# Top

**URL:** https://discuss.elastic.co/top.md?page=997&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 998

---

## [Curator for Elastic cluster with xpack](https://discuss.elastic.co/t/curator-for-elastic-cluster-with-xpack/148275)

<div class="topic-metadata">

**Author:** [@tushar\_raut](https://discuss.elastic.co/u/tushar_raut)\
**Replies:** 6\
**Last updated:** [September 17, 2018, 4:42am UTC](https://discuss.elastic.co/t/curator-for-elastic-cluster-with-xpack/148275 "2018-09-17T04:42:01Z")

</div>

Hi, I am trying to setup curator for my elastic cluster which is running on version 6.3. I have installed curator 5.5.4. Curator yaml : --- client: hosts: - \["node-1", "node-2", "node-3"\] port: 9200 url\_pre…

---

## [How to add IF expression to Aggregation query?](https://discuss.elastic.co/t/how-to-add-if-expression-to-aggregation-query/56258)

<div class="topic-metadata">

**Author:** [@NativAt](https://discuss.elastic.co/u/NativAt)\
**Replies:** 6\
**Last updated:** [July 25, 2016, 9:32pm UTC](https://discuss.elastic.co/t/how-to-add-if-expression-to-aggregation-query/56258 "2016-07-25T21:32:00Z")

</div>

Hello, I want to add IF expression to my aggregation query. so if impression field is greater than 1, than count this tagId for every tagId. The final result is show for every tagId his total count of impressions. G…

---

## [How create dashboards to monitor java application exceptions](https://discuss.elastic.co/t/how-create-dashboards-to-monitor-java-application-exceptions/155381)

<div class="topic-metadata">

**Author:** [@rohith3e](https://discuss.elastic.co/u/rohith3e)\
**Replies:** 2\
**Last updated:** [November 12, 2018, 7:26am UTC](https://discuss.elastic.co/t/how-create-dashboards-to-monitor-java-application-exceptions/155381 "2018-11-12T07:26:59Z")

</div>

I need to monitor my java application exceptions, error logs. I'm forwarding my application logs from filebeat to logstash. How do I create dashboards like in splunk to monitor error logs and exceptions.

---

## [Winlogbeat service can not start](https://discuss.elastic.co/t/winlogbeat-service-can-not-start/130926)

<div class="topic-metadata">

**Author:** [@Nickname\_Yu](https://discuss.elastic.co/u/Nickname_Yu)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 9:15pm UTC](https://discuss.elastic.co/t/winlogbeat-service-can-not-start/130926 "2018-05-08T21:15:31Z")

</div>

Hi there, I'm configuring winlogbeat and trying to start it. The first time I installed winlogbeat service, and started it, it worked fine. Well, after several hours, it couldn't start with errors. I uninstalled the serv…

---

## [Basic Grok pattern](https://discuss.elastic.co/t/basic-grok-pattern/28050)

<div class="topic-metadata">

**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\
**Replies:** 2\
**Last updated:** [September 1, 2015, 2:20am UTC](https://discuss.elastic.co/t/basic-grok-pattern/28050 "2015-09-01T02:20:13Z")

</div>

Hello, We are trying to understand how to generate basic Grok patterns. As an example, I would have a few simple lines from a Tomcat Catalina file: Aug 25, 2015 12:00:02 AM org.apache.catalina.startup.HostConfig chec…

---

## [Weird aggregation issue](https://discuss.elastic.co/t/weird-aggregation-issue/28163)

<div class="topic-metadata">

**Author:** [@Emanuel\_Buzek](https://discuss.elastic.co/u/Emanuel_Buzek)\
**Replies:** 2\
**Last updated:** [August 27, 2015, 11:09am UTC](https://discuss.elastic.co/t/weird-aggregation-issue/28163 "2015-08-27T11:09:34Z")

</div>

Hi, we ran into a weird problem with aggregations on our production cluster (3 nodes all replicating ~60G index). Problem: aggregation (sum, min, max - all behaving the same) of one field (called 'dobirka') returns a…

---

## [Elastic search cluster setup suggestion required](https://discuss.elastic.co/t/elastic-search-cluster-setup-suggestion-required/149258)

