# Top **URL:** https://discuss.elastic.co/top.md?page=1028&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1029 --- ## [Microsoft 365 User Agent Field](https://discuss.elastic.co/t/microsoft-365-user-agent-field/257874)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 3:48pm UTC](https://discuss.elastic.co/t/microsoft-365-user-agent-field/257874 "2020-12-07T15:48:05Z")
I would like to be able to search Microsoft 365 user agents in the Elastic data for a couple of reasons. One, is that it helps me identify older protocols, for example CBAInPROD indicates POP or IMAP so I can recommend… --- ## [Indexes created automatically by the system](https://discuss.elastic.co/t/indexes-created-automatically-by-the-system/317125)
**Author:** [@dpelaezb](https://discuss.elastic.co/u/dpelaezb)\ **Replies:** 4\ **Last updated:** [October 24, 2022, 7:47am UTC](https://discuss.elastic.co/t/indexes-created-automatically-by-the-system/317125 "2022-10-24T07:47:40Z")
Hello everyone, We have an infrastructure that consists of several Filebeats that send the traces to a Logstash located on another machine where there is also a Metricbeat to plot Logstash. We have detected that a seri… --- ## [Logstash 6.1.1 docker error](https://discuss.elastic.co/t/logstash-6-1-1-docker-error/113849)
**Author:** [@fij29dkvn28](https://discuss.elastic.co/u/fij29dkvn28)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 9:11pm UTC](https://discuss.elastic.co/t/logstash-6-1-1-docker-error/113849 "2018-01-03T21:11:11Z")
Just trying to create a small ELK instance with the new 6.1.1 docker containers. I'm trying to keep it as vanilla as possible (not creating a new docker build file for example) and secure (a password that can be set in o… --- ## [Send logs on a specify output depending on the paths of the prospectors](https://discuss.elastic.co/t/send-logs-on-a-specify-output-depending-on-the-paths-of-the-prospectors/69911)
**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 2:44pm UTC](https://discuss.elastic.co/t/send-logs-on-a-specify-output-depending-on-the-paths-of-the-prospectors/69911 "2016-12-29T14:44:20Z")
Hi Everyone, I'm playing around with filebeat and I wanted to sends logs to certain outputs in an intelligent way. That is I have a file in the /path/to/file2 which I want its logs to go to elasticsearch and another fi… --- ## [Invalid snapshot name, snapshot with the same name already exists](https://discuss.elastic.co/t/invalid-snapshot-name-snapshot-with-the-same-name-already-exists/292497)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 3\ **Last updated:** [December 20, 2021, 11:29pm UTC](https://discuss.elastic.co/t/invalid-snapshot-name-snapshot-with-the-same-name-already-exists/292497 "2021-12-20T23:29:26Z")
Hello I have an index in my cluster with datas. The datas are shipped from logstatsh with this configuration index =\> "%{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-%{+YYYY.MM}" So the index is named with the year and … --- ## [Top X most used words in field](https://discuss.elastic.co/t/top-x-most-used-words-in-field/162174)
**Author:** [@toldiwaw](https://discuss.elastic.co/u/toldiwaw)\ **Replies:** 3\ **Last updated:** [January 3, 2019, 8:04pm UTC](https://discuss.elastic.co/t/top-x-most-used-words-in-field/162174 "2019-01-03T20:04:53Z")
Hi, I wonder if there is a possibility to split field for unique words and count them for top hits? My example is "message-subject" field. Data table is fine form me (Visualize) What I'm looking for (Result): outgoi… --- ## [Kibana visualization and foreach?](https://discuss.elastic.co/t/kibana-visualization-and-foreach/110708)
