# Top

**URL:** https://discuss.elastic.co/top.md?page=976&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 977

---

## [Use Cisco MIB to fetch CPU and Memory using Logstash](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445)

<div class="topic-metadata">

**Author:** [@Ajay\_Singh2](https://discuss.elastic.co/u/Ajay_Singh2)\
**Replies:** 4\
**Last updated:** [November 18, 2020, 11:09am UTC](https://discuss.elastic.co/t/use-cisco-mib-to-fetch-cpu-and-memory-using-logstash/255445 "2020-11-18T11:09:38Z")

</div>

I have Cisco Switches and Routers. I have download their CPU and memory MIB's which are in .my format. How can i use logstash to utilize these MIB to fetch CPU and Memory status of cisco switches and routers ?

---

## [Vertical Bar Unique Count all counts = 1](https://discuss.elastic.co/t/vertical-bar-unique-count-all-counts-1/264171)

<div class="topic-metadata">

**Author:** [@j4sper](https://discuss.elastic.co/u/j4sper)\
**Replies:** 6\
**Last updated:** [March 14, 2021, 6:06pm UTC](https://discuss.elastic.co/t/vertical-bar-unique-count-all-counts-1/264171 "2021-03-14T18:06:29Z")

</div>

I'm trying to visualize dns log data in a vertical chart. X-axis should be remote\_host. Y-axis should be count of remote\_host. I do this by setting Data -\> Metrics -\> Y-axis -\> Aggregation to Unique Count and Field to r…

---

## [Please help me to understand mapping templates](https://discuss.elastic.co/t/please-help-me-to-understand-mapping-templates/253027)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 6\
**Last updated:** [October 23, 2020, 11:29am UTC](https://discuss.elastic.co/t/please-help-me-to-understand-mapping-templates/253027 "2020-10-23T11:29:43Z")

</div>

In documentation we have information that: "index templates are deprecated and will be replaced by the composable templates". But when we enter composable templates documentation we have statement: "You cannot dire…

---

## [Logstash not responding when import csv](https://discuss.elastic.co/t/logstash-not-responding-when-import-csv/142149)

<div class="topic-metadata">

**Author:** [@jibinoosae](https://discuss.elastic.co/u/jibinoosae)\
**Replies:** 6\
**Last updated:** [August 9, 2018, 10:37am UTC](https://discuss.elastic.co/t/logstash-not-responding-when-import-csv/142149 "2018-08-09T10:37:34Z")

</div>

i am not able to get import the CSV file with below configuration input{ file{ path =\> "C:\\change\_reque07.csv" start\_position =\> "beginning" } } filter{ csv{ separator =\> "," columns =\> \["company","number","req…

---

## [IndexExistsAsync in NEST 6.0](https://discuss.elastic.co/t/indexexistsasync-in-nest-6-0/129447)

<div class="topic-metadata">

**Author:** [@arpansahoo](https://discuss.elastic.co/u/arpansahoo)\
**Replies:** 6\
**Last updated:** [May 7, 2018, 6:50am UTC](https://discuss.elastic.co/t/indexexistsasync-in-nest-6-0/129447 "2018-05-07T06:50:20Z")

</div>

Hi, I am new to Elastic search, and was trying to check an Index before creating a new one. I am able to check it through IndexExists method but not by IndexExistsAsync. I have followed some of articles here in Elastic…

---

## [Perl and new Boolean restriction in ES5](https://discuss.elastic.co/t/perl-and-new-boolean-restriction-in-es5/94529)

<div class="topic-metadata">

**Author:** [@Ron\_Kass](https://discuss.elastic.co/u/Ron_Kass)\
**Replies:** 6\
**Last updated:** [July 26, 2017, 8:12am UTC](https://discuss.elastic.co/t/perl-and-new-boolean-restriction-in-es5/94529 "2017-07-26T08:12:00Z")

</div>

In ElasticSearch 5, we now get the following error message \[DEPRECATION\] 299 Elasticsearch-5.4.0-780f8c4 "Expected a boolean \[true/false\] for property \[isAnonymous\] but got \[0\]" (isAnonymous is just a field name we use) …

