# Top **URL:** https://discuss.elastic.co/top.md?page=963&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 964 --- ## [Error message while installing Kibana : Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/error-message-while-installing-kibana-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/252436)
**Author:** [@newbie00](https://discuss.elastic.co/u/newbie00)\ **Replies:** 4\ **Last updated:** [October 21, 2020, 7:17pm UTC](https://discuss.elastic.co/t/error-message-while-installing-kibana-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/252436 "2020-10-21T19:17:17Z")
I have trouble installing Kibana. Elasticsearch have been installed without problem but when I tried with Kibana I get the following error message log \[22:27:13.834\] \[warning\]\[savedobjects-service\] Unable to connect t… --- ## [Update all documents that were matched against the query in the watcher as part of the watcher action](https://discuss.elastic.co/t/update-all-documents-that-were-matched-against-the-query-in-the-watcher-as-part-of-the-watcher-action/104621)
**Author:** [@naziyakhan](https://discuss.elastic.co/u/naziyakhan)\ **Replies:** 4\ **Last updated:** [October 24, 2017, 10:12am UTC](https://discuss.elastic.co/t/update-all-documents-that-were-matched-against-the-query-in-the-watcher-as-part-of-the-watcher-action/104621 "2017-10-24T10:12:01Z")
We have a use case where the watcher should skip sifting through all the documents that it has already used for matching the watcher query. The next time the watcher runs, only new documents should be used for matching. … --- ## [Rfc3195 compliance - Beep messages](https://discuss.elastic.co/t/rfc3195-compliance-beep-messages/93335)
**Author:** [@Francis\_Claessens](https://discuss.elastic.co/u/Francis_Claessens)\ **Replies:** 4\ **Last updated:** [July 19, 2017, 6:06pm UTC](https://discuss.elastic.co/t/rfc3195-compliance-beep-messages/93335 "2017-07-19T18:06:00Z")
Hi everybody, Does anybody of you know how to handle beep messages stated in RFC3195 for reliable syslog over TCP? I am receiving these messages in logstash, but don't know how to let logstash react to the sender of th… --- ## [Is there any way to limit Term Frequency but keep function of proximity matching?](https://discuss.elastic.co/t/is-there-any-way-to-limit-term-frequency-but-keep-function-of-proximity-matching/772)
**Author:** [@go2jun](https://discuss.elastic.co/u/go2jun)\ **Replies:** 4\ **Last updated:** [May 15, 2015, 9:24pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-limit-term-frequency-but-keep-function-of-proximity-matching/772 "2015-05-15T21:24:20Z")
Is there any way to limit Term Frequency but keep function of proximity matching ? for example: 1 Sue ate the alligator Sue leave. Then Sue work. 2 Sue look the alligator. 3 Sue alligator 4 Sue never goes anywhere… --- ## [Elasticsearch service fails](https://discuss.elastic.co/t/elasticsearch-service-fails/319650)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 5\ **Last updated:** [November 28, 2022, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-service-fails/319650 "2022-11-28T09:20:32Z")
Hi i have elk 8.5.1 installed on a machine with 8 gb ram and 50 gb hardisk. i've set jvm options to 2g for elasticsearch and 2g for logstash. I've elk stack +filebeat installed here. and i am getting logs from jenkins, n… --- ## [Install Filebeat on a different folder](https://discuss.elastic.co/t/install-filebeat-on-a-different-folder/55381)
**Author:** [@Dan2](https://discuss.elastic.co/u/Dan2)\ **Replies:** 5\ **Last updated:** [July 13, 2016, 12:36pm UTC](https://discuss.elastic.co/t/install-filebeat-on-a-different-folder/55381 "2016-07-13T12:36:41Z")
Hi, Is there any way to put and install Filebeat in another folder other than "C:\\Program Files\\Filebeat" on a Windows machine? --- ## [Kibana Dashboard - Admin Access](https://discuss.elastic.co/t/kibana-dashboard-admin-access/221748)
