# Top **URL:** https://discuss.elastic.co/top.md?page=1041&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1042 --- ## [How to display a datefield in custom format in Kibana, without changing @timestamp display format?](https://discuss.elastic.co/t/how-to-display-a-datefield-in-custom-format-in-kibana-without-changing-timestamp-display-format/109600)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 3\ **Last updated:** [November 30, 2017, 4:51am UTC](https://discuss.elastic.co/t/how-to-display-a-datefield-in-custom-format-in-kibana-without-changing-timestamp-display-format/109600 "2017-11-30T04:51:12Z")
Hi, I am using ELK GA 6. I have a timestamp field in my log and I have mapped it in Elasticsearch like below; "timestamp": { "type": "date", "format": "MMM dd, YYYY h:mm:ss:SSS aa" } When I check the JSON tab … --- ## [Utilisation des synonymes dans la recherche](https://discuss.elastic.co/t/utilisation-des-synonymes-dans-la-recherche/67033)
**Author:** [@Deve\_java](https://discuss.elastic.co/u/Deve_java)\ **Replies:** 3\ **Last updated:** [November 28, 2016, 8:39pm UTC](https://discuss.elastic.co/t/utilisation-des-synonymes-dans-la-recherche/67033 "2016-11-28T20:39:22Z")
Bonjour au groupe , alors je souhaite utiliser les synonymes dans ma recherche, j'ai vu qu'il faut éditer le fichier des synonymes puis configurer l'index pour qu'il puisse lire le fichier des synonymes construit en s… --- ## [LDAP type is not supported - ERROR](https://discuss.elastic.co/t/ldap-type-is-not-supported-error/44989)
**Author:** [@Yaseen](https://discuss.elastic.co/u/Yaseen)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 1:25pm UTC](https://discuss.elastic.co/t/ldap-type-is-not-supported-error/44989 "2016-03-21T13:25:40Z")
Hi, I am facing an issue with setting up shield integration with my LDAP. I have elasticsearch v1.7.5 My elasticsearch.yaml: ... shield.authc: realms: realm1: type: ldap order: 1 url: "" bind\_dn: "" bind\_password: files: … --- ## [Unable to disable analyzed](https://discuss.elastic.co/t/unable-to-disable-analyzed/36083)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 9:56pm UTC](https://discuss.elastic.co/t/unable-to-disable-analyzed/36083 "2015-12-01T21:56:48Z")
I have field called 'PrimaryAssembly' that I don't want broken into tokens. For example, I don't want 'Allergy & Immunology' broken into 'Allergy' and 'Immunology'. I want those words whole for when I create a pie chart… --- ## [Elasticsearch JVM options](https://discuss.elastic.co/t/elasticsearch-jvm-options/12397)
**Author:** [@kay\_kay](https://discuss.elastic.co/u/kay_kay)\ **Replies:** 8\ **Last updated:** [June 17, 2013, 6:33am UTC](https://discuss.elastic.co/t/elasticsearch-jvm-options/12397 "2013-06-17T06:33:54Z")
Hello! I'm trying to increase elasticsearch indexing performance for logstash. Here are my tech specs: three servers with: each with two E5520 CPU and 24Gb RAM, RAID10 (4HDD) Here are java opts: ES\_HEAP\_SIZE… --- ## [Bulk Indexing - Tier Merge Policy](https://discuss.elastic.co/t/bulk-indexing-tier-merge-policy/6161)
**Author:** [@phobos182](https://discuss.elastic.co/u/phobos182)\ **Replies:** 3\ **Last updated:** [December 16, 2011, 3:42pm UTC](https://discuss.elastic.co/t/bulk-indexing-tier-merge-policy/6161 "2011-12-16T15:42:20Z")
Quick question. Is it best to increase the number of segments for the Tier Merge Policy to decrease the time spent merging during a bulk indexing? My reasoning being after the bulk indexing has been complete, and optimiz… --- ## [Understanding dissect behaviour](https://discuss.elastic.co/t/understanding-dissect-behaviour/196183)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 7\ **Last updated:** [September 2, 2019, 8:27am UTC](https://discuss.elastic.co/t/understanding-dissect-behaviour/196183 "2019-09-02T08:27:10Z")
