# Top **URL:** https://discuss.elastic.co/top.md?page=1011&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1012 --- ## [Acceptable Search Performance](https://discuss.elastic.co/t/acceptable-search-performance/12619)
**Author:** [@Devashish\_Tyagi](https://discuss.elastic.co/u/Devashish_Tyagi)\ **Replies:** 1\ **Last updated:** [July 2, 2013, 3:31pm UTC](https://discuss.elastic.co/t/acceptable-search-performance/12619 "2013-07-02T15:31:15Z")
I am using elasticsearch for indexing and searching around 6 million HTML documents. In order to do that I created an index with 10 shards. Earlier, I was running just one node on my physical machine (details below).… --- ## [Adaptive Replica Selection and knn load balancing](https://discuss.elastic.co/t/adaptive-replica-selection-and-knn-load-balancing/377991)
**Author:** [@peedeeboy](https://discuss.elastic.co/u/peedeeboy)\ **Replies:** 0\ **Last updated:** [May 9, 2025, 1:55pm UTC](https://discuss.elastic.co/t/adaptive-replica-selection-and-knn-load-balancing/377991 "2025-05-09T13:55:54Z")
hey friends :wave: I posted previously about our efforts on optimising our dedicated knn cluster. The latest thing we've been trying to understand / solve is why when we run load/stress testing, we often see 1 or 2 nod… --- ## [ elastic SIEM vs elastic Security](https://discuss.elastic.co/t/elastic-siem-vs-elastic-security/332846)
**Author:** [@THOR\_EL\_PODEROSO\_TEC](https://discuss.elastic.co/u/THOR_EL_PODEROSO_TEC)\ **Replies:** 1\ **Last updated:** [May 10, 2023, 8:40pm UTC](https://discuss.elastic.co/t/elastic-siem-vs-elastic-security/332846 "2023-05-10T20:40:08Z")
What is the difference between elastic SIEM and elastic Security? Is there a manual to install it in HyperV in onpremise? --- ## [Not able to connect to Elastic search from logstash](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-search-from-logstash/326267)
**Author:** [@vijay78](https://discuss.elastic.co/u/vijay78)\ **Replies:** 4\ **Last updated:** [February 24, 2023, 1:11pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-search-from-logstash/326267 "2023-02-24T13:11:51Z")
iam getting below error after running logstash pod Using bundled JDK: /usr/share/logstash/jdk Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties \[2023-02-23T06:44:35,912\]\[I… --- ## [Lots of empty fields in expanded document view](https://discuss.elastic.co/t/lots-of-empty-fields-in-expanded-document-view/243271)
**Author:** [@opoplawski](https://discuss.elastic.co/u/opoplawski)\ **Replies:** 1\ **Last updated:** [July 30, 2020, 7:49pm UTC](https://discuss.elastic.co/t/lots-of-empty-fields-in-expanded-document-view/243271 "2020-07-30T19:49:20Z")
This behavior seems fairly new with a recent kibana or other update - when looking at the expanded document for an item in the discover list I see lots of empty fields. Apparently these are “date\_time” fields that kib… --- ## [Filebeat won't talk to logstash after upgrade to 6.x](https://discuss.elastic.co/t/filebeat-wont-talk-to-logstash-after-upgrade-to-6-x/133906)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 4\ **Last updated:** [May 31, 2018, 1:36pm UTC](https://discuss.elastic.co/t/filebeat-wont-talk-to-logstash-after-upgrade-to-6-x/133906 "2018-05-31T13:36:50Z")
Upgraded the system to the latest 6.x, but when filebeat tries to talk to logstash I get 2018-05-30T15:17:14.438Z ERROR logstash/async.go:235 Failed to publish events caused by: write tcp 172.16.1.241:38472-\>… --- ## [Migrate Saved Searches from Kibana 3 to Kibana4](https://discuss.elastic.co/t/migrate-saved-searches-from-kibana-3-to-kibana4/48609)
