# Top **URL:** https://discuss.elastic.co/top.md?page=1040&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1041 --- ## [KIbana Upgrade failure](https://discuss.elastic.co/t/kibana-upgrade-failure/196138)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 1\ **Last updated:** [August 21, 2019, 9:09pm UTC](https://discuss.elastic.co/t/kibana-upgrade-failure/196138 "2019-08-21T21:09:41Z")
I'm trying to upgrade a 5.4 cluster to 7.3. I first upgraded to 5.6.16 to get access to the Upgrade UI in Kibana That worked fine, and I was able to run the Reindex helper tasks and see the indices status change in… --- ## [Searching Arabic content: getting only exact matches](https://discuss.elastic.co/t/searching-arabic-content-getting-only-exact-matches/58734)
**Author:** [@yahoo](https://discuss.elastic.co/u/yahoo)\ **Replies:** 1\ **Last updated:** [August 23, 2016, 7:51pm UTC](https://discuss.elastic.co/t/searching-arabic-content-getting-only-exact-matches/58734 "2016-08-23T19:51:32Z")
I am using Logstash 2.3.3, Elasticsearch 2.3.3, Kibana 4.5.3. The content for search is in Arabic (Unicode utf-8). Currently the search only finds exact words, not according to stem. For example, the word in Arabic ‘ ب… --- ## [Doubt about distributed tracing between services and so much spans](https://discuss.elastic.co/t/doubt-about-distributed-tracing-between-services-and-so-much-spans/247870)
**Author:** [@adrian-arapiles](https://discuss.elastic.co/u/adrian-arapiles)\ **Replies:** 3\ **Last updated:** [September 9, 2020, 1:15pm UTC](https://discuss.elastic.co/t/doubt-about-distributed-tracing-between-services-and-so-much-spans/247870 "2020-09-09T13:15:35Z")
I'm using ELK stack to ingest and visualize logs until now. Now I'm trying add APM to monitorize applications too and I found and casuistic that I don't know if config able to handle. I have 3 java services (spring). O… --- ## [Filebeat s3 cannot parse jsonl file who's content-type is set to application/json](https://discuss.elastic.co/t/filebeat-s3-cannot-parse-jsonl-file-whos-content-type-is-set-to-application-json/239374)
**Author:** [@lag13](https://discuss.elastic.co/u/lag13)\ **Replies:** 3\ **Last updated:** [July 24, 2020, 9:24pm UTC](https://discuss.elastic.co/t/filebeat-s3-cannot-parse-jsonl-file-whos-content-type-is-set-to-application-json/239374 "2020-07-24T21:24:42Z")
Hello! I was hoping y'all could help me out. The essence of my problem is that the filebeat S3 input plugin cannot process an s3 object who's content-type is application/json AND the object content is a separate json ob… --- ## [Can't configure Slack Watcher action](https://discuss.elastic.co/t/cant-configure-slack-watcher-action/197271)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 5:51am UTC](https://discuss.elastic.co/t/cant-configure-slack-watcher-action/197271 "2019-08-30T05:51:37Z")
I can't seem to configure the Slack Watcher action. I'm running the Elastic stack through Docker Swarm. I have the Slack account config in elasticsearch.yml: xpack.notification.slack: account: monitoring: m… --- ## [Slow datatable visualisation with multiple columns](https://discuss.elastic.co/t/slow-datatable-visualisation-with-multiple-columns/155468)
**Author:** [@hegusung](https://discuss.elastic.co/u/hegusung)\ **Replies:** 3\ **Last updated:** [November 6, 2018, 11:41pm UTC](https://discuss.elastic.co/t/slow-datatable-visualisation-with-multiple-columns/155468 "2018-11-06T23:41:44Z")
Hi, Kibana version:6.4.2 I created a datatable vizualisation with 5 columns (4 + count column) but it takes 10+ seconds to load. Looking at the query details I saw it only takes around 100ms so the issue should not be … --- ## [Can't get 5.0.0-alpha5 from Maven](https://discuss.elastic.co/t/cant-get-5-0-0-alpha5-from-maven/58726)