<div class="topic-metadata">

**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\
**Replies:** 8\
**Last updated:** [September 20, 2018, 10:40am UTC](https://discuss.elastic.co/t/elastic-search-cluster-setup-suggestion-required/149258 "2018-09-20T10:40:34Z")

</div>

Hi, I have a cluster setup of 2 data nodes and 1 master node. One eligible master. I handle about 400Gb of data. All our search requests and indexing requests are made to the master node. This caused some RAM issues …

---

## [Elastic agent - Fleet x509: certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-fleet-x509-certificate-signed-by-unknown-authority/256330)

<div class="topic-metadata">

**Author:** [@111412](https://discuss.elastic.co/u/111412)\
**Replies:** 1\
**Last updated:** [October 4, 2021, 11:48am UTC](https://discuss.elastic.co/t/elastic-agent-fleet-x509-certificate-signed-by-unknown-authority/256330 "2021-10-04T11:48:12Z")

</div>

The error message is as follows :rofl: {"log.level":"error","@timestamp":"2020-11-23T15:59:58.735+0800","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/output.go","file.line":154},"message":…

---

## [How can i change the map to arc GIS?](https://discuss.elastic.co/t/how-can-i-change-the-map-to-arc-gis/253707)

<div class="topic-metadata">

**Author:** [@witcher](https://discuss.elastic.co/u/witcher)\
**Replies:** 7\
**Last updated:** [November 2, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-can-i-change-the-map-to-arc-gis/253707 "2020-11-02T10:20:22Z")

</div>

I want my map tile or base map to be from ArcGIS https://www.arcgis.com/home/webmap/viewer.html?useExisting=1 How should i go about this?

---

## [Logstash mutate and copy entire \_source object into an inner field](https://discuss.elastic.co/t/logstash-mutate-and-copy-entire-source-object-into-an-inner-field/114131)

<div class="topic-metadata">

**Author:** [@deflector](https://discuss.elastic.co/u/deflector)\
**Replies:** 1\
**Last updated:** [January 7, 2018, 4:31pm UTC](https://discuss.elastic.co/t/logstash-mutate-and-copy-entire-source-object-into-an-inner-field/114131 "2018-01-07T16:31:23Z")

</div>

Hello, I'm trying to add a layer to my template definition to wrap the existing document as an inner field, lets call it 'summary'. I have to do this for several types, each with many fields. One of the bigger issues wi…

---

## [Query fails because of NullPointerException in QueryPhase](https://discuss.elastic.co/t/query-fails-because-of-nullpointerexception-in-queryphase/4236)

<div class="topic-metadata">

**Author:** [@Michel\_Conrad](https://discuss.elastic.co/u/Michel_Conrad)\
**Replies:** 7\
**Last updated:** [April 15, 2011, 4:52pm UTC](https://discuss.elastic.co/t/query-fails-because-of-nullpointerexception-in-queryphase/4236 "2011-04-15T16:52:20Z")

</div>

Hi, I am getting the following NullPointerException while searching, I am using the master branch (rev 25eba4b6): \[2011-04-14 15:44:38,756\]\[DEBUG\]\[action.search.type \] \[Calypso\] \[19734\] Failed to execute query…

---

## [Nested Query vs. Has Child Query](https://discuss.elastic.co/t/nested-query-vs-has-child-query/10304)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 2\
**Last updated:** [January 11, 2013, 6:50pm UTC](https://discuss.elastic.co/t/nested-query-vs-has-child-query/10304 "2013-01-11T18:50:43Z")

</div>

Hi, What exactly is the difference between a Nested Query and a Has Child Query? Is the main difference around the indexing and updating (all docs in case of nested docs and individual docs in case or parent-chil…

---

## [Point in time snapshot (PIT id), original query required when paging?](https://discuss.elastic.co/t/point-in-time-snapshot-pit-id-original-query-required-when-paging/290097)

<div class="topic-metadata">

**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\
**Replies:** 5\
**Last updated:** [December 3, 2021, 4:45pm UTC](https://discuss.elastic.co/t/point-in-time-snapshot-pit-id-original-query-required-when-paging/290097 "2021-12-03T16:45:53Z")

</div>

I implemented pagination inside an API using point in time snapshots for efficiency. In the first request a PIT is generated and in subsequent requests the PIT is being supplied with the request. What I would like to do…