I have the following filter. filter { dissect { mapping =\> { "message" =\> "%{msg} src=%{host-\>}:%{port} %{abc}" } } } This throws a \_dissectfailure whe… --- ## [5.x: Garbage Collection Recommendations](https://discuss.elastic.co/t/5-x-garbage-collection-recommendations/72281)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [January 20, 2017, 11:01am UTC](https://discuss.elastic.co/t/5-x-garbage-collection-recommendations/72281 "2017-01-20T11:01:12Z")
Hi, This blog post raises the value of the G1 garbage collector when heap sizes get large but recommends against using it because, at that time, there were issues with lucene index corruption... Can I ask, what is the … --- ## [Packet Beats for DNS logs](https://discuss.elastic.co/t/packet-beats-for-dns-logs/321236)
**Author:** [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\ **Replies:** 5\ **Last updated:** [December 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/packet-beats-for-dns-logs/321236 "2022-12-16T00:32:22Z")
I have set up a Graylog server in order to send my DNS logs to and installed Packetbeat on the Windows DNS server. In the instructions I found for configuring the yml file, it said to use either the username and password… --- ## [How can I install esrally to different directory?](https://discuss.elastic.co/t/how-can-i-install-esrally-to-different-directory/148653)
**Author:** [@Micah\_Hunsberger](https://discuss.elastic.co/u/Micah_Hunsberger)\ **Replies:** 5\ **Last updated:** [September 18, 2018, 5:55am UTC](https://discuss.elastic.co/t/how-can-i-install-esrally-to-different-directory/148653 "2018-09-18T05:55:49Z")
right now, esrally is installed to the home directory, which seems to be the default. But the home directory on my machine is on the boot drive, and I would like to have esrally install and run elasticsearch in a differe… --- ## [Filtrar Registros duplicados](https://discuss.elastic.co/t/filtrar-registros-duplicados/140698)
**Author:** [@mangarcia](https://discuss.elastic.co/u/mangarcia)\ **Replies:** 2\ **Last updated:** [August 6, 2018, 3:33pm UTC](https://discuss.elastic.co/t/filtrar-registros-duplicados/140698 "2018-08-06T15:33:26Z")
Buenos días. Tengo un índice con información del cual hago una visualización tipo Data Table, en la que se ve algo similar a esto: |Equipo |Count|SCCMSite|Count| |--- |--- |--- |--- … --- ## [How to turn off legend (not just hide it)](https://discuss.elastic.co/t/how-to-turn-off-legend-not-just-hide-it/94556)
**Author:** [@Roberto2](https://discuss.elastic.co/u/Roberto2)\ **Replies:** 1\ **Last updated:** [July 26, 2017, 12:03pm UTC](https://discuss.elastic.co/t/how-to-turn-off-legend-not-just-hide-it/94556 "2017-07-26T12:03:21Z")
hi there, we use lots of metric count visualizations in kibana. showing a simple metric count doesn't lend itself to having a legend (imho). thus we have lots of legend buttons that simply clutter the screen. is there a … --- ## [Metricbeat CPU](https://discuss.elastic.co/t/metricbeat-cpu/54987)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 3:17pm UTC](https://discuss.elastic.co/t/metricbeat-cpu/54987 "2016-07-08T15:17:26Z")
I've been running the daily snapshot 5.0.0a5 for the past 24 hours. I've started to see the metricbeat.exe use a lot more cpu than I would like. I've been collecting the following: - module: system metricsets: -… --- ## [Kibana : Not able to generate large reports](https://discuss.elastic.co/t/kibana-not-able-to-generate-large-reports/318145)
**Author:** [@shobhit](https://discuss.elastic.co/u/shobhit)\ **Replies:** 4\ **Last updated:** [November 21, 2022, 5:52am UTC](https://discuss.elastic.co/t/kibana-not-able-to-generate-large-reports/318145 "2022-11-21T05:52:16Z")
Hi, I am using ELK Version 7.17.2 . We are trying to generate reports for more then a million rows CSV. Getting below error. Error Error: Max attempts reached (3). Queue timeout reached. ###kibana.yml \*server.host… --- ## [Aggregate filter - Parsing Jenkins log](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994)
