# Top **URL:** https://discuss.elastic.co/top.md?page=960&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 961 --- ## [Cancelling Search Request & Search Query Timeout](https://discuss.elastic.co/t/cancelling-search-request-search-query-timeout/11608)
**Author:** [@ElasticUsers](https://discuss.elastic.co/u/ElasticUsers)\ **Replies:** 2\ **Last updated:** [April 17, 2013, 7:37pm UTC](https://discuss.elastic.co/t/cancelling-search-request-search-query-timeout/11608 "2013-04-17T19:37:47Z")
Hi Team, We use the following statements (only partial) to get the search response - SearchRequestBuilder builder = null; SearchResponse res= builder .execute().actionGet(); Can we cancel the abo… --- ## [Bulk messages sent through Logstash are stored a message](https://discuss.elastic.co/t/bulk-messages-sent-through-logstash-are-stored-a-message/134265)
**Author:** [@paulo.leao](https://discuss.elastic.co/u/paulo.leao)\ **Replies:** 4\ **Last updated:** [June 18, 2018, 5:54pm UTC](https://discuss.elastic.co/t/bulk-messages-sent-through-logstash-are-stored-a-message/134265 "2018-06-18T17:54:22Z")
Hello Everyone, I developed a powershell script to send message in bulk to Elastiseach using the Invoke-RestMethod command. When I send a bulk request directly to Elasticsearch, I can see the properties of my json obje… --- ## [EC2 Discovery Pluginにおけるcloud.aws.regionの変更について](https://discuss.elastic.co/t/ec2-discovery-plugin-cloud-aws-region/89021)
**Author:** [@tsukapah](https://discuss.elastic.co/u/tsukapah)\ **Replies:** 4\ **Last updated:** [June 13, 2017, 4:25am UTC](https://discuss.elastic.co/t/ec2-discovery-plugin-cloud-aws-region/89021 "2017-06-13T04:25:38Z")
EC2 Discovery Pluginを導入し、cloud.aws.regionを指定して起動したところ、 起動時のログに以下の出力がありました。 \[WARN \]\[o.e.d.c.s.Setting \] \[cloud.aws.region\] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaki… --- ## [Unable to install output-jdbc plugin on logstash](https://discuss.elastic.co/t/unable-to-install-output-jdbc-plugin-on-logstash/273062)
**Author:** [@Anoop\_kumar\_SRIVASTA](https://discuss.elastic.co/u/Anoop_kumar_SRIVASTA)\ **Replies:** 1\ **Last updated:** [May 16, 2021, 10:42am UTC](https://discuss.elastic.co/t/unable-to-install-output-jdbc-plugin-on-logstash/273062 "2021-05-16T10:42:40Z")
Hi I am facing issue while connecting logstash output send to mysql database..below are my configuration setting output { jdbc{ driver\_jar\_path =\> "/app/logstash-CBS/mysql-connector-java-8.0.25.jar" driver\_class =\> … --- ## [Filebeat deduplication fail to update index](https://discuss.elastic.co/t/filebeat-deduplication-fail-to-update-index/231870)
**Author:** [@mustapha.arakji](https://discuss.elastic.co/u/mustapha.arakji)\ **Replies:** 7\ **Last updated:** [May 21, 2020, 10:03am UTC](https://discuss.elastic.co/t/filebeat-deduplication-fail-to-update-index/231870 "2020-05-21T10:03:53Z")
Hi, I'm reading this guide: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-deduplication.html, that discusses the deduplication in both filebeat and logstash, and recommends to set the document id befor… --- ## [Elasticsearch tutorial bulkload](https://discuss.elastic.co/t/elasticsearch-tutorial-bulkload/66893)
**Author:** [@nmr](https://discuss.elastic.co/u/nmr)\ **Replies:** 7\ **Last updated:** [November 30, 2016, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-tutorial-bulkload/66893 "2016-11-30T21:32:43Z")
I'm going through the Elasticsearch tutorials and i'm trying to load data from the sample file into Elasticsearch and i'm encountering a problem curl -XPOST 'localhost:9200/bank/account/\_bulk?pretty&refresh' --data-binar… --- ## [Indices.cache.filter.size limit not enforce?](https://discuss.elastic.co/t/indices-cache-filter-size-limit-not-enforce/14068)
