# Top **URL:** https://discuss.elastic.co/top.md?page=990&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 991 --- ## [Elasticsearch and spark](https://discuss.elastic.co/t/elasticsearch-and-spark/19149)
**Author:** [@SaraB](https://discuss.elastic.co/u/SaraB)\ **Replies:** 6\ **Last updated:** [September 28, 2014, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-and-spark/19149 "2014-09-28T20:03:42Z")
Hi, I am using Spark to stream data and write to ES. I have downloaded elasticsearch-hadoop-2.1.0.BUILD-SNAPSHOT.jar yesterday and use 'saveToEs' method instead of saveAsNewAPIHadoopFiles. I get the following error … --- ## [Fleet agent custom log integration multiline settings](https://discuss.elastic.co/t/fleet-agent-custom-log-integration-multiline-settings/297124)
**Author:** [@thwint](https://discuss.elastic.co/u/thwint)\ **Replies:** 1\ **Last updated:** [February 17, 2022, 10:02am UTC](https://discuss.elastic.co/t/fleet-agent-custom-log-integration-multiline-settings/297124 "2022-02-17T10:02:55Z")
Hello all, I try to setup a custom log policy for our java logs. Previously we used filebeat and had the following lines in filebeat.yml to configure multiline log entries: multiline: match: after negate: tru… --- ## [False positive](https://discuss.elastic.co/t/false-positive/208846)
**Author:** [@vnovomeska](https://discuss.elastic.co/u/vnovomeska)\ **Replies:** 1\ **Last updated:** [December 6, 2019, 10:04pm UTC](https://discuss.elastic.co/t/false-positive/208846 "2019-12-06T22:04:24Z")
Hello, I encountered a false positive: https://www.virustotal.com/gui/file/9fdd641a90f64de570e08202dc0ffe9db8a94264bf969dcf16037413db49da1e/detection Endgame reports "Malicious (moderate Confidence)" but the file is s… --- ## [Elasticsearch(6.7.1): \[test1\] path is not accessible on master node](https://discuss.elastic.co/t/elasticsearch-6-7-1-test1-path-is-not-accessible-on-master-node/185136)
**Author:** [@xiaochuan\_lin](https://discuss.elastic.co/u/xiaochuan_lin)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 1:43am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-1-test1-path-is-not-accessible-on-master-node/185136 "2019-06-14T01:43:40Z")
Hey, I tried to use oss (Alibaba Cloud Storage) to add some errors when adding elasticsarch(6.7.1) backup. Here are my steps. 1、Mount oss to all elasticsearch servers and change directory permissions to elasticsearch … --- ## [Synonym Token Filter Error](https://discuss.elastic.co/t/synonym-token-filter-error/160016)
**Author:** [@Jensxy](https://discuss.elastic.co/u/Jensxy)\ **Replies:** 1\ **Last updated:** [December 9, 2018, 11:01am UTC](https://discuss.elastic.co/t/synonym-token-filter-error/160016 "2018-12-09T11:01:17Z")
Synonym Token Filter gives an Error. Elasticsearch version Version: 6.2.2, Build: 10b1edd/2018-02-16T19:01:30.685723Z, JVM: 1.8.0\_161 Plugins installed: Opennlp JVM version java version "1.8.0\_161" Java(TM) SE Run… --- ## [Integrating elasticsearch with java through TransportClient](https://discuss.elastic.co/t/integrating-elasticsearch-with-java-through-transportclient/100190)
**Author:** [@vaibhav2903](https://discuss.elastic.co/u/vaibhav2903)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 11:34am UTC](https://discuss.elastic.co/t/integrating-elasticsearch-with-java-through-transportclient/100190 "2017-09-12T11:34:21Z")
I am trying to connect Eclipse(Java) with elasticsearch using transportclient. i am unable to connect both of them because of the following error: I have used logstash to connect mysqlWorkbench with elasticsearch. Tra… --- ## [Kibana KQL issue, Greater than does not work for event.duration field](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943)