**Author:** [@Karthick\_Subramaniam](https://discuss.elastic.co/u/Karthick_Subramaniam)\ **Replies:** 1\ **Last updated:** [March 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/kibana-dashboard-admin-access/221748 "2020-03-17T05:41:04Z")
Hi, We have an Elastic Search / Kibana instance newly deployed. User "admin" has the role "all\_access" ---\> which corresponds to Backend Role : "admin". So ideally when we login with admin account we should have all p… --- ## [How to understand search/index rate in kibana?](https://discuss.elastic.co/t/how-to-understand-search-index-rate-in-kibana/171585)
**Author:** [@luxiaoxun](https://discuss.elastic.co/u/luxiaoxun)\ **Replies:** 1\ **Last updated:** [March 11, 2019, 10:06pm UTC](https://discuss.elastic.co/t/how-to-understand-search-index-rate-in-kibana/171585 "2019-03-11T22:06:56Z")
Hi I am using kibana to monitor ES cluster. From kibana, it shows search rate is 2000/s, indexing rate is 10000/s (total shards), how to understand these 2 numbers? If indexing rate is 10000/s (total shards), does it m… --- ## [Specify timezone when trigger watchers](https://discuss.elastic.co/t/specify-timezone-when-trigger-watchers/215222)
**Author:** [@robinmhj](https://discuss.elastic.co/u/robinmhj)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 12:05am UTC](https://discuss.elastic.co/t/specify-timezone-when-trigger-watchers/215222 "2024-12-09T00:05:08Z")
Hi there, I am using watcher to aggregate data, our elasticsearch instance is using utc time zone. Is it possible to specify the time based on timezone, the reason I am asking it because that there are day light saving… --- ## [Revisiting "lookup table" concept](https://discuss.elastic.co/t/revisiting-lookup-table-concept/303791)
**Author:** [@erik\_n](https://discuss.elastic.co/u/erik_n)\ **Replies:** 8\ **Last updated:** [May 4, 2022, 12:13am UTC](https://discuss.elastic.co/t/revisiting-lookup-table-concept/303791 "2022-05-04T00:13:13Z")
I've read all of the previous topics about this and done some searching, but I can't figure it out, so I'll ask specifically about my situation. I have one cluster that is explicitly for reporting and visualizations. I'… --- ## [Getting doc\_count in percentiles aggregation](https://discuss.elastic.co/t/getting-doc-count-in-percentiles-aggregation/113036)
**Author:** [@amyc](https://discuss.elastic.co/u/amyc)\ **Replies:** 3\ **Last updated:** [January 2, 2018, 2:58pm UTC](https://discuss.elastic.co/t/getting-doc-count-in-percentiles-aggregation/113036 "2018-01-02T14:58:13Z")
Hi, I would like to get the doc\_count value in percentiles aggregation, e.g.: GET /my\_index/\_search { "query": { ... }, "aggregations" : { "my\_agg" : { "percentiles" : { "script" : "\_score", "percents" : \[85\], … --- ## [NoClassDefFound Upgrading Jest & Elastic](https://discuss.elastic.co/t/noclassdeffound-upgrading-jest-elastic/104107)
**Author:** [@bjd14](https://discuss.elastic.co/u/bjd14)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 2:04pm UTC](https://discuss.elastic.co/t/noclassdeffound-upgrading-jest-elastic/104107 "2017-10-24T14:04:44Z")
As the title says I am upgrading Jest and Elasticsearch. Jest from 2.4.0 to 5.3.2 and Elasticsearch from 2.3.3 to 5.4.2. When I build my specific jar file from Gradle then try to do some testing, it is throwing the NoCla… --- ## [Q re Deprecated field minimum\_number\_should\_match](https://discuss.elastic.co/t/q-re-deprecated-field-minimum-number-should-match/77343)
**Author:** [@jasona](https://discuss.elastic.co/u/jasona)\ **Replies:** 3\ **Last updated:** [March 3, 2017, 9:45pm UTC](https://discuss.elastic.co/t/q-re-deprecated-field-minimum-number-should-match/77343 "2017-03-03T21:45:29Z")
We're trying ES5.2.0 in place of ES5.1.1, and I'm seeing alot of these messages: \[org.elasticsearch.deprecation.common.ParseField\] Deprecated field \[minimum\_number\_should\_match\] used, expected \[minimum\_should\_match\] in… --- ## [Beats input: the pipeline is blocked](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked/59277)