**Author:** [@Uplift](https://discuss.elastic.co/u/Uplift)\ **Replies:** 4\ **Last updated:** [August 20, 2021, 12:57pm UTC](https://discuss.elastic.co/t/aggregate-filter-parsing-jenkins-log/281994 "2021-08-20T12:57:38Z")
Dear ELK community, I'm quite new to ELK stack and I'm trying to figure out what can I really achieve with Logstash. I'm trying to extract some information from Jenkins logs, and I found the aggregate filter plugin whi… --- ## [How to sort the data in Logstash?](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628)
**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\ **Replies:** 4\ **Last updated:** [November 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628 "2020-11-17T07:37:39Z")
I have ingested the data from CSV into Elasticsearch, however, when I view them in 'Discover, Kibana' the ID did not ingest in order. The field 'ID' in the CSV doc starts from 1 For example, instead of: 1 2 3 4 It… --- ## [Export to csv](https://discuss.elastic.co/t/export-to-csv/216655)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 4\ **Last updated:** [January 29, 2020, 11:09am UTC](https://discuss.elastic.co/t/export-to-csv/216655 "2020-01-29T11:09:35Z")
Hi! I am using kibana 7.0.1. I made a dashboard which includes a control visualization, an histogram, a pie and a discover/search table. I can export to csv the pie and histogram data from the corresponding iframe, but… --- ## [Java client with security](https://discuss.elastic.co/t/java-client-with-security/213505)
**Author:** [@wl105500396](https://discuss.elastic.co/u/wl105500396)\ **Replies:** 4\ **Last updated:** [January 6, 2020, 7:10am UTC](https://discuss.elastic.co/t/java-client-with-security/213505 "2020-01-06T07:10:37Z")
Hi there, I'm now using ES java client to communicate with a secured ( x-pack ) es cluster, my java code is like below, @Bean(destroyMethod = "close") public RestHighLevelClient getRestHighLevelClient() { List\ **Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\ **Replies:** 4\ **Last updated:** [July 28, 2017, 2:40pm UTC](https://discuss.elastic.co/t/error-installing-beats-input-plugin/94848 "2017-07-28T14:40:06Z") Hi , I am trying to install logstash input beats plugin , I am getting the following error: File /opt/logstash/Gemfile does not exist or is writable, aborting I ran the command: /opt/logstash$ ./bin/logstash-plugi… --- ## [Automate visualizations](https://discuss.elastic.co/t/automate-visualizations/45492)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 4\ **Last updated:** [March 29, 2016, 7:06pm UTC](https://discuss.elastic.co/t/automate-visualizations/45492 "2016-03-29T19:06:57Z")
Hi all, I am working on a real time project and want to analyze my data in realitime.....how do I automate making visualizations in kibana? --- ## [Get \_msearch request payload kibana custom plugin](https://discuss.elastic.co/t/get-msearch-request-payload-kibana-custom-plugin/112242)
**Author:** [@jetpumz](https://discuss.elastic.co/u/jetpumz)\ **Replies:** 6\ **Last updated:** [December 19, 2017, 2:01pm UTC](https://discuss.elastic.co/t/get-msearch-request-payload-kibana-custom-plugin/112242 "2017-12-19T14:01:34Z")
So I'm trying to build a csv export feature for discover on kibana 5.5.1, I'm trying to fetch all the data from elasticsearch on backend using export default function (server) { server.route({ config: { cors… --- ## [Custom Metricbeat - Failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/custom-metricbeat-failed-to-publish-events-temporary-bulk-send-failure/186421)
**Author:** [@fdmsantos](https://discuss.elastic.co/u/fdmsantos)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 10:00am UTC](https://discuss.elastic.co/t/custom-metricbeat-failed-to-publish-events-temporary-bulk-send-failure/186421 "2019-07-02T10:00:45Z")
Hello, I'm developing a beat based on metricbeat (https://github.com/CCSGroupInternational/vspherebeat) The goal is to retrieve all performance metrics from Vcenter. We have four Vcenters , and we have one beat instanc… --- ## [Logstash 6.0.0 multiple pipelines not working](https://discuss.elastic.co/t/logstash-6-0-0-multiple-pipelines-not-working/110894)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 3\ **Last updated:** [December 14, 2017, 8:48pm UTC](https://discuss.elastic.co/t/logstash-6-0-0-multiple-pipelines-not-working/110894 "2017-12-14T20:48:12Z")