**Author:** [@robert-blankenship](https://discuss.elastic.co/u/robert-blankenship)\ **Replies:** 3\ **Last updated:** [August 26, 2016, 8:10pm UTC](https://discuss.elastic.co/t/cant-get-5-0-0-alpha5-from-maven/58726 "2016-08-26T20:10:24Z")
I'm having trouble getting the x-pack plugin 5.0.0-alpha5 from Maven to download using SBT. I added the Maven repository ( "elasticsearch-releases" at "https://maven.elasticsearch.org/releases"), but still no luck. Here … --- ## [Exclude master node from query user operations - how?](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636)
**Author:** [@sale](https://discuss.elastic.co/u/sale)\ **Replies:** 6\ **Last updated:** [January 18, 2022, 6:25pm UTC](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636 "2022-01-18T18:25:25Z")
We have a 11 node Elasticsearch cluster (3 master-eligible node + 8 data nodes). We perform all operations (ingesting, search etc) using REST calls. The master nodes are lightweight as compared to data nodes. For the sa… --- ## [Problem multiline pattern matching](https://discuss.elastic.co/t/problem-multiline-pattern-matching/341107)
**Author:** [@mcondamin](https://discuss.elastic.co/u/mcondamin)\ **Replies:** 8\ **Last updated:** [August 28, 2023, 5:25pm UTC](https://discuss.elastic.co/t/problem-multiline-pattern-matching/341107 "2023-08-28T17:25:52Z")
Hi guys ! I defer to you because I encounter a problem concerning the configuration of the pattern to aggregate several lines of logs on the same document. Here is an excerpt from my log: 2023-08-17 16:13:15.389 |CB R… --- ## [Packetbeat npac version and Defender for Identity](https://discuss.elastic.co/t/packetbeat-npac-version-and-defender-for-identity/323230)
**Author:** [@jaegerschnitzel](https://discuss.elastic.co/u/jaegerschnitzel)\ **Replies:** 8\ **Last updated:** [February 7, 2023, 6:42pm UTC](https://discuss.elastic.co/t/packetbeat-npac-version-and-defender-for-identity/323230 "2023-02-07T18:42:28Z")
Hi all, we are using Packetbeat for capturing DNS traffic from some of our Windows servers. Defender for Identity is also installed on these servers. Defender for Identity uses npcap OEM 1.00. Packetbeat somehow upda… --- ## [Visualisation par plage horaire](https://discuss.elastic.co/t/visualisation-par-plage-horaire/219358)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 8\ **Last updated:** [February 15, 2020, 4:33pm UTC](https://discuss.elastic.co/t/visualisation-par-plage-horaire/219358 "2020-02-15T16:33:05Z")
Bonjour, J'aimerais mettre en place une visualisation qui me permettrai de voir, pour chaque plage horaire que je souhaites définir, le pourcentage d'activité sur cette plage horaire. Exemple avec 3 plages horaires : 8… --- ## [PKI Authentication can't map users](https://discuss.elastic.co/t/pki-authentication-cant-map-users/120385)
**Author:** [@koebane](https://discuss.elastic.co/u/koebane)\ **Replies:** 4\ **Last updated:** [February 19, 2018, 2:50pm UTC](https://discuss.elastic.co/t/pki-authentication-cant-map-users/120385 "2018-02-19T14:50:11Z")
Hello all, I am trying to setup PKI authentication on my ES cluster with X-Pack but I must have done something wrong. I have setup the roles, mappings and certificates but my filebeat (the only thing that I have tested … --- ## [Cannot change kibana user roles also cannot create new user](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706)