**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\ **Replies:** 3\ **Last updated:** [September 2, 2021, 10:01am UTC](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943 "2021-09-02T10:01:32Z")
I am currently on using Kibana v7.13.3. I am ingesting zeek logs into my elastic stack and trying to filter by event duration that exceeds a specific time frame. I have tried using the following basic KQL to filter by: e… --- ## [Importing visualizations from different machine](https://discuss.elastic.co/t/importing-visualizations-from-different-machine/131617)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 11:16am UTC](https://discuss.elastic.co/t/importing-visualizations-from-different-machine/131617 "2018-05-14T11:16:54Z")
Hi, I use kibana and elastic (6) like so: I have remote centos 7 machine that hosts kibana and elastic, and I access kibana via my broser on another machine. The thing is I Imported some searches, visualizations and a… --- ## [Could not initialize class org.elasticsearch.test.ESTestCase alternate solution](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-test-estestcase-alternate-solution/117641)
**Author:** [@Michael\_Ihde](https://discuss.elastic.co/u/Michael_Ihde)\ **Replies:** 0\ **Last updated:** [January 30, 2018, 2:45pm UTC](https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-test-estestcase-alternate-solution/117641 "2018-01-30T14:45:03Z")
I've seen two forum messages related to errors starting up ESTestCase and ESIntegTestCase: https://discuss.elastic.co/t/could-not-initialize-class-org-elasticsearch-test-estestcase/78770 https://discuss.elastic.co/… --- ## [Create dynamic date variable/constant to use in watch](https://discuss.elastic.co/t/create-dynamic-date-variable-constant-to-use-in-watch/115062)
**Author:** [@Viorel\_Florian](https://discuss.elastic.co/u/Viorel_Florian)\ **Replies:** 3\ **Last updated:** [January 16, 2018, 11:48am UTC](https://discuss.elastic.co/t/create-dynamic-date-variable-constant-to-use-in-watch/115062 "2018-01-16T11:48:42Z")
I am trying to create a metadata field of type date to use in input, condition, action : "metadata": { "range\_start" : "now-10m" } In the input it seems to have the desired. In the action I am trying to use range\_star… --- ## [Kibana 5.3.2 case sensitive](https://discuss.elastic.co/t/kibana-5-3-2-case-sensitive/105533)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 3\ **Last updated:** [October 28, 2017, 3:06am UTC](https://discuss.elastic.co/t/kibana-5-3-2-case-sensitive/105533 "2017-10-28T03:06:14Z")
Hi How do I make a field case insensitive? Example I have a saved search that gets all delivered Exchange email messages. However, when I come to Visualize (vertical bar chart) this it shows recipients as separate en… --- ## [More than 1000 rows in canwas](https://discuss.elastic.co/t/more-than-1000-rows-in-canwas/261415)
**Author:** [@Alexey\_Nikolaev](https://discuss.elastic.co/u/Alexey_Nikolaev)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 6:15pm UTC](https://discuss.elastic.co/t/more-than-1000-rows-in-canwas/261415 "2021-01-21T18:15:20Z")
Try to count call from CISCO CDR. I have QUERY that grouping all call by globalCallID\_callId and I need to COUNT unique globalCallID\_callId - but I have much more records than 1000. My SQL is: SELECT globalCallID\_callI… --- ## [Synonym filter not working query time?](https://discuss.elastic.co/t/synonym-filter-not-working-query-time/9638)