I am trying to configure multiple pipelines on logstash 6.0.0 and can not get it to work. here are my configurations. What am I missing? On top of that, all of the beats info being sent is being logged into the syslog… --- ## [Help - I've hosed my cygwin and can't run ES anymore](https://discuss.elastic.co/t/help-ive-hosed-my-cygwin-and-cant-run-es-anymore/40491)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 5:46pm UTC](https://discuss.elastic.co/t/help-ive-hosed-my-cygwin-and-cant-run-es-anymore/40491 "2016-01-29T17:46:12Z")
I've installed more packages and now, when I run bin/elasticsearch I now get this: -bash-4.3$ cd elasticsearch-2.1.0/ -bash-4.3$ bin/elasticsearch bin/elasticsearch: line 75: dirname: command not found bin/elasticsearc… --- ## [Deleting indices with shadow replicas](https://discuss.elastic.co/t/deleting-indices-with-shadow-replicas/28261)
**Author:** [@natefox](https://discuss.elastic.co/u/natefox)\ **Replies:** 3\ **Last updated:** [September 3, 2015, 11:49am UTC](https://discuss.elastic.co/t/deleting-indices-with-shadow-replicas/28261 "2015-09-03T11:49:02Z")
Normally when we delete indicies, the actual data on disk is deleted as well. However, when we delete the indices that are using shadow replicas, the data is not actually being removed from disk. Is this on purpose? We'r… --- ## [Errors with a "does not exist" query](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846)
**Author:** [@variable](https://discuss.elastic.co/u/variable)\ **Replies:** 2\ **Last updated:** [August 31, 2021, 7:07pm UTC](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846 "2021-08-31T19:07:47Z")
I am trying to determine if this is a bug before opening an Issue. I am trying to create a query to return results when a field does not have any data. These work and return results (but not what I'm looking for): eve… --- ## [Problems Installing Elasticsearch via Helm Kubernetes (version 7.6.1)](https://discuss.elastic.co/t/problems-installing-elasticsearch-via-helm-kubernetes-version-7-6-1/222610)
**Author:** [@a\_pel73](https://discuss.elastic.co/u/a_pel73)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 1:21am UTC](https://discuss.elastic.co/t/problems-installing-elasticsearch-via-helm-kubernetes-version-7-6-1/222610 "2020-03-12T01:21:34Z")
Hi, so I'm following the example to install elasticsearch via Helm chart. I meet all the pre-requisite: Docker-for-Desktop Kubernetes: v1.10.11 Helm v2.14.1 It doesn't appear all the pods are running and just stalls … --- ## [データベーススキーマをバージョン管理したい。](https://discuss.elastic.co/t/topic/208258)
**Author:** [@Niimi](https://discuss.elastic.co/u/Niimi)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 12:07am UTC](https://discuss.elastic.co/t/topic/208258 "2019-11-20T00:07:33Z")
これまでMS SQL Serverなどでデーターベーススキーマのバージョン管理をVisual Studioの「データベースプロジェクト」などを使って行っていました。 Elasticsearchでも同様にデータベーススキーマをバージョン管理したいと考えております。できればバージョン管理システム(Gitなど）と連動して自動でマイグレーション出来ればベストと考えております。 データベースマイグレーションツールとしては、liquibaseやF… --- ## [Timelion Algorithms](https://discuss.elastic.co/t/timelion-algorithms/87221)
**Author:** [@Charlotte\_EGM](https://discuss.elastic.co/u/Charlotte_EGM)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 10:07am UTC](https://discuss.elastic.co/t/timelion-algorithms/87221 "2017-05-26T10:07:42Z")
Hello, I was wondering what is the algorithm used in Timelion for the .holt() function. Based on the name I would say Holt-Winters ? Is there any way to customise the algorithm ? (More than the 4-5 parameters ?) C… --- ## [How can I zoom on city?](https://discuss.elastic.co/t/how-can-i-zoom-on-city/57972)