**Author:** [@Benoit](https://discuss.elastic.co/u/Benoit)\ **Replies:** 7\ **Last updated:** [May 23, 2014, 12:12am UTC](https://discuss.elastic.co/t/indices-cache-filter-size-limit-not-enforce/14068 "2014-05-23T00:12:37Z")
Hello, Yesterday I had the same problem as last time ( https://groups.google.com/d/msg/elasticsearch/PQhJezsaQrg/w8\_KmhJ0wcQJ). But this time I have a suspicion about indices.cache.filter.size limit that might … --- ## [Transform email body response to a more readable form](https://discuss.elastic.co/t/transform-email-body-response-to-a-more-readable-form/227889)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 5\ **Last updated:** [April 16, 2020, 10:22pm UTC](https://discuss.elastic.co/t/transform-email-body-response-to-a-more-readable-form/227889 "2020-04-16T22:22:18Z")
Hello, I have created the following watcher alert: { "trigger": { "schedule": { "hourly": { "minute": \[ 1, 3, 11, 16, … --- ## [Cisco ASA and logstash problem](https://discuss.elastic.co/t/cisco-asa-and-logstash-problem/150706)
**Author:** [@sles](https://discuss.elastic.co/u/sles)\ **Replies:** 5\ **Last updated:** [October 5, 2018, 6:16am UTC](https://discuss.elastic.co/t/cisco-asa-and-logstash-problem/150706 "2018-10-05T06:16:05Z")
Hello! I need to process logs from ASA, let's says this: Oct 2 09:22:41 192.168.42.129 %ASA-3-202010: NAT pool exhausted. Unable to create UDP connection from inside:192.168.222.24/47423 to outside:195.210.189.106/123 … --- ## [Winlogbeat - How to determine correct channel names](https://discuss.elastic.co/t/winlogbeat-how-to-determine-correct-channel-names/136722)
**Author:** [@L33T](https://discuss.elastic.co/u/L33T)\ **Replies:** 5\ **Last updated:** [June 20, 2018, 4:14pm UTC](https://discuss.elastic.co/t/winlogbeat-how-to-determine-correct-channel-names/136722 "2018-06-20T16:14:32Z")
Hi, How do you set which event logs are collection in the winlogbeat.yml config file. I have some event logs for Hyper-V that are Application And Service Logs and are not in the windows logs section of the event viewer? … --- ## [ReadOnly or hidden filters in kibana discover](https://discuss.elastic.co/t/readonly-or-hidden-filters-in-kibana-discover/328699)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 1\ **Last updated:** [March 28, 2023, 10:55am UTC](https://discuss.elastic.co/t/readonly-or-hidden-filters-in-kibana-discover/328699 "2023-03-28T10:55:37Z")
Hello, I am using kibana basic license In my use case I want to make some filters hidden for a specific user and only the admin can modify this hidden filter , also that specific user is able to apply other filters So… --- ## [Show Facets Data in a specific order](https://discuss.elastic.co/t/show-facets-data-in-a-specific-order/280199)
**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\ **Replies:** 4\ **Last updated:** [August 3, 2021, 1:10pm UTC](https://discuss.elastic.co/t/show-facets-data-in-a-specific-order/280199 "2021-08-03T13:10:04Z")
I am using the reference UI react project to display the search results and facets. But here the facets are being displayed in either descending order or in ascending order. But I need to display the results in a speci… --- ## [Create Certs fails following docker tls tutorial](https://discuss.elastic.co/t/create-certs-fails-following-docker-tls-tutorial/226012)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 2\ **Last updated:** [April 15, 2020, 5:57pm UTC](https://discuss.elastic.co/t/create-certs-fails-following-docker-tls-tutorial/226012 "2020-04-15T17:57:21Z")
I am following the tutorial to install docker. https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls-docker.html When i run docker-compose -f create-certs.yml run --rm create\_certs I get the … --- ## [No custom color in Metric, Gauge, Goal](https://discuss.elastic.co/t/no-custom-color-in-metric-gauge-goal/220311)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 3\ **Last updated:** [February 25, 2020, 7:41pm UTC](https://discuss.elastic.co/t/no-custom-color-in-metric-gauge-goal/220311 "2020-02-25T19:41:20Z")
Hello, I saw here that in 5.5 there was custom color but I cannot see that option. We are using 7.4 Platinum. There is only a fixed Color Schema. In addition I saw that there is this option in TSVB but in our case we d… --- ## ["Cannot allocate memory" in Logstash exec plugin](https://discuss.elastic.co/t/cannot-allocate-memory-in-logstash-exec-plugin/182912)
