\ATRAVÉS DESTE IN… --- ## [Logstash @timestamp field wrong?](https://discuss.elastic.co/t/logstash-timestamp-field-wrong/48627) when i using syslog plugin to run logstash with my configuration , get the wrong @timestamp , it's show 2000 ??? "@timestamp" =\> "2000-04-28T08:08:24.000Z" Any help here? --- ## [Logstash log output config and location](https://discuss.elastic.co/t/logstash-log-output-config-and-location/48902) Continuing the discussion from \`service logstash start\` doesn't work: I can't find where logstash writes its own logs. I created /var/log/logstash with temporary 0777 permissions, and restarted logstash. Nothing is wri… --- ## [Does Logstash has a output plugin for mysql?](https://discuss.elastic.co/t/does-logstash-has-a-output-plugin-for-mysql/48658) Like the title. --- ## [Creating single index only](https://discuss.elastic.co/t/creating-single-index-only/48949) Hi , I have following conf file. It create only one index (auth1) in my elastisearch not the other one . input { file { type =\> "Apache" path =\> "/home/test/test1.log" start… --- ## [Input Plugin for Semantic Logging events](https://discuss.elastic.co/t/input-plugin-for-semantic-logging-events/48742) Is there any input plugin for capturing Semantic Logging events? I have used a file plugin. But it has many custom log formats. I am looking for something which is already built to serve this functionality. --- ## [Muliline logstash](https://discuss.elastic.co/t/muliline-logstash/41617) general question here as I'm not sure I understand the multiline filter quite yet. sorry if this has been answered many times before. I tried searching a bit but didn't find a clear example. what I'm looking to do is com… --- ## [Logstash 2.3.1 and Kafka offset issue](https://discuss.elastic.co/t/logstash-2-3-1-and-kafka-offset-issue/48331) I have finally built a proper pipeline for logstash to pull data from Kafka, and insert into elasticsearch. However I seem to be having an issue, or possibly self induced configuration problem: I need to pull from 8… --- ## [How can i validate a field is indexed in elasticsearch](https://discuss.elastic.co/t/how-can-i-validate-a-field-is-indexed-in-elasticsearch/48929) I got Mapping issue in kibana4. From my logstash configuration below are the two fields renamed to time\_stamp. Before it was working fine and it type is 'String'. Now I am getting conflict message in field 'time\_stamp… --- ## [.sincedb is not updated properly](https://discuss.elastic.co/t/sincedb-is-not-updated-properly/48923) Hello, I have a problem with update .sincedb database. Sometimes (not always, but the input files always the same), a new record of last processed file appears in .sincedb only after logstash has restarted by me. My en… --- ## [Lumberjack Beats Connection ConnectionClosed in logstash 2.2](https://discuss.elastic.co/t/lumberjack-beats-connection-connectionclosed-in-logstash-2-2/48660) Hi , I am running the LS-shipper on 5000 port. input { beats { port=\>"5000" ssl\_certificate =\> "/opt/logstash-elk/SSL/hostName.lij.fi.cer" ssl\_key =\> "/opt/logstash-elk/SSL/logstash.key" } } When I conect using… --- ## [How to collect chinese windows 2012 evenglog?](https://discuss.elastic.co/t/how-to-collect-chinese-windows-2012-evenglog/36342) I am using LS and ES 2.1 . I want to to use LS eventlog plugin to collect my windows server's eventlog. My Windows server was Windows 2012 R2 chinese. I configure eventlog as below: input { eventlog { type =\> 'w… --- ## [Use dynamic Index name based on nested field](https://discuss.elastic.co/t/use-dynamic-index-name-based-on-nested-field/36362) Hi, I am using the current versions of logstash, elasticsearch and filebeat. In my beats configuration I create a custom field: fields: type: wildfly product: lisa enviroment: test In logstash I wa… --- ## [Timezone problem with date