---

## [Zeek - Filebeat module and Processors for DNS Lookups](https://discuss.elastic.co/t/zeek-filebeat-module-and-processors-for-dns-lookups/259163)

<div class="topic-metadata">

**Author:** [@thinkagain](https://discuss.elastic.co/u/thinkagain)\
**Replies:** 5\
**Last updated:** [December 23, 2020, 9:30pm UTC](https://discuss.elastic.co/t/zeek-filebeat-module-and-processors-for-dns-lookups/259163 "2020-12-23T21:30:56Z")

</div>

hi everyone, I'm trying to get acquainted with the ELK platform and trying to understand how the different modules interact with each other. Besides the (internal) ip addresses I would like the result of a dns lookup i…

---

## [How can convert unstructured log string to json format using logstatsh](https://discuss.elastic.co/t/how-can-convert-unstructured-log-string-to-json-format-using-logstatsh/259202)

<div class="topic-metadata">

**Author:** [@abhi.coerian](https://discuss.elastic.co/u/abhi.coerian)\
**Replies:** 5\
**Last updated:** [December 23, 2020, 6:45am UTC](https://discuss.elastic.co/t/how-can-convert-unstructured-log-string-to-json-format-using-logstatsh/259202 "2020-12-23T06:45:43Z")

</div>

INFO handlers.DrivelRequestHandler: 2020-12-14 00:00:15.486 - JOB job\_1603918538928\_4026468 QUEUE queue\_test USER test AUTHORIZED\_SCHEMA message student {\\n optional int64 name;\\n optional double score;\\n required bin…

---

## [Failed to execute \[SearchRequest](https://discuss.elastic.co/t/failed-to-execute-searchrequest/243149)

<div class="topic-metadata">

**Author:** [@jie.li](https://discuss.elastic.co/u/jie.li)\
**Replies:** 5\
**Last updated:** [August 3, 2020, 12:19pm UTC](https://discuss.elastic.co/t/failed-to-execute-searchrequest/243149 "2020-08-03T12:19:02Z")

</div>

Hi Guys, i hava issues with qurrey, client is timed out. I am still new to Elasticsearch, please correct me if any wrong. Thanks \[2020-07-30T03:40:04,998\]\[DEBUG\]\[o.e.a.s.TransportSearchAction\] \[node-02\] \[goods04\]\[3\], …

---

## [Kafka input convert to json](https://discuss.elastic.co/t/kafka-input-convert-to-json/215785)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [January 22, 2020, 4:23pm UTC](https://discuss.elastic.co/t/kafka-input-convert-to-json/215785 "2020-01-22T16:23:20Z")

</div>

I have use input as kafka and my message is like 2020-01-20 10:47:48: partition=0 offset=187965 machine=host1 queue=qhost1 comman=1298316293 action=REMOVE I want this to be separated out. how do I use filter input { …

---

## [Elasticsearch fails very shortly after launch](https://discuss.elastic.co/t/elasticsearch-fails-very-shortly-after-launch/191460)

<div class="topic-metadata">

**Author:** [@james-r](https://discuss.elastic.co/u/james-r)\
**Replies:** 5\
**Last updated:** [July 21, 2019, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-very-shortly-after-launch/191460 "2019-07-21T14:05:05Z")

</div>

Running Ubuntu 18.04.2 LTS, fresh install. Some output from terminal: user@guest:~$ java --version openjdk 11.0.3 2019-04-16 OpenJDK Runtime Environment (build 11.0.3+7-Ubuntu-1ubuntu218.04.1) OpenJDK 64-Bit Server VM …

---

## [MetricLogBeats To LogStash connection issue](https://discuss.elastic.co/t/metriclogbeats-to-logstash-connection-issue/143881)

<div class="topic-metadata">

**Author:** [@ConorTier](https://discuss.elastic.co/u/ConorTier)\
**Replies:** 5\
**Last updated:** [August 13, 2018, 11:23am UTC](https://discuss.elastic.co/t/metriclogbeats-to-logstash-connection-issue/143881 "2018-08-13T11:23:35Z")