**Author:** [@BennyInc](https://discuss.elastic.co/u/BennyInc)\ **Replies:** 3\ **Last updated:** [May 29, 2019, 12:57pm UTC](https://discuss.elastic.co/t/cannot-allocate-memory-in-logstash-exec-plugin/182912 "2019-05-29T12:57:52Z")
I use the Logstash exec plugin to dump info about our running database process every 10s. This has worked fine over the last weeks, but now on one host it failed to report data. Checking the Logstash logs, I see this er… --- ## [Logstash within docker container trying to connect to elasticsearch](https://discuss.elastic.co/t/logstash-within-docker-container-trying-to-connect-to-elasticsearch/83335)
**Author:** [@holt](https://discuss.elastic.co/u/holt)\ **Replies:** 3\ **Last updated:** [April 24, 2017, 3:01pm UTC](https://discuss.elastic.co/t/logstash-within-docker-container-trying-to-connect-to-elasticsearch/83335 "2017-04-24T15:01:37Z")
There was a similar post on this, but the replies have been deleted: When I run a elasticsearch 5.3.1 from a docker container it tries to connect to elasticsearch even though my pipeline only has a udp port as the outp… --- ## [Config file won't stash a log](https://discuss.elastic.co/t/config-file-wont-stash-a-log/70876)
**Author:** [@HeatherB](https://discuss.elastic.co/u/HeatherB)\ **Replies:** 8\ **Last updated:** [January 9, 2017, 8:29am UTC](https://discuss.elastic.co/t/config-file-wont-stash-a-log/70876 "2017-01-09T08:29:31Z")
Hi:) I'm very new to logstash and elasticsearch, I am trying to stash my first log to log stash in a way that I can (correct me if it is not the purpose) search it using elasticsearch.... I have a log that looks like t… --- ## [Permission denied error when starting Elasticsearch as Singularity container](https://discuss.elastic.co/t/permission-denied-error-when-starting-elasticsearch-as-singularity-container/309228)
**Author:** [@lucasl](https://discuss.elastic.co/u/lucasl)\ **Replies:** 1\ **Last updated:** [July 11, 2022, 8:10pm UTC](https://discuss.elastic.co/t/permission-denied-error-when-starting-elasticsearch-as-singularity-container/309228 "2022-07-11T20:10:13Z")
Hello, I am trying to run single node Elasticsearch instance on a HPC cluster. To do this, I am converting the Elasticsearch docker container as a singularity container. When I launch the container itself I get the foll… --- ## [Migration data from MariaDB to Elasticsearch via Logstash](https://discuss.elastic.co/t/migration-data-from-mariadb-to-elasticsearch-via-logstash/218225)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 9:42am UTC](https://discuss.elastic.co/t/migration-data-from-mariadb-to-elasticsearch-via-logstash/218225 "2020-02-13T09:42:36Z")
I'm trying to migrate data from MariaDB to Elasticsearch by using Logstash. I never worked with jdbc before so I installed jdbc with sudo apt-get install libmysql-java command and created the following mysql.conf file… --- ## [Kibana randomly giving 502 bad gateway error](https://discuss.elastic.co/t/kibana-randomly-giving-502-bad-gateway-error/212000)
**Author:** [@ahmedwaleedmalik](https://discuss.elastic.co/u/ahmedwaleedmalik)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 11:35pm UTC](https://discuss.elastic.co/t/kibana-randomly-giving-502-bad-gateway-error/212000 "2019-12-16T23:35:19Z")
Hi, I am run EFK stack on Kubernetes for logging. For elasticseach we have 2 data, 1 master and 1 client node. Everything is working fine but i randomly get 502 bad gateway error. From dashboard: Discover: Bad Gateway… --- ## [What's the best way to backup ILM policies & index templates](https://discuss.elastic.co/t/whats-the-best-way-to-backup-ilm-policies-index-templates/251231)
**Author:** [@Chr0my](https://discuss.elastic.co/u/Chr0my)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 7:26am UTC](https://discuss.elastic.co/t/whats-the-best-way-to-backup-ilm-policies-index-templates/251231 "2020-10-15T07:26:51Z")
Hi everyone, I'm currently looking for a way to backup ILM policies and index templates automatically, but I cannot find where these informations are stored, and I don't want to snapshot my entire cluster. Is it stored… --- ## [Image (.TIF) is supported by Ingest Attachment plugin? (OCR for images)](https://discuss.elastic.co/t/image-tif-is-supported-by-ingest-attachment-plugin-ocr-for-images/243780)