**Author:** [@klein\_stephane](https://discuss.elastic.co/u/klein_stephane)\ **Replies:** 2\ **Last updated:** [August 14, 2016, 7:55pm UTC](https://discuss.elastic.co/t/how-can-i-zoom-on-city/57972 "2016-08-14T19:55:07Z")
Why I can zoom on Paris ? Why the zoom is limited ? --- ## [Logstash 2.3.3 does not run as a service on red hat](https://discuss.elastic.co/t/logstash-2-3-3-does-not-run-as-a-service-on-red-hat/54718)
**Author:** [@arek](https://discuss.elastic.co/u/arek)\ **Replies:** 2\ **Last updated:** [July 5, 2016, 2:49pm UTC](https://discuss.elastic.co/t/logstash-2-3-3-does-not-run-as-a-service-on-red-hat/54718 "2016-07-05T14:49:37Z")
Hi, I downloaded .tar version of logstash 2.3.3 and trying to running it as service, but it fails. My system is Red Hat Enterprise Linux Server release 6.6 (Santiago). When I am testing configuration file everything's o… --- ## [Unable to login to kibana dashboard](https://discuss.elastic.co/t/unable-to-login-to-kibana-dashboard/255786)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 5\ **Last updated:** [November 18, 2020, 12:26pm UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana-dashboard/255786 "2020-11-18T12:26:46Z")
I was deploying elasticsearch and kibana by using the following document: I am not able to login to kibana dashboard even after the port forwarding also. Using the below yaml for kibana. apiVersion: kibana.k8s.elasti… --- ## [Getting a Parse Failure when trying to query](https://discuss.elastic.co/t/getting-a-parse-failure-when-trying-to-query/37353)
**Author:** [@emran](https://discuss.elastic.co/u/emran)\ **Replies:** 5\ **Last updated:** [December 16, 2015, 3:14pm UTC](https://discuss.elastic.co/t/getting-a-parse-failure-when-trying-to-query/37353 "2015-12-16T15:14:03Z")
I have a form which provides suggestion drop down. The form has stopped showing suggestions and when I checked log the error below is logged whenever the form is used. Can you please tell me what is this error stating … --- ## [How to create a filed based on a condition](https://discuss.elastic.co/t/how-to-create-a-filed-based-on-a-condition/33129)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 5\ **Last updated:** [October 28, 2015, 2:49pm UTC](https://discuss.elastic.co/t/how-to-create-a-filed-based-on-a-condition/33129 "2015-10-28T14:49:36Z")
Hi Experts, I want to create a filed (pri\_caption) in logstash based on a condition i.e addfield pri\_caption { if priority between 1 to 3 then "low" else if priority between 4 to 7 then "medium" elase High } Please… --- ## [Aggregate fields to an array fields](https://discuss.elastic.co/t/aggregate-fields-to-an-array-fields/291024)
**Author:** [@RichYaNa](https://discuss.elastic.co/u/RichYaNa)\ **Replies:** 7\ **Last updated:** [December 8, 2021, 3:18am UTC](https://discuss.elastic.co/t/aggregate-fields-to-an-array-fields/291024 "2021-12-08T03:18:45Z")
Hi, I have some output here from my logstash filter: { "taskid" =\> "123", "host" =\> "ubuntu" }, { "taskid" =\> "123", "host" =\> "centos" } is it possible to aggregate that field to be like this: { "taskid"… --- ## [Elasticsearch security error for window setup](https://discuss.elastic.co/t/elasticsearch-security-error-for-window-setup/183778)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 7\ **Last updated:** [June 3, 2019, 6:21am UTC](https://discuss.elastic.co/t/elasticsearch-security-error-for-window-setup/183778 "2019-06-03T06:21:56Z")
Hi Team, I am getting below error while running the elastic search security step for my window ELK version 7.1.1 setup: Error details: 2019-05-31T19:37:11,613\]\[ERROR\]\[o.e.b.Bootstrap \] \[CMS\] Exception j… --- ## [Custom filters are not working with Logstash-5.0.0](https://discuss.elastic.co/t/custom-filters-are-not-working-with-logstash-5-0-0/65057)