</div>

Hi, Im having an issue with MetricLogBeats. Within metricbeat.log file I see the following: (IP address removed from logs for personal reasons) 2018-08-10T09:56:47.937-0400|ERROR|logstash/async.go:235|Failed to publish…

---

## [Get the exact match value](https://discuss.elastic.co/t/get-the-exact-match-value/97238)

<div class="topic-metadata">

**Author:** [@Jyoti\_Shukla](https://discuss.elastic.co/u/Jyoti_Shukla)\
**Replies:** 5\
**Last updated:** [August 16, 2017, 1:43pm UTC](https://discuss.elastic.co/t/get-the-exact-match-value/97238 "2017-08-16T13:43:36Z")

</div>

Hi,I wanted to know how to get the exact matched documents as I am getting approximate value matching ,like I have written query: { “query”: { “nested”: { “path”: “Trips”, “query”: { “bool”: { “must”: \[ { “term”…

---

## [Upgrading elasticsearch version on ECK](https://discuss.elastic.co/t/upgrading-elasticsearch-version-on-eck/201222)

<div class="topic-metadata">

**Author:** [@Bozo\_Tegeltija](https://discuss.elastic.co/u/Bozo_Tegeltija)\
**Replies:** 1\
**Last updated:** [September 26, 2019, 12:58pm UTC](https://discuss.elastic.co/t/upgrading-elasticsearch-version-on-eck/201222 "2019-09-26T12:58:17Z")

</div>

How should I approach upgrading the version of Elasticsearch? Can operator handle just changing the configuration from version: 7.2.0 -\> 7.3.0 and kubectl apply?

---

## [Modifying an arrays value by index](https://discuss.elastic.co/t/modifying-an-arrays-value-by-index/221045)

<div class="topic-metadata">

**Author:** [@Viktor\_Zsolnai](https://discuss.elastic.co/u/Viktor_Zsolnai)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 1:39pm UTC](https://discuss.elastic.co/t/modifying-an-arrays-value-by-index/221045 "2020-03-06T13:39:12Z")

</div>

Hello, I'm pretty new to logstash, and I need to replace a value in an array, using a kv filter's value, but when I want to use the index variable nothing happens, if I use a simple integer instead, it works fine, here…

---

## [How to reset no of rejected count in thread-pools](https://discuss.elastic.co/t/how-to-reset-no-of-rejected-count-in-thread-pools/191353)

<div class="topic-metadata">

**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\
**Replies:** 4\
**Last updated:** [July 22, 2019, 9:03am UTC](https://discuss.elastic.co/t/how-to-reset-no-of-rejected-count-in-thread-pools/191353 "2019-07-22T09:03:08Z")

</div>

How to reset no of rejected count in thread-pools. Please help!

---

## [When aggregated by terms the value is incorrect](https://discuss.elastic.co/t/when-aggregated-by-terms-the-value-is-incorrect/150379)

<div class="topic-metadata">

**Author:** [@jasmine.liang](https://discuss.elastic.co/u/jasmine.liang)\
**Replies:** 4\
**Last updated:** [October 10, 2018, 6:29pm UTC](https://discuss.elastic.co/t/when-aggregated-by-terms-the-value-is-incorrect/150379 "2018-10-10T18:29:08Z")

</div>

I am trying to create a visualization and found the aggregated value is different when split by terms. The query is like this. { "size": 0, "query": { "query\_string": { "query": "\*" } },…

---

## [Elastic and HDD Storage](https://discuss.elastic.co/t/elastic-and-hdd-storage/83807)

<div class="topic-metadata">

**Author:** [@Csepi](https://discuss.elastic.co/u/Csepi)\
**Replies:** 4\
**Last updated:** [April 28, 2017, 2:04pm UTC](https://discuss.elastic.co/t/elastic-and-hdd-storage/83807 "2017-04-28T14:04:44Z")

</div>

Hi There, I'm just a beginner, but I didn't find any answer related on this topic. I want Elasticsearch to store only 100 Gb of data. Not more. When I first install a test version, it filled the 30Gb storage within 2…

---

## [Special Character Search in Elasticsearch](https://discuss.elastic.co/t/special-character-search-in-elasticsearch/86654)