**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 7:35am UTC](https://discuss.elastic.co/t/beats-input-the-pipeline-is-blocked/59277 "2016-09-22T07:35:11Z")
Hi, I'm using logstash 2.2.0 and logstash-input-beats (2.1.2). This error occured when y add a grok filter. My original filter look like this : \> filter { \> if "java\_devices" in \[source\] { \> … --- ## [Using multiple template inside the logstash'selasticsearch output plugin](https://discuss.elastic.co/t/using-multiple-template-inside-the-logstashselasticsearch-output-plugin/43317)
**Author:** [@faitlezen](https://discuss.elastic.co/u/faitlezen)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 11:04pm UTC](https://discuss.elastic.co/t/using-multiple-template-inside-the-logstashselasticsearch-output-plugin/43317 "2016-03-03T23:04:26Z")
Hi, I'm trying to use the template option of the ES output plugin but I'm parsing 2 types of logs... traditional logs and another type called aws\_billing\_hourly. I tried to put them together in the json template but log… --- ## [NullPointerException after updating Elasticsearch to 1.6](https://discuss.elastic.co/t/nullpointerexception-after-updating-elasticsearch-to-1-6/24995)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 3\ **Last updated:** [July 7, 2015, 5:48am UTC](https://discuss.elastic.co/t/nullpointerexception-after-updating-elasticsearch-to-1-6/24995 "2015-07-07T05:48:48Z")
Below query is failing after I updated ElasticSearch to 1.6 from 1.4.4 GET index\_name/\_search { "query": { "filtered": { "filter": { "bool": { "must": \[ { "term"… --- ## [Cant' import Machine Learning Anomaly Jobs - I have Enterprise Cloud Subscription](https://discuss.elastic.co/t/cant-import-machine-learning-anomaly-jobs-i-have-enterprise-cloud-subscription/261970)
**Author:** [@opiedrah](https://discuss.elastic.co/u/opiedrah)\ **Replies:** 7\ **Last updated:** [February 3, 2021, 7:41pm UTC](https://discuss.elastic.co/t/cant-import-machine-learning-anomaly-jobs-i-have-enterprise-cloud-subscription/261970 "2021-02-03T19:41:35Z")
Hi, We are an Elastic Cloud Enterprise customer. The machine learning jobs that are to be prebuilt are missing. I have a ML node assigned to the cluster, i can't find where to import them. Cluster is running 7.10… --- ## [Синонимы и подстроки](https://discuss.elastic.co/t/topic/104899)
**Author:** [@40a4b7c586dcf75bec98](https://discuss.elastic.co/u/40a4b7c586dcf75bec98)\ **Replies:** 1\ **Last updated:** [October 30, 2017, 12:47pm UTC](https://discuss.elastic.co/t/topic/104899 "2017-10-30T12:47:20Z")
Доброго времени суток! Настраиваю elasticSearch для поиска по базе мероприятий. Поиск нужен по полному слову и по подстрокам тоже. Настроил анализаторы и маппинг: { "template" : "\*", "settings" : { "analysis" : {… --- ## [How to create a trend line based on metrics?](https://discuss.elastic.co/t/how-to-create-a-trend-line-based-on-metrics/85422)
**Author:** [@Emmanuel](https://discuss.elastic.co/u/Emmanuel)\ **Replies:** 1\ **Last updated:** [May 11, 2017, 4:43pm UTC](https://discuss.elastic.co/t/how-to-create-a-trend-line-based-on-metrics/85422 "2017-05-11T16:43:40Z")
According to new version of Kibana and especially TimeLion and Visual Builder, do you know if it is possible to create a trend line based on capacity metrics for example to see what could happen in the future? Thanks in … --- ## [Add follower index error: "index\_not\_found\_exception"](https://discuss.elastic.co/t/add-follower-index-error-index-not-found-exception/313108)
**Author:** [@Zeus29](https://discuss.elastic.co/u/Zeus29)\ **Replies:** 0\ **Last updated:** [August 28, 2022, 7:36pm UTC](https://discuss.elastic.co/t/add-follower-index-error-index-not-found-exception/313108 "2022-08-28T19:36:05Z")
Hi, I have 2 elastic clusters (Cluster1 and Cluster2) and I am trying to configure a follower index in Cluster2 from a leader index of Cluster1. I have followed the next steps: Add Cluster1 as remote cluster in Clus… --- ## [Elastic search( 7.10.0 ) stops working after we query from kibana](https://discuss.elastic.co/t/elastic-search-7-10-0-stops-working-after-we-query-from-kibana/262736)
