z")
Hi i've problem in SIEM/NETWORK/Flows i've just spinning ring and nothing displays , before update everything was fine. and log https://pastebin.pl/view/88c362e3 i dont see nothing special here ;/ No idea how to fix … --- ## [Swagger compatibility?](https://discuss.elastic.co/t/swagger-compatibility/146566)
**Author:** [@Jas\_Ahluwalia](https://discuss.elastic.co/u/Jas_Ahluwalia)\ **Replies:** 7\ **Last updated:** [August 30, 2018, 9:31pm UTC](https://discuss.elastic.co/t/swagger-compatibility/146566 "2018-08-30T21:31:18Z")
Hi, I used swagger-codegen to generate an express.js application (https://swagger.io/). I have several microservices generated in this fashion, Hence, why apm is so appealing ot me. When I try to add the apm agent to e… --- ## [Doc can be found by query but not by get](https://discuss.elastic.co/t/doc-can-be-found-by-query-but-not-by-get/143860)
**Author:** [@Cristi\_Boariu](https://discuss.elastic.co/u/Cristi_Boariu)\ **Replies:** 7\ **Last updated:** [August 10, 2018, 4:24pm UTC](https://discuss.elastic.co/t/doc-can-be-found-by-query-but-not-by-get/143860 "2018-08-10T16:24:14Z")
I have indexed a few documents for some users and I can find any of them by id, eg: GET /athlete/\_search?q=id:19 (returns my athlete in \_source): { "took": 2, "timed\_out": false, "\_shards": { "total": 5, … --- ## [Rotation and Retention on FileBeat](https://discuss.elastic.co/t/rotation-and-retention-on-filebeat/85475)
**Author:** [@FidelSanchezJr](https://discuss.elastic.co/u/FidelSanchezJr)\ **Replies:** 1\ **Last updated:** [May 11, 2017, 8:42pm UTC](https://discuss.elastic.co/t/rotation-and-retention-on-filebeat/85475 "2017-05-11T20:42:39Z")
Hi, Does filebeat have a built in capability for file retention and rotation? --- ## [Filebeat not starting as Daemonset](https://discuss.elastic.co/t/filebeat-not-starting-as-daemonset/130904)
**Author:** [@Victor\_Covalski](https://discuss.elastic.co/u/Victor_Covalski)\ **Replies:** 4\ **Last updated:** [May 9, 2018, 7:23pm UTC](https://discuss.elastic.co/t/filebeat-not-starting-as-daemonset/130904 "2018-05-09T19:23:20Z")
Hi, I'm trying to deploy Filebeat to collect logs from my Kubelets using the provided example. Although, my filebeat container is not starting and I'm getting the following error messages May 7 15:26:22 xxx kubelet: … --- ## [How to collapse multiple fields value in ElasticSearch?](https://discuss.elastic.co/t/how-to-collapse-multiple-fields-value-in-elasticsearch/222427)
**Author:** [@ndhcoder](https://discuss.elastic.co/u/ndhcoder)\ **Replies:** 0\ **Last updated:** [March 6, 2020, 9:31am UTC](https://discuss.elastic.co/t/how-to-collapse-multiple-fields-value-in-elasticsearch/222427 "2020-03-06T09:31:52Z")
Hi everyone, I want to make a use case is allow user setting dynamic collapse field on their data, so I have a question: How to collapse multiple fields value in ElasticSearch ? Thanks all. --- ## [Log pattern for AWS EMR logs](https://discuss.elastic.co/t/log-pattern-for-aws-emr-logs/200756)
**Author:** [@sk545](https://discuss.elastic.co/u/sk545)\ **Replies:** 0\ **Last updated:** [September 23, 2019, 8:39pm UTC](https://discuss.elastic.co/t/log-pattern-for-aws-emr-logs/200756 "2019-09-23T20:39:14Z")
Can anyone please provide the example of log stash's AWS S3 configuration settings.? --- ## [Is it good that memory usage is high like over 90%?](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 5\ **Last updated:** [February 24, 2021, 6:10am UTC](https://discuss.elastic.co/t/is-it-good-that-memory-usage-is-high-like-over-90/265144 "2021-02-24T06:10:42Z")
Hi experts, I know that es node uses memory both for jvm and file cache. If I have an node with 50GB memory and set jvm using 25GB, is that expected when the total memory usage is high like 48GB and never go down? Will… --- ## [How to set configure timestamp in Map](https://discuss.elastic.co/t/how-to-set-configure-timestamp-in-map/242436)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 4:42am UTC](https://discuss.elastic.co/t/how-to-set-configure-timestamp-in-map/242436 "2020-07-28T04:42:40Z")