**Author:** [@Swaroop\_Chandre](https://discuss.elastic.co/u/Swaroop_Chandre)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 6:23am UTC](https://discuss.elastic.co/t/cannot-change-kibana-user-roles-also-cannot-create-new-user/95706 "2017-08-18T06:23:54Z")
New to ELK. Also I cannot simulate my grok pattern due to security\_exception. roles|690x387 Cannot change kibana user roles also cannot create new user with admin like roles.! --- ## [Using Logstash as a Build Trigger (output exec?)](https://discuss.elastic.co/t/using-logstash-as-a-build-trigger-output-exec/83107)
**Author:** [@oddranger](https://discuss.elastic.co/u/oddranger)\ **Replies:** 4\ **Last updated:** [April 21, 2017, 9:09am UTC](https://discuss.elastic.co/t/using-logstash-as-a-build-trigger-output-exec/83107 "2017-04-21T09:09:12Z")
Hi everyone, I'm trying to use Logstash to trigger a simple script when receiving a certain type of log. After reading the documentation I presumed something like: output{ exec { command =\> "myscript" } } would… --- ## [How to apply an Analyzer to many Indices?](https://discuss.elastic.co/t/how-to-apply-an-analyzer-to-many-indices/82763)
**Author:** [@boCyrill](https://discuss.elastic.co/u/boCyrill)\ **Replies:** 4\ **Last updated:** [April 19, 2017, 9:19am UTC](https://discuss.elastic.co/t/how-to-apply-an-analyzer-to-many-indices/82763 "2017-04-19T09:19:01Z")
Hello Everyone. Need help. Am newby to elasticsearch. I have installed ES 5.1.1 and it works great. I use logstash 5.1.1 to index data from a MySQL database to populate 2 ES indices. My users are mostly francophone and I… --- ## [Unable to Join New node to existing cluster](https://discuss.elastic.co/t/unable-to-join-new-node-to-existing-cluster/314353)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 7:15am UTC](https://discuss.elastic.co/t/unable-to-join-new-node-to-existing-cluster/314353 "2022-09-14T07:15:39Z")
Hi, I'm using Elasticsearch 8.4 version. I was able to install Elasticsearch and Kibana. Then I tried to install on 2nd node. I followed the steps in https://www.elastic.co/guide/en/elasticsearch/reference/current/rp… --- ## [Securing search-ui and embedding in larger a larger non-React app](https://discuss.elastic.co/t/securing-search-ui-and-embedding-in-larger-a-larger-non-react-app/279506)
**Author:** [@matp](https://discuss.elastic.co/u/matp)\ **Replies:** 7\ **Last updated:** [August 1, 2021, 4:35pm UTC](https://discuss.elastic.co/t/securing-search-ui-and-embedding-in-larger-a-larger-non-react-app/279506 "2021-08-01T16:35:08Z")
Re-posting this question as requested by @JasonStoltz So I have everything working with enterprise-search (app-search) and have customized the generated search-ui. I've loaded in a couple million documents and everythi… --- ## [java.lang.IllegalStateException: Failed to close the XContentBuilder (Elasticsearch 6.8.1)](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-close-the-xcontentbuilder-elasticsearch-6-8-1/195431)
**Author:** [@aditshrimal7](https://discuss.elastic.co/u/aditshrimal7)\ **Replies:** 1\ **Last updated:** [August 23, 2019, 9:09am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-failed-to-close-the-xcontentbuilder-elasticsearch-6-8-1/195431 "2019-08-23T09:09:10Z")
Hi, I am consuming data from Apache Kafka and transforming it with Apache Flink, and then inserting it in Elasticsearch. But I get the following errors and my flink job fails. Please can someone tell me why am I facing t… --- ## [Logstash Unix Timestamp convert to milliseconds](https://discuss.elastic.co/t/logstash-unix-timestamp-convert-to-milliseconds/81067)