**Author:** [@EricRogers](https://discuss.elastic.co/u/EricRogers)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 6:09am UTC](https://discuss.elastic.co/t/migrate-saved-searches-from-kibana-3-to-kibana4/48609 "2017-07-05T06:09:25Z")
Hey All! I've just completed the upgrade from Kibana 3 to Kibana 4 but I'm looking for a yml or some other file that holds my saved searches from Kibana 3 but I do not see anything. Are these gone and have to start o… --- ## [Unassigned shards, v2](https://discuss.elastic.co/t/unassigned-shards-v2/14952)
**Author:** [@Honza](https://discuss.elastic.co/u/Honza)\ **Replies:** 4\ **Last updated:** [May 20, 2014, 11:04am UTC](https://discuss.elastic.co/t/unassigned-shards-v2/14952 "2014-05-20T11:04:39Z")
Hi there, few weeks ago I had a problem with some unassigned shards, where I had same number of unassigned and assigned and I solved that thanks to an advice ( here) with adding a new node. But now it appeared ano… --- ## [Problem with template loading : PutIndexTemplateRequestBuilder JAVA API](https://discuss.elastic.co/t/problem-with-template-loading-putindextemplaterequestbuilder-java-api/16295)
**Author:** [@philippe\_v](https://discuss.elastic.co/u/philippe_v)\ **Replies:** 4\ **Last updated:** [March 17, 2014, 1:29pm UTC](https://discuss.elastic.co/t/problem-with-template-loading-putindextemplaterequestbuilder-java-api/16295 "2014-03-17T13:29:11Z")
Hello guys, I'm experiencing an issue with the PutIndexTemplateRequestBuilder. My elasticsearch is embeded in a webapp and I need to load mappings and conf on the fly. So I use the PutIndexTemplateRequestBuilder… --- ## [Loading Fixed legth CSV File with Logstash](https://discuss.elastic.co/t/loading-fixed-legth-csv-file-with-logstash/99365)
**Author:** [@KIRAN1205](https://discuss.elastic.co/u/KIRAN1205)\ **Replies:** 5\ **Last updated:** [September 8, 2017, 6:03am UTC](https://discuss.elastic.co/t/loading-fixed-legth-csv-file-with-logstash/99365 "2017-09-08T06:03:22Z")
Hi, I’m new to elasticsearch, i install elasticsearch, logstash now i need to import a fixed legth CSV file and process data to elastic search. please can help me in configuration. thanks in advance --- ## [Calculating statistics using sub-aggregate filter](https://discuss.elastic.co/t/calculating-statistics-using-sub-aggregate-filter/86917)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 5\ **Last updated:** [June 2, 2017, 10:21am UTC](https://discuss.elastic.co/t/calculating-statistics-using-sub-aggregate-filter/86917 "2017-06-02T10:21:06Z")
Hi, From the log below, I need to calculate the 'Status' of flights per 'terminal'. Jan 30,14:49:42.080 INFO Terminal1: FlightA is ONTIME Jan 30,14:49:43.080 INFO Terminal1: FlightB is ONTIME Jan 30,14:49:45.080 INF… --- ## [Fast vector highlighter does not work with explicit span\_near queries](https://discuss.elastic.co/t/fast-vector-highlighter-does-not-work-with-explicit-span-near-queries/16525)
**Author:** [@Harry\_Waye\_2](https://discuss.elastic.co/u/Harry_Waye_2)\ **Replies:** 5\ **Last updated:** [March 23, 2014, 4:39pm UTC](https://discuss.elastic.co/t/fast-vector-highlighter-does-not-work-with-explicit-span-near-queries/16525 "2014-03-23T16:39:37Z")
I'm trying to use fvh with span\_near queries but it appears to be totally broken. Other query types work, even it's query\_string equivalent. Is there anything I am doing incorrectly here? Or is there a work around… --- ## [Ingesting PCAP dataset into ELK via Zeek and Zeek scripting](https://discuss.elastic.co/t/ingesting-pcap-dataset-into-elk-via-zeek-and-zeek-scripting/282280)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [August 24, 2021, 3:59pm UTC](https://discuss.elastic.co/t/ingesting-pcap-dataset-into-elk-via-zeek-and-zeek-scripting/282280 "2021-08-24T15:59:10Z")