<div class="topic-metadata">

**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\
**Replies:** 3\
**Last updated:** [June 1, 2017, 6:14pm UTC](https://discuss.elastic.co/t/special-character-search-in-elasticsearch/86654 "2017-06-01T18:14:20Z")

</div>

Hi All, I have a nested type document with following structure. indexName -- mapping -- header -- nested -- details is neted in that i have documents like \[{ sub doc 1 }, { …

---

## [How can i connect to my elasticsearch cluster from another machine?](https://discuss.elastic.co/t/how-can-i-connect-to-my-elasticsearch-cluster-from-another-machine/74808)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 3\
**Last updated:** [February 12, 2017, 8:03pm UTC](https://discuss.elastic.co/t/how-can-i-connect-to-my-elasticsearch-cluster-from-another-machine/74808 "2017-02-12T20:03:48Z")

</div>

Hi, I want to connect my elasticsearch cluster from another machine i went through some documentation where they had mentioned that i had change thenetwork.bind\_host : 0 .But i didn't find the network.bind\_host in my e…

---

## [Error while using watcher](https://discuss.elastic.co/t/error-while-using-watcher/27164)

<div class="topic-metadata">

**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Replies:** 3\
**Last updated:** [August 11, 2015, 5:19pm UTC](https://discuss.elastic.co/t/error-while-using-watcher/27164 "2015-08-11T17:19:44Z")

</div>

Hi team, i just started using watcher and i see the following error. \[2015-08-10 22:33:46,520\]\[WARN \]\[index.mapper \] \[elk-prod-01-data03-elk-prod-01-data03\] \[admin\] Type \[login.do\] contains a '.', it is r…

---

## [Docker Metricbeat not getting the System Metrics from host](https://discuss.elastic.co/t/docker-metricbeat-not-getting-the-system-metrics-from-host/206567)

<div class="topic-metadata">

**Author:** [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\
**Replies:** 1\
**Last updated:** [November 7, 2019, 11:46am UTC](https://discuss.elastic.co/t/docker-metricbeat-not-getting-the-system-metrics-from-host/206567 "2019-11-07T11:46:01Z")

</div>

Hello there, i am trying to get my host metrics forwarded through my metricbeat in a docker container. I mounted all the neccecary directories, as shown in the docs here: https://www.elastic.co/guide/en/beats/metricbea…

---

## [Mysql vs Elasticsearch data replication?](https://discuss.elastic.co/t/mysql-vs-elasticsearch-data-replication/26046)

<div class="topic-metadata">

**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\
**Replies:** 1\
**Last updated:** [July 23, 2015, 7:04am UTC](https://discuss.elastic.co/t/mysql-vs-elasticsearch-data-replication/26046 "2015-07-23T07:04:37Z")

</div>

Since we have been using mysql, and the replication process of mysql database is very common and easy to perform. I am caught in this same issue with elasticsearch, performing CLUSTER REPLICATION, finding the best and ap…

---

## [Using environment variable to specify file paths in yml config file](https://discuss.elastic.co/t/using-environment-variable-to-specify-file-paths-in-yml-config-file/103328)

<div class="topic-metadata">

**Author:** [@mdanner](https://discuss.elastic.co/u/mdanner)\
**Replies:** 2\
**Last updated:** [October 10, 2017, 11:17am UTC](https://discuss.elastic.co/t/using-environment-variable-to-specify-file-paths-in-yml-config-file/103328 "2017-10-10T11:17:38Z")

</div>

Is it possible to use an environment variable to specify part of the file path in the \*beat.yml configuration? You can see what I'm trying to do here. Is there a way to make it work? output.logstash: hosts: \["foobar.…

---

## [Date Histograms - Multiple date fields and the global date field](https://discuss.elastic.co/t/date-histograms-multiple-date-fields-and-the-global-date-field/59894)

<div class="topic-metadata">

**Author:** [@bhatch](https://discuss.elastic.co/u/bhatch)\
**Replies:** 1\
**Last updated:** [September 6, 2016, 4:29pm UTC](https://discuss.elastic.co/t/date-histograms-multiple-date-fields-and-the-global-date-field/59894 "2016-09-06T16:29:52Z")

</div>

So when you create a new index you have to set a default datefield. This gets used for the global time ranges on queries. So what do you do if you have multiple date fields and you want to switch which field gets used d…