**Author:** [@tanong\_montree](https://discuss.elastic.co/u/tanong_montree)\ **Replies:** 1\ **Last updated:** [April 4, 2017, 12:44pm UTC](https://discuss.elastic.co/t/logstash-unix-timestamp-convert-to-milliseconds/81067 "2017-04-04T12:44:10Z")
Hello, my name is Tongsak. Ask how to convert the time unity x into a day, month, second. For example, 284465 1486008515154023 1486008515154023 1486008574188849 8 6 776 628 0 - - - - - - 4 2406: 3100: 1020: 1 :: 814 2404… --- ## [Filtering on date = max\_date](https://discuss.elastic.co/t/filtering-on-date-max-date/28979)
**Author:** [@mendeza](https://discuss.elastic.co/u/mendeza)\ **Replies:** 1\ **Last updated:** [September 12, 2015, 11:06pm UTC](https://discuss.elastic.co/t/filtering-on-date-max-date/28979 "2015-09-12T23:06:30Z")
Short version: How do I create a "saved search" that filters based on the most recent date available? Long version: I have a daily PIG job that updates ES based on the today's date. The problem is that sometimes the jo… --- ## [Can not build source code without suitable jdk](https://discuss.elastic.co/t/can-not-build-source-code-without-suitable-jdk/208325)
**Author:** [@JasonJay](https://discuss.elastic.co/u/JasonJay)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 8:16am UTC](https://discuss.elastic.co/t/can-not-build-source-code-without-suitable-jdk/208325 "2019-11-19T08:16:38Z")
ES 7.2 jdk 11 command: ./gradlew assemble os: macOS error message the compiler java.home must be set to a JDK installation directory for Java 12 but is \[/Library/Java/JavaVirtualMachines/jdk-11.0.5.jdk/Contents/Home… --- ## [After upgrading logstash 6.7.0 to 7.0.1 continously restarting](https://discuss.elastic.co/t/after-upgrading-logstash-6-7-0-to-7-0-1-continously-restarting/185161)
**Author:** [@sharath\_1245](https://discuss.elastic.co/u/sharath_1245)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 8:59am UTC](https://discuss.elastic.co/t/after-upgrading-logstash-6-7-0-to-7-0-1-continously-restarting/185161 "2019-06-13T08:59:10Z")
Hi Team, after upgrading logstash 6.7.0 to 7.0.1 unable to start logstash. we are getting below error. Hi Team, after upgrading logstash 6.7.0 to 7.0.1 unable to start logstash. we are getting below error. \[2019-06… --- ## [Correct way to access nested fields in logstash filters](https://discuss.elastic.co/t/correct-way-to-access-nested-fields-in-logstash-filters/133005)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [May 23, 2018, 4:06pm UTC](https://discuss.elastic.co/t/correct-way-to-access-nested-fields-in-logstash-filters/133005 "2018-05-23T16:06:42Z")
Hello, The documentation says that to access nested fields you need to use the format \[parent\]\[child\], but the format \[parent.child\] also works. I started to use \[parent.child\] after some tests on version 5.4 where, fo… --- ## [Extract Max value of build number from result and use it in filter value](https://discuss.elastic.co/t/extract-max-value-of-build-number-from-result-and-use-it-in-filter-value/103864)
**Author:** [@Ajinkya\_Sabale](https://discuss.elastic.co/u/Ajinkya_Sabale)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 6:45pm UTC](https://discuss.elastic.co/t/extract-max-value-of-build-number-from-result-and-use-it-in-filter-value/103864 "2017-10-13T18:45:31Z")
I want to extract Max build\_number from following and apply filter on that max. build number. Query in dev tools- GET logstash-report-2017.10.13/\_search?filter\_path=hits.hits.\_source.build\_number Result is - { "hits… --- ## [Kibana - using include/exclude pattern](https://discuss.elastic.co/t/kibana-using-include-exclude-pattern/72474)
**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\ **Replies:** 2\ **Last updated:** [January 24, 2017, 8:10am UTC](https://discuss.elastic.co/t/kibana-using-include-exclude-pattern/72474 "2017-01-24T08:10:12Z")
Hi, I'm trying to configure more than 1 scrum in Kibana UI, by using include/exclude pattern for x-axis I saw in forums that it consist regex. I've tried to use .+?(one or more expression) , but with no success Any idea … --- ## [Does Logstash support Windows 64?](https://discuss.elastic.co/t/does-logstash-support-windows-64/105661)