**Author:** [@christiancj](https://discuss.elastic.co/u/christiancj)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 3:33pm UTC](https://discuss.elastic.co/t/image-tif-is-supported-by-ingest-attachment-plugin-ocr-for-images/243780 "2020-08-06T15:33:57Z")
I've ES 7.3.1 with Ingest Attachment plugin, I can extract text for PDF, txt, docx, xlsx, however I'm dealing as well with .TIF documents, does the plugin support image to extract text (OCR) ?. I was reading few web si… --- ## [ERR Failed to publish events caused by: EOF graylog logstash filebeat](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof-graylog-logstash-filebeat/101718)
**Author:** [@Omer\_Mizrahi](https://discuss.elastic.co/u/Omer_Mizrahi)\ **Replies:** 4\ **Last updated:** [September 27, 2017, 11:32am UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-eof-graylog-logstash-filebeat/101718 "2017-09-27T11:32:10Z")
Hi everyone, Im using Logstash on aws ecs (Docker), and using filebeat 5.6.1 to transfer logs to logstash, and output them to graylog, no data goes into graylog, and getting the following from filebeat log and logstash… --- ## [Reduce filebeat cpu cost](https://discuss.elastic.co/t/reduce-filebeat-cpu-cost/70914)
**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\ **Replies:** 4\ **Last updated:** [January 10, 2017, 12:07pm UTC](https://discuss.elastic.co/t/reduce-filebeat-cpu-cost/70914 "2017-01-10T12:07:54Z")
Hi, I use FileBeat to read a large volume of log, and then send data to ElasticSearch directly. In my case, I found filebeat consume too much CPU resource. When sending 120,000 events/s, filebeat cost 320% CPU resou… --- ## [Elasticsearch C# Nest unit tests with Moq : fail to mock concrete class](https://discuss.elastic.co/t/elasticsearch-c-nest-unit-tests-with-moq-fail-to-mock-concrete-class/274657)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-c-nest-unit-tests-with-moq-fail-to-mock-concrete-class/274657 "2021-06-01T15:06:16Z")
Hi, I need to mock some methods and properties in Nest.IElasticClient interface that is used in my repo. As example I need to stub the Indices.Exists() method to return an ExistsResponse having an Exists property return… --- ## [Cannot generate report in kibana](https://discuss.elastic.co/t/cannot-generate-report-in-kibana/347091)
**Author:** [@hasan.idriss](https://discuss.elastic.co/u/hasan.idriss)\ **Replies:** 6\ **Last updated:** [November 17, 2023, 3:08pm UTC](https://discuss.elastic.co/t/cannot-generate-report-in-kibana/347091 "2023-11-17T15:08:11Z")
I am using Elasticsearch 8.7.1 my cluster consists of 2 nodes and the Kibana version is 8.7.1, I am facing a problem with generating CSV it was working normally, but two weeks from now it stopped with the error "reportin… --- ## [Authentication failed: missing or improperly formatted Authorization header: expected 'Authorization: Bearer secret\_token' or 'Authorization: ApiKey base64(API key ID:API key)'](https://discuss.elastic.co/t/authentication-failed-missing-or-improperly-formatted-authorization-header-expected-authorization-bearer-secret-token-or-authorization-apikey-base64-api-key-id-api-key/340321)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 6\ **Last updated:** [August 29, 2023, 2:40am UTC](https://discuss.elastic.co/t/authentication-failed-missing-or-improperly-formatted-authorization-header-expected-authorization-bearer-secret-token-or-authorization-apikey-base64-api-key-id-api-key/340321 "2023-08-29T02:40:12Z")
What does this error mean? \[my-apm-server-7f75cffcf7-grj2t apm-server\] {"log.level":"error","@timestamp":"2023-08-08T05:32:12.641Z","log.logger":"request","log.origin":{"file.name":"middleware/log\_middleware.go","file.l… --- ## [Getting mapper\_parsing\_exception while trying to create index in 7.8](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 11:22pm UTC](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204 "2020-08-25T23:22:57Z")
Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/ise?master\_timeout=30s&timeout=30s\], status line \[HTTP/1.1 400 Bad Request\] {"error":{"root\_cause":\[{"type":"mapp… --- ## [Trouble with dashboard import in ECE cluster](https://discuss.elastic.co/t/trouble-with-dashboard-import-in-ece-cluster/209983)
**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\ **Replies:** 6\ **Last updated:** [December 3, 2019, 9:12am UTC](https://discuss.elastic.co/t/trouble-with-dashboard-import-in-ece-cluster/209983 "2019-12-03T09:12:11Z")
Hi, I have an ECE deployment including one cluster that seems to be working fine. I have used APIs to interact with the kibana instance for example using curl to upload an index template. I tried to import a saved dash… --- ## [Failed json lines being ignored](https://discuss.elastic.co/t/failed-json-lines-being-ignored/137617)
**Author:** [@danimaiochi](https://discuss.elastic.co/u/danimaiochi)\ **Replies:** 6\ **Last updated:** [July 9, 2018, 9:27am UTC](https://discuss.elastic.co/t/failed-json-lines-being-ignored/137617 "2018-07-09T09:27:21Z")
Hello guys! Recently I discovered the json processor and it made my life much easier! The only problem I'm encountering with it, is that if a line fails to be pushed, the "on\_failure" is not executed. example: pipeli… --- ## [Kibana map inport china\_provinces\_v1.geojson but Chinese charactor unidentifiable](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931)
**Author:** [@yorkzhang](https://discuss.elastic.co/u/yorkzhang)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931 "2021-01-04T15:12:27Z")
I used Kibana map, import geojson file download from map.elastic.co china\_provinces\_v1.geojson, but Chinese charactor unidentifiable. I get doc from Dev Tools and see unidentifiable chinese charactor. But if I use onlin… --- ## [ES-to-ES reindexing: why documents are deleted in destination index?](https://discuss.elastic.co/t/es-to-es-reindexing-why-documents-are-deleted-in-destination-index/83389)
**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\ **Replies:** 2\ **Last updated:** [April 24, 2017, 11:22am UTC](https://discuss.elastic.co/t/es-to-es-reindexing-why-documents-are-deleted-in-destination-index/83389 "2017-04-24T11:22:42Z")
Hello. I have the next configuration file for the AWS ES reindexing: input { elasticsearch { hosts =\> "search-.....es.amazonaws.com:443" index =\> "logstash-source-index\*" #query =\> "\*" size =\> 500 … --- ## [Logstash.licensechecker.licensemanager ERROR](https://discuss.elastic.co/t/logstash-licensechecker-licensemanager-error/148942)
**Author:** [@Victor\_De\_Castro](https://discuss.elastic.co/u/Victor_De_Castro)\ **Replies:** 1\ **Last updated:** [September 20, 2018, 5:59am UTC](https://discuss.elastic.co/t/logstash-licensechecker-licensemanager-error/148942 "2018-09-20T05:59:15Z")
Hello everybody, I'm facing a problem when i start or restart the logstash service :slight\_smile: \[2018-09-18T11:01:23,207\]\[ERROR\]\[logstash.licensechecker.licensemanager\] Unable to retrieve license information from lic… --- ## [Couldn't decode protobuf: #\](https://discuss.elastic.co/t/couldnt-decode-protobuf-runtimeerror-protocol-message-tag-had-invalid-wire-type/132439)
**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 8:53am UTC](https://discuss.elastic.co/t/couldnt-decode-protobuf-runtimeerror-protocol-message-tag-had-invalid-wire-type/132439 "2018-05-18T08:53:20Z")
I am not getting why this is happening with my config --- ## [Dissect filter is not dissecting properly](https://discuss.elastic.co/t/dissect-filter-is-not-dissecting-properly/114044)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [January 4, 2018, 9:46am UTC](https://discuss.elastic.co/t/dissect-filter-is-not-dissecting-properly/114044 "2018-01-04T09:46:08Z")
Hi, I am using ELK GA 6.0.0. I am trying out dissect filter to chop my log file entry, but some field is not getting dissected properly. I am pushing messages into Kafka using file beat, and using my Logstash to fetch t… --- ## [Problem with Tomcat multiline entries](https://discuss.elastic.co/t/problem-with-tomcat-multiline-entries/87768)