Hello, I am having trouble with filebeat and logstash configurations I think. What I am trying to do is send a DDoS pcap dataset (saved on my ubuntu machine) to ELK, using Zeek while applying Zeek scripts to it. I hav… --- ## [Maximums for searchAfter (and scroll) size parameter?](https://discuss.elastic.co/t/maximums-for-searchafter-and-scroll-size-parameter/273591)
**Author:** [@elastic\_yogi](https://discuss.elastic.co/u/elastic_yogi)\ **Replies:** 3\ **Last updated:** [May 21, 2021, 5:23pm UTC](https://discuss.elastic.co/t/maximums-for-searchafter-and-scroll-size-parameter/273591 "2021-05-21T17:23:24Z")
Hi, I'm curious about ES 7.12 searchAfter and scroll. Both of these have a size parameter. What's the recommended limit to this parameter? I see none given, so I take it's a function of memory and cluster capacity someho… --- ## [Filebeat Pipeline debug output Publish event](https://discuss.elastic.co/t/filebeat-pipeline-debug-output-publish-event/271522)
**Author:** [@Leon21](https://discuss.elastic.co/u/Leon21)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 1:45pm UTC](https://discuss.elastic.co/t/filebeat-pipeline-debug-output-publish-event/271522 "2021-04-30T13:45:54Z")
Hi, I'm struggling with an issue in ingest pipeline for Okta module that seems not working and I could not view events on either dashboards or in Discover panel via searching. I enabled debug output of filebeat and it … --- ## [Elastic APM RUM: Can't Upload Sourcemaps](https://discuss.elastic.co/t/elastic-apm-rum-cant-upload-sourcemaps/194673)
**Author:** [@Emirii](https://discuss.elastic.co/u/Emirii)\ **Replies:** 3\ **Last updated:** [August 12, 2019, 7:08pm UTC](https://discuss.elastic.co/t/elastic-apm-rum-cant-upload-sourcemaps/194673 "2019-08-12T19:08:46Z")
Kibana version: 6.8.1 Elasticsearch version: 6.8.1 APM Server version: 6.8.1 APM Agent language and version: JS RUM "@elastic/apm-rum": "^4.3.1", Original install method and version: Yarn 1.7.0 Node 8.14.0 Webpac… --- ## [Unable to run Kibana-7.2 on ScientificLinux-6](https://discuss.elastic.co/t/unable-to-run-kibana-7-2-on-scientificlinux-6/190984)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 3\ **Last updated:** [July 22, 2019, 3:27pm UTC](https://discuss.elastic.co/t/unable-to-run-kibana-7-2-on-scientificlinux-6/190984 "2019-07-22T15:27:14Z")
Hi, I have been running kibana on an SL-6 system (derivative of Redhat-6). Kibana till 7.1.1 ran perfectly fine but on installing 7.2.0, I get an error FATAL Error: /lib64/libc.so.6: version 'GLIBC\_2.14' not found (req… --- ## [Retrieve stored index-patterns](https://discuss.elastic.co/t/retrieve-stored-index-patterns/107390)
**Author:** [@havidarou](https://discuss.elastic.co/u/havidarou)\ **Replies:** 3\ **Last updated:** [November 13, 2017, 4:13pm UTC](https://discuss.elastic.co/t/retrieve-stored-index-patterns/107390 "2017-11-13T16:13:56Z")
Hi, I'm developing an app plugin and I need to retrieve the stored index-patterns, the same way that a visualization object stores them. How do I go about this? Regards. --- ## [How do I setup Logstash to segregate logs from multiple servers?](https://discuss.elastic.co/t/how-do-i-setup-logstash-to-segregate-logs-from-multiple-servers/59432)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 3\ **Last updated:** [August 31, 2016, 6:14pm UTC](https://discuss.elastic.co/t/how-do-i-setup-logstash-to-segregate-logs-from-multiple-servers/59432 "2016-08-31T18:14:28Z")