**Author:** [@yyqiang](https://discuss.elastic.co/u/yyqiang)\ **Replies:** 5\ **Last updated:** [October 30, 2017, 1:34am UTC](https://discuss.elastic.co/t/does-logstash-support-windows-64/105661 "2017-10-30T01:34:21Z")
When starting logstash-5.6.3 service, error occurred like that, LoadError: Unsupported platform: x86\_64-windows --- ## [How to calculate average off bucket valeus?](https://discuss.elastic.co/t/how-to-calculate-average-off-bucket-valeus/85241)
**Author:** [@Maiko\_Kuipers](https://discuss.elastic.co/u/Maiko_Kuipers)\ **Replies:** 5\ **Last updated:** [May 10, 2017, 2:23pm UTC](https://discuss.elastic.co/t/how-to-calculate-average-off-bucket-valeus/85241 "2017-05-10T14:23:24Z")
HI, I Have the following problem. Here are my aggs. I now want to get the average of my just created agg: "tot\_kwh". Can someone explain me how to do this? "aggs": { "group\_by\_transaction\_id": { "terms": … --- ## [Mapping by date index](https://discuss.elastic.co/t/mapping-by-date-index/54937)
**Author:** [@gigouni](https://discuss.elastic.co/u/gigouni)\ **Replies:** 5\ **Last updated:** [July 15, 2016, 10:12am UTC](https://discuss.elastic.co/t/mapping-by-date-index/54937 "2016-07-15T10:12:11Z")
Hello everyone, I'm currently trying to implement a KPI application using NodeJS as a Back-End. You can check my previous topic about it here : https://discuss.elastic.co/t/develop-a-kpi-interface-with-elasticsearch-an… --- ## [Bool filter cache](https://discuss.elastic.co/t/bool-filter-cache/38009)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 5\ **Last updated:** [December 28, 2015, 10:12am UTC](https://discuss.elastic.co/t/bool-filter-cache/38009 "2015-12-28T10:12:50Z")
Hi, If i have to use mutliple filters inside a BOOL filter, which one should i use: { "filtered": { "filter": { "bool": { "must": \[ { … --- ## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/330887)
**Author:** [@Lelc79](https://discuss.elastic.co/u/Lelc79)\ **Replies:** 3\ **Last updated:** [April 27, 2023, 3:41am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/330887 "2023-04-27T03:41:39Z")
Hi community My elasticsearch was Up until that i changed all the passwords. After that i tried starting elasticsearch services and it didn't work. When i saw the logs in /var/log/elasticsearch/elasticsearch.log … --- ## [Error in Filebeat](https://discuss.elastic.co/t/error-in-filebeat/79146)
**Author:** [@AHK](https://discuss.elastic.co/u/AHK)\ **Replies:** 3\ **Last updated:** [March 27, 2017, 5:25pm UTC](https://discuss.elastic.co/t/error-in-filebeat/79146 "2017-03-27T17:25:07Z")
Hello, I am trying to learn how to install & use ELK Stack on Centos7 I have installed JAVA and every thing according to this link now on my Server every thing is running fine, and when i test systemctl status logsta… --- ## [Disabling Rollover in ILM cause to error on retry lifecycle step](https://discuss.elastic.co/t/disabling-rollover-in-ilm-cause-to-error-on-retry-lifecycle-step/226619)
**Author:** [@Arman\_Ajdani](https://discuss.elastic.co/u/Arman_Ajdani)\ **Replies:** 0\ **Last updated:** [April 6, 2020, 5:47am UTC](https://discuss.elastic.co/t/disabling-rollover-in-ilm-cause-to-error-on-retry-lifecycle-step/226619 "2020-04-06T05:47:09Z")
Currently, I have an ILM Policy set to rollover and warm phase action, but of error : illegal\_argument\_exception: index.lifecycle.rollover\_alias \[oauth\] does not point to index \[oauth-2020.02.24\] I decided to disable r… --- ## [Logstash IMAP issues](https://discuss.elastic.co/t/logstash-imap-issues/20460)