**Author:** [@Irving](https://discuss.elastic.co/u/Irving)\ **Replies:** 5\ **Last updated:** [November 16, 2012, 11:31pm UTC](https://discuss.elastic.co/t/synonym-filter-not-working-query-time/9638 "2012-11-16T23:31:50Z")
Hi everyone, I'm trying to get synonyms to work, but for some reason I'm unable to create the index with synonym settings (acknowledge=False) and end up with a cluster health state of red. The log file also doesn'… --- ## [How to remove data string if NULL from user-agent filtered](https://discuss.elastic.co/t/how-to-remove-data-string-if-null-from-user-agent-filtered/148400)
**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\ **Replies:** 7\ **Last updated:** [September 21, 2018, 2:34am UTC](https://discuss.elastic.co/t/how-to-remove-data-string-if-null-from-user-agent-filtered/148400 "2018-09-21T02:34:15Z")
Hi Guys, Is there way to remove, OS field %{os\_major}.%{os\_minor} and NAME field %{major}.%{minor} of user-agent? if the value is NULL? Because, it looks like this on my Kibana, kinda irritating on my eyes. Below ar… --- ## [Multi Word Synonyms](https://discuss.elastic.co/t/multi-word-synonyms/138531)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 1\ **Last updated:** [July 6, 2018, 9:19am UTC](https://discuss.elastic.co/t/multi-word-synonyms/138531 "2018-07-06T09:19:07Z")
Hi :slight\_smile: my synonyms file has currently only explicit and equivalent synonyms with only one word. Can elasticsearch handle multi word synonyms? E.g.: this is a sentence, another one, something else =\> fancy s… --- ## [How To Make Logstash Read Entire File Every Time Which is from File Beat?](https://discuss.elastic.co/t/how-to-make-logstash-read-entire-file-every-time-which-is-from-file-beat/135187)
**Author:** [@Yenike\_Raghu\_Ram](https://discuss.elastic.co/u/Yenike_Raghu_Ram)\ **Replies:** 7\ **Last updated:** [June 9, 2018, 5:34pm UTC](https://discuss.elastic.co/t/how-to-make-logstash-read-entire-file-every-time-which-is-from-file-beat/135187 "2018-06-09T17:34:52Z")
input { beats { port =\> 5048 } } output { stdout { codec =\> rubydebug } file { codec =\> line { format =\> "%{\[message\]}" } path =\> "C:/Program Files/logstash-6.2.3/testPractice/LogsCollected/DebugLog09May2018/… --- ## [Grokparsefailure when field is no longer in the message](https://discuss.elastic.co/t/grokparsefailure-when-field-is-no-longer-in-the-message/100882)
**Author:** [@scayzer65](https://discuss.elastic.co/u/scayzer65)\ **Replies:** 7\ **Last updated:** [September 19, 2017, 7:22am UTC](https://discuss.elastic.co/t/grokparsefailure-when-field-is-no-longer-in-the-message/100882 "2017-09-19T07:22:27Z")
Hi I have a log that randomly shows an ip address at the end of the line. I have successfully created a filter to isolate the ip address but when the log does not produce the number I get a grokparsefailure. I really ne… --- ## [Filebeat is taking too much of memory on ubuntu 16](https://discuss.elastic.co/t/filebeat-is-taking-too-much-of-memory-on-ubuntu-16/96057)
**Author:** [@Narayanan\_Sukumar](https://discuss.elastic.co/u/Narayanan_Sukumar)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 2:22pm UTC](https://discuss.elastic.co/t/filebeat-is-taking-too-much-of-memory-on-ubuntu-16/96057 "2017-08-07T14:22:25Z")
Hello, I am using filebeat version 5.4.2 with ubuntu 16 and it is taking more memory resulting OOM. ================== root@xxxxxx:/usr/share/filebeat/bin# ./filebeat -configtest -c /etc/filebeat/filebeat.yml -e 2017/… --- ## [Cannot Delete In server AWS](https://discuss.elastic.co/t/cannot-delete-in-server-aws/28221)
**Author:** [@tommoholmes](https://discuss.elastic.co/u/tommoholmes)\ **Replies:** 7\ **Last updated:** [August 28, 2015, 8:47am UTC](https://discuss.elastic.co/t/cannot-delete-in-server-aws/28221 "2015-08-28T08:47:46Z")
I hosted my elastic in AWS but, I cannot delete index. my elasctic version 1.7.1 --- ## [Accessing array field within Native Plugin](https://discuss.elastic.co/t/accessing-array-field-within-native-plugin/14027)