I building a central ELK stack that will be used to aggregate the logs from different customer installations, with each installation having multiple servers. I use rsyslog as the shipper. I wan to be able to "see" the fo… --- ## [How to install and run Watcher product on Windows 7 machine](https://discuss.elastic.co/t/how-to-install-and-run-watcher-product-on-windows-7-machine/40896)
**Author:** [@mrehanb](https://discuss.elastic.co/u/mrehanb)\ **Replies:** 3\ **Last updated:** [February 3, 2016, 10:28pm UTC](https://discuss.elastic.co/t/how-to-install-and-run-watcher-product-on-windows-7-machine/40896 "2016-02-03T22:28:42Z")
I've configured Logstash, Elastic and Kibana on windows machine and its running fine. Now i like to setup alerting on specific field value to email me. I presume Watcher is use for alerting purpose. Please advise how t… --- ## [Generate daily report](https://discuss.elastic.co/t/generate-daily-report/247993)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 6\ **Last updated:** [September 9, 2020, 1:57pm UTC](https://discuss.elastic.co/t/generate-daily-report/247993 "2020-09-09T13:57:34Z")
I have a dashboard in kibana (version 7.9.0). I need the dashboard to be exported to a PDF or an excel spreadsheet daily and emailed to someone. The time for the results should be in the last 24 hours. This doc page sug… --- ## [Elasticsearch run in kubernetes](https://discuss.elastic.co/t/elasticsearch-run-in-kubernetes/160679)
**Author:** [@pytimer](https://discuss.elastic.co/u/pytimer)\ **Replies:** 6\ **Last updated:** [December 13, 2018, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-run-in-kubernetes/160679 "2018-12-13T10:23:37Z")
Hi, all I run Elasticsearch 6.2.2 in Kubernetes and use glusterfs as storage backend. When i start is works well, everything looks OK. But run after a while, health of that some indices turned Red. I don't know what ha… --- ## [Slice size: sum specific fields for documents which are unique in another fields](https://discuss.elastic.co/t/slice-size-sum-specific-fields-for-documents-which-are-unique-in-another-fields/83016)
**Author:** [@vasina](https://discuss.elastic.co/u/vasina)\ **Replies:** 6\ **Last updated:** [April 24, 2017, 3:34pm UTC](https://discuss.elastic.co/t/slice-size-sum-specific-fields-for-documents-which-are-unique-in-another-fields/83016 "2017-04-24T15:34:57Z")
Hi all! Please help me understand something about pie chart. Can I get sum of values in specific field of documents for documents which are unique in another field (as slice size). For example, we have documents with… --- ## [Network outage keeps split brain status (no recovery by ES) (was issue #5144)](https://discuss.elastic.co/t/network-outage-keeps-split-brain-status-no-recovery-by-es-was-issue-5144/15873)
**Author:** [@Robert\_Stupp](https://discuss.elastic.co/u/Robert_Stupp)\ **Replies:** 6\ **Last updated:** [February 19, 2014, 11:12am UTC](https://discuss.elastic.co/t/network-outage-keeps-split-brain-status-no-recovery-by-es-was-issue-5144/15873 "2014-02-19T11:12:11Z")
Hi, Recently we discovered that Elasticsearch is not able to solve a previous split brain situation of an existing cluster. The problem (split brain and further resolution) can be splitted into two main parts: … --- ## [Adding conditional tags or fields](https://discuss.elastic.co/t/adding-conditional-tags-or-fields/253890)
**Author:** [@zoulja](https://discuss.elastic.co/u/zoulja)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 9:25am UTC](https://discuss.elastic.co/t/adding-conditional-tags-or-fields/253890 "2020-11-04T09:25:45Z")
Hello. I need Filebeat 7.9.2 to add tags based on content. What I've tried: - add\_tags: when: contains: request:"/image/" tags: \[image\] - add\_tags: when: cont… --- ## [Sql\_last\_value not working properly](https://discuss.elastic.co/t/sql-last-value-not-working-properly/227244)