Hi, In Map, I have chosen absolute date range, 17 Jul 2020@00:00:00:00 till 23 Jul 2020@00:00:00:00. However, under the Inspect/Request I found the code "gte": "2020-07-16T16:00:00.000Z", "lte": "2020-07-22T16:00:00.0… --- ## [Orden random por campo personalizado](https://discuss.elastic.co/t/orden-random-por-campo-personalizado/115945)
**Author:** [@leandrobara](https://discuss.elastic.co/u/leandrobara)\ **Replies:** 5\ **Last updated:** [January 23, 2018, 3:48pm UTC](https://discuss.elastic.co/t/orden-random-por-campo-personalizado/115945 "2018-01-23T15:48:25Z")
Hola, tengo un campo personalizado llamado scores, que computa la cantiad de items vendidos en una cantidad de tiempo determinada. Necesito hacer una busqueda y que los resultados esten en orden aleatorio teniendo en cue… --- ## [KV filter is unable to handle = within a key value](https://discuss.elastic.co/t/kv-filter-is-unable-to-handle-within-a-key-value/103878)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 5\ **Last updated:** [October 17, 2017, 5:34am UTC](https://discuss.elastic.co/t/kv-filter-is-unable-to-handle-within-a-key-value/103878 "2017-10-17T05:34:40Z")
When I have the KV filter run against this string last="3367" post="" ltime="3" Instead of ending up with last: 3367 post: " ltime="3 I end up with last: 3367 post: \\ ltime: \\"3" I am expecting the KV filter to acc… --- ## [How to expose "demo" ECK elastic/kibana services on Kubernetes? loadbalancer?](https://discuss.elastic.co/t/how-to-expose-demo-eck-elastic-kibana-services-on-kubernetes-loadbalancer/320492)
**Author:** [@timb33](https://discuss.elastic.co/u/timb33)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 5:31pm UTC](https://discuss.elastic.co/t/how-to-expose-demo-eck-elastic-kibana-services-on-kubernetes-loadbalancer/320492 "2022-12-08T17:31:34Z")
Hi, I've following the quickstart demo (Quickstart | Elastic Cloud on Kubernetes \[2.5\] | Elastic) and have an ES I can port-forward to,but I want to be able to access my ES instance using e.g. a loadbalancer. Usually, I… --- ## [Losing logs in ELK](https://discuss.elastic.co/t/losing-logs-in-elk/275356)
**Author:** [@devopscanada](https://discuss.elastic.co/u/devopscanada)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 2:08am UTC](https://discuss.elastic.co/t/losing-logs-in-elk/275356 "2021-06-09T02:08:24Z")
Setup: Kubernetes cluster with filebeat-7.12.0 -\> logstash-7.9. -\> elasticsearch-7.9.1 -\> kibana-7.9.1 Problem: we lose many logs often and sometimes in a massive way, as in we stop seeing logs from one or more pods… --- ## [Visualize: Fielddata is disabled on text fields by default. Set fielddata=true on \[system.syslog.hostname\] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory](https://discuss.elastic.co/t/visualize-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-system-syslog-hostname-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index-note-that-this-can-however-use-significant-memory/84526)
**Author:** [@shaonbean](https://discuss.elastic.co/u/shaonbean)\ **Replies:** 2\ **Last updated:** [May 4, 2017, 11:11am UTC](https://discuss.elastic.co/t/visualize-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-system-syslog-hostname-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index-note-that-this-can-however-use-significant-memory/84526 "2017-05-04T11:11:07Z")
Error: Request to Elasticsearch failed: {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Fielddata is disabled on text fields by default. Set fielddata=true on \[system.syslog.hostname\] in order to l… --- ## [Syncing two elasticsearch clusters](https://discuss.elastic.co/t/syncing-two-elasticsearch-clusters/14242)
**Author:** [@Eugene\_Strokin](https://discuss.elastic.co/u/Eugene_Strokin)\ **Replies:** 2\ **Last updated:** [November 14, 2013, 1:40pm UTC](https://discuss.elastic.co/t/syncing-two-elasticsearch-clusters/14242 "2013-11-14T13:40:09Z")
Hello, my problem is that I need to suport second cluster of ES which has different version, different document structure, but the same data from the first ES. The data is coming to the first cluster, and I need to … --- ## [Convert text field to keyword using runtime field](https://discuss.elastic.co/t/convert-text-field-to-keyword-using-runtime-field/316572)