**Author:** [@peter2](https://discuss.elastic.co/u/peter2)\ **Replies:** 7\ **Last updated:** [October 30, 2013, 11:45am UTC](https://discuss.elastic.co/t/accessing-array-field-within-native-plugin/14027 "2013-10-30T11:45:56Z")
I'm storing some data in array type field which needs to be accessed within Native Script which is used as custom scorer with function\_score query. But when I access the field values within Native Script using docFie… --- ## [Elasticsearch return search response very quickly with timeout:true](https://discuss.elastic.co/t/elasticsearch-return-search-response-very-quickly-with-timeout-true/322537)
**Author:** [@chenchuangc](https://discuss.elastic.co/u/chenchuangc)\ **Replies:** 8\ **Last updated:** [January 10, 2023, 7:01am UTC](https://discuss.elastic.co/t/elasticsearch-return-search-response-very-quickly-with-timeout-true/322537 "2023-01-10T07:01:56Z")
Elasticsearch version bin/elasticsearch --version 7.6.0 Problem I use go-elasticsearch client query from elasticsearch. resp, err := client.Search( client.Search.WithContext(d.ctx), client.Search.WithIndex(inde… --- ## [Canvas showing error instead of 0](https://discuss.elastic.co/t/canvas-showing-error-instead-of-0/261068)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 8\ **Last updated:** [January 19, 2021, 11:21pm UTC](https://discuss.elastic.co/t/canvas-showing-error-instead-of-0/261068 "2021-01-19T23:21:03Z")
Hello, I have a query that returns 0 records. The query is also using a filter of "The last 12 hours". I have 0 documents in the index, for the past 2 weeks, so the query is querying NULL(?). SELECT COUNT(DISTINCT uu… --- ## [Cannot search tags with multi\_match phrase \[ElasticSearch 5.1.2\]](https://discuss.elastic.co/t/cannot-search-tags-with-multi-match-phrase-elasticsearch-5-1-2/72748)
**Author:** [@lorcom](https://discuss.elastic.co/u/lorcom)\ **Replies:** 8\ **Last updated:** [January 25, 2017, 2:24pm UTC](https://discuss.elastic.co/t/cannot-search-tags-with-multi-match-phrase-elasticsearch-5-1-2/72748 "2017-01-25T14:24:49Z")
Hi to everybody, I have an index containing topics of a forum. I match the phrase (specified by users) with multi\_match in fields title, body and tags. Users can also "search any words" or "search the phrase"; if use … --- ## [Pass multiple values(500 more ) in kibana dashboard](https://discuss.elastic.co/t/pass-multiple-values-500-more-in-kibana-dashboard/259463)
**Author:** [@jeff\_arthur](https://discuss.elastic.co/u/jeff_arthur)\ **Replies:** 2\ **Last updated:** [December 24, 2020, 7:39am UTC](https://discuss.elastic.co/t/pass-multiple-values-500-more-in-kibana-dashboard/259463 "2020-12-24T07:39:18Z")
Hi, How can i pass multiple values in kibana dashboard - 'add filter' - 'is one of' ? I have a txt file with 500 values ​​in it. --- ## [Unable to create custom index or Disable ILM](https://discuss.elastic.co/t/unable-to-create-custom-index-or-disable-ilm/224964)
**Author:** [@rehannali](https://discuss.elastic.co/u/rehannali)\ **Replies:** 2\ **Last updated:** [March 27, 2020, 5:36am UTC](https://discuss.elastic.co/t/unable-to-create-custom-index-or-disable-ilm/224964 "2020-03-27T05:36:08Z")
Hi, I'm unable to create custom index from filebeat. I tried to disbale ilm and tried almost everything but i'm unable to disable it. configuration###################### Filebeat Configuration Example ##################… --- ## [Add Hyperlinks in canvas shape](https://discuss.elastic.co/t/add-hyperlinks-in-canvas-shape/197663)