**Author:** [@hanover23](https://discuss.elastic.co/u/hanover23)\ **Replies:** 1\ **Last updated:** [June 1, 2017, 8:19pm UTC](https://discuss.elastic.co/t/problem-with-tomcat-multiline-entries/87768 "2017-06-01T20:19:58Z")
Hey all - I'm trying to get filebeats to forward some of my Tomcat logs, but I can't seem to get the multiline stuff quite right. The log file is a mix of single-line entries and multiline. Any help would be appreciate… --- ## [Slow elasticsearch sql query with aggregation to get Top-N results](https://discuss.elastic.co/t/slow-elasticsearch-sql-query-with-aggregation-to-get-top-n-results/204985)
**Author:** [@letwefly](https://discuss.elastic.co/u/letwefly)\ **Replies:** 5\ **Last updated:** [November 2, 2019, 12:09pm UTC](https://discuss.elastic.co/t/slow-elasticsearch-sql-query-with-aggregation-to-get-top-n-results/204985 "2019-11-02T12:09:58Z")
Hi, I am trying to visualize some data and I am using elasticsearch sql to build some visualizations. I am importing data about 346M with 2000000 docs. This is my slow sql: select userId, count(\*) from tableA where… --- ## [Grok Custom Timestamp Filter](https://discuss.elastic.co/t/grok-custom-timestamp-filter/202141)
**Author:** [@Ghassan\_Zein](https://discuss.elastic.co/u/Ghassan_Zein)\ **Replies:** 5\ **Last updated:** [October 3, 2019, 12:24pm UTC](https://discuss.elastic.co/t/grok-custom-timestamp-filter/202141 "2019-10-03T12:24:52Z")
Am not able to filter the following date through grok, it doesnt fall under any ready made TIMESTAMP filters: 07 Aug 2019 13:54:27.463 I want to retrive it and replace it with @timestamp (or create a "Date" variable an… --- ## [Kibana Dev Tools not accessible post X-pack install](https://discuss.elastic.co/t/kibana-dev-tools-not-accessible-post-x-pack-install/118382)
**Author:** [@gingeranyhow](https://discuss.elastic.co/u/gingeranyhow)\ **Replies:** 5\ **Last updated:** [February 5, 2018, 6:34pm UTC](https://discuss.elastic.co/t/kibana-dev-tools-not-accessible-post-x-pack-install/118382 "2018-02-05T18:34:40Z")
Hi! I installed X-pack for ES and Kibana and disabled X-pack security in both the elasticsearch.yml and the kibana.yml files, and updated with the proper password in kibana.yml. Elastic Search is up and running without… --- ## [How to filter based on aggregation results?](https://discuss.elastic.co/t/how-to-filter-based-on-aggregation-results/211332)
**Author:** [@guibarati](https://discuss.elastic.co/u/guibarati)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 10:11am UTC](https://discuss.elastic.co/t/how-to-filter-based-on-aggregation-results/211332 "2019-12-19T10:11:40Z")
How can I filter a table view on Kibana based on the aggregation results? I've seen a lot of recommendations to use document count, but it doesn't work for my use case. I have network logs where a single document indic… --- ## [Kibana does not start up with tribe node configuration](https://discuss.elastic.co/t/kibana-does-not-start-up-with-tribe-node-configuration/84338)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [May 3, 2017, 6:44pm UTC](https://discuss.elastic.co/t/kibana-does-not-start-up-with-tribe-node-configuration/84338 "2017-05-03T18:44:48Z")
Hello. I have a kibana fails to start up when initiating connection to tribe node. I am using the latest 5.3.2 series. Kibana's tribe node configuration is below. Tribe node is running on the same host as kibana. #… --- ## [Find out what causes long GC cycles on client node](https://discuss.elastic.co/t/find-out-what-causes-long-gc-cycles-on-client-node/45917)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 5:26pm UTC](https://discuss.elastic.co/t/find-out-what-causes-long-gc-cycles-on-client-node/45917 "2016-04-01T17:26:03Z")
Hi, my client nodes are experiencing very long GC cycles lately. Is there any way to narrow down the cause of this? We are using kibana most of the time, and usually dont query ES any other way. Our client nodes ar… --- ## [Sort on geo\_shape using geo\_distance filter return 500](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381)