**Author:** [@Subhom\_Dutta](https://discuss.elastic.co/u/Subhom_Dutta)\ **Replies:** 3\ **Last updated:** [February 1, 2021, 7:52pm UTC](https://discuss.elastic.co/t/elastic-search-7-10-0-stops-working-after-we-query-from-kibana/262736 "2021-02-01T19:52:30Z")
Hi, Below are the logs of the single node cluster of elastic search before it stops \[2021-01-30T15:34:36,160\]\[INFO \]\[o.e.x.m.p.NativeController\] \[ELK-NODE\] Native controller process has stopped - no new native processe… --- ## [Diskio Fields Are Not available To Create Visualization](https://discuss.elastic.co/t/diskio-fields-are-not-available-to-create-visualization/82929)
**Author:** [@PrakherS](https://discuss.elastic.co/u/PrakherS)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 8:28pm UTC](https://discuss.elastic.co/t/diskio-fields-are-not-available-to-create-visualization/82929 "2017-04-20T20:28:37Z")
Hello, Greetings to all community members. I need a little help here. When I am trying to create a diskio visualization, the fields like system.diskio.read.count, system.diskio.write.count, and other system.diskio.xx… --- ## [Kibana 5.2 Plugin Installs](https://discuss.elastic.co/t/kibana-5-2-plugin-installs/77017)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 7:53pm UTC](https://discuss.elastic.co/t/kibana-5-2-plugin-installs/77017 "2017-03-01T19:53:27Z")
Centos7 Need to install from the local file system (not via git, etc). From the kibana bin directory I ran the below command: ./kibana-plugin install file:///opt/kibana/kibana-plugin-gauge-sg-master.zip And received … --- ## [How to import customized dashboard gist to Kibana?](https://discuss.elastic.co/t/how-to-import-customized-dashboard-gist-to-kibana/37088)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 4\ **Last updated:** [June 13, 2017, 12:35pm UTC](https://discuss.elastic.co/t/how-to-import-customized-dashboard-gist-to-kibana/37088 "2017-06-13T12:35:11Z")
Hi, I am running Kibana Version 4.1.1 Build 7489. I want to import the following gist to Kibana, how can I do it? https://gist.githubusercontent.com/elijahpaul/4b9cd98715c0ba2a75de/raw/9324f7c637e486fb53c8e66e1552595… --- ## [About resending of packets or out of order packets](https://discuss.elastic.co/t/about-resending-of-packets-or-out-of-order-packets/32630)
**Author:** [@MingchunZhao](https://discuss.elastic.co/u/MingchunZhao)\ **Replies:** 4\ **Last updated:** [December 16, 2015, 4:25pm UTC](https://discuss.elastic.co/t/about-resending-of-packets-or-out-of-order-packets/32630 "2015-12-16T16:25:11Z")
Is Packetbeat able to deal with that resending of packets or out of order packets? --- ## [Document for define an ElasticSearch index](https://discuss.elastic.co/t/document-for-define-an-elasticsearch-index/27354)
**Author:** [@linlma](https://discuss.elastic.co/u/linlma)\ **Replies:** 4\ **Last updated:** [August 14, 2015, 7:45am UTC](https://discuss.elastic.co/t/document-for-define-an-elasticsearch-index/27354 "2015-08-14T07:45:25Z")
Hello Elastic Search experts, Tried to find a complete guide of JSON format for how to define an ElasticSearch index. But can only find some ad-hoc samples, and if anyone have any good documents, appreciate for sharing… --- ## [2 grok filter NOT WOERKED ! :|](https://discuss.elastic.co/t/2-grok-filter-not-woerked/109125)
**Author:** [@omid](https://discuss.elastic.co/u/omid)\ **Replies:** 5\ **Last updated:** [November 28, 2017, 10:26am UTC](https://discuss.elastic.co/t/2-grok-filter-not-woerked/109125 "2017-11-28T10:26:54Z")
im use 2 grok filter to one config file but not worked !!! input { beats { port =\> 5443 type =\> syslog ssl =\> true ssl\_certificate =\> "/etc/logstash/logstash.crt" ssl\_key =\> "/etc/logstash/logstash… --- ## [Logstash JMX sizing](https://discuss.elastic.co/t/logstash-jmx-sizing/54381)
**Author:** [@domisan](https://discuss.elastic.co/u/domisan)\ **Replies:** 5\ **Last updated:** [April 7, 2017, 3:27pm UTC](https://discuss.elastic.co/t/logstash-jmx-sizing/54381 "2017-04-07T15:27:26Z")
Hi, I've been using the Logstash JMX input succesfully for some time to monitor up to 10 Java JMX enabled processes with 1 Logstash process and nb\_thread set to 4 (default). However, I've recently configured a Logstash… --- ## [How to configure Kibana.yml to create custom region maps?](https://discuss.elastic.co/t/how-to-configure-kibana-yml-to-create-custom-region-maps/206778)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 6\ **Last updated:** [November 14, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-configure-kibana-yml-to-create-custom-region-maps/206778 "2019-11-14T06:19:18Z")