**Author:** [@atamarnath](https://discuss.elastic.co/u/atamarnath)\ **Replies:** 2\ **Last updated:** [September 13, 2019, 7:57am UTC](https://discuss.elastic.co/t/add-hyperlinks-in-canvas-shape/197663 "2019-09-13T07:57:33Z")
Hi, I have created a canvas workpad that has a circular shape which changes color based on the filter condition. I have dashboard that has the drilled down information related to that shape/filter condition. I want to m… --- ## [java.lang.OutOfMemoryError: Java heap space while indexing xml file](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-while-indexing-xml-file/96082)
**Author:** [@aashishchauhan06](https://discuss.elastic.co/u/aashishchauhan06)\ **Replies:** 2\ **Last updated:** [August 7, 2017, 12:49pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-while-indexing-xml-file/96082 "2017-08-07T12:49:12Z")
HI, I’m indexing a XML file and given ElasticSearch as output but after approx. 2 hours i got OOM error like this java.lang.OutOfMemoryError: Java heap space Dumping heap to java\_pid6940.hprof ... Heap dump file create… --- ## [ElasticSearch: access document nested value in groovy script](https://discuss.elastic.co/t/elasticsearch-access-document-nested-value-in-groovy-script/21644)
**Author:** [@Anil\_Kumar](https://discuss.elastic.co/u/Anil_Kumar)\ **Replies:** 2\ **Last updated:** [February 12, 2016, 4:35pm UTC](https://discuss.elastic.co/t/elasticsearch-access-document-nested-value-in-groovy-script/21644 "2016-02-12T16:35:24Z")
I have a document stored in ElasticSearch as below. \_source: { "firstname": "John", "lastname": "Smith", "medals":\[ { "bucket": 100, "count": 1 }, … --- ## [Can I hide the time filter in the specified dashboard](https://discuss.elastic.co/t/can-i-hide-the-time-filter-in-the-specified-dashboard/230397)
**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\ **Replies:** 2\ **Last updated:** [May 5, 2020, 1:21am UTC](https://discuss.elastic.co/t/can-i-hide-the-time-filter-in-the-specified-dashboard/230397 "2020-05-05T01:21:13Z")
Hi，I would like to ask if I can hide the time filter in the specified dashboard？Looking forward to your reply. THANKS! Best regards Echo --- ## [How to avoid pod use all memory limits](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642)
**Author:** [@levitative](https://discuss.elastic.co/u/levitative)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:35pm UTC](https://discuss.elastic.co/t/how-to-avoid-pod-use-all-memory-limits/230642 "2020-05-07T20:35:18Z")
Elastic search always use all memory that I specify as limit to it, no mater how much I increase the limit and downgrade the mix/max heap size. The actual heap is using less than half of the max heap (2GB). The pod keep… --- ## [Putting 2 different fields to compare on the same chart](https://discuss.elastic.co/t/putting-2-different-fields-to-compare-on-the-same-chart/223291)
**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 12:33pm UTC](https://discuss.elastic.co/t/putting-2-different-fields-to-compare-on-the-same-chart/223291 "2020-03-13T12:33:51Z")
hi, need help to see if 2 charts comparing results of 2 different fields can be merged into one I am currently comparing the machine and operator disposition performance by 2 different charts using Kibana as below Bas… --- ## [Cluster state often yellow: data node failed to ping master](https://discuss.elastic.co/t/cluster-state-often-yellow-data-node-failed-to-ping-master/147642)