**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\ **Replies:** 3\ **Last updated:** [December 12, 2017, 9:03pm UTC](https://discuss.elastic.co/t/kibana-visualization-and-foreach/110708 "2017-12-12T21:03:53Z")
I found the foreach processor for Elasticsearch, but I am wondering if that same ability exists in the Kibana UI? My use case is that I save a search for the creation of a meeting with a unique meetingId. Now, for each … --- ## [Logstash filter for renaming based on a substring](https://discuss.elastic.co/t/logstash-filter-for-renaming-based-on-a-substring/165089)
**Author:** [@tomasz](https://discuss.elastic.co/u/tomasz)\ **Replies:** 1\ **Last updated:** [January 21, 2019, 5:23pm UTC](https://discuss.elastic.co/t/logstash-filter-for-renaming-based-on-a-substring/165089 "2019-01-21T17:23:37Z")
I can't figure out how to rename fileds based on the pattern. At the moment, in Logstash (6.5) I have a banch of filters: mutate { rename =\> { "sensor\_source\_a" =\> "sensor.labels.a" } } mutate { rename =\> { "sensor\_sou… --- ## [What can cause heap size to fluctuate wildly (hacksaw graphs) on a new 7.8.0 cluster?](https://discuss.elastic.co/t/what-can-cause-heap-size-to-fluctuate-wildly-hacksaw-graphs-on-a-new-7-8-0-cluster/244120)
**Author:** [@Jacket](https://discuss.elastic.co/u/Jacket)\ **Replies:** 5\ **Last updated:** [August 11, 2020, 6:04am UTC](https://discuss.elastic.co/t/what-can-cause-heap-size-to-fluctuate-wildly-hacksaw-graphs-on-a-new-7-8-0-cluster/244120 "2020-08-11T06:04:52Z")
Hi there, I've recently migrated a medium sized cluster (15TB, 25B documents) from 6.8 to 7.8.0 and noticed the heap constantly fluctuates between \<1GB and the maximum set size (22GB). However the cluster is working per… --- ## [How to specify dashboard only access with change password permissions](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186)
**Author:** [@liz](https://discuss.elastic.co/u/liz)\ **Replies:** 5\ **Last updated:** [February 16, 2018, 5:53am UTC](https://discuss.elastic.co/t/how-to-specify-dashboard-only-access-with-change-password-permissions/118186 "2018-02-16T05:53:54Z")
I'm currently trying to define roles for the different user types on the system using the Kibana user management interface. I'm struggling to determine the right combination of privileges to achieve the access I require… --- ## [Requests being made to \`/api/reporting/jobs/list\_completed\_since\`](https://discuss.elastic.co/t/requests-being-made-to-api-reporting-jobs-list-completed-since/88396)
**Author:** [@eyalzek](https://discuss.elastic.co/u/eyalzek)\ **Replies:** 5\ **Last updated:** [June 6, 2017, 3:41pm UTC](https://discuss.elastic.co/t/requests-being-made-to-api-reporting-jobs-list-completed-since/88396 "2017-06-06T15:41:16Z")
I'm running kibana 5.3.2 in a docker image and seeing a lot of message to the endpoint: /api/reporting/jobs/list\_completed\_since?since=.... in the kibana logs. I am not using any monitoring features so I'm not sure whe… --- ## [Dotted lines in visualization when doint split series with Kibana 7.12.0](https://discuss.elastic.co/t/dotted-lines-in-visualization-when-doint-split-series-with-kibana-7-12-0/269379)
**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 8:28pm UTC](https://discuss.elastic.co/t/dotted-lines-in-visualization-when-doint-split-series-with-kibana-7-12-0/269379 "2021-04-06T20:28:18Z")
Since the update to Kibana 7.12.0 we see these annoying dotted lines going to zero in case there is a data sample or two missing (no dense data) that is split like this: But if we filter for e.g. on device, things lo… --- ## [What exactly means 'Logout request is not signed' in SAML SSO?](https://discuss.elastic.co/t/what-exactly-means-logout-request-is-not-signed-in-saml-sso/155588)