---

## [Logstash to convert scientific notation to float](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231)

<div class="topic-metadata">

**Author:** [@the\_elkguy](https://discuss.elastic.co/u/the_elkguy)\
**Replies:** 7\
**Last updated:** [October 19, 2022, 9:25am UTC](https://discuss.elastic.co/t/logstash-to-convert-scientific-notation-to-float/316231 "2022-10-19T09:25:54Z")

</div>

Hello, I'm using logstash ruby filter to convert scientific notation from string to float which seem to be not working. I have used GROK to extract the scientific notation (1.989e-04) from the message and now converting…

---

## [Deleted deployment is still visible under UI/Deployments](https://discuss.elastic.co/t/deleted-deployment-is-still-visible-under-ui-deployments/180713)

<div class="topic-metadata">

**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\
**Replies:** 7\
**Last updated:** [May 16, 2019, 9:54pm UTC](https://discuss.elastic.co/t/deleted-deployment-is-still-visible-under-ui-deployments/180713 "2019-05-16T21:54:50Z")

</div>

I've deleted an deployment with help of UI. But the deleted deployment remains in UI. Changing into the deployment shows " Deployment not found. \[Go back to deployments\]." MouseOver-Info is "This deployment is terminat…

---

## [Could not start datafeed for Jobname\[status\_exception\] cannot start datafeed \[datafeed-Jobname\] because job \[Jobname\] is not open](https://discuss.elastic.co/t/could-not-start-datafeed-for-jobname-status-exception-cannot-start-datafeed-datafeed-jobname-because-job-jobname-is-not-open/92104)

<div class="topic-metadata">

**Author:** [@sivasahit](https://discuss.elastic.co/u/sivasahit)\
**Replies:** 1\
**Last updated:** [July 7, 2017, 10:42am UTC](https://discuss.elastic.co/t/could-not-start-datafeed-for-jobname-status-exception-cannot-start-datafeed-datafeed-jobname-because-job-jobname-is-not-open/92104 "2017-07-07T10:42:13Z")

</div>

I am getting below errors while trying to create a single metric Job in machine learning tab of Kibana. Errors: Could not start datafeed for Jobname \[status\_exception\] cannot start datafeed \[datafeed-Jobname\] because j…

---

## [Kibana with Apache Proxy using http://localhost:5601/kibana](https://discuss.elastic.co/t/kibana-with-apache-proxy-using-http-localhost-5601-kibana/29933)

<div class="topic-metadata">

**Author:** [@dlb1001](https://discuss.elastic.co/u/dlb1001)\
**Replies:** 1\
**Last updated:** [September 24, 2015, 5:20pm UTC](https://discuss.elastic.co/t/kibana-with-apache-proxy-using-http-localhost-5601-kibana/29933 "2015-09-24T17:20:53Z")

</div>

Hello, I'd like to start use kibana with a reverse proxy through apache. By itself, thats not really an issue, I can do that. What I'm having trouble with is how to serve kibana out of a directory for example: Kib…

---

## [Nested Composite Aggregations with ElasticSearch](https://discuss.elastic.co/t/nested-composite-aggregations-with-elasticsearch/295282)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 2\
**Last updated:** [January 25, 2022, 1:48pm UTC](https://discuss.elastic.co/t/nested-composite-aggregations-with-elasticsearch/295282 "2022-01-25T13:48:54Z")

</div>

I have an index that stores sales by salesperson, and each sale has a service rating. Using composite I get these separate ratings within an object by duplicating the seller ID. Is it possible to nest within a single obj…

---

## [Most of the spans can't find current transaction](https://discuss.elastic.co/t/most-of-the-spans-cant-find-current-transaction/223850)

<div class="topic-metadata">

**Author:** [@ambrozy](https://discuss.elastic.co/u/ambrozy)\
**Replies:** 2\
**Last updated:** [March 18, 2020, 11:33am UTC](https://discuss.elastic.co/t/most-of-the-spans-cant-find-current-transaction/223850 "2020-03-18T11:33:45Z")

</div>

Kibana version: 7.6.1 Elasticsearch version: 7.6.1 APM Server version: 7.6.1 APM Agent language and version: elastic-apm-node: 3.5.0 Original install method and version: docker Fresh install or upgraded from other v…