**Author:** [@chelseia](https://discuss.elastic.co/u/chelseia)\ **Replies:** 2\ **Last updated:** [April 13, 2020, 9:30am UTC](https://discuss.elastic.co/t/sql-last-value-not-working-properly/227244 "2020-04-13T09:30:10Z")
i am trying to ingest the records with following timestamps 01.03.38.75894600 01.03.38.88577300 01.03.39.08149800 .but before that I have successfully ingested 100 rec which having same timestamp.so no w i have my sq… --- ## [Understanding Multiline](https://discuss.elastic.co/t/understanding-multiline/77920)
**Author:** [@Louuu](https://discuss.elastic.co/u/Louuu)\ **Replies:** 2\ **Last updated:** [March 13, 2017, 4:20pm UTC](https://discuss.elastic.co/t/understanding-multiline/77920 "2017-03-13T16:20:30Z")
Hi, I have started using filebeat recently and have been looking at the multiline configurations as shown in the documentation. https://play.golang.org/p/LQpFDR34t9 According to that, my multiline regex works as e… --- ## [How to use user dictionary on elasticsearch / elasticsearch-analysis-kuromoji](https://discuss.elastic.co/t/how-to-use-user-dictionary-on-elasticsearch-elasticsearch-analysis-kuromoji/11209)
**Author:** [@Mai\_2](https://discuss.elastic.co/u/Mai_2)\ **Replies:** 2\ **Last updated:** [March 20, 2013, 4:19pm UTC](https://discuss.elastic.co/t/how-to-use-user-dictionary-on-elasticsearch-elasticsearch-analysis-kuromoji/11209 "2013-03-20T16:19:32Z")
Hi, I've just started to use Elastic Search with elasticsearch / elasticsearch-analysis-kuromoji, which is Japanese tokenizer. I works well and now I would like to know how use user dictionary. From it's source c… --- ## [Logstash \[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/logstash-error-logstash-agent-failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/256348)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 1\ **Last updated:** [November 23, 2020, 2:39pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-agent-failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/256348 "2020-11-23T14:39:31Z")
Hi all, i am trying file configuration logstash like this input { http\_poller { urls =\> { users =\> { method =\> get user =\> "user" password =\> "pass… --- ## [Collecting logs from docker hosts](https://discuss.elastic.co/t/collecting-logs-from-docker-hosts/123216)
**Author:** [@jbacic](https://discuss.elastic.co/u/jbacic)\ **Replies:** 1\ **Last updated:** [March 12, 2018, 1:12am UTC](https://discuss.elastic.co/t/collecting-logs-from-docker-hosts/123216 "2018-03-12T01:12:45Z")
Hey I need some consultation here whether my current setup is the right way to go. I want to make sure that logs are not lost in case some parts of the system are temporarily unavailable. Thanks in advance for help. C… --- ## [ES-Hadoop PySpark error](https://discuss.elastic.co/t/es-hadoop-pyspark-error/110191)
**Author:** [@adesewa](https://discuss.elastic.co/u/adesewa)\ **Replies:** 1\ **Last updated:** [December 13, 2017, 7:38pm UTC](https://discuss.elastic.co/t/es-hadoop-pyspark-error/110191 "2017-12-13T19:38:54Z")
Hello, I am currently working on a project where I do some fuzzy matching on data in an elasticsearch index. Because I have millions of data in a python dataframe to match against millions of data in the elasticsearch … --- ## [Create Bar chart for array of nested objects](https://discuss.elastic.co/t/create-bar-chart-for-array-of-nested-objects/292403)