**Author:** [@bruno.henriques](https://discuss.elastic.co/u/bruno.henriques)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 11:08pm UTC](https://discuss.elastic.co/t/what-exactly-means-logout-request-is-not-signed-in-saml-sso/155588 "2018-11-06T23:08:37Z")
Hello, I have SSO (using simplesamlphp as IdP) a environment with three services: MyServiceA, MyServiceB and Kibana. I have session on all three services and when I attempt to logout (SLO) from either MyServiceA or MySe… --- ## [Unassigned shards -- and two shards rebalancing](https://discuss.elastic.co/t/unassigned-shards-and-two-shards-rebalancing/346555)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [November 14, 2023, 7:00pm UTC](https://discuss.elastic.co/t/unassigned-shards-and-two-shards-rebalancing/346555 "2023-11-14T19:00:24Z")
My cluster has been stuck in Yellow for a couple of days. There are two shards that are being rebalanced (and have been for days ???) and this is appears to be causing the cluster to refuse to allocate replicas of prima… --- ## [Logstash Output dosent publishes logs while using systemctl](https://discuss.elastic.co/t/logstash-output-dosent-publishes-logs-while-using-systemctl/240410)
**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\ **Replies:** 6\ **Last updated:** [July 9, 2020, 11:55am UTC](https://discuss.elastic.co/t/logstash-output-dosent-publishes-logs-while-using-systemctl/240410 "2020-07-09T11:55:19Z")
If I start the logstash service using service or systemctl, it starts there are no errors started successfully but logs dosen't get published there in kibana. If i use " bin/logstash -f /etc/logstash/conf.d/logsta… --- ## [How to forward logstash logs to Rapid7?](https://discuss.elastic.co/t/how-to-forward-logstash-logs-to-rapid7/214141)
**Author:** [@srbhklkrn](https://discuss.elastic.co/u/srbhklkrn)\ **Replies:** 6\ **Last updated:** [January 8, 2020, 4:15pm UTC](https://discuss.elastic.co/t/how-to-forward-logstash-logs-to-rapid7/214141 "2020-01-08T16:15:20Z")
I'm trying to forward logs using Logstash to Rapid7 SIEM tool with particular tags, below is the output plugin but it's not working, what am I doing wrong? output { if \[type\] == "syslog" { elasticsearch { h… --- ## [(mvel) filtering returned facets with 'script'](https://discuss.elastic.co/t/mvel-filtering-returned-facets-with-script/6309)
**Author:** [@Tomasz\_Kloc](https://discuss.elastic.co/u/Tomasz_Kloc)\ **Replies:** 6\ **Last updated:** [November 9, 2013, 11:10am UTC](https://discuss.elastic.co/t/mvel-filtering-returned-facets-with-script/6309 "2013-11-09T11:10:48Z")
hi, I have a filtered query with facet. I want to get facets only for explicit terms and avoid using size: X or all\_terms (and filtering facets on application side). i've succeed to do that with 'script': {… --- ## [More shards = more throughput?](https://discuss.elastic.co/t/more-shards-more-throughput/252223)
**Author:** [@David\_Hopkins](https://discuss.elastic.co/u/David_Hopkins)\ **Replies:** 8\ **Last updated:** [October 15, 2020, 8:15pm UTC](https://discuss.elastic.co/t/more-shards-more-throughput/252223 "2020-10-15T20:15:16Z")
I've been trying to better understand the effect sharing has on performance but the theory doesn't seem to match the reality so clearly one of those things must be wrong :wink: After watching this video on Quantitative … --- ## [Best practice for logging in an microservice-based architecture](https://discuss.elastic.co/t/best-practice-for-logging-in-an-microservice-based-architecture/294023)