---

## [Add more data nodes or more RAM/disk space to existed nodes?](https://discuss.elastic.co/t/add-more-data-nodes-or-more-ram-disk-space-to-existed-nodes/206877)

<div class="topic-metadata">

**Author:** [@yiy](https://discuss.elastic.co/u/yiy)\
**Replies:** 2\
**Last updated:** [November 7, 2019, 7:09am UTC](https://discuss.elastic.co/t/add-more-data-nodes-or-more-ram-disk-space-to-existed-nodes/206877 "2019-11-07T07:09:03Z")

</div>

This is how our current cluster setup on VMWARE: 3 master nodes: 8G RAM each, plus 2 data nodes: 8G RAM/ 500GB disk space, each on different physical disk for redundancy. Recently we just started collecting NetFlow da…

---

## [Finding matches based on distance radius within documents without script](https://discuss.elastic.co/t/finding-matches-based-on-distance-radius-within-documents-without-script/66737)

<div class="topic-metadata">

**Author:** [@neros](https://discuss.elastic.co/u/neros)\
**Replies:** 2\
**Last updated:** [November 21, 2016, 3:22pm UTC](https://discuss.elastic.co/t/finding-matches-based-on-distance-radius-within-documents-without-script/66737 "2016-11-21T15:22:45Z")

</div>

Hi, I have an elasticsearch instance running on a shared environment, which has scripting disabled. The data format is not set in stone, however for time being, I have documents such as this: { "id" : "903c3bd0-3…

---

## [MySQL to ElasticSearch One DB multiple tables](https://discuss.elastic.co/t/mysql-to-elasticsearch-one-db-multiple-tables/56228)

<div class="topic-metadata">

**Author:** [@westealinfo](https://discuss.elastic.co/u/westealinfo)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 10:50am UTC](https://discuss.elastic.co/t/mysql-to-elasticsearch-one-db-multiple-tables/56228 "2016-07-29T10:50:57Z")

</div>

Hello, I've just started using Elasticsearch. I have installed the JDBC Input Plugin to transfer data from our MySQL database to Elasticsearch. However, we have 200 tables in our database. We were wondering if there wa…

---

## [Intercepting and modifying the response?](https://discuss.elastic.co/t/intercepting-and-modifying-the-response/12517)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 2\
**Last updated:** [June 28, 2013, 5:03pm UTC](https://discuss.elastic.co/t/intercepting-and-modifying-the-response/12517 "2013-06-28T17:03:01Z")

</div>

Hi, What is the right place to hook into ES aggregator node and: \* intercept and look at the response \* do some other work (e.g. look up some external data, run another query, etc.) \* and then modify the origin…

---

## [Recover after failure (lost shards)](https://discuss.elastic.co/t/recover-after-failure-lost-shards/11864)

<div class="topic-metadata">

**Author:** [@Jerome\_Gagnon](https://discuss.elastic.co/u/Jerome_Gagnon)\
**Replies:** 2\
**Last updated:** [May 8, 2013, 1:37pm UTC](https://discuss.elastic.co/t/recover-after-failure-lost-shards/11864 "2013-05-08T13:37:01Z")

</div>

Heya, I just ran into a major node HDD failure and lost some shards on as index, so this is bad, but not that bad since we are in the process or reindexing everything. However, I would like to replace the lost sha…

---

## [Want to find all document in elastic search in Node JS using aggregation](https://discuss.elastic.co/t/want-to-find-all-document-in-elastic-search-in-node-js-using-aggregation/273281)

<div class="topic-metadata">

**Author:** [@Anjali\_Gupta](https://discuss.elastic.co/u/Anjali_Gupta)\
**Replies:** 5\
**Last updated:** [May 20, 2021, 7:53am UTC](https://discuss.elastic.co/t/want-to-find-all-document-in-elastic-search-in-node-js-using-aggregation/273281 "2021-05-20T07:53:37Z")

</div>

Here is my code, i have lakhs of document in transactions\_development index and in below code I am getting only 10 hits inside body but I want to fetch lakhs of hits const totalDebited = await esClient.search({ index: …

---

## [Elasticsearch data replication from one server to another server](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874)

<div class="topic-metadata">

**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\
**Replies:** 5\
**Last updated:** [July 4, 2020, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-data-replication-from-one-server-to-another-server/239874 "2020-07-04T13:42:44Z")