**Author:** [@er.ashish1500](https://discuss.elastic.co/u/er.ashish1500)\ **Replies:** 7\ **Last updated:** [December 5, 2016, 8:23am UTC](https://discuss.elastic.co/t/custom-filters-are-not-working-with-logstash-5-0-0/65057 "2016-12-05T08:23:20Z")
I am new for logstash 5.0 and tried to create custom filter at 'PATH/logstash/filters/global\_config.rb' with the name of global config but I am getting error as: bin/logstash -f conf\_d/ Sending Logstash logs to /usr/loc… --- ## [Uneven Shard Distribution](https://discuss.elastic.co/t/uneven-shard-distribution/112824)
**Author:** [@a99lex](https://discuss.elastic.co/u/a99lex)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 2:20pm UTC](https://discuss.elastic.co/t/uneven-shard-distribution/112824 "2017-12-21T14:20:57Z")
Hi,need some help with uneven shard distribution. I have 5 data nodes and one node have 1 TB more than the rest. It has fever shards but more data? shards disk.indices disk.used disk.avail disk.total disk.percent host … --- ## [Apache proxy setup for cloud hosted kibana 5.6.0](https://discuss.elastic.co/t/apache-proxy-setup-for-cloud-hosted-kibana-5-6-0/103354)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 1\ **Last updated:** [October 10, 2017, 3:53pm UTC](https://discuss.elastic.co/t/apache-proxy-setup-for-cloud-hosted-kibana-5-6-0/103354 "2017-10-10T15:53:20Z")
We have elasticsearch / kibana on the elastic cloud, and I want to show it on our website without the user having to enter a username / password. In setting up apache, this article was a great help: Kibana 5 behind rever… --- ## [Anyone please help on create keys/certs for filebeat 5 to logstash?](https://discuss.elastic.co/t/anyone-please-help-on-create-keys-certs-for-filebeat-5-to-logstash/68353)
**Author:** [@robertchen117](https://discuss.elastic.co/u/robertchen117)\ **Replies:** 1\ **Last updated:** [December 8, 2016, 6:36am UTC](https://discuss.elastic.co/t/anyone-please-help-on-create-keys-certs-for-filebeat-5-to-logstash/68353 "2016-12-08T06:36:20Z")
The doc (https://www.elastic.co/guide/en/beats/filebeat/5.0/configuring-ssl-logstash.html )did not say which way to create these keys/certificates, I tried to create with openssl two-way SSL but does not work, error is: … --- ## [Pipeline that add field with string length](https://discuss.elastic.co/t/pipeline-that-add-field-with-string-length/156503)
**Author:** [@Sergio\_PR](https://discuss.elastic.co/u/Sergio_PR)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 10:56am UTC](https://discuss.elastic.co/t/pipeline-that-add-field-with-string-length/156503 "2018-11-30T10:56:48Z")
Hello, I want to create a pipeline who receive a document with a string field ("field\_str") and return a new field in the same document ("field\_length") with the string length. By example : INPUT : { "field\_str" : … --- ## [How to parse different time formats](https://discuss.elastic.co/t/how-to-parse-different-time-formats/85265)
**Author:** [@thorsten1](https://discuss.elastic.co/u/thorsten1)\ **Replies:** 4\ **Last updated:** [May 11, 2017, 1:43pm UTC](https://discuss.elastic.co/t/how-to-parse-different-time-formats/85265 "2017-05-11T13:43:38Z")
Hello, I use a file input with a multiline codec and a pattern that says if the line starts with a date then it is a new line. input { file { ... codec =\> multiline { pattern =\> "^%{MONTH}%{SPACE}%{M… --- ## [How is Elasticsearch-data represented in Lucene](https://discuss.elastic.co/t/how-is-elasticsearch-data-represented-in-lucene/53839)
**Author:** [@chocomuesli](https://discuss.elastic.co/u/chocomuesli)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 9:51am UTC](https://discuss.elastic.co/t/how-is-elasticsearch-data-represented-in-lucene/53839 "2016-06-24T09:51:28Z")
Hi guys, as I learnt, Elasticsearch is based on Apache Lucene as its data is distributed in shards (due to configuration), with each shard being a Lucene index. Lucene stores key-values pairs in an inverted index, whil… --- ## [Can't find clusters in Marvel data](https://discuss.elastic.co/t/cant-find-clusters-in-marvel-data/42177)