**Author:** [@eranhirs](https://discuss.elastic.co/u/eranhirs)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 8:08am UTC](https://discuss.elastic.co/t/cluster-state-often-yellow-data-node-failed-to-ping-master/147642 "2018-09-07T08:08:28Z")
We have 6 nodes running ES 5.5.1, a few times a day the cluster is yellow and logs show that a random node which is not master disconnected. Data node and master failed to ping each other while services are all running … --- ## [Jenkins Logstash plugin to show current state of all jobs in one Kibana graph](https://discuss.elastic.co/t/jenkins-logstash-plugin-to-show-current-state-of-all-jobs-in-one-kibana-graph/136562)
**Author:** [@ps895r](https://discuss.elastic.co/u/ps895r)\ **Replies:** 3\ **Last updated:** [June 20, 2018, 6:22pm UTC](https://discuss.elastic.co/t/jenkins-logstash-plugin-to-show-current-state-of-all-jobs-in-one-kibana-graph/136562 "2018-06-20T18:22:42Z")
This question is regarding Jenkins, the use of their logstash plugin to send build logs to elasticsearch and how to get the current state of all jobs. For example, let's say there are 10 jobs. I'd like to generate a grap… --- ## [In a boolean query can I specify multiple must clauses or a single must clause with multiple terms?](https://discuss.elastic.co/t/in-a-boolean-query-can-i-specify-multiple-must-clauses-or-a-single-must-clause-with-multiple-terms/54415)
**Author:** [@Steve\_Suh](https://discuss.elastic.co/u/Steve_Suh)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 1:15pm UTC](https://discuss.elastic.co/t/in-a-boolean-query-can-i-specify-multiple-must-clauses-or-a-single-must-clause-with-multiple-terms/54415 "2016-07-01T13:15:06Z")
Here's my full query. I'm using the Ruby gem for ElasticSearch. I have it currently working with just one must clause and single term in that. query: { bool: { must: \[{ term: { successful: true }}, { term: { accou… --- ## [CurrentState\[RECOVERING\] operations only allowed when started/relocated | action.search.type | All shards failed for phase: \[dfs\]](https://discuss.elastic.co/t/currentstate-recovering-operations-only-allowed-when-started-relocated-action-search-type-all-shards-failed-for-phase-dfs/26756)
**Author:** [@orenClamour](https://discuss.elastic.co/u/orenClamour)\ **Replies:** 0\ **Last updated:** [August 3, 2015, 10:20pm UTC](https://discuss.elastic.co/t/currentstate-recovering-operations-only-allowed-when-started-relocated-action-search-type-all-shards-failed-for-phase-dfs/26756 "2015-08-03T22:20:33Z")
The issue were seeing on production seems to be that a shard of ES is stuck in the recovery state and we attempt to search it when it's in this state causing the exception. From time to time we get this error, which r… --- ## [How span.type is setting if using OTel exporter?](https://discuss.elastic.co/t/how-span-type-is-setting-if-using-otel-exporter/314302)
**Author:** [@gvencadze](https://discuss.elastic.co/u/gvencadze)\ **Replies:** 6\ **Last updated:** [September 23, 2022, 10:51am UTC](https://discuss.elastic.co/t/how-span-type-is-setting-if-using-otel-exporter/314302 "2022-09-23T10:51:49Z")
Hey, I'm trying to send traces over opentelemetry library and send them to Elastic APM (v7.17) via exporter. I saw that there is field in metadata that's called span.type, while using apm-go-agent, I can set value for t… --- ## ["\_dateparsefailure" due to Timestamp Cisco IOS](https://discuss.elastic.co/t/dateparsefailure-due-to-timestamp-cisco-ios/208989)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 6\ **Last updated:** [November 27, 2019, 7:41pm UTC](https://discuss.elastic.co/t/dateparsefailure-due-to-timestamp-cisco-ios/208989 "2019-11-27T19:41:33Z")
I used the conf file from here and the pattern below in a pattern file referenced by the conf file. .conf grok section grok { # There are a couple of custom patterns associated with this filter. patterns\_dir =\> \[ "… --- ## [About kibana exporting as an iframe](https://discuss.elastic.co/t/about-kibana-exporting-as-an-iframe/190413)