</div>

Hi, I have installed Elasticsearch on two different DC servers. I have load balance for for failure situation. Consider I am doing transactions and storing logs on my x instance and my x instance is goes down then load …

---

## [How to schedule Heartbeat for every 30th second of minute](https://discuss.elastic.co/t/how-to-schedule-heartbeat-for-every-30th-second-of-minute/185860)

<div class="topic-metadata">

**Author:** [@sukku77](https://discuss.elastic.co/u/sukku77)\
**Replies:** 5\
**Last updated:** [June 28, 2019, 11:38am UTC](https://discuss.elastic.co/t/how-to-schedule-heartbeat-for-every-30th-second-of-minute/185860 "2019-06-28T11:38:03Z")

</div>

Hi Guys, Can someone help me with configuration of heartbeat for below one: I need to schedule heartbeat run using cron expression for every 30th second but not @every 30secs. (like 10:14:30 ,10:15:30 , 10:16:30 an…

---

## [Logstash data storage](https://discuss.elastic.co/t/logstash-data-storage/133468)

<div class="topic-metadata">

**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\
**Replies:** 5\
**Last updated:** [May 28, 2018, 9:52am UTC](https://discuss.elastic.co/t/logstash-data-storage/133468 "2018-05-28T09:52:18Z")

</div>

Hello all I am running my ELk stack on docker so whenever my logstash loses connection with elasticsearch then the data which is getting parsed where is it stored. According to my observation it is piling up the logsta…

---

## [Logstash output syslog plugin doesnt prefix output with \<PRI\>](https://discuss.elastic.co/t/logstash-output-syslog-plugin-doesnt-prefix-output-with-pri/91464)

<div class="topic-metadata">

**Author:** [@wayneB](https://discuss.elastic.co/u/wayneB)\
**Replies:** 5\
**Last updated:** [June 30, 2017, 7:40pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-plugin-doesnt-prefix-output-with-pri/91464 "2017-06-30T19:40:50Z")

</div>

I'm a new user to logstash. I'm on a red hat linux system using logstash 5.4.0 and logstash-out-syslog 3.0.1 plugin. What must I do for the plugin to output a syslog with the RFC 3164 format that has the PRI prefix, s…

---

## [Labels and Annotation are not applied at the pod level](https://discuss.elastic.co/t/labels-and-annotation-are-not-applied-at-the-pod-level/262522)

<div class="topic-metadata">

**Author:** [@dg\_hivebrite](https://discuss.elastic.co/u/dg_hivebrite)\
**Replies:** 3\
**Last updated:** [June 30, 2021, 3:30pm UTC](https://discuss.elastic.co/t/labels-and-annotation-are-not-applied-at-the-pod-level/262522 "2021-06-30T15:30:12Z")

</div>

Hi, I'm trying to do a poc with datadog to monitor elasticsearch. One of the solution is to setting annotations and labels on pods. So I tried to do that, using the podTemplate field in the CRD but it doesn't update t…

---

## [Date Format Mismatch in Canvas (Elasticsearch SQL)](https://discuss.elastic.co/t/date-format-mismatch-in-canvas-elasticsearch-sql/202317)

<div class="topic-metadata">

**Author:** [@Zany](https://discuss.elastic.co/u/Zany)\
**Replies:** 3\
**Last updated:** [October 14, 2019, 3:19pm UTC](https://discuss.elastic.co/t/date-format-mismatch-in-canvas-elasticsearch-sql/202317 "2019-10-14T15:19:04Z")

</div>

Problem Statement My charts in Canvas are using metric\_date, which has a date format of YYYYMMDD. However, the Time Filter element in Canvas formats the same metric\_date as MMMM Do YYYY, HH:mm:ss.SSS. As a result, a for…

---

## [Filebeat not dumping logs](https://discuss.elastic.co/t/filebeat-not-dumping-logs/106667)

<div class="topic-metadata">

**Author:** [@Jay\_Dabhi](https://discuss.elastic.co/u/Jay_Dabhi)\
**Replies:** 3\
**Last updated:** [November 9, 2017, 9:52am UTC](https://discuss.elastic.co/t/filebeat-not-dumping-logs/106667 "2017-11-09T09:52:50Z")