**Author:** [@sunilmpatil](https://discuss.elastic.co/u/sunilmpatil)\ **Replies:** 1\ **Last updated:** [October 14, 2022, 12:15am UTC](https://discuss.elastic.co/t/convert-text-field-to-keyword-using-runtime-field/316572 "2022-10-14T00:15:05Z")
Hi, I have log data ingested into multiple elasticsearch indices. Index pattern is created to generate Kibana dashboard. Some fields are created as text, hence I am not able to use them in Kibana aggregations. I tried u… --- ## [Embed Kibana Dashboard via IFrame / csp config](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128 "2021-12-16T14:13:32Z")
hi i want a third webserver to embed a dashboard via iframe, but default csp config denied it. what i tried so far in the kibana.yml xpack.security.sameSiteCookies: None xpack.security.secureCookies: true csp.strict:… --- ## [Little help needed with crawler content exclusion 7.14](https://discuss.elastic.co/t/little-help-needed-with-crawler-content-exclusion-7-14/291154)
**Author:** [@sanderunive](https://discuss.elastic.co/u/sanderunive)\ **Replies:** 8\ **Last updated:** [December 14, 2021, 8:18am UTC](https://discuss.elastic.co/t/little-help-needed-with-crawler-content-exclusion-7-14/291154 "2021-12-14T08:18:06Z")
Hi all, Currently our company is in transition between 2 CMS systems. We therefore have different implemenations on the old and the new CMS to prevent certain elements from being indexed by the Elastic Crawler, mainly f… --- ## [Auto balancer not working in the midst of disk space crisis](https://discuss.elastic.co/t/auto-balancer-not-working-in-the-midst-of-disk-space-crisis/257173)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 8\ **Last updated:** [December 1, 2020, 11:07am UTC](https://discuss.elastic.co/t/auto-balancer-not-working-in-the-midst-of-disk-space-crisis/257173 "2020-12-01T11:07:08Z")
Hello everyone, So in my cluster, i have 3 nodes, with 70%, 88% and 65% disk space usage. As you might expect, my autobalancer is not working despite my configuration being set as 'enabled:all'. Afraid that my 2nd nod… --- ## [Adding a new columns to a data table from a calculation based on two different columns in the same row](https://discuss.elastic.co/t/adding-a-new-columns-to-a-data-table-from-a-calculation-based-on-two-different-columns-in-the-same-row/242952)
**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 5:14pm UTC](https://discuss.elastic.co/t/adding-a-new-columns-to-a-data-table-from-a-calculation-based-on-two-different-columns-in-the-same-row/242952 "2020-07-29T17:14:42Z")
Hi, The user wants to see if there is a way to add a two additional column (Calculated columns) to data table like below table. Market | Total | D1 | D2 | Total D | Percentage D1 | Percentage D2 | percentage Tot… --- ## [Can ctx.execution\_time be formatted in Watcher?](https://discuss.elastic.co/t/can-ctx-execution-time-be-formatted-in-watcher/212258)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 9:09am UTC](https://discuss.elastic.co/t/can-ctx-execution-time-be-formatted-in-watcher/212258 "2019-12-19T09:09:17Z")
Hi, I setup a Watcher and want to have a timestamp on email subject line, so I put ctx.execution\_time, any way to format the ctx.execution\_time like "2019-12-18 08:15 PM" or similar format date/time? Please advise. Cur… --- ## [Elastic Common Schema for IPS Logs](https://discuss.elastic.co/t/elastic-common-schema-for-ips-logs/189259)
**Author:** [@Nybble](https://discuss.elastic.co/u/Nybble)\ **Replies:** 3\ **Last updated:** [July 26, 2019, 3:55pm UTC](https://discuss.elastic.co/t/elastic-common-schema-for-ips-logs/189259 "2019-07-26T15:55:52Z")
Hello, I'm currently working on implementing ECS but i'm stuck with IPS Logs. As many Antivirus, IPS, HIPS and other detection softwares, my IPS generate logs containing "Application" information and behavior thought n… --- ## [Elasticsearch not getting data from logstash](https://discuss.elastic.co/t/elasticsearch-not-getting-data-from-logstash/136166)