**Author:** [@marko2](https://discuss.elastic.co/u/marko2)\ **Replies:** 1\ **Last updated:** [June 4, 2022, 3:10pm UTC](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381 "2022-06-04T15:10:23Z")
Hey there, my objective is narrowing down nearby addresses within 100 meters and sorting them by the nearest address My mapping: mappings: { dynamic: "true", properties: { geometry: { type: "geo\_shape" }… --- ## [Shrink unable to allocate index due to initial\_recovery setting](https://discuss.elastic.co/t/shrink-unable-to-allocate-index-due-to-initial-recovery-setting/268813)
**Author:** [@toby\_jn](https://discuss.elastic.co/u/toby_jn)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 9:38am UTC](https://discuss.elastic.co/t/shrink-unable-to-allocate-index-due-to-initial-recovery-setting/268813 "2021-03-31T09:38:43Z")
We ran into a very strange issue with index shrink following recovery from a complete cluster network outage. The outage appears to have taken place in the middle of a shrink operation and following the restart the shrin… --- ## [Split Chart TSVB](https://discuss.elastic.co/t/split-chart-tsvb/230995)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 4\ **Last updated:** [May 8, 2020, 2:26pm UTC](https://discuss.elastic.co/t/split-chart-tsvb/230995 "2020-05-08T14:26:43Z")
Hi, I m new to kibana word, i'm exploring TSVB, but i m failing to find a way to split X-axis. I found it in Area type, Split Chart where i can put the field i want to split, In this case node\_name. How can i archive … --- ## [Can’t filter Rollup index results](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 8\ **Last updated:** [April 2, 2021, 5:41am UTC](https://discuss.elastic.co/t/can-t-filter-rollup-index-results/268775 "2021-04-02T05:41:57Z")
I have a rollup index with some values, e.g. customer. I've created a Kibana dashboard from it. When I try to filter the dashboard with customer : some-customer, I get an error. When I do a custom query, I can filter by … --- ## [View raw data behind visualization](https://discuss.elastic.co/t/view-raw-data-behind-visualization/163960)
**Author:** [@aneeshakella](https://discuss.elastic.co/u/aneeshakella)\ **Replies:** 1\ **Last updated:** [January 12, 2019, 3:36am UTC](https://discuss.elastic.co/t/view-raw-data-behind-visualization/163960 "2019-01-12T03:36:44Z")
Each data point has fields w, x, y, z. Right now this graph counts the most frequent y's until the total count is 100.. Is there a way I can create a ElasticSearch so that I can see all the data (their respective w,x,y, … --- ## [Direct different log to different Kafka topic](https://discuss.elastic.co/t/direct-different-log-to-different-kafka-topic/137873)
**Author:** [@Niloo\_F](https://discuss.elastic.co/u/Niloo_F)\ **Replies:** 1\ **Last updated:** [June 28, 2018, 10:55pm UTC](https://discuss.elastic.co/t/direct-different-log-to-different-kafka-topic/137873 "2018-06-28T22:55:48Z")
Hi, How can I direct logs from different inputs (all same type: log) to different topics in my kafka cluster. Thanks N. --- ## [Unsure of xpack.reporting.encryptionKey](https://discuss.elastic.co/t/unsure-of-xpack-reporting-encryptionkey/124551)
**Author:** [@richl](https://discuss.elastic.co/u/richl)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 12:59pm UTC](https://discuss.elastic.co/t/unsure-of-xpack-reporting-encryptionkey/124551 "2018-03-19T12:59:50Z")
Hi so i setup xpack recently on my stack. When i run a report i get this error saying "Error: Failed to decrypt report job data. Please re-generate this report." I was reading and it seems like i need to add xpack.report… --- ## [Elasticsearch plugin is red Request Timeout](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-request-timeout/111663)
**Author:** [@sabper](https://discuss.elastic.co/u/sabper)\ **Replies:** 2\ **Last updated:** [December 15, 2017, 12:13am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-is-red-request-timeout/111663 "2017-12-15T00:13:35Z")
I running kibana at aws ec2 instance. ES Cluster Info I have ES cluster three node (data, master). ES cluster behind AWS ELB. Kibana Info We Kibana's url support ssl using nignx and certbot. config/kibana.yaml ela… [Previous page](https://discuss.elastic.co/top.md?page=959&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=961&per_page=50&period=all)