**Author:** [@peoh](https://discuss.elastic.co/u/peoh)\ **Replies:** 1\ **Last updated:** [January 12, 2022, 5:16pm UTC](https://discuss.elastic.co/t/best-practice-for-logging-in-an-microservice-based-architecture/294023 "2022-01-12T17:16:46Z")
Hi! My current environment has multiple applications on multiple servers that logs to a local file and then uses Filebeat to send logs to Logstash for processing. This works fine and I like that the logs will show up ev… --- ## [Denormalizing with filter in Logstash](https://discuss.elastic.co/t/denormalizing-with-filter-in-logstash/259846)
**Author:** [@Tim\_Zachow](https://discuss.elastic.co/u/Tim_Zachow)\ **Replies:** 7\ **Last updated:** [January 6, 2021, 4:09pm UTC](https://discuss.elastic.co/t/denormalizing-with-filter-in-logstash/259846 "2021-01-06T16:09:58Z")
Hello dear community, it's nice to be able to post my first topic. So I just started to work with Elasticsearch. Thus I'm very inexperienced and after some time I sadly was not able to find a solution by myself. I nee… --- ## [Watcher Microsoft teams webhook](https://discuss.elastic.co/t/watcher-microsoft-teams-webhook/203811)
**Author:** [@wellerbar](https://discuss.elastic.co/u/wellerbar)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 12:53pm UTC](https://discuss.elastic.co/t/watcher-microsoft-teams-webhook/203811 "2019-10-16T12:53:30Z")
Hi, I would like to send a notification to a Microsoft Teams webhook but I don't understand why this isn't workin, can someone help me please? Here is my watch : { "trigger": { "schedule": { "interval": "2… --- ## [Sharing Dashboard with filter](https://discuss.elastic.co/t/sharing-dashboard-with-filter/150096)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 1\ **Last updated:** [September 27, 2018, 12:33pm UTC](https://discuss.elastic.co/t/sharing-dashboard-with-filter/150096 "2018-09-27T12:33:36Z")
This is a handy tip here about sharing dashboard with a particular name: https://www.elastic.co/guide/en/kibana/current/sharing-dashboards.html Is it possible to also specify a particular filter? like I have a bunch of… --- ## [Filebeat not sending data to logstash getting EOF and tcp io timeout](https://discuss.elastic.co/t/filebeat-not-sending-data-to-logstash-getting-eof-and-tcp-io-timeout/77190)
**Author:** [@sgora1](https://discuss.elastic.co/u/sgora1)\ **Replies:** 1\ **Last updated:** [March 6, 2017, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-logstash-getting-eof-and-tcp-io-timeout/77190 "2017-03-06T13:59:28Z")
Hi Team, I am trying to send logs using filebeat to logstash. It was working fine, but then suddenly stopped working and is no longer working now. Can you kindly help me fix this. 2017/03/02 16:37:37.620616 beat.go:… --- ## [Visualize: regected execution of or.elasticsearch.common.util.concurrent.TimedRunable](https://discuss.elastic.co/t/visualize-regected-execution-of-or-elasticsearch-common-util-concurrent-timedrunable/154490)
**Author:** [@snewman](https://discuss.elastic.co/u/snewman)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 8:46pm UTC](https://discuss.elastic.co/t/visualize-regected-execution-of-or-elasticsearch-common-util-concurrent-timedrunable/154490 "2018-10-29T20:46:56Z")
I'm running a single node deployment of elasticsearch and kibana. Elasticsearch.yml is basically default with the exception of these two lines xpack.security.enabled: false xpack.monitoring.collection.enabled: true Ela… --- ## [Use New Relic Browser with kibana](https://discuss.elastic.co/t/use-new-relic-browser-with-kibana/49648)
**Author:** [@Juan\_Cruz\_Rodriguez](https://discuss.elastic.co/u/Juan_Cruz_Rodriguez)\ **Replies:** 3\ **Last updated:** [May 19, 2016, 1:07pm UTC](https://discuss.elastic.co/t/use-new-relic-browser-with-kibana/49648 "2016-05-19T13:07:15Z")
Hi, I need to trace JS metrics with new relic of my kibana. To do that, i use de Node.js agent to trace server side metrics, and now i need send to browser a custom header, how explain that guide. I try to use the exp… --- ## [Exclude multiple patterns in logstash s3 input](https://discuss.elastic.co/t/exclude-multiple-patterns-in-logstash-s3-input/315917)