</div>

I want to dump filebeat logs to specific file at certain path.I have specified in my filebeat.yml file. ###################### Filebeat Configuration Example ######################### # This file is an example configur…

---

## [Installing Filebeat on Windows](https://discuss.elastic.co/t/installing-filebeat-on-windows/102992)

<div class="topic-metadata">

**Author:** [@prachi1](https://discuss.elastic.co/u/prachi1)\
**Replies:** 3\
**Last updated:** [October 10, 2017, 1:22pm UTC](https://discuss.elastic.co/t/installing-filebeat-on-windows/102992 "2017-10-10T13:22:11Z")

</div>

I am trying to install Filebeat on windows7 64 bit. I entered the following commands while running cmd with elevated rights. cd C:\\elastic\\filebeat-5.2.1-windows-x86\_64 filebeat-5.2.1-windows-x86\_64\>filebeat.exe -e -c…

---

## [Setting up Kibana behind AWS application load balancer](https://discuss.elastic.co/t/setting-up-kibana-behind-aws-application-load-balancer/214348)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [January 9, 2020, 4:59pm UTC](https://discuss.elastic.co/t/setting-up-kibana-behind-aws-application-load-balancer/214348 "2020-01-09T16:59:55Z")

</div>

I am having trouble setting up multiple Kibana 7.3.2 instances behind an AWS ALB. Actually, I don't even get that far as the installation of Kibana is not going well. I follow the simple guide (https://www.elastic.co/g…

---

## [ES5.5 warning "Content type detection for rest requests is deprecated. Specify the content type using the \[Content-Type\] header." even though the Content-Type header is present](https://discuss.elastic.co/t/es5-5-warning-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header-even-though-the-content-type-header-is-present/94502)

<div class="topic-metadata">

**Author:** [@adammichalik](https://discuss.elastic.co/u/adammichalik)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 7:32am UTC](https://discuss.elastic.co/t/es5-5-warning-content-type-detection-for-rest-requests-is-deprecated-specify-the-content-type-using-the-content-type-header-even-though-the-content-type-header-is-present/94502 "2017-07-27T07:32:55Z")

</div>

I see a very weird behaviour after I upgraded from ES 2.3.5 to 5.5.0. I'm using Perl Search::Elasticsearch v. 5.02 (newest available) for sending logs directly to ES. Most of the time all looks fine, but for some request…

---

## [Watcher stopped triggering](https://discuss.elastic.co/t/watcher-stopped-triggering/302085)

<div class="topic-metadata">

**Author:** [@Jonathanfranzen](https://discuss.elastic.co/u/Jonathanfranzen)\
**Replies:** 4\
**Last updated:** [April 13, 2022, 1:20pm UTC](https://discuss.elastic.co/t/watcher-stopped-triggering/302085 "2022-04-13T13:20:04Z")

</div>

Hi, I put up two Kibana Watchers in two different deployments last week. Now, one of the watchers doesn't trigger. It randomly stopped last friday, even though I didn't edit anything around that time. Now, even if I del…

---

## [C# sending a get request with a body to ElasticSearch](https://discuss.elastic.co/t/c-sending-a-get-request-with-a-body-to-elasticsearch/205758)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 4\
**Last updated:** [November 4, 2019, 3:18pm UTC](https://discuss.elastic.co/t/c-sending-a-get-request-with-a-body-to-elasticsearch/205758 "2019-11-04T15:18:08Z")

</div>

I'm trying to return the data from an existing visualization, called from an external source (written in C#). This can be done in Postman using a GET with a body request (this body copied from the request found when "In…

---

## [Error while make setup in beat in windows 10](https://discuss.elastic.co/t/error-while-make-setup-in-beat-in-windows-10/157960)

<div class="topic-metadata">

**Author:** [@sumanjha](https://discuss.elastic.co/u/sumanjha)\
**Replies:** 4\
**Last updated:** [November 29, 2018, 3:25pm UTC](https://discuss.elastic.co/t/error-while-make-setup-in-beat-in-windows-10/157960 "2018-11-29T15:25:04Z")

</div>

hi team, I am getting error while make setup the custom beat in cmd after generating the beat. please help D:\\custom beat\\src\\github.com\\Elastic\\mybeat\>make setup INFO: Could not find files for the given pattern(s). …