**Author:** [@Alan\_Julian](https://discuss.elastic.co/u/Alan_Julian)\ **Replies:** 0\ **Last updated:** [October 28, 2014, 12:30pm UTC](https://discuss.elastic.co/t/logstash-imap-issues/20460 "2014-10-28T12:30:14Z")
I seem to be unable to get the logstash IMAP plugin working. I have a logstash 1.4/elasticsearch/kibana setup which is working well. all pretty standard stuff. However when i create an input on my logstash host t… --- ## [Kibana does not show timeframe in discover](https://discuss.elastic.co/t/kibana-does-not-show-timeframe-in-discover/259303)
**Author:** [@snolfi](https://discuss.elastic.co/u/snolfi)\ **Replies:** 1\ **Last updated:** [December 21, 2020, 9:25pm UTC](https://discuss.elastic.co/t/kibana-does-not-show-timeframe-in-discover/259303 "2020-12-21T21:25:34Z")
Hello, we are working on kibana 6. It's a SaaS on AWS. We noticed that in discover section there is not the timeframe option to select data, neither the graph the shows how documents are arriving from beats. What co… --- ## [Authentication of \[kibana\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm-reserved/137120)
**Author:** [@vkrishna91](https://discuss.elastic.co/u/vkrishna91)\ **Replies:** 1\ **Last updated:** [June 25, 2018, 1:39am UTC](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm-reserved/137120 "2018-06-25T01:39:21Z")
Hi, I converted a elasticsearch (6.3) standalone to a new cluster, after that kibana user is not authenticated and none of the reserved users are getting authenticated. And also i am not able to change the previously se… --- ## [APM server behind nginx closes connection prematurely](https://discuss.elastic.co/t/apm-server-behind-nginx-closes-connection-prematurely/135624)
**Author:** [@Jorgen\_Ader](https://discuss.elastic.co/u/Jorgen_Ader)\ **Replies:** 1\ **Last updated:** [June 13, 2018, 1:53pm UTC](https://discuss.elastic.co/t/apm-server-behind-nginx-closes-connection-prematurely/135624 "2018-06-13T13:53:05Z")
The problem: Apm agent starts getting 502 after payload seems to go over ~120kb, have not figured exact value yet. Http basic auth is used for elastic/kibana/apm (apm agents are ip whitelisted and use token) Nginx logs … --- ## [How to sort bucket terms in a nested aggregation on score instead of doc count? (Nested field aggregation not allowed with nested field query)](https://discuss.elastic.co/t/how-to-sort-bucket-terms-in-a-nested-aggregation-on-score-instead-of-doc-count-nested-field-aggregation-not-allowed-with-nested-field-query/120547)
**Author:** [@aguyinmontreal](https://discuss.elastic.co/u/aguyinmontreal)\ **Replies:** 1\ **Last updated:** [February 20, 2018, 10:11pm UTC](https://discuss.elastic.co/t/how-to-sort-bucket-terms-in-a-nested-aggregation-on-score-instead-of-doc-count-nested-field-aggregation-not-allowed-with-nested-field-query/120547 "2018-02-20T22:11:43Z")
I'm trying to sort my term buckets on score relevancy instead of doc count. I'm trying do to something like this. However, nested field aggregations are not allowed to be added to nested queries. What are my options? H… --- ## [Logstash not reading changes to config file (file input)](https://discuss.elastic.co/t/logstash-not-reading-changes-to-config-file-file-input/53151)
**Author:** [@fetchmelogs](https://discuss.elastic.co/u/fetchmelogs)\ **Replies:** 2\ **Last updated:** [June 17, 2016, 12:02pm UTC](https://discuss.elastic.co/t/logstash-not-reading-changes-to-config-file-file-input/53151 "2016-06-17T12:02:33Z")
Hi, I have been struggling with this a bit so any help would be much appreciated. I am running logstash 2.2.4. First Problem: I am parsing csv files locallyand needed to make a configuration change to my filte… --- ## [Supporting query on dynamic columns in elastic search](https://discuss.elastic.co/t/supporting-query-on-dynamic-columns-in-elastic-search/38244)