**Author:** [@Elias\_Ojeda](https://discuss.elastic.co/u/Elias_Ojeda)\ **Replies:** 1\ **Last updated:** [October 5, 2022, 11:55pm UTC](https://discuss.elastic.co/t/exclude-multiple-patterns-in-logstash-s3-input/315917 "2022-10-05T23:55:59Z")
Logstash S3 input has an option to exclude a pattern. The example shows how to exclude a single pattern. For example: "exclude\_pattern" =\> "/2020/04/" Is it possible to exclude multiple patterns? For example, exclude… --- ## [GeoPoint vs GeoLocation and Search and Sorting](https://discuss.elastic.co/t/geopoint-vs-geolocation-and-search-and-sorting/273018)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 4\ **Last updated:** [May 17, 2021, 7:41am UTC](https://discuss.elastic.co/t/geopoint-vs-geolocation-and-search-and-sorting/273018 "2021-05-17T07:41:28Z")
Good morning, Now I'm beginning to work with geoLocations and I'm using the library nest to interact to ElasticSearch, but my first question is: Whats is more correct? GeoLocation type or geoPoint: Location "locatio… --- ## [Java API org.elasticsearch.index.reindex.ReindexPlugin overrides final method onModule](https://discuss.elastic.co/t/java-api-org-elasticsearch-index-reindex-reindexplugin-overrides-final-method-onmodule/182477)
**Author:** [@matheusribeirogarcia](https://discuss.elastic.co/u/matheusribeirogarcia)\ **Replies:** 4\ **Last updated:** [May 24, 2019, 11:36am UTC](https://discuss.elastic.co/t/java-api-org-elasticsearch-index-reindex-reindexplugin-overrides-final-method-onmodule/182477 "2019-05-24T11:36:52Z")
package br.com.consiste.ensinosuperior; import java.net.InetAddress; import java.net.UnknownHostException; import java.util.Map; import org.elasticsearch.action.search.SearchResponse; import org.elasticsearch.client.tr… --- ## [Logstash Monitoring Error](https://discuss.elastic.co/t/logstash-monitoring-error/126482)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [April 3, 2018, 6:22pm UTC](https://discuss.elastic.co/t/logstash-monitoring-error/126482 "2018-04-03T18:22:58Z")
My ElasticStack decided to go haywire today and I really have no idea what went wrong. After reinstalling the services, Logstash now logs this error message non-stop: \[2018-04-02T19:33:52,358\]\[WARN \]\[logstash.outputs.e… --- ## [How to recover in Java API due to CurrentState\[STARTED\] shard is not a primary](https://discuss.elastic.co/t/how-to-recover-in-java-api-due-to-currentstate-started-shard-is-not-a-primary/56713)
**Author:** [@anishm](https://discuss.elastic.co/u/anishm)\ **Replies:** 4\ **Last updated:** [July 29, 2016, 12:27pm UTC](https://discuss.elastic.co/t/how-to-recover-in-java-api-due-to-currentstate-started-shard-is-not-a-primary/56713 "2016-07-29T12:27:05Z")
I am using Java API to push BulkRequests to Elasticsearch. For testing availability, I killed a data node and got the following DEBUG message in Elasticsearch Data Node log: \[myindex\]\[\[myindex\]\[1\]\] IllegalIndexShardSta… --- ## [Search based on Lucene Query Parser Syntax](https://discuss.elastic.co/t/search-based-on-lucene-query-parser-syntax/54389)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 4\ **Last updated:** [July 5, 2016, 8:44am UTC](https://discuss.elastic.co/t/search-based-on-lucene-query-parser-syntax/54389 "2016-07-05T08:44:24Z")
hi all, I made a post in Kibana section "Kibana search based on Lucene Query Parser Syntax" but I think elasticsearch section is more appropriate. I try to understand better the behavior of a lucene search through ki… --- ## [Recherche avec regexp sur une string composé de chiffre](https://discuss.elastic.co/t/recherche-avec-regexp-sur-une-string-compose-de-chiffre/46653)