---

## [Filebeat syscall/dll\_windows.go Error](https://discuss.elastic.co/t/filebeat-syscall-dll-windows-go-error/144525)

<div class="topic-metadata">

**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\
**Replies:** 4\
**Last updated:** [August 16, 2018, 5:33pm UTC](https://discuss.elastic.co/t/filebeat-syscall-dll-windows-go-error/144525 "2018-08-16T17:33:43Z")

</div>

Hi, I got following error when booting filebeat as a service in Windows Server 2003. Does anyone know what's going on? It said "recovering", but I still want to know what happened... 2018-08-15T09:19:51.147-0400 ERROR …

---

## [Trying to install ingest-geoip but java error](https://discuss.elastic.co/t/trying-to-install-ingest-geoip-but-java-error/141556)

<div class="topic-metadata">

**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\
**Replies:** 4\
**Last updated:** [August 2, 2018, 12:27pm UTC](https://discuss.elastic.co/t/trying-to-install-ingest-geoip-but-java-error/141556 "2018-08-02T12:27:03Z")

</div>

Hi. My Elastic node hung as I was installing the ingest-geoip plugin. Now when I try to run it again it comes up with the below error message. ingest-user-agent does the same. Is there anyway I can fix this up without…

---

## [X-pack Machine Learning](https://discuss.elastic.co/t/x-pack-machine-learning/97688)

<div class="topic-metadata">

**Author:** [@chaoukiz](https://discuss.elastic.co/u/chaoukiz)\
**Replies:** 1\
**Last updated:** [August 21, 2017, 2:19pm UTC](https://discuss.elastic.co/t/x-pack-machine-learning/97688 "2017-08-21T14:19:21Z")

</div>

i can use x-pack for neural neutwork ?? why i can’t use x-pack for q-learning ?? should i use elasticsearsh for hadoop MLlib spark ?

---

## [Unable to install the logstash-filter-grok plugin](https://discuss.elastic.co/t/unable-to-install-the-logstash-filter-grok-plugin/50259)

<div class="topic-metadata">

**Author:** [@Hobbit](https://discuss.elastic.co/u/Hobbit)\
**Replies:** 4\
**Last updated:** [May 18, 2016, 5:51am UTC](https://discuss.elastic.co/t/unable-to-install-the-logstash-filter-grok-plugin/50259 "2016-05-18T05:51:13Z")

</div>

I followed the installation steps but when I install the plugin it shows this error: ERROR: Installation Aborted, message: Bundler could not find compatible versions for gem "logstash-core-plugin-api": In snapshot (Gem…

---

## [Deploying behind NAT and Firewall](https://discuss.elastic.co/t/deploying-behind-nat-and-firewall/164783)

<div class="topic-metadata">

**Author:** [@Nikola\_Radovanovic](https://discuss.elastic.co/u/Nikola_Radovanovic)\
**Replies:** 2\
**Last updated:** [January 19, 2019, 11:30am UTC](https://discuss.elastic.co/t/deploying-behind-nat-and-firewall/164783 "2019-01-19T11:30:37Z")

</div>

Hi, I am not sure if this is the right place for this topic, so please move it if there is a better one. My question is how Elasticsearch shall be deployed when behind NAT and Firewall? I created basic setup of Elastic…

---

## [I can't access to my kibana remotely](https://discuss.elastic.co/t/i-cant-access-to-my-kibana-remotely/114251)

<div class="topic-metadata">

**Author:** [@Kaouther\_Mechri](https://discuss.elastic.co/u/Kaouther_Mechri)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 8:45am UTC](https://discuss.elastic.co/t/i-cant-access-to-my-kibana-remotely/114251 "2018-01-12T08:45:44Z")

</div>

Hello; I've installed the latest version of EKL stack on my linux server. I 'can access locally to my kibana but not remotely curl http://192.168.9.160:5601 var hashRoute = '/app/kibana'; var defaultRoute = '/app/kib…