**Author:** [@Harish\_Kommaraju](https://discuss.elastic.co/u/Harish_Kommaraju)\ **Replies:** 2\ **Last updated:** [January 2, 2016, 12:40pm UTC](https://discuss.elastic.co/t/supporting-query-on-dynamic-columns-in-elastic-search/38244 "2016-01-02T12:40:40Z")
I need to support query on dynamic (not predefined) tags in elastic search. Lets say I have a blog document and wanted to support query on different set of columns i.e. tagTypeA=valueX & tagTypeB=ValueY and these tagT… --- ## [Backup and Restore on different mapping](https://discuss.elastic.co/t/backup-and-restore-on-different-mapping/22403)
**Author:** [@tao\_hiko](https://discuss.elastic.co/u/tao_hiko)\ **Replies:** 2\ **Last updated:** [February 26, 2015, 7:41am UTC](https://discuss.elastic.co/t/backup-and-restore-on-different-mapping/22403 "2015-02-26T07:41:47Z")
Hi, I backed index up with snapshot command (index\_A) and I created new index with different mapping (index\_B) and then I need to restore data from index\_A to index\_B. But I restored to index\_B but mapping has … --- ## [How to add fileds to index pattren , so it can be filterd by in discover search](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 10:31am UTC](https://discuss.elastic.co/t/how-to-add-fileds-to-index-pattren-so-it-can-be-filterd-by-in-discover-search/259969 "2021-01-05T10:31:21Z")
i defined simple index pattern " filebeat-\*" and it has only a few fields which i can filter by: now i like to add new fields to this index pattern. which i can see they exist but i can't find anywhere how to ad… --- ## [Kibana is not displaying Marvel App Switcher](https://discuss.elastic.co/t/kibana-is-not-displaying-marvel-app-switcher/56922)
**Author:** [@komputerking](https://discuss.elastic.co/u/komputerking)\ **Replies:** 6\ **Last updated:** [August 1, 2016, 11:48pm UTC](https://discuss.elastic.co/t/kibana-is-not-displaying-marvel-app-switcher/56922 "2016-08-01T23:48:37Z")
I installed ElasticSearch/Kibana/Filebeat as part of a development server. All of that worked without issue, and am receiving data from 3 servers via Filebeat. I am attempting to install Marvel and Sense for developmen… --- ## [Logstash Pipeline grok filter (match) fails - Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"{\\", \\"}\\"](https://discuss.elastic.co/t/logstash-pipeline-grok-filter-match-fails-expected-one-of-t-r-n/239332)
**Author:** [@madduck](https://discuss.elastic.co/u/madduck)\ **Replies:** 4\ **Last updated:** [June 30, 2020, 5:22pm UTC](https://discuss.elastic.co/t/logstash-pipeline-grok-filter-match-fails-expected-one-of-t-r-n/239332 "2020-06-30T17:22:22Z")
Hi Logstash community, I'm trying to parse a log through logstash but there seems to be an issue with my grok pattern, however I have tried a lot of different things now and always get the exact same error message. The… --- ## [setTrackTotalHits (Java transport client) default in docs is wrong](https://discuss.elastic.co/t/settracktotalhits-java-transport-client-default-in-docs-is-wrong/180800)
**Author:** [@e-orz](https://discuss.elastic.co/u/e-orz)\ **Replies:** 4\ **Last updated:** [May 20, 2019, 10:46am UTC](https://discuss.elastic.co/t/settracktotalhits-java-transport-client-default-in-docs-is-wrong/180800 "2019-05-20T10:46:09Z")
Hi, according to the docs: "Indicates if the total hit count for the query should be tracked. Defaults to true". When I use client.prepareSearch(...) and don't set setTrackTotalHits I still get the result with "gte" t… --- ## [Filebeat reads a log file but loses some lines](https://discuss.elastic.co/t/filebeat-reads-a-log-file-but-loses-some-lines/145922)