**Author:** [@Olivier\_Bremaud](https://discuss.elastic.co/u/Olivier_Bremaud)\ **Replies:** 4\ **Last updated:** [April 7, 2016, 4:04pm UTC](https://discuss.elastic.co/t/recherche-avec-regexp-sur-une-string-compose-de-chiffre/46653 "2016-04-07T16:04:21Z")
Bonjour, J'ai un soucis pour faire une recherche full-text sur des chaînes de caractères composés de chiffre, avec une regex à la fin. Par exemple pour DOS0036643 je voudrais que ça match aussi pour DOS00366438 ou DOS… --- ## [Elastic Search Record Availability Time](https://discuss.elastic.co/t/elastic-search-record-availability-time/34883)
**Author:** [@devikiranr](https://discuss.elastic.co/u/devikiranr)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 1:12pm UTC](https://discuss.elastic.co/t/elastic-search-record-availability-time/34883 "2015-11-18T13:12:00Z")
Hi there .. We have some queries on the record being available for search once it is put on the cluster. We wanted to know how soon an indexed record is available for search .. and the factors which determine this… --- ## [Multiple templates in single file in logstash's elasticsearch output plugin](https://discuss.elastic.co/t/multiple-templates-in-single-file-in-logstashs-elasticsearch-output-plugin/167155)
**Author:** [@siginigin](https://discuss.elastic.co/u/siginigin)\ **Replies:** 2\ **Last updated:** [February 11, 2019, 10:41am UTC](https://discuss.elastic.co/t/multiple-templates-in-single-file-in-logstashs-elasticsearch-output-plugin/167155 "2019-02-11T10:41:58Z")
Hi guys, I'm trying to install multiple templates (=2) in single index, based on name pattern. The point is to minimize number of fileds in indexes. I want to achieve to have default and proxy fields in logstash-proxy i… --- ## [Logstash-output-elasticsearch Connection reset while trying to send bulk request to elasticsearch](https://discuss.elastic.co/t/logstash-output-elasticsearch-connection-reset-while-trying-to-send-bulk-request-to-elasticsearch/173941)
**Author:** [@pgrange](https://discuss.elastic.co/u/pgrange)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 5:13pm UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-connection-reset-while-trying-to-send-bulk-request-to-elasticsearch/173941 "2019-03-26T17:13:41Z")
Hello, I have a logstash node which outputs data to an elasticsearch server. Both are hosted on a gcloud platform. On the logstash server I often (several times a day) see Connection reset errors in the logs: LogStas… --- ## [Is es suitable for sparse data structure?](https://discuss.elastic.co/t/is-es-suitable-for-sparse-data-structure/39496)
**Author:** [@t7s](https://discuss.elastic.co/u/t7s)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 8:19am UTC](https://discuss.elastic.co/t/is-es-suitable-for-sparse-data-structure/39496 "2017-04-28T08:19:04Z")
There is a data structure like nesting json but I can't define field name beforehand as of field name is defined by end user I know if dynamic option is setting to true will make the fields number in mapping increase, … --- ## [Cidr plugin just generate warnings](https://discuss.elastic.co/t/cidr-plugin-just-generate-warnings/141776)
**Author:** [@maxf](https://discuss.elastic.co/u/maxf)\ **Replies:** 5\ **Last updated:** [August 13, 2018, 10:22am UTC](https://discuss.elastic.co/t/cidr-plugin-just-generate-warnings/141776 "2018-08-13T10:22:15Z")
Hello. I've got a trouble with cidr plugin. Im trying to use it this way: if (\[maliciousIP\] == 'false' and \[target\_host\]=~ /^(\[0-9\]{1,3}.){3}(\[0-9\]{1,3})/) { cidr { address =\> \["%{target\_host}"\] network\_path =\> '… --- ## [Unable to output in csv](https://discuss.elastic.co/t/unable-to-output-in-csv/64856)