**Author:** [@masoud\_safa](https://discuss.elastic.co/u/masoud_safa)\ **Replies:** 2\ **Last updated:** [December 20, 2021, 7:16pm UTC](https://discuss.elastic.co/t/create-bar-chart-for-array-of-nested-objects/292403 "2021-12-20T19:16:51Z")
Hi i have problem in drawing chart for my data with vega my data is like this { "took": 10, "timed\_out": false, "hits": { "hits": \[ { "\_index": "request\_index", "\_id": "eaae227e-cf8f-411d-a8b3-0d66595d… --- ## [Need to map ip address from logs to map with corresponding hostname](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499)
**Author:** [@ArchitG358](https://discuss.elastic.co/u/ArchitG358)\ **Replies:** 4\ **Last updated:** [January 17, 2022, 1:52am UTC](https://discuss.elastic.co/t/need-to-map-ip-address-from-logs-to-map-with-corresponding-hostname/294499 "2022-01-17T01:52:33Z")
I have logs that includes IP address I want to map IP address to its hostname (eg, AWS ec2) or its organisation. Just like whatsmyipaddress does. Need suggestions or plugins that can help do this. I am open to get any … --- ## [Create a table from array of objects](https://discuss.elastic.co/t/create-a-table-from-array-of-objects/259519)
**Author:** [@Oscar\_de\_Dios](https://discuss.elastic.co/u/Oscar_de_Dios)\ **Replies:** 4\ **Last updated:** [December 30, 2020, 11:04am UTC](https://discuss.elastic.co/t/create-a-table-from-array-of-objects/259519 "2020-12-30T11:04:40Z")
Hi. I have some logs like this: log1 { someField: \[ { name: 'A', occurrencies: 4}, {name: 'B', occurencies: 10}\] } log2 { someField: \[ { name: 'A', occurrencies: 2}, {name: 'B', occurencies: 12} , name: 'C', occure… --- ## [X-Pack LDAP and not using X-Pack](https://discuss.elastic.co/t/x-pack-ldap-and-not-using-x-pack/86005)
**Author:** [@sayeeguru](https://discuss.elastic.co/u/sayeeguru)\ **Replies:** 4\ **Last updated:** [May 18, 2017, 2:28pm UTC](https://discuss.elastic.co/t/x-pack-ldap-and-not-using-x-pack/86005 "2017-05-18T14:28:34Z")
hi, since there is an API to do LDAP integration to ElasticSearch, can you please help me to understand why i need to purchase x-pack? thanks Sayee --- ## [Aggregations stop working silently on elasticsearch 1.4.4](https://discuss.elastic.co/t/aggregations-stop-working-silently-on-elasticsearch-1-4-4/28480)
**Author:** [@Anton\_Bogdanovich](https://discuss.elastic.co/u/Anton_Bogdanovich)\ **Replies:** 4\ **Last updated:** [September 3, 2015, 5:21pm UTC](https://discuss.elastic.co/t/aggregations-stop-working-silently-on-elasticsearch-1-4-4/28480 "2015-09-03T17:21:48Z")
The following aggregation starts returning empty buckets while it returns the actual rows. { "aggs": { "contact\_ids": { "terms": { "field": "contact\_id" } }}} It starts returning the buckets properly after clearing the… --- ## [Top K results in RDD (beginner question)](https://discuss.elastic.co/t/top-k-results-in-rdd-beginner-question/911)
**Author:** [@tal](https://discuss.elastic.co/u/tal)\ **Replies:** 4\ **Last updated:** [June 1, 2015, 8:45am UTC](https://discuss.elastic.co/t/top-k-results-in-rdd-beginner-question/911 "2015-06-01T08:45:35Z")
Hey, I just started using ES and spark, and i'm trying to get only the k best results by score, for a really simple query on simple documents (just id and content text) How can i populate the RDD with only the top K resu… --- ## [Problem In Wrapper](https://discuss.elastic.co/t/problem-in-wrapper/6856)
**Author:** [@Kenneth\_Loafman](https://discuss.elastic.co/u/Kenneth_Loafman)\ **Replies:** 4\ **Last updated:** [March 5, 2012, 8:33pm UTC](https://discuss.elastic.co/t/problem-in-wrapper/6856 "2012-03-05T20:33:31Z")
Hi, I am getting the following errors in wrapper.log. They don't seem to be affecting anything, but I'd like to know what it means, and report that the formatting is wrong, there's no filename presented. ...Than… --- ## [How to configure GCS as filebeat input](https://discuss.elastic.co/t/how-to-configure-gcs-as-filebeat-input/291453)