Hi, I want to create custom Region map for all the cities in UK. I tried the United Kingdom Subdivisions in the vector map dropdown, but it won't show all the drop down. I followed this link: https://www.elastic.co/blog… --- ## [Filebeat 6.5.0 - Error: unknown command "enroll" for "filebeat"](https://discuss.elastic.co/t/filebeat-6-5-0-error-unknown-command-enroll-for-filebeat/156729)
**Author:** [@AndrewMcQ](https://discuss.elastic.co/u/AndrewMcQ)\ **Replies:** 6\ **Last updated:** [November 16, 2018, 10:22am UTC](https://discuss.elastic.co/t/filebeat-6-5-0-error-unknown-command-enroll-for-filebeat/156729 "2018-11-16T10:22:32Z")
Testing new Beats central management and the 6.5.0 version of filebeat (downloaded today) states that "enroll" is an unknown command for filebeat. C:\\beats\\filebeat-6.5.0-windows-x86\_64\>filebeat.exe enroll Error: unkno… --- ## [How to get data or request query from Kibana Dashboard card](https://discuss.elastic.co/t/how-to-get-data-or-request-query-from-kibana-dashboard-card/199538)
**Author:** [@111208](https://discuss.elastic.co/u/111208)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 3:31pm UTC](https://discuss.elastic.co/t/how-to-get-data-or-request-query-from-kibana-dashboard-card/199538 "2019-09-16T15:31:01Z")
I search Kibana REST API. In saved\_objects API, there is no data or query information just VIZ params. I'm testing with "kibana\_sample\_data\_flights" sample data. In Kibana Dashboard, I can get Request Parameters throu… --- ## [Nexus: https://artifacts.elastic.co/maven](https://discuss.elastic.co/t/nexus-https-artifacts-elastic-co-maven/94062)
**Author:** [@pts0](https://discuss.elastic.co/u/pts0)\ **Replies:** 1\ **Last updated:** [July 21, 2017, 8:46am UTC](https://discuss.elastic.co/t/nexus-https-artifacts-elastic-co-maven/94062 "2017-07-21T08:46:56Z")
Hi, I m trying to set repo https://artifacts.elastic.co/maven as mirror. It always turn as out-of-service. Is the repo not idexed or I m missing something else ? Thanks pts0 --- ## [Jmeter parsing by date (ELK)](https://discuss.elastic.co/t/jmeter-parsing-by-date-elk/41491)
**Author:** [@Qassim](https://discuss.elastic.co/u/Qassim)\ **Replies:** 1\ **Last updated:** [February 11, 2016, 8:32pm UTC](https://discuss.elastic.co/t/jmeter-parsing-by-date-elk/41491 "2016-02-11T20:32:17Z")
Hi All, I have been struggling with getting Jmeter logs (csv) into an ELK stack and parsing them by the timestamp in the provided file. I can get the logs in fine, but they're indexed by the time logstash has processed… --- ## [Field sorting and facets](https://discuss.elastic.co/t/field-sorting-and-facets/7595)
**Author:** [@Crwe](https://discuss.elastic.co/u/Crwe)\ **Replies:** 8\ **Last updated:** [May 9, 2012, 11:53am UTC](https://discuss.elastic.co/t/field-sorting-and-facets/7595 "2012-05-09T11:53:59Z")
Hello all, I am new to ES and have two questions: 1. I have an "author" field, which I want to be searchable using the default analyzer (~tokens). But I also want to be able to return facet counts for this field … --- ## [Malformed dateformat](https://discuss.elastic.co/t/malformed-dateformat/62234)
**Author:** [@pbmsys](https://discuss.elastic.co/u/pbmsys)\ **Replies:** 2\ **Last updated:** [October 5, 2016, 7:33am UTC](https://discuss.elastic.co/t/malformed-dateformat/62234 "2016-10-05T07:33:36Z")
Hi. We are seeing errors on malformed dateformats on our Logstash hosts even though we should be matching the pattern. Logstash: 2.4 Elasticsearch: 2.4 The Logstash Config: if \[message\] { grok { patterns\_dir =\> \[… --- ## [Return all events between two events](https://discuss.elastic.co/t/return-all-events-between-two-events/161792)