**Author:** [@steve123](https://discuss.elastic.co/u/steve123)\ **Replies:** 5\ **Last updated:** [November 3, 2016, 12:15pm UTC](https://discuss.elastic.co/t/unable-to-output-in-csv/64856 "2016-11-03T12:15:22Z")
I am trying to output CSV of select fields but I am not getting the correct data even with a simplified config My config: input { generator { add\_field =\> \["foo","bar"\] count =\> 1 } } output { stdout { codec =\> … --- ## [AppSearch Swiftype::Documents::DuplicateKeyError Self-Managed](https://discuss.elastic.co/t/appsearch-swiftype-duplicatekeyerror-self-managed/208215)
**Author:** [@Harry\_Knowles](https://discuss.elastic.co/u/Harry_Knowles)\ **Replies:** 6\ **Last updated:** [December 9, 2019, 1:40pm UTC](https://discuss.elastic.co/t/appsearch-swiftype-duplicatekeyerror-self-managed/208215 "2019-12-09T13:40:41Z")
Hi we're trying to install a self managed version of App Search on our server, however when trying to connect to the API to index documents it's returning me the following error: \["Internal server error. Please email su… --- ## [Kibana fetch data and visualization](https://discuss.elastic.co/t/kibana-fetch-data-and-visualization/137515)
**Author:** [@krisdinesh](https://discuss.elastic.co/u/krisdinesh)\ **Replies:** 6\ **Last updated:** [July 3, 2018, 4:13pm UTC](https://discuss.elastic.co/t/kibana-fetch-data-and-visualization/137515 "2018-07-03T16:13:27Z")
Hi, I want to build the data table/charts in Kibana for the data 'Tests run: 1, Failures: 0, Errors: 0, Skipped: 0' from jenkins console log which is being shipped into elasticsearch. Please help me in this regard. Tha… --- ## [Elasticsearch 2.0 geo distance search not working with location array](https://discuss.elastic.co/t/elasticsearch-2-0-geo-distance-search-not-working-with-location-array/115236)
**Author:** [@soumya.plavaga1](https://discuss.elastic.co/u/soumya.plavaga1)\ **Replies:** 6\ **Last updated:** [January 12, 2018, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-2-0-geo-distance-search-not-working-with-location-array/115236 "2018-01-12T10:39:24Z")
I am facing an issue with geo\_distance query in case of multiple locations within a single document. While filtering, it is always considering the first one in the list and ignoring the rest of the locations within the l… --- ## [RabbitMQ output + Compress spooler: "wrong number of arguments"](https://discuss.elastic.co/t/rabbitmq-output-compress-spooler-wrong-number-of-arguments/34631)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 7\ **Last updated:** [January 16, 2017, 10:52am UTC](https://discuss.elastic.co/t/rabbitmq-output-compress-spooler-wrong-number-of-arguments/34631 "2017-01-16T10:52:58Z")
I'm trying to use the compress spooler codec on a previously-working RMQ output, but encoding is failing with Error encoding event {:exception=\>#\ ... . I've stripped m… --- ## [Elasticsearch output - load balancing selection](https://discuss.elastic.co/t/elasticsearch-output-load-balancing-selection/61847)
**Author:** [@kobyb](https://discuss.elastic.co/u/kobyb)\ **Replies:** 1\ **Last updated:** [October 5, 2016, 6:01am UTC](https://discuss.elastic.co/t/elasticsearch-output-load-balancing-selection/61847 "2016-10-05T06:01:14Z")
Say I have three logstash servers loadbalanced behind and F5. All three servers are identical, and contain an elasticsearch output plugin with a host array of something like: hosts =\> \["host1","host2",host3"\]. Ho… --- ## [Kibana 4.3 text search (wildcards and spaces)](https://discuss.elastic.co/t/kibana-4-3-text-search-wildcards-and-spaces/36842)