**Author:** [@aitchon](https://discuss.elastic.co/u/aitchon)\ **Replies:** 4\ **Last updated:** [February 22, 2016, 3:27pm UTC](https://discuss.elastic.co/t/cant-find-clusters-in-marvel-data/42177 "2016-02-22T15:27:06Z")
I see this error when opening Marvel: Marvel: We can't seem to find any clusters in your Marvel data. Please check your Marvel agents I did a GET /\_cat/indices?v: index shard prirep state docs sto… --- ## [Setting multi node on Elasticsearch 2.0 is not working](https://discuss.elastic.co/t/setting-multi-node-on-elasticsearch-2-0-is-not-working/34656)
**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\ **Replies:** 4\ **Last updated:** [December 31, 2015, 11:18pm UTC](https://discuss.elastic.co/t/setting-multi-node-on-elasticsearch-2-0-is-not-working/34656 "2015-12-31T23:18:44Z")
I started to use Elasticsearch 2.0. When I want to use multiple node on one cluster, it seems it's not not working. I tried two different methods to create multi node. First, I used my localhost and created two insta… --- ## [Recommended procedure for manually upgrading Fleet Managed agents on Windows](https://discuss.elastic.co/t/recommended-procedure-for-manually-upgrading-fleet-managed-agents-on-windows/353821)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [February 21, 2024, 10:41pm UTC](https://discuss.elastic.co/t/recommended-procedure-for-manually-upgrading-fleet-managed-agents-on-windows/353821 "2024-02-21T22:41:05Z")
Hello, We are starting to deploy thousands of Elastic Agents on our company in Windows and Linux servers, these servers are managed by multiple different infra teams, so every change on the servers needs to be done by t… --- ## [Problems in using auditbeat to collect user commands](https://discuss.elastic.co/t/problems-in-using-auditbeat-to-collect-user-commands/241380)
**Author:** [@lovelysoda](https://discuss.elastic.co/u/lovelysoda)\ **Replies:** 0\ **Last updated:** [July 16, 2020, 3:14am UTC](https://discuss.elastic.co/t/problems-in-using-auditbeat-to-collect-user-commands/241380 "2020-07-16T03:14:30Z")
HI， About collecting user commands。 I think of two solutions，If there is any misunderstanding, please correct it。 First，we can use pam\_tty\_audit , configure the system-auth PAM configuration file to enable TTY audt… --- ## [Payload Scoring in ElasticSearch](https://discuss.elastic.co/t/payload-scoring-in-elasticsearch/143431)
**Author:** [@saurzcode](https://discuss.elastic.co/u/saurzcode)\ **Replies:** 0\ **Last updated:** [August 8, 2018, 6:19am UTC](https://discuss.elastic.co/t/payload-scoring-in-elasticsearch/143431 "2018-08-08T06:19:24Z")
Solr has specific feature to allow scoring based on payload - {!payload\_score f=payload\_field func=sum operator=or}A B C https://lucene.apache.org/solr/guide/7\_1/other-parsers.html#payload-score-parser Is there any si… --- ## [Heap Size setting in k8s](https://discuss.elastic.co/t/heap-size-setting-in-k8s/281522)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 3\ **Last updated:** [August 16, 2021, 12:32pm UTC](https://discuss.elastic.co/t/heap-size-setting-in-k8s/281522 "2021-08-16T12:32:42Z")
Hi All, I am trying to setup up elasticsearch(version 6.8.14) on k8s using eck operator. As per the documentation HEAP SIZE should be 50% of RAM. so If set ( requests, limits as 16GB) then ES\_JAVA\_OPTS should be 8 i.… --- ## [Synchronization of Index among different ES-Clusters](https://discuss.elastic.co/t/synchronization-of-index-among-different-es-clusters/265774)
**Author:** [@jimchk](https://discuss.elastic.co/u/jimchk)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 3:11pm UTC](https://discuss.elastic.co/t/synchronization-of-index-among-different-es-clusters/265774 "2021-03-02T15:11:14Z")
Hello, I would like to know about the best practice for synchronizing indexed data of an elastic search index to another index located in a different cluster. Currently, I have an index for reporting, which is my prima… [Previous page](https://discuss.elastic.co/top.md?page=1040&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1042&per_page=50&period=all)