---

## [Logstash and elasticsearch certification issue](https://discuss.elastic.co/t/logstash-and-elasticsearch-certification-issue/318326)

<div class="topic-metadata">

**Author:** [@manasa3](https://discuss.elastic.co/u/manasa3)\
**Replies:** 8\
**Last updated:** [November 10, 2022, 9:37am UTC](https://discuss.elastic.co/t/logstash-and-elasticsearch-certification-issue/318326 "2022-11-10T09:37:44Z")

</div>

below is the configuration of our conf file input { file { path =\> "C:\\Users\\Windows\\Documents\\elk\\mule.csv" start\_position =\> "beginning" } } filter { csv { columns =\> \["Title", "Author", "ID","Pages"\] …

---

## [Logstash plugin fails to run from source](https://discuss.elastic.co/t/logstash-plugin-fails-to-run-from-source/164041)

<div class="topic-metadata">

**Author:** [@Sprrw](https://discuss.elastic.co/u/Sprrw)\
**Replies:** 0\
**Last updated:** [January 13, 2019, 2:35pm UTC](https://discuss.elastic.co/t/logstash-plugin-fails-to-run-from-source/164041 "2019-01-13T14:35:16Z")

</div>

Hi, First, please note that I'm pretty new to Ruby. I would like to play around with the logstash-output-kafka plugin for educational purposes, but I can't get it to run even before I have made any modifications to it. …

---

## [Curator Elasticsearch 404 on delete\_snapshots action in AWS Elasticsearch](https://discuss.elastic.co/t/curator-elasticsearch-404-on-delete-snapshots-action-in-aws-elasticsearch/131019)

<div class="topic-metadata">

**Author:** [@timvisher](https://discuss.elastic.co/u/timvisher)\
**Replies:** 6\
**Last updated:** [May 8, 2018, 5:08pm UTC](https://discuss.elastic.co/t/curator-elasticsearch-404-on-delete-snapshots-action-in-aws-elasticsearch/131019 "2018-05-08T17:08:58Z")

</div>

I have a curator action file with the following contents: --- # Remember, leave a key empty if there is no value. None will be a string, # not a Python "NoneType" actions: 1: action: snapshot description: Tak…

---

## [Assign boost to document at index time](https://discuss.elastic.co/t/assign-boost-to-document-at-index-time/122690)

<div class="topic-metadata">

**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\
**Replies:** 6\
**Last updated:** [March 6, 2018, 9:50pm UTC](https://discuss.elastic.co/t/assign-boost-to-document-at-index-time/122690 "2018-03-06T21:50:28Z")

</div>

I just read much documents regarding to assign a static boost to a specific document at index time. Some of the docs and function are deprecated. So I am not sure what to use for this particular use case: I index two si…

---

## [Why the japanese characters(Kanji ) are separated in kibana visualization even though single word and field](https://discuss.elastic.co/t/why-the-japanese-characters-kanji-are-separated-in-kibana-visualization-even-though-single-word-and-field/52142)

<div class="topic-metadata">

**Author:** [@venkat-accel](https://discuss.elastic.co/u/venkat-accel)\
**Replies:** 6\
**Last updated:** [June 8, 2016, 4:26pm UTC](https://discuss.elastic.co/t/why-the-japanese-characters-kanji-are-separated-in-kibana-visualization-even-though-single-word-and-field/52142 "2016-06-08T16:26:21Z")

</div>

Hi , I have csv data stored in ES through logstash , currently i able to load the index in Kibana and while display in discovery the data is shown correctly ( word by word in single field) but in the visualization when…

---

## [503 error because of request timeout after 30000ms](https://discuss.elastic.co/t/503-error-because-of-request-timeout-after-30000ms/229097)

<div class="topic-metadata">

**Author:** [@hamidZa](https://discuss.elastic.co/u/hamidZa)\
**Replies:** 3\
**Last updated:** [April 28, 2020, 6:08pm UTC](https://discuss.elastic.co/t/503-error-because-of-request-timeout-after-30000ms/229097 "2020-04-28T18:08:22Z")

</div>

Hello Everyone, I am new to ELK stack, I am trying to install elasticsearch and kibana using containers, and can't get kibana to work. docker run -d --pod elk -e ELASTICSEARCH\_HOSTS=http://localhost:9200 --name kibana …