**Author:** [@Steve1](https://discuss.elastic.co/u/Steve1)\ **Replies:** 4\ **Last updated:** [August 24, 2018, 7:35pm UTC](https://discuss.elastic.co/t/filebeat-reads-a-log-file-but-loses-some-lines/145922 "2018-08-24T19:35:16Z")
So i use filebeat 6.4.0. And i produce 1.000.000 lines with log4j2 to a main.log. Then i execute filebeat to read this main.log and writes the output to file. But filebeat dont have 1.000.000 lines but fewer. Why that? f… --- ## [Best practice to put a node under maintenance](https://discuss.elastic.co/t/best-practice-to-put-a-node-under-maintenance/5548)
**Author:** [@erlo](https://discuss.elastic.co/u/erlo)\ **Replies:** 4\ **Last updated:** [October 14, 2011, 11:48am UTC](https://discuss.elastic.co/t/best-practice-to-put-a-node-under-maintenance/5548 "2011-10-14T11:48:16Z")
Hello, I've a simple question, is there a way to move a specific shard from a node to a specific other node ? For example, if I don't want a to have any replicas, and my data is set as many shards on many nodes… --- ## [Use vector search for semantic search in Enterprise Search / App Search](https://discuss.elastic.co/t/use-vector-search-for-semantic-search-in-enterprise-search-app-search/326778)
**Author:** [@sebastianboelling](https://discuss.elastic.co/u/sebastianboelling)\ **Replies:** 2\ **Last updated:** [March 2, 2023, 7:30am UTC](https://discuss.elastic.co/t/use-vector-search-for-semantic-search-in-enterprise-search-app-search/326778 "2023-03-02T07:30:07Z")
Hi, I am trying to implement a vector search with App Search. I read this useful documentation how to ingest vectors and ML/NLP generated content with ML inference pipeline. Document enrichment with ML | Elastic Enterp… --- ## [Elasticsearch and log load](https://discuss.elastic.co/t/elasticsearch-and-log-load/170139)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 8\ **Last updated:** [March 7, 2019, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-and-log-load/170139 "2019-03-07T14:41:03Z")
Hello, we're currently on Elasticsearch 6.3.2 with the log sources sending their data to Elasticsearch via Logstash. I've recently noticed that Elasticsearch doesn't seem to be indexing anywhere near the number of docum… --- ## [Kibana did not load properly Error](https://discuss.elastic.co/t/kibana-did-not-load-properly-error/146632)
**Author:** [@shruti51](https://discuss.elastic.co/u/shruti51)\ **Replies:** 3\ **Last updated:** [August 30, 2018, 1:09pm UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-error/146632 "2018-08-30T13:09:03Z")
Hi I have installed ELK on my system. Elasticsearch have been started and I am able to see that on http://locahost:9200 But when I start Kibana, I get error message that " Kibana did not load properly. Check the serve… --- ## [Logstash grok on dynamic JSON object](https://discuss.elastic.co/t/logstash-grok-on-dynamic-json-object/136408)
**Author:** [@pohsun.teh](https://discuss.elastic.co/u/pohsun.teh)\ **Replies:** 8\ **Last updated:** [June 19, 2018, 9:53am UTC](https://discuss.elastic.co/t/logstash-grok-on-dynamic-json-object/136408 "2018-06-19T09:53:32Z")
Greetings, I have a dynamic JSON object which I would like to extract fields from it This is sample on how the JSON object looks like layers: { tcap: \[ { otid: "12:23:34:45" }, { otid: "4h:2f… [Previous page](https://discuss.elastic.co/top.md?page=1039&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1041&per_page=50&period=all)