**Author:** [@arvin495](https://discuss.elastic.co/u/arvin495)\ **Replies:** 7\ **Last updated:** [December 13, 2021, 1:13pm UTC](https://discuss.elastic.co/t/how-to-configure-gcs-as-filebeat-input/291453 "2021-12-13T13:13:01Z")
Hello Team, We are storing our audit logs in GCS bucket. we would like to ingest them to Elasticsearch when required - not regularly - using filebeat. I have checked S3 option where it let us use s3 like storages as inp… --- ## ["Data Table" visualization output using Vega](https://discuss.elastic.co/t/data-table-visualization-output-using-vega/230920)
**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\ **Replies:** 1\ **Last updated:** [May 4, 2020, 9:36pm UTC](https://discuss.elastic.co/t/data-table-visualization-output-using-vega/230920 "2020-05-04T21:36:03Z")
Hi, Is it possible to create Vega/Vega-Lite outputs which produces visualization similar to "Data Table" available in Kibana? The reason I'm trying to use Vega instead of "Data Table" directly is because I have to perf… --- ## [Does Painless Script can extract text data from fields?](https://discuss.elastic.co/t/does-painless-script-can-extract-text-data-from-fields/216158)
**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 4:45pm UTC](https://discuss.elastic.co/t/does-painless-script-can-extract-text-data-from-fields/216158 "2020-01-28T16:45:45Z")
Hi! I'm trying to extract data from a field with Painless Script this is the message from the field. 15Jan20 09:31:04.83 PRIFBLOQ MXP1 RACF SETROPTS success for PRIFBLOQ Jobname + id: RFJPDDT2 RACF command: SETRO… --- ## [ActiveMQ River Configuration](https://discuss.elastic.co/t/activemq-river-configuration/11587)
**Author:** [@Ashraf\_Sarhan](https://discuss.elastic.co/u/Ashraf_Sarhan)\ **Replies:** 7\ **Last updated:** [April 16, 2013, 5:24pm UTC](https://discuss.elastic.co/t/activemq-river-configuration/11587 "2013-04-16T17:24:52Z")
I start to configure an ActiveMQ river, i'm already installed the ActiveMQ plugin but i feel confused about how to make it working, the documentation was so brief, Actually, i follow exactly the steps of creating a n… --- ## [How to send all the alerts in one mail using logstash](https://discuss.elastic.co/t/how-to-send-all-the-alerts-in-one-mail-using-logstash/187589)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 2\ **Last updated:** [August 1, 2019, 12:22pm UTC](https://discuss.elastic.co/t/how-to-send-all-the-alerts-in-one-mail-using-logstash/187589 "2019-08-01T12:22:36Z")
HI , I will get around 100 alerts in a day and all those come in different emails . So , is there any way i can get all the alerts only in one mail on a particular time everyday using logstash. Please help me solve it… --- ## [Filter multiple spaces with a single Dissect field?](https://discuss.elastic.co/t/filter-multiple-spaces-with-a-single-dissect-field/165114)
**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\ **Replies:** 2\ **Last updated:** [January 21, 2019, 10:40pm UTC](https://discuss.elastic.co/t/filter-multiple-spaces-with-a-single-dissect-field/165114 "2019-01-21T22:40:35Z")
Hello, I am trying to extract the message part of the event below which starts at "Not able to... " without having to use multiple %{+error\_message} fields but only a single field. Is that possible? 17.01.2019 17:16:23.… --- ## [Using RestHandlers for custom Authentication Plugin](https://discuss.elastic.co/t/using-resthandlers-for-custom-authentication-plugin/90709)