---

## [What is Shard Lock Obtain Failed Exception?](https://discuss.elastic.co/t/what-is-shard-lock-obtain-failed-exception/106330)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 0\
**Last updated:** [November 3, 2017, 3:07pm UTC](https://discuss.elastic.co/t/what-is-shard-lock-obtain-failed-exception/106330 "2017-11-03T15:07:19Z")

</div>

What does this mean? Do I care? If so what do I do about it? These happened on what I believe to be a very lightly loaded system in the middle of the night when AFAIK it wasn't doing anything much. \[2017-11-03T00:36:17…

---

## [org.elasticsearch.ThreadPermission modifyArbitraryThreadGroup](https://discuss.elastic.co/t/org-elasticsearch-threadpermission-modifyarbitrarythreadgroup/79527)

<div class="topic-metadata">

**Author:** [@elzr\_celino](https://discuss.elastic.co/u/elzr_celino)\
**Replies:** 3\
**Last updated:** [March 28, 2017, 2:50pm UTC](https://discuss.elastic.co/t/org-elasticsearch-threadpermission-modifyarbitrarythreadgroup/79527 "2017-03-28T14:50:28Z")

</div>

Hi, I am trying to develop plugin for elasticsearch 5.2.2. The idea of the plugin is to listen to a JMS queue then create a document based on the received message from the queue. It will use the Client object passed …

---

## [Date Format in Data Table](https://discuss.elastic.co/t/date-format-in-data-table/163612)

<div class="topic-metadata">

**Author:** [@aliirz](https://discuss.elastic.co/u/aliirz)\
**Replies:** 1\
**Last updated:** [January 10, 2019, 2:15pm UTC](https://discuss.elastic.co/t/date-format-in-data-table/163612 "2019-01-10T14:15:54Z")

</div>

Hi All I am new to kibana and really loving it so far. I created a very basic data table visualiation from a index. I am trying ti change the date format to yyyy-mm-dd but I dont know how to do it. Here is what my data …

---

## [Increase filebeat worker threads?](https://discuss.elastic.co/t/increase-filebeat-worker-threads/42798)

<div class="topic-metadata">

**Author:** [@Vinu2903](https://discuss.elastic.co/u/Vinu2903)\
**Replies:** 1\
**Last updated:** [February 26, 2016, 7:49am UTC](https://discuss.elastic.co/t/increase-filebeat-worker-threads/42798 "2016-02-26T07:49:57Z")

</div>

Is there a way to increase Filebeat's worker threads and have it read multiple log files at the same time?

---

## [Webhook action: Hits collection not JSON](https://discuss.elastic.co/t/webhook-action-hits-collection-not-json/24568)

<div class="topic-metadata">

**Author:** [@bboward](https://discuss.elastic.co/u/bboward)\
**Replies:** 1\
**Last updated:** [June 29, 2015, 9:34pm UTC](https://discuss.elastic.co/t/webhook-action-hits-collection-not-json/24568 "2015-06-29T21:34:03Z")

</div>

I have a watch that uses the webhook action to post the hits from my search input. The resulting data is not JSON, but is in a different serialized format that is harder to parse. Is it possible to emit the actual JSO…

---

## [How do I read the traceparent in angular when using the apm-run-angular library?](https://discuss.elastic.co/t/how-do-i-read-the-traceparent-in-angular-when-using-the-apm-run-angular-library/285631)

<div class="topic-metadata">

**Author:** [@fakeelasticjr](https://discuss.elastic.co/u/fakeelasticjr)\
**Replies:** 4\
**Last updated:** [October 11, 2021, 6:18pm UTC](https://discuss.elastic.co/t/how-do-i-read-the-traceparent-in-angular-when-using-the-apm-run-angular-library/285631 "2021-10-11T18:18:29Z")

</div>

We're using APM with an Angular application. We're using the apm-run-angular library. Somewhere in this library it adds a "traceparent" header to the XHR requests We'd like to get access to the "traceparent" header t…