**Author:** [@111178](https://discuss.elastic.co/u/111178)\ **Replies:** 6\ **Last updated:** [July 17, 2019, 3:26am UTC](https://discuss.elastic.co/t/about-kibana-exporting-as-an-iframe/190413 "2019-07-17T03:26:14Z")
After exporting kibana's dashboard as an iframe，how to disable click events related to charts? To prevent the relevant date interval from being arbitrarily changed. --- ## [Filebeat won't collect syslogs over network](https://discuss.elastic.co/t/filebeat-wont-collect-syslogs-over-network/185261)
**Author:** [@johnbchron](https://discuss.elastic.co/u/johnbchron)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 2:33pm UTC](https://discuss.elastic.co/t/filebeat-wont-collect-syslogs-over-network/185261 "2019-06-14T14:33:04Z")
So I (for various reasons) would like to collect logs using Filebeat that are sent in from multiple locations on the local network. If possible I would like to access the actual logs being sent in, the actual contents of… --- ## [Order of \_bulk request operations](https://discuss.elastic.co/t/order-of--bulk-request-operations/98124)
**Author:** [@ndev](https://discuss.elastic.co/u/ndev)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 9:09pm UTC](https://discuss.elastic.co/t/order-of--bulk-request-operations/98124 "2017-08-23T21:09:26Z")
Is the order a bulk request guaranteed? I am making Nest calls from C# by using the BulkDescriptor to perform both inserts, updates, and deletes against a 2 node cluster. I wrote a simple application testing whether or n… --- ## [Upgrade Elastichearch 6.6 to 7.0 will not start](https://discuss.elastic.co/t/upgrade-elastichearch-6-6-to-7-0-will-not-start/177906)
**Author:** [@elkdummy](https://discuss.elastic.co/u/elkdummy)\ **Replies:** 5\ **Last updated:** [April 24, 2019, 7:55am UTC](https://discuss.elastic.co/t/upgrade-elastichearch-6-6-to-7-0-will-not-start/177906 "2019-04-24T07:55:30Z")
Just as the title says. Ran through all documents I could find via search. Let me know what to provide to help resolve. Thank you. --- ## [Nested or Parent/child](https://discuss.elastic.co/t/nested-or-parent-child/81455)
**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 12:07pm UTC](https://discuss.elastic.co/t/nested-or-parent-child/81455 "2017-04-10T12:07:07Z")
Hi all, I need to index a four level parent / child relationship like this : 1st level document2nd level document 3rd level document4th level document 3rd level document4th level document One more constraint is… --- ## [Where to obtain kibana\_sample\_data\_logs?](https://discuss.elastic.co/t/where-to-obtain-kibana-sample-data-logs/240892)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 6:12am UTC](https://discuss.elastic.co/t/where-to-obtain-kibana-sample-data-logs/240892 "2020-07-13T06:12:36Z")
Hi, I can't find kibana\_sample\_data\_logs as index. So I would like to load this sample data. Anyone, please guide on how and where to obtain this sample data ? Regartds, Grace --- ## [How to compare two aggregation output in watcher in condition](https://discuss.elastic.co/t/how-to-compare-two-aggregation-output-in-watcher-in-condition/168388)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 9:32am UTC](https://discuss.elastic.co/t/how-to-compare-two-aggregation-output-in-watcher-in-condition/168388 "2019-02-15T09:32:03Z")
I need to compare two aggregation queries output array n watcher condition, i have used chain input to execute my queries . not properly getting how can compare those two bucket arrays in watcher condtion. Could i get … --- ## [Logstash 6.1.1 isn't executing \[logging issue\]](https://discuss.elastic.co/t/logstash-6-1-1-isnt-executing-logging-issue/113745)