filter plugin](https://discuss.elastic.co/t/timezone-problem-with-date-filter-plugin/48899) Hi. With this configuration, $ cat test.conf input { stdin { codec =\> "json" } } filter { date { locale =\> "en" match =\> \["stat\_time", "YYYY-MM-dd'T'HH:mm:ss.SSSZ"\] … --- ## [How to create an alerting using the ELK stack(email alerting only)](https://discuss.elastic.co/t/how-to-create-an-alerting-using-the-elk-stack-email-alerting-only/48662) Please provide me with steps to add email alerting in ELK . Alerting with Logstash. --- ## [Unable to update existing index even though sincedb is deleted](https://discuss.elastic.co/t/unable-to-update-existing-index-even-though-sincedb-is-deleted/48306) Step : Initial Logstash.conf file: input { file { path =\> "C:\\Users\\Downloads\\logstash-tutorial.log\\logstash-tutorial-dataset" start\_position =\> beginning ignore\_older =\> 0 } } fi… --- ## [Copy ssl certificate from centOS 7 to windows for beats](https://discuss.elastic.co/t/copy-ssl-certificate-from-centos-7-to-windows-for-beats/48756) I have copied ssl certificate from te ELK server, set up on cent OS 7, with this command scp /etc/pki/tls/certs/logstash-forwarder.crt user@client\_server\_private\_address:/tmp but then how should I place it into the Win… --- ## [Elasticsearch filter plugin query failure](https://discuss.elastic.co/t/elasticsearch-filter-plugin-query-failure/48838) Hello, I'm trying to query for an instrument in elasticsearch and calculate the time difference between the events. I'm running into an error trying to query elasticsearch. Here is the config. filter { if \[type\] … --- ## [The circuit breaker has detected a slowdown or stall in the pipeline](https://discuss.elastic.co/t/the-circuit-breaker-has-detected-a-slowdown-or-stall-in-the-pipeline/41988) We migrate to filebeat: 1.1.1 + logstash: 2.1.1 + elasticsearch: 2.1.0, I keep seeing the following errors in the logstash logs. {:timestamp=\>"2016-02-17T03:49:58.845000-0500", :message=\>"CircuitBreaker::Close", :name=\>… --- ## [Send network traffic data to logstash and elasticsearch](https://discuss.elastic.co/t/send-network-traffic-data-to-logstash-and-elasticsearch/48791) I have been browsing for different sites on how to send network traffic data to logstash and elasticsearch; nevertheless, could not find an effective way to do so. Wonder could anyone give me some steps and guidelines … --- ## [Match beats "source"](https://discuss.elastic.co/t/match-beats-source/48821) match =\> { "source" =\> "C\\:\\Progra~1\\worker\\engine\\work\\%{INT:logID}" } I have grok matching "message" but I'm trying to match the source from where beats reads in the file. Adding a match for source under grok doesn't… --- ## [V2.3 and Output pipeline](https://discuss.elastic.co/t/v2-3-and-output-pipeline/48689) Hello, is it possible to modify an output and reload the config without losing all events in main memory ? e.g. In case of having this configuration: Input: tcp Output: elasticsearch, file, tcp Problem: Disk full, … --- ## [Elasticsearch template created by logstash uses wrong name](https://discuss.elastic.co/t/elasticsearch-template-created-by-logstash-uses-wrong-name/48594) My logstash config (version 2.3.1) has an output section like elasticsearch { hosts =\> ... index =\> 'foobar-%{+YYYY.MM.dd}' template\_name =\> 'foobar' } However the template created with this name does… --- ## [Logstash Jdbc question](https://discuss.elastic.co/t/logstash-jdbc-question/48819) Hi, using logstash I could read data from Mysql. -I am just asking if logstash reads the new data automaticly from data base? -is there a way to memorize the state of the data base to prevent logstash from loading ol… [Previous page](https://discuss.elastic.co/c/elastic-stack/logstash/14.md?page=1158) [Next page](https://discuss.elastic.co/c/elastic-stack/logstash/14.md?page=1160)