---

## [Two logstash Servers with Kafka](https://discuss.elastic.co/t/two-logstash-servers-with-kafka/45238)

<div class="topic-metadata">

**Author:** [@kirill\_polishchuk](https://discuss.elastic.co/u/kirill_polishchuk)\
**Replies:** 2\
**Last updated:** [March 25, 2016, 4:41pm UTC](https://discuss.elastic.co/t/two-logstash-servers-with-kafka/45238 "2016-03-25T16:41:31Z")

</div>

Hello I have two logstash servers as front-end, with Kafka Output and two logstash servers as back-end with Kafka Input. The front-ends are putting all events into one topic, theoretically the back-ends shoul…

---

## [API Key for Kibana Reporting](https://discuss.elastic.co/t/api-key-for-kibana-reporting/345662)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 8\
**Last updated:** [November 3, 2023, 2:27pm UTC](https://discuss.elastic.co/t/api-key-for-kibana-reporting/345662 "2023-11-03T14:27:54Z")

</div>

I need to generate an API key which will allow a user to generate a report in Kibana and then download it, once it's generated. What permissions do I need to set? I haven't been able to determine this from the docs. Thx…

---

## [Using custom fields in ILM setup index names](https://discuss.elastic.co/t/using-custom-fields-in-ilm-setup-index-names/191174)

<div class="topic-metadata">

**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\
**Replies:** 0\
**Last updated:** [July 18, 2019, 10:14am UTC](https://discuss.elastic.co/t/using-custom-fields-in-ilm-setup-index-names/191174 "2019-07-18T10:14:14Z")

</div>

Hi, I'm creating a custom field, service.name, based on the name of the log file and determined by a processor in the filebeat inputs filebeat.inputs: - type: log enabled: true paths: - /local/0/seal\_logs/\*.jso…

---

## [Alerting UI in 7.7 and TLS](https://discuss.elastic.co/t/alerting-ui-in-7-7-and-tls/232782)

<div class="topic-metadata">

**Author:** [@LLin](https://discuss.elastic.co/u/LLin)\
**Replies:** 6\
**Last updated:** [June 4, 2020, 3:04pm UTC](https://discuss.elastic.co/t/alerting-ui-in-7-7-and-tls/232782 "2020-06-04T15:04:49Z")

</div>

The new feature in the UI in Kibana is a welcome one, but currently, it's saying for me to enable TLS between Kibana and Elasticsearch. We are using a Load Balancer in front of Elasticsearch that terminates HTTPS, so the…

---

## [ES consume high cpu with threadlocal](https://discuss.elastic.co/t/es-consume-high-cpu-with-threadlocal/117402)

<div class="topic-metadata">

**Author:** [@rockiee281](https://discuss.elastic.co/u/rockiee281)\
**Replies:** 6\
**Last updated:** [January 29, 2018, 12:17pm UTC](https://discuss.elastic.co/t/es-consume-high-cpu-with-threadlocal/117402 "2018-01-29T12:17:36Z")

</div>

Hi all, I'm using es 2.4.2 with java8u60's G1GC. Recently we found the load often goes very high( 20~25 while our machine have 32 vocres). After profiling we find "ThreadLocalMap.expungeStaleEntry" is consuming almost 8…

---

## [Need help to setup the Alerts as we are running Free Basic license at this time](https://discuss.elastic.co/t/need-help-to-setup-the-alerts-as-we-are-running-free-basic-license-at-this-time/69494)

<div class="topic-metadata">

**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\
**Replies:** 5\
**Last updated:** [December 22, 2016, 3:10pm UTC](https://discuss.elastic.co/t/need-help-to-setup-the-alerts-as-we-are-running-free-basic-license-at-this-time/69494 "2016-12-22T15:10:40Z")

</div>

I am new to the Elastic Searcg. We are using ES and Kibana 5.x as Free basic licenses with Td-Agent and like to set up the alert. Please let me know my options to set up alerts in Free basic license model and How can I…

---

## [Conflicting logstash timestaps system vs UTC](https://discuss.elastic.co/t/conflicting-logstash-timestaps-system-vs-utc/52097)

<div class="topic-metadata">

**Author:** [@PepeK](https://discuss.elastic.co/u/PepeK)\
**Replies:** 5\
**Last updated:** [June 20, 2016, 7:30pm UTC](https://discuss.elastic.co/t/conflicting-logstash-timestaps-system-vs-utc/52097 "2016-06-20T19:30:29Z")