**Author:** [@rage5474](https://discuss.elastic.co/u/rage5474)\ **Replies:** 3\ **Last updated:** [December 21, 2018, 6:11pm UTC](https://discuss.elastic.co/t/return-all-events-between-two-events/161792 "2018-12-21T18:11:27Z")
I have a lot of log messages in one ElasticSearch index. These log messages containing two special messages. One start message and one end message (simply having a field with the value 'START' and 'STOP'). Can I create… --- ## [You must set the ES\_CLASSPATH var](https://discuss.elastic.co/t/you-must-set-the-es-classpath-var/10321)
**Author:** [@chachacha](https://discuss.elastic.co/u/chachacha)\ **Replies:** 2\ **Last updated:** [January 12, 2013, 3:33pm UTC](https://discuss.elastic.co/t/you-must-set-the-es-classpath-var/10321 "2013-01-12T15:33:52Z")
Upon runnung the file elasticsearch I got the folowing error: "You must set the ES\_CLASSPATH var" Im running ES from file downloaded directly from github. My platform is MAC OS -- --- ## [Kibana Plugin Development (React)](https://discuss.elastic.co/t/kibana-plugin-development-react/227726)
**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\ **Replies:** 3\ **Last updated:** [April 13, 2020, 1:51pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-react/227726 "2020-04-13T13:51:24Z")
Hi, I'm looking for some documentation on how I can develop my own plugin. I'd like to add a react component to my Kibana dashboard , specifically a dropdown with some drill-down capabilities. --- ## [Filebeat Grok Error - IIS](https://discuss.elastic.co/t/filebeat-grok-error-iis/195100)
**Author:** [@bsanderRMG](https://discuss.elastic.co/u/bsanderRMG)\ **Replies:** 3\ **Last updated:** [August 15, 2019, 7:20pm UTC](https://discuss.elastic.co/t/filebeat-grok-error-iis/195100 "2019-08-15T19:20:32Z")
ES-7.1.1 Kibana-7.1.1 Filebeat 7.0.1 Hey all, I'm trying to ingest the logs from an IIS 7.5 instance directly to ES, and the logs are being sent through successfully. However, every log is giving an error of "Provided… --- ## [Logstash Flush pipeline to output](https://discuss.elastic.co/t/logstash-flush-pipeline-to-output/97837)
**Author:** [@arunvijayam](https://discuss.elastic.co/u/arunvijayam)\ **Replies:** 3\ **Last updated:** [August 26, 2017, 2:48am UTC](https://discuss.elastic.co/t/logstash-flush-pipeline-to-output/97837 "2017-08-26T02:48:39Z")
Hi All, I am using logstash 5.4.2 Persistence Queue. Where I have config file to get input throw JDBC and do some transformations and storing output to mongo db. But when I run this in logstash it inserts only few re… --- ## [Two Index Patterns For Same Index?](https://discuss.elastic.co/t/two-index-patterns-for-same-index/75423)
**Author:** [@spur01](https://discuss.elastic.co/u/spur01)\ **Replies:** 3\ **Last updated:** [February 17, 2017, 3:10am UTC](https://discuss.elastic.co/t/two-index-patterns-for-same-index/75423 "2017-02-17T03:10:50Z")
We recently set up an import on our Elastic cloud and set up one index to hold a summary of those imports (datatype1) as well as summaries of the imports (datatype2). I can't seem to find a way to create two distinct i… --- ## [Remove default filter from aggregation](https://discuss.elastic.co/t/remove-default-filter-from-aggregation/47108)
**Author:** [@Manish27](https://discuss.elastic.co/u/Manish27)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 7:09am UTC](https://discuss.elastic.co/t/remove-default-filter-from-aggregation/47108 "2016-04-13T07:09:51Z")
I am trying to create a vertical bar chart with filter aggregation. I am adding JSON input instead of adding separate filters. But we need to have at least one filter there (Filter 1) even if we are providing JSON input.… --- ## [Pagination within a terms aggregation](https://discuss.elastic.co/t/pagination-within-a-terms-aggregation/299996)