**Author:** [@chanchal](https://discuss.elastic.co/u/chanchal)\ **Replies:** 2\ **Last updated:** [July 4, 2017, 4:18pm UTC](https://discuss.elastic.co/t/using-resthandlers-for-custom-authentication-plugin/90709 "2017-07-04T16:18:28Z")
Hi, I am trying to write simple custom authentication plugin for elasticsearch v5.4.1. In previous versions before 5.4.2, it could be done with Restfilters. But now they are not present. Somewhere i read that use RestH… --- ## [Sending data from kafka docker container to elastic search docker container](https://discuss.elastic.co/t/sending-data-from-kafka-docker-container-to-elastic-search-docker-container/55104)
**Author:** [@shubham\_sharma](https://discuss.elastic.co/u/shubham_sharma)\ **Replies:** 2\ **Last updated:** [July 18, 2016, 10:34am UTC](https://discuss.elastic.co/t/sending-data-from-kafka-docker-container-to-elastic-search-docker-container/55104 "2016-07-18T10:34:17Z")
Hi Team, I am using spotify/kafka docker image & official elasticsearch docker images but I am unable to send any logs from kafka to elasticsearch.Kiindly guide. I am using kafka version 2.11-0.8..2.1 with elasticsearc… --- ## [ElasticSearch stop after few days](https://discuss.elastic.co/t/elasticsearch-stop-after-few-days/37035)
**Author:** [@Zulquarnain](https://discuss.elastic.co/u/Zulquarnain)\ **Replies:** 2\ **Last updated:** [December 15, 2015, 6:47am UTC](https://discuss.elastic.co/t/elasticsearch-stop-after-few-days/37035 "2015-12-15T06:47:11Z")
Hi everyone, I installed ElasticSearch Version: 2.1.0, Build: 72cd1f1/2015-11-18T22:40:03Z, JVM: 1.7.0\_79 logstash 2.1.0 on CentOS Linux release 7.1.1503 (Core) with "Shield" plugin successfully but after few days el… --- ## [Add a column based on a Bucket Script Aggregation or other columns into a Data Table visualization](https://discuss.elastic.co/t/add-a-column-based-on-a-bucket-script-aggregation-or-other-columns-into-a-data-table-visualization/229250)
**Author:** [@mhd.mousa.hamad](https://discuss.elastic.co/u/mhd.mousa.hamad)\ **Replies:** 3\ **Last updated:** [April 23, 2020, 1:44pm UTC](https://discuss.elastic.co/t/add-a-column-based-on-a-bucket-script-aggregation-or-other-columns-into-a-data-table-visualization/229250 "2020-04-23T13:44:56Z")
I am building a Data Table in which I could get two required columns but I need to add one additional column which is the difference between these two. Is that somehow possible? I could get the desired results using a B… --- ## [Kibana 'reset' after 6.2.1 update - missing patterns, visualizations, dashboards](https://discuss.elastic.co/t/kibana-reset-after-6-2-1-update-missing-patterns-visualizations-dashboards/120229)
**Author:** [@ocabj](https://discuss.elastic.co/u/ocabj)\ **Replies:** 3\ **Last updated:** [February 17, 2018, 10:08am UTC](https://discuss.elastic.co/t/kibana-reset-after-6-2-1-update-missing-patterns-visualizations-dashboards/120229 "2018-02-17T10:08:21Z")
Apparently, after I updated to 6.2.1 and restarted services, all my kibana patters, visualizations, and dashboards are gone. Any idea if these can be recovered? --- ## [How to transfer original @timestamp from json log to logstash](https://discuss.elastic.co/t/how-to-transfer-original-timestamp-from-json-log-to-logstash/75243)
**Author:** [@sagittarius](https://discuss.elastic.co/u/sagittarius)\ **Replies:** 3\ **Last updated:** [February 16, 2017, 12:52pm UTC](https://discuss.elastic.co/t/how-to-transfer-original-timestamp-from-json-log-to-logstash/75243 "2017-02-16T12:52:13Z")
I am trying to setup filebeat-\>logstash-\>elasticsearch chain and I am having problems with @timestamp which is not being transferred from the logfile and a timestamp when the message arrives into logstash is used instead… [Previous page](https://discuss.elastic.co/top.md?page=1010&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1012&per_page=50&period=all)