**Author:** [@vigneshaj](https://discuss.elastic.co/u/vigneshaj)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 9:52am UTC](https://discuss.elastic.co/t/logstash-6-1-1-isnt-executing-logging-issue/113745 "2018-01-05T09:52:23Z")
Hi - I have a 3 node cluster that i am trying to setup and run the ELK stack. Elastic search is configured and runs ok in all 3 nodes. Have 2 issues: #1: In Node1: while running the conf file i get the following erro… --- ## [Unicast Discovery 설정 시 신규 노드 추가](https://discuss.elastic.co/t/unicast-discovery/87406)
**Author:** [@TaeSung\_Kim](https://discuss.elastic.co/u/TaeSung_Kim)\ **Replies:** 2\ **Last updated:** [May 31, 2017, 4:22am UTC](https://discuss.elastic.co/t/unicast-discovery/87406 "2017-05-31T04:22:25Z")
안녕하세요. Unicast 클러스터 구성을 설정했을 경우 신규 데이터 노드를 추가하면 어떤 프로세스로 신규 노드를 추가해야할까요? 제 개인적인 생각에는 아래 프로세스를 따르지 않을까 생각하는데, 답변 주시면 감사하겠습니다. 신규 노드 추가 신규 노드의 elasticsearch.yml 파일에 unicast 설정 신규 노드 시작 여기까지 하면 기존 클러스터에 신규 노드가 추가될까요? … --- ## [How can i parse one field further into different fields in another grok pattern?](https://discuss.elastic.co/t/how-can-i-parse-one-field-further-into-different-fields-in-another-grok-pattern/58441)
**Author:** [@Lucifer\_hbp](https://discuss.elastic.co/u/Lucifer_hbp)\ **Replies:** 2\ **Last updated:** [August 22, 2016, 1:29pm UTC](https://discuss.elastic.co/t/how-can-i-parse-one-field-further-into-different-fields-in-another-grok-pattern/58441 "2016-08-22T13:29:08Z")
I have following match statement for an log event in which data2 field will be having some events repeated with similar pattern: match =\>\["message","%{GREEDYDATA:data}process id %{NUMBER:pid}%{GREEDYDATA:data1}BBBBBB%… --- ## [Failed to load resource: the server responded with a status of 406 (Not Acceptable)](https://discuss.elastic.co/t/failed-to-load-resource-the-server-responded-with-a-status-of-406-not-acceptable/358408)
**Author:** [@Sunil\_Jagtap](https://discuss.elastic.co/u/Sunil_Jagtap)\ **Replies:** 4\ **Last updated:** [April 30, 2024, 4:43am UTC](https://discuss.elastic.co/t/failed-to-load-resource-the-server-responded-with-a-status-of-406-not-acceptable/358408 "2024-04-30T04:43:31Z")
We have added plugin to kibana but facing as error (we can see on console tab of browser) while making API call to elasticsearch=\> Failed to load resource: the server responded with a status of 406 (Not Acceptable) --- ## [ECK and AD authentication for KIbana](https://discuss.elastic.co/t/eck-and-ad-authentication-for-kibana/225447)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 10:39am UTC](https://discuss.elastic.co/t/eck-and-ad-authentication-for-kibana/225447 "2020-05-07T10:39:35Z")
Anyone got this working? I am not familiar enough to guess what the config that needs to be added to the containers should look like and where to put it. Any samples would be very welcome thank you. --- ## [Logstash - Parse formatted message with Ruby Code](https://discuss.elastic.co/t/logstash-parse-formatted-message-with-ruby-code/212469)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 4\ **Last updated:** [December 21, 2019, 7:27am UTC](https://discuss.elastic.co/t/logstash-parse-formatted-message-with-ruby-code/212469 "2019-12-21T07:27:35Z")
Hi, Thanks in advance for your time! I have as input a line like the one below : 2019-12-18 08:28:36.810082121 string \[number\] logLevel string: tag1=val1|tag2=val2|tag3=val3|tag4=val4|tag5=val5|tag6=val6| And I'd li… [Previous page](https://discuss.elastic.co/top.md?page=989&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=991&per_page=50&period=all)