**Author:** [@rusty\_22](https://discuss.elastic.co/u/rusty_22)\ **Replies:** 8\ **Last updated:** [June 16, 2018, 12:40pm UTC](https://discuss.elastic.co/t/elasticsearch-not-getting-data-from-logstash/136166 "2018-06-16T12:40:25Z")
07:37:08.569 \[\[main\]\>worker8\] ERROR logstash.outputs.elasticsearch - Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: \[h… --- ## [How can I use the date filter (match) with many fields](https://discuss.elastic.co/t/how-can-i-use-the-date-filter-match-with-many-fields/126457)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 3\ **Last updated:** [April 3, 2018, 9:57am UTC](https://discuss.elastic.co/t/how-can-i-use-the-date-filter-match-with-many-fields/126457 "2018-04-03T09:57:45Z")
Hello! I want to match the date from a cvs file that comes in different fields with logstash! The date in the cvs file come in four fields (four columns) for example: |Fecha\_Trans|HH|MM|SS| 180314 |16 | 40 |45… --- ## [Upgrading pains](https://discuss.elastic.co/t/upgrading-pains/107644)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 3\ **Last updated:** [November 15, 2017, 8:07pm UTC](https://discuss.elastic.co/t/upgrading-pains/107644 "2017-11-15T20:07:08Z")
Hello, Just as feedback, I have to voice some frustration trying several paths to upgrade elastic/kibana/logstash. (CentOS, single node, nothing fancy) Attempt #1: yum upgrade to latest 5.6.4, then using yum again to … --- ## [Kibana XMLHttpRequest cannot load header](https://discuss.elastic.co/t/kibana-xmlhttprequest-cannot-load-header/49880)
**Author:** [@Veer\_Shubhranshu\_Shr](https://discuss.elastic.co/u/Veer_Shubhranshu_Shr)\ **Replies:** 3\ **Last updated:** [May 20, 2016, 5:27pm UTC](https://discuss.elastic.co/t/kibana-xmlhttprequest-cannot-load-header/49880 "2016-05-20T17:27:56Z")
Hi Kibana Team, I am developing a Kibana plugin. I am trying to make a AJAX call from Kibana Visualization to external web service. Below is my code: $.ajax({ type: "GET", url: 'http://localhost/elasticser… --- ## [Elastic Docker Integration - not collecting logs](https://discuss.elastic.co/t/elastic-docker-integration-not-collecting-logs/326947)
**Author:** [@sc1215](https://discuss.elastic.co/u/sc1215)\ **Replies:** 4\ **Last updated:** [March 6, 2023, 3:01pm UTC](https://discuss.elastic.co/t/elastic-docker-integration-not-collecting-logs/326947 "2023-03-06T15:01:20Z")
I had been using the 'System' integration agent to consume my docker logs which are saved in the path: /var/lib/docker/containers/\*/\*-json.log This has been working, but unfortunately, it was splitting up log lines whic… --- ## [Mapper attachments disable warn messages in logs](https://discuss.elastic.co/t/mapper-attachments-disable-warn-messages-in-logs/91846)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 7:51am UTC](https://discuss.elastic.co/t/mapper-attachments-disable-warn-messages-in-logs/91846 "2017-07-05T07:51:40Z")
Hi, I am using ES 2.3.2 with mapper attachments and when I send some attachment contents( in base64 format) for indexing, i see many warnings in the logs as below. How to disable these warnings as these run too much in… --- ## [ESX logs -\> remote syslog -\> ELK : Timestamp problems](https://discuss.elastic.co/t/esx-logs-remote-syslog-elk-timestamp-problems/90396)
**Author:** [@kottapar](https://discuss.elastic.co/u/kottapar)\ **Replies:** 5\ **Last updated:** [June 28, 2017, 5:36am UTC](https://discuss.elastic.co/t/esx-logs-remote-syslog-elk-timestamp-problems/90396 "2017-06-28T05:36:33Z")
The syslog messages fromt the ESX server and being received on the remote syslog as below. Jun 22 05:51:19 esxserv01 Vpxa: info vpxa\[FFDF9B70\] \[Originator@6876 sub=vpxLro opID=PollQuickStatsLoop-655fae54-a2\] \[VpxLRO\] … --- ## [Visualizing photo exif geo-cordinates with Kibana and Elasticsearch](https://discuss.elastic.co/t/visualizing-photo-exif-geo-cordinates-with-kibana-and-elasticsearch/57649)
**Author:** [@kmk3173](https://discuss.elastic.co/u/kmk3173)\ **Replies:** 5\ **Last updated:** [August 11, 2016, 11:39pm UTC](https://discuss.elastic.co/t/visualizing-photo-exif-geo-cordinates-with-kibana-and-elasticsearch/57649 "2016-08-11T23:39:21Z")
Does anyone have any experience using Elasticsearch to analyze photos with geo data and visualize it using kibana? I'm looking at this from a digital forensics perspective where I'm extracting photos from forensic ima… [Previous page](https://discuss.elastic.co/top.md?page=951&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=953&per_page=50&period=all)