---

## [Help us improve the Elastic Stack by providing basic feature usage statistics? We will never share this data outside of Elastic](https://discuss.elastic.co/t/help-us-improve-the-elastic-stack-by-providing-basic-feature-usage-statistics-we-will-never-share-this-data-outside-of-elastic/202149)

<div class="topic-metadata">

**Author:** [@carel.lubbe](https://discuss.elastic.co/u/carel.lubbe)\
**Replies:** 4\
**Last updated:** [October 9, 2019, 1:17pm UTC](https://discuss.elastic.co/t/help-us-improve-the-elastic-stack-by-providing-basic-feature-usage-statistics-we-will-never-share-this-data-outside-of-elastic/202149 "2019-10-09T13:17:57Z")

</div>

I have upgraded my system to the latest versions in the RedHat repos... since then i have the message "Help us improve the Elastic Stack by providing basic feature usage statistics? We will never share this data outside …

---

## [Logstash CLI not working](https://discuss.elastic.co/t/logstash-cli-not-working/73749)

<div class="topic-metadata">

**Author:** [@capsno1](https://discuss.elastic.co/u/capsno1)\
**Replies:** 4\
**Last updated:** [February 6, 2017, 9:14pm UTC](https://discuss.elastic.co/t/logstash-cli-not-working/73749 "2017-02-06T21:14:38Z")

</div>

I managed to install logstash recently but I am unable to use any cli commands. I followed these instructions (https://www.elastic.co/guide/en/logstash/current/installing-logstash.html) using APT. I had to start logs…

---

## [Integer type question](https://discuss.elastic.co/t/integer-type-question/63309)

<div class="topic-metadata">

**Author:** [@Lego](https://discuss.elastic.co/u/Lego)\
**Replies:** 4\
**Last updated:** [October 20, 2016, 9:51am UTC](https://discuss.elastic.co/t/integer-type-question/63309 "2016-10-20T09:51:17Z")

</div>

Hello. When I try to convert string data to integer I can see some things which are not clear for me. For example when value 7 is converted from string to integer it displays as number seven. And it's ok. But whe…

---

## [Dashboard importing fails for metricbeat when security (x-pack) is configured](https://discuss.elastic.co/t/dashboard-importing-fails-for-metricbeat-when-security-x-pack-is-configured/60249)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 4\
**Last updated:** [September 12, 2016, 11:34am UTC](https://discuss.elastic.co/t/dashboard-importing-fails-for-metricbeat-when-security-x-pack-is-configured/60249 "2016-09-12T11:34:39Z")

</div>

Hi ! I would like to ask question regarding to sample dashboard importing for metricbeat. My environment is elasticsearch 5.0.0-alpha5 Xpack Security configured Metricbeat 5.0.0-alpha5 Kibana 5.0.0-alpha5 Problem …

---

## [La propriété "boost" dans le mapping](https://discuss.elastic.co/t/la-propriete-boost-dans-le-mapping/2200)

<div class="topic-metadata">

**Author:** [@ChristopheBoucaut](https://discuss.elastic.co/u/ChristopheBoucaut)\
**Replies:** 4\
**Last updated:** [June 9, 2015, 2:28pm UTC](https://discuss.elastic.co/t/la-propriete-boost-dans-le-mapping/2200 "2015-06-09T14:28:12Z")

</div>

Bonjour, Il y a quelque temps, j'ai du trouver sur une doc qu'il était possible de passer au mapping, un "boost" avec une valeur numérique. Ainsi, j'ai ceci dans mon mapping (pour mon champs comment) : "comment" : { …

---

## [Date histogram on objects with a start and end time](https://discuss.elastic.co/t/date-histogram-on-objects-with-a-start-and-end-time/303290)

<div class="topic-metadata">

**Author:** [@Griffures](https://discuss.elastic.co/u/Griffures)\
**Replies:** 5\
**Last updated:** [May 9, 2022, 8:05am UTC](https://discuss.elastic.co/t/date-histogram-on-objects-with-a-start-and-end-time/303290 "2022-05-09T08:05:44Z")

</div>

Hello everyone, first time poster here. Please make me aware of any mishaps I might have done. I'll use a specific usecase to illustrate my question, but I would love a more general answer as I just got into Kibana. El…

[Previous page](https://discuss.elastic.co/top.md?page=996&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=998&per_page=50&period=all)