**Author:** [@nkoleff](https://discuss.elastic.co/u/nkoleff)\ **Replies:** 1\ **Last updated:** [December 10, 2015, 9:12am UTC](https://discuss.elastic.co/t/kibana-4-3-text-search-wildcards-and-spaces/36842 "2015-12-10T09:12:05Z")
Hello I'm trying to look for an exact match result with wildcard. Let me give you an example: Somewhere in the message field I've got "value = 5 digits number here" and that number is usually starting with 4, 5 and … --- ## [DNS reverse, PTR in logstash](https://discuss.elastic.co/t/dns-reverse-ptr-in-logstash/28523)
**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\ **Replies:** 1\ **Last updated:** [September 2, 2015, 2:07pm UTC](https://discuss.elastic.co/t/dns-reverse-ptr-in-logstash/28523 "2015-09-02T14:07:55Z")
Hello, I would like to obtain the host name as a string instead of the IP.(make a DNS reverse or PTR) Could it be possible? This is my configuration filter\> mutate { … --- ## [Add field in table of Kibana dashboard](https://discuss.elastic.co/t/add-field-in-table-of-kibana-dashboard/353506)
**Author:** [@yashar.ansari76](https://discuss.elastic.co/u/yashar.ansari76)\ **Replies:** 8\ **Last updated:** [February 18, 2024, 5:29pm UTC](https://discuss.elastic.co/t/add-field-in-table-of-kibana-dashboard/353506 "2024-02-18T17:29:14Z")
Hi I have Kibana that visualize my data and I want to add column that exist in my log but I don't know how to add that filed in column. Thanks for your attention. --- ## [Remove everything except Kibana dashboard while read only access to user](https://discuss.elastic.co/t/remove-everything-except-kibana-dashboard-while-read-only-access-to-user/248770)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 8\ **Last updated:** [September 16, 2020, 11:27am UTC](https://discuss.elastic.co/t/remove-everything-except-kibana-dashboard-while-read-only-access-to-user/248770 "2020-09-16T11:27:38Z")
Hi Team, I have created a space in Kibana with user read only dashboard access but when I logged in it's showing home page like below but I don't want user to show this page Can I remove everything except Kibana & dash… --- ## [Inflated record count in when viewed in Kibana line chart](https://discuss.elastic.co/t/inflated-record-count-in-when-viewed-in-kibana-line-chart/41075)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 8\ **Last updated:** [February 9, 2016, 1:13am UTC](https://discuss.elastic.co/t/inflated-record-count-in-when-viewed-in-kibana-line-chart/41075 "2016-02-09T01:13:53Z")
I load 1 day of data, looks good. If I load the data for the next date, new timestamp, I am getting an sum of my values. Example: membership type A 2016-02-04 : count = 13,694 2016-02-04 : count = 6857 Why am I ge… --- ## [Implementing transit codec for logstash](https://discuss.elastic.co/t/implementing-transit-codec-for-logstash/139)
**Author:** [@kebbkh](https://discuss.elastic.co/u/kebbkh)\ **Replies:** 8\ **Last updated:** [May 6, 2015, 6:37pm UTC](https://discuss.elastic.co/t/implementing-transit-codec-for-logstash/139 "2015-05-06T18:37:23Z")
As per the title, I am looking for help writing a transit codec for logstash, any help would be much appreciated! --- ## [Elastic Role Mapping from IdP Role/Group](https://discuss.elastic.co/t/elastic-role-mapping-from-idp-role-group/263897)
**Author:** [@Ong3000](https://discuss.elastic.co/u/Ong3000)\ **Replies:** 3\ **Last updated:** [February 14, 2021, 11:25pm UTC](https://discuss.elastic.co/t/elastic-role-mapping-from-idp-role-group/263897 "2021-02-14T23:25:29Z")
Hi Elastic Forum, How is the role mapping working on elastic that integrating with IdP? In the mapping rules, we have fields like username, dn, realm.name. By creating role mapping and adding realm.name on mapping rule… [Previous page](https://discuss.elastic.co/top.md?page=1027&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1029&per_page=50&period=all)