**Author:** [@qcoumes](https://discuss.elastic.co/u/qcoumes)\ **Replies:** 1\ **Last updated:** [March 18, 2022, 7:27am UTC](https://discuss.elastic.co/t/pagination-within-a-terms-aggregation/299996 "2022-03-18T07:27:53Z")
I have a nested field datas which is inside the also nested field documents. I'd like to retrieve the paginated list of concepts buckets (built using a terms aggregation). I managed to retrieve the list without any p… --- ## [Pipeline disabling](https://discuss.elastic.co/t/pipeline-disabling/213604)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 1\ **Last updated:** [January 3, 2020, 10:37am UTC](https://discuss.elastic.co/t/pipeline-disabling/213604 "2020-01-03T10:37:24Z")
Hello ! I'm currently working on the logstash 7.5.1. I'm using the multiple pipelines file with the auto reload mode to create and delete pipelines when logstash is running. I noticed that Logstash doesn't create a p… --- ## [Too many dynamic script compilations within one minute, max: \[15/min\];](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-one-minute-max-15-min/105244)
**Author:** [@varun\_kumar2](https://discuss.elastic.co/u/varun_kumar2)\ **Replies:** 1\ **Last updated:** [November 2, 2017, 9:17am UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-within-one-minute-max-15-min/105244 "2017-11-02T09:17:22Z")
Here is the output with error { "\_id": "CRM.Email.Monitor.Errors\_d5a3faac-50c2-4238-929b-4e84088f9fd4-2017-10-25T12:36:16.292Z", "watch\_record": { "watch\_id": "CRM.Email.Monitor.Errors", "state": "failed", "\_status… --- ## [Can i use http communication in ccs (remote cluster)?](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559)
**Author:** [@hyuil](https://discuss.elastic.co/u/hyuil)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 2:13am UTC](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559 "2022-02-21T02:13:21Z")
hi I'm asking this question because I don't know much even if I read the official document. What is the difference between sniff mode and proxy mode in the remote cluster? Does remote cluster connection only support t… --- ## [Unable to update index rollover](https://discuss.elastic.co/t/unable-to-update-index-rollover/272595)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 1\ **Last updated:** [May 10, 2021, 5:04pm UTC](https://discuss.elastic.co/t/unable-to-update-index-rollover/272595 "2021-05-10T17:04:17Z")
Hello there, I am trying to modify the rollover conditions of a handful of indexes in my ES cluster. Elasticsearch version: 7.11.2 Winlogbeat version: 7.11.2 In order to do so I am using the following query: curl -u… --- ## [Kafka plugin with PEM ssl](https://discuss.elastic.co/t/kafka-plugin-with-pem-ssl/308210)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 5\ **Last updated:** [June 28, 2022, 4:05pm UTC](https://discuss.elastic.co/t/kafka-plugin-with-pem-ssl/308210 "2022-06-28T16:05:49Z")
Hello, is it possible to use PEM keystore type instead of JKS in the plugin --- ## [Custom Label field not available for MaxBucket aggregation](https://discuss.elastic.co/t/custom-label-field-not-available-for-maxbucket-aggregation/235045)
**Author:** [@vijay3](https://discuss.elastic.co/u/vijay3)\ **Replies:** 5\ **Last updated:** [July 14, 2020, 7:20pm UTC](https://discuss.elastic.co/t/custom-label-field-not-available-for-maxbucket-aggregation/235045 "2020-07-14T19:20:42Z")
Whenever i am using "Max Bucket" sibling aggregation in "Metrics" section, i am not able to get custom field. The title is always something like " Overall Max of Count". Using Kibana 7.7 . Please guide me how to get cus… --- ## [Only one record is loaded to Elastic using Logstash conf file](https://discuss.elastic.co/t/only-one-record-is-loaded-to-elastic-using-logstash-conf-file/239684)
**Author:** [@Purnima\_Dhulipudi](https://discuss.elastic.co/u/Purnima_Dhulipudi)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 6:10pm UTC](https://discuss.elastic.co/t/only-one-record-is-loaded-to-elastic-using-logstash-conf-file/239684 "2020-07-03T18:10:12Z")
Hi Below is my logstash conf file , i am trying to load data from oracle table which has 320 records to Elasticsearch but only one record got loaded to ES. I have enabled dead letter queue also but it created file wit… [Previous page](https://discuss.elastic.co/top.md?page=962&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=964&per_page=50&period=all)