</div>

Hi, I am posting this from Chile and have patched java with the latest timezone data from iana.org: I see conflicting timestamp data in logstash-2.3.2-1(receiving from rsyslog) which is causing kibana to display the lo…

---

## [Elastic API Extension Steps](https://discuss.elastic.co/t/elastic-api-extension-steps/97818)

<div class="topic-metadata">

**Author:** [@nijov](https://discuss.elastic.co/u/nijov)\
**Replies:** 7\
**Last updated:** [August 25, 2017, 9:13pm UTC](https://discuss.elastic.co/t/elastic-api-extension-steps/97818 "2017-08-25T21:13:42Z")

</div>

Hello, I am trying to learn how to extend the existing APIs like search to add something very specific before the call and after the call. I understand the plugins are the way to go, can I anyone point me to documentati…

---

## [Problem with ES \> 0.90.9 in openvz](https://discuss.elastic.co/t/problem-with-es-0-90-9-in-openvz/15537)

<div class="topic-metadata">

**Author:** [@Brian\_Easley](https://discuss.elastic.co/u/Brian_Easley)\
**Replies:** 7\
**Last updated:** [February 1, 2014, 6:33pm UTC](https://discuss.elastic.co/t/problem-with-es-0-90-9-in-openvz/15537 "2014-02-01T18:33:24Z")

</div>

Hello, I am unable to properly start elasticsearch 0.90.9 and higher inside Debian wheezy openvz containers with the following error: Starting ElasticSearch Server:sysctl: permission denied on key 'vm.max\_map\_c…

---

## [Elasticsearch-PHP reindex not working as expected](https://discuss.elastic.co/t/elasticsearch-php-reindex-not-working-as-expected/156883)

<div class="topic-metadata">

**Author:** [@dhondup](https://discuss.elastic.co/u/dhondup)\
**Replies:** 1\
**Last updated:** [November 16, 2018, 8:32pm UTC](https://discuss.elastic.co/t/elasticsearch-php-reindex-not-working-as-expected/156883 "2018-11-16T20:32:53Z")

</div>

Documentation on reindex API: https://www.elastic.co/guide/en/elasticsearch/client/php-api/6.0/ElasticsearchPHP\_Endpoints.html#Elasticsearch\_Clientreindex\_reindex /\* $params\['refresh'\] = (boolean) Should the…

---

## [How to find count of inner hits?](https://discuss.elastic.co/t/how-to-find-count-of-inner-hits/112761)

<div class="topic-metadata">

**Author:** [@oguz](https://discuss.elastic.co/u/oguz)\
**Replies:** 1\
**Last updated:** [December 21, 2017, 8:06am UTC](https://discuss.elastic.co/t/how-to-find-count-of-inner-hits/112761 "2017-12-21T08:06:03Z")

</div>

Hi all, is it possible to get the count of all inner hits in a paginated query? If not, is there any alternative solution you can direct me to? I want to get the count of all items (segment.item) in the inner hits on th…

---

## [Context root for Kibana URL](https://discuss.elastic.co/t/context-root-for-kibana-url/29894)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [September 24, 2015, 6:16am UTC](https://discuss.elastic.co/t/context-root-for-kibana-url/29894 "2015-09-24T06:16:09Z")

</div>

Hello, We are securing Kibana behind nGinx. All setting are done and it asks for id password when we hit URL http://host.ip.address:5601. What we want is, there should be context root like "/kibana" Or /central\_logging…

---

## [TTY Auditing User Keystrokes](https://discuss.elastic.co/t/tty-auditing-user-keystrokes/194000)

<div class="topic-metadata">

**Author:** [@SCL\_ADMIN](https://discuss.elastic.co/u/SCL_ADMIN)\
**Replies:** 3\
**Last updated:** [August 8, 2019, 12:25am UTC](https://discuss.elastic.co/t/tty-auditing-user-keystrokes/194000 "2019-08-08T00:25:00Z")

</div>

Hello I've managed to get Auditbeats working a remote server and I have enabled user keystrokes But I'm a bit lost in finding the entries showing the keystrokes when using the server as a user. Do i need to need to p…

[Previous page](https://discuss.elastic.co/top.md?page=975&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=977&per_page=50&period=all)
